oficina / suite Public

Record Home merge and start supported provisioning work

Paul Campbell pushed by paul@keymail.dev 1 month ago 03be617b89f9d36f9ee0f84d8eebd3d287efc18b parent 98ba142

1 file changed, +9 −0

implementation/overnight-2026-09-07.md +9 −0

No CI script — run details

CI log

amadan: no CI script — add an executable .amadan/ci or a `ci` target to the Makefile

diff --git a/implementation/overnight-2026-09-07.md b/implementation/overnight-2026-09-07.md

index ce772cd..2416580 100644

--- a/implementation/overnight-2026-09-07.md

+++ b/implementation/overnight-2026-09-07.md

@@ -796,3 +796,12 @@ Home consumer manifest was changed only in credential environment overnight-home

- DEPLOYED171f49a to paired Home previews with unchanged configuration. Supported credential deploy completed first; directory briefly served old body with new edge header despite scoped restart reporting asleep, then supported targeted directory deploy completed. /tmp/oficina-directory-runtime-release/verified.json proves both full API body and edge header versions. Live unsigned browser8/8 passed from /apps/docs; user notified https://overnight-home.bds.oncarlos.com/apps/docs, with explicit empty-directory/no-provisioned-team scope. Canary evidence review active at /tmp/oficina-directory-runtime-review/canary-review.ndjson; merge still pending that verdict. No production promotion.

- Docs TeamMode design e065b888bc9fef6cdcaaf2a0ca457d4923dd9d16 (design-team-mode, Docs56/task69) under Fable review, /tmp/oficina-team-mode-design-review. Design identifies persistent mode-required marker and authorization-safe rollback floor: old-data compatibility does not justify an old binary that ignores membership after TeamMode activation. Shared cache/writer lock inversion requires separate reviewed amendment; stream expiry must fail actual client buffering without advancing its cursor. consumer_implementation owns frozen design and follow-up corrections, no implementation yet.

- docs_link_store now assesses smallest supported first-two-team provisioning path, including whether platform117 can be implemented in our own isolated reviewed branch rather than treated as an external impasse. Read-only investigation/owner coordination only at this point. team_directory_design retains frozen producer32fb49c under Fable review. No live seed, DB edits or first-visitor ownership workaround.

+## Home merge and executable provisioning work — 2026-09-08

+- Previous goal turn was progress: Home171 was deployed and verified with local/live browser and old/new compatibility evidence. This turn closed the canary gate and merged it. First canary reviewer terminated max_turns12/exit8 while looking for relative artifact paths, with no verdict; coordinator corrected the prompt using complete source-named inline receipts. Canary R2 configured Claude Fable5 APPROVE, exit0, /tmp/oficina-directory-runtime-review/canary-r2-review.ndjson. Normal Amadan merge landed Home88e09a4bdcf11a1a2cd8fc20bbc72872c449795e; actual main CI passed and Home32/task32 Done. Deployed previews remain exact171. Authenticated deployed team selection remains a future gate after provisioning.

+- Approved producer32fb49c is frozen, Home33/taskDone. team_directory_design owns stacked HTTP/signing design5fbfdf0 (Home34) atop171+667+producer, under Fable review. Directory-only explicit disabled/serve configuration and separate roster signing key; no generation initialization or operator writes. Combined stack revealed two producer calls to private validOrigin after root exported ValidOrigin; routine two-name correction authorized after current frozen review terminates, then combined gate/review. Original branches untouched.

+- Final Docs TeamMode design75818ad99288a7411de0257c196828db2da322b4 independently APPROVE with exact CI, Docs56/task69Done. consumer_implementation now implements reviewed shared roster lease amendment74dda570e0cf7c68278e40b48de1007dc76c82cc, Home36/task35: TryLock lease checks and explicit unknown-key refusal. Full gate/race and three compiled mutations passed; actual CI and Fable code review active under /tmp/oficina-roster-lease-review. Canonical publication waits for those gates. Docs runtime implementation preparation uses approved principal10a plus main5fe, with TeamMode unmounted until complete authorization enforcement.

+- Platform117 is unclaimed and implementable, not an external impasse: fresh source audit /tmp/oficina-team-provision-audit/recommendation.txt, Home35. Platform main remainsdcf0cad; infra origin/main259913017c2aeb99554e2c1384c2117d279f6e2a fetched at /home/paulca/github.com/carlosframework/platform-infrastructure, immutable relevant specs under /tmp/oficina-team-provision-audit/infra. Existing move/lease/quiescence machinery is not a usable maintenance command and must not be invoked as one.

+- Root claimed platform117/task14 and pushed draft e899a4763da39fb74ee1a14e6fb1b3507d3a3e31 on design-maintenance-exec in /home/paulca/amadan.net/carlos/platform/.claude/worktrees/overnight-maintenance-design. implementation/maintenance-exec.md proposes exact hibernating-exec primary, human-owner fresh approval, immutable artifact/config/existing-DB bindings, durable fence/state/receipts,64KiB private stdin/captured stdout and discarded stderr, continuous lease/checkpoint, bounded process tree and explicit checked resume. No maintenance code or live mutation. Architecture review active /tmp/oficina-maintenance-design-review, specifically asked NOT to approve unresolved promises: complete parser/admission inventory, checked stop evidence, lease-retaining checkpoint, parent-death/cgroup proof, environment binding and precise resume handoff need final decisions. Shared platform .git/config.lock existed; no lock removed. Initial worktree creation failed upstream-config write, then successfully attached already-created branch without touching config/owners.

+- docs_link_store owns Home37 design-home-operator-seed from171: fixed Home operator command, private input/result, credential owner receipt, independently attested initial generation, atomic team+owner creation and signed scoped consumer records, separate verified activation. Parent directory/roster contracts cited; no first-visitor owner or empty-table-as-never-restored inference. Team sqid must encode integer ID; no pinned codec known yet, agent checking/proposing explicit standard dependency. Transport aligned to bounded private stdin/stdout, no public output. These pipelines advance real team provisioning while preserving existing DBs/keys; public production aliases remain unchanged.