ace-git-forgejo 0.6.2 → 0.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 670c1a5fa83a0de21364026001ad9b113742be293bf5930b9557ee56df019023
-  data.tar.gz: 975f91389a01fa855025479f091a397ba074f43eb535c22887014d410ae0a481
+  metadata.gz: ec7d89b79d4c95330a4610f04ce163e8dcd402f3ff72bb468b27dac082d086ea
+  data.tar.gz: b9a7a5d29fa5fbd4b559ef532018d18e07d9a3b8de20dbd5860938408158d6e9
 SHA512:
-  metadata.gz: ea952944afab9658f89959bf5da1f059a4808073c46e77bd6dfcde73017b35021538b353f54cc4c646e6c55937700ca1bc1c47af1c659c6e1f4ff801a7f58693
-  data.tar.gz: f1228942a54b588673fa7ca90150fac10ad36af6334ce9b3d16a2fb2780d7cac4f836e414ccd87d6a1c7353506dec3317f6fc23828d5c3d103ed6f73b96ddc58
+  metadata.gz: f7a145c24c9720d4748f32cc921f42983f2dc20c56dc0c007de0536972b4b318bba6d35c52b2b360ece6846b24cf4cd6d5b819493a7471d14e13bd59e08dc060
+  data.tar.gz: e308d391be1d1057de4176e58a698cfef161ed9474e46bb29dd1ab0a5ef83efb13af1f51b8d4bccb53d8322c0ffce89db71438f777762f49a6cadb07bab9880a

data/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.7.0] - 2026-10-16
+
+### Added
+
+- Repository-bound API surface for scoped service identities: `HttpClient`/`PullRequestApi` accept an explicit `token:` (a host-installed merge receiver credential) with the `fj` keys-file lookup unchanged as the fallback, and `PullRequestApi#create_comment` attaches one PR-thread comment (the issue-served Forgejo endpoint) with the same `MutationOutcome` refusal classification as the other lifecycle mutations.
+
 ## [0.6.2] - 2026-10-08
 
 ### Fixed

data/lib/ace/git/forgejo/http_client.rb

@@ -20,10 +20,15 @@ module Ace
       # limited to the safe GET verb — a mutation is sent at most once per
       # call, so a lost response stays an unknown outcome.
       class HttpClient
-        def initialize(server:, timeout:, runner: nil)
+        # `token:` injects an explicit credential for deployments whose scoped
+        # service identity is host-installed (e.g. a merge receiver reading its
+        # token from root-owned configuration) instead of the `fj` CLI keys
+        # file; when absent the fj credential governs as before.
+        def initialize(server:, timeout:, runner: nil, token: nil)
           @target = RepositoryBinding::Target.resolve(server.url)
           @timeout = timeout
           @runner = runner
+          @token = token.is_a?(String) && !token.empty? ? token : nil
         end
 
         def paginate(suffix)
@@ -145,6 +150,8 @@ module Ace
         end
 
         def access_token!
+          return @token if @token
+
           path = RepositoryBinding.default_keys_path
           data = path && JSON.parse(File.read(path))
           # fj stores credentials under the bare host (or host:port)

data/lib/ace/git/forgejo/pull_request_api.rb

@@ -35,8 +35,8 @@ module Ace
         # success), and the parsed payload when the server returned one.
         MutationOutcome = Data.define(:status, :message, :payload)
 
-        def initialize(server:, timeout:, runner: nil)
-          @http = HttpClient.new(server: server, timeout: timeout, runner: runner)
+        def initialize(server:, timeout:, runner: nil, token: nil)
+          @http = HttpClient.new(server: server, timeout: timeout, runner: runner, token: token)
         end
 
         # Probe and validate the selected server's API version once per
@@ -161,6 +161,19 @@ module Ace
           MutationOutcome.new(status: status, message: message, payload: payload)
         end
 
+        # Attach one comment to the pull request thread (Forgejo serves PR
+        # comments on the issue endpoints) — e.g. a reviewer-produced evidence
+        # body handed over by a caller before the merge invocation.
+        #
+        # @return [MutationOutcome] 201 with the created comment payload, or a
+        #   refusal outcome (404 absent pull request, 422 rejected body)
+        def create_comment(number, body)
+          status, payload, message = @http.exchange(:post, "issues/#{number}/comments",
+            body: {"body" => body.to_s})
+          classify_send!(status, "create pull request #{number} comment")
+          MutationOutcome.new(status: status, message: message, payload: payload)
+        end
+
         private
 
         # Authentication, absence, and transport failures classify directly

data/lib/ace/git/forgejo/version.rb

@@ -3,7 +3,7 @@
 module Ace
   module Git
     module Forgejo
-      VERSION = "0.6.2"
+      VERSION = "0.7.0"
     end
   end
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: ace-git-forgejo
 version: !ruby/object:Gem::Version
-  version: 0.6.2
+  version: 0.7.0
 platform: ruby
 authors:
 - Michal Czyz
 bindir: exe
 cert_chain: []
-date: 2026-10-08 00:00:00.000000000 Z
+date: 2026-10-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ace-git