Continuous deployment: pinned data submodules, release bundle, VPS deploy - #21

Merged

JohnRDOrazio merged 25 commits into

mainfrom

deployment-design

Aug 2, 2026

Commits on Aug 1, 2026

Add continuous deployment design spec

JohnRDOrazio
and
claude
committed
55b5caf
Add continuous deployment implementation plan

JohnRDOrazio
and
claude
committed
73dee5c
Add deployment manifest reader and /healthz endpoint
JohnRDOrazio
committed
667edac
Pin crmedr, clbdr and martyrology-texts as submodules
JohnRDOrazio
committed
5e35cd9
Add release bundle builder
JohnRDOrazio
committed
91dca75
Fix plan Task 3: assemble() must refuse a manifest-less tree

JohnRDOrazio
and
claude
committed
e9daeeb
Fix Task 3 round 1: assemble() fails loudly with no manifest
JohnRDOrazio
committed
e3056e3
Add on-VPS deploy script with smoke check and rollback
JohnRDOrazio
committed
47ba141
Fix deploy.sh: path-traversal SIGPIPE bypass, live-release destruction, link screening, offline venv, and rollback gaps

JohnRDOrazio
and
claude
committed
6794ef6
Add token expiry watch to plan Task 6

JohnRDOrazio
and
claude
committed
a03bd7d
Fix deploy.sh: name-only screen bypassed by SIGPIPE fix's field-splitting, plus rollback robustness

JohnRDOrazio
and
claude
committed
4fb58e3
Fix deploy.sh: signal during flip window read as success, plus hardlink/dotdot screening

JohnRDOrazio
and
claude
committed
1c427cb
Fix deploy.sh: signal during smoke phase completed the deploy; screen links pre-tar-sanitization

JohnRDOrazio
and
claude
committed
9b88190
Add VPS provisioning script for martyrology-api deploys
JohnRDOrazio
committed
c71f387

Commits on Aug 2, 2026

Fix round 1: harden VPS provisioning script
JohnRDOrazio
committed
a81d79c
Normalise world permissions on the release tree at deploy time
JohnRDOrazio
committed
0cba733
Track uv.lock so release builds resolve deterministically
JohnRDOrazio
committed
cf89d00
Add release deploy workflow, shellcheck CI job and token expiry watch
JohnRDOrazio
committed
9f083eb
Fix data-tree layout, deploy permissions, and token-watch issues from review
JohnRDOrazio
committed
a120f73
Mark the CD plan executed and superseded by the committed files

JohnRDOrazio
and
claude
committed
16f6179
Deploy: group-scoped release tree, APP_DIR passthrough, tag/version guard

JohnRDOrazio
and
claude
committed
70920a6
Record parked deployment follow-ups from the final review

JohnRDOrazio
and
claude
committed
4922b16
Apply the parked deployment follow-ups

JohnRDOrazio
and
claude
committed
585c821
Fix duplicated bundle members and tighten deploy checks

JohnRDOrazio
and
claude
committed
50d5e87
Bound the signal harness readiness wait

JohnRDOrazio
and
claude
committed
9935b8c