caleb-brown/temper
1
0
Fork 0
Code Issues 36 Pull requests Projects Releases Packages Wiki Activity Actions

Install a repository and prove webhook delivery #12

New issue
Open
opened 2026-07-14 22:32:18 -04:00 by caleb-brown · 0 comments
caleb-brown commented 2026-07-14 22:32:18 -04:00
Owner
Copy link

What to build

A Temper Operator can create a Repository Installation, configure its webhook manually or with separately authorized assistance, and prove that authenticated Forgejo events reach the correct installation.

Acceptance criteria

  • An Operator can select an accessible repository and create one unique Repository Installation.
  • Temper generates and encrypts a repository-specific webhook secret and presents complete manual webhook instructions.
  • API-assisted webhook creation is offered only when the PAT has the additional required permission.
  • A signed test or live delivery changes the Repository Installation from awaiting webhook to ready and records only safe delivery metadata.
  • Invalid signatures, oversized payloads, unknown installations, and replayed delivery identifiers are rejected or deduplicated predictably.
  • Connection, repository, webhook, and readiness failures are distinct and show a corrective Operator action.
  • An end-to-end test proves manual onboarding and authenticated delivery without requiring repository-administration permission.

Blocked by

  • #11 — Connect and verify a Forgejo service identity
## What to build A Temper Operator can create a Repository Installation, configure its webhook manually or with separately authorized assistance, and prove that authenticated Forgejo events reach the correct installation. ## Acceptance criteria - [ ] An Operator can select an accessible repository and create one unique Repository Installation. - [ ] Temper generates and encrypts a repository-specific webhook secret and presents complete manual webhook instructions. - [ ] API-assisted webhook creation is offered only when the PAT has the additional required permission. - [ ] A signed test or live delivery changes the Repository Installation from awaiting webhook to ready and records only safe delivery metadata. - [ ] Invalid signatures, oversized payloads, unknown installations, and replayed delivery identifiers are rejected or deduplicated predictably. - [ ] Connection, repository, webhook, and readiness failures are distinct and show a corrective Operator action. - [ ] An end-to-end test proves manual onboarding and authenticated delivery without requiring repository-administration permission. ## Blocked by - [#11](https://git.caleb-brown.dev/caleb-brown/temper/issues/11) — Connect and verify a Forgejo service identity
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
dev
t3code/hygiene-review
t3code/configurable-llm-timeout
fix/openai-non-streaming-completions
t3code/test-incorrect-changes
No results found.
Labels
Clear labels   
ready-for-agent
Fully specified and ready for an implementation agent

  
wayfinder:grilling
Human-in-the-loop product or domain decision

  
wayfinder:map
Canonical Wayfinder map

  
wayfinder:prototype
Human-in-the-loop concrete prototype

  
wayfinder:research
Agent-driven primary-source research

  
wayfinder:task
Task that unblocks a Wayfinder decision

No labels
ready-for-agent
wayfinder:grilling
wayfinder:map
wayfinder:prototype
wayfinder:research
wayfinder:task
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Blocks
#14 Turn a PR event into durable review work
caleb-brown/temper
#19 Add manual, skip, and fork-review controls
caleb-brown/temper
#24 Pause, disconnect, uninstall, and purge repositories
caleb-brown/temper
Depends on
#11 Connect and verify a Forgejo service identity
caleb-brown/temper
Reference
caleb-brown/temper#12
No description provided.