Skip to content

chore(caretaker): enable fleet-registry heartbeat with OAuth2#46

Merged
ianlintner merged 2 commits intomainfrom
chore/enable-fleet-oauth2
Apr 22, 2026
Merged

chore(caretaker): enable fleet-registry heartbeat with OAuth2#46
ianlintner merged 2 commits intomainfrom
chore/enable-fleet-oauth2

Conversation

@ianlintner
Copy link
Copy Markdown
Owner

Summary

  • Bumps the pinned caretaker version to 0.12.0 (which ships the new OAuth2 client_credentials client with in-process JWT caching).
  • Turns on fleet_registry with endpoint: https://caretaker.cat-herding.net/api/fleet/heartbeat so this repo's run summaries feed the central dashboard.
  • Turns on fleet_registry.oauth2 — the emitter attaches Authorization: Bearer <jwt> using the OAUTH2_CLIENT_ID / OAUTH2_CLIENT_SECRET secrets plus the OAUTH2_TOKEN_URL variable (all provisioned against roauth2.cat-herding.net ahead of this change).
  • Adds an explicit triage block in dry_run: true mode. Triage defaults to on as of caretaker 0.11.0; dry_run keeps the first few runs read-only so the plan can be reviewed before any state mutation.

Test plan

  • Merge and let the next scheduled caretaker run fire.
  • Confirm the run log shows a fleet-registry POST with a Bearer … header and a 2xx response.
  • Confirm the triage block logs a plan but takes no PR/issue action while dry_run is set.
  • Flip triage.dry_run to false in a follow-up once the plan looks correct.

🤖 Generated with Claude Code

…credentials

Bumps the pinned caretaker version to 0.12.0 and turns on the fleet-registry
heartbeat so this repo shows up on the central caretaker dashboard. The
heartbeat uses the OAuth2 client_credentials grant — OAUTH2_CLIENT_ID and
OAUTH2_CLIENT_SECRET secrets plus the OAUTH2_TOKEN_URL variable were
provisioned against roauth2.cat-herding.net ahead of this change. The
in-process JWT cache in caretaker keeps token fetches to one per process.

Triage is also enabled here for the first time (default-on since 0.11.0)
but pinned to dry_run for the first few runs so its plan is logged
without mutating any PRs or issues.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@github-actions github-actions Bot added the claude-code claude-code-action trigger label Apr 22, 2026
@github-actions
Copy link
Copy Markdown

@claude caretaker is requesting a full code review for this PR.

Repo: ianlintner/python_dsa · PR: #46
Routing reason: score=8 [sensitive_files(+8)] → inline

Please review this pull request for:

  • Correctness and logic errors
  • Security vulnerabilities or unsafe patterns
  • API contract and backward-compatibility concerns
  • Test coverage gaps
  • Any blocking issues before merge

Post a review comment summary and inline comments where applicable.

Delegated by caretaker's PRReviewerAgent via ClaudeCodeExecutor hand-off.

Pre-commit's end-of-file-fixer hook was flagging the existing workflow
file on this PR's CI run. Long-standing issue pre-dating this change.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@ianlintner ianlintner merged commit 2485a8f into main Apr 22, 2026
11 checks passed
@ianlintner ianlintner deleted the chore/enable-fleet-oauth2 branch April 22, 2026 06:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

claude-code claude-code-action trigger

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant