From d9926402a79c4d2277f30d09b8c3c12176bf4b57 Mon Sep 17 00:00:00 2001
From: Ian Lintner <lintner.ian@gmail.com>
Date: Wed, 22 Apr 2026 00:54:32 -0500
Subject: [PATCH 1/2] chore(caretaker): enable fleet-registry heartbeat with
 OAuth2 client_credentials
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the pinned caretaker version to 0.12.0 and turns on the fleet-registry
heartbeat so this repo shows up on the central caretaker dashboard. The
heartbeat uses the OAuth2 client_credentials grant — OAUTH2_CLIENT_ID and
OAUTH2_CLIENT_SECRET secrets plus the OAUTH2_TOKEN_URL variable were
provisioned against roauth2.cat-herding.net ahead of this change. The
in-process JWT cache in caretaker keeps token fetches to one per process.

Triage is also enabled here for the first time (default-on since 0.11.0)
but pinned to dry_run for the first few runs so its plan is logged
without mutating any PRs or issues.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---
 .github/maintainer/.version   |  2 +-
 .github/maintainer/config.yml | 19 +++++++++++++++++++
 2 files changed, 20 insertions(+), 1 deletion(-)

diff --git a/.github/maintainer/.version b/.github/maintainer/.version
index 78bc1ab..ac454c6 100644
--- a/.github/maintainer/.version
+++ b/.github/maintainer/.version
@@ -1 +1 @@
-0.10.0
+0.12.0
diff --git a/.github/maintainer/config.yml b/.github/maintainer/config.yml
index e6beb28..1533188 100644
--- a/.github/maintainer/config.yml
+++ b/.github/maintainer/config.yml
@@ -145,3 +145,22 @@ llm:
 #     allowed_task_types: [LINT_FAILURE, REVIEW_COMMENT]
 #     route_same_repo_only: true
 #     request_timeout_seconds: 120.0
+
+# ── Fleet registry heartbeat ──────────────────────────────────────────────
+# Caretaker posts a run-summary heartbeat to the central dashboard after
+# each run. OAuth2 client_credentials (via OAUTH2_* repo secrets/vars)
+# attaches a bearer JWT; the module caches the token in-process for reuse
+# across runs.
+fleet_registry:
+  enabled: true
+  endpoint: https://caretaker.cat-herding.net/api/fleet/heartbeat
+  oauth2:
+    enabled: true
+
+# ── Triage ────────────────────────────────────────────────────────────────
+# Triage lands on by default from caretaker 0.11.0. Start in dry_run so the
+# first live runs emit the plan without mutating state; flip to false once
+# the plan looks right.
+triage:
+  enabled: true
+  dry_run: true

From 963541358db868e8c430ad0bd3b97e71c259c299 Mon Sep 17 00:00:00 2001
From: Ian Lintner <lintner.ian@gmail.com>
Date: Wed, 22 Apr 2026 01:15:22 -0500
Subject: [PATCH 2/2] fix: add trailing newline to maintainer.yml
 (end-of-file-fixer)

Pre-commit's end-of-file-fixer hook was flagging the existing workflow
file on this PR's CI run. Long-standing issue pre-dating this change.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---
 .github/workflows/maintainer.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/maintainer.yml b/.github/workflows/maintainer.yml
index 900da98..940f2ba 100644
--- a/.github/workflows/maintainer.yml
+++ b/.github/workflows/maintainer.yml
@@ -180,4 +180,4 @@ jobs:
             --config .github/maintainer/config.yml \
             --mode self-heal \
             --event-type workflow_run \
-            --event-payload "$CARETAKER_EVENT_PAYLOAD"
\ No newline at end of file
+            --event-payload "$CARETAKER_EVENT_PAYLOAD"