|
All checks were successful
CI / Lint, typecheck, test (pull_request) Successful in 6m45s
CI / Build container images (pull_request) Successful in 1m14s
CI / Auth e2e pack (pull_request) Successful in 8m37s
CI / Import/export fidelity gate (pull_request) Successful in 57s
CD / Build and push images (push) Successful in 21s
CD / Deploy to Test (push) Successful in 12s
CD / Smoke tests against Test (push) Successful in 1m16s
CD / Promote to Int (push) Successful in 28s
CI / Lint, typecheck, test (push) Successful in 6m19s
CI / Build container images (push) Has been skipped
CI / Auth e2e pack (push) Successful in 8m12s
CI / Import/export fidelity gate (push) Successful in 58s
The ADR 0024 §4 decision, taken explicitly and both ways: customers OPERATE prebuilt digest-pinned images (no customer-side build), and ADDITIONALLY the workspace build is verified to work with networking disabled - so site-local patching stays possible without internet. Evidence (docs/vs-nfd/96-offline-build-protokoll.md): pnpm install --offline --frozen-lockfile plus pnpm build under docker run --network none (node:22.15.1-alpine + pnpm 11.9.0, the pinned toolchain), reproduced twice from clean checkouts with identical results. The offline kit is the pnpm store (~870 MB) plus the build user's ~/.cache (~460 MB - the prisma engines live there; without the cache the prisma postinstall fails offline). The one network dependency found and bounded: the drawio plugin's installable ZIP fetches its pinned vendor tarball on first build. Deploy images contain no plugin ZIPs, so the delivery-relevant build is fully offline (CI=1 skips the fetch, as in CI); an offline ZIP build pre-seeds the tarball into packages/plugins/drawio/vendor/. Also catches up the operations manual's scheduler-job table to 10 (read-trail-maintenance was added in #224 without the row here). Refs #219. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AUtYMxwTCMHG9mVHnwbFg8 |
||
|---|---|---|
| .. | ||
| 0001-typescript-monorepo.md | ||
| 0002-postgresql.md | ||
| 0003-yjs-crdt-collaboration.md | ||
| 0004-tiptap-editor.md | ||
| 0005-react-vite-frontend.md | ||
| 0006-nestjs-prisma-backend.md | ||
| 0007-auth-sessions-oidc-ready.md | ||
| 0008-plugin-sandbox.md | ||
| 0009-import-export-converters.md | ||
| 0010-postgres-fulltext-search.md | ||
| 0011-file-storage-quotas.md | ||
| 0012-i18n.md | ||
| 0013-versioning-and-trash.md | ||
| 0014-gitea-actions-cicd.md | ||
| 0015-backup-strategy.md | ||
| 0016-self-hosted-fonts.md | ||
| 0017-accessibility-by-default.md | ||
| 0018-color-theming.md | ||
| 0019-no-security-base-functions.md | ||
| 0020-token-crypto-key-separation.md | ||
| 0021-external-authentication.md | ||
| 0022-page-classification.md | ||
| 0023-read-access-audit-trail.md | ||
| 0024-reproducible-offline-deployment.md | ||
| 0025-plugin-trust-model.md | ||
| 0026-backup-target-restriction.md | ||