Repository navigation
fix: streamline native package publication and document installation - #17
Merged
Merged
Conversation
rianjs
changed the title
monit-reviewer
requested changes
Oct 4, 2026
monit-reviewer
left a comment
monit-reviewer
left a comment
There was a problem hiding this comment.
Automated PR Review
Reviewed commit: 500e949ad38c
Profile: codex-monit-reviewer - Posting as: monit-reviewer
Summary
| Reviewer | Findings |
|---|---|
| packaging:linux-repo-integrity | 0 |
| automation:ci-deploy | 0 |
| documentation:docs | 1 |
| security:code-auditor | 0 |
documentation:docs (1 finding)
Major - README.md:65
The new installation example selects
cr, but neither architecture's checked-in pacman database contains that package; both list onlygoogle-readonlyandgoogle-readwrite, and nocrarchive is present. Since Pages publishes this repository tree, the documented command will fail withtarget not found: cruntil a separate publication completes. Use an already published package in the example and classifycras upcoming in the availability paragraph, or publish it before documenting it as currently installable.
Reviewer Coverage
packaging:linux-repo-integrity— complete (constrained); skipped: none; constraints: Review was limited to repository integrity and consumer install behavior in the three assigned files.automation:ci-deploy— complete (constrained); inspected 2 assigned files (3 inspected across reviewers):.github/workflows/ci.yml,.github/workflows/receive-package.yml; skipped: none; constraints: Review limited to the two assigned workflow changes and supporting repository context; package publication was not executed.documentation:docs— complete (constrained); inspected 1 assigned file (3 inspected across reviewers):README.md; skipped: none; constraints: Live pacman database verification was unavailable: the web tool could not access the archive and shell DNS resolution failed. Review limited to README.md, with repository files inspected as supporting context.security:code-auditor— complete (constrained); skipped: none; constraints: Review was limited to the three assigned changed files; package payload internals were outside the requested scope.
Inspected files (3)
.github/workflows/ci.yml.github/workflows/receive-package.ymlREADME.md
0 PR discussion threads considered. 0 summarized; 0 resolved.
Completed in 12m 34s | gpt-6-luna, gpt-6.1-sol | cr dev
| Field | Value |
|---|---|
| Model | gpt-6-luna, gpt-6.1-sol |
| Reviewers | packaging:linux-repo-integrity, automation:ci-deploy, documentation:docs, security:code-auditor |
| Engine | codex_cli · gpt-6-luna, gpt-6.1-sol |
| Reviewed by | cr · monit-reviewer |
| Duration | 12m 34s wall · 6m 58s compute |
| Cost | unavailable |
| Tokens | 525.4k in / 13.1k out |
Per-workstream usage
packaging:linux-repo-integrity— gpt-6-luna- In: 124.2k
- Out: 5.4k
- Cache read: 103.2k
- Cache create: unavailable
- Cost: unavailable
- Duration: 2m 33s
automation:ci-deploy— gpt-6.1-sol- In: 122.5k
- Out: 458
- Cache read: 105.2k
- Cache create: unavailable
- Cost: unavailable
- Duration: 30s
documentation:docs— gpt-6.1-sol- In: 141.4k
- Out: 863
- Cache read: 125.7k
- Cache create: unavailable
- Cost: unavailable
- Duration: 41s
security:code-auditor— gpt-6-luna- In: 97.7k
- Out: 5.9k
- Cache read: 75.8k
- Cache create: unavailable
- Cost: unavailable
- Duration: 3m 01s
orchestrator-rollup— gpt-6.1-sol- In: 39.6k
- Out: 540
- Cache read: 30.8k
- Cache create: unavailable
- Cost: unavailable
- Duration: 11s
monit-reviewer
approved these changes
Oct 4, 2026
monit-reviewer
left a comment
monit-reviewer
left a comment
There was a problem hiding this comment.
Automated PR Review
Reviewed commit: 500e949ad38c
Profile: codex-monit-reviewer - Posting as: monit-reviewer
Summary
| Reviewer | Findings |
|---|---|
| packaging:linux-repo-integrity | 0 |
| automation:ci-deploy | 0 |
| documentation:docs | 0 |
| security:code-auditor | 0 |
Reviewer Coverage
packaging:linux-repo-integrity— complete (constrained); skipped: none; constraints: The settled review discussion reports that both published architecture databases contain cr and that signatures and a clean installation were verified; the local checkout may not reflect that published state.automation:ci-deploy— complete (constrained); inspected 2 assigned files (3 inspected across reviewers):.github/workflows/ci.yml,.github/workflows/receive-package.yml; skipped: none; constraints: Review limited to the assigned workflow changes and supporting repository context; package publication was not executed.documentation:docs— complete (constrained); inspected 1 assigned file (3 inspected across reviewers):README.md; skipped: none; constraints: Published cr availability and installation validation rely on the supplied settled discussion; the PR snapshot predates that publication. Review limited to README.md and supporting repository context.security:code-auditor— complete (constrained); skipped: none; constraints: Review was limited to the three assigned changed files.
Inspected files (3)
.github/workflows/ci.yml.github/workflows/receive-package.ymlREADME.md
0 PR discussion threads considered. 0 summarized; 0 resolved.
Completed in 11m 43s | gpt-6-luna, gpt-6.1-sol | cr dev
| Field | Value |
|---|---|
| Model | gpt-6-luna, gpt-6.1-sol |
| Reviewers | packaging:linux-repo-integrity, automation:ci-deploy, documentation:docs, security:code-auditor |
| Engine | codex_cli · gpt-6-luna, gpt-6.1-sol |
| Reviewed by | cr · monit-reviewer |
| Duration | 11m 43s wall · 1m 23s compute |
| Cost | unavailable |
| Tokens | 831.7k in / 15.3k out |
Per-workstream usage
packaging:linux-repo-integrity— gpt-6-luna- In: 195.4k
- Out: 6.2k
- Cache read: 166.1k
- Cache create: unavailable
- Cost: unavailable
- Duration: 25s
automation:ci-deploy— gpt-6.1-sol- In: 190.0k
- Out: 680
- Cache read: 165.6k
- Cache create: unavailable
- Cost: unavailable
- Duration: 14s
documentation:docs— gpt-6.1-sol- In: 205.8k
- Out: 1.1k
- Cache read: 182.8k
- Cache create: unavailable
- Cost: unavailable
- Duration: 12s
security:code-auditor— gpt-6-luna- In: 178.6k
- Out: 6.8k
- Cache read: 142.8k
- Cache create: unavailable
- Cost: unavailable
- Duration: 22s
orchestrator-rollup— gpt-6.1-sol- In: 61.9k
- Out: 610
- Cache read: 51.5k
- Cache create: unavailable
- Cost: unavailable
- Duration: 8s
rianjs
marked this pull request as ready for review
October 4, 2026 22:48
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Use a shallow checkout in the package receiver: updating and signing repository files needs the current tree, while full history downloads gigabytes of old packages on every release.
Document the native pacman channel for the maintained Go CLIs and Retune, including signing-key fingerprint verification and one-time repository enrollment. Identify package names separately from executable names and distinguish currently published packages from upcoming releases.
Validation: the pinned key and existing repository database signature were verified during the Omarchy installation; repository enrollment succeeded.
Actionlint passes; the receiver uses only the current tree plus a normal commit/push, with no history-based operations.
Queue every package dispatch (queue: max), then fetch the latest main branch after acquiring the serialized update slot. The default one-pending-run policy would cancel older package releases during this rollout; dispatch event SHAs can also be stale by the time a queued update starts. Pages deployments retain their existing coalescing behavior because every deployment includes the complete repository.