Repository navigation
Create repositories through an authenticated API - #107
Merged
Merged
Conversation
Resolve new names under a default access policy, publish their format and default branch through the existing WAL, and recover stored formats without per-repository configuration. Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
carsonfarmer
force-pushed
the
cf/git-repository-create
branch
from
September 27, 2026 18:44
e3d471f to
696661f
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
New repository names currently need an operator configuration edit and restart. Add authenticated
POST /<name>/createso callers choose SHA-1/SHA-256 and a default branch, then use ordinary Git. A default access policy resolves new names to isolated WAL identities; exact policies remain overrides. Both bare and.gitURLs identify the same repository.Creation, stored format, refs and recovery use the existing repository WAL. Reads and wildcard pushes never create a missing Git root. Existing explicitly configured repositories retain first-push setup. The separate TypeScript viewer adds the UI in #104; no Git browser logic enters this service.
Validation: full
make check, Terraform format/validation, independent correctness and simplification review, and the complete local Spin/MinIO Git provider suite. Added native-client SHA-1/SHA-256 API-create/push/clone/fsck checks, denied and bounded requests, alias/default-branch checks, and concurrent creators (one 201, one 409, winning format preserved).Scheduled host maintenance still enumerates named policies; API-created names expose the same endpoints but dynamic discovery is follow-on work. No core WAL or dependency changes.
Closes #106.