vole

Clone

Read only, no credentials:

https://rodent.software/vole.git

Write over SSH with a registered key:

git clone ssh://git@rodent.software:2222/vole.git

A free and open-source forge that lives in your Git repo.

Add browser auth, contributor access, and gated CI

6c84d387e5f608360e30484a1a5b1cff41076850 · Keenan Nemetz · 16d ago · parent c36d5073

Add browser auth, contributor access, and gated CI

Browser sign-in now uses passkeys. Enrollment links are one-time, sessions are hashed in users.db, and issue/comment/approval writes use the session account. HTTPS public_url is required for WebAuthn.

Add the contributor role between read and maintain. Contributors can discuss and open change requests, and may push only refs/heads/contrib/<account-id>/. Contributor CI is held per commit until a maintainer allows the exact tip from the repository page.

Rename the write role to maintain. write remains accepted as the historical spelling, and access.Write remains as a Go alias so existing callers and ACL rows keep working.

Update the web, CLI, queue schema, and guides for the new flows, and cover the role, namespace, auth, and CI-gating paths in tests.

docs/issues.md +8

@@ -61,6 +61,14 @@ git push origin vole
	61	61	Vole checks the file when you push. If someone else pushed first, the CLI puts
	62	62	your change on top of theirs and tries again.
	63	63
		64	## From the browser
		65
		66	When browser login is enabled (see [Users and access](users-and-access.md#browser-sign-in)),
		67	a signed-in contributor or maintainer can open an issue or comment from the
		68	repository's issue page. The author is the account whose passkey opened the
		69	session; the form cannot choose a different name. The change is written with the
		70	same metadata writer the CLI uses, so it is the same file on the same branch.
		71
	64	72	## Using the CLI
	65	73
	66	74	```sh