Run package retention with Bash and shared jq policy

sean commented

2026-09-10 23:02:03 +00:00

Owner

Replace the first-party Python registry-pruning process with Bash transport and one shared jq retention policy, mounted through the existing pinned tool image. Preserve retired package scope, keep-two CI tags, semantic/moving tags, two-hour index protection, 24-hour freshness, dry-run mode and four-deletes-per-second pacing. Authorization headers are private files and never command arguments.

Twelve actual transport scenarios, eight policy mutations, a transport mutation and eight rendered-manifest mutations pass with Python and rg denied. Tests execute the production policy, verify complete deletion URL sets, token cleanup and private header delivery, and perform no live registry calls. Syntax, shellcheck and diff checks pass.

Replace the first-party Python registry-pruning process with Bash transport and one shared jq retention policy, mounted through the existing pinned tool image. Preserve retired package scope, keep-two CI tags, semantic/moving tags, two-hour index protection, 24-hour freshness, dry-run mode and four-deletes-per-second pacing. Authorization headers are private files and never command arguments. Twelve actual transport scenarios, eight policy mutations, a transport mutation and eight rendered-manifest mutations pass with Python and rg denied. Tests execute the production policy, verify complete deletion URL sets, token cleanup and private header delivery, and perform no live registry calls. Syntax, shellcheck and diff checks pass.

sean added 1 commit

2026-09-10 23:02:03 +00:00