Commit Graph
3 Commits
Author SHA1 Message Date
jason b93df7b348 📝 Log pre-existing entrypoint.sh script-lint violations 📝
- TODO.AI.md: recorded 19 script-lint violations found in entrypoint.sh
  and functions/entrypoint.sh (bare `exit`, missing `--` before grep
  query patterns). Neither file was touched this session — logging per
  policy so the findings aren't lost to conversation history; needs a
  dedicated follow-up pass to fix and re-lint.
2026-08-21 16:40:31 -04:00
jason d6e4022aff 🔧 Fix musl compile-fallback gaps and probe-rs crate name 🔧
Root-caused and fixed the remaining tool-inventory gaps found during
this session's verification of the GitHub-rate-limit fix's rebuild.

- Dockerfile: added `apk add openssl-dev openssl-libs-static pkgconfig`
  before the compile-fallback loop — Alpine's openssl-dev only ships
  shared libs, and cargo-public-api/cargo-dist/sea-orm-cli link OpenSSL
  statically against musl, which was failing with `cannot find -lssl`/
  `-lcrypto`. Confirmed fix in a standalone debug container: all three
  now `cargo binstall -y` successfully.
- Dockerfile: fixed `probe-rs` -> `probe-rs-tools` in the main
  prebuilt-fetch loop. `probe-rs` is a library crate with no installable
  binary; the CLI (`probe-rs`, `cargo-flash`, `cargo-embed`) is
  published under `probe-rs-tools`, which has a musl prebuilt via
  QuickInstall. Removed it from the compile-fallback loop since it no
  longer needs it.
- TODO.AI.md: closed the GitHub rate-limiting section (0 403s confirmed
  across a fresh --no-cache multi-platform build); recorded final
  tool-inventory status (6 false positives, 3 fixed, probe-rs fixed,
  cargo-spellcheck documented as a genuine open limitation — its
  hunspell-sys build script SIGSEGVs under this musl cross-compile
  environment even with clang/g++ deps present, not an apk-fixable gap);
  documented the failed `cargo zigbuild` mingw-arm64 workaround attempt
  under the existing mingw-w64-gcc limitation section.
2026-08-21 16:39:10 -04:00
jason 7870bf4859 🔑 Accept optional GITHUB_TOKEN secret for cargo-binstall 🔑
Build and Push / build (push) Canceled after 0s
- Dockerfile: the rust-tools stage's cargo binstall RUN now mounts an
  optional BuildKit secret (github_token -> GITHUB_TOKEN, required=false),
  matching the existing pattern in the sibling go image's Dockerfile. Raises
  the GitHub API rate limit from 60 to 5000 req/hr when a token is supplied.
- TODO.AI.md: logged the verified root cause and impact of this session's
  full multi-platform push build — GitHub API rate-limiting dropped 14/60
  tools on linux/amd64 and 40/60 tools on linux/arm64 during cargo binstall
  resolution, because two concurrent platform builds share one unauthenticated
  budget. Also logged that the shared build wrapper (/usr/local/bin/buildx,
  outside this repo) does not currently pass the secret flag, so this fix
  has no effect until the wrapper is updated or the secret is passed
  manually — flagged as a decision needed from the user. Separately logged
  that mingw-w64-gcc has no arm64 Alpine package (apk "no such package"),
  a platform limitation with no in-repo fix, affecting Windows GNU target
  linking on the arm64 image variant.
2026-08-21 07:58:56 -04:00