Add versioned deployment receipt ingestion

This commit is contained in:
Fredrik Johansson
2026-07-20 21:01:52 +02:00
parent 97ac266cd0
commit 0a087f8b5b
5 changed files with 28 additions and 1 deletions

View File

@@ -8,3 +8,7 @@ npm start
```
Node 24+, no runtime dependencies. Uses built-in `node:sqlite`. Set `TRACE_PASSWORD`; configure read-only repositories through `TRACE_REPOS`. Nothing publishes automatically: export creates a draft under `data/exports/` for manual review.
## Deployment receipts v1
`POST /api/v1/events` accepts versioned build/deployment receipts using a project-scoped bearer token configured as `TRACE_RECEIPT_TOKENS=goonk:token,retur:other-token`. Event IDs are idempotent. `GET /api/v1/public/projects/:project/latest` returns an explicit allowlisted projection; raw payloads remain private.