Upstream sweep status

[JimCollinson]

Rolling status thread for the daily upstream-sweep routine.

[JimCollinson]

Upstream sweep — run 2026-05-11 — scanner error (fail-closed)

The sweep scanner (scripts/sweep_poll.py) returned status: "error". Per the fail-closed policy, no PRs or issues were opened. The run is aborted.

Scanner output:

{
  "status": "error",
  "generated_at": "2026-05-11T11:16:45.635225+00:00",
  "records": [],
  "target_manifest_skipped": [],
  "errors": [
    {
      "kind": "missing_github_token",
      "message": "GITHUB_TOKEN environment variable is not set"
    }
  ]
}

Root cause: GITHUB_TOKEN is not set in the environment where the routine runs. The scanner needs this token to call the GitHub API and fetch upstream HEAD SHAs.

Required action: Set GITHUB_TOKEN as a secret in the Claude Desktop routine config (see planning/routines/upstream-sweep.md — Credentials and access section). Once the token is in place, the next run will proceed normally.

Additional note: The upstream-sweep-status and upstream-sweep-manual-review labels could not be bootstrapped via the available toolset (no label-creation MCP tool). The status issue was created without the label. A human should manually create both labels in the repo so future runs can use label-based issue lookup.

---

Generated by Claude Code

[JimCollinson]

Sweep run starting — 2026-05-11

Bootstrap note: upstream-sweep-status label confirmed present. upstream-sweep-manual-review label not found; label creation returned 403 (token lacks label-write scope). Proceeding — if step 5 requires a manual-review issue, the run will fail closed at that point rather than silently skip it.

---

Generated by Claude Code

[JimCollinson]

Sweep run aborted — 2026-05-11

scripts/sweep_poll.py exited with status 2 (fail-closed). No PRs or issues were opened.

Error diagnostics:

{
  "status": "error",
  "generated_at": "2026-05-11T11:45:23.577210+00:00",
  "records": [],
  "target_manifest_skipped": [],
  "errors": [
    {
      "kind": "github_api_http_error",
      "url": "https://api.github.com/repos/saorsa-labs/saorsa-core/commits/main",
      "status": 403,
      "message": "GitHub API returned 403 for /repos/saorsa-labs/saorsa-core/commits/main"
    }
  ]
}

Root cause: The GITHUB_TOKEN in the routine environment does not have read access to the saorsa-labs org repos (saorsa-core, saorsa-transport, saorsa-pqc). The scanner resolves HEAD SHAs for every repo referenced in skills/start/version.json and skills/start/SKILL.md verified_commits maps, including these targeted-foundational repos.

Resolution needed: Grant the routine's GitHub token contents: read on saorsa-labs/saorsa-core, saorsa-labs/saorsa-transport, and saorsa-labs/saorsa-pqc (and any other saorsa-labs repos referenced in verified_commits). The daily run will retry automatically once the token is updated.

---

Generated by Claude Code

[JimCollinson]

Upstream sweep — 2026-05-11 run aborted

Collision check: no open claude/sweep-* or claude/prose-* PRs — clear to proceed.

Scanner: exited with status: "error". Per sweep policy, the run aborts and no PRs are opened.

Error diagnostics:

{
  "status": "error",
  "generated_at": "2026-05-11T13:29:24.890084+00:00",
  "records": [],
  "target_manifest_skipped": [],
  "notices": [],
  "errors": [
    {
      "kind": "github_api_http_error",
      "url": "https://api.github.com/repos/saorsa-labs/saorsa-core/commits/main",
      "status": 403,
      "auth_status": 403,
      "message": "GitHub API returned 403 authenticated and 403 anonymous for /repos/saorsa-labs/saorsa-core/commits/main"
    }
  ]
}

Root cause: The scanner could not read the HEAD commit of saorsa-labs/saorsa-core. Both the authenticated request and the anonymous fallback returned HTTP 403. This repo is either private, or the token in use does not have contents: read access to the saorsa-labs org.

Action required: Provision a token with contents: read on saorsa-labs/saorsa-core (and ideally all saorsa-labs repos in the registry: saorsa-core, saorsa-transport, saorsa-pqc) and set it in the routine's GITHUB_TOKEN secret. Then re-run the sweep.

Bootstrap note: The upstream-sweep-manual-review label does not exist in this repo and could not be created in this run (no label-creation tool available in the MCP environment). This label is required before any future run that needs to open manual-review issues. Please create it manually: Settings → Labels → New label → upstream-sweep-manual-review with description "Ambiguous upstream-sweep records that need a human decision".

---

Generated by Claude Code

[JimCollinson]

Upstream sweep — 2026-05-11

Metric	Count
Records scanned	121
Drifted	96
Swept (metadata-only)	82 records across 49 pages
Prose-flagged	14 records across 6 pages
Manual-review-flagged	0
Target-manifest-skipped	0

PRs opened

• Sweep PR chore(sweep): refresh verification SHAs — 2026-05-11 #36 (metadata-only, ready for review): chore(sweep): refresh verification SHAs — 2026-05-11 #36
  — Updates source_commit / verified_date in verification blocks across 49 pages. No prose changes.

• Prose PR docs: antd v0.6.1 — health fields, upload visibility, MCP port discovery #37 (draft): docs: antd v0.6.1 — health fields, upload visibility, MCP port discovery #37
  — Prose updates to 5 docs pages and skill files for ant-sdk 529280c3 / ant-client 6cada1d6 drift:

  • docs/sdk/reference/rest-api.md — health response expanded to 8 fields; visibility parameter added to prepare endpoints; data_map_address in finalize response; 501 error code added
  • docs/sdk/reference/grpc-services.md — health response expanded to 8 fields in both the RPC table and common messages table
  • docs/sdk/how-to-guides/use-external-signers-for-upload-payments.md — data prepare visibility note; file prepare public-visibility bundle note; finalize response data_map_address; ant-core helper list updated
  • docs/mcp/mcp-server-reference.md — daemon-discovery port-file path corrected; check_health() response updated to 8 fields
  • docs/rust/library-reference.md — data_prepare_upload_with_visibility added; Visibility type added to key-types table
  • skills/start/SKILL.md + version.json + CHANGELOG.md — version bumped to 0.1.4-draft; health shape and MCP discovery note updated

No manual-review issues opened

All drifted records were classifiable as either metadata-only or prose-flagged. No ambiguous records required escalation.

---

Generated by Claude Code

[JimCollinson]

Rolling status is updates now handled in Claude Code Routine sessions logs and PR descriptions themselves, rather than in issues. Closing.