From c4119169af03db6dda6a7c92991230b001743dc2 Mon Sep 17 00:00:00 2001
From: flemming-it <sf@flemming.it>
Date: Fri, 1 May 2026 17:14:53 +0200
Subject: [PATCH] ci: clone fai/module-sdk anonymously, not with cross-org
 token
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Initial CI run on commit cc72db04 failed in 2 seconds because
the workflow used the repo-scoped GITHUB_TOKEN to clone the
sibling fai/module-sdk repository. That token is scoped to the
current repo (fai-modules/text-extract) and could not read a
private repo in a different org (fai/), so git fetch returned
401 and aborted the run.

fai/module-sdk has been made public — the SDK is the
authoring-surface for module developers and contains nothing
that needs to stay private. With the SDK public, an anonymous
clone is sufficient and avoids the cross-org token-scope
friction entirely.

The text-extract repo itself stays private; only the
authoring-surface SDK is public.

Bumps the module patch version 0.1.0 -> 0.1.1 per the
per-commit policy.

Signed-off-by: flemming-it <sf@flemming.it>
---
 .forgejo/workflows/ci.yml | 6 +++++-
 Cargo.lock                | 6 +++---
 Cargo.toml                | 2 +-
 3 files changed, 9 insertions(+), 5 deletions(-)

diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index 2f8590f..a5edad4 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -44,8 +44,12 @@ jobs:
           mkdir -p "$sdk_dir"
           cd "$sdk_dir"
           git init -q
+          # The SDK lives in a different Forgejo org (fai/) and the
+          # repo-scoped GITHUB_TOKEN cannot read it. The SDK is
+          # public, so an anonymous clone is sufficient and avoids
+          # cross-org token-scope friction.
           git remote add origin \
-            "https://x-access-token:${GITHUB_TOKEN}@git.flemming.ws/fai/module-sdk.git"
+            "https://git.flemming.ws/fai/module-sdk.git"
           git fetch --depth=1 origin main
           git checkout -q FETCH_HEAD
           echo "module-sdk checked out at: $sdk_dir"
diff --git a/Cargo.lock b/Cargo.lock
index a1cc1e0..42ae41c 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -169,7 +169,7 @@ dependencies = [
 
 [[package]]
 name = "fai-module-sdk"
-version = "0.1.0"
+version = "0.1.2"
 dependencies = [
  "fai-module-sdk-macros",
  "serde",
@@ -180,7 +180,7 @@ dependencies = [
 
 [[package]]
 name = "fai-module-sdk-macros"
-version = "0.1.0"
+version = "0.1.2"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -504,7 +504,7 @@ dependencies = [
 
 [[package]]
 name = "text_extract"
-version = "0.1.0"
+version = "0.1.1"
 dependencies = [
  "fai-module-sdk",
  "pdf-extract",
diff --git a/Cargo.toml b/Cargo.toml
index f72c723..3e4f9cc 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -5,7 +5,7 @@
 
 [package]
 name = "text_extract"
-version = "0.1.0"
+version = "0.1.1"
 edition = "2024"
 authors = ["Dr. Stefan Flemming <platform@flemming.ai>"]
 license = "Apache-2.0"