From 686982537062a49dfc69650ab47fad3c5dfb31ad Mon Sep 17 00:00:00 2001
From: "every.channel" <founder@every.channel>
Date: Mon, 16 Feb 2026 01:44:43 -0500
Subject: [PATCH] ci: add breadcrumbs for age/decrypt/build phases

---
 .forgejo/workflows/deploy-cloudflare.yml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/.forgejo/workflows/deploy-cloudflare.yml b/.forgejo/workflows/deploy-cloudflare.yml
index 634a02e..d635235 100644
--- a/.forgejo/workflows/deploy-cloudflare.yml
+++ b/.forgejo/workflows/deploy-cloudflare.yml
@@ -116,6 +116,7 @@ jobs:
       - name: Configure CI Age identity
         env:
           AGE_FORGE_SSH_KEY: ${{ secrets.AGE_FORGE_SSH_KEY }}
+          GITHUB_TOKEN: ${{ github.token }}
         shell: bash
         run: |
           set -euo pipefail
@@ -132,7 +133,14 @@ jobs:
           fi
           chmod 600 "$HOME/.ssh/age_forge_ed25519"
 
+          curl -fsSL -X POST -H "Authorization: token ${GITHUB_TOKEN}" \
+            -H "content-type: application/json" \
+            "https://codeberg.org/api/v1/repos/every-channel/every.channel/statuses/${GITHUB_SHA}" \
+            -d '{"context":"deploy-cloudflare/breadcrumb","state":"pending","description":"age key ok"}' >/dev/null
+
       - name: Decrypt CI secrets from repo
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
         shell: bash
         run: |
           set -euo pipefail
@@ -151,7 +159,14 @@ jobs:
           echo "::add-mask::${CLOUDFLARE_API_TOKEN}"
           echo "CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN}" >> "$GITHUB_ENV"
 
+          curl -fsSL -X POST -H "Authorization: token ${GITHUB_TOKEN}" \
+            -H "content-type: application/json" \
+            "https://codeberg.org/api/v1/repos/every-channel/every.channel/statuses/${GITHUB_SHA}" \
+            -d '{"context":"deploy-cloudflare/breadcrumb","state":"pending","description":"decrypt ok"}' >/dev/null
+
       - name: Build site (Dioxus web)
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
         shell: bash
         run: |
           set -euo pipefail
@@ -183,6 +198,11 @@ jobs:
           cd apps/tauri/ui
           trunk build --release --public-url /
 
+          curl -fsSL -X POST -H "Authorization: token ${GITHUB_TOKEN}" \
+            -H "content-type: application/json" \
+            "https://codeberg.org/api/v1/repos/every-channel/every.channel/statuses/${GITHUB_SHA}" \
+            -d '{"context":"deploy-cloudflare/breadcrumb","state":"pending","description":"build ok"}' >/dev/null
+
       - name: Deploy worker
         env:
           GITHUB_TOKEN: ${{ github.token }}