fix(tool): chart only this repo — the workflow token can't read siblings - #156

User description

Follow-up to #155. I test-ran the new workflow after merging and it failed on its first live run — and the fail-closed behaviour CodeRabbit asked for in #155 is precisely why we found out cleanly instead of silently shipping a worse chart.

What happened

A workflow's built-in GITHUB_TOKEN is scoped to its own repository. Reading OpenStrap/protocol from a job running in OpenStrap/edge returns 403:

OpenStrap/edge: 334 stars
error: gh api repos/OpenStrap/protocol/stargazers?per_page=100&page=1 failed:
  gh: Resource not accessible by integration (HTTP 403)
  — aborting rather than publishing a partial chart

Which is exactly the right outcome. Under the original warn-and-continue version, this would have quietly generated an edge-only chart, committed it over the good three-series one, and logged nothing that looked like a problem. CodeRabbit's finding earned its keep within the hour.

Fix

Default to charting this repo alone, which works with the built-in token. The repo list now comes from STAR_HISTORY_REPOS, so siblings can be added later by supplying a PAT with read access — opt-in, rather than a default that 403s:

STAR_HISTORY_REPOS="OpenStrap/edge,OpenStrap/protocol" python3 tool/gen_star_history.py

Verified both paths: default → edge · 334; override → edge · 334 + protocol · 11.

Why the committed SVG changed too

It has to. If local output and CI output disagree on the repo set, the SVG flip-flops between one and three series and the workflow commits a revision every week — the exact churn the no-change guard exists to stop. Regenerated so the two are byte-identical. Re-confirmed determinism across consecutive runs.

Honestly the single-series chart also reads better: protocol (11) and analytics (5) were near-flat lines against edge's 334, so they added noise more than information.

Captions in the README and on the landing page updated to say what the chart covers and how to widen it.

Docs + one script. No Dart touched.

PR Type

Bug fix

Description

• Fix CI failure: default to charting only OpenStrap/edge (built-in token scope)

• Make repo list configurable via STAR_HISTORY_REPOS env var for opt-in PAT use

• Update README and landing page captions to reflect single-repo chart

• Regenerate committed SVG so local and CI output are byte-identical

Diagram Walkthrough

flowchart LR
  A["STAR_HISTORY_REPOS env var\n(optional, PAT required)"]
  B["gen_star_history.py\ndefault: OpenStrap/edge only"]
  C["docs/star-history.svg\n(single-series chart)"]
  D["CI workflow\n(built-in GITHUB_TOKEN)"]
  A -- "override with PAT" --> B
  D -- "runs with default" --> B
  B -- "generates" --> C