Migrate to StartOS SDK 2.0.5

.github/workflows/build.yml

@@ -13,44 +13,8 @@ concurrency:
 jobs:
   build:
     if: github.event.pull_request.draft == false
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          submodules: recursive
-
-      - name: Setup build environment
-        uses: start9labs/shared-workflows/.github/actions/setup-build-env@master
-
-      # This package is SDK 1.5.3; the setup action installs the latest
-      # start-cli (now the SDK 2.x line, which requires a packaging workspace
-      # and can't pack 1.5.3 packages). Pin the matching CLI.
-      - name: Pin start-cli v0.4.0-beta.9
-        run: |
-          DOWNLOAD_URL=$(curl -fsS \
-            -H "Authorization: token ${{ github.token }}" \
-            https://api.github.com/repos/Start9Labs/start-technologies/releases/tags/v0.4.0-beta.9 \
-            | jq -r '.assets[] | select(.name=="start-cli_'"$(uname -m)"'-linux") | .browser_download_url')
-          curl -fsSL \
-            -H "Authorization: token ${{ github.token }}" \
-            -H "Accept: application/octet-stream" \
-            "$DOWNLOAD_URL" -o /tmp/start-cli
-          sudo install -m 755 /tmp/start-cli /usr/local/bin/start-cli
-          echo "start-cli: $(start-cli --version)"
-
-      - name: Find or create developer signing key
-        run: |
-          if [ -n "${{ secrets.DEV_KEY }}" ]; then
-            mkdir -p ~/.startos
-            printf '%s' "${{ secrets.DEV_KEY }}" > ~/.startos/developer.key.pem
-            chmod 600 ~/.startos/developer.key.pem
-          else
-            start-cli init-key
-          fi
-
-      - name: Build .s9pk packages
-        run: |
-          RUST_LOG=debug RUST_BACKTRACE=1 make
-          echo
-          echo "SHA256SUMs:"
-          sha256sum *.s9pk
+    uses: start9labs/shared-workflows/.github/workflows/build.yml@master
+    # with:
+    #   FREE_DISK_SPACE: true
+    secrets:
+      DEV_KEY: ${{ secrets.DEV_KEY }}

.github/workflows/release.yml

@@ -19,22 +19,6 @@ jobs:
       - name: Setup build environment
         uses: start9labs/shared-workflows/.github/actions/setup-build-env@master
 
-      # This package is SDK 1.5.3; the setup action installs the latest
-      # start-cli (now the SDK 2.x line, which requires a packaging workspace
-      # and can't pack 1.5.3 packages). Pin the matching CLI.
-      - name: Pin start-cli v0.4.0-beta.9
-        run: |
-          DOWNLOAD_URL=$(curl -fsS \
-            -H "Authorization: token ${{ github.token }}" \
-            https://api.github.com/repos/Start9Labs/start-technologies/releases/tags/v0.4.0-beta.9 \
-            | jq -r '.assets[] | select(.name=="start-cli_'"$(uname -m)"'-linux") | .browser_download_url')
-          curl -fsSL \
-            -H "Authorization: token ${{ github.token }}" \
-            -H "Accept: application/octet-stream" \
-            "$DOWNLOAD_URL" -o /tmp/start-cli
-          sudo install -m 755 /tmp/start-cli /usr/local/bin/start-cli
-          echo "start-cli: $(start-cli --version)"
-
       - name: Install developer signing key
         run: |
           mkdir -p ~/.startos

TODO.md

@@ -1,9 +1,8 @@
 # TODO
 
-- [ ] Device-test: install, add session, verify timeline/search/RSS load
-- [ ] Device-test: primary URL default + Set Primary URL action (check RSS links)
-- [ ] Device-test: remove all sessions → critical task reappears
-- [ ] Device-test: Basic Auth — enable via task/action, browser prompts, credentials work, reset rotates, disable reopens, re-enable restores same credentials
-- [ ] Device-test: `caddy hash-password` exec works during setupMain (pre-daemon exec)
+Migrated to StartOS SDK 2.0.5 (`2026.6.30:1`). Builds green (`tsc` + `ncc` + `s9pk pack`, both x86_64 and aarch64) and fully device-tested: fresh install, upgrade in place over `2026.6.30:0`, sessions + timeline load, primary URL (install default, Set Primary URL action, survives restart), Basic Auth end to end, and both critical-task branches (all sessions removed; primary URL's address removed). That covers both APIs the migration touched — `sdk.host.getOwn` for own URLs, and lazy `SubContainer` / awaited `rootfs`.
+
+CI moved back to the shared Start9 workflows in the same change. The `Pin start-cli v0.4.0-beta.9` step in `build.yml`/`release.yml` existed only because the package was SDK 1.5.3 — that CLI cannot pack a 2.0.5 package, so it had to go with the migration.
+
 - [ ] Consider exposing upstream `proxy`/`apiProxy` options for Tor-routed fetching
 - [ ] Consider a config action for RSS toggles / instance title