Merge nucleic/nimble-iris-toad-cpro into dev

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Andrew Blakeslee Moore
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -3,8 +3,8 @@
 This directory builds **narOS** (the Nucleic Agent Runtime OS) per
 [docs/NAROS.md](../docs/NAROS.md): a Debian-trixie-derived rootfs assembled from scratch
 with `mmdebstrap` against a pinned `snapshot.debian.org` date, plus a Nucleic apt package
-layer (nash, naros-init, tier meta-packages, …). CI (`.github/workflows/naros.yml`)
+layer (nash, naros-init, tier meta-packages, …). CI (`.gitea/workflows/naros.yml`)
-publishes OCI images to GHCR — `naros-base` and `naros-agent`, both shipping today
+publishes OCI images to the Gitea registry with a transitional GHCR dual-push — `naros-base` and `naros-agent`, both shipping today
 (`ProjectSandbox.defaultImage` pins `ghcr.io/abkslm/naros-agent:26.07`, and
 `containers/nucleic-runner/Dockerfile` builds `FROM` it); `naros-runner` is still planned
 (NAROS.md §7.2 — it will fold in `containers/nucleic-runner`) — and the

packages/naros-keyring/control

@@ -7,6 +7,6 @@ Priority: optional
 Description: narOS apt archive keyring and source entry (NAROS.md §3.2)
  The narOS apt repository's signing public key
  (/usr/share/keyrings/naros-archive-keyring.gpg) plus the deb822 source entry
- for apt.naros.nucleic.blakeslee.xyz pinned to that key. Installing this on
+ for the version.blakeslee.xyz Debian registry, pinned to its per-owner repository key. Installing this on
  any Debian-family
  system enables `apt install naros-tier-agent` conversion (NAROS.md §7.3).

packages/naros-keyring/files/etc/apt/sources.list.d/naros.sources

@@ -1,5 +1,5 @@
 Types: deb
-URIs: https://apt.naros.nucleic.blakeslee.xyz
+URIs: https://version.blakeslee.xyz/api/packages/blakeslee-research/debian
 Suites: @CHANNEL@
 Components: main
 Signed-By: /usr/share/keyrings/naros-archive-keyring.gpg

packages/naros-keyring/stage.sh

@@ -1,5 +1,5 @@
-# The public key is materialized by CI from the NAROS_APT_PUBLIC_KEY secret (or by an
+# CI fetches the Gitea Debian registry's repository.key and dearmors it into
-# operator into os/repo/keys/). No key in the tree, no keyring package — skip cleanly.
+# os/repo/keys/. No key in the tree, no keyring package — skip cleanly.
 stage() {
   local dest="$1" key="$OS_DIR/repo/keys/naros-archive-keyring.gpg"
   if [ ! -f "$key" ]; then