From a5c5c8e8d22282c6f6a51d3501b069c060a0e4d6 Mon Sep 17 00:00:00 2001
From: Brandon Estrella <onamfc@gmail.com>
Date: Tue, 11 Aug 2026 12:30:29 -0700
Subject: [PATCH] ci: seed the CLA signature file so the action can read it
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

#39 fixed the branch the CLA action looks on, but the `cla` check still fails
with the same error:

    ##[error]Could not retrieve repository contents. Status: 404

The config is now correct — the run reports `branch: main` and
`path-to-signatures: signatures/cla.json` — and it still 404s, because that
file has never existed. The action is supposed to create it on first use and
cannot, due to a bug in cla-assistant/github-action@v2.4.0:

    if (error.status === "404") {
      return createClaFileAndPRComment(committers, committerMap)
    } else {
      throw new Error(`Could not retrieve repository contents. Status: ...`)
    }

Octokit sets `error.status` as a number, so `404 === "404"` is false and the
bootstrap branch is unreachable. The action can only ever work against a
signature file that already exists, so the file has to be committed by hand.

This adds exactly what the action would have written itself: an empty
`signedContributors` array. Indented with two spaces rather than the three its
create path uses, because its *update* path re-serialises with two — matching
the update format keeps the first real signature's diff to one line.

Both halves were required. Without #39 the action looked on a `master` ref that
does not exist here; without this file it 404s on a path that does not exist.

Note this was never a compliance gap: `main` is unprotected so the `cla` check
gates nothing, and `license/cla` (the cla-assistant.io status check) has been
passing throughout. Only the Action half was broken.
---
 signatures/cla.json | 3 +++
 1 file changed, 3 insertions(+)
 create mode 100644 signatures/cla.json

diff --git a/signatures/cla.json b/signatures/cla.json
new file mode 100644
index 0000000..6d978e7
--- /dev/null
+++ b/signatures/cla.json
@@ -0,0 +1,3 @@
+{
+  "signedContributors": []
+}