From 71ffb442e5f8072c6e0a974df9ae085bcf0e5d2a Mon Sep 17 00:00:00 2001
From: Mehmet Samet Duman <yongdohyun@projecttick.org>
Date: Sat, 4 Apr 2026 23:00:30 +0300
Subject: NOISSUE update bootstrap script paths in documentation for Linux and
 Windows

remove unnecessary badges from README
add example environment configuration for Ofborg
create production configuration for Ofborg
correct RabbitMQ host in example configuration
add push event handling in GitHub webhook receiver
implement push filter task for handling push events
extend build job structure to include push event information
enhance build result structure to accommodate push event data
add push event data handling in various message processing tasks
update log message collector to prevent 404 errors on log links
add push filter task to task module

Signed-off-by: Mehmet Samet Duman <yongdohyun@projecttick.org>
---
 .envrc                                             |   2 +
 .github/pull_request_template.md                   |   4 +-
 .gitignore                                         |   2 +
 CODE_OF_CONDUCT.md                                 | 118 +++++++++
 REUSE.toml                                         |   5 +
 bootstrap.cmd                                      | 196 ++++++++++++++
 bootstrap.sh                                       | 285 +++++++++++++++++++++
 flake.lock                                         |  24 ++
 flake.nix                                          |  78 ++++++
 lefthook.yml                                       |  37 +++
 meshmc/BUILD.md                                    |   4 +-
 meshmc/CODE_OF_CONDUCT.md                          | 118 ---------
 meshmc/README.md                                   |   2 +-
 meshmc/bootstrap.cmd                               | 196 --------------
 meshmc/bootstrap.sh                                | 285 ---------------------
 meshmc/lefthook.yml                                |  37 ---
 ofborg/.env.example                                |   4 +
 ofborg/config.production.json                      | 101 ++++++++
 ofborg/example.config.json                         |   2 +-
 ofborg/tickborg/src/bin/build-faker.rs             |   1 +
 ofborg/tickborg/src/bin/github-webhook-receiver.rs |  18 ++
 ofborg/tickborg/src/bin/push-filter.rs             | 105 ++++++++
 ofborg/tickborg/src/config.rs                      |  16 +-
 ofborg/tickborg/src/ghevent/mod.rs                 |   2 +
 ofborg/tickborg/src/ghevent/pushevent.rs           |  53 ++++
 ofborg/tickborg/src/message/buildjob.rs            |  44 +++-
 ofborg/tickborg/src/message/buildresult.rs         |  22 +-
 ofborg/tickborg/src/message/common.rs              |  11 +-
 ofborg/tickborg/src/message/mod.rs                 |   2 +-
 ofborg/tickborg/src/tasks/build.rs                 |  73 ++++--
 ofborg/tickborg/src/tasks/githubcommentposter.rs   |  95 +++++--
 ofborg/tickborg/src/tasks/log_message_collector.rs |   3 +-
 ofborg/tickborg/src/tasks/mod.rs                   |   1 +
 ofborg/tickborg/src/tasks/pushfilter.rs            | 165 ++++++++++++
 34 files changed, 1429 insertions(+), 682 deletions(-)
 create mode 100644 .envrc
 create mode 100644 CODE_OF_CONDUCT.md
 create mode 100644 bootstrap.cmd
 create mode 100755 bootstrap.sh
 create mode 100644 flake.lock
 create mode 100644 flake.nix
 create mode 100644 lefthook.yml
 delete mode 100644 meshmc/CODE_OF_CONDUCT.md
 delete mode 100644 meshmc/bootstrap.cmd
 delete mode 100755 meshmc/bootstrap.sh
 delete mode 100644 meshmc/lefthook.yml
 create mode 100644 ofborg/.env.example
 create mode 100644 ofborg/config.production.json
 create mode 100644 ofborg/tickborg/src/bin/push-filter.rs
 create mode 100644 ofborg/tickborg/src/ghevent/pushevent.rs
 create mode 100644 ofborg/tickborg/src/tasks/pushfilter.rs

diff --git a/.envrc b/.envrc
new file mode 100644
index 0000000000..1d11c53545
--- /dev/null
+++ b/.envrc
@@ -0,0 +1,2 @@
+use nix
+watch_file nix/*.nix
diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
index bd2abdad87..5b75623fd4 100644
--- a/.github/pull_request_template.md
+++ b/.github/pull_request_template.md
@@ -1,8 +1,8 @@
 <!--
-Hey there! Thanks for your contribution for MeshMC.
+Hey there! Thanks for your contribution for Project Tick.
 
 Please make sure that your commits are signed off and please sign CLA first.
-If you don't know how that works, check out our contribution guidelines: https://github.com/Project-Tick/MeshMC/blob/master/CONTRIBUTING.md#signing-your-work
+If you don't know how that works, check out our contribution guidelines: https://github.com/Project-Tick/Project-Tick/blob/master/CONTRIBUTING.md#signing-your-work
 If you already created your commits, you can run `git rebase --signoff develop` to retroactively sign-off all your commits and `git push --force` to override what you have pushed already.
 
 Note that signing and signing-off are two different things!
diff --git a/.gitignore b/.gitignore
index 6ac77d6f4d..ba0dc780cb 100644
--- a/.gitignore
+++ b/.gitignore
@@ -58,3 +58,5 @@ node_modules/
 
 #Ignore vscode AI rules
 .github/instructions/codacy.instructions.md
+
+tree.txt
diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md
new file mode 100644
index 0000000000..f3f877ff21
--- /dev/null
+++ b/CODE_OF_CONDUCT.md
@@ -0,0 +1,118 @@
+# Project Tick Code of Conduct
+
+## Version 2, 15 February 2026
+
+### 1. Purpose
+
+Project Tick is a free software infrastructure initiative committed to technical excellence, legal clarity, and long-term sustainability.
+
+This Code of Conduct defines the behavioral and ethical standards expected across all Project Tick spaces. Its purpose is to protect contributors, maintain the integrity of the ecosystem, and ensure the security and reliability of our infrastructure.
+
+Participation in Project Tick constitutes agreement to abide by this Code.
+
+### 2. Core Principles
+
+Project Tick operates according to the following foundational principles:
+
+- Respect for human dignity
+- Commitment to technical integrity
+- Strict adherence to licensing and attribution requirements
+- Protection of infrastructure security and supply-chain integrity
+- Good-faith collaboration
+
+These principles apply equally to maintainers, contributors, and participants.
+
+### 3. Expected Conduct
+
+All participants are expected to:
+
+1. Engage in respectful, constructive, and technically relevant discussion.
+2. Accept review, feedback, and architectural decisions professionally.
+3. Provide accurate attribution and comply fully with applicable licenses.
+4. Disclose conflicts of interest where relevant.
+5. Protect confidential or sensitive information.
+6. Act in ways that strengthen the reliability and long-term sustainability of the ecosystem.
+7. Respect differing technical or philosophical viewpoints without personal hostility.
+
+Criticism of ideas is encouraged. Personal attacks are not.
+
+### 4. Prohibited Conduct
+
+The following behaviors are considered violations of this Code of Conduct:
+
+#### 4.1 Personal and Social Misconduct
+
+- Harassment, intimidation, or threats
+- Discriminatory behavior based on identity or personal characteristics
+- Insulting, demeaning, or hostile personal attacks
+- Sexualized behavior inappropriate to a professional technical environment
+- Sharing private information without explicit consent
+
+#### 4.2 Technical and Legal Misconduct
+
+- Intentional submission of malicious code
+- Supply-chain compromise attempts
+- License violations or intentional misattribution
+- Plagiarism or failure to credit sources
+- False copyright claims
+- Impersonation of maintainers or other participants
+- Infrastructure abuse, including CI/CD exploitation or service disruption
+- Repeated bad-faith technical disruption
+
+Project maintainers reserve the right to determine whether conduct violates the spirit or intent of this Code.
+
+### 5. Scope
+
+This Code of Conduct applies to:
+
+- All Project Tick repositories
+- Mailing lists and communication channels
+- Issue trackers and merge requests
+- Continuous integration systems
+- Infrastructure services and hosting environments
+- Official Project Tick domains and email accounts
+- Public representation of the project
+
+Individuals representing Project Tick in any official capacity are expected to uphold this Code at all times.
+
+### 6. Reporting
+
+Violations may be reported confidentially to:
+
+conduct@projecttick.org
+
+Reports will be reviewed in a timely and objective manner. Confidentiality will be respected to the extent reasonably possible.
+
+Malicious or knowingly false reports may themselves constitute a violation.
+
+### 7. Enforcement
+
+Enforcement decisions are made by the Project Tick maintainers.
+
+Depending on severity, actions may include:
+
+1. Private warning
+2. Temporary communication restriction
+3. Temporary suspension of repository access
+4. Permanent removal of access to Project Tick spaces
+
+Serious security, infrastructure, or legal violations may result in immediate permanent removal.
+
+Enforcement decisions are final and are not subject to public vote.
+
+### 8. Remediation
+
+Where appropriate, resolution may involve:
+
+- Acknowledgment of harm
+- Corrective action or documentation
+- License compliance remediation
+- Demonstrated behavioral improvement
+
+Reinstatement after suspension is at the sole discretion of the maintainers.
+
+### 9. Independence
+
+This document was inspired by Contributor Covenant 3.0 but has been independently written and adapted to reflect the governance, infrastructure, and legal priorities of Project Tick.
+
+Project Tick maintains full authority over the interpretation and enforcement of this Code.
diff --git a/REUSE.toml b/REUSE.toml
index 5ec4afbba4..d4db8d268c 100644
--- a/REUSE.toml
+++ b/REUSE.toml
@@ -154,3 +154,8 @@ SPDX-FileCopyrightText = "MultiMC Contributors & PolyMC Contributors & PrismLaun
 path = ["images4docker/**"]
 SPDX-License-Identifier = "GPL-3.0-or-later"
 SPDX-FileCopyrightText = "Project Tick"
+
+[[annotations]]
+path = ["ofborg/**"]
+SPDX-License-Identifier = "MIT"
+SPDX-FileCopyrightText = "NixOS Contributors & Project Tick"
diff --git a/bootstrap.cmd b/bootstrap.cmd
new file mode 100644
index 0000000000..9da8b46195
--- /dev/null
+++ b/bootstrap.cmd
@@ -0,0 +1,196 @@
+@echo off
+rem SPDX-License-Identifier: GPL-3.0-or-later
+rem SPDX-FileCopyrightText: 2026 Project Tick
+rem
+rem MeshMC Bootstrap Script (Windows)
+rem Checks dependencies, installs via vcpkg/scoop, and sets up lefthook.
+
+setlocal EnableDelayedExpansion
+
+cd /d "%~dp0"
+
+echo.
+echo [INFO]  MeshMC Bootstrap
+echo ---------------------------------------------
+echo.
+
+rem ── Submodules ──────────────────────────────────────────────────────────────
+if not exist ".git" (
+    echo [ERR]  Not a git repository. Please run this script from the project root. 1>&2
+    exit /b 1
+)
+
+echo [INFO]  Setting up submodules...
+git submodule update --init --recursive
+if errorlevel 1 (
+    echo [ERR]  Submodule initialization failed. 1>&2
+    exit /b 1
+)
+echo [ OK ]  Submodules initialized
+echo.
+
+rem ── Check for scoop ─────────────────────────────────────────────────────────
+set "HAS_SCOOP=0"
+where scoop >nul 2>&1 && set "HAS_SCOOP=1"
+
+if "%HAS_SCOOP%"=="0" (
+    echo [WARN]  Scoop is not installed.
+    echo [INFO]  Installing Scoop...
+    powershell -NoProfile -Command "Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope CurrentUser -Force; Invoke-RestMethod -Uri https://get.scoop.sh | Invoke-Expression"
+    if errorlevel 1 (
+        echo [ERR]  Scoop installation failed. Install manually from https://scoop.sh 1>&2
+        exit /b 1
+    )
+    rem Refresh PATH
+    set "PATH=%USERPROFILE%\scoop\shims;%PATH%"
+    echo [ OK ]  Scoop installed
+) else (
+    echo [ OK ]  Scoop is installed
+)
+echo.
+
+rem ── Check for vcpkg ─────────────────────────────────────────────────────────
+set "HAS_VCPKG=0"
+where vcpkg >nul 2>&1 && set "HAS_VCPKG=1"
+
+if "%HAS_VCPKG%"=="0" (
+    echo [WARN]  vcpkg is not installed.
+    echo [INFO]  You can install vcpkg via: scoop install vcpkg
+    echo [INFO]  Or clone from https://github.com/microsoft/vcpkg
+)
+echo.
+
+rem ── Dependency Checks ──────────────────────────────────────────────────────
+echo [INFO]  Checking dependencies...
+echo.
+
+set "MISSING="
+
+call :check_cmd npm npm
+call :check_cmd Go go
+call :check_cmd lefthook lefthook
+call :check_cmd reuse reuse
+call :check_cmd CMake cmake
+call :check_cmd Git git
+
+echo.
+
+rem ── Install Missing Dependencies via Scoop ─────────────────────────────────
+if not defined MISSING (
+    echo [ OK ]  All command-line dependencies are already installed!
+    goto :vcpkg_libs
+)
+
+echo [INFO]  Missing dependencies: %MISSING%
+echo [INFO]  Installing via Scoop...
+echo.
+
+rem Add extras bucket for some packages
+scoop bucket add extras >nul 2>&1
+scoop bucket add main >nul 2>&1
+
+echo !MISSING! | findstr /i "npm" >nul && (
+    echo [INFO]  Installing Node.js ^(includes npm^)...
+    scoop install nodejs
+)
+
+echo !MISSING! | findstr /i "Go" >nul && (
+    echo [INFO]  Installing Go...
+    scoop install go
+)
+
+echo !MISSING! | findstr /i "CMake" >nul && (
+    echo [INFO]  Installing CMake...
+    scoop install cmake
+)
+
+echo !MISSING! | findstr /i "reuse" >nul && (
+    echo [INFO]  Installing reuse via pip...
+    where pip >nul 2>&1 || scoop install python
+    pip install reuse
+)
+
+echo !MISSING! | findstr /i "lefthook" >nul && (
+    echo [INFO]  Installing lefthook...
+    where go >nul 2>&1 && (
+        go install github.com/evilmartians/lefthook@latest
+        set "PATH=%GOPATH%\bin;%USERPROFILE%\go\bin;%PATH%"
+    ) || (
+        scoop install lefthook
+    )
+)
+
+echo.
+echo [ OK ]  Package installation complete
+echo.
+
+rem ── vcpkg Libraries ─────────────────────────────────────────────────────────
+:vcpkg_libs
+where vcpkg >nul 2>&1
+if errorlevel 1 (
+    echo [WARN]  vcpkg not found. Skipping C/C++ library installation.
+    echo [WARN]  You will need to manually install: qt6, quazip, zlib, extra-cmake-modules
+    goto :setup_lefthook
+)
+
+echo [INFO]  Installing C/C++ libraries via vcpkg...
+
+set "VCPKG_TRIPLET=x64-windows"
+
+vcpkg install qt5-base:%VCPKG_TRIPLET% >nul 2>&1 || (
+    echo [INFO]  Installing Qt6...
+    vcpkg install qtbase:%VCPKG_TRIPLET%
+)
+
+echo [INFO]  Installing quazip...
+vcpkg install quazip:%VCPKG_TRIPLET%
+
+echo [INFO]  Installing zlib...
+vcpkg install zlib:%VCPKG_TRIPLET%
+
+echo [INFO]  Installing extra-cmake-modules...
+vcpkg install ecm:%VCPKG_TRIPLET%
+
+echo.
+echo [ OK ]  vcpkg libraries installed
+echo.
+
+rem ── Lefthook Setup ─────────────────────────────────────────────────────────
+:setup_lefthook
+where lefthook >nul 2>&1
+if errorlevel 1 (
+    echo [ERR]  lefthook is not available. Cannot set up git hooks. 1>&2
+    exit /b 1
+)
+
+echo [INFO]  Setting up lefthook...
+lefthook install
+if errorlevel 1 (
+    echo [ERR]  lefthook install failed. 1>&2
+    exit /b 1
+)
+echo [ OK ]  Lefthook hooks installed into .git\hooks
+echo.
+
+echo ---------------------------------------------
+echo [ OK ]  Bootstrap successful! You're all set.
+echo.
+
+endlocal
+exit /b 0
+
+rem ── Helper Functions ────────────────────────────────────────────────────────
+:check_cmd
+set "NAME=%~1"
+set "CMD=%~2"
+where %CMD% >nul 2>&1
+if errorlevel 1 (
+    echo [WARN]  %NAME% is NOT installed
+    set "MISSING=!MISSING! %NAME%"
+) else (
+    for /f "delims=" %%i in ('where %CMD%') do (
+        echo [ OK ]  %NAME% is installed ^(%%i^)
+        goto :eof
+    )
+)
+goto :eof
diff --git a/bootstrap.sh b/bootstrap.sh
new file mode 100755
index 0000000000..3762deaa2e
--- /dev/null
+++ b/bootstrap.sh
@@ -0,0 +1,285 @@
+#!/usr/bin/env bash
+# SPDX-License-Identifier: GPL-3.0-or-later
+# SPDX-FileCopyrightText: 2026 Project Tick
+#
+# MeshMC Bootstrap Script
+# Detects distro, installs dependencies, and sets up lefthook.
+
+set -euo pipefail
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+CYAN='\033[0;36m'
+NC='\033[0m'
+
+info()  { printf "${CYAN}[INFO]${NC}  %s\n" "$*"; }
+ok()    { printf "${GREEN}[ OK ]${NC}  %s\n" "$*"; }
+warn()  { printf "${YELLOW}[WARN]${NC}  %s\n" "$*"; }
+err()   { printf "${RED}[ERR]${NC}  %s\n" "$*" >&2; }
+
+detect_distro() {
+    case "$(uname -s)" in
+        Darwin)
+            DISTRO="macos"
+            DISTRO_ID="macos"
+            ok "Detected platform: macOS"
+            return
+            ;;
+        Linux) ;;
+        *)
+            err "Unsupported OS: $(uname -s)"
+            exit 1
+            ;;
+    esac
+
+    if [ -f /etc/os-release ]; then
+        . /etc/os-release
+        DISTRO_ID="${ID:-unknown}"
+        DISTRO_ID_LIKE="${ID_LIKE:-}"
+    else
+        err "Cannot detect distribution (/etc/os-release not found)."
+        exit 1
+    fi
+
+    case "$DISTRO_ID" in
+        debian)              DISTRO="debian"  ;;
+        ubuntu|linuxmint|pop) DISTRO="ubuntu"  ;;
+        fedora)              DISTRO="fedora"  ;;
+        rhel|centos|rocky|alma) DISTRO="rhel" ;;
+        opensuse*|sles)      DISTRO="suse"    ;;
+        arch|manjaro|endeavouros) DISTRO="arch" ;;
+        *)
+            # Fallback: check ID_LIKE
+            case "$DISTRO_ID_LIKE" in
+                *debian*|*ubuntu*) DISTRO="ubuntu" ;;
+                *fedora*|*rhel*)   DISTRO="fedora" ;;
+                *suse*)            DISTRO="suse"   ;;
+                *arch*)            DISTRO="arch"   ;;
+                *)
+                    err "Unsupported distribution: $DISTRO_ID"
+                    err "Supported: Debian, Ubuntu, Fedora, RHEL, SUSE, Arch, macOS"
+                    exit 1
+                    ;;
+            esac
+            ;;
+    esac
+
+    ok "Detected distribution: $DISTRO (${DISTRO_ID})"
+}
+
+MISSING_DEPS=()
+
+check_cmd() {
+    local name="$1"
+    local cmd="$2"
+    if command -v "$cmd" &>/dev/null; then
+        ok "$name is installed ($(command -v "$cmd"))"
+    else
+        warn "$name is NOT installed"
+        MISSING_DEPS+=("$name")
+    fi
+}
+
+check_lib() {
+    local name="$1"
+    local pkg_name="$2"
+    if pkg-config --exists "$pkg_name" 2>/dev/null; then
+        ok "$name found via pkg-config"
+    else
+        warn "$name is NOT found"
+        MISSING_DEPS+=("$name")
+    fi
+}
+
+check_dependencies() {
+    info "Checking dependencies..."
+    echo
+
+    check_cmd "npm"       "npm"
+    check_cmd "Go"        "go"
+    check_cmd "lefthook"  "lefthook"
+    check_cmd "reuse"     "reuse"
+    check_lib "Qt6"       "Qt6Core"
+    check_lib "QuaZip"    "quazip1-qt6"
+    check_lib "zlib"      "zlib"
+    check_lib "ECM"       "ECM"
+    echo
+}
+
+install_debian_ubuntu() {
+    info "Installing packages via apt..."
+    sudo apt-get update -qq
+    sudo apt-get install -y \
+        npm \
+        golang \
+        qt6-base-dev \
+        libquazip1-qt6-dev \
+        zlib1g-dev \
+        extra-cmake-modules \
+        pkg-config \
+        reuse
+}
+
+install_fedora() {
+    info "Installing packages via dnf..."
+    sudo dnf install -y \
+        npm \
+        golang \
+        qt6-qtbase-devel \
+        quazip-qt6-devel \
+        zlib-devel \
+        extra-cmake-modules \
+        pkgconf \
+        reuse
+}
+
+install_rhel() {
+    info "Installing packages via dnf..."
+    sudo dnf install -y epel-release || true
+    sudo dnf install -y \
+        npm \
+        golang \
+        qt6-qtbase-devel \
+        quazip-qt6-devel \
+        zlib-devel \
+        extra-cmake-modules \
+        pkgconf \
+        reuse
+}
+
+install_suse() {
+    info "Installing packages via zypper..."
+    sudo zypper install -y \
+        npm \
+        go \
+        qt6-base-devel \
+        quazip-qt6-devel \
+        zlib-devel \
+        extra-cmake-modules \
+        pkg-config \
+        python3-reuse
+}
+
+install_arch() {
+    info "Installing packages via pacman..."
+    sudo pacman -Sy --needed --noconfirm \
+        npm \
+        go \
+        qt6-base \
+        quazip-qt6 \
+        zlib \
+        extra-cmake-modules \
+        pkgconf \
+        reuse
+}
+
+install_macos() {
+    if ! command -v brew &>/dev/null; then
+        err "Homebrew is not installed. Install it from https://brew.sh"
+        exit 1
+    fi
+
+    info "Installing packages via Homebrew..."
+    brew install \
+        node \
+        go \
+        qt@6 \
+        quazip \
+        zlib \
+        extra-cmake-modules \
+        reuse \
+        lefthook
+}
+
+install_lefthook() {
+    if command -v lefthook &>/dev/null; then
+        return
+    fi
+
+    info "Installing lefthook via Go..."
+    go install github.com/evilmartians/lefthook@latest
+
+    export PATH="${GOPATH:-$HOME/go}/bin:$PATH"
+
+    if ! command -v lefthook &>/dev/null; then
+        err "lefthook installation failed. Please install it manually."
+        exit 1
+    fi
+    ok "lefthook installed successfully"
+}
+
+install_missing() {
+    if [ ${#MISSING_DEPS[@]} -eq 0 ]; then
+        ok "All dependencies are already installed!"
+        return
+    fi
+
+    info "Missing dependencies: ${MISSING_DEPS[*]}"
+    echo
+
+    case "$DISTRO" in
+        debian|ubuntu) install_debian_ubuntu ;;
+        fedora)        install_fedora        ;;
+        rhel)          install_rhel           ;;
+        suse)          install_suse           ;;
+        arch)          install_arch           ;;
+        macos)         install_macos          ;;
+    esac
+
+    install_lefthook
+
+    echo
+    ok "Package installation complete"
+}
+
+setup_lefthook() {
+    if [ ! -d ".git" ]; then
+        err "Not a git repository. Please run this script from the project root."
+        exit 1
+    fi
+
+    info "Setting up lefthook..."
+    lefthook install
+    ok "Lefthook hooks installed into .git/hooks"
+}
+
+init_submodules() {
+    if [ ! -d ".git" ]; then
+        err "Not a git repository. Please run this script from the project root."
+        exit 1
+    fi
+
+    info "Setting up submodules..."
+    git submodule update --init --recursive
+    ok "Submodules initialized"
+}
+
+main() {
+    echo
+    info "MeshMC Bootstrap"
+    echo "─────────────────────────────────────────────"
+    echo
+
+    init_submodules
+    echo
+
+    detect_distro
+    echo
+
+    check_dependencies
+
+    install_missing
+    echo
+
+    setup_lefthook
+    echo
+
+    echo "─────────────────────────────────────────────"
+    ok "Bootstrap successful! You're all set."
+    echo
+}
+
+cd "$(dirname "$(readlink -f "$0")")"
+
+main "$@"
diff --git a/flake.lock b/flake.lock
new file mode 100644
index 0000000000..55a204d6b5
--- /dev/null
+++ b/flake.lock
@@ -0,0 +1,24 @@
+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1775036866,
+        "narHash": "sha256-ByAX1LkhCwZ94+KnFAmnJSMAvui7kgCxjHgUHsWAbfI=",
+        "rev": "6201e203d09599479a3b3450ed24fa81537ebc4e",
+        "type": "tarball",
+        "url": "https://releases.nixos.org/nixos/unstable/nixos-26.05pre972949.6201e203d095/nixexprs.tar.xz"
+      },
+      "original": {
+        "type": "tarball",
+        "url": "https://channels.nixos.org/nixos-unstable/nixexprs.tar.xz"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
diff --git a/flake.nix b/flake.nix
new file mode 100644
index 0000000000..d510656840
--- /dev/null
+++ b/flake.nix
@@ -0,0 +1,78 @@
+{
+  description = " Project Tick is a project dedicated to providing developers with ease of use and users with long-lasting software.";
+
+  inputs = {
+    nixpkgs.url = "https://channels.nixos.org/nixos-unstable/nixexprs.tar.xz";
+  };
+
+  outputs =
+    {
+      self,
+      nixpkgs,
+    }:
+
+    let
+      inherit (nixpkgs) lib;
+
+      # While we only officially support aarch and x86_64 on Linux and MacOS,
+      # we expose a reasonable amount of other systems for users who want to
+      # build for most exotic platforms
+      systems = lib.systems.flakeExposed;
+
+      forAllSystems = lib.genAttrs systems;
+      nixpkgsFor = forAllSystems (system: nixpkgs.legacyPackages.${system});
+    in
+
+    {
+      devShells = forAllSystems (
+        system:
+
+        let
+          pkgs = nixpkgsFor.${system};
+          llvm = pkgs.llvmPackages_22;
+          python = pkgs.python3;
+          mkShell = pkgs.mkShell.override { inherit (llvm) stdenv; };
+
+          packages' = self.packages.${system};
+
+          welcomeMessage = ''
+            Welcome to Project Tick!
+          '';
+        in
+
+        {
+          default = mkShell {
+            name = "project-tick";
+
+            packages = [
+
+              (pkgs.stdenvNoCC.mkDerivation {
+                pname = "clang-tidy-diff";
+                inherit (llvm.clang) version;
+
+                nativeBuildInputs = [
+                  pkgs.installShellFiles
+                  python.pkgs.wrapPython
+                ];
+
+                dontUnpack = true;
+                dontConfigure = true;
+                dontBuild = true;
+
+                postInstall = "installBin ${llvm.libclang.python}/share/clang/clang-tidy-diff.py";
+                postFixup = "wrapPythonPrograms";
+              })
+            ];
+
+            shellHook = ''
+              git submodule update --init --force
+
+              echo ${lib.escapeShellArg welcomeMessage}
+            '';
+          };
+        }
+      );
+
+      formatter = forAllSystems (system: nixpkgsFor.${system}.nixfmt-rfc-style);
+    };
+}
diff --git a/lefthook.yml b/lefthook.yml
new file mode 100644
index 0000000000..f92640489b
--- /dev/null
+++ b/lefthook.yml
@@ -0,0 +1,37 @@
+# SPDX-License-Identifier: GPL-3.0-or-later
+# SPDX-FileCopyrightText: 2026 Project Tick
+#
+# MeshMC Lefthook Configuration
+# https://lefthook.dev/configuration/
+
+pre-commit:
+  jobs:
+    - name: reuse-lint
+      run: |
+        if ! reuse lint; then
+          echo "Downloading missing licenses..."
+          reuse download --all
+          git add LICENSES/
+          echo "Missing licenses downloaded and staged."
+          # Re-check after fix
+          reuse lint
+        fi
+
+    - name: checkpatch
+      run: |
+        git diff --cached -- '*.cpp' '*.h' '*.hpp' 'CMakeLists.txt' '*.cmake' | perl scripts/checkpatch.pl --diff --summary
+      skip:
+        - merge
+        - rebase
+
+pre-push:
+  jobs:
+    - name: reuse-lint
+      run: |
+        if ! reuse lint; then
+          echo "Downloading missing licenses..."
+          reuse download --all
+          git add LICENSES/
+          echo "Missing licenses downloaded and staged."
+          reuse lint
+        fi
diff --git a/meshmc/BUILD.md b/meshmc/BUILD.md
index d9058f7eb9..118324d2f8 100644
--- a/meshmc/BUILD.md
+++ b/meshmc/BUILD.md
@@ -36,7 +36,7 @@ and sets up lefthook git hooks.
 ### Linux / macOS
 
 ```bash
-./bootstrap.sh
+../bootstrap.sh
 ```
 
 Supported distributions: Debian, Ubuntu, Fedora, RHEL/CentOS, openSUSE, Arch Linux, macOS (via Homebrew).
@@ -44,7 +44,7 @@ Supported distributions: Debian, Ubuntu, Fedora, RHEL/CentOS, openSUSE, Arch Lin
 ### Windows
 
 ```cmd
-bootstrap.cmd
+..\bootstrap.cmd
 ```
 
 Uses [Scoop](https://scoop.sh) for CLI tools and [vcpkg](https://github.com/microsoft/vcpkg) for C/C++ libraries.
diff --git a/meshmc/CODE_OF_CONDUCT.md b/meshmc/CODE_OF_CONDUCT.md
deleted file mode 100644
index f3f877ff21..0000000000
--- a/meshmc/CODE_OF_CONDUCT.md
+++ /dev/null
@@ -1,118 +0,0 @@
-# Project Tick Code of Conduct
-
-## Version 2, 15 February 2026
-
-### 1. Purpose
-
-Project Tick is a free software infrastructure initiative committed to technical excellence, legal clarity, and long-term sustainability.
-
-This Code of Conduct defines the behavioral and ethical standards expected across all Project Tick spaces. Its purpose is to protect contributors, maintain the integrity of the ecosystem, and ensure the security and reliability of our infrastructure.
-
-Participation in Project Tick constitutes agreement to abide by this Code.
-
-### 2. Core Principles
-
-Project Tick operates according to the following foundational principles:
-
-- Respect for human dignity
-- Commitment to technical integrity
-- Strict adherence to licensing and attribution requirements
-- Protection of infrastructure security and supply-chain integrity
-- Good-faith collaboration
-
-These principles apply equally to maintainers, contributors, and participants.
-
-### 3. Expected Conduct
-
-All participants are expected to:
-
-1. Engage in respectful, constructive, and technically relevant discussion.
-2. Accept review, feedback, and architectural decisions professionally.
-3. Provide accurate attribution and comply fully with applicable licenses.
-4. Disclose conflicts of interest where relevant.
-5. Protect confidential or sensitive information.
-6. Act in ways that strengthen the reliability and long-term sustainability of the ecosystem.
-7. Respect differing technical or philosophical viewpoints without personal hostility.
-
-Criticism of ideas is encouraged. Personal attacks are not.
-
-### 4. Prohibited Conduct
-
-The following behaviors are considered violations of this Code of Conduct:
-
-#### 4.1 Personal and Social Misconduct
-
-- Harassment, intimidation, or threats
-- Discriminatory behavior based on identity or personal characteristics
-- Insulting, demeaning, or hostile personal attacks
-- Sexualized behavior inappropriate to a professional technical environment
-- Sharing private information without explicit consent
-
-#### 4.2 Technical and Legal Misconduct
-
-- Intentional submission of malicious code
-- Supply-chain compromise attempts
-- License violations or intentional misattribution
-- Plagiarism or failure to credit sources
-- False copyright claims
-- Impersonation of maintainers or other participants
-- Infrastructure abuse, including CI/CD exploitation or service disruption
-- Repeated bad-faith technical disruption
-
-Project maintainers reserve the right to determine whether conduct violates the spirit or intent of this Code.
-
-### 5. Scope
-
-This Code of Conduct applies to:
-
-- All Project Tick repositories
-- Mailing lists and communication channels
-- Issue trackers and merge requests
-- Continuous integration systems
-- Infrastructure services and hosting environments
-- Official Project Tick domains and email accounts
-- Public representation of the project
-
-Individuals representing Project Tick in any official capacity are expected to uphold this Code at all times.
-
-### 6. Reporting
-
-Violations may be reported confidentially to:
-
-conduct@projecttick.org
-
-Reports will be reviewed in a timely and objective manner. Confidentiality will be respected to the extent reasonably possible.
-
-Malicious or knowingly false reports may themselves constitute a violation.
-
-### 7. Enforcement
-
-Enforcement decisions are made by the Project Tick maintainers.
-
-Depending on severity, actions may include:
-
-1. Private warning
-2. Temporary communication restriction
-3. Temporary suspension of repository access
-4. Permanent removal of access to Project Tick spaces
-
-Serious security, infrastructure, or legal violations may result in immediate permanent removal.
-
-Enforcement decisions are final and are not subject to public vote.
-
-### 8. Remediation
-
-Where appropriate, resolution may involve:
-
-- Acknowledgment of harm
-- Corrective action or documentation
-- License compliance remediation
-- Demonstrated behavioral improvement
-
-Reinstatement after suspension is at the sole discretion of the maintainers.
-
-### 9. Independence
-
-This document was inspired by Contributor Covenant 3.0 but has been independently written and adapted to reflect the governance, infrastructure, and legal priorities of Project Tick.
-
-Project Tick maintains full authority over the interpretation and enforcement of this Code.
diff --git a/meshmc/README.md b/meshmc/README.md
index 87d86cc82c..b8ab5172e2 100644
--- a/meshmc/README.md
+++ b/meshmc/README.md
@@ -1,6 +1,6 @@
 MeshMC
 ======
-[![REUSE status](https://api.reuse.software/badge/github.com/Project-Tick/MeshMC)](https://api.reuse.software/info/github.com/Project-Tick/MeshMC) [![CLA assistant](https://cla-assistant.io/readme/badge/Project-Tick/MeshMC)](https://cla-assistant.io/Project-Tick/MeshMC) [![LICENSE](https://img.shields.io/badge/license-GPL--3.0--or--later-blue?logo=GNU)](https://www.gnu.org/licenses/gpl-3.0.html) [![Crowdin](https://badges.crowdin.net/projtlauncher/localized.svg)](https://crowdin.com/project/projtlauncher)
+[![LICENSE](https://img.shields.io/badge/license-GPL--3.0--or--later-blue?logo=GNU)](https://www.gnu.org/licenses/gpl-3.0.html) [![Crowdin](https://badges.crowdin.net/projtlauncher/localized.svg)](https://crowdin.com/project/projtlauncher)
 
 MeshMC is a custom launcher for Minecraft that focuses on predictability, long term stability and simplicity.
 
diff --git a/meshmc/bootstrap.cmd b/meshmc/bootstrap.cmd
deleted file mode 100644
index 9da8b46195..0000000000
--- a/meshmc/bootstrap.cmd
+++ /dev/null
@@ -1,196 +0,0 @@
-@echo off
-rem SPDX-License-Identifier: GPL-3.0-or-later
-rem SPDX-FileCopyrightText: 2026 Project Tick
-rem
-rem MeshMC Bootstrap Script (Windows)
-rem Checks dependencies, installs via vcpkg/scoop, and sets up lefthook.
-
-setlocal EnableDelayedExpansion
-
-cd /d "%~dp0"
-
-echo.
-echo [INFO]  MeshMC Bootstrap
-echo ---------------------------------------------
-echo.
-
-rem ── Submodules ──────────────────────────────────────────────────────────────
-if not exist ".git" (
-    echo [ERR]  Not a git repository. Please run this script from the project root. 1>&2
-    exit /b 1
-)
-
-echo [INFO]  Setting up submodules...
-git submodule update --init --recursive
-if errorlevel 1 (
-    echo [ERR]  Submodule initialization failed. 1>&2
-    exit /b 1
-)
-echo [ OK ]  Submodules initialized
-echo.
-
-rem ── Check for scoop ─────────────────────────────────────────────────────────
-set "HAS_SCOOP=0"
-where scoop >nul 2>&1 && set "HAS_SCOOP=1"
-
-if "%HAS_SCOOP%"=="0" (
-    echo [WARN]  Scoop is not installed.
-    echo [INFO]  Installing Scoop...
-    powershell -NoProfile -Command "Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope CurrentUser -Force; Invoke-RestMethod -Uri https://get.scoop.sh | Invoke-Expression"
-    if errorlevel 1 (
-        echo [ERR]  Scoop installation failed. Install manually from https://scoop.sh 1>&2
-        exit /b 1
-    )
-    rem Refresh PATH
-    set "PATH=%USERPROFILE%\scoop\shims;%PATH%"
-    echo [ OK ]  Scoop installed
-) else (
-    echo [ OK ]  Scoop is installed
-)
-echo.
-
-rem ── Check for vcpkg ─────────────────────────────────────────────────────────
-set "HAS_VCPKG=0"
-where vcpkg >nul 2>&1 && set "HAS_VCPKG=1"
-
-if "%HAS_VCPKG%"=="0" (
-    echo [WARN]  vcpkg is not installed.
-    echo [INFO]  You can install vcpkg via: scoop install vcpkg
-    echo [INFO]  Or clone from https://github.com/microsoft/vcpkg
-)
-echo.
-
-rem ── Dependency Checks ──────────────────────────────────────────────────────
-echo [INFO]  Checking dependencies...
-echo.
-
-set "MISSING="
-
-call :check_cmd npm npm
-call :check_cmd Go go
-call :check_cmd lefthook lefthook
-call :check_cmd reuse reuse
-call :check_cmd CMake cmake
-call :check_cmd Git git
-
-echo.
-
-rem ── Install Missing Dependencies via Scoop ─────────────────────────────────
-if not defined MISSING (
-    echo [ OK ]  All command-line dependencies are already installed!
-    goto :vcpkg_libs
-)
-
-echo [INFO]  Missing dependencies: %MISSING%
-echo [INFO]  Installing via Scoop...
-echo.
-
-rem Add extras bucket for some packages
-scoop bucket add extras >nul 2>&1
-scoop bucket add main >nul 2>&1
-
-echo !MISSING! | findstr /i "npm" >nul && (
-    echo [INFO]  Installing Node.js ^(includes npm^)...
-    scoop install nodejs
-)
-
-echo !MISSING! | findstr /i "Go" >nul && (
-    echo [INFO]  Installing Go...
-    scoop install go
-)
-
-echo !MISSING! | findstr /i "CMake" >nul && (
-    echo [INFO]  Installing CMake...
-    scoop install cmake
-)
-
-echo !MISSING! | findstr /i "reuse" >nul && (
-    echo [INFO]  Installing reuse via pip...
-    where pip >nul 2>&1 || scoop install python
-    pip install reuse
-)
-
-echo !MISSING! | findstr /i "lefthook" >nul && (
-    echo [INFO]  Installing lefthook...
-    where go >nul 2>&1 && (
-        go install github.com/evilmartians/lefthook@latest
-        set "PATH=%GOPATH%\bin;%USERPROFILE%\go\bin;%PATH%"
-    ) || (
-        scoop install lefthook
-    )
-)
-
-echo.
-echo [ OK ]  Package installation complete
-echo.
-
-rem ── vcpkg Libraries ─────────────────────────────────────────────────────────
-:vcpkg_libs
-where vcpkg >nul 2>&1
-if errorlevel 1 (
-    echo [WARN]  vcpkg not found. Skipping C/C++ library installation.
-    echo [WARN]  You will need to manually install: qt6, quazip, zlib, extra-cmake-modules
-    goto :setup_lefthook
-)
-
-echo [INFO]  Installing C/C++ libraries via vcpkg...
-
-set "VCPKG_TRIPLET=x64-windows"
-
-vcpkg install qt5-base:%VCPKG_TRIPLET% >nul 2>&1 || (
-    echo [INFO]  Installing Qt6...
-    vcpkg install qtbase:%VCPKG_TRIPLET%
-)
-
-echo [INFO]  Installing quazip...
-vcpkg install quazip:%VCPKG_TRIPLET%
-
-echo [INFO]  Installing zlib...
-vcpkg install zlib:%VCPKG_TRIPLET%
-
-echo [INFO]  Installing extra-cmake-modules...
-vcpkg install ecm:%VCPKG_TRIPLET%
-
-echo.
-echo [ OK ]  vcpkg libraries installed
-echo.
-
-rem ── Lefthook Setup ─────────────────────────────────────────────────────────
-:setup_lefthook
-where lefthook >nul 2>&1
-if errorlevel 1 (
-    echo [ERR]  lefthook is not available. Cannot set up git hooks. 1>&2
-    exit /b 1
-)
-
-echo [INFO]  Setting up lefthook...
-lefthook install
-if errorlevel 1 (
-    echo [ERR]  lefthook install failed. 1>&2
-    exit /b 1
-)
-echo [ OK ]  Lefthook hooks installed into .git\hooks
-echo.
-
-echo ---------------------------------------------
-echo [ OK ]  Bootstrap successful! You're all set.
-echo.
-
-endlocal
-exit /b 0
-
-rem ── Helper Functions ────────────────────────────────────────────────────────
-:check_cmd
-set "NAME=%~1"
-set "CMD=%~2"
-where %CMD% >nul 2>&1
-if errorlevel 1 (
-    echo [WARN]  %NAME% is NOT installed
-    set "MISSING=!MISSING! %NAME%"
-) else (
-    for /f "delims=" %%i in ('where %CMD%') do (
-        echo [ OK ]  %NAME% is installed ^(%%i^)
-        goto :eof
-    )
-)
-goto :eof
diff --git a/meshmc/bootstrap.sh b/meshmc/bootstrap.sh
deleted file mode 100755
index 3762deaa2e..0000000000
--- a/meshmc/bootstrap.sh
+++ /dev/null
@@ -1,285 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: GPL-3.0-or-later
-# SPDX-FileCopyrightText: 2026 Project Tick
-#
-# MeshMC Bootstrap Script
-# Detects distro, installs dependencies, and sets up lefthook.
-
-set -euo pipefail
-
-RED='\033[0;31m'
-GREEN='\033[0;32m'
-YELLOW='\033[1;33m'
-CYAN='\033[0;36m'
-NC='\033[0m'
-
-info()  { printf "${CYAN}[INFO]${NC}  %s\n" "$*"; }
-ok()    { printf "${GREEN}[ OK ]${NC}  %s\n" "$*"; }
-warn()  { printf "${YELLOW}[WARN]${NC}  %s\n" "$*"; }
-err()   { printf "${RED}[ERR]${NC}  %s\n" "$*" >&2; }
-
-detect_distro() {
-    case "$(uname -s)" in
-        Darwin)
-            DISTRO="macos"
-            DISTRO_ID="macos"
-            ok "Detected platform: macOS"
-            return
-            ;;
-        Linux) ;;
-        *)
-            err "Unsupported OS: $(uname -s)"
-            exit 1
-            ;;
-    esac
-
-    if [ -f /etc/os-release ]; then
-        . /etc/os-release
-        DISTRO_ID="${ID:-unknown}"
-        DISTRO_ID_LIKE="${ID_LIKE:-}"
-    else
-        err "Cannot detect distribution (/etc/os-release not found)."
-        exit 1
-    fi
-
-    case "$DISTRO_ID" in
-        debian)              DISTRO="debian"  ;;
-        ubuntu|linuxmint|pop) DISTRO="ubuntu"  ;;
-        fedora)              DISTRO="fedora"  ;;
-        rhel|centos|rocky|alma) DISTRO="rhel" ;;
-        opensuse*|sles)      DISTRO="suse"    ;;
-        arch|manjaro|endeavouros) DISTRO="arch" ;;
-        *)
-            # Fallback: check ID_LIKE
-            case "$DISTRO_ID_LIKE" in
-                *debian*|*ubuntu*) DISTRO="ubuntu" ;;
-                *fedora*|*rhel*)   DISTRO="fedora" ;;
-                *suse*)            DISTRO="suse"   ;;
-                *arch*)            DISTRO="arch"   ;;
-                *)
-                    err "Unsupported distribution: $DISTRO_ID"
-                    err "Supported: Debian, Ubuntu, Fedora, RHEL, SUSE, Arch, macOS"
-                    exit 1
-                    ;;
-            esac
-            ;;
-    esac
-
-    ok "Detected distribution: $DISTRO (${DISTRO_ID})"
-}
-
-MISSING_DEPS=()
-
-check_cmd() {
-    local name="$1"
-    local cmd="$2"
-    if command -v "$cmd" &>/dev/null; then
-        ok "$name is installed ($(command -v "$cmd"))"
-    else
-        warn "$name is NOT installed"
-        MISSING_DEPS+=("$name")
-    fi
-}
-
-check_lib() {
-    local name="$1"
-    local pkg_name="$2"
-    if pkg-config --exists "$pkg_name" 2>/dev/null; then
-        ok "$name found via pkg-config"
-    else
-        warn "$name is NOT found"
-        MISSING_DEPS+=("$name")
-    fi
-}
-
-check_dependencies() {
-    info "Checking dependencies..."
-    echo
-
-    check_cmd "npm"       "npm"
-    check_cmd "Go"        "go"
-    check_cmd "lefthook"  "lefthook"
-    check_cmd "reuse"     "reuse"
-    check_lib "Qt6"       "Qt6Core"
-    check_lib "QuaZip"    "quazip1-qt6"
-    check_lib "zlib"      "zlib"
-    check_lib "ECM"       "ECM"
-    echo
-}
-
-install_debian_ubuntu() {
-    info "Installing packages via apt..."
-    sudo apt-get update -qq
-    sudo apt-get install -y \
-        npm \
-        golang \
-        qt6-base-dev \
-        libquazip1-qt6-dev \
-        zlib1g-dev \
-        extra-cmake-modules \
-        pkg-config \
-        reuse
-}
-
-install_fedora() {
-    info "Installing packages via dnf..."
-    sudo dnf install -y \
-        npm \
-        golang \
-        qt6-qtbase-devel \
-        quazip-qt6-devel \
-        zlib-devel \
-        extra-cmake-modules \
-        pkgconf \
-        reuse
-}
-
-install_rhel() {
-    info "Installing packages via dnf..."
-    sudo dnf install -y epel-release || true
-    sudo dnf install -y \
-        npm \
-        golang \
-        qt6-qtbase-devel \
-        quazip-qt6-devel \
-        zlib-devel \
-        extra-cmake-modules \
-        pkgconf \
-        reuse
-}
-
-install_suse() {
-    info "Installing packages via zypper..."
-    sudo zypper install -y \
-        npm \
-        go \
-        qt6-base-devel \
-        quazip-qt6-devel \
-        zlib-devel \
-        extra-cmake-modules \
-        pkg-config \
-        python3-reuse
-}
-
-install_arch() {
-    info "Installing packages via pacman..."
-    sudo pacman -Sy --needed --noconfirm \
-        npm \
-        go \
-        qt6-base \
-        quazip-qt6 \
-        zlib \
-        extra-cmake-modules \
-        pkgconf \
-        reuse
-}
-
-install_macos() {
-    if ! command -v brew &>/dev/null; then
-        err "Homebrew is not installed. Install it from https://brew.sh"
-        exit 1
-    fi
-
-    info "Installing packages via Homebrew..."
-    brew install \
-        node \
-        go \
-        qt@6 \
-        quazip \
-        zlib \
-        extra-cmake-modules \
-        reuse \
-        lefthook
-}
-
-install_lefthook() {
-    if command -v lefthook &>/dev/null; then
-        return
-    fi
-
-    info "Installing lefthook via Go..."
-    go install github.com/evilmartians/lefthook@latest
-
-    export PATH="${GOPATH:-$HOME/go}/bin:$PATH"
-
-    if ! command -v lefthook &>/dev/null; then
-        err "lefthook installation failed. Please install it manually."
-        exit 1
-    fi
-    ok "lefthook installed successfully"
-}
-
-install_missing() {
-    if [ ${#MISSING_DEPS[@]} -eq 0 ]; then
-        ok "All dependencies are already installed!"
-        return
-    fi
-
-    info "Missing dependencies: ${MISSING_DEPS[*]}"
-    echo
-
-    case "$DISTRO" in
-        debian|ubuntu) install_debian_ubuntu ;;
-        fedora)        install_fedora        ;;
-        rhel)          install_rhel           ;;
-        suse)          install_suse           ;;
-        arch)          install_arch           ;;
-        macos)         install_macos          ;;
-    esac
-
-    install_lefthook
-
-    echo
-    ok "Package installation complete"
-}
-
-setup_lefthook() {
-    if [ ! -d ".git" ]; then
-        err "Not a git repository. Please run this script from the project root."
-        exit 1
-    fi
-
-    info "Setting up lefthook..."
-    lefthook install
-    ok "Lefthook hooks installed into .git/hooks"
-}
-
-init_submodules() {
-    if [ ! -d ".git" ]; then
-        err "Not a git repository. Please run this script from the project root."
-        exit 1
-    fi
-
-    info "Setting up submodules..."
-    git submodule update --init --recursive
-    ok "Submodules initialized"
-}
-
-main() {
-    echo
-    info "MeshMC Bootstrap"
-    echo "─────────────────────────────────────────────"
-    echo
-
-    init_submodules
-    echo
-
-    detect_distro
-    echo
-
-    check_dependencies
-
-    install_missing
-    echo
-
-    setup_lefthook
-    echo
-
-    echo "─────────────────────────────────────────────"
-    ok "Bootstrap successful! You're all set."
-    echo
-}
-
-cd "$(dirname "$(readlink -f "$0")")"
-
-main "$@"
diff --git a/meshmc/lefthook.yml b/meshmc/lefthook.yml
deleted file mode 100644
index f92640489b..0000000000
--- a/meshmc/lefthook.yml
+++ /dev/null
@@ -1,37 +0,0 @@
-# SPDX-License-Identifier: GPL-3.0-or-later
-# SPDX-FileCopyrightText: 2026 Project Tick
-#
-# MeshMC Lefthook Configuration
-# https://lefthook.dev/configuration/
-
-pre-commit:
-  jobs:
-    - name: reuse-lint
-      run: |
-        if ! reuse lint; then
-          echo "Downloading missing licenses..."
-          reuse download --all
-          git add LICENSES/
-          echo "Missing licenses downloaded and staged."
-          # Re-check after fix
-          reuse lint
-        fi
-
-    - name: checkpatch
-      run: |
-        git diff --cached -- '*.cpp' '*.h' '*.hpp' 'CMakeLists.txt' '*.cmake' | perl scripts/checkpatch.pl --diff --summary
-      skip:
-        - merge
-        - rebase
-
-pre-push:
-  jobs:
-    - name: reuse-lint
-      run: |
-        if ! reuse lint; then
-          echo "Downloading missing licenses..."
-          reuse download --all
-          git add LICENSES/
-          echo "Missing licenses downloaded and staged."
-          reuse lint
-        fi
diff --git a/ofborg/.env.example b/ofborg/.env.example
new file mode 100644
index 0000000000..81b01b4b68
--- /dev/null
+++ b/ofborg/.env.example
@@ -0,0 +1,4 @@
+# Aşağıdakileri doldur
+GITHUB_APP_ID=
+GITHUB_WEBHOOK_SECRET=
+RABBITMQ_PASSWORD=changeme
diff --git a/ofborg/config.production.json b/ofborg/config.production.json
new file mode 100644
index 0000000000..3dc45cd943
--- /dev/null
+++ b/ofborg/config.production.json
@@ -0,0 +1,101 @@
+{
+    "runner": {
+        "identity": "mail-tickborg-1",
+        "repos": ["project-tick/Project-Tick"],
+        "trusted_users": ["AhmetSamet06"]
+    },
+    "checkout": {
+        "root": "/var/lib/tickborg/checkout"
+    },
+    "build": {
+        "system": "x86_64-linux",
+        "build_timeout_seconds": 1800
+    },
+    "github_app": {
+        "app_id": 0,
+        "private_key": "/etc/tickborg/github-private-key.pem",
+        "oauth_client_id": "GITHUB_APP_CLIENT_ID",
+        "oauth_client_secret_file": "/etc/tickborg/github-oauth-secret"
+    },
+    "github_webhook_receiver": {
+        "listen": "0.0.0.0:9899",
+        "webhook_secret_file": "/etc/tickborg/webhook-secret",
+        "rabbitmq": {
+            "ssl": false,
+            "host": "localhost",
+            "virtualhost": "/",
+            "username": "tickborg",
+            "password_file": "/etc/tickborg/rabbitmq-password"
+        }
+    },
+    "evaluation_filter": {
+        "rabbitmq": {
+            "ssl": false,
+            "host": "localhost",
+            "virtualhost": "/",
+            "username": "tickborg",
+            "password_file": "/etc/tickborg/rabbitmq-password"
+        }
+    },
+    "github_comment_filter": {
+        "rabbitmq": {
+            "ssl": false,
+            "host": "localhost",
+            "virtualhost": "/",
+            "username": "tickborg",
+            "password_file": "/etc/tickborg/rabbitmq-password"
+        }
+    },
+    "github_comment_poster": {
+        "rabbitmq": {
+            "ssl": false,
+            "host": "localhost",
+            "virtualhost": "/",
+            "username": "tickborg",
+            "password_file": "/etc/tickborg/rabbitmq-password"
+        }
+    },
+    "builder": {
+        "rabbitmq": {
+            "ssl": false,
+            "host": "localhost",
+            "virtualhost": "/",
+            "username": "tickborg",
+            "password_file": "/etc/tickborg/rabbitmq-password"
+        }
+    },
+    "push_filter": {
+        "rabbitmq": {
+            "ssl": false,
+            "host": "localhost",
+            "virtualhost": "/",
+            "username": "tickborg",
+            "password_file": "/etc/tickborg/rabbitmq-password"
+        },
+        "default_attrs": []
+    },
+    "log_message_collector": {
+        "rabbitmq": {
+            "ssl": false,
+            "host": "localhost",
+            "virtualhost": "/",
+            "username": "tickborg",
+            "password_file": "/etc/tickborg/rabbitmq-password"
+        },
+        "logs_path": "/var/log/tickborg"
+    },
+    "log_api_config": {
+        "listen": "127.0.0.1:9898",
+        "logs_path": "/var/log/tickborg",
+        "serve_root": "https://logs.tickborg.projecttick.net/logfile"
+    },
+    "stats": {
+        "rabbitmq": {
+            "ssl": false,
+            "host": "localhost",
+            "virtualhost": "/",
+            "username": "tickborg",
+            "password_file": "/etc/tickborg/rabbitmq-password"
+        }
+    }
+}
diff --git a/ofborg/example.config.json b/ofborg/example.config.json
index 0344d169ea..420ae5efdd 100644
--- a/ofborg/example.config.json
+++ b/ofborg/example.config.json
@@ -13,7 +13,7 @@
     },
     "rabbitmq": {
         "ssl": true,
-        "host": "events.tickborg.project-tick.net",
+        "host": "events.tickborg.projecttick.net",
         "virtualhost": "tickborg",
         "username": "...",
         "password": "..."
diff --git a/ofborg/tickborg/src/bin/build-faker.rs b/ofborg/tickborg/src/bin/build-faker.rs
index df8fcbfa50..086e96493d 100644
--- a/ofborg/tickborg/src/bin/build-faker.rs
+++ b/ofborg/tickborg/src/bin/build-faker.rs
@@ -42,6 +42,7 @@ async fn main() -> Result<(), Box<dyn Error>> {
         logs: Some((Some("logs".to_owned()), Some(logbackrk.to_lowercase()))),
         statusreport: Some((None, Some("scratch".to_owned()))),
         request_id: "bogus-request-id".to_owned(),
+        push: None,
     };
 
     {
diff --git a/ofborg/tickborg/src/bin/github-webhook-receiver.rs b/ofborg/tickborg/src/bin/github-webhook-receiver.rs
index 910cd4b350..60698a5019 100644
--- a/ofborg/tickborg/src/bin/github-webhook-receiver.rs
+++ b/ofborg/tickborg/src/bin/github-webhook-receiver.rs
@@ -87,6 +87,24 @@ async fn setup_amqp(chan: &mut Channel) -> Result<(), Box<dyn Error + Send + Syn
         no_wait: false,
     })
     .await?;
+
+    let queue_name = String::from("push-build-inputs");
+    chan.declare_queue(easyamqp::QueueConfig {
+        queue: queue_name.clone(),
+        passive: false,
+        durable: true,
+        exclusive: false,
+        auto_delete: false,
+        no_wait: false,
+    })
+    .await?;
+    chan.bind_queue(easyamqp::BindQueueConfig {
+        queue: queue_name.clone(),
+        exchange: "github-events".to_owned(),
+        routing_key: Some(String::from("push.*")),
+        no_wait: false,
+    })
+    .await?;
     Ok(())
 }
 
diff --git a/ofborg/tickborg/src/bin/push-filter.rs b/ofborg/tickborg/src/bin/push-filter.rs
new file mode 100644
index 0000000000..81d1597e0f
--- /dev/null
+++ b/ofborg/tickborg/src/bin/push-filter.rs
@@ -0,0 +1,105 @@
+use std::env;
+use std::error::Error;
+
+use tracing::{error, info};
+
+use tickborg::config;
+use tickborg::easyamqp::{self, ChannelExt, ConsumerExt};
+use tickborg::easylapin;
+use tickborg::tasks;
+
+#[tokio::main]
+async fn main() -> Result<(), Box<dyn Error>> {
+    tickborg::setup_log();
+
+    let arg = env::args()
+        .nth(1)
+        .unwrap_or_else(|| panic!("usage: {} <config>", std::env::args().next().unwrap()));
+    let cfg = config::load(arg.as_ref());
+
+    let Some(filter_cfg) = config::load(arg.as_ref()).push_filter else {
+        error!("No push filter configuration found!");
+        panic!();
+    };
+
+    let conn = easylapin::from_config(&filter_cfg.rabbitmq).await?;
+    let mut chan = conn.create_channel().await?;
+
+    chan.declare_exchange(easyamqp::ExchangeConfig {
+        exchange: "github-events".to_owned(),
+        exchange_type: easyamqp::ExchangeType::Topic,
+        passive: false,
+        durable: true,
+        auto_delete: false,
+        no_wait: false,
+        internal: false,
+    })
+    .await?;
+
+    // Declare the build-jobs exchange (fanout) that the builder consumes from
+    chan.declare_exchange(easyamqp::ExchangeConfig {
+        exchange: "build-jobs".to_owned(),
+        exchange_type: easyamqp::ExchangeType::Fanout,
+        passive: false,
+        durable: true,
+        auto_delete: false,
+        no_wait: false,
+        internal: false,
+    })
+    .await?;
+
+    // Declare the build-results exchange for the comment poster
+    chan.declare_exchange(easyamqp::ExchangeConfig {
+        exchange: "build-results".to_owned(),
+        exchange_type: easyamqp::ExchangeType::Fanout,
+        passive: false,
+        durable: true,
+        auto_delete: false,
+        no_wait: false,
+        internal: false,
+    })
+    .await?;
+
+    let queue_name = String::from("push-build-inputs");
+    chan.declare_queue(easyamqp::QueueConfig {
+        queue: queue_name.clone(),
+        passive: false,
+        durable: true,
+        exclusive: false,
+        auto_delete: false,
+        no_wait: false,
+    })
+    .await?;
+
+    chan.bind_queue(easyamqp::BindQueueConfig {
+        queue: queue_name.clone(),
+        exchange: "github-events".to_owned(),
+        routing_key: Some("push.*".to_owned()),
+        no_wait: false,
+    })
+    .await?;
+
+    let handle = easylapin::WorkerChannel(chan)
+        .consume(
+            tasks::pushfilter::PushFilterWorker::new(
+                cfg.acl(),
+                filter_cfg.default_attrs,
+            ),
+            easyamqp::ConsumeConfig {
+                queue: queue_name.clone(),
+                consumer_tag: format!("{}-push-filter", cfg.whoami()),
+                no_local: false,
+                no_ack: false,
+                no_wait: false,
+                exclusive: false,
+            },
+        )
+        .await?;
+
+    info!("Fetching push events from {}", &queue_name);
+    handle.await;
+
+    drop(conn); // Close connection.
+    info!("Closed the session... EOF");
+    Ok(())
+}
diff --git a/ofborg/tickborg/src/config.rs b/ofborg/tickborg/src/config.rs
index 7d7475e3b6..623b9f5e9a 100644
--- a/ofborg/tickborg/src/config.rs
+++ b/ofborg/tickborg/src/config.rs
@@ -30,6 +30,8 @@ pub struct Config {
     pub mass_rebuilder: Option<MassRebuilder>,
     /// Configuration for the builder
     pub builder: Option<Builder>,
+    /// Configuration for the push filter
+    pub push_filter: Option<PushFilter>,
     /// Configuration for the log message collector
     pub log_message_collector: Option<LogMessageCollector>,
     /// Configuration for the stats server
@@ -57,7 +59,7 @@ fn default_logs_path() -> String {
 }
 
 fn default_serve_root() -> String {
-    "https://logs.tickborg.project-tick.net/logfile".into()
+    "https://logs.tickborg.projecttick.net/logfile".into()
 }
 
 /// Configuration for logapi
@@ -112,6 +114,18 @@ pub struct Builder {
     pub rabbitmq: RabbitMqConfig,
 }
 
+/// Configuration for the push filter
+#[derive(serde::Serialize, serde::Deserialize, Debug)]
+#[serde(deny_unknown_fields)]
+pub struct PushFilter {
+    /// RabbitMQ broker to connect to
+    pub rabbitmq: RabbitMqConfig,
+    /// Default projects/attrs to build when no changed projects are detected.
+    /// If empty and no projects detected, push builds are skipped.
+    #[serde(default)]
+    pub default_attrs: Vec<String>,
+}
+
 /// Configuration for the log message collector
 #[derive(serde::Serialize, serde::Deserialize, Debug)]
 #[serde(deny_unknown_fields)]
diff --git a/ofborg/tickborg/src/ghevent/mod.rs b/ofborg/tickborg/src/ghevent/mod.rs
index 243758800a..06d67acef6 100644
--- a/ofborg/tickborg/src/ghevent/mod.rs
+++ b/ofborg/tickborg/src/ghevent/mod.rs
@@ -1,9 +1,11 @@
 mod common;
 mod issuecomment;
 mod pullrequestevent;
+mod pushevent;
 
 pub use self::common::{Comment, GenericWebhook, Issue, Repository, User};
 pub use self::issuecomment::{IssueComment, IssueCommentAction};
 pub use self::pullrequestevent::{
     PullRequest, PullRequestAction, PullRequestEvent, PullRequestState,
 };
+pub use self::pushevent::{HeadCommit, PushEvent, Pusher};
diff --git a/ofborg/tickborg/src/ghevent/pushevent.rs b/ofborg/tickborg/src/ghevent/pushevent.rs
new file mode 100644
index 0000000000..9ae45ad9ae
--- /dev/null
+++ b/ofborg/tickborg/src/ghevent/pushevent.rs
@@ -0,0 +1,53 @@
+use crate::ghevent::Repository;
+
+#[derive(serde::Serialize, serde::Deserialize, Debug)]
+pub struct PushEvent {
+    #[serde(rename = "ref")]
+    pub git_ref: String,
+    pub before: String,
+    pub after: String,
+    pub created: bool,
+    pub deleted: bool,
+    pub forced: bool,
+    pub repository: Repository,
+    pub pusher: Pusher,
+    pub head_commit: Option<HeadCommit>,
+}
+
+#[derive(serde::Serialize, serde::Deserialize, Debug)]
+pub struct Pusher {
+    pub name: String,
+    pub email: Option<String>,
+}
+
+#[derive(serde::Serialize, serde::Deserialize, Debug)]
+pub struct HeadCommit {
+    pub id: String,
+    pub message: String,
+    pub timestamp: String,
+    pub added: Option<Vec<String>>,
+    pub removed: Option<Vec<String>>,
+    pub modified: Option<Vec<String>>,
+}
+
+impl PushEvent {
+    /// Branch adını döndürür (refs/heads/main -> main)
+    pub fn branch(&self) -> Option<&str> {
+        self.git_ref.strip_prefix("refs/heads/")
+    }
+
+    /// Tag push mi?
+    pub fn is_tag(&self) -> bool {
+        self.git_ref.starts_with("refs/tags/")
+    }
+
+    /// Branch silme event'i mi?
+    pub fn is_delete(&self) -> bool {
+        self.deleted
+    }
+
+    /// Boş commit (000...) mi?
+    pub fn is_zero_sha(&self) -> bool {
+        self.after.chars().all(|c| c == '0')
+    }
+}
diff --git a/ofborg/tickborg/src/message/buildjob.rs b/ofborg/tickborg/src/message/buildjob.rs
index b09eae58bf..c4cc61d1fa 100644
--- a/ofborg/tickborg/src/message/buildjob.rs
+++ b/ofborg/tickborg/src/message/buildjob.rs
@@ -1,5 +1,5 @@
 use crate::commentparser::Subset;
-use crate::message::{Pr, Repo};
+use crate::message::{Pr, PushTrigger, Repo};
 
 #[derive(serde::Serialize, serde::Deserialize, Debug)]
 pub struct BuildJob {
@@ -10,6 +10,9 @@ pub struct BuildJob {
     pub request_id: String,
     pub logs: Option<ExchangeQueue>, // (Exchange, Routing Key)
     pub statusreport: Option<ExchangeQueue>, // (Exchange, Routing Key)
+    /// If set, this build was triggered by a push event, not a PR.
+    #[serde(default, skip_serializing_if = "Option::is_none")]
+    pub push: Option<PushTrigger>,
 }
 
 #[derive(serde::Serialize, serde::Deserialize, Debug)]
@@ -42,8 +45,47 @@ impl BuildJob {
             logs: Some(logs.unwrap_or((Some("logs".to_owned()), Some(logbackrk)))),
             statusreport: Some(statusreport.unwrap_or((Some("build-results".to_owned()), None))),
             request_id,
+            push: None,
         }
     }
+
+    /// Create a build job triggered by a push event.
+    pub fn new_push(
+        repo: Repo,
+        push: PushTrigger,
+        attrs: Vec<String>,
+        request_id: String,
+    ) -> BuildJob {
+        let logbackrk = format!(
+            "{}.push.{}",
+            repo.full_name.to_lowercase(),
+            push.branch.replace('/', "-")
+        );
+
+        // Fill pr with push info so downstream consumers (comment poster, etc.)
+        // can still use pr.head_sha for commit statuses / check runs.
+        let pr = Pr {
+            number: 0,
+            head_sha: push.head_sha.clone(),
+            target_branch: Some(push.branch.clone()),
+        };
+
+        BuildJob {
+            repo,
+            pr,
+            subset: None,
+            attrs,
+            logs: Some((Some("logs".to_owned()), Some(logbackrk))),
+            statusreport: Some((Some("build-results".to_owned()), None)),
+            request_id,
+            push: Some(push),
+        }
+    }
+
+    /// Returns true if this build was triggered by a push event.
+    pub fn is_push(&self) -> bool {
+        self.push.is_some()
+    }
 }
 
 pub fn from(data: &[u8]) -> Result<BuildJob, serde_json::error::Error> {
diff --git a/ofborg/tickborg/src/message/buildresult.rs b/ofborg/tickborg/src/message/buildresult.rs
index 122edacae3..de482f64da 100644
--- a/ofborg/tickborg/src/message/buildresult.rs
+++ b/ofborg/tickborg/src/message/buildresult.rs
@@ -1,4 +1,4 @@
-use crate::message::{Pr, Repo};
+use crate::message::{Pr, PushTrigger, Repo};
 
 use hubcaps::checks::Conclusion;
 
@@ -48,6 +48,7 @@ pub struct LegacyBuildResult {
     pub status: BuildStatus,
     pub skipped_attrs: Option<Vec<String>>,
     pub attempted_attrs: Option<Vec<String>>,
+    pub push: Option<PushTrigger>,
 }
 
 #[derive(serde::Serialize, serde::Deserialize, Debug)]
@@ -70,6 +71,8 @@ pub enum BuildResult {
         status: BuildStatus,
         skipped_attrs: Option<Vec<String>>,
         attempted_attrs: Option<Vec<String>>,
+        #[serde(default, skip_serializing_if = "Option::is_none")]
+        push: Option<PushTrigger>,
     },
     Legacy {
         repo: Repo,
@@ -82,6 +85,8 @@ pub enum BuildResult {
         status: Option<BuildStatus>,
         skipped_attrs: Option<Vec<String>>,
         attempted_attrs: Option<Vec<String>>,
+        #[serde(default, skip_serializing_if = "Option::is_none")]
+        push: Option<PushTrigger>,
     },
 }
 
@@ -100,6 +105,7 @@ impl BuildResult {
                 ref request_id,
                 ref attempted_attrs,
                 ref skipped_attrs,
+                ref push,
                 ..
             } => LegacyBuildResult {
                 repo: repo.to_owned(),
@@ -111,6 +117,7 @@ impl BuildResult {
                 status: self.status(),
                 attempted_attrs: attempted_attrs.to_owned(),
                 skipped_attrs: skipped_attrs.to_owned(),
+                push: push.to_owned(),
             },
             BuildResult::V1 {
                 ref repo,
@@ -121,6 +128,7 @@ impl BuildResult {
                 ref request_id,
                 ref attempted_attrs,
                 ref skipped_attrs,
+                ref push,
                 ..
             } => LegacyBuildResult {
                 repo: repo.to_owned(),
@@ -132,6 +140,7 @@ impl BuildResult {
                 status: self.status(),
                 attempted_attrs: attempted_attrs.to_owned(),
                 skipped_attrs: skipped_attrs.to_owned(),
+                push: push.to_owned(),
             },
         }
     }
@@ -143,6 +152,17 @@ impl BuildResult {
         }
     }
 
+    pub fn push(&self) -> Option<PushTrigger> {
+        match self {
+            BuildResult::Legacy { push, .. } => push.to_owned(),
+            BuildResult::V1 { push, .. } => push.to_owned(),
+        }
+    }
+
+    pub fn is_push(&self) -> bool {
+        self.push().is_some()
+    }
+
     pub fn status(&self) -> BuildStatus {
         match *self {
             BuildResult::Legacy {
diff --git a/ofborg/tickborg/src/message/common.rs b/ofborg/tickborg/src/message/common.rs
index c8fcd16ea2..75b5dec04f 100644
--- a/ofborg/tickborg/src/message/common.rs
+++ b/ofborg/tickborg/src/message/common.rs
@@ -6,9 +6,18 @@ pub struct Repo {
     pub clone_url: String,
 }
 
-#[derive(serde::Serialize, serde::Deserialize, Debug, Clone)]
+#[derive(serde::Serialize, serde::Deserialize, Debug, Clone, PartialEq, Eq)]
 pub struct Pr {
     pub target_branch: Option<String>,
     pub number: u64,
     pub head_sha: String,
 }
+
+/// Information about a push event trigger (direct push to a branch).
+#[derive(serde::Serialize, serde::Deserialize, Debug, Clone, PartialEq, Eq)]
+pub struct PushTrigger {
+    pub head_sha: String,
+    pub branch: String,
+    #[serde(default, skip_serializing_if = "Option::is_none")]
+    pub before_sha: Option<String>,
+}
diff --git a/ofborg/tickborg/src/message/mod.rs b/ofborg/tickborg/src/message/mod.rs
index 03551cd1ce..8621f45668 100644
--- a/ofborg/tickborg/src/message/mod.rs
+++ b/ofborg/tickborg/src/message/mod.rs
@@ -4,4 +4,4 @@ pub mod buildresult;
 mod common;
 pub mod evaluationjob;
 
-pub use self::common::{Pr, Repo};
+pub use self::common::{Pr, PushTrigger, Repo};
diff --git a/ofborg/tickborg/src/tasks/build.rs b/ofborg/tickborg/src/tasks/build.rs
index 56583b28b4..2bac6d749b 100644
--- a/ofborg/tickborg/src/tasks/build.rs
+++ b/ofborg/tickborg/src/tasks/build.rs
@@ -121,6 +121,7 @@ impl JobActions {
             attempted_attrs: None,
             skipped_attrs: None,
             status: BuildStatus::Failure,
+            push: self.job.push.clone(),
         };
 
         let result_exchange = self.result_exchange.clone();
@@ -209,6 +210,7 @@ impl JobActions {
             skipped_attrs: Some(not_attempted_attrs),
             attempted_attrs: None,
             status: BuildStatus::Skipped,
+            push: self.job.push.clone(),
         };
 
         let result_exchange = self.result_exchange.clone();
@@ -249,6 +251,7 @@ impl JobActions {
             status,
             attempted_attrs: Some(attempted_attrs),
             skipped_attrs: Some(not_attempted_attrs),
+            push: self.job.push.clone(),
         };
 
         let result_exchange = self.result_exchange.clone();
@@ -301,7 +304,12 @@ impl notifyworker::SimpleNotifyWorker for BuildWorker {
             dyn notifyworker::NotificationReceiver + std::marker::Send + std::marker::Sync,
         >,
     ) {
-        let span = debug_span!("job", pr = ?job.pr.number);
+        let is_push = job.is_push();
+        let span = if is_push {
+            debug_span!("job", push_branch = ?job.push.as_ref().map(|p| &p.branch), sha = %job.pr.head_sha)
+        } else {
+            debug_span!("job", pr = ?job.pr.number)
+        };
         let _enter = span.enter();
 
         let actions = self.actions(job, notifier);
@@ -312,10 +320,19 @@ impl notifyworker::SimpleNotifyWorker for BuildWorker {
             return;
         }
 
-        info!(
-            "Working on https://github.com/{}/pull/{}",
-            actions.job.repo.full_name, actions.job.pr.number
-        );
+        if is_push {
+            let push = actions.job.push.as_ref().unwrap();
+            info!(
+                "Working on push to {}:{} ({})",
+                actions.job.repo.full_name, push.branch, push.head_sha
+            );
+        } else {
+            info!(
+                "Working on https://github.com/{}/pull/{}",
+                actions.job.repo.full_name, actions.job.pr.number
+            );
+        }
+
         let project = self.cloner.project(
             &actions.job.repo.full_name,
             actions.job.repo.clone_url.clone(),
@@ -331,22 +348,38 @@ impl notifyworker::SimpleNotifyWorker for BuildWorker {
 
         let refpath = co.checkout_origin_ref(target_branch.as_ref()).unwrap();
 
-        if co.fetch_pr(actions.job.pr.number).is_err() {
-            info!("Failed to fetch {}", actions.job.pr.number);
-            actions.pr_head_missing().await;
-            return;
-        }
+        if is_push {
+            // For push builds: the commit is already on the branch, just verify it exists
+            if !co.commit_exists(actions.job.pr.head_sha.as_ref()) {
+                info!("Push commit {} doesn't exist after fetch", actions.job.pr.head_sha);
+                actions.commit_missing().await;
+                return;
+            }
+            // Checkout the exact pushed commit
+            if co.checkout_ref(actions.job.pr.head_sha.as_ref()).is_err() {
+                info!("Failed to checkout push commit {}", actions.job.pr.head_sha);
+                actions.merge_failed().await;
+                return;
+            }
+        } else {
+            // For PR builds: fetch PR ref, verify commit, merge
+            if co.fetch_pr(actions.job.pr.number).is_err() {
+                info!("Failed to fetch {}", actions.job.pr.number);
+                actions.pr_head_missing().await;
+                return;
+            }
 
-        if !co.commit_exists(actions.job.pr.head_sha.as_ref()) {
-            info!("Commit {} doesn't exist", actions.job.pr.head_sha);
-            actions.commit_missing().await;
-            return;
-        }
+            if !co.commit_exists(actions.job.pr.head_sha.as_ref()) {
+                info!("Commit {} doesn't exist", actions.job.pr.head_sha);
+                actions.commit_missing().await;
+                return;
+            }
 
-        if co.merge_commit(actions.job.pr.head_sha.as_ref()).is_err() {
-            info!("Failed to merge {}", actions.job.pr.head_sha);
-            actions.merge_failed().await;
-            return;
+            if co.merge_commit(actions.job.pr.head_sha.as_ref()).is_err() {
+                info!("Failed to merge {}", actions.job.pr.head_sha);
+                actions.merge_failed().await;
+                return;
+            }
         }
 
         // Determine which projects to build from the requested attrs
@@ -528,6 +561,7 @@ mod tests {
             logs: Some((Some(String::from("logs")), Some(String::from("build.log")))),
             statusreport: Some((Some(String::from("build-results")), None)),
             request_id: "bogus-request-id".to_owned(),
+            push: None,
         };
 
         let dummyreceiver = Arc::new(notifyworker::DummyNotificationReceiver::new());
@@ -574,6 +608,7 @@ mod tests {
             logs: Some((Some(String::from("logs")), Some(String::from("build.log")))),
             statusreport: Some((Some(String::from("build-results")), None)),
             request_id: "bogus-request-id".to_owned(),
+            push: None,
         };
 
         let dummyreceiver = Arc::new(notifyworker::DummyNotificationReceiver::new());
diff --git a/ofborg/tickborg/src/tasks/githubcommentposter.rs b/ofborg/tickborg/src/tasks/githubcommentposter.rs
index 70c4a118e4..2f49d7401b 100644
--- a/ofborg/tickborg/src/tasks/githubcommentposter.rs
+++ b/ofborg/tickborg/src/tasks/githubcommentposter.rs
@@ -71,7 +71,11 @@ impl worker::SimpleWorker for GitHubCommentPoster {
             }
         };
 
-        let span = debug_span!("job", pr = ?pr.number);
+        let span = if pr.number == 0 {
+            debug_span!("job", push_sha = %pr.head_sha)
+        } else {
+            debug_span!("job", pr = ?pr.number)
+        };
         let _enter = span.enter();
 
         for check in checks {
@@ -111,17 +115,40 @@ fn job_to_check(job: &BuildJob, architecture: &str, timestamp: DateTime<Utc>) ->
         all_attrs = vec![String::from("(unknown attributes)")];
     }
 
+    let details_key = if job.is_push() {
+        format!(
+            "push.{}",
+            job.push
+                .as_ref()
+                .map(|p| p.branch.replace('/', "-"))
+                .unwrap_or_default()
+        )
+    } else {
+        format!("{}", job.pr.number)
+    };
+
+    let name = if job.is_push() {
+        let branch = job
+            .push
+            .as_ref()
+            .map(|p| p.branch.as_str())
+            .unwrap_or("unknown");
+        format!("{} on {architecture} (push to {branch})", all_attrs.join(", "))
+    } else {
+        format!("{} on {architecture}", all_attrs.join(", "))
+    };
+
     CheckRunOptions {
-        name: format!("{} on {architecture}", all_attrs.join(", ")),
+        name,
         actions: None,
         completed_at: None,
         started_at: Some(timestamp.to_rfc3339_opts(chrono::SecondsFormat::Secs, true)),
         conclusion: None,
         details_url: Some(format!(
-            "https://logs.tickborg.project-tick.net/?key={}/{}.{}",
+            "https://logs.tickborg.projecttick.net/?key={}/{}.{}",
             &job.repo.owner.to_lowercase(),
             &job.repo.name.to_lowercase(),
-            job.pr.number,
+            details_key,
         )),
         external_id: None,
         head_sha: job.pr.head_sha.clone(),
@@ -180,17 +207,47 @@ fn result_to_check(result: &LegacyBuildResult, timestamp: DateTime<Utc>) -> Chec
         String::from("No partial log is available.")
     };
 
+    let is_push = result.push.is_some();
+
+    let details_key = if is_push {
+        format!(
+            "push.{}",
+            result
+                .push
+                .as_ref()
+                .map(|p| p.branch.replace('/', "-"))
+                .unwrap_or_default()
+        )
+    } else {
+        format!("{}", result.pr.number)
+    };
+
+    let name = if is_push {
+        let branch = result
+            .push
+            .as_ref()
+            .map(|p| p.branch.as_str())
+            .unwrap_or("unknown");
+        format!(
+            "{} on {} (push to {branch})",
+            all_attrs.join(", "),
+            result.system
+        )
+    } else {
+        format!("{} on {}", all_attrs.join(", "), result.system)
+    };
+
     CheckRunOptions {
-        name: format!("{} on {}", all_attrs.join(", "), result.system),
+        name,
         actions: None,
         completed_at: Some(timestamp.to_rfc3339_opts(chrono::SecondsFormat::Secs, true)),
         started_at: None,
         conclusion: Some(conclusion),
         details_url: Some(format!(
-            "https://logs.tickborg.project-tick.net/?key={}/{}.{}&attempt_id={}",
+            "https://logs.tickborg.projecttick.net/?key={}/{}.{}&attempt_id={}",
             &result.repo.owner.to_lowercase(),
             &result.repo.name.to_lowercase(),
-            result.pr.number,
+            details_key,
             result.attempt_id,
         )),
         external_id: Some(result.attempt_id.clone()),
@@ -244,6 +301,7 @@ mod tests {
 
             request_id: "bogus-request-id".to_owned(),
             attrs: vec!["foo".to_owned(), "bar".to_owned()],
+            push: None,
         };
 
         let timestamp = Utc.with_ymd_and_hms(2023, 4, 20, 13, 37, 42).unwrap();
@@ -256,7 +314,7 @@ mod tests {
                 completed_at: None,
                 status: Some(CheckRunState::Queued),
                 conclusion: None,
-                details_url: Some("https://logs.tickborg.project-tick.net/?key=project-tick/Project-Tick.2345".to_string()),
+                details_url: Some("https://logs.tickborg.projecttick.net/?key=project-tick/Project-Tick.2345".to_string()),
                 external_id: None,
                 head_sha: "abc123".to_string(),
                 output: None,
@@ -296,6 +354,7 @@ mod tests {
             attempted_attrs: Some(vec!["foo".to_owned()]),
             skipped_attrs: Some(vec!["bar".to_owned()]),
             status: BuildStatus::Success,
+            push: None,
         };
 
         let timestamp = Utc.with_ymd_and_hms(2023, 4, 20, 13, 37, 42).unwrap();
@@ -310,7 +369,7 @@ mod tests {
                 status: Some(CheckRunState::Completed),
                 conclusion: Some(Conclusion::Success),
                 details_url: Some(
-                    "https://logs.tickborg.project-tick.net/?key=project-tick/Project-Tick.2345&attempt_id=neatattemptid"
+                    "https://logs.tickborg.projecttick.net/?key=project-tick/Project-Tick.2345&attempt_id=neatattemptid"
                         .to_string()
                 ),
                 external_id: Some("neatattemptid".to_string()),
@@ -378,6 +437,7 @@ patching script interpreter paths in /nix/store/pcja75y9isdvgz5i00pkrpif9rxzxc29
             attempted_attrs: Some(vec!["foo".to_owned()]),
             skipped_attrs: None,
             status: BuildStatus::Failure,
+            push: None,
         };
 
         let timestamp = Utc.with_ymd_and_hms(2023, 4, 20, 13, 37, 42).unwrap();
@@ -392,7 +452,7 @@ patching script interpreter paths in /nix/store/pcja75y9isdvgz5i00pkrpif9rxzxc29
                 status: Some(CheckRunState::Completed),
                 conclusion: Some(Conclusion::Neutral),
                 details_url: Some(
-                    "https://logs.tickborg.project-tick.net/?key=project-tick/Project-Tick.2345&attempt_id=neatattemptid"
+                    "https://logs.tickborg.projecttick.net/?key=project-tick/Project-Tick.2345&attempt_id=neatattemptid"
                         .to_string()
                 ),
                 external_id: Some("neatattemptid".to_string()),
@@ -457,6 +517,7 @@ patching script interpreter paths in /nix/store/pcja75y9isdvgz5i00pkrpif9rxzxc29
             attempted_attrs: Some(vec!["foo".to_owned()]),
             skipped_attrs: None,
             status: BuildStatus::TimedOut,
+            push: None,
         };
 
         let timestamp = Utc.with_ymd_and_hms(2023, 4, 20, 13, 37, 42).unwrap();
@@ -471,7 +532,7 @@ patching script interpreter paths in /nix/store/pcja75y9isdvgz5i00pkrpif9rxzxc29
                 status: Some(CheckRunState::Completed),
                 conclusion: Some(Conclusion::Neutral),
                 details_url: Some(
-                    "https://logs.tickborg.project-tick.net/?key=project-tick/Project-Tick.2345&attempt_id=neatattemptid"
+                    "https://logs.tickborg.projecttick.net/?key=project-tick/Project-Tick.2345&attempt_id=neatattemptid"
                         .to_string()
                 ),
                 external_id: Some("neatattemptid".to_string()),
@@ -537,6 +598,7 @@ error: build of '/nix/store/l1limh50lx2cx45yb2gqpv7k8xl1mik2-gdb-8.1.drv' failed
             attempted_attrs: None,
             skipped_attrs: None,
             status: BuildStatus::Success,
+            push: None,
         };
 
         let timestamp = Utc.with_ymd_and_hms(2023, 4, 20, 13, 37, 42).unwrap();
@@ -551,7 +613,7 @@ error: build of '/nix/store/l1limh50lx2cx45yb2gqpv7k8xl1mik2-gdb-8.1.drv' failed
                 status: Some(CheckRunState::Completed),
                 conclusion: Some(Conclusion::Success),
                 details_url: Some(
-                    "https://logs.tickborg.project-tick.net/?key=project-tick/Project-Tick.2345&attempt_id=neatattemptid"
+                    "https://logs.tickborg.projecttick.net/?key=project-tick/Project-Tick.2345&attempt_id=neatattemptid"
                         .to_string()
                 ),
                 external_id: Some("neatattemptid".to_string()),
@@ -615,6 +677,7 @@ patching script interpreter paths in /nix/store/pcja75y9isdvgz5i00pkrpif9rxzxc29
             attempted_attrs: None,
             skipped_attrs: None,
             status: BuildStatus::Failure,
+            push: None,
         };
 
         let timestamp = Utc.with_ymd_and_hms(2023, 4, 20, 13, 37, 42).unwrap();
@@ -629,7 +692,7 @@ patching script interpreter paths in /nix/store/pcja75y9isdvgz5i00pkrpif9rxzxc29
                 status: Some(CheckRunState::Completed),
                 conclusion: Some(Conclusion::Neutral),
                 details_url: Some(
-                    "https://logs.tickborg.project-tick.net/?key=project-tick/Project-Tick.2345&attempt_id=neatattemptid"
+                    "https://logs.tickborg.projecttick.net/?key=project-tick/Project-Tick.2345&attempt_id=neatattemptid"
                         .to_string()
                 ),
                 external_id: Some("neatattemptid".to_string()),
@@ -682,6 +745,7 @@ patching script interpreter paths in /nix/store/pcja75y9isdvgz5i00pkrpif9rxzxc29
             attempted_attrs: None,
             skipped_attrs: Some(vec!["not-attempted".to_owned()]),
             status: BuildStatus::Skipped,
+            push: None,
         };
 
         let timestamp = Utc.with_ymd_and_hms(2023, 4, 20, 13, 37, 42).unwrap();
@@ -695,7 +759,7 @@ patching script interpreter paths in /nix/store/pcja75y9isdvgz5i00pkrpif9rxzxc29
                 completed_at: Some("2023-04-20T13:37:42Z".to_string()),
                 status: Some(CheckRunState::Completed),
                 conclusion: Some(Conclusion::Skipped),
-                details_url: Some("https://logs.tickborg.project-tick.net/?key=project-tick/Project-Tick.2345&attempt_id=neatattemptid".to_string()),
+                details_url: Some("https://logs.tickborg.projecttick.net/?key=project-tick/Project-Tick.2345&attempt_id=neatattemptid".to_string()),
                 external_id: Some("neatattemptid".to_string()),
                 head_sha: "abc123".to_string(),
                 output: Some(Output {
@@ -735,6 +799,7 @@ foo
             attempted_attrs: None,
             skipped_attrs: Some(vec!["not-attempted".to_owned()]),
             status: BuildStatus::Skipped,
+            push: None,
         };
 
         let timestamp = Utc.with_ymd_and_hms(2023, 4, 20, 13, 37, 42).unwrap();
@@ -748,7 +813,7 @@ foo
                 completed_at: Some("2023-04-20T13:37:42Z".to_string()),
                 status: Some(CheckRunState::Completed),
                 conclusion: Some(Conclusion::Skipped),
-                details_url: Some("https://logs.tickborg.project-tick.net/?key=project-tick/Project-Tick.2345&attempt_id=neatattemptid".to_string()),
+                details_url: Some("https://logs.tickborg.projecttick.net/?key=project-tick/Project-Tick.2345&attempt_id=neatattemptid".to_string()),
                 external_id: Some("neatattemptid".to_string()),
                 head_sha: "abc123".to_string(),
                 output: Some(Output {
diff --git a/ofborg/tickborg/src/tasks/log_message_collector.rs b/ofborg/tickborg/src/tasks/log_message_collector.rs
index 2d80f72f03..302445e2ff 100644
--- a/ofborg/tickborg/src/tasks/log_message_collector.rs
+++ b/ofborg/tickborg/src/tasks/log_message_collector.rs
@@ -215,7 +215,7 @@ impl worker::SimpleWorker for LogMessageCollector {
 
                 // Make sure the log content exists by opening its handle.
                 // This (hopefully) prevents builds that produce no output (for any reason) from
-                // having their logs.tickborg.project-tick.net link complaining about a 404.
+                // having their logs.tickborg.projecttick.net link complaining about a 404.
                 let _ = self.handle_for(&job.from).unwrap();
             }
             MsgType::Msg(ref message) => {
@@ -448,6 +448,7 @@ mod tests {
                             status: BuildStatus::Success,
                             attempted_attrs: Some(vec!["foo".to_owned()]),
                             skipped_attrs: Some(vec!["bar".to_owned()]),
+                            push: None,
                         }))
                     })
                     .await
diff --git a/ofborg/tickborg/src/tasks/mod.rs b/ofborg/tickborg/src/tasks/mod.rs
index 5aab0fa631..3bf701870d 100644
--- a/ofborg/tickborg/src/tasks/mod.rs
+++ b/ofborg/tickborg/src/tasks/mod.rs
@@ -5,4 +5,5 @@ pub mod evaluationfilter;
 pub mod githubcommentfilter;
 pub mod githubcommentposter;
 pub mod log_message_collector;
+pub mod pushfilter;
 pub mod statscollector;
diff --git a/ofborg/tickborg/src/tasks/pushfilter.rs b/ofborg/tickborg/src/tasks/pushfilter.rs
new file mode 100644
index 0000000000..8cf8d7a0ef
--- /dev/null
+++ b/ofborg/tickborg/src/tasks/pushfilter.rs
@@ -0,0 +1,165 @@
+use crate::acl;
+use crate::ghevent;
+use crate::message::buildjob;
+use crate::message::{PushTrigger, Repo};
+use crate::systems;
+use crate::worker;
+
+use tracing::{debug_span, info};
+use uuid::Uuid;
+
+pub struct PushFilterWorker {
+    acl: acl::Acl,
+    /// Default projects/attrs to build when push doesn't match any known project.
+    default_attrs: Vec<String>,
+}
+
+impl PushFilterWorker {
+    pub fn new(acl: acl::Acl, default_attrs: Vec<String>) -> PushFilterWorker {
+        PushFilterWorker {
+            acl,
+            default_attrs,
+        }
+    }
+}
+
+impl worker::SimpleWorker for PushFilterWorker {
+    type J = ghevent::PushEvent;
+
+    async fn msg_to_job(
+        &mut self,
+        _: &str,
+        _: &Option<String>,
+        body: &[u8],
+    ) -> Result<Self::J, String> {
+        match serde_json::from_slice(body) {
+            Ok(event) => Ok(event),
+            Err(err) => Err(format!(
+                "Failed to deserialize push event {err:?}: {:?}",
+                std::str::from_utf8(body).unwrap_or("<job not utf8>")
+            )),
+        }
+    }
+
+    async fn consumer(&mut self, job: &ghevent::PushEvent) -> worker::Actions {
+        let branch = job.branch().unwrap_or_default();
+        let span = debug_span!("push", branch = %branch, after = %job.after);
+        let _enter = span.enter();
+
+        if !self.acl.is_repo_eligible(&job.repository.full_name) {
+            info!("Repo not authorized ({})", job.repository.full_name);
+            return vec![worker::Action::Ack];
+        }
+
+        // Skip tag events
+        if job.is_tag() {
+            info!("Skipping tag push: {}", job.git_ref);
+            return vec![worker::Action::Ack];
+        }
+
+        // Skip branch deletion events
+        if job.is_delete() {
+            info!("Skipping branch delete: {}", job.git_ref);
+            return vec![worker::Action::Ack];
+        }
+
+        // Skip zero SHA (shouldn't happen for non-delete, but just in case)
+        if job.is_zero_sha() {
+            info!("Skipping zero SHA push");
+            return vec![worker::Action::Ack];
+        }
+
+        let branch_name = branch.to_string();
+        info!(
+            "Processing push to {}:{} ({})",
+            job.repository.full_name, branch_name, job.after
+        );
+
+        // Detect which projects changed from the push event's commit info
+        let changed_files: Vec<String> = if let Some(ref head) = job.head_commit {
+            let mut files = Vec::new();
+            if let Some(ref added) = head.added {
+                files.extend(added.iter().cloned());
+            }
+            if let Some(ref removed) = head.removed {
+                files.extend(removed.iter().cloned());
+            }
+            if let Some(ref modified) = head.modified {
+                files.extend(modified.iter().cloned());
+            }
+            files
+        } else {
+            Vec::new()
+        };
+
+        let attrs = if !changed_files.is_empty() {
+            let detected = crate::buildtool::detect_changed_projects(&changed_files);
+            if detected.is_empty() {
+                info!("No known projects changed in push, using defaults");
+                self.default_attrs.clone()
+            } else {
+                info!("Detected changed projects: {:?}", detected);
+                detected
+            }
+        } else {
+            info!("No file change info in push event, using defaults");
+            self.default_attrs.clone()
+        };
+
+        if attrs.is_empty() {
+            info!("No projects to build, skipping push");
+            return vec![worker::Action::Ack];
+        }
+
+        let repo_msg = Repo {
+            clone_url: job.repository.clone_url.clone(),
+            full_name: job.repository.full_name.clone(),
+            owner: job.repository.owner.login.clone(),
+            name: job.repository.name.clone(),
+        };
+
+        let push_trigger = PushTrigger {
+            head_sha: job.after.clone(),
+            branch: branch_name,
+            before_sha: Some(job.before.clone()),
+        };
+
+        let request_id = Uuid::new_v4().to_string();
+
+        let build_job = buildjob::BuildJob::new_push(
+            repo_msg.clone(),
+            push_trigger,
+            attrs.clone(),
+            request_id,
+        );
+
+        // Schedule the build on all known architectures
+        let build_archs = systems::System::primary_systems();
+        let mut response = vec![];
+
+        info!(
+            "Scheduling push build for {:?} on {:?}",
+            attrs, build_archs
+        );
+
+        for arch in &build_archs {
+            let (exchange, routingkey) = arch.as_build_destination();
+            response.push(worker::publish_serde_action(
+                exchange, routingkey, &build_job,
+            ));
+        }
+
+        // Also publish to build-results for the comment poster to pick up
+        response.push(worker::publish_serde_action(
+            Some("build-results".to_string()),
+            None,
+            &buildjob::QueuedBuildJobs {
+                job: build_job,
+                architectures: build_archs.iter().map(|a| a.to_string()).collect(),
+            },
+        ));
+
+        response.push(worker::Action::Ack);
+        response
+    }
+}
-- 
cgit 0.0.5-2-1-g0f52