Block a user
Template ships a non-green baseline: missing go.sum + two errcheck lint bugs
repo_mirror_push: remote_password (a secret) is passed as a plain tool arg → lands in transcripts
repo_mirror_push: remote_password (a secret) is passed as a plain tool arg → lands in transcripts
Fixed in v0.7.1.
Added remote_password_env to repo_mirror_push: the name of a server-side env var the tool resolves at call time (os.Getenv), so the mirror credential **never appears in…
test: end-to-end mirror flow — repo_create + repo_mirror_push → GitHub
repo_mirror_push: remote_password (a secret) is passed as a plain tool arg → lands in transcripts
test: end-to-end mirror flow — repo_create + repo_mirror_push → GitHub
✅ Verified end-to-end 2026-07-04 with a valid repo-scoped PAT. The Gitea → GitHub push-mirror works.
What ran (all cleaned up):
repo_create→ Giteamathias/test-mirror-flow…
tbd_ship: idempotent re-invoke (resume an existing branch/PR) instead of colliding
Inject real build version via ldflags (main.version currently defaults to "dev")
tbd_ship: idempotent re-invoke (resume an existing branch/PR) instead of colliding
Done in v0.7.0.
tbd_ship is now idempotent / resumable:
CreateBranchconflict tolerated — a re-invoke on an existing branch resumes instead of erroring.- Existing PR reused — if…
Inject real build version via ldflags (main.version currently defaults to "dev")
Done in v0.6.1.
- Dockerfile:
ARG VERSION=dev+go build -ldflags="-s -w -X main.version=${VERSION}". - cd.yml build step: `--build-arg VERSION=<version-tag on v* builds, else short…
test: end-to-end mirror flow — repo_create + repo_mirror_push → GitHub
Parked for now — capturing prerequisites so this is ready to run later.
GitHub PAT scope needed
The PAT is the push credential for the Gitea → GitHub push-mirror (passed as `remote_passw…
feat: tbd_ship — intent-named trunk-based development tool (branch+PR+CI-gated auto-merge)
tbd_ship: idempotent re-invoke (resume an existing branch/PR) instead of colliding