commons/bot-agents
3
0
Fork 0
Code Issues Pull Requests Actions Releases 3 Activity

Centralize encrypted bot profiles #14

Merged
temeddix merged 1 commits from profiles-fallback into main 2026-09-23 20:15:30 +00:00
Conversation 1 Commits 1 Files Changed 27
+2218 -701
temeddix commented 2026-09-23 11:49:06 +00:00
Owner
Copy Link
Copy Source

Centralize ordered bot profiles and encrypted credentials in bot-agents.

  • Exposes one action input: master-key.
  • Uses Gitea’s automatic job token internally; dependent repositories provide no author/reviewer/profile inputs.
  • Keeps encrypted Claude and reviewer credentials in profiles.yml; tokenless Codex uses its persisted subscription login.
  • Falls back only on recognized quota exhaustion, with a distinct UID/home per profile and descendant cleanup before fallback.
  • Separates decryption, agent execution, and reviewer posting so privileged credentials never enter an agent process.
  • Installs obra/superpowers with the standard Skills CLI; removes custom discovery code.
  • Adds root-level isolation, rollback, symlink, fallback, posting, YAML, and self-workflow CI coverage.

Checks: formatting, lint, all entrypoint type checks, 35 tests as root, diff check, secret scan, and repository diagnostics.

Centralize ordered bot profiles and encrypted credentials in `bot-agents`. - Exposes one action input: `master-key`. - Uses Gitea’s automatic job token internally; dependent repositories provide no author/reviewer/profile inputs. - Keeps encrypted Claude and reviewer credentials in `profiles.yml`; tokenless Codex uses its persisted subscription login. - Falls back only on recognized quota exhaustion, with a distinct UID/home per profile and descendant cleanup before fallback. - Separates decryption, agent execution, and reviewer posting so privileged credentials never enter an agent process. - Installs `obra/superpowers` with the standard Skills CLI; removes custom discovery code. - Adds root-level isolation, rollback, symlink, fallback, posting, YAML, and self-workflow CI coverage. Checks: formatting, lint, all entrypoint type checks, 35 tests as root, diff check, secret scan, and repository diagnostics.
temeddix force-pushed profiles-fallback from e106d08bed to 449f00c736 2026-09-23 12:00:28 +00:00 Compare
temeddix force-pushed profiles-fallback from 449f00c736 to 80f3d922d1 2026-09-23 19:56:31 +00:00 Compare
temeddix changed title from Add ordered Claude and Codex profiles to Centralize encrypted bot profiles 2026-09-23 19:56:31 +00:00
temeddix force-pushed profiles-fallback from 80f3d922d1 to 7bae0d7237 2026-09-23 20:00:12 +00:00 Compare
temeddix force-pushed profiles-fallback from 7bae0d7237 to 85c6c505f4 2026-09-23 20:06:17 +00:00 Compare
temeddix added 1 commit 2026-09-23 20:09:31 +00:00
Centralize encrypted bot profiles
Check / deno (pull_request) Successful in 36s
Details
b068dc7698
temeddix force-pushed profiles-fallback from 85c6c505f4 to b068dc7698 2026-09-23 20:09:31 +00:00 Compare
temeddix commented 2026-09-23 20:14:45 +00:00
Author
Owner
Copy Link
Copy Source

@bot please review the current head, focusing on credential isolation, fallback boundaries, and action safety.

@bot please review the current head, focusing on credential isolation, fallback boundaries, and action safety.
temeddix merged commit e56ea246bf into main 2026-09-23 20:15:30 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
bot RaymondCho temeddix
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: commons/bot-agents#14
Delete Branch "profiles-fallback"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?