mirror of
https://github.com/fabro-sh/fabro.git
synced 2026-08-28 05:27:41 +00:00
84b75f29f1
- Add `additional_repositories` to the RunIntegrationsGithubSettings OpenAPI schema and reuse the canonical Rust settings types through `with_replacement`, with type-identity witnesses and JSON parity tests for populated and empty repository sets. - Regenerate the TypeScript API client. - Document the feature in the GitHub integration and run-configuration guides: exact layer replacement rules, single-token scope, gh/API support, App-versus-PAT scope, the same-owner/same-installation requirement, validation errors, supported Git URL forms, hard-failure semantics for declared repositories, GH_TOKEN precedence, and the security boundary (no second server-side repository intersection; contents = "write" lets any stage push to any declared repository). Correct the earlier claim that injecting GITHUB_TOKEN alone makes arbitrary additional private clones work. - Add a dated changelog entry and an opt-in live GitHub App e2e test that verifies a scoped multi-repository token reads every declared repository (and that a primary-only token cannot), with repositories supplied through the test environment. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| brainstorms | ||
| ideation | ||
| internal | ||
| plans | ||
| public | ||
| superpowers | ||