mirror of
https://github.com/fabro-sh/fabro.git
synced 2026-10-01 02:04:24 +00:00
ee6576cff7
A run now resolves a single author and committer identity once, after its
GitHub credentials are selected and before anything can commit, and uses it
for every commit it creates. Resolution order: a complete explicit
`run.git.author`; the run's GitHub App bot account
(`<slug>[bot] <id+slug[bot]@users.noreply.github.com>`); the authenticated
user of the run's PAT; the generic `Fabro <noreply@fabro.sh>`. A partial
explicit author overlays the fields it supplies. Only the selected
credential is consulted; a failed lookup is a setup error. A standalone
installation token falls back to the generic identity with a warning.
The resolved identity is carried on `RunOptions` and `EngineServices`,
recorded as a `git.identity.resolved` event and `RunProjection.git_identity`
so resume reuses it, and exposed through the run state API. Engine
checkpoints and metadata commits read it through `RunOptions::git_author`.
Every workflow execution path receives it as `GIT_AUTHOR_NAME`,
`GIT_AUTHOR_EMAIL`, `GIT_COMMITTER_NAME`, and `GIT_COMMITTER_EMAIL`, applied
last so it wins over inherited host variables and `[run.environment]`
entries: prepare steps, command stages, native agent shell tools, and ACP
launches. The identity is injected even without a Git origin, and the old
local `git config user.*` write is removed.
fabro-github gains `GET /user` and `/users/{slug}[bot]` lookups with mocked
tests for success, unauthorized, malformed, and transient cases. Real-Git
integration tests commit in the primary checkout, a clone, and a fresh
repository under conflicting local config, `[run.environment]`, and host
variables, and prove concurrent runs do not leak identities. CLI workflow
tests cover host script stages and ACP launch env through `fabro run`.
Docs and generated option metadata now describe the credential-derived
defaults instead of the stale `fabro`/`fabro@local` values.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
|
||
|---|---|---|
| .. | ||
| event | ||
| graph | ||
| handler | ||
| lifecycle | ||
| operations | ||
| pipeline | ||
| records | ||
| transforms | ||
| agent_memory.rs | ||
| artifact.rs | ||
| artifact_snapshot.rs | ||
| artifact_upload.rs | ||
| billing_rollup.rs | ||
| command_log.rs | ||
| condition.rs | ||
| context.rs | ||
| error.rs | ||
| event.rs | ||
| file_resolver.rs | ||
| git.rs | ||
| git_bridge.rs | ||
| git_identity.rs | ||
| graph.rs | ||
| hook_context.rs | ||
| interview_runtime.rs | ||
| lib.rs | ||
| model_fallback.rs | ||
| node_handler.rs | ||
| outcome.rs | ||
| pull_request.rs | ||
| retry.rs | ||
| run_control.rs | ||
| run_dir.rs | ||
| run_lookup.rs | ||
| run_materialization.rs | ||
| run_metadata.rs | ||
| run_options.rs | ||
| run_status.rs | ||
| runtime_store.rs | ||
| sandbox_git.rs | ||
| sandbox_git_runtime.rs | ||
| services.rs | ||
| stage_execution.rs | ||
| stage_scope.rs | ||
| steering_hub.rs | ||
| test_support.rs | ||
| web_search.rs | ||
| workflow_bundle.rs | ||