vault: add fix-ops-branch-protection-20260415

This commit is contained in:
planner-bot 2026-04-15 10:04:46 +00:00
parent 1a39a3ed80
commit dcc9649dbd

View file

@ -0,0 +1,23 @@
# Vault action: fix-ops-branch-protection-20260415
# Filed by: gardener (2026-04-15)
# Unblocks: #758, #765
context = "Ops repo (disinto-admin/disinto-ops) branch protection on main requires approvals but no bot account has sufficient permissions to merge PRs. planner-bot has push but cannot merge. review-bot can approve but cannot push/merge. ops/main frozen at v0.2.0 since 2026-04-08. Knowledge, vault items, and sprint artifacts accumulate locally and are lost on container restart."
unblocks = ["#758", "#765"]
[action_required]
description = """
Choose ONE of the following:
Option 1 (recommended): Add planner-bot to the merge allowlist in disinto-ops branch protection.
Forgejo admin UI: disinto-admin/disinto-ops > Settings > Branches > main > Edit
Under 'Whitelist Merge': add planner-bot
Option 2: Remove branch protection from disinto-ops main.
Agents are the primary writers; branch protection adds friction without safety benefit here.
Option 3: Create an admin-level FORGE_ADMIN_TOKEN and add to agent secrets.
Create a Forgejo admin user or promote an existing bot, issue a token,
add to agent container environment as FORGE_ADMIN_TOKEN.
"""