fix: feat: triage formula template with generic investigation steps and best practices (#342) #347
No reviewers
Labels
No labels
action
backlog
blocked
bug-report
in-progress
prediction/actioned
prediction/dismissed
prediction/unreviewed
priority
tech-debt
underspecified
vision
No milestone
No project
No assignees
2 participants
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: disinto-admin/disinto#347
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "fix/issue-342"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Fixes #342
Changes
AI Review
Summary\n\nThis PR converts
formulas/triage.tomlfrom a minimal config stub into a structured generic template with six explicit steps, a[project]extension block, and a clear project-override pattern. The structure and step logic are sound. However, there are correctness issues in the curl examples embedded in the step descriptions that will cause API call failures when the formula is executed.\n\n### Findings\n\n- bugformulas/triage.toml:174(decompose step): Thecurlcommand for creating backlog issues is missing-H "Authorization: token ${FORGE_TOKEN}"and-H 'Content-Type: application/json'. Without auth, the Forgejo API will return 401; without the Content-Type header the POST body won't be parsed. Compare with how the orchestrator (entrypoint-reproduce.sh:447-450) makes the same call — it always includes both headers.\n\n- bugformulas/triage.toml:74-75(read-findings step): Bothcurlcommands for fetching issue body and comments lack-H "Authorization: token ${FORGE_TOKEN}". On private Forgejo instances (the typical deployment) unauthenticated reads return 404. Should match the auth pattern shown in the prompt footer.\n\n- minorformulas/triage.toml:34(header comment): The comment documents[project].stack_lockas an extension field that project-specific formulas should define, but the[project]section only declaresdata_flowandapi_endpoints. Either add a placeholderstack_lockfield (e.g.stack_lock = "") to the section, or remove it from the documented extension list.\n\n### Notes\n\n- The stepneedschain (read-findings → trace-data-flow → instrumentation → decompose → link-back → cleanup) is correct for the conclusive path. The inconclusive path wheredecomposeis skipped is handled by prose in the step descriptions, which is fine since these are prompt instructions not a programmatic scheduler.\n- CI is not required for this formula-only change, which is appropriate.Verdict
REQUEST_CHANGES — decompose curl is missing auth and Content-Type headers, causing API call failures; read-findings curl also lacks auth; stack_lock extension field documented but not defined
Reviewed at
da70bad| AGENTS.mdAI Review: REQUEST_CHANGES — decompose curl is missing auth and Content-Type headers, causing API call failures; read-findings curl also lacks auth; stack_lock extension field documented but not defined
AI Re-review (round 2)
Previous Findings\n\n- bug decompose curl missing auth + Content-Type → FIXED:
-H "Authorization: token ${FORGE_TOKEN}"and-H "Content-Type: application/json"added (incremental diff line +179-180)\n- bug read-findings curl missing auth → FIXED: both fetch commands now include-H "Authorization: token ${FORGE_TOKEN}"(incremental diff line +78-81)\n- minor[project].stack_lockdocumented but not defined → FIXED:stack_lock = ""placeholder added to[project]section (incremental diff line +63-65)Verdict
APPROVE — all three previous findings addressed: auth headers added to both curl calls, stack_lock field added to [project] section
Reviewed at
ae826f9| Previous:da70bad| AGENTS.mdAI Re-review (round 2): APPROVE — all three previous findings addressed: auth headers added to both curl calls, stack_lock field added to [project] section