Skip to content

feat: queue filing pushes and opens its PR with the pyautolabs-bot App (token phase 2a) - #141

Merged
Jammy2211 merged 1 commit into
mainfrom
feature/github-token-p2a-readers-app
Oct 23, 2026
Merged

Jammy2211 merged 1 commit into
mainfrom
feature/github-token-p2a-readers-app

Conversation

@Jammy2211

Copy link
Copy Markdown
Collaborator

Summary

Token consolidation phase 2a (PyAutoLabs/PyAutoBrain#531) for the Memory.

queue_filing.yml mints a pyautolabs-bot App token scoped to PyAutoMemory (contents and pull-requests write). It replaces the never-created QUEUE_PR_TOKEN and is minted after the Claude step.

  • Push: the step clears the credentialed remote and the local extraheader that claude-code-action and checkout leave behind, then pushes through gh auth setup-git. No URL-embedded token.
  • PR: gh pr create uses the App token, so the PR now triggers validate.yml.
  • Failure: the compare-link fallback is deleted. A failed push or PR fails the run, and the existing failure step comments on the issue.
  • Identity: filing commits are authored as pyautolabs-bot[bot]. Issue comments stay on the job token, because queue_sweep.yml keys "already answered" off github-actions[bot].
  • README.md is updated.

The App mint is first proven on the next real filing. This workflow has no PR trigger by design: one would run the Claude filing flow.

API Changes

None (workflow auth change).
See full details below.

Test Plan

  • YAML parse; pytest tests -q: 276 passed
  • Tenant firewall (organ code): OK
  • After merge: the next 📥/📑 filing opens its PR as pyautolabs-bot[bot] and validate.yml runs on it
Full API Changes (for automation & release notes)

Required configuration

  • Now read: vars.APP_CLIENT_ID, secrets.APP_PRIVATE_KEY (org level).
  • No longer read: secrets.QUEUE_PR_TOKEN (never existed).

Heart readiness: YELLOW, acknowledged by the human before opening (manifest drift on one workspace checkout; PyAutoLens release validation stale — both unrelated to this change).

🤖 Generated with Claude Code

queue_filing.yml replaces the never-created QUEUE_PR_TOKEN with a
pyautolabs-bot token scoped to this repo (contents + pull-requests write),
minted after the Claude step. The push goes through gh auth setup-git (no
URL-embedded token), the PR now triggers validate.yml, and the compare-link
fallback is deleted: a failed push or PR fails the run. Filing commits are
authored as pyautolabs-bot[bot]; README updated.

Refs PyAutoLabs/PyAutoBrain#531

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@Jammy2211
Jammy2211 merged commit a8d8d07 into main Oct 23, 2026
1 check passed
@Jammy2211
Jammy2211 deleted the feature/github-token-p2a-readers-app branch October 23, 2026 14:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant