feat: guard merged branch cleanup path

Closes #514
2026-07-08 04:18:09 -04:00
parent 4d24c34548
commit 3cb05284b3
7 changed files with 460 additions and 1 deletions
@@ -871,6 +871,15 @@ Confirm:

 Clean only the session-owned `branches/` review worktree if the project workflow explicitly allows cleanup.

+Do not delete source branches from reviewer mode with raw git commands. Commands
+such as `git branch -d <branch>` and `git push <remote> --delete <branch>` are
+not proof of authorized cleanup and bypass MCP role/capability gates. Merged PR
+source branch cleanup must use an explicit MCP cleanup tool such as
+`gitea_cleanup_merged_pr_branch` or another approved cleanup helper with exact
+`gitea.branch.delete` authority, merged-PR proof, no open PR using the branch,
+target-branch ancestry proof, a `branches/` worktree path, and cleanup mutations
+reported separately from review mutations.
+
 Do not delete or mutate unrelated branches/worktrees.

 Do not touch the main checkout except to update the stable branch after merge if explicitly allowed by the workflow.