 sysadmin
|
4a63578003
|
fix(profiles): canonical reconciler ops and guard raw branch delete (#687)
Address REQUEST_CHANGES on PR #688:
- migrate_profiles: emit fully canonical reconciler/author/reviewer defaults;
canonicalize explicit ops; fail if reconciler loses required pr.close/read
- gitea_delete_branch: deny reconciler (and non-author roles); refuse
preservation/protected branches before any API call
- gitea_cleanup_merged_pr_branch: require reconciler role only; block
preservation/evidence branches via branch_cleanup_guard
- docs: end-to-end operator runbook for profile migrate/apply/reconnect/cleanup
- tests: migration canonicalization, idempotency, raw-delete denial, guarded
cleanup success and unmerged/preserve rejections
Closes #687.
|
2026-07-12 22:35:14 -04:00 |
|