@sentry/junior-github 0.241.0 → 0.243.0

package/dist/index.js

@@ -4578,6 +4578,9 @@ function githubApiWriteGrantName(method, upstreamUrl) {
   if ((method === "POST" || method === "DELETE") && /^\/repos\/[^/]+\/[^/]+\/pulls\/[^/]+\/requested_reviewers$/.test(pathname)) {
     return "installation-write";
   }
+  if (method === "POST" && /^\/repos\/[^/]+\/[^/]+\/stacks(?:\/[^/]+\/(add|unstack))?$/.test(pathname)) {
+    return "installation-write";
+  }
   if (method === "POST" && /^\/repos\/[^/]+\/[^/]+\/pulls\/[^/]+\/comments(?:\/[^/]+\/replies)?$/.test(
     pathname
   )) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentry/junior-github",
-  "version": "0.241.0",
+  "version": "0.243.0",
   "private": false,
   "publishConfig": {
     "access": "public"
@@ -31,7 +31,7 @@
     "@sinclair/typebox": "^0.34.49",
     "drizzle-orm": "^0.45.2",
     "zod": "^4.5.4",
-    "@sentry/junior-plugin-api": "0.241.0"
+    "@sentry/junior-plugin-api": "0.243.0"
   },
   "devDependencies": {
     "@oxlint/plugins": "1.79.0",

package/skills/github-code/SKILL.md

@@ -29,7 +29,8 @@ Use `git` and `gh` for repository work.
 - Use the requested repo. Otherwise read `github.repo` with standalone `jr-rpc config get github.repo`.
 - Pass `--repo owner/repo` to `gh`. Use `git -C PATH` for local repos.
 - Read each applicable `AGENTS.md` before edits.
-- Keep unrelated work. Never force-push, delete refs, or make destructive merges.
+- Keep unrelated work. Never delete refs or make destructive merges.
+- Force-push only with `--force-with-lease`, and only to branches Junior pushed or the requester named.
 - Use repository evidence. Report only checks you ran.
 - Push before `github_createPullRequest`. Never ask for a token for bot pushes.
 - When an error names a tool, use it. Change permissions only when GitHub rejected the request.

package/skills/github-code/SPEC.md

@@ -7,7 +7,7 @@ Guide evidence-first GitHub repository work from inspection through a reviewable
 ## Behavioral contract
 
 - Resolve and inspect the repository before acting.
-- Preserve unrelated work; reject destructive Git operations.
+- Preserve unrelated work; reject destructive Git operations except `--force-with-lease` pushes to branches Junior pushed or the requester named.
 - Treat shallow clones as inspection checkouts; deepen before history work; never force-push around missing ancestry.
 - Install dependencies with the lockfile frozen mode before verification when needed.
 - Finish completed edits with a pushed PR unless the user opts out; default draft.

package/skills/github-code/references/api-surface.md

@@ -37,6 +37,9 @@ If the user omits `owner/repo`, run `jr-rpc config get github.repo`. Then pass `
 | Rerun / cancel          | `gh run rerun RUN_ID -R owner/repo [--failed]` / `gh run cancel RUN_ID -R owner/repo`           |
 | Mark PR ready / draft   | `github_updatePullRequest` with `draft: false` / `draft: true`                                  |
 | Request reviewers       | `gh api repos/owner/repo/pulls/NUMBER/requested_reviewers --method POST --input reviewers.json` |
+| Link stacked PRs        | `gh stack link [STACK_NUMBER] PR_NUMBER...` (bottom to top)                                     |
+| Restack                 | `gh stack rebase` then `gh stack push`, or `gh stack sync`                                      |
+| Unstack                 | `gh stack unstack STACK_NUMBER`                                                                 |
 | Submit review           | `github_submitPullRequestReview`                                                                |
 | Set feedback status     | `github_updatePullRequestFeedback`                                                              |
 | Resolve review thread   | `github_resolvePullRequestReviewThread`                                                         |
@@ -52,6 +55,7 @@ If the user omits `owner/repo`, run `jr-rpc config get github.repo`. Then pass `
 - A local commit does not call GitHub. A push uses installation credentials. Workflow changes also need `workflows.write`.
 - Deepen a shallow clone before work that needs old history. Do not force-push to work around missing history.
 - Push `head` and read the default `base` before `github_createPullRequest`.
+- Stacks: open each PR with `github_createPullRequest`, based on the branch below, before `gh stack link`. Without local stack state, run `gh stack checkout STACK_NUMBER` first. Do not pass `--open`.
 - Junior does not support merges, forks, repository administration, REST content or Git database writes, direct PR update or review writes, auto-merge, or GraphQL mutations.
 - Reviews and inline comments use the App bot.
 - PR comments/labels/assignees use issue endpoints; load `github-issues` for those.