patchrelay 0.69.0 → 0.69.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/build-info.json
CHANGED
|
@@ -8,11 +8,13 @@ export function buildGitHubBotCredentialHelper(tokenFile) {
|
|
|
8
8
|
}
|
|
9
9
|
export async function configureGitHubBotAuthForWorktree(params) {
|
|
10
10
|
const helper = buildGitHubBotCredentialHelper(params.botIdentity.tokenFile);
|
|
11
|
-
const
|
|
12
|
-
|
|
13
|
-
await execCommand(params.gitBin, [...
|
|
11
|
+
const gitConfigArgs = ["-C", params.worktreePath, "config"];
|
|
12
|
+
const gitWorktreeConfigArgs = [...gitConfigArgs, "--worktree"];
|
|
13
|
+
await execCommand(params.gitBin, [...gitConfigArgs, "extensions.worktreeConfig", "true"], { timeoutMs: 5_000 });
|
|
14
|
+
await execCommand(params.gitBin, [...gitWorktreeConfigArgs, "user.name", params.botIdentity.name], { timeoutMs: 5_000 });
|
|
15
|
+
await execCommand(params.gitBin, [...gitWorktreeConfigArgs, "user.email", params.botIdentity.email], { timeoutMs: 5_000 });
|
|
14
16
|
// Clear inherited GitHub-specific helpers such as `gh auth git-credential`
|
|
15
17
|
// so git HTTPS operations use the same bot token as the wrapped `gh` CLI.
|
|
16
|
-
await execCommand(params.gitBin, [...
|
|
17
|
-
await execCommand(params.gitBin, [...
|
|
18
|
+
await execCommand(params.gitBin, [...gitWorktreeConfigArgs, "--replace-all", "credential.https://github.com.helper", ""], { timeoutMs: 5_000 });
|
|
19
|
+
await execCommand(params.gitBin, [...gitWorktreeConfigArgs, "--add", "credential.https://github.com.helper", helper], { timeoutMs: 5_000 });
|
|
18
20
|
}
|
package/infra/patchrelay.service
CHANGED
|
@@ -25,13 +25,13 @@ Environment=PATH=/home/your-user/.local/share/patchrelay/bin:/home/your-user/.lo
|
|
|
25
25
|
#
|
|
26
26
|
# When credstore is not configured, PatchRelay falls back to reading secrets
|
|
27
27
|
# from env vars (EnvironmentFile, op run, etc.) via the resolve-secret module.
|
|
28
|
-
LoadCredentialEncrypted=linear-webhook-secret
|
|
29
|
-
LoadCredentialEncrypted=token-encryption-key
|
|
30
|
-
LoadCredentialEncrypted=linear-oauth-client-id
|
|
31
|
-
LoadCredentialEncrypted=linear-oauth-client-secret
|
|
28
|
+
LoadCredentialEncrypted=linear-webhook-secret:/etc/credstore.encrypted/linear-webhook-secret.cred
|
|
29
|
+
LoadCredentialEncrypted=token-encryption-key:/etc/credstore.encrypted/token-encryption-key.cred
|
|
30
|
+
LoadCredentialEncrypted=linear-oauth-client-id:/etc/credstore.encrypted/linear-oauth-client-id.cred
|
|
31
|
+
LoadCredentialEncrypted=linear-oauth-client-secret:/etc/credstore.encrypted/linear-oauth-client-secret.cred
|
|
32
32
|
# Uncomment when GitHub App integration is configured:
|
|
33
|
-
# LoadCredentialEncrypted=github-app-pem
|
|
34
|
-
# LoadCredentialEncrypted=github-app-webhook-secret
|
|
33
|
+
# LoadCredentialEncrypted=github-app-pem:/etc/credstore.encrypted/github-app-pem.cred
|
|
34
|
+
# LoadCredentialEncrypted=github-app-webhook-secret:/etc/credstore.encrypted/github-app-webhook-secret.cred
|
|
35
35
|
|
|
36
36
|
ExecStart=/usr/bin/env patchrelay serve
|
|
37
37
|
Restart=on-failure
|