Expose attended description-only Forgejo metadata edit #808

Closed
opened 2026-07-30 12:00:04 +00:00 by coilyco-ops · 0 comments
Owner

Goal

Allow an attended administrator PAT to update only a Forgejo repository description through AOSguard.

The existing bot-authenticated aosguard ops forgejo repo edit leaf reaches Forgejo's repository PATCH but fails when the bot lacks repository-admin permission. The attended forgejo-admin wrapper already carries the administrator PAT for topic replacement, but it exposes no description path.

Scope

  • add a custom description-only action under aosguard ops forgejo-admin
  • accept only canonical owner, repository, and description inputs
  • retain the existing coily* owner restriction
  • do not expose the full repository-edit option set through the admin wrapper
  • validate request method, path, body, redacted auth, and owner rejection through the generated CLI
  • document the attended description and topic metadata boundary

Parent rollout: coilysiren/inbox#305

Done when

  • the generated dry-run emits only a repository description PATCH
  • out-of-scope owners fail closed
  • repository validation and pre-commit pass
  • the change lands on canonical Forgejo main and enters the normal AOS CLI release pipeline
## Goal Allow an attended administrator PAT to update only a Forgejo repository description through AOSguard. The existing bot-authenticated `aosguard ops forgejo repo edit` leaf reaches Forgejo's repository PATCH but fails when the bot lacks repository-admin permission. The attended `forgejo-admin` wrapper already carries the administrator PAT for topic replacement, but it exposes no description path. ## Scope * add a custom description-only action under `aosguard ops forgejo-admin` * accept only canonical owner, repository, and description inputs * retain the existing `coily*` owner restriction * do not expose the full repository-edit option set through the admin wrapper * validate request method, path, body, redacted auth, and owner rejection through the generated CLI * document the attended description and topic metadata boundary Parent rollout: https://forgejo.coilysiren.me/coilysiren/inbox/issues/305 ## Done when * the generated dry-run emits only a repository description PATCH * out-of-scope owners fail closed * repository validation and pre-commit pass * the change lands on canonical Forgejo main and enters the normal AOS CLI release pipeline
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
coilyco-flight-deck/agentic-os#808
No description provided.