Skip to content

docs(compass): design multi-installation forge credentials (RIG-5653) #46

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mattwilkinsonn merged 5 commits into from
Oct 19, 2026
+538 −0
Merged

docs(compass): design multi-installation forge credentials (RIG-5653) #46

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
8cea2dd
docs(compass): design multi-installation forge credentials (RIG-5653)
rigel-mintaka Oct 17, 2026
b47b67b
docs(compass): fail closed for non-default owners under a wildcard gr…
rigel-mintaka Oct 18, 2026
1360aa1
docs(compass): carry the default login for the wildcard group on the …
rigel-mintaka Oct 18, 2026
62f894b
docs(compass): fold the RIG-5672 rulings into the multi-installation …
rigel-mintaka Oct 18, 2026
50ebe07
docs(compass): build the owner router once and split the error mappin…
rigel-mintaka Oct 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions docs/designs/compass/decisions/server/DL-562.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
id: DL-562
decision: "The git credential broker partitions an agent's grants by repository owner and mints one token per owner on that owner's App installation, keeping per-key caching, refresh and revoke; the owner-grants fallback (widen only) and DL-466's last-key fallback both apply per owner"
status: "Active (Matt, 2026-10-18)"
record: ../../server/multi-installation-forge-credentials.md#per-owner-mint
---
6 changes: 6 additions & 0 deletions docs/designs/compass/decisions/server/DL-563.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
id: DL-563
decision: "Each per-owner token reaches the container as an owner-tagged SecretGH written to its own file beside a default-owner marker; a static Go helper answers git (useHttpPath) and jj-vine (tokenCommand with {project}) by repository owner, falls through to hosts.yml only for the default owner, and fails closed for any other owner without a file"
status: "Active (Matt, 2026-10-18)"
record: ../../server/multi-installation-forge-credentials.md#agent-side-delivery
---
6 changes: 6 additions & 0 deletions docs/designs/compass/decisions/server/DL-564.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
id: DL-564
decision: "Every GitHub forge call routes to the repository owner's App installation: the author and reviewer legs, board ingestion and the notify lane each read and write through a per-owner router that reuses the shared primary client for the default installation; a missing installation maps to not-found like a 403 or 404, and other lookup errors use checkInstallation's classes"
status: "Active (Matt, 2026-10-18)"
record: ../../server/multi-installation-forge-credentials.md#forge-calls
---
6 changes: 6 additions & 0 deletions docs/designs/compass/decisions/server/DL-582.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
id: DL-582
decision: "A forge_edit_issue tool edits an issue's title, body or both through the owner's installation, with the same scope check as forge_transition_issue_state; a body edit is re-stamped with the editor's attribution, and the brokered git token gains no issues permission"
status: "Active (Matt, 2026-10-18)"
record: ../../server/multi-installation-forge-credentials.md#issue-edits
---
Loading
Loading