mark/vibn-frontend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(gitea-bot): add write:organization scope so bot can create repos

Browse Source 
Without this the bot PAT 403s on POST /orgs/{org}/repos, which is
the single most important operation — creating new project repos
inside the workspace's Gitea org.

Made-with: Cursor
This commit is contained in:
Mark Henderson
2026-04-21 11:05:55 -07:00
parent d9d3514647
commit 6f79a88abd
66 changed files with 2088 additions and 1713 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
app/api/projects/[projectId]/agent/sessions/[sessionId]/approve/route.ts
View File

@@ -8,8 +8,7 @@
* Body: { commitMessage: string }
*/
import { NextResponse } from "next/server";
import { getServerSession } from "next-auth";
import { authOptions } from "@/lib/auth/authOptions";
import { authSession } from "@/lib/auth/session-server";
import { query } from "@/lib/db-postgres";
const AGENT_RUNNER_URL = process.env.AGENT_RUNNER_URL ?? "http://localhost:3333";
@@ -29,7 +28,7 @@ export async function POST(
) {
try {
const { projectId, sessionId } = await params;
const session = await getServerSession(authOptions);
const session = await authSession();
if (!session?.user?.email) {
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
}

5
app/api/projects/[projectId]/agent/sessions/[sessionId]/events/route.ts
View File

@@ -6,8 +6,7 @@
* Batch append from vibn-agent-runner (x-agent-runner-secret).
*/
import { NextResponse } from "next/server";
import { getServerSession } from "next-auth";
import { authOptions } from "@/lib/auth/authOptions";
import { authSession } from "@/lib/auth/session-server";
import { query, getPool } from "@/lib/db-postgres";
export interface AgentSessionEventRow {
@@ -23,7 +22,7 @@ export async function GET(
) {
try {
const { projectId, sessionId } = await params;
const session = await getServerSession(authOptions);
const session = await authSession();
if (!session?.user?.email) {
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
}

5
app/api/projects/[projectId]/agent/sessions/[sessionId]/events/stream/route.ts
View File

@@ -2,8 +2,7 @@
* GET /api/projects/.../agent/sessions/.../events/stream?afterSeq=0
* Server-Sent Events: tail agent_session_events while the session is active.
*/
import { getServerSession } from "next-auth";
import { authOptions } from "@/lib/auth/authOptions";
import { authSession } from "@/lib/auth/session-server";
import { query, queryOne } from "@/lib/db-postgres";
export const dynamic = "force-dynamic";
@@ -17,7 +16,7 @@ export async function GET(
req: Request,
{ params }: { params: Promise<{ projectId: string; sessionId: string }> }
) {
const session = await getServerSession(authOptions);
const session = await authSession();
if (!session?.user?.email) {
return new Response("Unauthorized", { status: 401 });
}

5
app/api/projects/[projectId]/agent/sessions/[sessionId]/retry/route.ts
View File

@@ -9,8 +9,7 @@
* understands what was already tried
*/
import { NextResponse } from "next/server";
import { getServerSession } from "next-auth";
import { authOptions } from "@/lib/auth/authOptions";
import { authSession } from "@/lib/auth/session-server";
import { query } from "@/lib/db-postgres";
const AGENT_RUNNER_URL = process.env.AGENT_RUNNER_URL ?? "http://localhost:3333";
@@ -21,7 +20,7 @@ export async function POST(
) {
try {
const { projectId, sessionId } = await params;
const session = await getServerSession(authOptions);
const session = await authSession();
if (!session?.user?.email) {
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
}

5
app/api/projects/[projectId]/agent/sessions/[sessionId]/route.ts
View File

@@ -7,8 +7,7 @@
* (handled in /stop/route.ts)
*/
import { NextResponse } from "next/server";
import { getServerSession } from "next-auth";
import { authOptions } from "@/lib/auth/authOptions";
import { authSession } from "@/lib/auth/session-server";
import { query } from "@/lib/db-postgres";
export async function GET(
@@ -17,7 +16,7 @@ export async function GET(
) {
try {
const { projectId, sessionId } = await params;
const session = await getServerSession(authOptions);
const session = await authSession();
if (!session?.user?.email) {
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
}

5
app/api/projects/[projectId]/agent/sessions/[sessionId]/stop/route.ts
View File

@@ -1,6 +1,5 @@
import { NextResponse } from "next/server";
import { getServerSession } from "next-auth";
import { authOptions } from "@/lib/auth/authOptions";
import { authSession } from "@/lib/auth/session-server";
import { query } from "@/lib/db-postgres";
const AGENT_RUNNER_URL = process.env.AGENT_RUNNER_URL ?? "http://localhost:3333";
@@ -11,7 +10,7 @@ export async function POST(
) {
try {
const { projectId, sessionId } = await params;
const session = await getServerSession(authOptions);
const session = await authSession();
if (!session?.user?.email) {
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
}