Skip to content

GitHub — repos & access

Organizace

studio60-cz (https://github.com/studio60-cz)

Repo přehled

Repo Použití Sentinel access
s60-sentinel Tento repo (deploy & monitoring VPS) read + write
pulse PulseLab read-only (deploy)
billit Billit SaaS read-only (deploy)
s60-badwolf (badwolf) BadWolf core read-only
s60-auth (auth) S60Auth identity read-only
s60-mail Mail pipeline read-only
s60-cs CS pipeline read-only
venom Venom CRM frontend read-only
s60-infra Docker stacky, infra read (sentinel nemodifikuje)
s60-docs Dokumentace, session notes read

Sentinel push policy

  • ✅ Push do s60-sentinel (vlastní repo)
  • ❌ NIKDY push do cizích repos (orthogonal: feedback_no_push_to_other_repos.md)
  • ❌ NIKDY commit do cizích repos (orthogonal: feedback_never_change_code.md)
  • DEPLOY.md a post-deploy zápisy = řeší zodpovědný agent přes TODO zprávu, ne sentinel

Auth

  • Method: HTTPS PAT (NE SSH!) — credential helper store
  • Token: ~/.git-credentials (formát: https://<TOKEN>@github.com/...)
  • Convertor SSH→HTTPS (auto): 
    git config --global url."https://<TOKEN>@github.com/studio60-cz/".insteadOf "git@github.com:studio60-cz/"

Git config

git config user.email "claude-sentinel@anthropic.com"
git config user.name "Sentinel"

(Per-agent config, ne global — viz CLAUDE.md.)

Git workflow pro sentinel

# Daily push (na konci session, bez násilí):
cd /root/projects/sentinel && git add <files> && git commit -m "..." && git push

# Foreign repo - jen čtení:
cd /opt/<service>  # na hub/prod
git fetch origin master
git log -5
# NIKDY git commit / git push tady!

Co sentinel commituje

  • deploy/deploys.log (chronologie deployů)
  • docs/docs/deploy/changelog.md (deploy changelog)
  • catalog/services/*.yaml, catalog/agents/*.yaml (nové services/agenti)
  • docs/docs/services/*, docs/docs/infra/* (KB updates)
  • scripts/* (vlastní scripts)
  • .claude/hooks/* (sentinel-specific hooks)
  • .claude/settings.local.json (per-environment settings)