Skip to content

chore(claude): add Agent-Jack session config for GitHub auth - #106

Draft
nsheaps wants to merge 1 commit into
mainfrom
claude/agent-jack-session-config
Draft

chore(claude): add Agent-Jack session config for GitHub auth#106
nsheaps wants to merge 1 commit into
mainfrom
claude/agent-jack-session-config

Conversation

@nsheaps

@nsheaps nsheaps commented Aug 8, 2026

Copy link
Copy Markdown
Owner

Why

Claude Code web sessions in this repo had no GitHub auth of their own: this repo lacked the .claude session config that nsheaps/.github, agents, and ai-mktpl already have. Sessions relied entirely on the ephemeral git proxy, so when that proxy reset mid-session (remotes fall back to https://github.com with no credentials), git push/fetch broke and the github-app plugin logged GitHub App not configured (missing GITHUB_APP_ID, …), skipping.

What

Adds the same session config the other org repos use, operating this repo as Agent-Jack (jack-nsheaps[bot]):

  • .claude/settings.json — enables 1pass, github-app, shared-lib, mise (@ai-mktpl), agent-utils (@agents), agent-tab-titles; declares the agents + ai-mktpl marketplaces; scoped permissions.allow for git/gh/mise.
  • .claude/plugins.settings.yaml — points 1pass.opExec at op://Agent-Jack/{ENVIRONMENT,github--app--jack} and github-app.ref at the same item, with autoGitConfig: true.
  • .claude/.gitignore — todo-sync managed ignores.

The chain: 1pass resolves the Agent-Jack vault → GITHUB_APP_ID / GITHUB_INSTALLATION_ID / GITHUB_APP_PRIVATE_KEY env vars (via the OP service-account token) → github-app mints an installation token and configures git. Pushes then work independent of the session proxy.

Validation

  • Reproduced the exact break locally (session launched in a non-repo parent → project config never loaded → no creds).
  • Verified the recovery path by hand in this session: installed op, read op://Agent-Jack/github--app--jack, minted a jack-nsheaps[bot] installation token via github-app/bin/generate-token.sh (perms include contents/administration/pull_requests/workflows), wired a git credential helper, and this branch was pushed with that token.
  • settings.json valid JSON; plugins.settings.yaml valid YAML; both prettier-clean.

Mirrors the config in nsheaps/.github/.claude/. nsheaps/.org still lacks the same config — happy to add it there too.

🤖 Generated with Claude Code

https://claude.ai/code/session_018dM5zNQzewT1dLqGWEU2x9


Generated by Claude Code

Adds .claude/settings.json + plugins.settings.yaml so Claude Code web sessions
in this repo auto-authenticate: the 1pass plugin resolves the Agent-Jack vault
into GITHUB_APP_* env vars via the OP service account, and the github-app plugin
exchanges them for an installation token and configures git. Prevents the
'GitHub App not configured' / broken-push failure mode when a session's
ephemeral git proxy resets. Mirrors nsheaps/.github's config.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants