Submatter/plans/Plan-automation-foundation/Epic-connected-repos/Task-repo-setup-preflight.md
Randall Stillwell 35def387ae docs(plans): add Autensa benchmark tasks to automation foundation roadmap
Map reliability, operator UX, and spend-control follow-ons onto epics 1–9
so worker, webhooks, and fleet work have bead-scale task briefs.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-03 10:48:36 -05:00

2.3 KiB

kind slug title plan_slug epic_slug status priority tenant_id owner cursor_todo_id updated_at
task repo-setup-preflight Connected repo setup preflight — readiness before automation automation-foundation connected-repos draft P2 global unassigned null 2026-08-03

Task summary

Repo Setup tab on connected repos: verify a remote is automation-ready before orchestrator/worker dispatch (git access, default branch, CI permissions, required secrets).

Description

Benchmark: Autensa v2.5.1 Repo Setup tab — preflight checks with in-UI fixes where the forge API allows. Echodo adapts this to multitenant repo_links and forge adapters (Forgejo + GitHub minimum).

Preflight checks

Check Pass criteria
Git clone Shallow clone with stored credentials
Default branch API-detected default matches stored value
Forge API PR list/create permission
CI visibility Latest workflow run status readable
Actions token (GitHub) contents + pull-requests write if applicable
Required secrets Names present (values never stored in Echodo DB)

UI

  • Settings → Connected repos → per-repo Setup tab
  • Traffic-light checklist with expandable failure reasons
  • Block convoy Go when critical checks fail (soft warning vs hard block — configurable per workspace)

Fixes (where API supports)

  • GitHub: suggest/set workflow token permissions; link to docs for secret creation (do not write secret values through Echodo — operator pastes in forge UI)

Dependencies

  • Epic 3 connected repos (shipped)
  • Epic 6 orchestrator should read preflight status before enqueue

Subtasks

  • repoPreflightStatus zod schema in packages/shared
  • Forge adapter methods: getDefaultBranch, listWorkflowRuns, getRepoPermissions
  • tRPC connectedRepos.runPreflight
  • Settings UI Setup tab
  • Orchestrator skips dispatch when repo link preflight_ok is false

Estimation

L

Acceptance criteria

  • Repo with wrong default branch shows failing check with detected branch name
  • Private repo without token shows auth failure (no silent pass)
  • Preflight re-runnable without reconnecting repo
  • No forge secret values persisted in Postgres
  • Epic: ./Epic-connected-repos.md