adr check: count contributors by access to the repo #656

New issue

Open

opened 2026-09-29 16:37:25 +00:00 by hexajon · 0 comments

hexajon commented

2026-09-29 16:37:25 +00:00

Owner

What to build

A contributor is an account that is a collaborator, or a member of a team, with more than read access to the repo. adr check collects the authors of the PRs that changed the records and the authors of the comments on the decision issues, and keeps only contributors. madtea already reads an account's effective permission (GET collaborators/<user>/permission, internal/gitea/client_collaborators.go:32). Check what the forge returns when the account that runs adr check is not a repo admin. A refused read makes the check fail with a message, and never counts wrongly.

Acceptance

Tests against the live forge API and a test repo: a comment from an account with read access only is ignored; a write collaborator counts; a team member with write access counts; a refused permission read fails the check with a message.

## What to build A contributor is an account that is a collaborator, or a member of a team, with more than read access to the repo. `adr check` collects the authors of the PRs that changed the records and the authors of the comments on the decision issues, and keeps only contributors. madtea already reads an account's effective permission (`GET collaborators/<user>/permission`, `internal/gitea/client_collaborators.go:32`). Check what the forge returns when the account that runs `adr check` is not a repo admin. A refused read makes the check fail with a message, and never counts wrongly. ## Acceptance Tests against the live forge API and a test repo: a comment from an account with read access only is ignored; a write collaborator counts; a team member with write access counts; a refused permission read fails the check with a message.

hexajon referenced this issue

2026-09-29 16:40:53 +00:00

adr check: enforce sign-off on decided records #661

hexajon referenced this issue

2026-09-29 16:41:04 +00:00

plugin hook: refuse an agent commit that decides or edits a record without the person's token #662

hexajon added a new dependency

2026-09-29 16:41:10 +00:00

#661 adr check: enforce sign-off on decided records

hexajon added a new dependency

2026-09-29 16:41:10 +00:00

#662 plugin hook: refuse an agent commit that decides or edits a record without the person's token