feat(ops): @ops uses dedicated TOKEN_OPS not AGENT_TOKEN #58

Merged
ffaerber merged 1 commits from feat/ops-dedicated-token into main 2026-07-05 14:52:10 +02:00
Owner

@ops now uses TOKEN_OPS (injected only for name==ops), so AGENT_TOKEN no longer needs to be admin.

@ops now uses TOKEN_OPS (injected only for name==ops), so AGENT_TOKEN no longer needs to be admin.
ffaerber added 1 commit 2026-07-05 14:52:08 +02:00
The gitea-admin skill now authenticates with TOKEN_OPS (the ops user's admin token), and TOKEN_OPS
is injected into the agent process ONLY when name==ops. No other agent holds an admin credential in
its env. This unhooks @ops from AGENT_TOKEN, so AGENT_TOKEN can be narrowed to a non-admin token.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
ffaerber merged commit e53e5caf8c into main 2026-07-05 14:52:10 +02:00
Sign in to join this conversation.
No Reviewers
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: gitea/agents#58