symphony-trello: Skill for Codex

Push PR

Goals

• Push the current branch without changing remotes behind the user's back.
• Create a ready-for-review, non-draft PR when none exists, or update the existing PR.
• Use a draft PR only when the Trello card explicitly asks for a draft PR.
• Keep PR title and body aligned with the full branch scope.
• Distinguish stale-branch problems from auth or permission problems.

Preconditions

• gh is installed and authenticated for this repository.
• Local verification required by AGENTS.md has passed or the blocker is known.

Steps

1. Inspect the branch and diff:

   branch="$(git branch --show-current)"
   git status --short --branch
   git log --oneline --decorate -5
   

2. Run the required local checks for the change.

3. Before pushing, verify that commits intended for the PR are authored as the authenticated GitHub login:

   if ! github_name="$(gh api user --jq '.login // ""')" || [ -z "$github_name" ]; then
     echo "GitHub identity lookup failed: cannot verify PR commit author login" >&2
     exit 1
   fi
   if ! github_email="$(gh api user --jq '.email // ""')"; then
     echo "GitHub identity lookup failed: cannot verify PR commit author email metadata" >&2
     exit 1
   fi
   if [ -z "$github_email" ]; then
     if ! github_email="$(gh api user/emails --jq '[.[] | select(.email | endswith("@users.noreply.github.com")) | .email][0] // ""' 2>/dev/null)"; then
       echo "GitHub identity lookup failed: gh api user/emails needs the user:email scope; run gh auth refresh -s user:email for this account" >&2
       exit 1
     fi
   fi
   if [ -z "$github_email" ]; then
     echo "GitHub identity lookup failed: configure a public email or accessible GitHub noreply email for this account" >&2
     exit 1
   fi
   github_author="$github_name <$github_email>"
   default_branch="$(git remote show origin | sed -n 's/  HEAD branch: //p')"
   if [ -z "$default_branch" ]; then
     default_branch="$(git symbolic-ref --quiet --short refs/remotes/origin/HEAD 2>/dev/null | sed 's#^origin/##' || true)"
   fi
   if [ -z "$default_branch" ]; then
     echo "Git author verification failed: could not resolve origin default branch" >&2
     exit 1
   fi
   if ! git fetch origin "$default_branch"; then
     echo "Git author verification failed: could not fetch origin/$default_branch" >&2
     exit 1
   fi
   base_ref="origin/$default_branch"
   if ! git rev-parse --verify --quiet "$base_ref" >/dev/null; then
     echo "Git author verification failed: missing $base_ref" >&2
     exit 1
   fi
   if ! merge_base="$(git merge-base HEAD "$base_ref")"; then
     echo "Git author verification failed: could not find a merge base with $base_ref" >&2
     exit 1
   fi
   git log --format='%H %an <%ae>' "$merge_base"..HEAD
   symphony_trello_author_rewrite=false
   wrong_authors="$(
     git log --format='%H%x09%an <%ae>' "$merge_base"..HEAD |
       while IFS="$(printf '\t')" read -r commit author; do
         if [ "$author" != "$github_author" ]; then
           printf '%s %s\n' "$commit" "$author"
         fi
       done
   )"
   if [ -n "$wrong_authors" ]; then
     current_branch="$(git branch --show-current)"
     if [ -z "$current_branch" ] || [ "$current_branch" = "$default_branch" ]; then
       printf 'Git author verification failed: expected PR commits authored as %s\n%s\n' "$github_author" "$wrong_authors" >&2
       echo "Refusing to rewrite author metadata on the default branch or an unnamed branch" >&2
       exit 1
     fi
     printf 'Git author verification will rewrite PR branch commits to %s\n%s\n' "$github_author" "$wrong_authors" >&2
     export GIT_AUTHOR_NAME="$github_name"
     export GIT_AUTHOR_EMAIL="$github_email"
     export GIT_COMMITTER_NAME="$github_name"
     export GIT_COMMITTER_EMAIL="$github_email"
     if ! git rebase --exec 'git commit --amend --no-edit --reset-author' "$merge_base"; then
       echo "Git author verification failed: could not rewrite PR commit authors" >&2
       exit 1
     fi
     unset GIT_AUTHOR_NAME GIT_AUTHOR_EMAIL GIT_COMMITTER_NAME GIT_COMMITTER_EMAIL
     wrong_authors="$(
       git log --format='%H%x09%an <%ae>' "$merge_base"..HEAD |
         while IFS="$(printf '\t')" read -r commit author; do
           if [ "$author" != "$github_author" ]; then
             printf '%s %s\n' "$commit" "$author"
           fi
         done
     )"
     if [ -n "$wrong_authors" ]; then
       printf 'Git author verification failed after rewrite: expected PR commits authored as %s\n%s\n' "$github_author" "$wrong_authors" >&2
       exit 1
     fi
     symphony_trello_author_rewrite=true
   fi