symphony-trello: Skill for Codex

Push PR

Goals

• Push the current branch without changing remotes behind the user's back.
• Create a ready-for-review, non-draft PR when none exists, or update the existing PR.
• Use a draft PR only when the Trello card explicitly asks for a draft PR.
• Keep PR title and body aligned with the full branch scope.
• Distinguish stale-branch problems from auth or permission problems.

Preconditions

• gh is installed and authenticated for this repository.
• Local verification required by AGENTS.md has passed or the blocker is known.

Steps

1. Inspect the branch and diff:

   branch="$(git branch --show-current)"
   git status --short --branch
   git log --oneline --decorate -5
   

2. If the prompt ends with a runtime Codex Review Before Handoff section, finish that review loop first. Then run the required local checks for the change, including CI-equivalent local checks when CI cannot run. Without that section, just run the required local checks.

3. Before pushing, verify that commits intended for the PR are authored as the authenticated GitHub login:

   if ! github_name="$(gh api user --jq '.login // ""')" || [ -z "$github_name" ]; then
     echo "GitHub identity lookup failed: cannot verify PR commit author login" >&2
     exit 1
   fi
   if ! github_email="$(gh api user --jq '.email // ""')"; then
     echo "GitHub identity lookup failed: cannot verify PR commit author email metadata" >&2
     exit 1
   fi
   if [ -z "$github_email" ]; then
     if ! github_email="$(gh api user/emails --jq '[.[] | select(.email | endswith("@users.noreply.github.com")) | .email][0] // ""' 2>/dev/null)"; then
       echo "GitHub identity lookup failed: gh api user/emails needs the user:email scope; run gh auth refresh -s user:email for this account" >&2
       exit 1
     fi
   fi
   if [ -z "$github_email" ]; then
     echo "GitHub identity lookup failed: configure a public email or accessible GitHub noreply email for this account" >&2
     exit 1
   fi
   github_author="$github_name <$github_email>"
   default_branch="$(git remote show origin | sed -n 's/  HEAD branch: //p')"
   if [ -z "$default_branch" ]; then
     default_branch="$(git symbolic-ref --quiet --short refs/remotes/origin/HEAD 2>/dev/null | sed 's#^origin/##' || true)"
   fi
   if [ -z "$default_branch" ]; then
     echo "Git author verification failed: could not resolve origin default branch" >&2
     exit 1
   fi
   if ! git fetch origin "$default_branch"; then
     echo "Git author verification failed: could not fetch origin/$default_branch" >&2
     exit 1
   fi
   base_ref="origin/$default_branch"
   if ! git rev-parse --verify --quiet "$base_ref" >/dev/null; then
     echo "Git author verification failed: missing $base_ref" >&2
     exit 1
   fi
   if ! merge_base="$(git merge-base HEAD "$base_ref")"; then
     echo "Git author verification failed: could not find a merge base with $base_ref" >&2
     exit 1
   fi
   git log --format='%H %an <%ae>' "$merge_base"..HEAD
   symphony_trello_author_rewrite=false
   wrong_authors="$(
     git log --format='%H%x09%an <%ae>' "$merge_base"..HEAD |
       while IFS="$(printf '\t')" read -r commit author; do
         if [ "$author" != "$github_author" ]; then
           printf '%s %s\n' "$commit" "$author"
         fi
       done
   )"
   if [ -n "$wrong_authors" ]; then
     current_branch="$(git branch --show-current)"
     if [ -z "$current_branch" ] || [ "$current_branch" = "$default_branch" ]; then
       printf 'Git author verification failed: expected PR commits authored as %s\n%s\n' "$github_author" "$wrong_authors" >&2
       echo "Refusing to rewrite author metadata on the default branch or an unnamed branch" >&2
       exit 1
     fi
     printf 'Git author verification will rewrite PR branch commits to %s\n%s\n' "$github_author" "$wrong_authors" >&2
     export GIT_AUTHOR_NAME="$github_name"
     export GIT_AUTHOR_EMAIL="$github_email"
     export GIT_COMMITTER_NAME="$github_name"
     export GIT_COMMITTER_EMAIL="$github_email"
     if ! git rebase --exec 'git commit --amend --no-edit --reset-author' "$merge_base"; then
       echo "Git author verification failed: could not rewrite PR commit authors" >&2
       exit 1
     fi
     unset GIT_AUTHOR_NAME GIT_AUTHOR_EMAIL GIT_COMMITTER_NAME GIT_COMMITTER_EMAIL
     wrong_authors="$(
       git log --format='%H%x09%an <%ae>' "$merge_base"..HEAD |
         while IFS="$(printf '\t')" read -r commit author; do
           if [ "$author" != "$github_author" ]; then
             printf '%s %s\n' "$commit" "$author"
           fi
         done
     )"
     if [ -n "$wrong_authors" ]; then
       printf 'Git author verification failed after rewrite: expected PR commits authored as %s\n%s\n' "$github_author" "$wrong_authors" >&2
       exit 1
     fi
     symphony_trello_author_rewrite=true
   fi