Kris 9eb125afe3

fix: handle non-user actors (e.g. Copilot) in permission and actor checks (#1144) ...

GitHub Apps like Copilot SWE Agent set GITHUB_ACTOR to a value (e.g.
"Copilot") that is neither a valid GitHub user nor ends with "[bot]".
This caused two independent crashes:

1. checkWritePermissions (permissions.ts): called the collaborator
   permission API which returns 404 "is not a user" for non-user actors.
2. checkHumanActor (actor.ts): called the Users API first, which 404s,
   before ever reaching the allowed_bots check.

Fix both by:
- Checking allowed_bots BEFORE making API calls, so known bots skip the
  API entirely.
- In permissions.ts, catching "is not a user" 404 errors and falling
  back to the allowed_bots list instead of crashing.
- In actor.ts, catching 404 errors and providing a clear error message
  telling the user to add the bot to allowed_bots.

Closes #900, #903, #1018, #1133

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-05-14 15:38:34 -07:00

..

create-prompt

Remove redundant git status/diff/log from tag mode allowlist (#1075)

2026-03-18 09:06:33 -07:00

entrypoints

fix: write execution file when SDK throws (#1255)

2026-05-14 15:37:28 -07:00

github

fix: handle non-user actors (e.g. Copilot) in permission and actor checks (#1144)

2026-05-14 15:38:34 -07:00

mcp

feat(inline-comment): add confirmed param + probe-pattern safety net (#1048)

2026-03-12 00:12:55 -07:00

modes

fix: fall back to repo default_branch instead of hardcoded "main" (#1143)

2026-04-01 14:48:46 -07:00

utils

fix: skip retries for non-retryable errors in retryWithBackoff (#1082)

2026-04-04 20:14:47 -07:00