Switch to role-based GitHub Apps across CartSnitch, PRI, and Groom Book

Each agent now uses the appropriate role-scoped GitHub App:
- CEO app: merge authority, org admin
- CTO app: PR review/approval, engineering + workflows
- QA app: PR review/approval, read-only contents
- Engineer app: push branches, open PRs, CI

CMO agents share the CEO app (no dedicated CMO app).
Samuel (social) uses the engineer app.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
2026-03-20 12:44:16 -04:00
parent 8665e041ef
commit 9abec895e6
7 changed files with 14 additions and 14 deletions
+2 -2
View File
@@ -32,8 +32,8 @@
"cwd": "/paperclip/privilegedescalation/agents/ceo",
"env": {
"HOME": { "type": "plain", "value": "/paperclip/privilegedescalation/agents/ceo" },
"GITHUB_APP_ID_COUNTESS": { "type": "plain", "value": "3097914" },
"GITHUB_PEM_PATH_COUNTESS": { "type": "plain", "value": "/paperclip/secrets/github-pems/privilegedescalation.pem" }
"GITHUB_APP_ID_COUNTESS": { "type": "plain", "value": "3140977" },
"GITHUB_PEM_PATH_COUNTESS": { "type": "plain", "value": "/paperclip/secrets/github-pems/privilegedescalation-ceo.pem" }
},
"model": "claude-opus-4-6",
"effort": "medium",
+2 -2
View File
@@ -32,8 +32,8 @@
"cwd": "/paperclip/privilegedescalation/agents/cmo",
"env": {
"HOME": { "type": "plain", "value": "/paperclip/privilegedescalation/agents/cmo" },
"GITHUB_APP_ID_ADDISON": { "type": "plain", "value": "3097914" },
"GITHUB_PEM_PATH_ADDISON": { "type": "plain", "value": "/paperclip/secrets/github-pems/privilegedescalation.pem" }
"GITHUB_APP_ID_ADDISON": { "type": "plain", "value": "3140977" },
"GITHUB_PEM_PATH_ADDISON": { "type": "plain", "value": "/paperclip/secrets/github-pems/privilegedescalation-ceo.pem" }
},
"model": "claude-sonnet-4-6",
"effort": "medium",
+2 -2
View File
@@ -32,8 +32,8 @@
"cwd": "/paperclip/privilegedescalation/agents/cto",
"env": {
"HOME": { "type": "plain", "value": "/paperclip/privilegedescalation/agents/cto" },
"GITHUB_APP_ID_NANCY": { "type": "plain", "value": "3097914" },
"GITHUB_PEM_PATH_NANCY": { "type": "plain", "value": "/paperclip/secrets/github-pems/privilegedescalation.pem" }
"GITHUB_APP_ID_NANCY": { "type": "plain", "value": "3141071" },
"GITHUB_PEM_PATH_NANCY": { "type": "plain", "value": "/paperclip/secrets/github-pems/privilegedescalation-cto.pem" }
},
"model": "claude-opus-4-6",
"effort": "medium",
+2 -2
View File
@@ -32,8 +32,8 @@
"cwd": "/paperclip/privilegedescalation/agents/engineering/gandalf",
"env": {
"HOME": { "type": "plain", "value": "/paperclip/privilegedescalation/agents/engineering/gandalf" },
"GITHUB_APP_ID_GANDALF": { "type": "plain", "value": "3097914" },
"GITHUB_PEM_PATH_GANDALF": { "type": "plain", "value": "/paperclip/secrets/github-pems/privilegedescalation.pem" }
"GITHUB_APP_ID_GANDALF": { "type": "plain", "value": "3141264" },
"GITHUB_PEM_PATH_GANDALF": { "type": "plain", "value": "/paperclip/secrets/github-pems/privilegedescalation-engineer.pem" }
},
"model": "claude-sonnet-4-6",
"graceSec": 15,
+2 -2
View File
@@ -32,8 +32,8 @@
"cwd": "/paperclip/privilegedescalation/agents/engineering/hugh",
"env": {
"HOME": { "type": "plain", "value": "/paperclip/privilegedescalation/agents/engineering/hugh" },
"GITHUB_APP_ID_HUGH": { "type": "plain", "value": "3097914" },
"GITHUB_PEM_PATH_HUGH": { "type": "plain", "value": "/paperclip/secrets/github-pems/privilegedescalation.pem" }
"GITHUB_APP_ID_HUGH": { "type": "plain", "value": "3141264" },
"GITHUB_PEM_PATH_HUGH": { "type": "plain", "value": "/paperclip/secrets/github-pems/privilegedescalation-engineer.pem" }
},
"model": "claude-sonnet-4-6",
"effort": "medium",
+2 -2
View File
@@ -35,8 +35,8 @@
"env": {
"HOME": { "type": "plain", "value": "/paperclip/privilegedescalation/agents/engineering/regina" },
"OPENROUTER_API_KEY": { "type": "secret_ref", "secretId": "d843133a-0702-4f44-b8e8-43249879995f" },
"GITHUB_APP_ID_REGINA": { "type": "plain", "value": "3097914" },
"GITHUB_PEM_PATH_REGINA": { "type": "plain", "value": "/paperclip/secrets/github-pems/privilegedescalation.pem" }
"GITHUB_APP_ID_REGINA": { "type": "plain", "value": "3141386" },
"GITHUB_PEM_PATH_REGINA": { "type": "plain", "value": "/paperclip/secrets/github-pems/privilegedescalation-qa.pem" }
},
"model": "openrouter/minimax/minimax-m2.7"
}
+2 -2
View File
@@ -32,8 +32,8 @@
"cwd": "/paperclip/privilegedescalation/agents/marketing/samuel",
"env": {
"HOME": { "type": "plain", "value": "/paperclip/privilegedescalation/agents/marketing/samuel" },
"GITHUB_APP_ID_SAMUEL": { "type": "plain", "value": "3097914" },
"GITHUB_PEM_PATH_SAMUEL": { "type": "plain", "value": "/paperclip/secrets/github-pems/privilegedescalation.pem" }
"GITHUB_APP_ID_SAMUEL": { "type": "plain", "value": "3141264" },
"GITHUB_PEM_PATH_SAMUEL": { "type": "plain", "value": "/paperclip/secrets/github-pems/privilegedescalation-engineer.pem" }
},
"model": "claude-haiku-4-5-20251001",
"graceSec": 15,