Files
NBandClaude Opus 5.5 9a0f5262a2 Let agents create repositories through OpenBotGit (#5139)
GitHub needs the Administration permission to create a repository, and
OpenBotGit did not ask for it (#4998). The manifest now asks for
administration: write.

An installation token is not limited to what its user can do. The Worker
now requests bot tokens with the granted permissions of the installation,
without administration, so a user with push access cannot get admin
access through openbotgit[bot]. Creation uses the user token.

When an installation has not granted the permission, the GitHub MCP proxy
adds an explanation to the create_repository error for the agent.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-05 12:39:33 +01:00
..