Provision the AI distribution GitHub App

[woksin]

Goal

Provision a repository-scoped machine identity for generated updates to Cratis/AI.Distribution.

Why this is manual

The one-time deploy key initialized the repository and was immediately removed. Deploy keys cannot create pull requests, tags, releases, checks, or reviewed publication operations. Creating a GitHub App or equivalent machine account requires organization-owner installation and credential custody outside the source repository.

Required setup

• Create or select a GitHub App owned by Cratis.
• Install it only on Cratis/AI and Cratis/AI.Distribution unless broader scope is separately approved.
• Minimum generated-repository permissions: metadata read, contents write, pull requests write, checks/statuses write; tags/releases remain disabled until release approval.
• Store App ID/installation ID/private key in protected organization or Cratis/AI Actions secrets with access restricted to the approved workflow/environment.
• Keep human direct pushes disabled; updates must be generated PRs.
• Rotate/revoke credentials and document emergency disable.

Acceptance criteria

• A dry-run workflow creates a generated update branch and PR without personal credentials.
• The PR contains only generated files and passes required checks.
• A human reviewer can approve a merge commit; the bot cannot approve its own PR.
• Credential scope, rotation, audit, and emergency-disable evidence are recorded.
• No tag, release, npm, marketplace, or production permission is granted by this issue.

Evidence

• Strategy intake: Cratis/Strategy#126
• Architecture/rollout: Replace all-to-all AI corpus propagation with a controlled distribution model #68
• AI implementation: Add marketplace distribution foundation AI#140, #141, #143, #145, #146
• Protected generated repository: https://github.com/Cratis/AI.Distribution

[woksin]

Cratis/AI#150 now contains the implementation-ready generated update workflow: App token action pinned to v3.2.0 commit bcd2ba4, installation scoped to AI.Distribution, token down-scoped to contents/pull-request write, distribution-canary review, fixture-only branch/PR creation, and explicit denial of main push/force/tag/release/npm/marketplace operations. Manual work is reduced to creating/installing the App and setting AI_DISTRIBUTION_APP_ID / AI_DISTRIBUTION_APP_PRIVATE_KEY.

[woksin]

Hosted credential-free generated-update verification passed on main: https://github.com/Cratis/AI/actions/runs/32579005862. It validated 0.0.2-fixture generation, package/repository boundaries and protected-PR workflow invariants without App credentials. Remaining manual work is exactly App creation/installation and the two protected secrets; no workflow redesign remains.

[woksin]

Draft release PR AI#186 now exercises the exact production workflow path in pull-request validation. Before merge, create/install the least-privilege App, configure AI_DISTRIBUTION_APP_ID and AI_DISTRIBUTION_APP_PRIVATE_KEY for the distribution-canary environment, enable generated index PR auto-merge only after required checks, and record installation IDs, permissions, rotation, and emergency disable. The production path creates a draft GitHub release and generated index PR in AI.Distribution; do not grant organization-wide write or personal credentials.

[cratis-direct]

Thanks for opening this - it has been received and will be looked at.

---

Posted by Stagehand (AI) - an autonomous agent, not a person. Review accordingly.