Skip to content

Build first, then get a repo and hand over secrets to the platform team - #10

Merged
psmiratisu merged 1 commit into
mainfrom
repo-from-platform-team
Oct 26, 2026
Merged

psmiratisu merged 1 commit into
mainfrom
repo-from-platform-team

Conversation

@psmiratisu

Copy link
Copy Markdown
Contributor

Matches the bizops portal's new Build an app order (internal-bizops-tool#62): builders don't need GitHub org membership up front, and only repo admins can set Actions secrets.

The order now:

  1. Build in a folder on your computer.
  2. When it's ready, the platform team creates the private repo in Virtual-Protocol, adds the builder, and adds the secrets. The builder sends the values through a password manager share, never chat or email.
  3. Host it.
  4. Deploy.

Changes

  • Plugin guide (SKILL.md, version 1.1.0): new "How an app goes live" order. Claude starts new apps in a local folder (git init), runs them locally for the builder to try, and never asks for a secret's value. The hand-off now covers getting the repo, sending secrets to the platform team, hosting, then deploying.
  • README: same order. It explains that a deploy before hosting fails with "isn't hosted yet", because hosting creates the app's place to run.
  • "Not deployed yet" page (placeholder/server.mjs): "Add its secrets" becomes "Check its secrets are added". The page explains that the platform team adds them and asks for missing values by password manager share. The secrets-page buttons are marked "(admins)".

Tested

  • claude plugin validate plugin passes.
  • I rendered the placeholder page locally and checked its steps.
  • Templates and checker are unchanged, so Plugin in sync still holds.

🤖 Generated with Claude Code

Builders start in a folder on their computer, with no repo or org
membership. When the app is ready, the platform team creates the repo in
Virtual-Protocol, adds the builder, and adds the secrets the builder sends
through a password manager share (only repo admins can set them). Then host,
then deploy. The guide, README and the not-deployed-yet page now say so, and
the guide tells Claude never to ask for a secret's value.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@psmiratisu
psmiratisu merged commit 7663151 into main Oct 26, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant