Skip to content

fix(stage): stop leaking the private mirror into upstream PRs#48

Merged
cabljac merged 1 commit into
mainfrom
fix/mirror-invisible-upstream
Jun 4, 2026
Merged

fix(stage): stop leaking the private mirror into upstream PRs#48
cabljac merged 1 commit into
mainfrom
fix/mirror-invisible-upstream

Conversation

@cabljac

@cabljac cabljac commented Jun 4, 2026

Copy link
Copy Markdown
Owner

Bug

venfork stage --pr appended a footer to the upstream PR body:

Upstreamed from internal review (https://github.com/owner/project-private/pull/N)

That URL points at the private mirror, leaking it into the public upstream PR. issue stage had the same leak, and the no-internal-PR fallback body stated "Staged from a private mirror". All violate the core principle: the mirror is invisible to upstream.

Fix

  • translateInternalBody — dropped the footer (and its internalUrl/kind params); now strips venfork:internal blocks only. Fixes both stage --pr and issue stage.
  • buildSyntheticBody — reworded "Staged from a private mirror" / "No internal review PR" to a neutral commit summary (Commits in this branch: / No description provided.).

The internal PR URL is still recorded in mirror config (shippedBranches[].internalPrUrl) and shown to you locally — never sent upstream.

Tests

  • Flipped the tier 3 e2e assertion: upstream PR body must not contain Upstreamed from internal nor the mirror repo name.
  • bun run check clean; unit + redaction tests pass.

Docs

Updated README --pr step 2 to drop the footer claim.

`stage --pr` (and `issue stage`) appended a footer "Upstreamed from
internal review (<url>)" to the upstream PR/issue body, where <url>
points at the private mirror. The synthetic fallback body also stated
"Staged from a private mirror". Both violate the core principle that the
mirror is invisible to upstream.

Drop the footer from translateInternalBody (now strips internal blocks
only) and reword buildSyntheticBody to a neutral commit summary. The
internal PR URL is still recorded in mirror config and shown locally,
never sent upstream.
@cabljac cabljac force-pushed the fix/mirror-invisible-upstream branch from 0de5539 to da3bb0d Compare June 4, 2026 11:39
@cabljac cabljac merged commit 40d00c5 into main Jun 4, 2026
4 checks passed
@cabljac cabljac deleted the fix/mirror-invisible-upstream branch June 4, 2026 12:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant