From 36c2aea88200bf5add1d1874489bee3d29bed0bf Mon Sep 17 00:00:00 2001 From: collissimo <148455189+collissimo@users.noreply.github.com> Date: Fri, 23 Oct 2026 18:04:41 +0200 Subject: [PATCH 1/2] Fork release: watcher trims its GitHub token Co-Authored-By: Claude Opus 5.5 --- fork/upstream-nightly-watcher/worker.js | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/fork/upstream-nightly-watcher/worker.js b/fork/upstream-nightly-watcher/worker.js index e1d64a4d5210f..7bbf84889a9ea 100644 --- a/fork/upstream-nightly-watcher/worker.js +++ b/fork/upstream-nightly-watcher/worker.js @@ -8,7 +8,8 @@ async function github(env, path, init = {}) { ...init, headers: { accept: "application/vnd.github+json", - authorization: `Bearer ${env.GITHUB_TOKEN}`, + // A pasted secret can keep a trailing CR, which GitHub rejects with an empty 400. + authorization: `Bearer ${env.GITHUB_TOKEN.trim()}`, "user-agent": "t3code-upstream-nightly-watcher", "x-github-api-version": "2022-11-28", ...init.headers, From 41870dca27f6643d78b2c10cafba88ad44f62e0d Mon Sep 17 00:00:00 2001 From: collissimo <148455189+collissimo@users.noreply.github.com> Date: Fri, 23 Oct 2026 18:05:02 +0200 Subject: [PATCH 2/2] FORK.md: set the watcher token from the clipboard Co-Authored-By: Claude Opus 5.5 --- FORK.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/FORK.md b/FORK.md index f696614307422..b2dcded751aba 100644 --- a/FORK.md +++ b/FORK.md @@ -67,9 +67,9 @@ nothing. When Claude cannot resolve it, every run of that pair fails: sync `coll then `gh workflow run fork-release.yml` (`-f force=true` asks Claude again instead). Watcher setup (once, or after the token expires), from `fork/upstream-nightly-watcher/`: -`npx wrangler deploy`, then `npx wrangler secret put GITHUB_TOKEN` with a fine-grained token -for `collissimo/t3code` (Contents: read and write, Actions: read). `npx wrangler tail` shows -each check. +`npx wrangler deploy`, then copy a fine-grained token for `collissimo/t3code` (Contents: read and +write, Actions: read) and run `Get-Clipboard | npx wrangler secret put GITHUB_TOKEN`. Pasting +into the hidden prompt instead can store a raw Ctrl+V. `npx wrangler tail` shows each check. - Every machine must run a fork build once (installed by hand); from then on the update button, including "update everything" for connected servers, stays on the fork. A desktop app on the