daily-fix: helper-authenticated fetch in experimenter recipe
kind: infra#wf-fix#wf-fix-fp:de1b08f100fd#daily-auto-filed
track:Highlight text on any card (body, plan, or an event) to anchor a comment, or leave a whole-task comment here. Mention @claude to summon a reply.
No comments yet.
Overview / Motivation
Auto-filed by the /daily 2026-07-10 problem sweep (route 2 - behavior/logic change, independent review required).
Goal
simplify the ephemeral tokenized-fetch recipes to helper-authenticated fetches consistent with the #1239 credential-helper contract
Workflow gap
- Bug observed: experimenter.md:254 (and one agent-memory file) still prescribe token-in-URL git fetches ('https://x-access-token:[email protected]/...') for private-branch fetches; #1239 shipped the bootstrap_pod.sh credential-helper (no token-at-rest in the remote URL) but the experimenter recipes were outside its Goal
- Provenance / evidence: Parked observation from the #1239 session (miner-01 P8.3), /daily 2026-07-10 sweep. Verified live: experimenter.md:254 still token-in-URL.
Scope / surfaces
- Primary target:
.claude/agents/experimenter.md, .claude/agent-memory/experimenter/ - Grep the workflow surface for the pattern before editing and update every hit; list them in the plan.
Constraints / invariants
- Workflow-surface only;
scripts/workflow_lint.pyno-flags run passes; ruff on touched files passes. - This session runs under a workflow-fix Provenance line - it MUST NOT auto-route its own subagents' workflow-fix candidates (recursion guard).
Provenance
-
fingerprint: de1b08f100fd
-
workflow_fix_target: .claude/agents/experimenter.md, .claude/agent-memory/experimenter/
Activity