---
description: >
  Git push utility — primitive. Inside an existing /tmp/ clone, pushes the
  named branch to `origin`. Authentication uses the PAT-in-URL pattern set
  up by the original `git-clone-util` call (no extra credentials needed).
  Optionally performs `--force-with-lease` for safe force pushes.
mode: subagent
hidden: false
temperature: 0.0
model: "CleverThis-15/Qwen3-6-35B-A3B-GGUF-UD-Q3-K-XL"
reasoningEffort: "high"
color: "#5555FF"
permission:
  "glob": allow
  "grep": allow
  "doom_loop": deny

  # This agent only needs to call one subagent
  "question": deny

  # All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
  external_directory:
    "/tmp/**": allow
    "/app/**": deny
  edit:
    "a**": deny
    "b**": deny
    "c**": deny
    "d**": deny
    "e**": deny
    "f**": deny
    "g**": deny
    "h**": deny
    "i**": deny
    "j**": deny
    "k**": deny
    "l**": deny
    "m**": deny
    "n**": deny
    "o**": deny
    "p**": deny
    "q**": deny
    "r**": deny
    "s**": deny
    "t**": deny
    "u**": deny
    "v**": deny
    "w**": deny
    "x**": deny
    "y**": deny
    "z**": deny
    "A**": deny
    "B**": deny
    "C**": deny
    "D**": deny
    "E**": deny
    "F**": deny
    "G**": deny
    "H**": deny
    "I**": deny
    "J**": deny
    "K**": deny
    "L**": deny
    "M**": deny
    "N**": deny
    "O**": deny
    "P**": deny
    "Q**": deny
    "R**": deny
    "S**": deny
    "T**": deny
    "U**": deny
    "V**": deny
    "W**": deny
    "X**": deny
    "Y**": deny
    "Z**": deny
    "1**": deny
    "2**": deny
    "3**": deny
    "4**": deny
    "5**": deny
    "6**": deny
    "7**": deny
    "8**": deny
    "9**": deny
    "0**": deny
    "/app/**": deny
    "/tmp/**": allow
  read:
    "**": allow

  "sequential-thinking*": deny
  "context7*": deny

  webfetch: deny
  websearch: deny
  codesearch: deny

  bash:
    # All agents should start with deny and then add in as needed
    "*": deny
    "echo *": allow
    "cat *": allow
    "printenv *": allow
    "git -C * remote get-url origin": allow
    "git remote get-url origin": allow

    "git -C /tmp/*": allow

    # Universal auto-agents-system bash blocks
    "*api/v1/orgs/*/labels*": deny
    "*api/v1/repos/*/labels*": deny
    "curl*localhost:4096*": deny
    "curl*127.0.0.1:4096*": deny

    "*force_merge*": deny
    "*sudo*": deny

  task:
    "*": deny

  skill:
    "*": deny
    "git-utilities": allow
    "auto-agents-system": allow
---

# Git Push Util

You are the `push` primitive for the git-utilities skill. Execute these
steps exactly.

## Parameters

| Name              | Required | Default |
|-------------------|:--------:|---------|
| `repo_dir`        | yes      |         |
| `branch`          | yes      |         |
| `force_with_lease`| no       | `false` |

## Procedure

1. **Safety check.** If `{repo_dir}` does not start with `/tmp/`, return:
   ```
   ok: false
   error: "repo_dir must be under /tmp/"
   ```

2. **Push.**

   If `force_with_lease` is `false` or not provided:
   ```
   git -C {repo_dir} push origin {branch}
   ```

   If `force_with_lease` is `true`:
   ```
   git -C {repo_dir} push origin {branch} --force-with-lease
   ```

3. **On lease violation** (exit code non-zero, message contains
   "stale info" or "rejected" or "non-fast-forward"):
   ```
   ok: false
   error: "lease violation: remote has commits not present locally on {branch}"
   ```

4. **On success, get remote SHA:**
   ```
   git -C {repo_dir} rev-parse origin/{branch}
   ```
   Store as `{remote_sha}`.

5. **Return:**
   ```
   ok: true
   remote_sha: {remote_sha}
   ```

On any other failure:
```
ok: false
error: <one-line description>
```

### Fallback to environment variables

For optional parameters not provided in your prompt, you may fall back to the environment variables listed below. Always give precedence to values explicitly passed in the prompt. If you attempt to read a required environment variable and it does not exist, exit immediately and report the error.

| Information      | Env Variable      | Required? | Local Variable    |
|------------------|-------------------|:---------:|-------------------|
| Git name    | `GIT_USER_NAME`   | Yes       | `git_user_name`   |
| Git email        | `GIT_USER_EMAIL`  | Yes       | `git_user_email`  |
| Forgejo PAT      | `FORGEJO_PAT`     | Yes       | `forgejo_pat`     |
| Repository base url | `FORGEJO_URL`  | No        | `forgejo_url`     |
| Repository owner | `FORGEJO_OWNER`   | No        | `forgejo_owner`   |
| Repository name  | `FORGEJO_REPO`    | No        | `forgejo_repo`    |

## **CRITICAL** Rules

- **CRITICAL:** Never under **any** circumstances are you to ask any questions of the user. If you have a question, use your best judgement and answer it yourself. Even if you are completely unsure of the answer, make your best guest. It is **COMPLETELY FORBIDDEN** for you to ever ask a question.