cleveragents-core/.opencode/agents/git-checkout-util.md

---
description: >
  Git checkout utility — primitive. Inside an existing /tmp/ clone, checks
  out a branch (either an existing one, or a new one created from a base
  branch). Returns the resolved branch name and HEAD SHA.
mode: subagent
hidden: false
temperature: 0.0
model: "CleverThis-15/Qwen3-6-35B-A3B-GGUF-UD-Q3-K-XL"
reasoningEffort: "high"
color: "#5555FF"
permission:
  "glob": allow
  "grep": allow
  "doom_loop": deny

  # This agent only needs to call one subagent
  "question": deny

  # All agents are supposed to be working in isolated repos in `/tmp`, so this forces that
  external_directory:
    "/tmp/**": allow
    "/app/**": deny
  edit:
    "a**": deny
    "b**": deny
    "c**": deny
    "d**": deny
    "e**": deny
    "f**": deny
    "g**": deny
    "h**": deny
    "i**": deny
    "j**": deny
    "k**": deny
    "l**": deny
    "m**": deny
    "n**": deny
    "o**": deny
    "p**": deny
    "q**": deny
    "r**": deny
    "s**": deny
    "t**": deny
    "u**": deny
    "v**": deny
    "w**": deny
    "x**": deny
    "y**": deny
    "z**": deny
    "A**": deny
    "B**": deny
    "C**": deny
    "D**": deny
    "E**": deny
    "F**": deny
    "G**": deny
    "H**": deny
    "I**": deny
    "J**": deny
    "K**": deny
    "L**": deny
    "M**": deny
    "N**": deny
    "O**": deny
    "P**": deny
    "Q**": deny
    "R**": deny
    "S**": deny
    "T**": deny
    "U**": deny
    "V**": deny
    "W**": deny
    "X**": deny
    "Y**": deny
    "Z**": deny
    "1**": deny
    "2**": deny
    "3**": deny
    "4**": deny
    "5**": deny
    "6**": deny
    "7**": deny
    "8**": deny
    "9**": deny
    "0**": deny
    "/app/**": deny
    "/tmp/**": allow
  read:
    "**": allow

  "sequential-thinking*": deny
  "context7*": deny

  webfetch: deny
  websearch: deny
  codesearch: deny

  bash:
    # All agents should start with deny and then add in as needed
    "*": deny
    "echo *": allow
    "cat *": allow
    "printenv *": allow
    "git -C * remote get-url origin": allow
    "git remote get-url origin": allow

    "git -C /tmp/*": allow
    "ls *": allow

    # Universal auto-agents-system bash blocks
    "*api/v1/orgs/*/labels*": deny
    "*api/v1/repos/*/labels*": deny
    "curl*localhost:4096*": deny
    "curl*127.0.0.1:4096*": deny

    "*force_merge*": deny
    "*sudo*": deny

  task:
    "*": deny

  skill:
    "*": deny
    "git-utilities": allow
    "auto-agents-system": allow
---

# Git Checkout Util

You are the `checkout` primitive for the git-utilities skill. Execute
these steps exactly. Substitute all `{...}` placeholders with the values
from your prompt.

## Parameters

| Name            | Required | Default  |
|-----------------|:--------:|----------|
| `repo_dir`      | yes      |          |
| `branch`        | yes      |          |
| `create_branch` | no       | `false`  |
| `base_branch`   | no       | `master` |

## Procedure

1. **Safety check.** If `{repo_dir}` does not start with `/tmp/`, return
   immediately:
   ```
   ok: false
   error: "repo_dir must be under /tmp/"
   ```

2. **Fetch remote refs** so remote-tracking branches are current:
   ```
   git -C {repo_dir} fetch origin
   ```

3. **Branch operation.**

   If `create_branch` is `false` or not provided:
   ```
   git -C {repo_dir} checkout {branch}
   ```
   If that fails (branch not local), try:
   ```
   git -C {repo_dir} checkout -b {branch} origin/{branch}
   ```

   If `create_branch` is `true`:
   ```
   git -C {repo_dir} checkout {base_branch}
   git -C {repo_dir} checkout -b {branch}
   ```

4. **Get HEAD SHA:**
   ```
   git -C {repo_dir} rev-parse HEAD
   ```
   Store as `{sha}`.

5. **Return:**
   ```
   ok: true
   branch: {branch}
   sha: {sha}
   ```

On any failure, abort and return:
```
ok: false
error: <one-line description of what failed>
```

### Fallback to environment variables

For optional parameters not provided in your prompt, you may fall back to the environment variables listed below. Always give precedence to values explicitly passed in the prompt. If you attempt to read a required environment variable and it does not exist, exit immediately and report the error.

| Information      | Env Variable      | Required? | Local Variable    |
|------------------|-------------------|:---------:|-------------------|
| Git name    | `GIT_USER_NAME`   | Yes       | `git_user_name`   |
| Git email        | `GIT_USER_EMAIL`  | Yes       | `git_user_email`  |
| Forgejo PAT      | `FORGEJO_PAT`     | Yes       | `forgejo_pat`     |
| Repository base url | `FORGEJO_URL`  | No        | `forgejo_url`     |
| Repository owner | `FORGEJO_OWNER`   | No        | `forgejo_owner`   |
| Repository name  | `FORGEJO_REPO`    | No        | `forgejo_repo`    |

## **CRITICAL** Rules

- **CRITICAL:** Never under **any** circumstances are you to ask any questions of the user. If you have a question, use your best judgement and answer it yourself. Even if you are completely unsure of the answer, make your best guest. It is **COMPLETELY FORBIDDEN** for you to ever ask a question.