dsh-github-gate

LIMITATIONS

Known limitations

- **Device Flow has not completed a real authorization round trip.** The polling state machine is fully covered against an injected fetch; the real github.com exchange needs your own OAuth App and a browser. - **No write action has been executed.** All verification is read-only; no real resource was created, merged, or deleted. - **Only `github_auth` action `token` prints a token.** It exists to pipe a token into another tool, so its `stdout` is the secret; the plugin never puts one in argv, in a log line, or in a card. Treat that output as a secret. Everything else reports *which layer* supplied the credential and never the value. Tool cards go through the generic `presentCall`/`presentResult` path with a real `kind` (read / search). - **Source edits do not take effect automatically**: the installed artifact is a tarball snapshot. - **PTC mode is untested.** `defineTool` makes `await tools.<name>(args)` work, but this plugin has not been driven under the PTC preset. Designs that were evaluated and deliberately not implemented — structured review evidence routing, idempotent PR creation, diff budgets, flow state — are recorded in [docs/DESIGN.md](./docs/DESIGN.md) §8 so the ideas are not lost with the source repositories.