Add zsh completion stub for nimbus
+2 -0contrib/completion/_nimbus.zsh
Registers a minimal _nimbus completion function so shells can discover subcommands without sourcing the full CLI.
Comment on real lines. Stack dependent pulls. Triage next to the branch. Ship with GitHub-compatible CI and automation that fires on repository events. One surface, less tab debt.
This PR adds completion generation for the nimbus command across bash and zsh shells, with opt-in support for hidden flags via NIMBUS_COMPLETE_HIDDEN=1 environment variable.
The implementation introduces a new completion.go module that gates hidden flag visibility during completion generation. A seed GenBash() function in completion_gen.go provides bash completion output, while _nimbus_bash_complete completion is disabled by default for hidden flags; export NIMBUS_COMPLETE_HIDDEN=1 to reveal them.
The change is additive and backward-compatible — existing completion behavior stays intact. Test coverage validates that the TestHiddenFlagsMaskedByDefault function is callable.
contrib/completion/_nimbus.zsh
Registers a minimal _nimbus completion function so shells can discover subcommands without sourcing the full CLI.
contrib/completion/_nimbus.bash
Bash completion now forwards NIMBUS_COMPLETE_HIDDEN when set, mirroring zsh behavior for scripting environments.
cmd/nimbus/completion_gen.go
Embeds a static table of commands and hidden flags into the binary so offline completion stays in sync with nimbus --help.
docs/cli/completion.md
Operators can opt into exposing experimental flags during completion by exporting the documented variables.
tests/completion/hidden_test.go
Golden tests assert that hidden flags stay out of default completion output unless the env gate is on.
CHANGELOG.md
Release notes for completion improvements and the new env toggles.
Drafts and issues stay next to open PR rows, stacks stay grouped in order, and CI status shows on the list. Review and triage never leave the branch you are shipping.
Summarizes each new PR in one comment.
Install automations beside your repos. They run when real repository events fire—a PR opens, CI succeeds, a bot gets mentioned—with permissions you control and audit trails you can trace.
Run your existing .github/workflows YAML on Linux, ARM64, and macOS runners—with repo and org secrets, artifacts, and release publishing included.
Keep diffs, issues, and automation on the same timeline as the code—without switching tabs or losing branch context inside Trylle.
Security: shortens JWT refresh horizons and rotates signing assertions so webhook retries expose less surface.
Touch packages/api/src/auth/rotate.ts for verifier timing and backoff caps.
Ops: staged flag flips default deny on legacy /v1/session/renew callers; dashboards tag cohorts still on long-lived cookies.
Expect a short spike in 401 charts until mobile bundles ship mid-week.
Flip into a quieter lane—a narrative walk-through of what changed alongside the snippets that matter—so reviewers stay oriented without tab sprawl.
7f3c9a218m agoL42Potential secret in build context — Dockerfile promotes a bearer token via ENV; prefer BuildKit secrets (RUN --mount=type=secret) or CI-injected ephemeral creds before this lands on default.
- ENV DEPLOY_TOKEN="gh…" +# prefer: RUN --mount=type=secret…
Kick off bots on real repo events (`pr.opened`, `push`) to flag risky diffs—secrets drift, flaky touchpoints—right on the timeline where maintainers ship.
| Member | Role | Actions |
|---|---|---|
SA sasha-ortizOwner Maintainers — default branch protections on | Admin | |
DE delivery-ci-botBot Service identity • restricted to merge queue writes | Write | |
EX external-contributorInvite revoked No longer meets workspace rules for this repo | — |
Pair Git identity with workspace rules—revoked invites, scoped actors, tightened merge surfaces—before noise escalates into accidental merges.
Assist, CI, and policy cues stay in one strip—reviewers skim signals before they decide, instead of bouncing through extra panels.
Expose assist and provenance cues next to approvals—confidence hints grounded in tooling, not vibes—keeping humans decisive when tooling multiplies throughput.
The pieces teams usually bolt on—stacks, migration, releases, a review queue, a CLI—ship as part of the platform.
Ship dependent branches as a stack. Pull lists keep stacks grouped in order, and the CLI creates, restacks, and submits them for you.
Import public or private repositories with history intact, and keep a push mirror in sync so the old remote stays alive while you switch.
Cut releases with generated notes and uploaded assets, publish them from Actions-compatible APIs, and browse CI artifacts per run.
One inbox for pulls waiting on you and the ones you authored—review state and CI status visible before you open a thread.
Repos, pulls, issues, stacks, CI, and automations from the terminal. JSON output built for scripts and agents, plus AI explain, draft, and diff helpers.
Linux x86, ARM64, and macOS runners for Actions-compatible workflows, with verified commit signatures shown right on your history.
Seats unlock features and included usage. Pay-as-you-go wallet covers anything beyond your plan allowance.
Solo org on review, issues, and repo-scoped automation—with monthly included usage.
INCLUDED WITH FREE
Seat-based governance and higher included allowances for growing orgs.
EVERYTHING IN FREE, PLUS
Custom included allowances, SSO, audits, and procurement.
EVERYTHING IN TEAM, PLUS
Migrate a repo from GitHub or push a new one, invite reviewers, and keep diffs, issues, and automation on the same timeline as the code.
Trylle is a git platform: pull requests, stacked branches, inline review, issues, releases, and GitHub-compatible Actions in one product. Built for teams that live in diffs.