1# Mode C — Sync to a GitHub repo
2 
3## Step 1 — Gather repo + branch + path
4 
5Ask three things (batch into one message; accept all three at once or walk through them):
6 
71. **Repo** — accept any of:
8   - `owner/name` (e.g., `myorg/azure-infra`)
9   - Full URL (e.g., `https://github.com/myorg/azure-infra`)
10   - Local checkout path (e.g., `~/source/azure-infra`) — skips clone
112. **Branch** — default: `infra/vm-{vm-name}`. **Refuse to commit directly to `main` / `master` / default.** Always a branch + PR.
123. **Target path inside repo** — default: `infra/{vm-name}/`. If the repo has a recognizable infra root (`/terraform`, `/bicep`, `/infrastructure`), suggest that.
13 
14## Step 2 — Pre-flight
15 
16```bash
17# 1. gh installed and authenticated
18gh auth status        # must succeed; if not, fall back to Mode C-fallback below
19 
20# 2. user has push rights
21gh repo view {owner/repo} --json viewerPermission --jq '.viewerPermission'
22# Must be ADMIN, MAINTAIN, or WRITE; otherwise pivot to fork-and-PR
23 
24# 3. branch doesn't already exist
25gh api repos/{owner/repo}/branches/{branch}  # 404 = good (new branch)
26```
27 
28If `gh` is missing or unauthenticated, **switch to Mode C-fallback** — don't block.
29 
30## Step 3 — Clone, write, commit, push, PR
31 
32Echo each command so the user can replay:
33 
34```bash
35# 1. Working tree
36TMP=$(mktemp -d) && cd "$TMP"
37gh repo clone {owner/repo} .
38 
39# 2. Branch off the default branch
40DEFAULT_BRANCH=$(gh repo view --json defaultBranchRef --jq '.defaultBranchRef.name')
41git checkout -b {branch} "origin/$DEFAULT_BRANCH"
42 
43# 3. Write the artifact files (same layout as Mode B)
44mkdir -p {targetPath}
45# ... Write tool calls for each file ...
46 
47# 4. Stage, commit, push
48git add {targetPath}
49git commit -m "Add {vm-name} VM infrastructure (Bicep)" \
50           -m "Generated by azure-compute vm-creator workflow."
51git push -u origin {branch}
52 
53# 5. Open the PR
54gh pr create \
55  --title "Add {vm-name} VM infrastructure" \
56  --body  "$(cat <<'EOF'
57## Summary
58Adds Bicep templates to provision \`{vm-name}\` in \`{location}\`.
59 
60## Plan Card
61{paste-plan-card-markdown}
62 
63## Deploy
64\`\`\`bash
65cd {targetPath}
66az deployment group create --resource-group {resourceGroup} \\
67  --template-file main.bicep --parameters vmName={vm-name} ...
68\`\`\`
69EOF
70)" \
71  --base "$DEFAULT_BRANCH" --head {branch}
72```
73 
74Echo the PR URL back:
75 
76> ✅ Opened PR: https://github.com/myorg/azure-infra/pull/42
77 
78## Step 4 — Optional follow-ups
79 
80After the PR is open, **offer** (don't force):
81- *"Want me to add a GitHub Action to validate this with `az deployment group what-if` on every PR?"* — generates `.github/workflows/bicep-whatif.yml`
82- *"Want OIDC auth so CI can apply without a service principal secret?"* — points at the `azure-prepare` skill
83 
84## Mode C-fallback (no `gh` / unauthenticated / no push rights)
85 
86Write the files to `~/Desktop/{vm-name}-infra/` (Mode B path) and print:
87 
88> ⚠ I can't push for you (`gh auth status` failed), so I wrote the files locally.
89>
90> To open the PR yourself:
91> ```bash
92> cd ~/Desktop/dev-vm-infra
93> git init && git add . && git commit -m "Add dev-vm infrastructure"
94> git remote add origin [email protected]:myorg/azure-infra.git
95> git checkout -b infra/vm-dev-vm
96> git push -u origin infra/vm-dev-vm
97> gh pr create --fill   # after `gh auth login`
98> ```
99