fix(repo init): validate trunk branch is local (#749)

Add validation to ensure that the trunk branch specified with --trunk
is a local branch rather than a remote reference.
When a non-local branch is specified, show a error message and fail.

Resolves #734

Author: abhinav

.changes/unreleased/Fixed-20250713-184607.yaml

@@ -0,0 +1,3 @@
+kind: Fixed
+body: repo init now validates that the trunk branch is a local branch
+time: 2025-07-13T18:46:07.569257-07:00

.github/workflows/autofix.yml

@@ -15,12 +15,11 @@ jobs:
     - uses: actions/checkout@v4
       name: Check out repository
     - uses: jdx/mise-action@v2
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      with:
+        github_token: ${{ secrets.GITHUB_TOKEN }}
     - name: Go cache
       uses: ./.github/actions/go-cache
-    - run: |
-        mise run generate
+    - run: mise run generate
     - uses: autofix-ci/action@635ffb0c9798bd160680f18fd73371e355b85f27
       with:
         fail-fast: true

.github/workflows/changelog-merge.yml

@@ -26,8 +26,8 @@ jobs:
         token: ${{ secrets.PAT }}  # for push
 
     - uses: jdx/mise-action@v2
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      with:
+        github_token: ${{ secrets.GITHUB_TOKEN }}
     - run: changie merge
 
     - name: Push changes

.github/workflows/ci.yml

@@ -20,8 +20,8 @@ jobs:
     - uses: actions/checkout@v4
       name: Check out repository
     - uses: jdx/mise-action@v2
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      with:
+        github_token: ${{ secrets.GITHUB_TOKEN }}
     - run: mise run lint
 
   test-matrix:
@@ -31,8 +31,8 @@ jobs:
     - uses: actions/checkout@v4
       name: Check out repository
     - uses: jdx/mise-action@v2
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      with:
+        github_token: ${{ secrets.GITHUB_TOKEN }}
     - name: Go cache
       uses: ./.github/actions/go-cache
     - name: Generate test matrix
@@ -64,8 +64,8 @@ jobs:
     steps:
     - uses: actions/checkout@v4
     - uses: jdx/mise-action@v2
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      with:
+        github_token: ${{ secrets.GITHUB_TOKEN }}
     - name: Go cache
       uses: ./.github/actions/go-cache
 

.github/workflows/doc.yml

@@ -27,8 +27,7 @@ jobs:
       - uses: jdx/mise-action@v2
         with:
           working_directory: doc
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          github_token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build
         run: mise run doc:build --verbose

.github/workflows/prepare-release.yml

@@ -23,8 +23,8 @@ jobs:
       uses: actions/checkout@v4
 
     - uses: jdx/mise-action@v2
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      with:
+        github_token: ${{ secrets.GITHUB_TOKEN }}
     - id: run
       run: |
         mise run release:prepare ${{ inputs.version }}

.github/workflows/publish-release.yml

@@ -28,8 +28,8 @@ jobs:
         token: ${{ secrets.PAT }}
 
     - uses: jdx/mise-action@v2
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      with:
+        github_token: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Set version (changie)
       if: inputs.version == ''
@@ -86,8 +86,8 @@ jobs:
         ref: ${{ inputs.ref }}
 
     - uses: jdx/mise-action@v2
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      with:
+        github_token: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Set version (changie)
       if: inputs.version == ''

repo_init.go

@@ -104,6 +104,10 @@ func (cmd *repoInitCmd) Run(
 		if err != nil {
 			return fmt.Errorf("guess trunk: %w", err)
 		}
+	} else if !repo.BranchExists(ctx, cmd.Trunk) {
+		// User-provided trunk must be a local branch.
+		log.Errorf("Are you sure %v is a local branch?", cmd.Trunk)
+		return fmt.Errorf("not a branch: %v", cmd.Trunk)
 	}
 	must.NotBeBlankf(cmd.Trunk, "trunk branch must have been set")
 

testdata/script/repo_init_trunk_remote_ref_err.txt

@@ -0,0 +1,19 @@
+# 'repo init' should fail when --trunk is a remote ref like origin/main
+
+as 'Test <test@example.com>'
+at '2025-07-14T12:00:00Z'
+
+# Set up a repository with a shamhub remote
+mkdir repo
+cd repo
+git init -b main
+git commit --allow-empty -m 'Initial commit'
+
+shamhub init
+shamhub new origin alice/example.git
+git push origin main
+
+# Try to initialize with a remote ref as trunk - should fail
+! gs repo init --trunk origin/main
+stderr 'Are you sure origin/main is a local branch?'
+stderr 'not a branch: origin/main'