One-step sign in

Sign in with GitHub.

Supabase handles the OAuth flow and gives the app a token with the repo scope so the Achievement Lab can run real PRs in your sandbox repo.

Connect with GitHub

You will see GitHub's consent screen listing the repo scope. That scope lets the lab create branches, open PRs, and merge them in your sandbox repo.

Sign in with GitHub
Advanced — GitHub App for scheduled commits

Scheduled commit automation uses short-lived installation tokens minted by a GitHub App. Use this if you want background workers that run when your laptop is off.

View setup checklist
Manual — paste a fine-grained PAT once

No accounts, no DB. The token is sent over HTTPS and used once for one transparent journal commit.

Open manual mode

Sandbox isolation

Automation only writes to a github-active-sandbox repo.

No stored secrets

Tokens live in your Supabase session cookie, not in our DB.

Honest scope

Achievements that need real humans are flagged and not faked.