GitGitGadget: set the token (if any) to push the Git notes

This continues the new paradigm where the token is _not_ specified via
the Git config, but explicitly via a method of the `CIHelper` class.

Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>

Author: dscho

lib/ci-helper.ts

@@ -576,7 +576,7 @@ export class CIHelper {
         };
 
         try {
-            const gitGitGadget = await GitGitGadget.get(this.gggConfigDir, this.workDir);
+            const gitGitGadget = await GitGitGadget.get(this.gggConfigDir, this.workDir, this.notesPushToken);
             if (!gitGitGadget.isUserAllowed(comment.author)) {
                 throw new Error(`User ${comment.author} is not yet permitted to use ${this.config.app.displayName}`);
             }
@@ -782,7 +782,7 @@ export class CIHelper {
             await this.github.addPRComment(prKey, redacted);
         };
 
-        const gitGitGadget = await GitGitGadget.get(this.gggConfigDir, this.workDir);
+        const gitGitGadget = await GitGitGadget.get(this.gggConfigDir, this.workDir, this.notesPushToken);
         if (!pr.hasComments && !gitGitGadget.isUserAllowed(pr.author)) {
             const welcome = (await readFile("res/WELCOME.md")).toString().replace(/\${username}/g, pr.author);
             await this.github.addPRComment(prKey, welcome);

lib/gitgitgadget.ts

@@ -36,7 +36,7 @@ export class GitGitGadget {
         return workDir;
     }
 
-    public static async get(gitGitGadgetDir: string, workDir?: string): Promise<GitGitGadget> {
+    public static async get(gitGitGadgetDir: string, workDir?: string, notesPushToken?: string): Promise<GitGitGadget> {
         if (!workDir) {
             workDir = await this.getWorkDir(gitGitGadgetDir);
         }
@@ -76,6 +76,7 @@ export class GitGitGadget {
             allowedUsers,
             { smtpHost, smtpOpts, smtpPass, smtpUser },
             publishTagsAndNotesToRemote,
+            notesPushToken,
         );
     }
 
@@ -98,13 +99,15 @@ export class GitGitGadget {
     protected readonly smtpOptions: ISMTPOptions;
 
     protected readonly publishTagsAndNotesToRemote: string;
+    private readonly publishToken: string | undefined;
 
     protected constructor(
         notes: GitNotes,
         options: IGitGitGadgetOptions,
         allowedUsers: Set<string>,
         smtpOptions: ISMTPOptions,
         publishTagsAndNotesToRemote: string,
+        publishToken?: string,
     ) {
         if (!notes.workDir) {
             throw new Error("Could not determine Git worktree");
@@ -117,6 +120,7 @@ export class GitGitGadget {
         this.smtpOptions = smtpOptions;
 
         this.publishTagsAndNotesToRemote = publishTagsAndNotesToRemote;
+        this.publishToken = publishToken;
     }
 
     public isUserAllowed(user: string): boolean {
@@ -240,7 +244,7 @@ export class GitGitGadget {
     }
 
     protected async pushNotesRef(): Promise<void> {
-        await this.notes.push(this.publishTagsAndNotesToRemote);
+        await this.notes.push(this.publishTagsAndNotesToRemote, this.publishToken);
 
         // re-read options
         [this.options, this.allowedUsers] = await GitGitGadget.readOptions(this.notes);