mirror of
https://github.com/garrytan/gstack.git
synced 2026-11-01 22:45:02 +01:00
f30b7b788a
* fix(land-and-deploy): never merge over red, pending or missing CI (#2995) /land-and-deploy gated only on required checks, so a repo with none (every GitHub Free private repo, any repo without branch protection) skipped the CI wait and could merge over red CI. The verdict now comes from bin/gstack-ci-gate, a tested helper bound to the head SHA: all checks by default, cancel/unknown buckets fail, NO_CHECKS needs explicit per-head approval, and both merge commands (including --auto) run only after a PASS for the same SHA they pin with --match-head-commit. Co-authored-by: harshitgavita-07 <harshit.gavita@gmail.com> * fix(slug): give nested-group projects their own state bucket and verify checkpoint identity (#3003, #2901) gstack-slug kept only the last two remote path segments, so customer-a/product/repo and customer-b/product/repo shared one bucket and /context-restore could present another project's checkpoint. - One canonical-remote rule (bash + TS, golden vectors) used by all six resolvers: lowercased host, no userinfo/port/.git, Azure DevOps and Bitbucket Server normalized. 3+ segment remotes get <last-two>-<16 hex>; two-segment remotes (all of GitHub) are unchanged. - Versioned sticky cache (v2:) keeps cache hits git-free. - context-save stamps the credential-free remote and root; context-restore only treats this project's checkpoints as latest, reports foreign/unverified ones first, and treats a different root with the same remote (Conductor handoff) as information. - gstack-slug --adopt-legacy copies only files the user confirms. - question-preference-hook reads the same versioned cache, so never-ask preferences fire; unknown identity asks instead of auto-deciding. * fix(gbrain): brain context loads, managed sync works, memory sync stops duplicating (#2883, #2985, #2922) - brain-context-load called 'gbrain list_pages' (an MCP tool name), so every skill's brain context was 0 bytes. It now uses 'gbrain list' with gbrain's real filter flags, and prints one line when queries fail. - The code-stage sync always passes --no-pull (managed gbrain >= 0.51 refuses without it); a gbrain that rejects the flag fails with an upgrade message and is never retried without it. stderr is streamed with a bounded tail and quoted in failure summaries. - /sync-gbrain gains --sources (and GSTACK_MEMORY_INGEST_SOURCES); by default it skips types already synced through a federated curated source, so curated pages stop being re-duplicated. Co-authored-by: Vitor Cepeda Lopes <vitor@vitorcepedalopes.com> Co-authored-by: harshitgavita-07 <harshit.gavita@gmail.com> * fix(codex,cso): clean Codex reviews stop failing; semgrep and trivy SARIF results import (#2769, #3011) - Codex review gate is PASS / FAIL / UNVERIFIED. Untagged output (what a clean 'codex review --base' prints) is UNVERIFIED, not FAIL, and never a false PASS; P2/P3-only output passes. - import-sarif resolves semgrep's undeclared %SRCROOT% and trivy's ROOTPATH (including git-URL targets) through explicit, captured mappings; declared bases must sit inside the source root or the run's checkout, URIs are percent-decoded, and rejected results are counted with rule, base and path instead of silently dropped. * fix: version strings are not IPs, failed update checks are not 'up to date', private security reporting (#2856, #2786, #2984) - The pre-push redact hook exempts a root VERSION file that is only a version string and the version token in CHANGELOG release headings; the engine allowlist is untouched. - gstack-update-check caches an unreadable remote as CHECK_FAILED with a short TTL instead of UP_TO_DATE; /gstack-upgrade never reports 'latest' after a failed check. - SECURITY.md points reporters at GitHub private vulnerability reporting. - pr-title-sync (pull_request_target, write token) pins actions/checkout to a reviewed SHA. * fix(autoplan): publication guard accepts real Claude Code journals (#3007, #3009, #2968, #2977, #2986, #3006) The guard required a session journal to start with a user message, but Claude Code starts it with SessionStart hook attachments (and a forked compacted session starts with a compact_boundary), so every phase was denied for anyone with a SessionStart hook. Windows path spellings (C:/, /c/, drive case) were rejected too. - Reader accepts the captured startup, compact, clear and fork shapes (claude 2.1.284 fixture), computes root uniqueness over every candidate, and returns typed reason codes instead of one string. - Hard denials (competing root, foreign cwd, sidechain, agent, cycle, malformed, identity) say what happened and how to run the reviews by hand; unflushed journals still retry. - A well-formed, stable journal whose root shape is unrecognized now warns ('phase publication was NOT verified') and continues, without overriding Claude Code's own permission check; no bypass switch. - Windows paths fold before validation, so '..' is still rejected. - Periodic drift canary runs the reader on fresh journals from the pinned claude. Co-authored-by: Charles M Berg <77517285+CharlesBerg85@users.noreply.github.com> Co-authored-by: laurenbdaniels-coder <264343335+laurenbdaniels-coder@users.noreply.github.com> Co-authored-by: Jordan Mayer <176445995+maydaycyber@users.noreply.github.com> Co-authored-by: elmesery-dev <elmesery.dev@gmail.com> * v1.91.13.0: severe bug fix wave release notes, stale gbrain verbs in docs * test: seed the versioned slug cache in the memory-injection deny case (#2901) The preference hook now resolves the project bucket from gstack-slug's v2 slug-cache entry instead of basename(cwd); this fixture still wrote preferences under the basename bucket without the entry the skill preamble always writes first. * fix: full-suite follow-ups for the fix wave - gstack-slug's --help heredoc is over 512B, so it gets the BASH_COMPAT=50 pipe-deadlock guard like the other bins. - Refresh the codex/factory ship goldens for the plan-gates slug change. - The periodic lane gains the autoplan journal drift canary (107 paid files); raise the eval-slices cap to 25 so every slice still starts at once until its recorded duration lets the planner pack it. * fix(plan-eng-review): clearer Step 0 sequencing, write routes and section outputs The workflow judge scored plan-eng-review's instructions at actionability 3.67 (bar 4) on text unchanged from main. Resolve the ambiguities it named together, without changing any gate or output: Step 0 names the Read's order and keeps one STOP; the pending-call, read-only, forbidden-write and failed-save rules become one Write routes block; header/label limits and grid checks are concrete; Performance gets a checklist; each section has a stated output shape; Lake Score is defined. Same total length (parity cap). --------- Co-authored-by: harshitgavita-07 <harshit.gavita@gmail.com> Co-authored-by: Vitor Cepeda Lopes <vitor@vitorcepedalopes.com> Co-authored-by: Charles M Berg <77517285+CharlesBerg85@users.noreply.github.com> Co-authored-by: laurenbdaniels-coder <264343335+laurenbdaniels-coder@users.noreply.github.com> Co-authored-by: Jordan Mayer <176445995+maydaycyber@users.noreply.github.com> Co-authored-by: elmesery-dev <elmesery.dev@gmail.com>
15 lines
9.4 KiB
JSON
15 lines
9.4 KiB
JSON
{
|
|
"recorded": "gh 2.101.0, garrytan/gstack#2988, 2026-10-02",
|
|
"note": "required free-tests passes; all checks pass or skip",
|
|
"required": {
|
|
"status": 0,
|
|
"stdout": "[{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110583563885\",\"name\":\"free-tests\",\"state\":\"SUCCESS\"}]\n",
|
|
"stderr": ""
|
|
},
|
|
"all": {
|
|
"status": 0,
|
|
"stdout": "[{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110583563885\",\"name\":\"free-tests\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247757\",\"name\":\"free-suite (21)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582154255\",\"name\":\"cso-windows-launcher\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633059/job/110582346257\",\"name\":\"validate-native (cso-runtime-inputs-2026-09-10, rails-ruby-3.4.4, rails-ruby-3.4.4-arm64, rails, ...\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633059/job/110582345999\",\"name\":\"validate-native (cso-runtime-inputs-2026-09-10, node-24.4.0, node-24.4.0-arm64, node, linux/arm64...\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247797\",\"name\":\"free-suite (20)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247546\",\"name\":\"free-suite (5)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633059/job/110582346175\",\"name\":\"validate-native (cso-runtime-inputs-2026-09-10, postgresql-17.2, postgresql-17.2-arm64, postgresq...\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633059/job/110582346096\",\"name\":\"validate-native (cso-runtime-inputs-2026-09-10, bun-1.3.10, bun-1.3.10-arm64, bun, linux/arm64, a...\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247541\",\"name\":\"free-suite (11)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247886\",\"name\":\"free-suite (8)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633059/job/110582346456\",\"name\":\"validate-native (cso-runtime-inputs-2026-09-10, python-3.13.4-uv-0.8.0, python-3.13.4-uv-0.8.0-ar...\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247616\",\"name\":\"free-suite (7)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633059/job/110582346128\",\"name\":\"validate-native (cso-runtime-inputs-2026-09-10, postgresql-17.2, postgresql-17.2-amd64, postgresq...\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247642\",\"name\":\"free-suite (19)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247676\",\"name\":\"free-suite (6)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633059/job/110582346229\",\"name\":\"validate-native (cso-runtime-inputs-2026-09-10, rails-ruby-3.4.4, rails-ruby-3.4.4-amd64, rails, ...\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247385\",\"name\":\"free-suite (1)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247456\",\"name\":\"free-suite (12)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633059/job/110582346190\",\"name\":\"validate-native (cso-runtime-inputs-2026-09-10, python-3.13.4-uv-0.8.0, python-3.13.4-uv-0.8.0-am...\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247400\",\"name\":\"free-suite (14)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633059/job/110582346195\",\"name\":\"validate-native (cso-runtime-inputs-2026-09-10, bun-1.3.10, bun-1.3.10-amd64, bun, linux/amd64, a...\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247704\",\"name\":\"free-suite (17)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633059/job/110582346149\",\"name\":\"validate-native (cso-runtime-inputs-2026-09-10, node-24.4.0, node-24.4.0-amd64, node, linux/amd64...\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247429\",\"name\":\"free-suite (3)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247486\",\"name\":\"free-suite (9)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247427\",\"name\":\"free-suite (16)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247415\",\"name\":\"free-suite (13)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247316\",\"name\":\"free-suite (4)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247405\",\"name\":\"free-suite (18)\",\"state\":\"SUCCESS\"},{\"bucket\":\"skipping\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633059/job/110582348208\",\"name\":\"qualify-native\",\"state\":\"SKIPPED\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247447\",\"name\":\"free-suite (15)\",\"state\":\"SUCCESS\"},{\"bucket\":\"skipping\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633059/job/110582348702\",\"name\":\"stage\",\"state\":\"SKIPPED\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247460\",\"name\":\"free-suite (10)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633294/job/110582150127\",\"name\":\"check-freshness\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582247431\",\"name\":\"free-suite (2)\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925632769/job/110582149352\",\"name\":\"actionlint\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633059/job/110582149719\",\"name\":\"reviewed-inputs\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582154562\",\"name\":\"cso-macos-launcher\",\"state\":\"SUCCESS\"},{\"bucket\":\"skipping\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925632721/job/110582189042\",\"name\":\"eval-slices\",\"state\":\"SKIPPED\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582154686\",\"name\":\"free-plan\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582154462\",\"name\":\"cso-docker-integration\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633770/job/110582154692\",\"name\":\"typecheck\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925632799/job/110582149617\",\"name\":\"windows-free-tests\",\"state\":\"SUCCESS\"},{\"bucket\":\"pass\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925633002/job/110582149353\",\"name\":\"quality\",\"state\":\"SUCCESS\"},{\"bucket\":\"skipping\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925632721/job/110582153468\",\"name\":\"slices-comment\",\"state\":\"SKIPPED\"},{\"bucket\":\"skipping\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925632721/job/110582151697\",\"name\":\"build-image\",\"state\":\"SKIPPED\"},{\"bucket\":\"skipping\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925632799/job/110582151047\",\"name\":\"cookie-native-qualification\",\"state\":\"SKIPPED\"},{\"bucket\":\"skipping\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925632721/job/110582152960\",\"name\":\"slices-report\",\"state\":\"SKIPPED\"},{\"bucket\":\"skipping\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925632721/job/110582151379\",\"name\":\"plan-slices\",\"state\":\"SKIPPED\"},{\"bucket\":\"skipping\",\"link\":\"https://github.com/garrytan/gstack/actions/runs/36925632799/job/110582151987\",\"name\":\"dia-native-qualification\",\"state\":\"SKIPPED\"}]\n",
|
|
"stderr": ""
|
|
}
|
|
}
|