mirror of
https://github.com/garrytan/gstack.git
synced 2026-10-31 22:14:25 +01:00
f30b7b788a
* fix(land-and-deploy): never merge over red, pending or missing CI (#2995) /land-and-deploy gated only on required checks, so a repo with none (every GitHub Free private repo, any repo without branch protection) skipped the CI wait and could merge over red CI. The verdict now comes from bin/gstack-ci-gate, a tested helper bound to the head SHA: all checks by default, cancel/unknown buckets fail, NO_CHECKS needs explicit per-head approval, and both merge commands (including --auto) run only after a PASS for the same SHA they pin with --match-head-commit. Co-authored-by: harshitgavita-07 <harshit.gavita@gmail.com> * fix(slug): give nested-group projects their own state bucket and verify checkpoint identity (#3003, #2901) gstack-slug kept only the last two remote path segments, so customer-a/product/repo and customer-b/product/repo shared one bucket and /context-restore could present another project's checkpoint. - One canonical-remote rule (bash + TS, golden vectors) used by all six resolvers: lowercased host, no userinfo/port/.git, Azure DevOps and Bitbucket Server normalized. 3+ segment remotes get <last-two>-<16 hex>; two-segment remotes (all of GitHub) are unchanged. - Versioned sticky cache (v2:) keeps cache hits git-free. - context-save stamps the credential-free remote and root; context-restore only treats this project's checkpoints as latest, reports foreign/unverified ones first, and treats a different root with the same remote (Conductor handoff) as information. - gstack-slug --adopt-legacy copies only files the user confirms. - question-preference-hook reads the same versioned cache, so never-ask preferences fire; unknown identity asks instead of auto-deciding. * fix(gbrain): brain context loads, managed sync works, memory sync stops duplicating (#2883, #2985, #2922) - brain-context-load called 'gbrain list_pages' (an MCP tool name), so every skill's brain context was 0 bytes. It now uses 'gbrain list' with gbrain's real filter flags, and prints one line when queries fail. - The code-stage sync always passes --no-pull (managed gbrain >= 0.51 refuses without it); a gbrain that rejects the flag fails with an upgrade message and is never retried without it. stderr is streamed with a bounded tail and quoted in failure summaries. - /sync-gbrain gains --sources (and GSTACK_MEMORY_INGEST_SOURCES); by default it skips types already synced through a federated curated source, so curated pages stop being re-duplicated. Co-authored-by: Vitor Cepeda Lopes <vitor@vitorcepedalopes.com> Co-authored-by: harshitgavita-07 <harshit.gavita@gmail.com> * fix(codex,cso): clean Codex reviews stop failing; semgrep and trivy SARIF results import (#2769, #3011) - Codex review gate is PASS / FAIL / UNVERIFIED. Untagged output (what a clean 'codex review --base' prints) is UNVERIFIED, not FAIL, and never a false PASS; P2/P3-only output passes. - import-sarif resolves semgrep's undeclared %SRCROOT% and trivy's ROOTPATH (including git-URL targets) through explicit, captured mappings; declared bases must sit inside the source root or the run's checkout, URIs are percent-decoded, and rejected results are counted with rule, base and path instead of silently dropped. * fix: version strings are not IPs, failed update checks are not 'up to date', private security reporting (#2856, #2786, #2984) - The pre-push redact hook exempts a root VERSION file that is only a version string and the version token in CHANGELOG release headings; the engine allowlist is untouched. - gstack-update-check caches an unreadable remote as CHECK_FAILED with a short TTL instead of UP_TO_DATE; /gstack-upgrade never reports 'latest' after a failed check. - SECURITY.md points reporters at GitHub private vulnerability reporting. - pr-title-sync (pull_request_target, write token) pins actions/checkout to a reviewed SHA. * fix(autoplan): publication guard accepts real Claude Code journals (#3007, #3009, #2968, #2977, #2986, #3006) The guard required a session journal to start with a user message, but Claude Code starts it with SessionStart hook attachments (and a forked compacted session starts with a compact_boundary), so every phase was denied for anyone with a SessionStart hook. Windows path spellings (C:/, /c/, drive case) were rejected too. - Reader accepts the captured startup, compact, clear and fork shapes (claude 2.1.284 fixture), computes root uniqueness over every candidate, and returns typed reason codes instead of one string. - Hard denials (competing root, foreign cwd, sidechain, agent, cycle, malformed, identity) say what happened and how to run the reviews by hand; unflushed journals still retry. - A well-formed, stable journal whose root shape is unrecognized now warns ('phase publication was NOT verified') and continues, without overriding Claude Code's own permission check; no bypass switch. - Windows paths fold before validation, so '..' is still rejected. - Periodic drift canary runs the reader on fresh journals from the pinned claude. Co-authored-by: Charles M Berg <77517285+CharlesBerg85@users.noreply.github.com> Co-authored-by: laurenbdaniels-coder <264343335+laurenbdaniels-coder@users.noreply.github.com> Co-authored-by: Jordan Mayer <176445995+maydaycyber@users.noreply.github.com> Co-authored-by: elmesery-dev <elmesery.dev@gmail.com> * v1.91.13.0: severe bug fix wave release notes, stale gbrain verbs in docs * test: seed the versioned slug cache in the memory-injection deny case (#2901) The preference hook now resolves the project bucket from gstack-slug's v2 slug-cache entry instead of basename(cwd); this fixture still wrote preferences under the basename bucket without the entry the skill preamble always writes first. * fix: full-suite follow-ups for the fix wave - gstack-slug's --help heredoc is over 512B, so it gets the BASH_COMPAT=50 pipe-deadlock guard like the other bins. - Refresh the codex/factory ship goldens for the plan-gates slug change. - The periodic lane gains the autoplan journal drift canary (107 paid files); raise the eval-slices cap to 25 so every slice still starts at once until its recorded duration lets the planner pack it. * fix(plan-eng-review): clearer Step 0 sequencing, write routes and section outputs The workflow judge scored plan-eng-review's instructions at actionability 3.67 (bar 4) on text unchanged from main. Resolve the ambiguities it named together, without changing any gate or output: Step 0 names the Read's order and keeps one STOP; the pending-call, read-only, forbidden-write and failed-save rules become one Write routes block; header/label limits and grid checks are concrete; Performance gets a checklist; each section has a stated output shape; Lake Score is defined. Same total length (parity cap). --------- Co-authored-by: harshitgavita-07 <harshit.gavita@gmail.com> Co-authored-by: Vitor Cepeda Lopes <vitor@vitorcepedalopes.com> Co-authored-by: Charles M Berg <77517285+CharlesBerg85@users.noreply.github.com> Co-authored-by: laurenbdaniels-coder <264343335+laurenbdaniels-coder@users.noreply.github.com> Co-authored-by: Jordan Mayer <176445995+maydaycyber@users.noreply.github.com> Co-authored-by: elmesery-dev <elmesery.dev@gmail.com>
165 lines
4.8 KiB
JSON
165 lines
4.8 KiB
JSON
[
|
|
{
|
|
"url": "https://github.com/garrytan/gstack.git",
|
|
"canonical": "github.com/garrytan/gstack",
|
|
"slug": "garrytan-gstack",
|
|
"legacy_slug": "garrytan-gstack"
|
|
},
|
|
{
|
|
"url": "https://github.com/garrytan/gstack",
|
|
"canonical": "github.com/garrytan/gstack",
|
|
"slug": "garrytan-gstack",
|
|
"legacy_slug": "garrytan-gstack"
|
|
},
|
|
{
|
|
"url": "git@github.com:garrytan/gstack.git",
|
|
"canonical": "github.com/garrytan/gstack",
|
|
"slug": "garrytan-gstack",
|
|
"legacy_slug": "garrytan-gstack"
|
|
},
|
|
{
|
|
"url": "ssh://git@github.com/garrytan/gstack.git",
|
|
"canonical": "github.com/garrytan/gstack",
|
|
"slug": "garrytan-gstack",
|
|
"legacy_slug": "garrytan-gstack"
|
|
},
|
|
{
|
|
"url": "https://GitHub.COM/garrytan/gstack/",
|
|
"canonical": "github.com/garrytan/gstack",
|
|
"slug": "httpsGitHub.COMgarrytangstack",
|
|
"legacy_slug": "httpsGitHub.COMgarrytangstack"
|
|
},
|
|
{
|
|
"url": "https://gitlab.com/customer-a/product/repo.git",
|
|
"canonical": "gitlab.com/customer-a/product/repo",
|
|
"slug": "product-repo-5eca1fe041984543",
|
|
"legacy_slug": "product-repo"
|
|
},
|
|
{
|
|
"url": "git@gitlab.com:customer-a/product/repo.git",
|
|
"canonical": "gitlab.com/customer-a/product/repo",
|
|
"slug": "product-repo-5eca1fe041984543",
|
|
"legacy_slug": "product-repo"
|
|
},
|
|
{
|
|
"url": "ssh://git@gitlab.com:2222/customer-a/product/repo.git",
|
|
"canonical": "gitlab.com/customer-a/product/repo",
|
|
"slug": "product-repo-5eca1fe041984543",
|
|
"legacy_slug": "product-repo"
|
|
},
|
|
{
|
|
"url": "https://oauth2:PASSWORD@GitLab.com:8443/customer-a/product/repo.git",
|
|
"canonical": "gitlab.com/customer-a/product/repo",
|
|
"slug": "product-repo-5eca1fe041984543",
|
|
"legacy_slug": "product-repo"
|
|
},
|
|
{
|
|
"url": "https://gitlab.com/customer-b/product/repo.git",
|
|
"canonical": "gitlab.com/customer-b/product/repo",
|
|
"slug": "product-repo-3c13cab341f442f8",
|
|
"legacy_slug": "product-repo"
|
|
},
|
|
{
|
|
"url": "git@gitlab.example.com:group/sub/team/repo.git",
|
|
"canonical": "gitlab.example.com/group/sub/team/repo",
|
|
"slug": "team-repo-da3955fc2f81a1a1",
|
|
"legacy_slug": "team-repo"
|
|
},
|
|
{
|
|
"url": "https://gitlab.example.com/group/sub/team/repo",
|
|
"canonical": "gitlab.example.com/group/sub/team/repo",
|
|
"slug": "team-repo-da3955fc2f81a1a1",
|
|
"legacy_slug": "team-repo"
|
|
},
|
|
{
|
|
"url": "https://dev.azure.com/org/project/_git/repo",
|
|
"canonical": "dev.azure.com/org/project/repo",
|
|
"slug": "project-repo-a4383ea5249af29a",
|
|
"legacy_slug": "_git-repo"
|
|
},
|
|
{
|
|
"url": "https://org@dev.azure.com/org/project/_git/repo",
|
|
"canonical": "dev.azure.com/org/project/repo",
|
|
"slug": "project-repo-a4383ea5249af29a",
|
|
"legacy_slug": "_git-repo"
|
|
},
|
|
{
|
|
"url": "git@ssh.dev.azure.com:v3/org/project/repo",
|
|
"canonical": "dev.azure.com/org/project/repo",
|
|
"slug": "project-repo-a4383ea5249af29a",
|
|
"legacy_slug": "project-repo"
|
|
},
|
|
{
|
|
"url": "https://org.visualstudio.com/project/_git/repo",
|
|
"canonical": "dev.azure.com/org/project/repo",
|
|
"slug": "project-repo-a4383ea5249af29a",
|
|
"legacy_slug": "_git-repo"
|
|
},
|
|
{
|
|
"url": "https://org.visualstudio.com/DefaultCollection/project/_git/repo",
|
|
"canonical": "dev.azure.com/org/project/repo",
|
|
"slug": "project-repo-a4383ea5249af29a",
|
|
"legacy_slug": "_git-repo"
|
|
},
|
|
{
|
|
"url": "org@vs-ssh.visualstudio.com:v3/org/project/repo",
|
|
"canonical": "dev.azure.com/org/project/repo",
|
|
"slug": "project-repo-a4383ea5249af29a",
|
|
"legacy_slug": "project-repo"
|
|
},
|
|
{
|
|
"url": "https://bitbucket.example.com/scm/proj/repo.git",
|
|
"canonical": "bitbucket.example.com/proj/repo",
|
|
"slug": "proj-repo",
|
|
"legacy_slug": "proj-repo"
|
|
},
|
|
{
|
|
"url": "ssh://git@bitbucket.example.com:7999/proj/repo.git",
|
|
"canonical": "bitbucket.example.com/proj/repo",
|
|
"slug": "proj-repo",
|
|
"legacy_slug": "proj-repo"
|
|
},
|
|
{
|
|
"url": "/srv/git/team/product/repo.git",
|
|
"canonical": "/srv/git/team/product/repo",
|
|
"slug": "product-repo",
|
|
"legacy_slug": "product-repo"
|
|
},
|
|
{
|
|
"url": "file:///srv/git/repo.git",
|
|
"canonical": "/srv/git/repo",
|
|
"slug": "git-repo",
|
|
"legacy_slug": "git-repo"
|
|
},
|
|
{
|
|
"url": "../sibling-repo",
|
|
"canonical": "../sibling-repo",
|
|
"slug": "..sibling-repo",
|
|
"legacy_slug": "..sibling-repo"
|
|
},
|
|
{
|
|
"url": "..",
|
|
"canonical": "..",
|
|
"slug": "",
|
|
"legacy_slug": ""
|
|
},
|
|
{
|
|
"url": "https://host/onlyrepo.git",
|
|
"canonical": "host/onlyrepo",
|
|
"slug": "host-onlyrepo",
|
|
"legacy_slug": "host-onlyrepo"
|
|
},
|
|
{
|
|
"url": "C:/repos/a/b/c.git",
|
|
"canonical": "C:/repos/a/b/c",
|
|
"slug": "b-c",
|
|
"legacy_slug": "b-c"
|
|
},
|
|
{
|
|
"url": "https://[2001:db8::1]:8443/grp/sub/repo.git",
|
|
"canonical": "[2001:db8::1]/grp/sub/repo",
|
|
"slug": "sub-repo-4278116e81ebff80",
|
|
"legacy_slug": "sub-repo"
|
|
}
|
|
]
|