mirror of
https://github.com/garrytan/gstack.git
synced 2026-11-03 15:27:56 +01:00
* fix(make-pdf,design): real TOC page numbers and anchors; design models move to gpt-5.5 + gpt-image-2 (#2903, #2807) * ci: pin every action to a SHA, Scorecard, checksummed Bun, scoped Codex CLI in the CI image, macOS named-regressions job (#1948, #1706, #1997) * fix(cso,browse): Windows/macOS lease identity, retention skips bad runs, truthful 'not assessed' reports, env.kv false positive, Windows browse spawn fixes (#2894, #2912, #2048, #2637, #2805) * fix(outside-voice): one Codex model precedence for probe and dispatch, bounded timeouts with KILL escalation, probe cache identity, guarded mktemp, skills hidden in nested Codex (#2776, #2914, #2787, #2881, #2847) * feat(setup): install registry, ./setup --status, staged activation, per-scope migrations, host tiers and conformance kit, OpenCode/Hermes fixes, Copilot CLI (experimental), disabled_skills, slimmer CLAUDE.md (#1925, #2879, #2347, #2338, #2626, #2629, #2825, #2015, #393, #1206, #2096) Co-authored-by: Andrey Esipov <61357035+andrey-esipov@users.noreply.github.com> Co-authored-by: Matthew Williams <5863886+ridermw@users.noreply.github.com> Co-authored-by: Rocky Wu <92764750+lolisaigao1234@users.noreply.github.com> * fix(preamble): skills start in worktree-isolated Claude Code sessions — one literal skill-start line, context-recovery helper, no eval in skill blocks, $N token tripwire, honest plan-mode precedence (#2763, #2896, #2851) * fix(setup): per-install renders for renamed, vendored and custom-config installs, space-safe alias roots, per-host /cso launcher path (#1882, #2906) * test: free tests never write the real HOME (home-write tripwire), no orphaned browse daemons, symlinked-TMPDIR (macOS) fixes, gbrain-on-PATH isolation (#2895, #2816, #2829, #2841, #2982, #2911, #2909, #2908, #2910) * chore: integrate wave follow-ups — regenerate all hosts, README model docs, TODOS, touchfiles, duration seeds, Bun 1.3 telemetry test fix, replay fixtures pinned to their recorded bytes * v1.91.14.0: release metadata * test(browse): group-kill cleanup falls back to the leader when macOS returns EPERM for a live group * ci: Codex login steps run under bash (the CI container's default sh rejects pipefail) * fix: full-suite repairs — private state roots for 7 real-HOME writers, truthful home-guard attribution with --attribute-home, gstack-paths shim in ship-hook fixtures, Copilot in team-init probes, test-of-test detector, cookie review fixture pinned to the approved excerpt * fix(windows): LF for Dockerfiles, normalized home-guard exclusions, path.relative fixture containment, ship push test spawn timeouts * test(design-detect): widen the whole-scan budget test's timing margins so a loaded macOS runner can't time out the single-batch call * fix(evals): qa protocol names defined for the judge, async PTY judge so overlapping sessions keep their cleanup deadline, bws setup cases use the standard JUDGE_MS tier * test(pty): the non-blocking judge case is POSIX-only (its fake judge is a shebang script, like the PTY harness it covers) * test(evals): ship-coverage-audit names absolute skill paths, uses Read, and skips the Step 7 artifact nothing consumes (removes the mechanism behind 3 of 4 historical timeouts) * test: deflake terminal-agent concurrent startup (write the placeholder record before spawning, like the product) and qa-evidence resumed pipe (barrier on a full high-water mark instead of a sleep) * fix(design): daemon log stream handles open errors instead of crashing the daemon; shutdown test awaits the stubbed exit * test(evals): skillify checks the product's resolved state root (no GSTACK_HOME bypass), negative cases check every root; tpa shims live outside the agent's cwd and answer consistently * test(evals): coverage-audit detector splits parallel columns at │ rails and [+] groups; coverage prompts name absolute skill paths; TODOs from the gate eval census * fix(plan-eng-review): scope gate always sends the menu (no headless 'Scope pending' exit); PTY harness ends idle turn-ends and API-error panels promptly with a precise diagnostic * test(evals): one position-bound coverage-read rule credits read-only && chains (labels, context ranges, git displays in either order) and still rejects forged output * fix(ship): documentation section has one saved source inserted by cat (never retyped); spawned-marker evidence is the child output; refreshed codex/factory ship goldens * test(docsync): the byte-exact insert positive is POSIX-only (the bash-command observer refuses backslash paths by design) * test(evals): plan-design-with-ui focus-title rule accepts the comma-less 'dimensions or focus' wording (replayed on the captured CI run, negative controls kept) * fix(qa-callers): exploratory preflight says the scope/method Reads come after exploratory.md; design-review scan check credits an executed scan proven by one engine run over the changed files --------- Co-authored-by: Andrey Esipov <61357035+andrey-esipov@users.noreply.github.com> Co-authored-by: Matthew Williams <5863886+ridermw@users.noreply.github.com> Co-authored-by: Rocky Wu <92764750+lolisaigao1234@users.noreply.github.com>
106 lines
5.4 KiB
TypeScript
106 lines
5.4 KiB
TypeScript
/**
|
|
* Periodic-lane exclusions — LITERALS ONLY (own file, deliberately NOT in
|
|
* touchfiles-data.ts: that file is evaluated standalone by map-diff against
|
|
* old git versions, and its contract must not grow unrelated exports).
|
|
*
|
|
* The weekly periodic CI lane runs EVERY periodic-tier file (EVALS_ALL=1) so
|
|
* tests can't rot invisibly — the coverage contract. A file lands here only
|
|
* when running it weekly is KNOWN waste (documented-red or requires manual
|
|
* hardware), and every entry must carry a tracking pointer with a re-entry
|
|
* condition, so an exclusion is a decision with an owner, not a place tests
|
|
* go to die. Pinned by test/periodic-exclude-policy.test.ts: entries must
|
|
* name real files and carry non-empty reason + tracking.
|
|
*
|
|
* Removing an entry re-activates the file on the next weekly run — that IS
|
|
* the re-entry mechanism.
|
|
*/
|
|
export const PERIODIC_CI_EXCLUDE: Record<string, { reason: string; tracking: string }> = {
|
|
'test/skill-e2e-aside.test.ts': {
|
|
reason: 'needs macOS with the Aside app open (asideAvailable()); CI runners are Linux, so every case self-skips',
|
|
tracking: 'TODOS.md "CI-unrunnable paid evals" (re-entry: the CLI/device is available in the CI image; review by 2026-12-28)',
|
|
},
|
|
'test/skill-e2e-ios-device.test.ts': {
|
|
reason: 'needs a physical iPhone over USB/devicectl — manual hardware, not a CI runner capability',
|
|
tracking: 'TODOS.md "CI-unrunnable paid evals" (re-entry: the CLI/device is available in the CI image; review by 2026-12-28)',
|
|
},
|
|
};
|
|
|
|
/**
|
|
* Case-level exclusions for case-sharded files (`<file>#<case id>`), same
|
|
* contract as above: a case lands here only when a CI runner cannot execute it
|
|
* (it self-skips), with reason + tracking. The planner records each as an
|
|
* excluded manifest entry instead of an empty case shard, so the exact
|
|
* one-case check stays strict for every planned case. Pinned by
|
|
* test/periodic-exclude-policy.test.ts.
|
|
*/
|
|
export const CASE_CI_EXCLUDE: Record<string, { reason: string; tracking: string }> = {
|
|
'test/skill-e2e-design.test.ts#design-review-fix': {
|
|
reason: '/design-review drives the Aside browser; CI runners are Linux without Aside, so the case registers test.skip("needs Aside")',
|
|
tracking: 'TODOS.md "CI-unrunnable paid evals" (re-entry: the CLI/device is available in the CI image; review by 2026-12-28)',
|
|
},
|
|
};
|
|
|
|
/**
|
|
* Paid-eval verdict policy, pre-registered (approved 2026-09-29). Frozen before
|
|
* the census: any change after seeing census results needs Garry's
|
|
* re-approval and a fresh census, and bumps `version` (every trial record
|
|
* carries it as policy_version, so pass-rate history segments at the change).
|
|
* panel - behavior cases and quarantined cases run n independent
|
|
* trials; a behavior panel PASSES at >= k passing trials with
|
|
* no contract violation. Rule and judge cases run one trial.
|
|
* quarantine - entry below `entry.rate` per trial over >= `entry.minTrials`
|
|
* new-policy trials; exit at >= `exit.rate` over >=
|
|
* `exit.minTrials`; at most `capFraction` of each tier's
|
|
* blocking cases; an entry expires after `expiryWeeklyRuns`.
|
|
* judge - a judge case draws `samples` independent samples of one
|
|
* prompt concurrently; numeric dimensions gate on the panel
|
|
* mean against the unchanged threshold, booleans on a strict
|
|
* majority; an erroring sample fails the panel, never resampled.
|
|
* drift - one-sided Fisher exact alarm between input-identity series
|
|
* (Holm-controlled across the cases tested in one report).
|
|
* infraRedispatch - a census whose every red verdict is machine-classified
|
|
* INFRA or INCOMPLETE may be re-dispatched this many times as
|
|
* a new run; both runs are reported.
|
|
*/
|
|
export const EVAL_POLICY = {
|
|
version: 1,
|
|
panel: { n: 3, k: 2 },
|
|
quarantine: {
|
|
entry: { rate: 0.95, minTrials: 10 },
|
|
exit: { rate: 0.97, minTrials: 10 },
|
|
capFraction: 0.10,
|
|
expiryWeeklyRuns: 8,
|
|
},
|
|
judge: { samples: 3 },
|
|
drift: { fisherAlpha: 0.05, fisherMinPerSide: 6 },
|
|
infraRedispatch: 1,
|
|
} as const;
|
|
|
|
/**
|
|
* Quarantined paid cases, keyed by registry id (an E2E_TIERS key). A
|
|
* quarantined case still runs its full panel and reports in every lane, but
|
|
* its failed verdict cannot fail the lane unless the panel is a hard break
|
|
* (0 of n) or a trial violated a contract; it never counts as passing
|
|
* coverage. An entry needs the entry rule met on the current input identity,
|
|
* a written diagnosis that the failures are detector, harness or model-latency
|
|
* failures (a product defect is never quarantined), and unchanged case
|
|
* touchfiles in the change that adds it. Pinned by
|
|
* test/periodic-exclude-policy.test.ts.
|
|
* reason - the written diagnosis, with the pass-rate evidence
|
|
* failureClass - what the diagnosis found; a product defect has no class here
|
|
* tracking - issue or TODOS pointer
|
|
* owner - who removes it
|
|
* enteredAt - YYYY-MM-DD the entry landed (expiry counts weekly runs from here)
|
|
* exit - the measurable exit condition
|
|
* At most EVAL_POLICY.quarantine.capFraction of a tier's cases (gate and
|
|
* periodic are the blocking tiers) may be quarantined at once.
|
|
*/
|
|
export const CASE_QUARANTINE: Record<string, {
|
|
reason: string;
|
|
failureClass: 'detector' | 'harness' | 'model-latency';
|
|
tracking: string;
|
|
owner: string;
|
|
enteredAt: string;
|
|
exit: string;
|
|
}> = {};
|