Commit Graph
1009 Commits
Author SHA1 Message Date
weichen 007106d42d Record the wide-cols fix task goal
Why: scope the review follow-up before code pin bumps.

Evidence: precheck receipt SELF in card; R0=c06da5735904e63db4cbcdb75b3b10b48aeffc32.

Impact: task metadata only.

Refs: .task/fix-ext-5-wide-cols.md
2026-10-06 15:31:09 +00:00
weichen 21193300d9 Record the task card for fix-ext-5-wide-cols
Why: establish the authorized task workspace and its initial baseline.

Evidence: preserved precheck receipt in .task/fix-ext-5-wide-cols.md; R0=c06da5735904e63db4cbcdb75b3b10b48aeffc32.

Impact: task metadata only; the feature workspace starts at c06da57359.

Refs: .task/fix-ext-5-wide-cols.md
2026-10-06 15:29:14 +00:00
weichen c06da57359 Merge pull request 'Expose builtin document parsing through the host handle (EXT-5)' (#222) from feature/ext-5-host-parse into main
ci / test (push) Successful in 2m27s
2026-10-06 15:14:31 +00:00
weichen f5c83534fe Record the final-tree make test evidence
ci / test (pull_request) Successful in 2m26s
Why: task-sync flagged receipts predating the committed gitlinks; rerun at committed HEAD.

Evidence: SELF receipt exit=0 at 45594cc560.

Impact: task metadata only.

Refs: .task/feature-ext-5-host-parse.md
2026-10-06 15:05:21 +00:00
weichen 45594cc560 Record the sync checkpoint
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=840f8f96d184b8ecd6c3e84951ee408aa654a25b; candidate=59855d5ee02024ee28df795798b5dc8c775e7c92.

Impact: task metadata only.

Refs: .task/feature-ext-5-host-parse.md
2026-10-06 15:04:04 +00:00
weichen 59855d5ee0 Record the downstream example test evidence
Why: make test does not compile examples/; the EXT-5 Host method requires the example fake to keep compiling.

Evidence: SELF receipt; example.com/agent-system-plugin-rdm ok.

Impact: task metadata only.

Refs: .task/feature-ext-5-host-parse.md
2026-10-06 15:03:35 +00:00
weichen d20e2c36d1 Record the documents verification evidence
Why: documents has no CI; the diff-check is its verification gate.

Evidence: SELF receipt; diff --check clean, two documents commits and one backend commit listed.

Impact: task metadata only.

Refs: .task/feature-ext-5-host-parse.md
2026-10-06 15:03:27 +00:00
weichen 2f2f912745 Record the make test evidence
Why: completion claims require tool-written evidence (AGENTS.md).

Evidence: SELF receipt appended by make evidence; full suite green incl. ui 103 tests and agent-command.

Impact: task metadata only.

Refs: .task/feature-ext-5-host-parse.md
2026-10-06 15:03:02 +00:00
weichen c50682058f Record the ext-5 task goal and authorization
Why: EXT-5 needs an extension-point request card (compat-policy sect.6) plus implementation scope before code changes.

Evidence: precheck receipt SELF in card; R0=840f8f96d184b8ecd6c3e84951ee408aa654a25b.

Impact: task metadata only.

Refs: .task/feature-ext-5-host-parse.md
2026-10-06 14:42:43 +00:00
weichen 3efa2b915c Record the task card for feature-ext-5-host-parse
Why: establish the authorized task workspace and its initial baseline.

Evidence: preserved precheck receipt in .task/feature-ext-5-host-parse.md; R0=840f8f96d184b8ecd6c3e84951ee408aa654a25b.

Impact: task metadata only; the feature workspace starts at 840f8f96d1.

Refs: .task/feature-ext-5-host-parse.md
2026-10-06 14:42:00 +00:00
weichen 840f8f96d1 Merge pull request 'Close 1 merged task card(s) and archive them' (#221) from feature/card-close-20261006-012134Z into main
ci / test (push) Successful in 2m9s
v0.1.0
2026-10-06 01:21:53 +00:00
weichen a90a92b313 Close 1 merged task card(s) and archive them
ci / test (pull_request) Successful in 2m14s
Why: branches merged into main had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: feature-ui-pin-align.md(PR#220) — merges verified via git log --merges against origin/main.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
2026-10-06 01:21:34 +00:00
weichen 1499dadad2 Merge pull request 'Align the UI pin with the ui repo main tip' (#220) from feature/ui-pin-align into main
ci / test (push) Successful in 2m14s
2026-10-06 01:20:58 +00:00
weichen 212ea1d8d4 Record the task-sync checkpoint
ci / test (pull_request) Successful in 2m11s
2026-10-06 01:17:53 +00:00
weichen 17fa80794b Record the sync checkpoint
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=e2eee6f514a376aae87b79586a95b8bfd3d944a3; candidate=0730f560289a9a365d2488dcb854fbe277bfaa12.

Impact: task metadata only.

Refs: .task/feature-ui-pin-align.md
2026-10-06 01:17:52 +00:00
weichen 0730f56028 Record the ui-pin-align evidence 2026-10-06 01:17:24 +00:00
weichen 0f4a8aeb86 Align the UI pin with the ui repo main tip
Why: the umbrella pinned 2cb1496, a commit on ui's feature/governance-docs
branch rather than main history, so the material-12 check (Dev gitlink equals
the ui tag commit) would fail the moment the owner tags v0.1.0.
Evidence: make test on the re-pinned combination (recorded via make evidence
on the task card).
Impact: modules/ui gitlink 2cb1496 -> 27d5adb (ui main tip, an ancestor);
all four sub-repo pins now sit on their repos' main history.
Refs: .task/feature-ui-pin-align.md
2026-10-06 01:15:37 +00:00
weichen efaba6ae03 Record the ui-pin-align task goal 2026-10-06 01:15:37 +00:00
weichen 3a99e6d16a Record the task card for feature-ui-pin-align
Why: establish the authorized task workspace and its initial baseline.

Evidence: preserved precheck receipt in .task/feature-ui-pin-align.md; R0=e2eee6f514a376aae87b79586a95b8bfd3d944a3.

Impact: task metadata only; the feature workspace starts at e2eee6f514.

Refs: .task/feature-ui-pin-align.md
2026-10-06 01:15:21 +00:00
weichen e2eee6f514 Merge pull request 'Only count remote-unreachable commits as local work in finish guard' (#219) from feature/finish-guard-followup into main
ci / test (push) Successful in 2m33s
2026-10-05 15:29:34 +00:00
weichen 3bef613d9b Merge remote-tracking branch 'origin/main' into feature/finish-guard-followup
ci / test (pull_request) Successful in 2m17s
# Conflicts:
#	.task/archive/feature-finish-guard-fixes.md
2026-10-05 15:26:37 +00:00
weichen a5f0ca107d Only count remote-unreachable commits as local work in finish guard
ci / test (pull_request) Successful in 2m19s
Why: 本地 main 停在 origin/main 顶端(克隆默认态)在 pin 为 feature 顶端时不在 pin
历史内,--branches 直判仍会误阻(本 worktree 自身收尾实测踩到)。
Evidence: 第五例回归(本地默认分支+克隆 reflog 不阻)全绿;五例套件+全套治理回归
GOVERNANCE-SUITE-OK;worktree 实际 finish 通过即端到端自证。
Impact: local_work_outside 候选提交先过 --not --remotes 过滤(远端可达即已保全);
stash 仍恒算本地独有。
2026-10-05 15:05:54 +00:00
weichen 49f93ed0c5 Merge pull request 'Close 1 merged task card(s) and archive them' (#218) from feature/card-close-20261005-150340Z into main
ci / test (push) Successful in 2m30s
2026-10-05 15:03:42 +00:00
weichen 931b89979b Close 1 merged task card(s) and archive them
ci / test (pull_request) Successful in 2m28s
Why: branches merged into main had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: feature-finish-guard-fixes.md(PR#217) — merges verified via git log --merges against origin/main.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
2026-10-05 15:03:40 +00:00
weichen 651f4e7c66 Merge pull request 'Fix two finish-guard false positives: IDE artifacts and remote-tracking refs' (#217) from feature/finish-guard-fixes into main
ci / test (push) Successful in 2m20s
2026-10-05 15:03:26 +00:00
weichen c62a410e5a Record make test evidence 2026-10-05 15:03:25 +00:00
weichen 91d25a3ed1 Fix two finish-guard false positives: IDE locks and remote-only refs
ci / test (pull_request) Successful in 2m21s
Why: 2026-10-05 两次实测踩到——①rglob("*.lock") 把 .git/cursor/ IDE 产物当 Git 锁
(五天陈锁阻断 worktree 回收);②pinned-history 用 --all --reflog 把 refs/remotes
计入,pin 在 feature 顶端的子仓永远无法 finish(被迫删远端引用+清 reflog 损害现场)。
Evidence: FinishGuardFixTests 四例全绿(误报修复+真实锁仍拦+独有提交仍保);
全套治理回归 91 例 OK;make test 全链证据入卡。
Impact: 仅 finish 模式两处判定;IDE 产物与远端引用不再误伤,本地独有工作保全语义不变。
Refs: 本仓 governance 收尾实录(EXT-1 与 governance-reliability 两轮)。
2026-10-05 15:00:20 +00:00
weichen df23fcab56 Record the finish-guard-fixes task card 2026-10-05 14:54:42 +00:00
weichen eb140545a4 Record the task card for feature-finish-guard-fixes
Why: establish the authorized task workspace and its initial baseline.

Evidence: preserved precheck receipt in .task/feature-finish-guard-fixes.md; R0=4edec763fff1b8239e203dc9106f16a241ca343d.

Impact: task metadata only; the feature workspace starts at 4edec763ff.

Refs: .task/feature-finish-guard-fixes.md
2026-10-05 14:53:45 +00:00
weichen 4edec763ff Merge pull request 'Close merged task cards (feature/card-close-20261005-135101Z)' (#216) from feature/card-close-20261005-135101Z into main
ci / test (push) Successful in 2m12s
2026-10-05 13:51:11 +00:00
weichen 7c00f4ad44 Close 1 merged task card(s) and archive them
ci / test (pull_request) Successful in 2m14s
Why: branches merged into main had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: feature-governance-reliability.md(PR#213) — merges verified via git log --merges against origin/main.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
2026-10-05 13:51:01 +00:00
weichen ec0fa4f8b8 Merge pull request 'Lock CI checkout credential scope to the injected server and allowlist' (#215) from fix/ci-checkout-credential-scope into main
ci / test (push) Successful in 2m11s
2026-10-05 13:50:07 +00:00
weichen 9374986b63 Lock CI checkout credential scope to the injected server and allowlist
ci / test (pull_request) Successful in 2m10s
Why: 复核轮遗留的安全测试草稿按「常量=传输端点」设计,与 PR #213 已合入的
「注入基址=传输端点」语义相反,原样提交会红。适配为锁定真实不变量。
Evidence: python3 -m unittest tests.test_ci_credentials 8/8 OK(含新用例:
任一注入拼写检出成功、凭据仅落白名单路径且令牌分离、非 http(s) 注入 fail-closed)。
Impact: 仅测试文件;不改 ci.yaml 行为。
Refs: PR #213 run 950 诊断(GITHUB_SERVER_URL=http://172.17.0.1:3000)。
2026-10-05 13:45:58 +00:00
weichen af7412a04e Merge pull request 'Harden development gates and align the governing rules' (#213) from feature/governance-reliability into main
ci / test (push) Successful in 2m7s
2026-10-05 13:43:15 +00:00
weichen a4e4f1cb69 Record reviewer replay evidence for the CI fix round
ci / test (pull_request) Successful in 2m33s
2026-10-05 13:40:14 +00:00
weichen 89468bba4c Allow the platform-injected internal http server URL in CI checkout
ci / test (pull_request) Successful in 2m11s
Why: 运行器注入 GITHUB_SERVER_URL='http://172.17.0.1:3000'(docker 网关直连宿主 Gitea,
run 950 诊断实测);https 限定与硬编码常量比对都会拒绝合法检出,GATE 无法变绿。
Evidence: 校验收宽为 http(s)+netloc;凭据仍仅附着于注入基址+仓库白名单 URL,固定 SHA/
路径/递归深度 fail-closed 语义不变。
Impact: 仅 ci.yaml checkout 一处。
2026-10-05 13:37:12 +00:00
weichen 017502f4cc Diagnose the runner-injected server URL in CI checkout
ci / test (pull_request) Failing after 1s
2026-10-05 13:35:42 +00:00
weichen a1fb67c569 Derive CI checkout server from the runner-injected URL
ci / test (pull_request) Failing after 1s
Why: 加固 checkout 把 GITHUB_SERVER_URL 与硬编码常量严格比对,运行器注入值与公网拼写
不一致时合法检出被拒(PR #213 run 948/job 1333:Checkout server is outside the
reviewed allowlist),GATE 无法变绿。
Evidence: 本地同树 make test exit 0(REPLAY 行已入卡);修复后凭据仍只附着于
「平台注入基址 + 仓库白名单」URL,路径/固定 SHA/递归深度校验全部保留。
Impact: 仅 ci.yaml checkout 脚本一处;仓库白名单与 fail-closed 语义不变。
Refs: .task/feature-governance-reliability.md 授权记录(2026-10-05 安全收尾授权)。
2026-10-05 13:34:22 +00:00
weichen 005e2a1bd5 Record merge authorization and final synchronized evidence
ci / test (pull_request) Failing after 0s
Why: the owner authorized conflict-free integration and safe worktree cleanup after verification.

Evidence: final fixed combination passes make test and make build; full outputs and review replay records are in the task card.

Impact: authorization and evidence metadata only; no source or component change.

Refs: .task/feature-governance-reliability.md
2026-10-05 13:29:31 +00:00
weichen d932828e8c Record the sync checkpoint
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=fd442d933c051fe538b224e067c214c1976f6dd0; candidate=d96e4ae016def6ce4f93548a55e6b26de8924d37.

Impact: task metadata only.

Refs: .task/feature-governance-reliability.md
2026-10-05 13:16:46 +00:00
weichen d96e4ae016 Record final combination evidence and component review links
Why: bind the reviewable governance repair to the synchronized candidate and related component PRs.

Evidence: tool-generated SELF make test and make build output plus independent repair REPLAY records in the task card.

Impact: task metadata only; platform protection and deployment remain owner-controlled.

Refs: .task/feature-governance-reliability.md
2026-10-05 13:16:20 +00:00
weichen 1c79932714 Record the sync checkpoint
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=fd442d933c051fe538b224e067c214c1976f6dd0; candidate=c1fdf0141ca4e833c5b391c1847ee53d953b1cf3.

Impact: task metadata only.

Refs: .task/feature-governance-reliability.md
2026-10-05 13:12:15 +00:00
weichen c1fdf0141c Merge current main while preserving governance repairs
Why: main advanced with merged-task-name and legacy evidence guards during this task.

Evidence: SELF 44 lifecycle regressions pass after resolving both hunks; independent review repairs are recorded in the task card.

Impact: retains both task-start protections and the stronger JSON/legacy receipt reader, without rewriting either branch history.

Refs: Dev PR #211 and #212; .task/feature-governance-reliability.md
2026-10-05 13:11:50 +00:00
weichen b84667a697 Close review gaps in cleanup and evidence handling
Why: independent review found shared submodule metadata risk, quoted header leakage, stale JSON receipt blindness and missing abandon coverage.

Evidence: SELF 92 governance regressions pass; the original review receipt and replay output are recorded in the task card.

Impact: preserves external component worktrees, handles both evidence formats and adds targeted failure-path coverage; no product behavior changes.

Refs: .task/feature-governance-reliability.md; .task/reviews/governance-reliability.json
2026-10-05 13:07:10 +00:00
weichen 976d2e8443 Record synchronized combination test and build evidence
Why: retain complete tool-generated local verification for the governance repair candidate.

Evidence: SELF task-sync, 75 governance tests, full make test, make build and syntax checks are recorded in the task card.

Impact: evidence metadata only; product and gate implementations are unchanged.

Refs: .task/feature-governance-reliability.md
2026-10-05 12:46:53 +00:00
weichen fd442d933c Merge pull request 'Close 1 merged task card(s) and archive them' (#212) from feature/card-close-20261005-123933Z into main
ci / test (push) Successful in 2m0s
2026-10-05 12:43:54 +00:00
weichen f05f92d31a Close 1 merged task card(s) and archive them
ci / test (pull_request) Successful in 2m2s
Why: branches merged into main had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: feature-task-start-merged-guard.md(PR#211) — merges verified via git log --merges against origin/main.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
2026-10-05 12:39:33 +00:00
weichen 04e07dea89 Merge pull request 'Guard task-start against merged branch names; harden sync evidence scan' (#211) from feature/task-start-merged-guard into main
ci / test (push) Successful in 2m3s
2026-10-05 12:39:32 +00:00
weichen c0abfb0250 Record the sync checkpoint
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=43d33aa4921078bc202393b99cba017d7f731b98; candidate=8af945a1d53bd3aa934994070417c91508cba994.

Impact: task metadata only.

Refs: .task/feature-governance-reliability.md
2026-10-05 12:36:27 +00:00
weichen 8af945a1d5 Make development gates preserve work and verifiable evidence
Why: cleanup, component synchronization, receipt recording and credential handling could contradict the documented development boundaries.

Evidence: SELF 75 isolated governance tests and source checks are captured in .task/feature-governance-reliability.md; combination and CI verification follow.

Impact: hardens local task and CI tooling, aligns policy and component documentation, and adds continuous regression tests without changing product behavior.

Refs: .task/feature-governance-reliability.md; policy/governance.md; policy/platform-admission.md
2026-10-05 12:36:02 +00:00