sysadmin and Claude Opus 4.8
5debfcf178
feat: block vague-reference issue creation with content preflight ( Closes #582 )
...
Add a pre-create content gate to gitea_create_issue that fails closed with
BLOCKED + DIAGNOSE when the title/body is a vague reference to out-of-band
draft content ("the drafted issue", "the prepared issue", "the issue we
discussed", "the previous draft") and no durable source pointer (existing
issue/PR/comment, checked-in file, URL, or scratchpad path) is present.
- issue_content_gate.py: assess_issue_content / pre_create_issue_content_gate
with vague-phrase detection, durable-source-pointer escape hatch, and a
domination check so long specific bodies are not falsely blocked.
- gitea_create_issue: runs the gate after preflight purity, before duplicate
search; new allow_incomplete_content override (off by default). Title-only
creation stays allowed (no empty-body requirement) to preserve behavior.
- tests/test_issue_content_gate.py: unit + MCP integration coverage.
- create-issue.md: documents the enforced preflight with valid/invalid
prompt examples.
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected] >
2026-07-09 13:07:53 -04:00
sysadmin
c738e5b10d
Merge pull request 'fix: resolve reviewer lease identity via host not remote alias ( Closes #578 )' ( #581 ) from fix/issue-578-reviewer-lease-identity into master
2026-07-09 11:21:29 -05:00
sysadmin
fe9faec741
test: cover reviewer lease identity host resolution
2026-07-09 12:09:40 -04:00
sysadmin
7f2a5a3d3c
fix: resolve reviewer lease identity via host not remote alias
...
_authenticated_username expects a host for auth/API calls. Lease
acquire/adopt/gate/release paths passed the remote alias (prgs), so
identity resolved empty and same-identity release fail-closed across
sessions — blocking author conflict-fix pushes after REQUEST_CHANGES.
Pass resolved host h from _resolve into _authenticated_username.
2026-07-09 12:09:40 -04:00
sysadmin
946d6c2f81
Merge pull request 'Web UI: Test coverage and CI checks ( #436 )' ( #457 ) from feat/issue-436-ci-coverage into master
2026-07-09 11:06:55 -05:00
sysadmin
64b83cd1fb
test: keep webui CI hermetic offline
2026-07-09 11:59:23 -04:00
sysadmin
23535e30bc
feat(webui): test coverage and CI gate ( #436 )
...
Add consolidated MVP route/read-only tests, path-filter helpers, and
scripts/test-webui plus scripts/ci-webui-check for Jenkins path-filtered
runs on PRs touching web UI surfaces.
Closes #436
2026-07-09 11:59:23 -04:00
sysadmin
351ef3899b
Merge pull request 'Web UI: Auth and deployment boundary ( #435 )' ( #456 ) from feat/issue-435-auth-deployment into master
2026-07-09 10:58:52 -05:00
sysadmin
1334b0b320
fix: restore ISSUE_LOCK_FILE import and fail-closed public bind
...
Conflict resolution left webui/lease_loader.py importing ISSUE_LOCK_FILE
from merged_cleanup_reconcile (not exported); import from
issue_lock_provenance instead. Validate WEBUI_HOST before loading the
full app stack so 0.0.0.0 refuse exits immediately.
Addresses reviewer findings on PR #456 / issue #435 .
2026-07-09 11:52:24 -04:00
sysadmin
975674d7f5
feat(webui): auth and deployment boundary ( #435 )
...
Add bind-host assessment that refuses 0.0.0.0/:: without override,
warns on non-loopback binds, and documents internal-only MVP serving.
Health endpoint exposes deployment metadata; docs cover Access/VPN/WARP
and runtime env assumptions without embedding secrets in the client.
Closes #435
2026-07-09 11:50:40 -04:00
sysadmin
8d1098f916
Merge pull request 'feat: guard merged branch cleanup path' ( #516 ) from feat/issue-514-branch-delete-guard into master
2026-07-09 10:45:05 -05:00
sysadmin
49aa3b2812
Merge pull request 'Web UI: Gated action framework ( #434 )' ( #455 ) from feat/issue-434-gated-actions into master
2026-07-09 10:39:28 -05:00
sysadmin
94004f05ac
Merge pull request 'fix: newest reviewer lease marker wins so release ends prior claims ( Closes #577 )' ( #579 ) from fix/issue-577-reviewer-lease-newest-wins into master
2026-07-09 10:38:22 -05:00
sysadmin
8d6d3cb014
fix: refine terminal preflight check to avoid false-positive PATH blocks on server
2026-07-09 11:31:48 -04:00
sysadmin
f558b80cc8
test: cover explicit git -C terminal probe
2026-07-09 10:43:42 -04:00
sysadmin
223cde1b94
feat: terminal launcher diagnostics and mutation preflight ( Closes #556 )
...
Add categorize-and-probe helpers for shell spawn failures, expose
gitea_diagnose_terminal, and fail closed on mutation capability resolve
when the terminal launcher is unhealthy (BLOCKED + DIAGNOSE). Document
the operator path in the workflow runbooks.
2026-07-09 10:29:03 -04:00
sysadmin
9b96085d8d
fix: newest lease marker wins so release ends prior claims
...
find_active_reviewer_lease walked past terminal markers and re-armed
older claimed leases after gitea_release_reviewer_pr_lease. Treat the
newest marker as authoritative (append-only ledger).
Closes #577
2026-07-09 10:09:38 -04:00
sysadmin
ddb1dd941b
Merge remote-tracking branch 'prgs/master' into feat/issue-434-gated-actions
...
# Conflicts:
# docs/webui-local-dev.md
# tests/test_webui_skeleton.py
# webui/app.py
2026-07-09 09:38:20 -04:00
sysadmin
d7c29afde5
Merge remote-tracking branch 'prgs/master' into feat/issue-514-branch-delete-guard
...
# Conflicts:
# gitea_mcp_server.py
2026-07-09 09:35:55 -04:00
sysadmin
cc4b95839d
Merge pull request 'feat: add BLOCKED + DIAGNOSE default rule + blocker report template ( closes #552 )' ( #554 ) from issue-552-blocked-diagnose into master
2026-07-09 08:30:35 -05:00
sysadmin
325e0bb44c
Merge pull request 'feat: require Controller Handoff plus Thread State Ledger ( Closes #507 )' ( #511 ) from feat/issue-507-controller-thread-ledger into master
2026-07-09 08:27:44 -05:00
sysadmin
cf130ed0fc
fix: resolve test suite regressions and conn helper discovery error
2026-07-09 09:25:08 -04:00
sysadmin
cd83b7588f
Merge pull request 'feat: add worktree hygiene dashboard to web UI ( Closes #432 )' ( #453 ) from feat/issue-432-worktree-hygiene into master
2026-07-09 08:24:34 -05:00
sysadmin
b3bc459423
fix: drop obsolete worktrees stub assertion after #432 implement
2026-07-09 09:23:19 -04:00
sysadmin
e2ef8fbda0
fix: resolve docs conflict for PR #453 after #452
...
Merge both audit (#431 ) and worktree hygiene (#432 ) route/docs lines.
2026-07-09 09:22:53 -04:00
sysadmin
5cf44d78e6
Merge pull request 'feat: add final-report audit paste tool to web UI ( Closes #431 )' ( #452 ) from feat/issue-431-audit-paste into master
2026-07-09 08:22:13 -05:00
sysadmin
254ccf5821
Merge pull request 'feat: mount canonical gitea-workflow skill for Codex and MCP inventory ( Closes #551 )' ( #565 ) from feat/issue-551-codex-gitea-workflow into master
2026-07-09 08:14:31 -05:00
sysadmin
a8177c2e73
Merge remote-tracking branch 'prgs/master' into feat/issue-507-controller-thread-ledger
...
# Conflicts:
# docs/llm-workflow-runbooks.md
# final_report_validator.py
2026-07-09 09:13:51 -04:00
sysadmin
e8f93e93d7
Merge remote-tracking branch 'prgs/master' into feat/issue-551-codex-gitea-workflow
...
# Conflicts:
# docs/llm-workflow-runbooks.md
2026-07-09 09:12:44 -04:00
sysadmin
7acd55d2d2
Merge remote-tracking branch 'prgs/master' into feat/issue-514-branch-delete-guard
...
# Conflicts:
# final_report_validator.py
2026-07-09 09:12:33 -04:00
sysadmin
b52fa2060f
Merge pull request 'Clarify and enforce reviewer-vs-merger role boundaries ( #483 )' ( #486 ) from feat/issue-483-role-boundaries into master
2026-07-09 08:09:47 -05:00
sysadmin
932b280a27
Merge pull request 'feat: block direct MCP imports and unsanctioned keychain access ( Closes #558 )' ( #566 ) from feat/issue-558-block-direct-imports into master
2026-07-09 08:08:43 -05:00
sysadmin
c35f713291
Merge master into issue-552-blocked-diagnose to resolve conflicts
2026-07-09 09:06:59 -04:00
sysadmin
9340dc7009
Merge pull request 'feat: discover merged cleanup worktree aliases ( Closes #532 )' ( #571 ) from feat/issue-532-merged-cleanup-worktree-aliases into master
2026-07-09 08:05:33 -05:00
sysadmin
8e7a69800a
Merge pull request 'feat: require canonical next-action state comments ( Closes #495 )' ( #499 ) from feat/issue-495-canonical-next-action-comments into master
2026-07-09 08:02:14 -05:00
sysadmin
b14b1a9663
Merge pull request 'feat( #496 ): enforce canonical state comment validation before posting' ( #497 ) from feat/issue-496-canonical-comment-validator into master
2026-07-09 07:57:47 -05:00
sysadmin
eac2b0f6f2
Merge pull request 'feat: reject contradictory reviewer handoff ledgers ( Closes #501 )' ( #506 ) from feat/issue-501-reviewer-handoff-consistency into master
2026-07-09 07:52:43 -05:00
sysadmin
7274b76e81
Merge pull request 'feat: add Canonical Thread Handoff protocol ( Closes #505 )' ( #509 ) from feat/issue-505-canonical-thread-handoff into master
2026-07-09 07:49:13 -05:00
sysadmin
5ada9e6cc0
Merge pull request 'feat: require issue type and workflow status labels ( Closes #513 )' ( #518 ) from codex/issue-513-workflow-labels into master
2026-07-09 07:44:54 -05:00
sysadmin
9c599bf054
Merge remote-tracking branch 'prgs/master' into feat/issue-551-codex-gitea-workflow
...
# Conflicts:
# gitea_mcp_server.py
2026-07-09 08:44:51 -04:00
sysadmin
6cce87031b
Merge remote-tracking branch 'prgs/master' into feat/issue-431-audit-paste
...
# Conflicts:
# docs/webui-local-dev.md
# tests/test_webui_skeleton.py
# webui/app.py
2026-07-09 08:41:40 -04:00
sysadmin
71e28aa5b4
Merge remote-tracking branch 'prgs/master' into feat/issue-432-worktree-hygiene
...
# Conflicts:
# docs/webui-local-dev.md
# webui/app.py
2026-07-09 08:41:37 -04:00
sysadmin
0631e2e155
Merge pull request 'feat: require live PR head re-pin before conflict-fix classification ( Closes #522 )' ( #563 ) from feat/issue-522-conflict-fix-classification into master
2026-07-09 07:41:33 -05:00
sysadmin
46709537c1
Merge remote-tracking branch 'prgs/master' into feat/issue-434-gated-actions
...
# Conflicts:
# docs/webui-local-dev.md
2026-07-09 08:41:08 -04:00
sysadmin
62ab4b4d95
Merge remote-tracking branch 'prgs/master' into feat/issue-514-branch-delete-guard
...
# Conflicts:
# gitea_mcp_server.py
2026-07-09 08:28:50 -04:00
sysadmin
ce0fb42bef
Merge remote-tracking branch 'prgs/master' into feat/issue-483-role-boundaries
2026-07-09 08:27:36 -04:00
sysadmin
92fc913cad
Merge remote-tracking branch 'prgs/master' into issue-552-blocked-diagnose
...
# Conflicts:
# skills/llm-project-workflow/SKILL.md
2026-07-09 08:27:10 -04:00
sysadmin
412f0e0081
Merge remote-tracking branch 'prgs/master' into feat/issue-558-block-direct-imports
...
# Conflicts:
# docs/llm-workflow-runbooks.md
2026-07-09 08:26:49 -04:00
sysadmin
7cb024d4a5
Merge remote-tracking branch 'prgs/master' into feat/issue-495-canonical-next-action-comments
...
# Conflicts:
# skills/llm-project-workflow/SKILL.md
2026-07-09 08:26:46 -04:00
sysadmin
1ed1539acf
Merge remote-tracking branch 'prgs/master' into feat/issue-551-codex-gitea-workflow
...
# Conflicts:
# docs/llm-workflow-runbooks.md
2026-07-09 08:26:46 -04:00