feat: add bounded companion fix workflow #9

Merged

lambadalambda merged 30 commits from feat/companion-fixes into main

2026-08-29 07:36:28 +00:00

lambadalambda commented

2026-08-26 18:01:10 +00:00

Owner

Summary

add exact-review-bound /oc fix [review-job-id|latest] companion fixes and direct ordinary-issue fixes
add bounded generalized /oc fix <custom request> PR tasks while preserving existing selector behavior
integrate exact target commit B into source head H, reconstruct deterministic [H,B] merge commits, and publish them through the companion-PR approval gate
keep Git reconstruction and Forgejo mutation in a separate authenticated trusted publisher; launcher/model receive no Forgejo credentials
add crash-safe cleanup/recovery, strict protocol compatibility, native Forgejo suggestions, bounded rendering, migrations, and deployment documentation

Verification

go test -p 1 ./...
go vet -p 1 ./...
GOMAXPROCS=1 sh scripts/adversarial-check.sh
git diff --check
independent correctness/security review; the one numeric-selector overflow finding was fixed and re-reviewed
production deployment from exact head fb83af15771677e8c1a669eed18fd19729dd159c
production verification: SQLite migration/integrity, empty active and cleanup queues, exact artifact identity, all services/tunnels active, public health 200, control isolation 404, webhook GET 405, and no residual agents

Live probe

Review job #46 found the intentional fixture defect in PR #7; fix job #47 published exactly one independently cherry-pickable correction in companion PR #8. PRs #7 and #8 remain deployment probes and are not part of this production feature branch.

## Summary - add exact-review-bound `/oc fix [review-job-id|latest]` companion fixes and direct ordinary-issue fixes - add bounded generalized `/oc fix <custom request>` PR tasks while preserving existing selector behavior - integrate exact target commit `B` into source head `H`, reconstruct deterministic `[H,B]` merge commits, and publish them through the companion-PR approval gate - keep Git reconstruction and Forgejo mutation in a separate authenticated trusted publisher; launcher/model receive no Forgejo credentials - add crash-safe cleanup/recovery, strict protocol compatibility, native Forgejo suggestions, bounded rendering, migrations, and deployment documentation ## Verification - `go test -p 1 ./...` - `go vet -p 1 ./...` - `GOMAXPROCS=1 sh scripts/adversarial-check.sh` - `git diff --check` - independent correctness/security review; the one numeric-selector overflow finding was fixed and re-reviewed - production deployment from exact head `fb83af15771677e8c1a669eed18fd19729dd159c` - production verification: SQLite migration/integrity, empty active and cleanup queues, exact artifact identity, all services/tunnels active, public health `200`, control isolation `404`, webhook GET `405`, and no residual agents ## Live probe Review job #46 found the intentional fixture defect in PR #7; fix job #47 published exactly one independently cherry-pickable correction in companion PR #8. PRs #7 and #8 remain deployment probes and are not part of this production feature branch.

lambadalambda added 11 commits

2026-08-26 18:01:10 +00:00

feat: add strict fix plan protocol 7e34cd7c98

feat: parse fix review commands a694a6a182

feat: bind fix jobs to completed reviews 410458c96b

feat: execute bounded fix plans e99cb460f7

feat: define trusted fix publisher protocol 48473ef4f8

fix: reject control characters in fix plans f664d8b446

feat: publish deterministic companion fixes 8810235e1b

feat: recover trusted fix publications 65b723cc20

feat: add trusted fix publisher service c4e2c6ffcf

chore: deploy trusted fix publisher 2f8e7efe3c