Λήψη RigSmith 1.24.0

🚀 Enhancements
- rig: Build stack CI from an explicit manifest seed with credential-safe provenance
- rig: Test all proposal PR heads in a stack topic together with declared-repository trust checks and provenance
- rig: Cache stack CI histories and harden release verification and fork PR execution
- rig: Add an observed stack CI warning guard with explicit plain-clone diagnostics and fail-closed package validation
- rig: Add scheduled stack upstream canary reports and manifest cursor PR publication
- rig: Add a safe stack manifest home for local setup and CI, with seed references and member pointers
- rig: Check NuGet release ancestry and direct or verified transitive package delivery before migrating stack guards; opt into status release checks with --releases
Refuse guard migration when MSBuild overrides or unresolved package pins prevent proving delivery.
- rig: Build member CI checkouts against sibling sources with rig stack ci and a composite action
- rig: Report cross-member stack topic PR dependencies and cursor inclusion, publish only within the current repository, and provide an opt-in scheduled refresh workflow with local GitHub credential reuse.
Keep dependency reporting non-fatal in CI, validate dependency inputs and member names (including self-dependencies and cycles), and bound optional local dependency lookups after local status output.
- rig: Expose stack source properties and compile constants, gate member imports, and preview signals in stack doctor
- rig: Expose optional stack source availability during MSBuild project evaluation, preserving hand-owned props and existing packing behavior
🩹 Fixes
- rig: Combine topic CI with immutable seed policy and scrub tokens before seed cloning
- rig: Skip inferred proposal dependency edges that would create a cycle, preserving successful propose recording; explain how to repair existing manifest cycles
- rig: Reject query and fragment characters in every seed reference form including local paths, reserve the _seed member name for provenance, and distinguish matrix cache saves
- rig: Include reachable sibling source signals in stack overlays and recognize hand-owned gated imports. Propagate signals through evaluated ProjectReferences so guarded tests run, and refuse partial upgrades of customized legacy imports. Fail clearly if an SDK item-contract change would silently drop ProjectReference source signals.
- rig: Honor stack pull dry-run and guard stack setup operations against unintended writes
- rig: Attribute CI guard warnings by file identity across Windows path case and short-name aliases
- rig: Report seed manifest dependencies and refresh seed-mode CI caches on each run
- rig: Fix Windows seed/archive containment checks for paths mixing separators around a symlink followed by ..
- rig: Preserve member warning tolerances and keep sibling compiler diagnostics visible without failing guarded member CI
- rig: Reject conflicting or missing action manifest sources before publishing dependency statuses
- rig: Preserve resolved local seed paths under directories with query or fragment characters, and remove new setup clones when home adoption fails
- rig: Refuse unsupported stack CI and dependency dry runs, validate seed publication previews, and refresh stack agent guidance
- rig: Grant topic workflow read-only pull request metadata access and document private sibling limits
- rig: Keep topic CI API tokens out of child processes and refuse persisted checkout credentials
- rig: Support apostrophes in guard hook paths and clarify guarded build scope and sibling SDK diagnostics
- rig: Parse quoted, indented and block Go module directives and sibling requirements while preserving line endings during version updates. Warn about malformed Go module directives inside stack members during wiring.
Avoid discovery panics when a version annotation has no space after //.
- rig: Discover Go sibling modules with CRLF manifests on Windows and preserve line endings when writing version annotations.
- rig: Recognize squash/rebase-merged owned stack members by upstream tree content. Preserve individual new commits on a safe upstream base, refuse ambiguous replay, verify ancestry before every member push, and exclude remove/add administrative history.
- rig: Preserve plain-reference warning policies and parse CRLF analyzer diagnostics with isolated metadata output
- rig: Reject seed URLs with query or fragment components in CI, deps, setup and seed publication without echoing potentially secret values
- clauderig: Prefer ledger session dates over restored file mtimes in recent and search.
- clauderig: Refuse escaping project hook writes, preserve foreign handlers, escape diagnostics and reject malformed settings without losing numeric precision.
- codexrig: Diagnose untrusted project hooks with one bounded Codex trust probe
- codexrig: restrict hook trust to exact current codexrig command/event pairs in the explicitly requested scope. Refuse marker lookalikes and outdated commands, prevent global/project trust leaks, and show every approval and refusal in text and JSON. Doctor's global trust fix uses the same restrictions; reinstall outdated hooks before trusting them.
Leave unrelated hooks alone without doctor warnings. Report stale installations as out of date with a reinstall repair, and refuse hooks with missing source paths with an instruction to update Codex.
After upgrading, codexrig doctor checks hooks Codex lists from the current working directory, including inline and nested legacy approvals. It is not a machine-wide scan: approvals in other repositories are not seen. Old substring-based approval may still allow a lookalike to run. STILL TRUSTED hooks fail doctor and trust and include manual revocation steps; this release does not automatically revoke them. Scope now binds both the file and the exact sync/guard plans, matcher and full fields. Unknown fields such as commandWindows and escaping project symlinks fail closed. Reports escape terminal controls, retain all partial outcomes and fail on any in-scope refusal. Safe reinstall preserves unrelated handlers and suppresses no-op fixes; missing sync hooks still warn.
Reject invalid project scopes before classification and guard uninstall as well as install. Keep other tools' handler indices stable where possible, report unavoidable trust-key moves, refuse malformed shapes and preserve large numbers. Surface Codex warnings and distinguish future listing compatibility from raw-file hazards, without recommending revocation for unknown listing metadata.
A malformed hooks file in one scope does not suppress trusted-lookalike diagnostics in other scopes. Keep parse and symlink errors separate from lookalike repair advice, and repair unsupported matcher keys on recognized sync hooks so reinstall and trust agree.
When a current hook already exists, reinstall removes its recognized legacy sibling instead of creating a duplicate command, preserving unrelated handlers.
- codexrig: Fail closed on the final account switch scan, including displaced credential save failures
📖 Documentation
- Restore agent skill guidance for Codex accounts and sync, Homebrew sync, and Claude session discovery