Skip to content

fix: restore staged Parts 2.37 consumer pins - #391

Merged
firejune merged 1 commit into
mainfrom
jinni/390-staged-parts-pins
Nov 10, 2026
Merged

firejune merged 1 commit into
mainfrom
jinni/390-staged-parts-pins

Conversation

@firejune

Copy link
Copy Markdown
Contributor

Closes #390

Move Create's direct Parts dependency and new-project pin from 3.7.0 to the published 2.37.0, with exact registry integrity and source SHA 463c9ff38b007842e5608d06978ad9e9bd8b2525. Update question-set copies, versioned links and version-bound governed fixtures.

Staged cohort

Core remains 3.7.0. Review remains 3.7.0 at fcc66c03d7f24ea7f4ed68dba8530e5553bbe1d3, with its declared runtime Play 3.7.0 at 60ea660083a1e2535ac3bf3847289f468e5881b9. Create has no direct Play dependency.

Source CI retains all existing sibling-link, entry, child-observation and zero-skip named-test assertions. The asserted runtime edges match their source checkouts. Review's retained devDependency on Parts 3.7.0 remains a separate registry dev edge. The later Review 2.9 consumer PR moves that cohort together. Standalone Play 1.24 publication is a separate release gate.

Verification

Evidence Exit Result
Isolated registry install 0 Parts 2.37.0 integrity matches published readback
Scoped Nova ordinary run 0 72.894 seconds, process boundary quiescent
Six affected generators 0 73 recovered files and one replaced old receipt
All 14 generator check modes plus direction hash check 0 Reproduce committed bytes
Filled example generation check 0 0 refusals, 0 warnings
Typecheck and lint 0 No diagnostics
Seven focused suites 0 119 pass, 4 skip, 0 fail, 1022 assertions
Post-recovery draft/agent-guide suites 0 23 pass, 1 skip
Independent recovered-file hash audit 0 73 files matched
Independent committed-file hash audit 0 84 files matched, clean worktree

The four focused skips comprise three named sibling-source cases and the existing installed-doc-link control. Hosted source-linked CI remains the acceptance for its complete named list and actual sibling graph. A final text-only correction updates the nearby new-project pin prose and removes an unsupported claim that an old breath diagnostic was rerun with the new version. Earlier behavior verification receipts are preserved.

Whole-repository version/range inventory leaves only retained Core/Review/Play 3.7.0 references and enumerator-boundary test vectors. Parts 3.7.0 pin copies and the old Parts source SHA are absent. No release, pilot change, accepted-output regeneration or rigging build is included.

Regenerated fixture field inventory

Only generators whose output embeds the Parts version or its dependent identities ran in write mode. The table includes every recovered fixture path. Hash-only direction/caption changes transitively bind the changed project or producer run identity. Other fixture outputs remained byte-identical under their existing check modes.

Regenerated fixture Changed fields or bound values
templates/example-chain/chain.json steps/[]/output_sha256, steps/[]/outputs/out/run.json, steps/[]/outputs/derived/drafts/chain/out/run.json, steps/[]/outputs/outputs/v1/out/rig/run.json, steps/[]/command/[], steps/[]/seed/value/built_with/@rig-c/parts, steps/[]/outputs/evidence/direction-input.json
templates/example-chain/checkpoints/0a-interview-options.json files/[]/sha256, project_sha256
templates/example-chain/checkpoints/0a-interview-options/package.json dependencies/@rig-c/parts
templates/example-chain/checkpoints/0a-interview-options/project.json interview/question_set
templates/example-chain/checkpoints/0b-plan-pending.json files/[]/sha256, project_sha256
templates/example-chain/checkpoints/0b-plan-pending/package.json dependencies/@rig-c/parts
templates/example-chain/checkpoints/0b-plan-pending/project.json interview/question_set
templates/example-chain/checkpoints/1-parts-verdict.json files/[]/sha256, project_sha256
templates/example-chain/checkpoints/1-parts-verdict/derived/drafts/chain/out/run.json package/version
templates/example-chain/checkpoints/1-parts-verdict/package.json dependencies/@rig-c/parts
templates/example-chain/checkpoints/1-parts-verdict/project.json drafts/[]/files/[]/sha256, drafts/[]/producer/version, interview/question_set
templates/example-chain/checkpoints/2-rigging-answers.json files/[]/sha256, project_sha256
templates/example-chain/checkpoints/2-rigging-answers/derived/drafts/chain/out/run.json package/version
templates/example-chain/checkpoints/2-rigging-answers/package.json dependencies/@rig-c/parts
templates/example-chain/checkpoints/2-rigging-answers/project.json drafts/[]/files/[]/sha256, drafts/[]/producer/version, interview/question_set
templates/example-chain/checkpoints/3-rig-review.json files/[]/sha256, project_sha256
templates/example-chain/checkpoints/3-rig-review/derived/drafts/chain/out/run.json package/version
templates/example-chain/checkpoints/3-rig-review/derived/review/v1/out/rig/run.json package/version
templates/example-chain/checkpoints/3-rig-review/outputs/v1/out/rig/run.json package/version
templates/example-chain/checkpoints/3-rig-review/package.json dependencies/@rig-c/parts
templates/example-chain/checkpoints/3-rig-review/project.json drafts/[]/files/[]/sha256, drafts/[]/producer/version, interview/question_set, versions/[]/built_with/@rig-c/parts, versions/[]/review_package/files/[]/sha256
templates/example-chain/checkpoints/4-direction-post.json files/[]/sha256, project_sha256
templates/example-chain/checkpoints/4-direction-post/derived/drafts/chain/out/run.json package/version
templates/example-chain/checkpoints/4-direction-post/derived/review/v1/out/rig/run.json package/version
templates/example-chain/checkpoints/4-direction-post/outputs/v1/out/rig/run.json package/version
templates/example-chain/checkpoints/4-direction-post/package.json dependencies/@rig-c/parts
templates/example-chain/checkpoints/4-direction-post/project.json drafts/[]/files/[]/sha256, drafts/[]/producer/version, interview/question_set, signoffs/[]/target/review_package/sha256, versions/[]/built_with/@rig-c/parts, versions/[]/review_package/files/[]/sha256
templates/example-chain/derived/drafts/chain/out/run.json package/version
templates/example-chain/derived/review/v1/out/rig/run.json package/version
templates/example-chain/evidence/captions.json inputs/project/sha256
templates/example-chain/evidence/direction-input.json scene/sha256
templates/example-chain/evidence/direction/v2.json scene/sha256
templates/example-chain/evidence/scene/s1.json rig/acceptance/review_package/sha256
templates/example-chain/outputs/v1/out/rig/run.json package/version
templates/example-chain/package.json dependencies/@rig-c/parts
templates/example-chain/project.json drafts/[]/files/[]/sha256, drafts/[]/producer/version, interview/question_set, scenes/[]/sha256, signoffs/[]/target/review_package/sha256, signoffs/[]/target/direction/sha256, versions/[]/built_with/@rig-c/parts, versions/[]/review_package/files/[]/sha256, versions/[]/outputs/[]/sha256, versions/[]/provenance/config/sha256, versions/[]/provenance/direction/sha256
templates/example-draft/derived/drafts/lantern/out/run.json package/version
templates/example-draft/derived/review/v1/out/rig/run.json package/version
templates/example-draft/derived/review/v2/out/rig/run.json package/version
templates/example-draft/evidence/direction-input-v4.json scene/sha256
templates/example-draft/evidence/direction/v4.json scene/sha256
templates/example-draft/evidence/scene/s1.json rig/acceptance/review_package/sha256
templates/example-draft/out/run.json package/version
templates/example-draft/outputs/v1/out/rig/run.json package/version
templates/example-draft/outputs/v2/out/rig/run.json package/version
templates/example-project.json drafts/[]/files/[]/sha256, drafts/[]/producer/version, interview/question_set, scenes/[]/sha256, signoffs/[]/target/review_package/sha256, signoffs/[]/target/direction/sha256, versions/[]/built_with/@rig-c/parts, versions/[]/review_package/files/[]/sha256, versions/[]/outputs/[]/sha256, versions/[]/provenance/config/sha256, versions/[]/provenance/direction/sha256
templates/example-remesh/derived/drafts/remesh/out/run.json package/version
templates/example-remesh/derived/review/v1/out/rig/run.json package/version
templates/example-remesh/derived/review/v2/out/rig/run.json package/version
templates/example-remesh/derived/review/v3/out/rig/run.json package/version
templates/example-remesh/evidence/captions.json inputs/project/sha256
templates/example-remesh/evidence/direction-input-v4.json scene/sha256
templates/example-remesh/evidence/direction-input-v5.json scene/sha256
templates/example-remesh/evidence/direction/v4.json scene/sha256
templates/example-remesh/evidence/direction/v5.json scene/sha256
templates/example-remesh/evidence/scene/s1.json rig/acceptance/review_package/sha256
templates/example-remesh/evidence/v1/registration/package-lock.json packages/node_modules/@rig-c/parts/version
templates/example-remesh/evidence/v2/registration/package-lock.json packages/node_modules/@rig-c/parts/version
templates/example-remesh/evidence/v3/registration/package-lock.json packages/node_modules/@rig-c/parts/version
templates/example-remesh/outputs/v1/out/rig/run.json package/version
templates/example-remesh/outputs/v2/out/rig/run.json package/version
templates/example-remesh/outputs/v3/out/rig/run.json package/version
templates/example-remesh/package.json dependencies/@rig-c/parts
templates/example-remesh/project.json drafts/[]/files/[]/sha256, drafts/[]/producer/version, interview/question_set, scenes/[]/sha256, signoffs/[]/target/review_package/sha256, signoffs/[]/target/direction/sha256, versions/[]/built_with/@rig-c/parts, versions/[]/outputs/[]/bytes, versions/[]/outputs/[]/sha256, versions/[]/registration/copied/bytes, versions/[]/registration/files/[]/sha256, versions/[]/registration/toolchain/source/bytes, versions/[]/registration/toolchain/source/sha256, versions/[]/review_package/files/[]/sha256, versions/[]/provenance/config/sha256, versions/[]/provenance/direction/sha256
templates/example-reopened/project.json drafts/[]/files/[]/sha256, drafts/[]/producer/version, interview/question_set, scenes/[]/sha256, signoffs/[]/target/review_package/sha256, signoffs/[]/target/direction/sha256, versions/[]/built_with/@rig-c/parts, versions/[]/review_package/files/[]/sha256, versions/[]/outputs/[]/sha256, versions/[]/provenance/config/sha256, versions/[]/provenance/direction/sha256
templates/example-split/captions.json inputs/project/sha256
tests/fixtures/collection-pin.json collection/interview/question_set
tests/fixtures/correction-api-path/parts/project.json interview/question_set
tests/fixtures/correction-api-path/post/project.json interview/question_set
tests/fixtures/correction-api-path/rig/evidence/feedback.json feedback/[]/context/applied/patch/producer/version, feedback/[]/context/applied/patchSha256, feedback/[]/context/applied/producer/version
tests/fixtures/correction-api-path/rig/evidence/preview.json producer/version
tests/fixtures/correction-api-path/rig/evidence/review-reads/dcfbc20ebb65010fa45dd191606afb5a2076d09333c48cc0a1c3be69e5d84cad.json Replacement review-read receipt: producer.version, dependent hashes
tests/fixtures/correction-api-path/rig/project.json corrections/[]/artifact/feedback/file/path, corrections/[]/artifact/feedback/file/sha256, corrections/[]/artifact/review_read/stdout/path, corrections/[]/artifact/review_read/stdout/sha256, interview/question_set, versions/[]/review_origin/applied/patch/producer/version, versions/[]/review_origin/applied/patchSha256, versions/[]/review_origin/applied/producer/version, versions/[]/review_origin/feedback/path, versions/[]/review_origin/feedback/sha256, versions/[]/review_origin/review_read/stdout/path, versions/[]/review_origin/review_read/stdout/sha256
tests/fixtures/correction-api-path/rig/evidence/review-reads/1828ea2fad652da80045fccfb40f9959ef7a1d792e3546ad72003626ed8d6ed3.json Replaced content-addressed review-read receipt

Co-Authored-By: Jinni <342598851+fj-jinni[bot]@users.noreply.github.com>
Co-Authored-By: Naru <342599188+fj-naru[bot]@users.noreply.github.com>
@firejune firejune added the by:codex Written by a Codex (Naru) worker; Claude side judges the review label Nov 10, 2026
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Nov 10, 2026 •

Copy link
Copy Markdown
Codex Review Summary: ✅ Completed

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-11-10T09:56:17.163583Z 7e6e24f PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@firejune

Copy link
Copy Markdown
Contributor Author

Claude review (cross-family) at exact head 7e6e24f77717297773dc7dc183be65b92fb0db2b

Reviewer: Claude (HQ). Read at this head: package.json, bun.lock, src/pins.ts, scripts/source-ci-pins.json, docs/SOURCE.md, docs/LESSONS.md and scripts/generate-example-draft.ts. For the regenerated templates, every changed line was grepped for package names, versions and source SHAs.

Verdict: LGTM #391 at 7e6e24f

  • Only the direct @rig-c/parts pin moves (3.7.0 → 2.37.0), along with its source CI SHA (d9b59ea3 → 463c9ff3). The lock entry carries the registry's 2.37.0 integrity (sha512-ZO8vHKMx…) with core 3.7.0.
  • No @rig-c/core, @rig-c/review or @rig-c/play pin or source SHA changes, so the retained Review/Play cohort is intact.
  • In the template changes, the version strings, the question_set waypoint source, built_with and the doc links to the parts tag all follow the pin. Output hashes in built_with records are unchanged, so the version field is the only thing that moved.

No findings. Merge after Checks are green.

@firejune
firejune merged commit e0e81b4 into main Nov 10, 2026
2 checks passed
@firejune
firejune deleted the jinni/390-staged-parts-pins branch November 10, 2026 10:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

by:codex Written by a Codex (Naru) worker; Claude side judges the review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Align staged parts rollback pins and source CI

1 participant