diff --git a/.aethyme/generated/onboarding.json b/.aethyme/generated/onboarding.json index f8ea3a6..353b8be 100644 --- a/.aethyme/generated/onboarding.json +++ b/.aethyme/generated/onboarding.json @@ -354,6 +354,11 @@ } ], "dangerous_paths": [ + { + "path": ".aethyme/gates.toml", + "reason": "repository validation policy; changes affect every broker submission", + "provenance": "tracked path classification" + }, { "path": ".github/workflows", "reason": "repository automation; changes can affect publication or shared CI", @@ -396,9 +401,9 @@ ] }, "freshness": { - "source_digest": "9d585c352194147824bc58c079ba104409fa5271d4cab3e0f4363992fb631475", + "source_digest": "a4e4ab608b581278da8d3cb4fbefea7c0159eb38a2de4323ddfe61f982828bf4", "source_commit": null, - "source_file_count": 131, + "source_file_count": 133, "generator": "deterministic" }, "telemetry": { @@ -423,7 +428,7 @@ "entrypoints": 4, "caution_zones": 0, "generated_paths": 1, - "dangerous_paths": 1, + "dangerous_paths": 2, "navigation_recipes": 3, "notes": 0 }, diff --git a/.claude/skills/aethyme/references/broker.md b/.claude/skills/aethyme/references/broker.md index d913f79..a6cca7a 100644 --- a/.claude/skills/aethyme/references/broker.md +++ b/.claude/skills/aethyme/references/broker.md @@ -170,6 +170,29 @@ blocked. aethyme broker advanced ship execute --entry --confirm ``` + By default, the selected entry is a prefix boundary: every earlier + promoted-but-unpublished entry ships with it. In promote-mode repositories, + `--only` can publish one independent entry without changing that default: + + ```bash + aethyme broker advanced ship plan --entry --only + aethyme broker advanced ship execute --entry --only --confirm --plan + ``` + + The plan refuses when an earlier unshipped entry is required by ancestry, + changed-path overlap, or a declared `Depends-On` trailer. Otherwise it gates + the exact tree made from the remote default branch plus only the selected + entry. Planning does not move refs, though it may record gate results in the + local cache; execution requires the reviewed plan digest. After publication, + the broker rebases the remaining pending entries onto the published commit + in integration and re-runs gates only for replayed trees that changed. + Review that reconciliation report. If it refuses or cannot apply safely, + use `aethyme broker advanced integration reconcile --upstream --dry-run` + and follow its reviewed apply plan. `broker main reconcile plan/apply` remains + the separate operation for advancing the local default checkout from + integration; independent publication does not mark the other queue entries + shipped or change their promotion order. + Prefer this reviewed broker ship workflow over a raw push. Never infer publication authority from permission to edit, submit, or promote. Without publication authority, stop after submit and report the promoted diff --git a/.claude/skills/repo-onboarding/SKILL.md b/.claude/skills/repo-onboarding/SKILL.md index 8f7fab0..18edf84 100644 --- a/.claude/skills/repo-onboarding/SKILL.md +++ b/.claude/skills/repo-onboarding/SKILL.md @@ -73,11 +73,12 @@ description: Use when starting work in an unfamiliar repository, when the task a ## Generated and Dangerous Paths - Generated/vendor `.aethyme/generated`: tracked generated or vendored surface; verify ownership before editing +- Sensitive `.aethyme/gates.toml`: repository validation policy; changes affect every broker submission - Sensitive `.github/workflows`: repository automation; changes can affect publication or shared CI ## Freshness -- Source digest: `9d585c352194147824bc58c079ba104409fa5271d4cab3e0f4363992fb631475` -- Tracked source files: `131` +- Source digest: `a4e4ab608b581278da8d3cb4fbefea7c0159eb38a2de4323ddfe61f982828bf4` +- Tracked source files: `133` - Overrides applied: `False` - Sections generated: `repo, workspaces, primary_workspace, commands, areas, entrypoints, caution_zones, generated_paths, dangerous_paths, navigation_recipes, summon, freshness` diff --git a/.codex/skills/aethyme/references/broker.md b/.codex/skills/aethyme/references/broker.md index d913f79..a6cca7a 100644 --- a/.codex/skills/aethyme/references/broker.md +++ b/.codex/skills/aethyme/references/broker.md @@ -170,6 +170,29 @@ blocked. aethyme broker advanced ship execute --entry --confirm ``` + By default, the selected entry is a prefix boundary: every earlier + promoted-but-unpublished entry ships with it. In promote-mode repositories, + `--only` can publish one independent entry without changing that default: + + ```bash + aethyme broker advanced ship plan --entry --only + aethyme broker advanced ship execute --entry --only --confirm --plan + ``` + + The plan refuses when an earlier unshipped entry is required by ancestry, + changed-path overlap, or a declared `Depends-On` trailer. Otherwise it gates + the exact tree made from the remote default branch plus only the selected + entry. Planning does not move refs, though it may record gate results in the + local cache; execution requires the reviewed plan digest. After publication, + the broker rebases the remaining pending entries onto the published commit + in integration and re-runs gates only for replayed trees that changed. + Review that reconciliation report. If it refuses or cannot apply safely, + use `aethyme broker advanced integration reconcile --upstream --dry-run` + and follow its reviewed apply plan. `broker main reconcile plan/apply` remains + the separate operation for advancing the local default checkout from + integration; independent publication does not mark the other queue entries + shipped or change their promotion order. + Prefer this reviewed broker ship workflow over a raw push. Never infer publication authority from permission to edit, submit, or promote. Without publication authority, stop after submit and report the promoted diff --git a/.codex/skills/repo-onboarding/SKILL.md b/.codex/skills/repo-onboarding/SKILL.md index 8f7fab0..18edf84 100644 --- a/.codex/skills/repo-onboarding/SKILL.md +++ b/.codex/skills/repo-onboarding/SKILL.md @@ -73,11 +73,12 @@ description: Use when starting work in an unfamiliar repository, when the task a ## Generated and Dangerous Paths - Generated/vendor `.aethyme/generated`: tracked generated or vendored surface; verify ownership before editing +- Sensitive `.aethyme/gates.toml`: repository validation policy; changes affect every broker submission - Sensitive `.github/workflows`: repository automation; changes can affect publication or shared CI ## Freshness -- Source digest: `9d585c352194147824bc58c079ba104409fa5271d4cab3e0f4363992fb631475` -- Tracked source files: `131` +- Source digest: `a4e4ab608b581278da8d3cb4fbefea7c0159eb38a2de4323ddfe61f982828bf4` +- Tracked source files: `133` - Overrides applied: `False` - Sections generated: `repo, workspaces, primary_workspace, commands, areas, entrypoints, caution_zones, generated_paths, dangerous_paths, navigation_recipes, summon, freshness` diff --git a/AGENTS.md b/AGENTS.md index 0de1992..3446a26 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -1,6 +1,5 @@ - # Agent Instructions - + Generated by Aethyme; do not edit. Customize `.aethyme/overrides/agents.json` (policy) or `.aethyme/overrides/onboarding.json` (orientation), then run @@ -55,4 +54,3 @@ Load the Aethyme skill: `.claude/skills/aethyme/SKILL.md` (Codex: GitHub coordination, publication, recovery), `policy.md` (commit format, branch and review practice, verifying these files), `graph-task.md` and `dead-code.md`. - diff --git a/CLAUDE.md b/CLAUDE.md index 0de1992..3446a26 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -1,6 +1,5 @@ - # Agent Instructions - + Generated by Aethyme; do not edit. Customize `.aethyme/overrides/agents.json` (policy) or `.aethyme/overrides/onboarding.json` (orientation), then run @@ -55,4 +54,3 @@ Load the Aethyme skill: `.claude/skills/aethyme/SKILL.md` (Codex: GitHub coordination, publication, recovery), `policy.md` (commit format, branch and review practice, verifying these files), `graph-task.md` and `dead-code.md`. -