chore: point the remaining user-facing links at Generous-Corp#6447
Merged
Conversation
Four links still named the pre-migration org in places a person actually reads:
the demo page's "source" link, the Figma plugin's UI footer, the coverage
comment the bot posts on every PR, and a tool-registry upstream_url.
GitHub redirects transferred repositories, so none of these were broken — they
just told the reader the wrong home.
Deliberately NOT swept, though they match the same grep:
- `tools/local-ci/test_*` fixtures. These are self-consistent test data; the
assertions and the strings they assert move together or not at all, and
rewriting them changes nothing a user sees.
- `runtime_evidence` URLs under scene3d, and issue links in compat.json. They
cite specific historical issue comments as provenance. The redirect resolves
them, and rewriting a citation to a URL that did not exist when the evidence
was recorded would misstate where it came from.
Scope here is "links a human reads", not "every string matching the old org".
Skill-Update: skip skill=pulp-web-demo reason="template URL host swap only; no behaviour, workflow, or gotcha to document"
Skill-Update: skip skill=packages reason="registry upstream_url host swap only; no behaviour, workflow, or gotcha to document"
This was referenced Jul 22, 2026
danielraffel
added a commit
that referenced
this pull request
Jul 22, 2026
…rp/pulp The org migration was substantially incomplete inside the repo itself — the earlier sweeps (#6447, #6466) caught user-facing links but missed the central CLI constant, the installers, self-hosted-runner registration, and ~45 shipped plugin metadata URLs. An exhaustive cross-repo audit surfaced them. FUNCTIONAL (would target the old org, working only via GitHub's redirect): - tools/cli/cli_common.cpp — PULP_GITHUB_REPO, the central const feeding every SDK / upgrade / release-fetch URL and fetch_latest_release. Highest leverage. - tools/scripts/install.{sh,ps1} — bootstrap release fetch. - tools/ci/{tart-runner*,qemu-runner-windows,intel-vm-cross-build, bootstrap-macos-host,reap-stray-vms}.sh + tools/launchd/*.plist.template — self-hosted runners register against this repo. - tools/cli/{cmd_macos,cmd_overflow}.cpp kRepo, cmd_upgrade.cpp, upgrade_url.hpp (+ its coupled test test_cli_upgrade_url.cpp), experimental/pulp-rs upgrade/ install defaults, tools/local-ci + coordination/health-check. - packages/pulp-{react,web-player}/package.json repository.url. Shipped metadata + catalog: ~45 examples/**/vst3_entry.cpp + moduleinfo.json vendor URLs, ara_factory / plugin_slot_clap host URLs, CMakeLists HOMEPAGE_URL, mkdocs.yml, .claude-plugin/{plugin,marketplace}.json, ISSUE_TEMPLATE/config.yml, templates/plugin/README.md.in. SECURITY FIX (not a mechanical swap): core/format/.../pack_signing_ui.hpp github_backup_repo_allowed() is a DENY-LIST that refuses to publish a signing key into the core repo. It blocked only "danielraffel/pulp". A blind swap would stop blocking the old (still-redirecting) name and only block the new one — a hole. Fixed to block BOTH core-repo names, with the coupled test (test_pack_signing_ui.cpp) extended to every URL form of Generous-Corp/pulp. Verified: pack-signing 36 assertions pass, upgrade-url 22 pass. Deliberately LEFT (verified, not missed): - versioning.schema.json $id — a stable identifier some validators key on; changing it can break id-based resolution. Same call for Shipyard's twin. - compat.json issue links, sdk_cache_paths.hpp + project_bump.hpp comment examples — historical/illustrative provenance; GitHub redirects resolve them. - danielraffel/pulp-packages registry URL and all danielraffel/pulp-* repos — verified by ls-remote they did NOT move. - FetchContent/pin test fixtures (test_cli_project_bump.cpp, pulp-rs #[test] bodies) — self-consistent parser inputs; the org name is incidental. - The two demo files in #6466 (owned by that PR). Version-Bump: skip reason="org-ref sweep + a security-guard hardening; no versioned runtime surface change" Skill-Update: skip skill=ara reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=ci reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=cli-maintenance reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=hosting reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=moonbase reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=tart-ci reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=upgrade reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=web-plugins reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=webview-ui reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change"
danielraffel
added a commit
that referenced
this pull request
Jul 23, 2026
…rp/pulp The org migration was substantially incomplete inside the repo itself — the earlier sweeps (#6447, #6466) caught user-facing links but missed the central CLI constant, the installers, self-hosted-runner registration, and ~45 shipped plugin metadata URLs. An exhaustive cross-repo audit surfaced them. FUNCTIONAL (would target the old org, working only via GitHub's redirect): - tools/cli/cli_common.cpp — PULP_GITHUB_REPO, the central const feeding every SDK / upgrade / release-fetch URL and fetch_latest_release. Highest leverage. - tools/scripts/install.{sh,ps1} — bootstrap release fetch. - tools/ci/{tart-runner*,qemu-runner-windows,intel-vm-cross-build, bootstrap-macos-host,reap-stray-vms}.sh + tools/launchd/*.plist.template — self-hosted runners register against this repo. - tools/cli/{cmd_macos,cmd_overflow}.cpp kRepo, cmd_upgrade.cpp, upgrade_url.hpp (+ its coupled test test_cli_upgrade_url.cpp), experimental/pulp-rs upgrade/ install defaults, tools/local-ci + coordination/health-check. - packages/pulp-{react,web-player}/package.json repository.url. Shipped metadata + catalog: ~45 examples/**/vst3_entry.cpp + moduleinfo.json vendor URLs, ara_factory / plugin_slot_clap host URLs, CMakeLists HOMEPAGE_URL, mkdocs.yml, .claude-plugin/{plugin,marketplace}.json, ISSUE_TEMPLATE/config.yml, templates/plugin/README.md.in. SECURITY FIX (not a mechanical swap): core/format/.../pack_signing_ui.hpp github_backup_repo_allowed() is a DENY-LIST that refuses to publish a signing key into the core repo. It blocked only "danielraffel/pulp". A blind swap would stop blocking the old (still-redirecting) name and only block the new one — a hole. Fixed to block BOTH core-repo names, with the coupled test (test_pack_signing_ui.cpp) extended to every URL form of Generous-Corp/pulp. Verified: pack-signing 36 assertions pass, upgrade-url 22 pass. Deliberately LEFT (verified, not missed): - versioning.schema.json $id — a stable identifier some validators key on; changing it can break id-based resolution. Same call for Shipyard's twin. - compat.json issue links, sdk_cache_paths.hpp + project_bump.hpp comment examples — historical/illustrative provenance; GitHub redirects resolve them. - danielraffel/pulp-packages registry URL and all danielraffel/pulp-* repos — verified by ls-remote they did NOT move. - FetchContent/pin test fixtures (test_cli_project_bump.cpp, pulp-rs #[test] bodies) — self-consistent parser inputs; the org name is incidental. - The two demo files in #6466 (owned by that PR). Version-Bump: skip reason="org-ref sweep + a security-guard hardening; no versioned runtime surface change" Skill-Update: skip skill=ara reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=ci reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=cli-maintenance reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=hosting reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=moonbase reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=tart-ci reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=upgrade reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=web-plugins reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=webview-ui reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change"
danielraffel
added a commit
that referenced
this pull request
Jul 23, 2026
…rp/pulp The org migration was substantially incomplete inside the repo itself — the earlier sweeps (#6447, #6466) caught user-facing links but missed the central CLI constant, the installers, self-hosted-runner registration, and ~45 shipped plugin metadata URLs. An exhaustive cross-repo audit surfaced them. FUNCTIONAL (would target the old org, working only via GitHub's redirect): - tools/cli/cli_common.cpp — PULP_GITHUB_REPO, the central const feeding every SDK / upgrade / release-fetch URL and fetch_latest_release. Highest leverage. - tools/scripts/install.{sh,ps1} — bootstrap release fetch. - tools/ci/{tart-runner*,qemu-runner-windows,intel-vm-cross-build, bootstrap-macos-host,reap-stray-vms}.sh + tools/launchd/*.plist.template — self-hosted runners register against this repo. - tools/cli/{cmd_macos,cmd_overflow}.cpp kRepo, cmd_upgrade.cpp, upgrade_url.hpp (+ its coupled test test_cli_upgrade_url.cpp), experimental/pulp-rs upgrade/ install defaults, tools/local-ci + coordination/health-check. - packages/pulp-{react,web-player}/package.json repository.url. Shipped metadata + catalog: ~45 examples/**/vst3_entry.cpp + moduleinfo.json vendor URLs, ara_factory / plugin_slot_clap host URLs, CMakeLists HOMEPAGE_URL, mkdocs.yml, .claude-plugin/{plugin,marketplace}.json, ISSUE_TEMPLATE/config.yml, templates/plugin/README.md.in. SECURITY FIX (not a mechanical swap): core/format/.../pack_signing_ui.hpp github_backup_repo_allowed() is a DENY-LIST that refuses to publish a signing key into the core repo. It blocked only "danielraffel/pulp". A blind swap would stop blocking the old (still-redirecting) name and only block the new one — a hole. Fixed to block BOTH core-repo names, with the coupled test (test_pack_signing_ui.cpp) extended to every URL form of Generous-Corp/pulp. Verified: pack-signing 36 assertions pass, upgrade-url 22 pass. Deliberately LEFT (verified, not missed): - versioning.schema.json $id — a stable identifier some validators key on; changing it can break id-based resolution. Same call for Shipyard's twin. - compat.json issue links, sdk_cache_paths.hpp + project_bump.hpp comment examples — historical/illustrative provenance; GitHub redirects resolve them. - danielraffel/pulp-packages registry URL and all danielraffel/pulp-* repos — verified by ls-remote they did NOT move. - FetchContent/pin test fixtures (test_cli_project_bump.cpp, pulp-rs #[test] bodies) — self-consistent parser inputs; the org name is incidental. - The two demo files in #6466 (owned by that PR). Version-Bump: skip reason="org-ref sweep + a security-guard hardening; no versioned runtime surface change" Skill-Update: skip skill=ara reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=ci reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=cli-maintenance reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=hosting reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=moonbase reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=tart-ci reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=upgrade reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=web-plugins reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=webview-ui reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change"
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Four links still named the pre-migration org in places a person actually reads:
.agents/skills/pulp-web-demo/templates/wclap.index.html.tmpltools/figma-plugin/src/ui.htmltools/scripts/coverage_diff_comment.pytools/packages/tool-registry.jsonupstream_urlGitHub redirects transferred repositories, so none of these were broken — they just told the reader the wrong home.
Deliberately NOT swept
The same grep matches ~400 more references. Rewriting them all would be wrong:
tools/local-ci/test_*fixtures. Self-consistent test data — the assertion and the string it asserts move together or not at all. Rewriting changes nothing a user sees and risks desynchronising code from test.runtime_evidenceURLs underscene3d, and issue links incompat.json. These cite specific historical issue comments as provenance. The redirect resolves them, and rewriting a citation to a URL that did not exist when the evidence was recorded would misstate where that evidence came from.Scope is "links a human reads", not "every string matching the old org".
Bypass trailers
Two
Skill-Update: skiptrailers (pulp-web-demo,packages). Both edits are a URL host swap inside a template / registry value — there is no behaviour, workflow, or gotcha to document, and manufacturing skill content to satisfy a gate is worse than using the sanctioned bypass with a stated reason.tools/scripts/gates.sh origin/maingreen.🔎 Provenance
claudem3/Volumes/Workshop/Code/pulp-mq1dd2217d-ca26-4de4-b90e-6360ee343606Resume
Jump to this tab
Relaunch (any agent)
Restore URL — https://claude.ai/code/session_01363VPyLiV9Er9DJ1pcmC9c
stamped 2026-07-22 01:05 UTC