chore: point demo source links at Generous-Corp/pulp#6466
Merged
Conversation
The org migration's demo-sweep item, finishing what the template-only sweep (#6447) missed. Two demo files still linked a viewer at the pre-migration org: - cloudflare/assemble-gallery.mjs — the SuperConvolver demo's "source" link (github.com/danielraffel/pulp/tree/main/examples/super-convolver) - realtime-spike/wclap-worklet.js — an embedded source URL Swept ONLY danielraffel/pulp, the repo that actually moved. Verified by SSH ls-remote and deliberately LEFT: - danielraffel/pulp-example-plugins and danielraffel/pulp-classic-effects (assemble-gallery.mjs L69-70, CMakeLists.txt L84/L86) — those repos have no Generous-Corp counterpart; they still live under danielraffel. GitHub redirects made none of these broken, only mislabeled to a reader. Version-Bump: skip reason="demo source-link text only; no versioned runtime surface" Skill-Update: skip skill=screenshot-sync reason="demo source-link URL text only; no behaviour or workflow change"
danielraffel
added a commit
that referenced
this pull request
Jul 22, 2026
…rp/pulp The org migration was substantially incomplete inside the repo itself — the earlier sweeps (#6447, #6466) caught user-facing links but missed the central CLI constant, the installers, self-hosted-runner registration, and ~45 shipped plugin metadata URLs. An exhaustive cross-repo audit surfaced them. FUNCTIONAL (would target the old org, working only via GitHub's redirect): - tools/cli/cli_common.cpp — PULP_GITHUB_REPO, the central const feeding every SDK / upgrade / release-fetch URL and fetch_latest_release. Highest leverage. - tools/scripts/install.{sh,ps1} — bootstrap release fetch. - tools/ci/{tart-runner*,qemu-runner-windows,intel-vm-cross-build, bootstrap-macos-host,reap-stray-vms}.sh + tools/launchd/*.plist.template — self-hosted runners register against this repo. - tools/cli/{cmd_macos,cmd_overflow}.cpp kRepo, cmd_upgrade.cpp, upgrade_url.hpp (+ its coupled test test_cli_upgrade_url.cpp), experimental/pulp-rs upgrade/ install defaults, tools/local-ci + coordination/health-check. - packages/pulp-{react,web-player}/package.json repository.url. Shipped metadata + catalog: ~45 examples/**/vst3_entry.cpp + moduleinfo.json vendor URLs, ara_factory / plugin_slot_clap host URLs, CMakeLists HOMEPAGE_URL, mkdocs.yml, .claude-plugin/{plugin,marketplace}.json, ISSUE_TEMPLATE/config.yml, templates/plugin/README.md.in. SECURITY FIX (not a mechanical swap): core/format/.../pack_signing_ui.hpp github_backup_repo_allowed() is a DENY-LIST that refuses to publish a signing key into the core repo. It blocked only "danielraffel/pulp". A blind swap would stop blocking the old (still-redirecting) name and only block the new one — a hole. Fixed to block BOTH core-repo names, with the coupled test (test_pack_signing_ui.cpp) extended to every URL form of Generous-Corp/pulp. Verified: pack-signing 36 assertions pass, upgrade-url 22 pass. Deliberately LEFT (verified, not missed): - versioning.schema.json $id — a stable identifier some validators key on; changing it can break id-based resolution. Same call for Shipyard's twin. - compat.json issue links, sdk_cache_paths.hpp + project_bump.hpp comment examples — historical/illustrative provenance; GitHub redirects resolve them. - danielraffel/pulp-packages registry URL and all danielraffel/pulp-* repos — verified by ls-remote they did NOT move. - FetchContent/pin test fixtures (test_cli_project_bump.cpp, pulp-rs #[test] bodies) — self-consistent parser inputs; the org name is incidental. - The two demo files in #6466 (owned by that PR). Version-Bump: skip reason="org-ref sweep + a security-guard hardening; no versioned runtime surface change" Skill-Update: skip skill=ara reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=ci reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=cli-maintenance reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=hosting reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=moonbase reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=tart-ci reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=upgrade reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=web-plugins reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=webview-ui reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change"
danielraffel
added a commit
that referenced
this pull request
Jul 23, 2026
…rp/pulp The org migration was substantially incomplete inside the repo itself — the earlier sweeps (#6447, #6466) caught user-facing links but missed the central CLI constant, the installers, self-hosted-runner registration, and ~45 shipped plugin metadata URLs. An exhaustive cross-repo audit surfaced them. FUNCTIONAL (would target the old org, working only via GitHub's redirect): - tools/cli/cli_common.cpp — PULP_GITHUB_REPO, the central const feeding every SDK / upgrade / release-fetch URL and fetch_latest_release. Highest leverage. - tools/scripts/install.{sh,ps1} — bootstrap release fetch. - tools/ci/{tart-runner*,qemu-runner-windows,intel-vm-cross-build, bootstrap-macos-host,reap-stray-vms}.sh + tools/launchd/*.plist.template — self-hosted runners register against this repo. - tools/cli/{cmd_macos,cmd_overflow}.cpp kRepo, cmd_upgrade.cpp, upgrade_url.hpp (+ its coupled test test_cli_upgrade_url.cpp), experimental/pulp-rs upgrade/ install defaults, tools/local-ci + coordination/health-check. - packages/pulp-{react,web-player}/package.json repository.url. Shipped metadata + catalog: ~45 examples/**/vst3_entry.cpp + moduleinfo.json vendor URLs, ara_factory / plugin_slot_clap host URLs, CMakeLists HOMEPAGE_URL, mkdocs.yml, .claude-plugin/{plugin,marketplace}.json, ISSUE_TEMPLATE/config.yml, templates/plugin/README.md.in. SECURITY FIX (not a mechanical swap): core/format/.../pack_signing_ui.hpp github_backup_repo_allowed() is a DENY-LIST that refuses to publish a signing key into the core repo. It blocked only "danielraffel/pulp". A blind swap would stop blocking the old (still-redirecting) name and only block the new one — a hole. Fixed to block BOTH core-repo names, with the coupled test (test_pack_signing_ui.cpp) extended to every URL form of Generous-Corp/pulp. Verified: pack-signing 36 assertions pass, upgrade-url 22 pass. Deliberately LEFT (verified, not missed): - versioning.schema.json $id — a stable identifier some validators key on; changing it can break id-based resolution. Same call for Shipyard's twin. - compat.json issue links, sdk_cache_paths.hpp + project_bump.hpp comment examples — historical/illustrative provenance; GitHub redirects resolve them. - danielraffel/pulp-packages registry URL and all danielraffel/pulp-* repos — verified by ls-remote they did NOT move. - FetchContent/pin test fixtures (test_cli_project_bump.cpp, pulp-rs #[test] bodies) — self-consistent parser inputs; the org name is incidental. - The two demo files in #6466 (owned by that PR). Version-Bump: skip reason="org-ref sweep + a security-guard hardening; no versioned runtime surface change" Skill-Update: skip skill=ara reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=ci reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=cli-maintenance reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=hosting reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=moonbase reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=tart-ci reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=upgrade reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=web-plugins reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=webview-ui reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change"
danielraffel
added a commit
that referenced
this pull request
Jul 23, 2026
…rp/pulp The org migration was substantially incomplete inside the repo itself — the earlier sweeps (#6447, #6466) caught user-facing links but missed the central CLI constant, the installers, self-hosted-runner registration, and ~45 shipped plugin metadata URLs. An exhaustive cross-repo audit surfaced them. FUNCTIONAL (would target the old org, working only via GitHub's redirect): - tools/cli/cli_common.cpp — PULP_GITHUB_REPO, the central const feeding every SDK / upgrade / release-fetch URL and fetch_latest_release. Highest leverage. - tools/scripts/install.{sh,ps1} — bootstrap release fetch. - tools/ci/{tart-runner*,qemu-runner-windows,intel-vm-cross-build, bootstrap-macos-host,reap-stray-vms}.sh + tools/launchd/*.plist.template — self-hosted runners register against this repo. - tools/cli/{cmd_macos,cmd_overflow}.cpp kRepo, cmd_upgrade.cpp, upgrade_url.hpp (+ its coupled test test_cli_upgrade_url.cpp), experimental/pulp-rs upgrade/ install defaults, tools/local-ci + coordination/health-check. - packages/pulp-{react,web-player}/package.json repository.url. Shipped metadata + catalog: ~45 examples/**/vst3_entry.cpp + moduleinfo.json vendor URLs, ara_factory / plugin_slot_clap host URLs, CMakeLists HOMEPAGE_URL, mkdocs.yml, .claude-plugin/{plugin,marketplace}.json, ISSUE_TEMPLATE/config.yml, templates/plugin/README.md.in. SECURITY FIX (not a mechanical swap): core/format/.../pack_signing_ui.hpp github_backup_repo_allowed() is a DENY-LIST that refuses to publish a signing key into the core repo. It blocked only "danielraffel/pulp". A blind swap would stop blocking the old (still-redirecting) name and only block the new one — a hole. Fixed to block BOTH core-repo names, with the coupled test (test_pack_signing_ui.cpp) extended to every URL form of Generous-Corp/pulp. Verified: pack-signing 36 assertions pass, upgrade-url 22 pass. Deliberately LEFT (verified, not missed): - versioning.schema.json $id — a stable identifier some validators key on; changing it can break id-based resolution. Same call for Shipyard's twin. - compat.json issue links, sdk_cache_paths.hpp + project_bump.hpp comment examples — historical/illustrative provenance; GitHub redirects resolve them. - danielraffel/pulp-packages registry URL and all danielraffel/pulp-* repos — verified by ls-remote they did NOT move. - FetchContent/pin test fixtures (test_cli_project_bump.cpp, pulp-rs #[test] bodies) — self-consistent parser inputs; the org name is incidental. - The two demo files in #6466 (owned by that PR). Version-Bump: skip reason="org-ref sweep + a security-guard hardening; no versioned runtime surface change" Skill-Update: skip skill=ara reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=ci reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=cli-maintenance reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=hosting reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=moonbase reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=tart-ci reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=upgrade reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=web-plugins reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change" Skill-Update: skip skill=webview-ui reason="mechanical danielraffel/pulp->Generous-Corp/pulp URL swap; no behaviour or workflow change"
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Finishes the org migration's demo-sweep item — the one the template-only sweep (#6447) missed.
Two demo files still linked a viewer at the pre-migration org:
cloudflare/assemble-gallery.mjs— the SuperConvolver demo's "source" link (.../danielraffel/pulp/tree/main/examples/super-convolver)realtime-spike/wclap-worklet.js— an embedded source URLScope discipline
Swept only
danielraffel/pulp(the repo that moved). Verified by SSHls-remoteand deliberately left:danielraffel/pulp-example-pluginsanddanielraffel/pulp-classic-effects(assemble-gallery.mjsL69–70,CMakeLists.txtL84/L86) — those repos have noGenerous-Corpcounterpart; they still live underdanielraffel.GitHub redirects meant none of these were broken, only mislabeled to a reader.
gates.shgreen.🔎 Provenance
claudem3/Volumes/Workshop/Code/pulp-mq1dd2217d-ca26-4de4-b90e-6360ee343606Resume
Jump to this tab
Relaunch (any agent)
Restore URL — https://claude.ai/code/session_01363VPyLiV9Er9DJ1pcmC9c
stamped 2026-07-22 12:41 UTC