Repository navigation
Releases
Releases · callback-io/git-integration-branch-guard
v0.2.0
Added
- Read branch roles from
.branch-guard.jsonat the repository root, shared by the skill, the command guard hook, and the audit script, with a published JSON Schema. - Package the project as a Claude Code plugin with a marketplace manifest, installable via
/plugin marketplace add callback-io/git-integration-branch-guard. - Add a PreToolUse command guard hook that blocks merge/rebase/pull/reset flows from shared validation branches, branches created from validation branches, push refspecs onto production, and undeclared environment promotions, and asks before cherry-picks of validation-only commits, honoring the configured
deny/ask/warnenforcement level. - Flag commits whose stable patch-id also exists on a shared validation branch under a different hash, catching cherry-picked or rebased copies with rewritten messages; advisory by default, failing with
--strict, skippable with--no-check-patch-id. - Add a composite GitHub Action (
action.yml) that runs the audit on pull requests. - Add
install.sh, which copies the skill into detected agent runtimes (~/.claude,~/.codex,~/.gemini,~/.qwen) without ever touching agent settings or hooks.
Changed
- Move the skill into the standard
skills/git-integration-branch-guard/layout expected by plugin packaging; the audit script now lives atskills/git-integration-branch-guard/scripts/audit-branch-flow.sh. - Match shared validation branch names as whole words, so a name like
devno longer matches words likedeveloper.
Fixed
- Print a notice when a shared validation branch ref cannot be resolved locally instead of silently skipping the merge-graph check, and resolve each ref once per run.
- Keep
git logparsing stable when user configuration enables ref decorations or signature display, and read merge parents through plumbing instead ofgit show.
v0.1.0
First public release.
Git Integration Branch Guard is a portable Agent Skill that keeps shared validation branches (dev / test / uat / staging) one-way: work branches may flow in for validation, but those shared branches must never flow back into work branches or production.
Highlights
- SKILL.md — role-based direction rules, a decision table, and a standard refusal response for agents
- scripts/audit-branch-flow.sh — pre-release contamination audit using literal-text and merge-graph signals (exit codes
0/1/2) - Tests & CI — five-scenario Bash test suite, verified on Linux, macOS (Bash 3.2), and Windows (Git Bash)
- Bilingual docs — English and 简体中文 READMEs