Import access (history-preserving, merge-commit) - #5
Merged
Conversation
Merge @hasna/access 0.1.1 access request provisioning gate. Local verification passed before publish; PR CI verify passed.
Agent: agent-ea
Agent: agent-ea
andrei-hasna
added a commit
that referenced
this pull request
Aug 13, 2026
This was referenced Aug 15, 2026
andrei-hasna
added a commit
that referenced
this pull request
Aug 17, 2026
…ort v5) The org delta import added apps/orgs/hasna.contract.json (hasna/orgs #5). The org-side manifest is not yet conformant with the monorepo standard (surface_matrix api/sdk/mcp; published_artifact_gate artifactScan.script) and carries no pinned @hasna/contracts dep. Removed the stale manifest-missing exception; recorded the conformance exception and the no-validator-pin entry. Alignment owned by the manifest lane (todos 41208cbe). Agent: aemilianus
andrei-hasna
added a commit
that referenced
this pull request
Aug 17, 2026
## Import org delta — hasna/orgs → apps/orgs (VERIFY-DELTA lane v5) The org repo moved past the import freeze: hasna/orgs gained f95d43c8 "chore(contracts): add hasna.contract.json (#5)" and 0d0937a5 "chore: drop legacy open-orgs bin alias; canonicalize README (#6)" after the freeze content was imported (import merge c6d02c7, freeze 1f86ece). This PR imports the delta via cherry-pick -X subtree=apps/orgs (commits 93ff41e, 77b7f3b). Member subtree now matches org HEAD exactly. - org HEAD: 0d0937a559f28c77c8b9d7c5fac5d88b4e0838b2 - delta: add apps/orgs/hasna.contract.json; drop legacy open-orgs bin alias; canonicalize README open-* naming - member subtree vs org HEAD: identical (0 tracked diffs) - gates: bun run check (names/secrets/manifests/publish-guard) rc=0; member tests pass Agent: aemilianus
andrei-hasna
added a commit
that referenced
this pull request
Aug 17, 2026
Import workforce delta from hasna/workforce (history-preserving, merge-commit) Org hasna/workforce moved past the import freeze (ee3294f5 -> a1bf988, "refactor: drop HASNA_WORKFORCE_STORAGE_MODE, derive backend from DATABASE_URL (#5)"). Imported via the capsule pattern (nested org tree, parent = freeze rewrite 676414a, merge-commit). - Tree gate: merge diff = exactly the 4-file delta (17+/57-). - Gates: bun run check rc=0; bun run test:standard rc=0 (0 fail / 18 tests); secrets scan staged rc=0 findingCount 0. Freeze: ee3294f558faf6e0f3870b205520121b5ab4de36 | Org head: a1bf988a590c5bd4401b92244450bbc8a7279b6c | Capsule: d5d1689 Agent: aemilianus
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Import access from hasna/access (history-preserving, merge-commit)
Task: f6549c35-20b8-433d-b6a8-3b9a86799b60. Mechanism:
import-mechanics-codex.md(approved; reviewers A+B GO). Import via disposable mirror →git-filter-repo --to-subdirectory-filter apps/access --preserve-commit-hashes --preserve-commit-encoding→ same-tree history capsule → one merge-commit PR (merge-commit strategy required — squash/rebase breaks imported-history reachability). No publishes, no repo-settings changes, no deletions.Evidence
PR freeze (checklist 6): 0 open PRs on hasna/access at import time.
Ref inventory (checklist 1): heads=1 (
main), tags=0, annotated tags=0.refs/pull/1/head+refs/pull/2/headpresent in the mirror; 2 pull-only commits (never merged to main) rewritten but excluded from the capsule per mechanism P3 (accepted, recorded). Peel skipped list: none (no non-commit refs).Capsule: 2a73a00, parents=1 (rewritten main 643934e). PARENT_SET_EQUAL GAPS=0 (checklist 3).
Tree/blob gate (checklist 4): rewritten main tree b17e1e88adcfccbfbb27bb0d2018fc8d4e4fe1df. Files: 105/105 (rewritten vs merged subtree). Blob-set: identical except the 4 documented absorption fixes below. 0 gitlink (160000) entries (negative submodule control). Provenance: 6/6 rewritten commits reachable from the import merge commit; oldest commit
a8db396(2026-07-06, Andrei Hasna andrei@hasna.com, message+author+date preserved); Agent: trailers in imported history: 0 (human-authored repo, pre-existing state — no trailers were stripped).git fsck --connectivity-onlyclean (dangling trees only).In-mono absorption gate (checklist 2): bun install rc=0 ·
bun run checkrc=0 (secrets 0 findings / 9,983 added lines) · turbobuild --affectedrc=0 ·test --affectedrc=0 (82 pass / 0 fail) ·lint --affectedrc=0 (no lint script on the member).Absorption fixes (in this PR, smallest per P1b):
apps/access/tsconfig.json—types: ["bun-types"]→["@types/bun"](TS2688 in-mono:bun-typesnot hoisted by bun workspace install).apps/access/package.json— added explicit devDepsbun-types@1.3.14,@types/node@^26.1.2(bun left both transitives unlinked in the workspace store; direct-declaration fix). Rootbun.lockupdated accordingly.apps/access/src/services/secret-boundary.ts— raw-secret regex literals converted to the[-]/[_]bracket form (runtime-identical — verified against the old regex on 14 probe cases — but no longer self-matching the mono's secret scanner).apps/access/test/domain.test.ts— synthetic fixturesecret_refbuilt by concatenation (same runtime value; no contiguous token literal in source).Hygiene (checklist 5): no
.gitattributesLFS rules, no.gitmodules, staged secrets scan 0 findings,git diff --cached --checkclean.Tag→commit manifest (checklist 8):
/tmp/opencode/pilot-access/tag-commit-manifest.md(no tags; heads/tags inventory, peel skips, capsule parents, GAPS=0, original tip 179287c364d59478ede9080417386a37278fb002).Landing requirement
Merge with GitHub's merge-commit strategy only (mechanism doc; squash or rebase breaks reachability of the imported history).
Need help on this PR? Tag
@codesmith-botwith what you need. Autofix is disabled.