carson 2.15.0 → 2.15.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e14a15b6d3d91c0bbf75d0b3652a65ee7339b2c2cdeb56cd0937efe94f90c584
-  data.tar.gz: 1b08caaaf7a4e453ce55256eca2c961b09ffaaae761a6be101e10e3ab0f61397
+  metadata.gz: d3142430a752f707dc361e222db4581ad007baf32da8e041fc2f4c83475fe26a
+  data.tar.gz: aaefa0ac48072fa8ef9427b79617dac2f82492828b596bb8f9755c2c71c093f7
 SHA512:
-  metadata.gz: d594bcef84c8aa142438ef8b625c71f38366bb19e4a7a8abc48b415b882946b93845d226cac1eecc08a316b94677b8bcdf02edcdb9eac70a55f1f85fd800922b
-  data.tar.gz: 02ea0cc8507330c1dbb8e7e1b6a1f8e4f3a88f0d9aa396b296251cbd70fe916f4fcdb7b564301427d6911052376071f35098e34021c19cb6c28e7d05c84a0f79
+  metadata.gz: 8ccd8f2cf691b6d44bd6435d49db141cf01ee4dbf93f1c8b7c37b63ac82ce923ef72c10455118628d2431fa312a344530822bc2d5e4aaecdc89b3487ec34e26e
+  data.tar.gz: a24f069a42dfb80d938aef2e1cb2e397180d59b52b658d80cb47824d26151b06d62dc6904b95e004d3a9440bacb0c9f76a162cea78d406335ae9e5b874bca4e1

data/API.md

@@ -56,6 +56,7 @@ carson <command> [subcommand] [arguments]
 |---|---|
 | `carson version` | Print installed Carson version. |
 | `carson inspect` | Verify Carson-managed hook installation and repository setup. |
+| `carson check` | Report required CI check status for the current branch's open PR. Exits 0 for passing or pending; exits 2 for failing. Never exits 8. |
 
 ## Exit status contract
 
@@ -118,7 +119,7 @@ Environment overrides:
     },
     "check_wait": 30,
     "merge": {
-      "authority": false,
+      "authority": true,
       "method": "squash"
     }
   }
@@ -130,7 +131,7 @@ Environment overrides:
 - `agent.provider`: `"auto"`, `"codex"`, or `"claude"`.
 - `agent.codex` / `agent.claude`: provider-specific options (reserved).
 - `check_wait`: seconds to wait for CI checks before classifying (default: `30`).
-- `merge.authority`: `false` (default) — Carson does not merge until explicitly enabled.
+- `merge.authority`: `true` (default) — Carson may merge autonomously. Set to `false` to require explicit enablement.
 - `merge.method`: `"squash"` (default), `"merge"`, or `"rebase"`.
 
 `lint` schema:

data/RELEASE.md

@@ -5,6 +5,46 @@ Release-note scope rule:
 - `RELEASE.md` records only version deltas, breaking changes, and migration actions.
 - Operational usage guides live in `MANUAL.md` and `API.md`.
 
+## 2.15.1 — Codex Review Fixes
+
+### What changed
+
+- `carson check` now correctly exits 2 for cancelled, errored, or timed-out CI checks. Previously, only `fail`-bucketed checks were treated as failing — all other non-passing states (cancelled, error) fell through to "all passing".
+- Pre-push auto-commit now aborts the in-flight push and prints "Push again to include them." Previously the commit was created locally but not included in the push that triggered it.
+- `--push-prep` now stages and commits untracked managed files. Previously, new managed files introduced by a gem upgrade were silently omitted.
+- `API.md`: `merge.authority` default corrected from `false` to `true` to match the implementation.
+- `API.md`: `carson check` added to the Info commands table.
+- `docs/develop.md`: Architecture rationale updated — `govern.rb` acknowledged as a known exception to the adapter shell-out rule.
+- Test coverage added for `check` bucket classification, `managed_dirty_paths` untracked handling, and CLI dispatch.
+
+### No migration required
+
+No configuration or workflow changes needed.
+
+## 2.15.0 — JIT Auto-Commit on Pre-Push + `carson check`
+
+### What changed
+
+- Pre-push hook now calls `carson template apply --push-prep` automatically. Any uncommitted changes to Carson-managed template files or `.github/linters/` are committed before the push reaches GitHub — no manual `git add` / `git commit` needed after a gem upgrade or `lint policy` run.
+- `--push-prep` flag scopes the behaviour to pre-push only; interactive `carson template apply` is unchanged.
+- `carson check` command added: wraps `gh pr checks --required`, exits 0 for pending or passing and 2 for failing. Useful for callers that need a clean CI status signal without `gh`'s confusing "Error: Exit code 8" for pending runs.
+- CI smoke tests guarded against live audit exit codes with `|| true` so a pending or failing CI run on the default branch does not cause false test failures.
+
+### No migration required
+
+Run `bash install.sh` to pick up the updated pre-push hook in all governed repos.
+
+## 2.14.2 — Docs Enrichment
+
+### What changed
+
+- `docs/design.md` enriched with signal system, output design, prompt principles, and vocabulary guide.
+- `docs/develop.md` enriched with architecture rationale, new-command walkthrough, and testing approach.
+
+### No migration required
+
+Documentation only. No behavioural changes.
+
 ## 2.14.1 — Auto-Refresh on Install
 
 ### What changed

data/VERSION

@@ -1 +1 @@
-2.15.0
+2.15.1

data/lib/carson/runtime/audit.rb

@@ -104,8 +104,8 @@ module Carson
 				end
 
 				checks_data = JSON.parse( checks_stdout )
-				failing = checks_data.select { |e| e[ "bucket" ].to_s == "fail" || e[ "state" ].to_s.upcase == "FAILURE" }
 				pending = checks_data.select { |e| e[ "bucket" ].to_s == "pending" }
+				failing = checks_data.select { |e| check_entry_failing?( entry: e ) }
 				total = checks_data.count
 				# gh exits 8 when required checks are still pending (not a failure).
 				is_pending = !checks_success && checks_exit == 8
@@ -181,8 +181,8 @@ module Carson
 					return report
 				end
 				checks_data = JSON.parse( checks_stdout )
-				failing = checks_data.select { |entry| entry[ "bucket" ].to_s == "fail" || entry[ "state" ].to_s.upcase == "FAILURE" }
 				pending = checks_data.select { |entry| entry[ "bucket" ].to_s == "pending" }
+				failing = checks_data.select { |entry| check_entry_failing?( entry: entry ) }
 				report[ :checks ][ :status ] = checks_success ? "ok" : ( checks_exit == 8 ? "pending" : "attention" )
 				report[ :checks ][ :required_total ] = checks_data.count
 				report[ :checks ][ :failing_count ] = failing.count
@@ -361,6 +361,12 @@ module Carson
 				[ critical, advisory ]
 			end
 
+			# Returns true when a required-check entry is in a non-passing, non-pending state.
+			# Cancelled, errored, timed-out, and any unknown bucket all count as failing.
+			def check_entry_failing?( entry: )
+				!%w[pass pending].include?( entry[ "bucket" ].to_s )
+			end
+
 			# Failing means completed with a non-successful conclusion.
 			def default_branch_check_run_failing?( entry: )
 				status = entry[ "status" ].to_s.strip.downcase

data/lib/carson/runtime/local.rb

@@ -416,7 +416,7 @@ module Carson
 				end
 				return EXIT_ERROR if error_count.positive?
 
-				push_prep_commit! if push_prep
+				return EXIT_BLOCK if push_prep && push_prep_commit!
 				EXIT_OK
 			end
 
@@ -754,7 +754,8 @@ module Carson
 
 				git_system!( "add", *dirty )
 				git_system!( "commit", "-m", "chore: sync Carson managed files" )
-				puts_line "Carson committed managed file updates."
+				puts_line "Carson committed managed file updates. Push again to include them."
+				true
 			end
 
 			def managed_dirty_paths
@@ -767,7 +768,6 @@ module Carson
 
 				stdout_text, = git_capture_soft( "status", "--porcelain", "--", *candidates )
 				stdout_text.to_s.lines
-					.reject { |l| l.start_with?( "??" ) }
 					.map { |l| l[ 3.. ].strip }
 					.reject( &:empty? )
 			end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: carson
 version: !ruby/object:Gem::Version
-  version: 2.15.0
+  version: 2.15.1
 platform: ruby
 authors:
 - Hailei Wang