carson 2.15.2 → 2.15.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f9e5677b6e4929ae5157a42c54ea9c72134695d7ec117f5173040eb2b37b8f52
-  data.tar.gz: 5184adc9c300945bc2e8f8cb524ce2403d69be2705142dc9134dc42deba979c9
+  metadata.gz: b0c21d5ea31230fc4612636239e9de191266fa2d34b2cce7ea7259ac41f931a2
+  data.tar.gz: 3af15a3d35fa85c7ab0b0af8113f4f7210ad3b95097767c1e8056c6c75b02c56
 SHA512:
-  metadata.gz: fc82d8e07668b795d75c881d213677faedc7de0d4936ee9f4212cb81df441853a6cc049ecf99ea2f2a67907e0328d8be6ca44b0c580dad61a20e503bd285b57f
-  data.tar.gz: 4fa1fd958283661c7206ecec2ed33228fe0d55462c11d05b61be50050499c8bafc2cd716ab32b0081361f382e7de22e929bd347726423a06c9ee1473898a9e48
+  metadata.gz: 4c541901df28b9a174e31fb4e1ce6f2cefda6ec4a8968853cc542cc44490addb6f2b751348c58eb88c9aeb0ac0e010fc4cea5fa8b759c3f6795cb56bc5f6b0f1
+  data.tar.gz: 7d597b6b65469ad0cf969b960ddd01dace459ba463bebc1749e57d1056a3a2651c9186c6ad8f38d5810994513f75207d75eac0ae6d375d22384fc627d6a54b99

data/RELEASE.md

@@ -5,6 +5,17 @@ Release-note scope rule:
 - `RELEASE.md` records only version deltas, breaking changes, and migration actions.
 - Operational usage guides live in `MANUAL.md` and `API.md`.
 
+## 2.15.3 — Initial Commit Guard
+
+### What changed
+
+- `carson audit` and `carson check` now return success in repositories with no commits (HEAD does not exist). Previously, the pre-commit hook called `git rev-parse --abbrev-ref HEAD` which crashed, creating a chicken-and-egg problem that blocked the very first commit.
+- Shell hooks (`prepare-commit-msg`, `pre-merge-commit`) now exit cleanly when HEAD is absent, allowing the initial commit without `--no-verify`.
+
+### No migration required
+
+Run `carson prepare` in existing repositories to refresh hooks. No configuration changes needed.
+
 ## 2.15.2 — Release Guard
 
 ### What changed
@@ -43,7 +54,7 @@ No configuration or workflow changes needed.
 
 ### No migration required
 
-Run `bash install.sh` to pick up the updated pre-push hook in all governed repos.
+Run `carson prepare` in each governed repo to pick up the updated pre-push hook.
 
 ## 2.14.2 — Docs Enrichment
 

data/VERSION

@@ -1 +1 @@
-2.15.2
+2.15.3

data/carson.gemspec

@@ -5,7 +5,7 @@ require_relative "lib/carson/version"
 Gem::Specification.new do |spec|
 	spec.name = "carson"
 	spec.version = Carson::VERSION
-	spec.authors = [ "Hailei Wang" ]
+	spec.authors = [ "Hailei Wang", "Codex", "Claude Code" ]
 	spec.email = [ "wanghailei@users.noreply.github.com" ]
 	spec.summary = "Autonomous repository governance — you write the code, Carson manages everything else."
 	spec.description = "Carson is a governance runtime that lives outside the repositories it governs — no Carson-owned artefacts in your repo. On every commit, managed hooks enforce centralised lint policy and review gates. At portfolio level, carson govern triages every open PR across your registered repositories: merge what's ready, dispatch coding agents to fix what's failing, escalate what needs human judgement. One command, all your projects, unmanned."

data/hooks/pre-merge-commit

@@ -5,6 +5,9 @@ hooks_dir="$(cd "$(dirname "$0")" && pwd)"
 style="$(cat "$hooks_dir/workflow_style" 2>/dev/null || echo "branch")"
 [ "$style" = "trunk" ] && exit 0
 
+# Allow the very first commit in a new repository (HEAD does not exist yet).
+git rev-parse --verify HEAD >/dev/null 2>&1 || exit 0
+
 branch_name="$(git rev-parse --abbrev-ref HEAD)"
 if [[ "$branch_name" == "main" || "$branch_name" == "master" ]]; then
 	echo "Carson policy: direct merge commits on ${branch_name} are blocked. Merge through a pull request." >&2

data/hooks/prepare-commit-msg

@@ -5,6 +5,9 @@ hooks_dir="$(cd "$(dirname "$0")" && pwd)"
 style="$(cat "$hooks_dir/workflow_style" 2>/dev/null || echo "branch")"
 [ "$style" = "trunk" ] && exit 0
 
+# Allow the very first commit in a new repository (HEAD does not exist yet).
+git rev-parse --verify HEAD >/dev/null 2>&1 || exit 0
+
 branch_name="$(git rev-parse --abbrev-ref HEAD)"
 if [[ "$branch_name" == "main" || "$branch_name" == "master" ]]; then
 	echo "Carson policy: direct commits on ${branch_name} are blocked. Work on a feature branch and merge via PR." >&2

data/lib/carson/runtime/audit.rb

@@ -6,6 +6,10 @@ module Carson
 			def audit!
 				fingerprint_status = block_if_outsider_fingerprints!
 				return fingerprint_status unless fingerprint_status.nil?
+				unless head_exists?
+					puts_line "No commits yet — audit skipped for initial commit."
+					return EXIT_OK
+				end
 				audit_state = "ok"
 				audit_concise_problems = []
 				puts_verbose ""
@@ -77,6 +81,10 @@ module Carson
 			# Thin focused command: show required-check status for the current branch's open PR.
 			# Always exits 0 for pending or passing so callers never see a false "Error: Exit code 8".
 			def check!
+				unless head_exists?
+					puts_line "Checks: no commits yet."
+					return EXIT_OK
+				end
 				unless gh_available?
 					puts_line "Checks: gh CLI not available."
 					return EXIT_ERROR

data/lib/carson/runtime.rb

@@ -60,6 +60,12 @@ module Carson
 			@out, @err = saved_out, saved_err
 		end
 
+		# Returns true when the repository has at least one commit (HEAD exists).
+		def head_exists?
+			_, _, success, = git_run( "rev-parse", "--verify", "HEAD" )
+			success
+		end
+
 		# Current local branch name.
 		def current_branch
 			git_capture!( "rev-parse", "--abbrev-ref", "HEAD" ).strip

metadata

@@ -1,10 +1,12 @@
 --- !ruby/object:Gem::Specification
 name: carson
 version: !ruby/object:Gem::Version
-  version: 2.15.2
+  version: 2.15.3
 platform: ruby
 authors:
 - Hailei Wang
+- Codex
+- Claude Code
 bindir: exe
 cert_chain: []
 date: 1980-01-02 00:00:00.000000000 Z