carson 2.15.2 → 2.15.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f9e5677b6e4929ae5157a42c54ea9c72134695d7ec117f5173040eb2b37b8f52
-  data.tar.gz: 5184adc9c300945bc2e8f8cb524ce2403d69be2705142dc9134dc42deba979c9
+  metadata.gz: 1aaa71b00dc2ea0269042f7389a9b2d3fda1cf3d91b77832d3555dfd2b25f680
+  data.tar.gz: 657626d6700eb16f8640c753e4b7d1e7dddd37d358bdfa6df5bd1e2dd3400d79
 SHA512:
-  metadata.gz: fc82d8e07668b795d75c881d213677faedc7de0d4936ee9f4212cb81df441853a6cc049ecf99ea2f2a67907e0328d8be6ca44b0c580dad61a20e503bd285b57f
-  data.tar.gz: 4fa1fd958283661c7206ecec2ed33228fe0d55462c11d05b61be50050499c8bafc2cd716ab32b0081361f382e7de22e929bd347726423a06c9ee1473898a9e48
+  metadata.gz: 74e9840537605c3e3a75c5b6ad26eb76f06e9f8d9b2cdf564a5b7034fec10187a02e07b51c653a56351eaa4a3f4e58c99eef20a7f876fb75af854247521f829d
+  data.tar.gz: 2f79700321e7e920695116f9780f6a64fa7259bc147e9d57e85bc472dfd5adc25b0ab48eefd38b9e5c7863423ac1b6d224fa7d6c56c887f9db6c8ca856d03c14

data/RELEASE.md

@@ -5,6 +5,27 @@ Release-note scope rule:
 - `RELEASE.md` records only version deltas, breaking changes, and migration actions.
 - Operational usage guides live in `MANUAL.md` and `API.md`.
 
+## 2.15.4 — Lint Workflow Fix
+
+### What changed
+
+- Removed explicit `LINTER_RULES_PATH: .github/linters` from the Carson Lint workflow template. MegaLinter v8 crashes with `ValueError` when the directory does not exist. The path is already MegaLinter's default — omitting it lets MegaLinter use `.github/linters/` when present and silently skip when absent.
+
+### Migration
+
+Run `carson refresh` in governed repositories to pick up the updated workflow.
+
+## 2.15.3 — Initial Commit Guard
+
+### What changed
+
+- `carson audit` and `carson check` now return success in repositories with no commits (HEAD does not exist). Previously, the pre-commit hook called `git rev-parse --abbrev-ref HEAD` which crashed, creating a chicken-and-egg problem that blocked the very first commit.
+- Shell hooks (`prepare-commit-msg`, `pre-merge-commit`) now exit cleanly when HEAD is absent, allowing the initial commit without `--no-verify`.
+
+### No migration required
+
+Run `carson prepare` in existing repositories to refresh hooks. No configuration changes needed.
+
 ## 2.15.2 — Release Guard
 
 ### What changed
@@ -43,7 +64,7 @@ No configuration or workflow changes needed.
 
 ### No migration required
 
-Run `bash install.sh` to pick up the updated pre-push hook in all governed repos.
+Run `carson prepare` in each governed repo to pick up the updated pre-push hook.
 
 ## 2.14.2 — Docs Enrichment
 

data/VERSION

@@ -1 +1 @@
-2.15.2
+2.15.4

data/carson.gemspec

@@ -5,7 +5,7 @@ require_relative "lib/carson/version"
 Gem::Specification.new do |spec|
 	spec.name = "carson"
 	spec.version = Carson::VERSION
-	spec.authors = [ "Hailei Wang" ]
+	spec.authors = [ "Hailei Wang", "Codex", "Claude Code" ]
 	spec.email = [ "wanghailei@users.noreply.github.com" ]
 	spec.summary = "Autonomous repository governance — you write the code, Carson manages everything else."
 	spec.description = "Carson is a governance runtime that lives outside the repositories it governs — no Carson-owned artefacts in your repo. On every commit, managed hooks enforce centralised lint policy and review gates. At portfolio level, carson govern triages every open PR across your registered repositories: merge what's ready, dispatch coding agents to fix what's failing, escalate what needs human judgement. One command, all your projects, unmanned."

data/hooks/pre-merge-commit

@@ -5,6 +5,9 @@ hooks_dir="$(cd "$(dirname "$0")" && pwd)"
 style="$(cat "$hooks_dir/workflow_style" 2>/dev/null || echo "branch")"
 [ "$style" = "trunk" ] && exit 0
 
+# Allow the very first commit in a new repository (HEAD does not exist yet).
+git rev-parse --verify HEAD >/dev/null 2>&1 || exit 0
+
 branch_name="$(git rev-parse --abbrev-ref HEAD)"
 if [[ "$branch_name" == "main" || "$branch_name" == "master" ]]; then
 	echo "Carson policy: direct merge commits on ${branch_name} are blocked. Merge through a pull request." >&2

data/hooks/prepare-commit-msg

@@ -5,6 +5,9 @@ hooks_dir="$(cd "$(dirname "$0")" && pwd)"
 style="$(cat "$hooks_dir/workflow_style" 2>/dev/null || echo "branch")"
 [ "$style" = "trunk" ] && exit 0
 
+# Allow the very first commit in a new repository (HEAD does not exist yet).
+git rev-parse --verify HEAD >/dev/null 2>&1 || exit 0
+
 branch_name="$(git rev-parse --abbrev-ref HEAD)"
 if [[ "$branch_name" == "main" || "$branch_name" == "master" ]]; then
 	echo "Carson policy: direct commits on ${branch_name} are blocked. Work on a feature branch and merge via PR." >&2

data/lib/carson/runtime/audit.rb

@@ -6,6 +6,10 @@ module Carson
 			def audit!
 				fingerprint_status = block_if_outsider_fingerprints!
 				return fingerprint_status unless fingerprint_status.nil?
+				unless head_exists?
+					puts_line "No commits yet — audit skipped for initial commit."
+					return EXIT_OK
+				end
 				audit_state = "ok"
 				audit_concise_problems = []
 				puts_verbose ""
@@ -77,6 +81,10 @@ module Carson
 			# Thin focused command: show required-check status for the current branch's open PR.
 			# Always exits 0 for pending or passing so callers never see a false "Error: Exit code 8".
 			def check!
+				unless head_exists?
+					puts_line "Checks: no commits yet."
+					return EXIT_OK
+				end
 				unless gh_available?
 					puts_line "Checks: gh CLI not available."
 					return EXIT_ERROR

data/lib/carson/runtime.rb

@@ -60,6 +60,12 @@ module Carson
 			@out, @err = saved_out, saved_err
 		end
 
+		# Returns true when the repository has at least one commit (HEAD exists).
+		def head_exists?
+			_, _, success, = git_run( "rev-parse", "--verify", "HEAD" )
+			success
+		end
+
 		# Current local branch name.
 		def current_branch
 			git_capture!( "rev-parse", "--abbrev-ref", "HEAD" ).strip

data/templates/.github/workflows/carson-lint.yml

@@ -20,4 +20,3 @@ jobs:
         env:
           VALIDATE_ALL_CODEBASE: false
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          LINTER_RULES_PATH: .github/linters

metadata

@@ -1,10 +1,12 @@
 --- !ruby/object:Gem::Specification
 name: carson
 version: !ruby/object:Gem::Version
-  version: 2.15.2
+  version: 2.15.4
 platform: ruby
 authors:
 - Hailei Wang
+- Codex
+- Claude Code
 bindir: exe
 cert_chain: []
 date: 1980-01-02 00:00:00.000000000 Z