@amg555/frameforge-mcp 2.7.6 → 2.7.7

package/.agent/skills/gstack-gstack-upgrade/migrations/v1.1.3.0.sh

@@ -1,137 +0,0 @@
-#!/usr/bin/env bash
-# Migration: v1.1.3.0 — Remove stale /checkpoint skill installs
-#
-# Claude Code ships /checkpoint as a native alias for /rewind, which was
-# shadowing the gstack checkpoint skill. The skill has been split into
-# /context-save + /context-restore. This migration removes the old on-disk
-# install so Claude Code's native /checkpoint is no longer shadowed.
-#
-# Ownership guard: the script only removes the install IF it owns it —
-# i.e., the directory or its SKILL.md is a symlink resolving inside
-# ~/.claude/skills/gstack/. A user's own /checkpoint skill (regular file,
-# or symlink pointing elsewhere) is preserved.
-#
-# Three supported install shapes to handle:
-#   1. ~/.claude/skills/checkpoint is a directory symlink into gstack.
-#   2. ~/.claude/skills/checkpoint is a regular directory whose ONLY file
-#      is a SKILL.md symlink into gstack (gstack's prefix-install shape).
-#   3. Anything else → leave alone, print notice.
-#
-# Idempotent: missing paths are no-ops.
-set -euo pipefail
-
-# Guard: refuse to run if HOME is unset or empty. With `set -u`, unset HOME
-# errors out, but HOME="" (possible under sudo-without-H, systemd units, some
-# CI runners) survives and produces dangerous absolute paths like
-# "/.claude/skills/...". Abort cleanly.
-if [ -z "${HOME:-}" ]; then
-  echo "  [v1.1.3.0] HOME is unset or empty — skipping migration." >&2
-  exit 0
-fi
-
-SKILLS_DIR="${HOME}/.claude/skills"
-OLD_TOPLEVEL="${SKILLS_DIR}/checkpoint"
-OLD_NAMESPACED="${SKILLS_DIR}/gstack/checkpoint"
-GSTACK_ROOT_REAL=""
-
-# Helper: canonical-path a target (symlink-safe). Prints the resolved path, or
-# empty on failure (broken symlink, ENOENT, ELOOP). Both realpath AND the python3
-# fallback are tried — a single tool failure shouldn't defeat the ownership
-# check. Returns empty string if both fail.
-resolve_real() {
-  local target="$1"
-  local out=""
-  if command -v realpath >/dev/null 2>&1; then
-    out=$(realpath "$target" 2>/dev/null || true)
-  fi
-  if [ -z "$out" ] && command -v python3 >/dev/null 2>&1; then
-    out=$(python3 -c 'import os,sys;print(os.path.realpath(sys.argv[1]))' "$target" 2>/dev/null || true)
-  fi
-  printf '%s' "$out"
-}
-
-# Resolve the canonical path of the gstack skills root. If gstack isn't
-# installed here, there's nothing to migrate.
-if [ -d "${SKILLS_DIR}/gstack" ]; then
-  GSTACK_ROOT_REAL=$(resolve_real "${SKILLS_DIR}/gstack")
-fi
-
-# Helper: does $1 (canonical path) live inside $2 (canonical path)?
-path_inside() {
-  local inner="$1"
-  local outer="$2"
-  [ -n "$inner" ] && [ -n "$outer" ] || return 1
-  case "$inner" in
-    "$outer"|"$outer"/*) return 0;;
-    *) return 1;;
-  esac
-}
-
-removed_any=0
-
-# --- Shape 1: top-level ~/.claude/skills/checkpoint
-if [ -L "$OLD_TOPLEVEL" ]; then
-  # Directory symlink (or file symlink). Canonicalize and check ownership.
-  target_real=$(resolve_real "$OLD_TOPLEVEL")
-  if [ -n "$GSTACK_ROOT_REAL" ] && path_inside "$target_real" "$GSTACK_ROOT_REAL"; then
-    rm -- "$OLD_TOPLEVEL"
-    echo "  [v1.1.3.0] Removed stale /checkpoint symlink (was shadowing Claude Code's /rewind alias)."
-    removed_any=1
-  else
-    echo "  [v1.1.3.0] Leaving $OLD_TOPLEVEL alone — symlink target is outside gstack (or unresolvable)."
-  fi
-elif [ -d "$OLD_TOPLEVEL" ]; then
-  # Regular directory. Only remove if it contains exactly one file named
-  # SKILL.md that's a symlink into gstack (gstack's prefix-install shape).
-  # Use find to count real files, ignoring .DS_Store (macOS sidecars).
-  file_count=$(find "$OLD_TOPLEVEL" -maxdepth 1 -type f -not -name '.DS_Store' -not -name '._*' 2>/dev/null | wc -l | tr -d ' ')
-  symlink_count=$(find "$OLD_TOPLEVEL" -maxdepth 1 -type l 2>/dev/null | wc -l | tr -d ' ')
-  if [ "$file_count" = "0" ] && [ "$symlink_count" = "1" ] && [ -L "$OLD_TOPLEVEL/SKILL.md" ]; then
-    target_real=$(resolve_real "$OLD_TOPLEVEL/SKILL.md")
-    if [ -n "$GSTACK_ROOT_REAL" ] && path_inside "$target_real" "$GSTACK_ROOT_REAL"; then
-      # Strip macOS sidecars first (not user content), then remove the dir.
-      find "$OLD_TOPLEVEL" -maxdepth 1 \( -name '.DS_Store' -o -name '._*' \) -type f -delete 2>/dev/null || true
-      rm -r -- "$OLD_TOPLEVEL"
-      echo "  [v1.1.3.0] Removed stale /checkpoint install directory (gstack prefix-mode)."
-      removed_any=1
-    else
-      echo "  [v1.1.3.0] Leaving $OLD_TOPLEVEL alone — SKILL.md symlink target is outside gstack."
-    fi
-  else
-    echo "  [v1.1.3.0] Leaving $OLD_TOPLEVEL alone — not a gstack-owned install (has custom content)."
-  fi
-fi
-# Missing → no-op (idempotency).
-
-# --- Shape 2: ~/.claude/skills/gstack/checkpoint/
-# Ownership guard applies here too: only remove if this path resolves inside the
-# gstack skills root. If a user replaced the directory with a symlink pointing
-# elsewhere (e.g., at their own fork), respect it.
-if [ -L "$OLD_NAMESPACED" ]; then
-  target_real=$(resolve_real "$OLD_NAMESPACED")
-  if [ -n "$GSTACK_ROOT_REAL" ] && path_inside "$target_real" "$GSTACK_ROOT_REAL"; then
-    rm -- "$OLD_NAMESPACED"
-    echo "  [v1.1.3.0] Removed stale ~/.claude/skills/gstack/checkpoint symlink."
-    removed_any=1
-  else
-    echo "  [v1.1.3.0] Leaving $OLD_NAMESPACED alone — symlink target is outside gstack."
-  fi
-elif [ -d "$OLD_NAMESPACED" ]; then
-  # Regular directory. This is the gstack-prefix install location. Check that
-  # it resolves to a path inside the gstack root (it should, unless someone
-  # hand-edited the tree).
-  target_real=$(resolve_real "$OLD_NAMESPACED")
-  if [ -n "$GSTACK_ROOT_REAL" ] && path_inside "$target_real" "$GSTACK_ROOT_REAL"; then
-    rm -rf -- "$OLD_NAMESPACED"
-    echo "  [v1.1.3.0] Removed stale ~/.claude/skills/gstack/checkpoint/ (replaced by context-save + context-restore)."
-    removed_any=1
-  else
-    echo "  [v1.1.3.0] Leaving $OLD_NAMESPACED alone — resolves outside gstack."
-  fi
-fi
-
-if [ "$removed_any" = "1" ]; then
-  echo "  [v1.1.3.0] /checkpoint is now Claude Code's native /rewind alias. Use /context-save to save state and /context-restore to resume."
-fi
-
-exit 0

package/.agent/skills/gstack-gstack-upgrade/migrations/v1.17.0.0.sh

@@ -1,59 +0,0 @@
-#!/usr/bin/env bash
-# Migration: v1.17.0.0 — Wire existing brain-sync repos as gbrain federated sources
-#
-# Pre-1.17.0.0 /setup-gbrain wrote ~/.gstack/consumers.json with a placeholder
-# `status: "pending"` and an empty `ingest_url`, expecting a gbrain HTTP
-# /ingest-repo endpoint that never shipped. This migration runs the real
-# wireup (gbrain sources add + worktree + initial sync) for users who
-# already opted into brain-sync but never got the gbrain side connected.
-#
-# Idempotent: safe to re-run. Skips when:
-#   - User never opted into brain-sync (gbrain_sync_mode = off or unset)
-#   - No ~/.gstack/.git (brain-init never ran)
-#   - The wireup helper is missing on disk (broken install — defensive)
-#
-# Failure mode: invokes the helper WITHOUT --strict, so a missing/old gbrain
-# CLI is a benign skip rather than blocking the rest of /gstack-upgrade.
-set -euo pipefail
-
-if [ -z "${HOME:-}" ]; then
-  echo "  [v1.17.0.0] HOME is unset or empty — skipping migration." >&2
-  exit 0
-fi
-
-SKILLS_DIR="${HOME}/.claude/skills"
-BIN_DIR="${SKILLS_DIR}/gstack/bin"
-CONFIG_BIN="${BIN_DIR}/gstack-config"
-WIREUP_BIN="${BIN_DIR}/gstack-gbrain-source-wireup"
-
-# Skip if user never opted into brain-sync.
-SYNC_MODE=""
-if [ -x "$CONFIG_BIN" ]; then
-  # Trim whitespace defensively: gstack-config can emit trailing newlines,
-  # which would mis-classify "off\n" as a non-empty non-off mode.
-  SYNC_MODE=$("$CONFIG_BIN" get gbrain_sync_mode 2>/dev/null | tr -d '[:space:]' || echo "")
-fi
-if [ "$SYNC_MODE" = "off" ] || [ -z "$SYNC_MODE" ]; then
-  exit 0
-fi
-
-# Skip if no brain-sync git repo exists.
-_gstack_migration_dir="${BASH_SOURCE[0]//\\//}"; _gstack_migration_dir="${_gstack_migration_dir%/*}"
-. "${_gstack_migration_dir}/../../bin/gstack-state-root.sh" 2>/dev/null || { echo "$0: cannot resolve the gstack state root: ${_gstack_migration_dir}/../../bin/gstack-state-root.sh is missing. fix: reinstall with ./setup or /gstack-upgrade (docs/state-root.md)" >&2; exit 1; }
-gstack_state_root_select
-if [ ! -d "$_gstack_sr_root/.git" ]; then
-  exit 0
-fi
-
-# Skip if helper missing (defensive — should always be present post-upgrade).
-if [ ! -x "$WIREUP_BIN" ]; then
-  echo "  [v1.17.0.0] $WIREUP_BIN missing or non-executable — skipping wireup." >&2
-  exit 0
-fi
-
-echo "  [v1.17.0.0] Wiring brain-sync repo into gbrain (federated source + initial sync)..."
-
-# No --strict: missing/old gbrain is a benign skip during a batch upgrade.
-"$WIREUP_BIN" || {
-  echo "  [v1.17.0.0] Wireup exited non-zero — re-run manually with: $WIREUP_BIN" >&2
-}

package/.agent/skills/gstack-gstack-upgrade/migrations/v1.27.0.0.sh

@@ -1,432 +0,0 @@
-#!/usr/bin/env bash
-# Migration: v1.27.0.0 — rename gstack-brain-* → gstack-artifacts-*
-#
-# Phase C of the v1.27.0.0 plan. Hard-rename, no compat shim. Steps:
-#   1. gh_repo_renamed       — gh/glab repo rename gstack-brain-$USER →
-#                              gstack-artifacts-$USER (skipped on user opt-out)
-#   2. remote_txt_renamed    — mv ~/.gstack-brain-remote.txt → artifacts-remote.txt
-#   3. config_key_renamed    — rewrite gbrain_sync_mode → artifacts_sync_mode
-#                              in ~/.gstack/config.yaml
-#   4. claude_md_block_rewritten — find-and-replace any existing GBrain
-#                              Configuration block that references "Memory sync"
-#   5. sources_swapped       — gbrain sources add new (verify) → remove old
-#                              (codex Finding #6: add-before-remove ordering)
-#   6. done                  — write touchfile, delete journal
-#
-# Interruption-safe via journal at ~/.gstack/.migrations/v1.27.0.0.journal:
-# each step writes its name on success; re-entry resumes from the next un-done
-# step. Done touchfile at ~/.gstack/.migrations/v1.27.0.0.done.
-#
-# Three host-mode branches per the plan:
-#   Local CLI + GitHub  — all steps run automatically
-#   Local CLI + GitLab  — same with glab repo rename
-#   Remote MCP only     — steps 1-4 still run; step 5 prints commands for
-#                         the brain admin to run on the brain host
-#
-# All steps are idempotent. Re-running after partial completion is safe.
-# Heredoc delivery guard. bash 5.2+ writes a heredoc body <=64KiB through a
-# pipe in the forked child before exec, with no reader on the other end. On
-# macOS under pipe-KVA pressure a fresh pipe gets a 512-byte buffer, so any
-# body >=512B blocks write() forever and the script hangs at startup with no
-# output. Compat level 50 restores the tempfile path. These scripts are
-# bash-3.2-clean, so the compat level costs them nothing. Not exported: the
-# guard is per-script, and it survives `bash script.sh` call sites that
-# bypass the shebang.
-BASH_COMPAT=50
-
-set -euo pipefail
-
-if [ -z "${HOME:-}" ]; then
-  echo "  [v1.27.0.0] HOME is unset — skipping migration." >&2
-  exit 0
-fi
-
-# ---------------------------------------------------------------------------
-# Configuration
-# ---------------------------------------------------------------------------
-_gstack_migration_dir="${BASH_SOURCE[0]//\\//}"; _gstack_migration_dir="${_gstack_migration_dir%/*}"
-. "${_gstack_migration_dir}/../../bin/gstack-state-root.sh" 2>/dev/null || { echo "$0: cannot resolve the gstack state root: ${_gstack_migration_dir}/../../bin/gstack-state-root.sh is missing. fix: reinstall with ./setup or /gstack-upgrade (docs/state-root.md)" >&2; exit 1; }
-gstack_state_root_select; GSTACK_HOME="$_gstack_sr_root"
-SKILLS_DIR="${HOME}/.claude/skills"
-BIN_DIR="${SKILLS_DIR}/gstack/bin"
-CONFIG_BIN="${BIN_DIR}/gstack-config"
-URL_BIN="${BIN_DIR}/gstack-artifacts-url"
-
-MIGRATION_DIR="${GSTACK_HOME}/.migrations"
-JOURNAL="${MIGRATION_DIR}/v1.27.0.0.journal"
-DONE="${MIGRATION_DIR}/v1.27.0.0.done"
-SKIPPED="${MIGRATION_DIR}/v1.27.0.0.skipped-by-user"
-
-# Real, copy-pasteable re-run command for every remediation message below.
-# There is no runner re-ask: the upgrade runners' version windows never
-# re-select an already-passed migration, so the only honest remediation is
-# a direct invocation of this script ($0-derived so it survives any cwd).
-SELF_PATH="$(cd "$(dirname "$0")" && pwd)/$(basename "$0")"
-RERUN_CMD="GSTACK_MIGRATE_ASSUME_YES=1 bash ${SELF_PATH}"
-
-USER_NAME="${USER:-$(whoami 2>/dev/null || echo unknown)}"
-OLD_REPO_NAME="gstack-brain-${USER_NAME}"
-NEW_REPO_NAME="gstack-artifacts-${USER_NAME}"
-OLD_REMOTE_TXT="${HOME}/.gstack-brain-remote.txt"
-NEW_REMOTE_TXT="${HOME}/.gstack-artifacts-remote.txt"
-OLD_SOURCE_ID="${OLD_REPO_NAME}"
-NEW_SOURCE_ID="${NEW_REPO_NAME}"
-
-# ---------------------------------------------------------------------------
-# Journal helpers
-# ---------------------------------------------------------------------------
-mkdir -p "$MIGRATION_DIR"
-
-# Already done? exit silently.
-[ -f "$DONE" ] && exit 0
-
-# User opted out previously? exit silently. (To re-run after an opt-out:
-# rm the skipped-by-user marker, then invoke this script directly.)
-[ -f "$SKIPPED" ] && exit 0
-
-journal_done() {
-  # Returns 0 if the named step is recorded as complete in the journal.
-  local step="$1"
-  [ -f "$JOURNAL" ] && grep -q "^${step}$" "$JOURNAL" 2>/dev/null
-}
-
-mark_done() {
-  local step="$1"
-  echo "$step" >> "$JOURNAL"
-}
-
-# The GitHub owner of the brain repo, from the recorded remote URL
-# (https://github.com/<owner>/<repo> or git@github.com:<owner>/<repo>), else
-# the authenticated gh user. `gh repo rename --repo` and `gh repo edit` need
-# the "[HOST/]OWNER/REPO" form; a bare name always fails (#1437).
-repo_owner() {
-  local url="" owner=""
-  for f in "$OLD_REMOTE_TXT" "$NEW_REMOTE_TXT"; do
-    [ -f "$f" ] && url=$(head -1 "$f" 2>/dev/null) && break
-  done
-  owner=$(printf '%s\n' "$url" | sed -n 's#^.*github\.com[:/]\([^/]*\)/.*$#\1#p')
-  [ -z "$owner" ] && owner=$(gh api user --jq .login 2>/dev/null || true)
-  printf '%s' "$owner"
-}
-
-# Point ~/.gstack-artifacts-remote.txt at the renamed repo. Only called once
-# the rename is confirmed: rewriting it earlier pointed the artifacts remote
-# at a repository that did not exist (#1437).
-rewrite_remote_to_new() {
-  [ -f "$NEW_REMOTE_TXT" ] || return 0
-  local url new
-  url=$(head -1 "$NEW_REMOTE_TXT" 2>/dev/null)
-  new=$(echo "$url" | sed "s|/${OLD_REPO_NAME}|/${NEW_REPO_NAME}|; s|:${OLD_REPO_NAME}|:${NEW_REPO_NAME}|")
-  [ "$new" = "$url" ] && return 0
-  echo "$new" > "$NEW_REMOTE_TXT"
-  chmod 600 "$NEW_REMOTE_TXT"
-  echo "    remote URL rewritten: $url → $new" >&2
-}
-
-# ---------------------------------------------------------------------------
-# Detect environment + ask once if there's anything to migrate
-# ---------------------------------------------------------------------------
-
-# Has the user ever opted into brain sync? Two signals:
-#   - presence of ~/.gstack-brain-remote.txt (legacy file)
-#   - presence of ~/.gstack/.git (brain-init ever ran)
-HAS_LEGACY_STATE=0
-[ -f "$OLD_REMOTE_TXT" ] && HAS_LEGACY_STATE=1
-[ -d "$GSTACK_HOME/.git" ] && HAS_LEGACY_STATE=1
-# A journal means an earlier run left a step pending (step 2 already moved the
-# remote file), so the retry must run instead of declaring nothing to do.
-[ -f "$JOURNAL" ] && HAS_LEGACY_STATE=1
-
-# If nothing to migrate, finalize silently.
-if [ "$HAS_LEGACY_STATE" = "0" ]; then
-  echo "  [v1.27.0.0] no legacy gstack-brain state detected — nothing to migrate." >&2
-  touch "$DONE"
-  rm -f "$JOURNAL" 2>/dev/null || true
-  exit 0
-fi
-
-# Ask once (idempotent: if journal exists from a prior partial run, skip ask).
-if [ ! -f "$JOURNAL" ]; then
-  cat >&2 <<EOF
-
-  [v1.27.0.0] gstack-brain has been renamed to gstack-artifacts.
-  This is a clearer name for what it actually holds: CEO plans, designs,
-  /investigate reports, retros (i.e. artifacts, not behavioral memory).
-
-  This migration will:
-    1. Rename your private GitHub/GitLab repo "$OLD_REPO_NAME" → "$NEW_REPO_NAME"
-    2. mv ~/.gstack-brain-remote.txt → ~/.gstack-artifacts-remote.txt
-    3. Rename gbrain_sync_mode → artifacts_sync_mode in ~/.gstack/config.yaml
-    4. Update any "## GBrain Configuration" block in CLAUDE.md
-    5. Update gbrain federated source registration (local CLI mode)
-       OR print commands for your brain admin (remote MCP mode)
-
-  Each step is journaled so a Ctrl-C mid-flight is safe to re-run.
-
-EOF
-  if [ -t 0 ]; then
-    printf "  Proceed? [Y/n/skip-for-now]: " >&2
-    read -r REPLY || REPLY=""
-    case "$REPLY" in
-      n|N|no|No|NO)
-        echo "  Skipping migration. To re-run later:" >&2
-        echo "    rm ${SKIPPED} && ${RERUN_CMD}" >&2
-        touch "$SKIPPED"
-        exit 0
-        ;;
-      skip|skip-for-now|s)
-        echo "  Skipping for now. Re-run manually with: ${RERUN_CMD}" >&2
-        # Don't write SKIPPED — leave both old + new state untouched. The
-        # upgrade runner will NOT re-select this migration, so re-running is
-        # manual via the command above.
-        exit 0
-        ;;
-    esac
-  else
-    # Non-interactive (CI, Claude Code Bash tool, scripted upgrade). Step 1
-    # renames a REMOTE repo — consent-shaped, and blanket auto-proceed once
-    # left an install half-migrated when that step failed mid-run (#1383).
-    # Skip for now by default (asked again next upgrade); explicit opt-in
-    # proceeds unattended.
-    if [ "${GSTACK_MIGRATE_ASSUME_YES:-0}" = "1" ]; then
-      echo "  (non-interactive: proceeding — GSTACK_MIGRATE_ASSUME_YES=1)" >&2
-    else
-      echo "  Non-interactive session: skipping for now." >&2
-      echo "  Re-run manually with: ${RERUN_CMD}" >&2
-      echo "  To run interactively:  bash ${SELF_PATH}" >&2
-      exit 0
-    fi
-  fi
-fi
-
-# ---------------------------------------------------------------------------
-# Detect host (gh / glab / manual) for steps 1 + 5
-# ---------------------------------------------------------------------------
-detect_host() {
-  # Read the canonical-form remote URL (the legacy file in the migration window).
-  local url=""
-  if [ -f "$OLD_REMOTE_TXT" ]; then
-    url=$(head -1 "$OLD_REMOTE_TXT" 2>/dev/null | tr -d '[:space:]' || echo "")
-  elif [ -f "$NEW_REMOTE_TXT" ]; then
-    url=$(head -1 "$NEW_REMOTE_TXT" 2>/dev/null | tr -d '[:space:]' || echo "")
-  fi
-  if echo "$url" | grep -q 'github\.com'; then
-    echo "github"
-  elif echo "$url" | grep -q 'gitlab'; then
-    echo "gitlab"
-  else
-    echo "manual"
-  fi
-}
-
-HOST=$(detect_host)
-
-# ---------------------------------------------------------------------------
-# Detect MCP mode (so step 5 knows whether to execute or print)
-# ---------------------------------------------------------------------------
-detect_mcp_mode() {
-  # Cheap probe: ~/.claude.json type field. Defense-in-depth tier 3 only;
-  # the migration script avoids invoking `claude` to keep upgrade fast.
-  if command -v jq >/dev/null 2>&1 && [ -f "$HOME/.claude.json" ]; then
-    local t
-    t=$(jq -r '.mcpServers.gbrain.type // .mcpServers.gbrain.transport // empty' "$HOME/.claude.json" 2>/dev/null)
-    case "$t" in
-      url|http|sse) echo "remote-http"; return ;;
-      stdio) echo "local-stdio"; return ;;
-    esac
-  fi
-  echo "none"
-}
-
-MCP_MODE=$(detect_mcp_mode)
-
-# ---------------------------------------------------------------------------
-# Step 1: gh/glab repo rename
-# ---------------------------------------------------------------------------
-if ! journal_done "gh_repo_renamed"; then
-  echo "  [v1.27.0.0] step 1: rename remote repo $OLD_REPO_NAME → $NEW_REPO_NAME" >&2
-  case "$HOST" in
-    github)
-      if command -v gh >/dev/null 2>&1 && gh auth status >/dev/null 2>&1; then
-        GH_OWNER=$(repo_owner)
-        OLD_QUALIFIED="${GH_OWNER:+$GH_OWNER/}${OLD_REPO_NAME}"
-        NEW_QUALIFIED="${GH_OWNER:+$GH_OWNER/}${NEW_REPO_NAME}"
-        # Idempotent: if new name already exists, treat as success.
-        if gh repo view "$NEW_QUALIFIED" >/dev/null 2>&1; then
-          echo "    repo already named $NEW_REPO_NAME on GitHub — no-op" >&2
-          mark_done "gh_repo_renamed"
-          mark_done "gh_repo_rename_verified"
-          rewrite_remote_to_new
-        else
-          RENAME_ERR=""
-          if RENAME_ERR=$(gh repo rename "$NEW_REPO_NAME" --repo "$OLD_QUALIFIED" --yes 2>&1) \
-              || RENAME_ERR=$(gh repo edit "$OLD_QUALIFIED" --name "$NEW_REPO_NAME" 2>&1); then
-            echo "    renamed $OLD_QUALIFIED → $NEW_REPO_NAME on GitHub" >&2
-            mark_done "gh_repo_renamed"
-            mark_done "gh_repo_rename_verified"
-            rewrite_remote_to_new
-          else
-            echo "    WARNING: gh rename failed for $OLD_QUALIFIED: ${RENAME_ERR:-no output}" >&2
-            echo "    step 1 stays PENDING and will retry on re-run; later steps still run (#1383)" >&2
-            echo "    manual: gh repo rename $NEW_REPO_NAME --repo $OLD_QUALIFIED --yes" >&2
-          fi
-        fi
-      else
-        echo "    gh CLI not available — skipping rename step (manual: gh repo rename ...)" >&2
-        mark_done "gh_repo_renamed"
-      fi
-      ;;
-    gitlab)
-      if command -v glab >/dev/null 2>&1 && glab auth status >/dev/null 2>&1; then
-        if glab repo view "$NEW_REPO_NAME" >/dev/null 2>&1; then
-          echo "    repo already named $NEW_REPO_NAME on GitLab — no-op" >&2
-          mark_done "gh_repo_renamed"
-        else
-          # GitLab CLI doesn't have a direct rename; user has to do it via API.
-          echo "    glab repo rename isn't a single command on GitLab." >&2
-          echo "    Manual: visit your GitLab project Settings → General → Advanced → Rename" >&2
-          echo "    or use: glab api projects/:id -X PUT -f name=$NEW_REPO_NAME -f path=$NEW_REPO_NAME" >&2
-          mark_done "gh_repo_renamed"
-        fi
-      else
-        echo "    glab not available — manual rename required" >&2
-        mark_done "gh_repo_renamed"
-      fi
-      ;;
-    manual|*)
-      echo "    unknown host (not github/gitlab) — manual rename required" >&2
-      mark_done "gh_repo_renamed"
-      ;;
-  esac
-fi
-
-# ---------------------------------------------------------------------------
-# Step 2: rename ~/.gstack-brain-remote.txt → ~/.gstack-artifacts-remote.txt
-# ---------------------------------------------------------------------------
-if ! journal_done "remote_txt_renamed"; then
-  echo "  [v1.27.0.0] step 2: rename ~/.gstack-brain-remote.txt → ~/.gstack-artifacts-remote.txt" >&2
-  if [ -f "$OLD_REMOTE_TXT" ] && [ ! -f "$NEW_REMOTE_TXT" ]; then
-    # Move the file; rewrite the URL inside only when step 1 confirmed the
-    # repository was renamed. Otherwise the old URL is the one that exists.
-    OLD_URL=$(head -1 "$OLD_REMOTE_TXT" 2>/dev/null)
-    echo "$OLD_URL" > "$NEW_REMOTE_TXT"
-    chmod 600 "$NEW_REMOTE_TXT"
-    rm -f "$OLD_REMOTE_TXT"
-    if journal_done "gh_repo_rename_verified"; then
-      echo "    moved remote file" >&2
-      rewrite_remote_to_new
-    else
-      echo "    moved remote file; kept $OLD_URL because the repository was not renamed" >&2
-    fi
-  elif [ -f "$NEW_REMOTE_TXT" ]; then
-    echo "    new file already exists — no-op" >&2
-    rm -f "$OLD_REMOTE_TXT" 2>/dev/null || true
-  else
-    echo "    no $OLD_REMOTE_TXT to migrate — no-op" >&2
-  fi
-  mark_done "remote_txt_renamed"
-fi
-
-# ---------------------------------------------------------------------------
-# Step 3: rename gbrain_sync_mode → artifacts_sync_mode in config.yaml
-# ---------------------------------------------------------------------------
-if ! journal_done "config_key_renamed"; then
-  echo "  [v1.27.0.0] step 3: rename gbrain_sync_mode → artifacts_sync_mode in config.yaml" >&2
-  CFG="$GSTACK_HOME/config.yaml"
-  if [ -f "$CFG" ]; then
-    # Atomic in-place rewrite with a tmpfile.
-    TMP=$(mktemp "${CFG}.v1.27.0.0.XXXXXX")
-    sed -e 's/^gbrain_sync_mode:/artifacts_sync_mode:/' \
-        -e 's/^gbrain_sync_mode_prompted:/artifacts_sync_mode_prompted:/' \
-        "$CFG" > "$TMP" && mv "$TMP" "$CFG"
-    echo "    rewritten in place" >&2
-  else
-    echo "    no $CFG to migrate — no-op" >&2
-  fi
-  mark_done "config_key_renamed"
-fi
-
-# ---------------------------------------------------------------------------
-# Step 4: rewrite CLAUDE.md "## GBrain Configuration" block fields
-# ---------------------------------------------------------------------------
-if ! journal_done "claude_md_block_rewritten"; then
-  echo "  [v1.27.0.0] step 4: rewrite CLAUDE.md GBrain Configuration block fields" >&2
-  # Look in cwd's CLAUDE.md (where /setup-gbrain wrote it) and ~/.gstack/CLAUDE.md
-  # if it exists. We can't know every project's CLAUDE.md; users rerunning
-  # /setup-gbrain in any project will overwrite that block fresh anyway.
-  for CMD in "$PWD/CLAUDE.md" "$GSTACK_HOME/CLAUDE.md"; do
-    [ -f "$CMD" ] || continue
-    if grep -q "## GBrain Configuration" "$CMD"; then
-      TMP=$(mktemp "${CMD}.v1.27.0.0.XXXXXX")
-      sed -e 's/^- Memory sync:/- Artifacts sync:/' "$CMD" > "$TMP" && mv "$TMP" "$CMD"
-      echo "    rewritten field in $CMD" >&2
-    fi
-  done
-  mark_done "claude_md_block_rewritten"
-fi
-
-# ---------------------------------------------------------------------------
-# Step 5: gbrain sources swap (add-new before remove-old per codex Finding #6)
-# ---------------------------------------------------------------------------
-if ! journal_done "sources_swapped"; then
-  echo "  [v1.27.0.0] step 5: gbrain federated source rename" >&2
-  if [ "$MCP_MODE" = "remote-http" ]; then
-    # Print commands for the brain admin; we can't execute them locally.
-    cat >&2 <<EOF
-    Remote MCP detected. The local gbrain CLI can't update the brain's
-    federated source registration. Send this to your brain admin:
-
-      gbrain sources add ${NEW_SOURCE_ID} --path <new-clone-path> --federated
-      # verify the new source is searching as expected, then:
-      gbrain sources remove ${OLD_SOURCE_ID} --yes
-
-    (Add-new before remove-old keeps search uninterrupted.)
-
-EOF
-    mark_done "sources_swapped"
-  elif command -v gbrain >/dev/null 2>&1 && [ -d "$GSTACK_HOME/.git" ]; then
-    # Local CLI mode. Sources point at the worktree path; rename the source
-    # ID add-then-remove. The actual on-disk worktree path stays the same.
-    WORKTREE="${GSTACK_BRAIN_WORKTREE:-$HOME/.gstack-brain-worktree}"
-    if gbrain sources list 2>/dev/null | grep -q "$OLD_SOURCE_ID"; then
-      if gbrain sources add "$NEW_SOURCE_ID" --path "$WORKTREE" --federated 2>/dev/null; then
-        echo "    added $NEW_SOURCE_ID" >&2
-        if gbrain sources remove "$OLD_SOURCE_ID" --yes 2>/dev/null; then
-          echo "    removed $OLD_SOURCE_ID" >&2
-        else
-          echo "    WARNING: failed to remove $OLD_SOURCE_ID; both registered. Run manually:" >&2
-          echo "    gbrain sources remove $OLD_SOURCE_ID --yes" >&2
-        fi
-      else
-        echo "    WARNING: failed to add $NEW_SOURCE_ID. Old source still registered." >&2
-      fi
-    else
-      echo "    no $OLD_SOURCE_ID source registered — no-op" >&2
-    fi
-    mark_done "sources_swapped"
-  else
-    echo "    gbrain CLI not available or no ~/.gstack/.git — skipping" >&2
-    mark_done "sources_swapped"
-  fi
-fi
-
-# ---------------------------------------------------------------------------
-# Step 6: finalize (touchfile + clear journal) — only when EVERY step is
-# journaled. A failed step must leave the migration visibly incomplete and
-# retryable, never silently recorded as done (#1383).
-# ---------------------------------------------------------------------------
-INCOMPLETE=""
-for _step in gh_repo_renamed remote_txt_renamed config_key_renamed claude_md_block_rewritten sources_swapped; do
-  journal_done "$_step" || INCOMPLETE="$INCOMPLETE $_step"
-done
-if [ -n "$INCOMPLETE" ]; then
-  echo "  [v1.27.0.0] migration INCOMPLETE — pending step(s):$INCOMPLETE" >&2
-  echo "  Completed steps are journaled and will be skipped on re-run." >&2
-  echo "  Re-run manually with: ${RERUN_CMD}" >&2
-  exit 1
-fi
-touch "$DONE"
-rm -f "$JOURNAL"
-
-echo "  [v1.27.0.0] migration complete." >&2
-exit 0