@dev-loops/core 1.0.0-rc.2 → 1.0.0-rc.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dev-loops/core",
-  "version": "1.0.0-rc.2",
+  "version": "1.0.0-rc.3",
   "type": "module",
   "engines": {
     "node": ">=24"
@@ -21,6 +21,8 @@
     "./debt/shape": "./src/debt/shape.mjs",
     "./debt/signal": "./src/debt/debt-signal.mjs",
     "./github/copilot-helpers": "./src/github/copilot-helpers.mjs",
+    "./github/issue-ops": "./src/github/issue-ops.mjs",
+    "./github/ownership-helpers": "./src/github/ownership-helpers.mjs",
     "./github/repo-slug": "./src/github/repo-slug.mjs",
     "./github/review-threads": "./src/github/review-threads.mjs",
     "./loop/async-start-contract": "./src/loop/async-start-contract.mjs",
@@ -68,6 +70,7 @@
     "./projects/move-queue-item": "./src/projects/move-queue-item.mjs",
     "./projects/resolve-project": "./src/projects/resolve-project.mjs",
     "./harness": "./src/harness/index.mjs",
+    "./tracker": "./src/tracker/index.mjs",
     "./loop/worktree-guard": "./src/loop/worktree-guard.mjs",
     "./loop/tracker-first-loop-state": "./src/loop/tracker-first-loop-state.mjs"
   },

package/src/claude/hook-decisions.mjs

@@ -21,6 +21,7 @@ import {
   extractRepoFlagsFromGhPrCreateSegments,
   commandContainsRawExternalWrite,
   extractRepoFlagsFromExternalWriteSegments,
+  commandContainsGitStash,
   TARGET_REPO_SLUG,
 } from "../loop/bash-command-classify.mjs";
 
@@ -84,6 +85,19 @@ export function decideBashGate({ command, repoSlug = null, gatePassed = false, g
   if (typeof command !== "string") {
     return ALLOW;
   }
+  // `git stash` writes to `refs/stash`, one ref shared by every worktree over this repo's single
+  // `.git` directory — a stash from one worktree can pop into another's. Block it outright on the
+  // target repo; see skills/docs/worktree-guidance.md#never-git-stash-in-a-shared-git-layout for the
+  // stash-free alternative (git diff / a patch file / a scratch checkout).
+  if (commandContainsGitStash(command) && (repoSlug ?? "").toLowerCase() === TARGET_REPO_SLUG.toLowerCase()) {
+    return {
+      decision: "deny",
+      reason:
+        "git stash blocked: refs/stash is shared across every worktree over this repo's one .git directory, " +
+        "so a stash can pop into a different worktree. Use `git diff` (or `git diff --staged`), save changes " +
+        "to a patch file, or use a separate scratch worktree instead of stashing.",
+    };
+  }
   // Subagent-scoped external-write guard: block ad-hoc `gh issue create`/`gh issue comment`/
   // `gh issue edit`/`gh pr comment` on the target repo from a subagent, so external writes flow through the
   // sanctioned node wrappers. The main-agent/operator path (agentType null) is unaffected (#1051).