@goodtek/vibeops 3.3.1 → 3.4.0

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to VibeOps are documented here.
 
 ## Unreleased
 
+## 3.4.0 - 2026-11-07
+
+### Added
+
+- **`.vibeops.json` `git.commitTrailers`**: git trailers (e.g. `Co-Authored-By: …`) added with `git commit --trailer` to every commit `task ship` / `--new-cycle` makes, including the `mark shipped` and new-cycle metadata commits. Entries are validated strictly (one-line `Token: value`); an invalid entry exits 1 naming it. `--dry-run` lists them (TASK-057).
+
 ## 3.3.1 - 2026-10-18
 
 ### Changed

package/README.md

@@ -163,6 +163,26 @@ vibeops llm use auto   # auto | codex-oauth | cursor-agent | openai
 - **`status`**: Now / Next card — focus stage, checklist, PR, and the next command to run.
 - No force-push to shared branches.
 
+### Commit trailers (`.vibeops.json` → `git.commitTrailers`)
+
+Commits VibeOps makes itself (`task ship` implementation and `mark shipped` commits, `--new-cycle` metadata) can carry git trailers. git's `trailer.*` config only applies with `--trailer` / `interpret-trailers`, and `commit.template` is ignored for `-m`, so set them here:
+
+```json
+{
+  "git": {
+    "remote": "origin",
+    "host": "github",
+    "integrationBranch": "develop",
+    "productionBranch": "main",
+    "commitTrailers": ["Co-Authored-By: Name <name@example.com>"]
+  }
+}
+```
+
+- Each entry is passed as `git commit --trailer <entry>`; `--dry-run` lists them.
+- Validated strictly: an array of one-line `Token: value` strings (token: letters, digits, `-`). Anything else (not an array, newline, missing `: `, empty value) makes the command exit 1 naming the entry.
+- Unset → no trailers. Re-running `init` keeps the list. The initial `init` commit does not use it.
+
 ## Worktrees
 
 VibeOps supports several `git worktree` checkouts of one repo working in parallel. It never needs to check out the integration branch:

package/dist/commands/task-ship.js

@@ -1,6 +1,6 @@
 import { resolve } from "node:path";
 import { readText } from "../lib/filesystem.js";
-import { requireGitConfig } from "../lib/git-config.js";
+import { readCommitTrailers, requireGitConfig } from "../lib/git-config.js";
 import { BASELINE_REPAIR_SECTION, preflightBaseline } from "../lib/project-baseline.js";
 import { gitCommitsAhead, gitHeadCommit, gitPush, gitRemoteBranchExists, readGitInfo, } from "../lib/git.js";
 import { askYesNo, isInteractiveSession } from "../lib/inquirer-helpers.js";
@@ -56,18 +56,20 @@ async function commitShipMetadata(opts) {
     if (opts.dryRun) {
         log.info(dim("  would set Status → Shipped"));
         log.info(dim("  would commit ship metadata"));
+        if (opts.trailers.length > 0)
+            log.info(dim(`  with trailers: ${opts.trailers.join(" | ")}`));
         return;
     }
     await updateInlineStatus(opts.taskFile, "shipped");
     log.ok("Status → Shipped");
-    const committed = await commitDirtyWorkingTree(opts.cwd, docsCommitMessageFor(opts.taskId, "mark shipped"), false);
+    const committed = await commitDirtyWorkingTree(opts.cwd, docsCommitMessageFor(opts.taskId, "mark shipped"), false, opts.trailers);
     if (!committed) {
         log.warn("No file changes for ship metadata commit — check TASK Status on the remote branch.");
     }
 }
 /** State 1: first submit — push the task branch and open a new PR/MR. */
 async function runFirstShip(ctx) {
-    const { cwd, taskId, taskFile, meta, relFile, dryRun, nonInteractive, options } = ctx;
+    const { cwd, taskId, taskFile, meta, relFile, dryRun, nonInteractive, options, trailers } = ctx;
     let body = ctx.body;
     let resultOk = hasNonEmptySection(body, "Result");
     let testOk = hasNonEmptySection(body, "Test Result");
@@ -127,7 +129,7 @@ async function runFirstShip(ctx) {
         log.info("  · commit implementation (TASK-scoped message) + ship metadata (Status → Shipped)");
         log.info("  · push task branch once, open a new MR/PR (unless --no-pr)");
         const partsDry = parseTaskFilename(taskFile);
-        await commitShipMetadata({ cwd, taskFile, taskId: partsDry.id, dryRun: true });
+        await commitShipMetadata({ cwd, taskFile, taskId: partsDry.id, dryRun: true, trailers });
         await finishTaskWithPullRequest({
             cwd,
             taskFile,
@@ -155,9 +157,9 @@ async function runFirstShip(ctx) {
             provided: options.message,
             nonInteractive,
         });
-        await commitDirtyWorkingTree(cwd, message, false);
+        await commitDirtyWorkingTree(cwd, message, false, trailers);
     }
-    await commitShipMetadata({ cwd, taskFile, taskId: parts.id, dryRun: false });
+    await commitShipMetadata({ cwd, taskFile, taskId: parts.id, dryRun: false, trailers });
     const prResult = await finishTaskWithPullRequest({
         cwd,
         taskFile,
@@ -183,7 +185,7 @@ async function runFirstShip(ctx) {
 }
 /** State 2: an open PR exists — commit + push to update it (no new PR). */
 async function runUpdateOpenPr(ctx) {
-    const { cwd, taskId, taskFile, meta, body, prCtx, dryRun, nonInteractive, options } = ctx;
+    const { cwd, taskId, taskFile, meta, body, prCtx, dryRun, nonInteractive, options, trailers } = ctx;
     const gitCtx = await readGitContext(taskFile);
     if (gitCtx === null) {
         log.error(`No Git Context — cannot update the open PR: ${await gitContextProblem(taskFile)}.`);
@@ -220,7 +222,7 @@ async function runUpdateOpenPr(ctx) {
     if (meta.status === "in_progress") {
         await updateInlineStatus(taskFile, "shipped");
         log.ok("Status → Shipped");
-        await commitDirtyWorkingTree(cwd, docsCommitMessageFor(taskId, "mark shipped"), false);
+        await commitDirtyWorkingTree(cwd, docsCommitMessageFor(taskId, "mark shipped"), false, trailers);
     }
     if (options.noCommit === true) {
         const git = await readGitInfo(cwd);
@@ -236,7 +238,7 @@ async function runUpdateOpenPr(ctx) {
             provided: options.message,
             nonInteractive,
         });
-        await commitDirtyWorkingTree(cwd, message, false);
+        await commitDirtyWorkingTree(cwd, message, false, trailers);
     }
     const remoteExists = await gitRemoteBranchExists(cwd, remote, gitCtx.taskBranch);
     const ahead = remoteExists
@@ -338,6 +340,15 @@ export async function taskShipCommand(taskRef, options = {}) {
         process.exitCode = 1;
         return;
     }
+    let trailers;
+    try {
+        trailers = await readCommitTrailers(cwd);
+    }
+    catch (e) {
+        log.error(e instanceof Error ? e.message : String(e));
+        process.exitCode = 1;
+        return;
+    }
     const ctx = {
         cwd,
         taskId,
@@ -349,6 +360,7 @@ export async function taskShipCommand(taskRef, options = {}) {
         dryRun,
         nonInteractive,
         options,
+        trailers,
     };
     switch (action) {
         case "update-open":

package/dist/lib/commit-trailers.js

@@ -0,0 +1,33 @@
+/**
+ * Git trailers for commits VibeOps creates itself (`.vibeops.json` `git.commitTrailers`).
+ * Each entry is passed as `git commit --trailer <entry>` (git-commit(1), git-interpret-trailers(1)).
+ */
+export class CommitTrailersConfigError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "CommitTrailersConfigError";
+    }
+}
+/** `Token: value` — token of letters, digits and `-` (git trailer key), non-empty single-line value. */
+const TRAILER_RE = /^[A-Za-z0-9][A-Za-z0-9-]*: \S.*$/;
+/**
+ * Validate the raw `git.commitTrailers` value. Absent → `undefined`; anything that is not
+ * an array of single-line `Token: value` strings throws (fail closed, entry named).
+ */
+export function parseCommitTrailers(raw) {
+    if (raw === undefined)
+        return undefined;
+    if (!Array.isArray(raw)) {
+        throw new CommitTrailersConfigError(".vibeops.json git.commitTrailers must be an array of \"Token: value\" strings.");
+    }
+    return raw.map((entry, i) => {
+        if (typeof entry !== "string" || /[\r\n]/.test(entry) || !TRAILER_RE.test(entry)) {
+            throw new CommitTrailersConfigError(`.vibeops.json git.commitTrailers[${i}] is invalid: ${JSON.stringify(entry)} — expected one line "Token: value" (e.g. "Co-Authored-By: Name <name@example.com>").`);
+        }
+        return entry;
+    });
+}
+/** `git commit` arguments for the trailers (`--trailer <t>` each). */
+export function commitTrailerArgs(trailers) {
+    return trailers.flatMap((t) => ["--trailer", t]);
+}

package/dist/lib/config.js

@@ -4,6 +4,7 @@ import { VIBEOPS_CONFIG_FILE } from "./paths.js";
 import { VERSION } from "../version.js";
 import { VIBEOPS_CONFIG_SCHEMA_VERSION, } from "../types/config.js";
 import { isVibeopsClientId } from "./init-clients.js";
+import { CommitTrailersConfigError, parseCommitTrailers } from "./commit-trailers.js";
 function parseClientsBlock(raw) {
     if (!Array.isArray(raw))
         return undefined;
@@ -40,7 +41,14 @@ function parseGitBlock(raw) {
         : undefined;
     if (!host || !integrationBranch || !productionBranch)
         return undefined;
-    return { remote, host, integrationBranch, productionBranch };
+    const commitTrailers = parseCommitTrailers(o.commitTrailers);
+    return {
+        remote,
+        host,
+        integrationBranch,
+        productionBranch,
+        ...(commitTrailers ? { commitTrailers } : {}),
+    };
 }
 function parseLlmBlock(raw) {
     if (raw === null || raw === undefined || typeof raw !== "object" || Array.isArray(raw)) {
@@ -81,7 +89,10 @@ export async function readConfig(root) {
         }
         return null;
     }
-    catch {
+    catch (e) {
+        // An invalid commitTrailers entry is a visible error, not "no config".
+        if (e instanceof CommitTrailersConfigError)
+            throw e;
         return null;
     }
 }
@@ -92,7 +103,12 @@ export function buildConfig(name, clients, git, existing, nowIso) {
         schemaVersion: VIBEOPS_CONFIG_SCHEMA_VERSION,
         createdAt: existing?.createdAt ?? nowIso ?? new Date().toISOString(),
         clients,
-        git,
+        git: {
+            ...git,
+            ...(git.commitTrailers === undefined && existing?.git?.commitTrailers
+                ? { commitTrailers: existing.git.commitTrailers }
+                : {}),
+        },
         llm: existing?.llm ?? { provider: "auto" },
         ...(existing?.merge !== undefined ? { merge: existing.merge } : {}),
         ...(existing?.baseline !== undefined ? { baseline: existing.baseline } : {}),

package/dist/lib/git-config.js

@@ -19,3 +19,7 @@ export async function requireGitConfig(cwd) {
     }
     return config.git;
 }
+/** `git.commitTrailers` from `.vibeops.json` (empty when unset or no config); throws when invalid. */
+export async function readCommitTrailers(cwd) {
+    return (await readConfig(cwd))?.git?.commitTrailers ?? [];
+}

package/dist/lib/task-git-commit.js

@@ -1,3 +1,4 @@
+import { commitTrailerArgs } from "./commit-trailers.js";
 import { dim, log } from "./logger.js";
 import { gitAddPaths, gitPush, listUnstagedRelPaths, listWorkingTreeRelPaths, partitionPathsForAutoCommit, readGitInfo, runGit, } from "./git.js";
 export function featCommitMessageFor(taskId, title) {
@@ -40,9 +41,10 @@ export function taskScopedCommitMessage(taskId, rawMessage, defaultType = "feat"
  * Commit all committable dirty paths (staged and unstaged, including deletions
  * and renames); returns whether a commit was created. Only paths whose
  * working-tree state is not yet in the index are passed to `git add`; staged
- * changes are already part of the commit.
+ * changes are already part of the commit. Each `trailers` entry
+ * (`.vibeops.json` `git.commitTrailers`) is added with `git commit --trailer`.
  */
-export async function commitDirtyWorkingTree(cwd, message, dryRun) {
+export async function commitDirtyWorkingTree(cwd, message, dryRun, trailers) {
     const git = await readGitInfo(cwd);
     if (!git.isRepo || git.dirty !== true)
         return false;
@@ -54,11 +56,13 @@ export async function commitDirtyWorkingTree(cwd, message, dryRun) {
     }
     if (dryRun) {
         log.info(dim(`  would commit ${committable.length} path(s): ${message}`));
+        if (trailers.length > 0)
+            log.info(dim(`  with trailers: ${trailers.join(" | ")}`));
         return true;
     }
     const committableSet = new Set(committable);
     await gitAddPaths(cwd, (await listUnstagedRelPaths(cwd)).filter((p) => committableSet.has(p)));
-    await runGit(cwd, ["commit", "-q", "-m", message]);
+    await runGit(cwd, ["commit", "-q", "-m", message, ...commitTrailerArgs(trailers)]);
     log.ok(`Committed: ${message}`);
     return true;
 }

package/dist/lib/task-new-cycle.js

@@ -7,6 +7,7 @@ import { projectPaths } from "./paths.js";
 import { prNumberFromUrl } from "./pr-create.js";
 import { relPath } from "./task-context.js";
 import { resolveShipCommitMessage } from "./task-commit-msg.js";
+import { readCommitTrailers } from "./git-config.js";
 import { commitDirtyWorkingTree, docsCommitMessageFor } from "./task-git-commit.js";
 import { finishTaskWithPullRequest } from "./task-push-pr.js";
 import { applyTaskShipMemory, llmCompleteTaskReship, writeTaskResultSections, } from "./task-ship-llm.js";
@@ -33,7 +34,7 @@ async function commitReshipMetadata(opts) {
         log.info(dim("  would commit new-cycle metadata (Status stays Shipped)"));
         return;
     }
-    const committed = await commitDirtyWorkingTree(opts.cwd, docsCommitMessageFor(opts.taskId, "new PR cycle metadata"), false);
+    const committed = await commitDirtyWorkingTree(opts.cwd, docsCommitMessageFor(opts.taskId, "new PR cycle metadata"), false, opts.trailers);
     if (!committed) {
         log.info(dim("No new-cycle metadata commit (Git Context already on disk)."));
     }
@@ -66,6 +67,18 @@ export async function runPostMergeNewCycle(taskRef, options = {}) {
         process.exitCode = 1;
         return;
     }
+    let trailers;
+    try {
+        trailers = await readCommitTrailers(cwd);
+    }
+    catch (e) {
+        log.error(e instanceof Error ? e.message : String(e));
+        process.exitCode = 1;
+        return;
+    }
+    if (dryRun && trailers.length > 0) {
+        log.info(dim(`  commits would carry trailers: ${trailers.join(" | ")}`));
+    }
     const integrationBranch = gitCfg?.integrationBranch ?? "develop";
     const remote = gitCfg?.remote ?? "origin";
     const updateOpenMr = options.allowOpenMr === true;
@@ -173,7 +186,7 @@ export async function runPostMergeNewCycle(taskRef, options = {}) {
             provided: options.message,
             nonInteractive: options.nonInteractive === true,
         });
-        await commitDirtyWorkingTree(cwd, message, false);
+        await commitDirtyWorkingTree(cwd, message, false, trailers);
     }
     else {
         // Work may already be committed on the task branch (not merged into the base yet).
@@ -213,6 +226,7 @@ export async function runPostMergeNewCycle(taskRef, options = {}) {
             taskFile,
             taskId: parts.id,
             dryRun: false,
+            trailers,
         });
     }
     const prResult = await finishTaskWithPullRequest({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodtek/vibeops",
-  "version": "3.3.1",
+  "version": "3.4.0",
   "description": "Minimal CLI rails for Cursor-based TASK-driven vibe coding.",
   "type": "module",
   "packageManager": "pnpm@9.15.9",