sshlg-skills 1.74.0 → 1.74.2

package/CHANGELOG.md

@@ -1,3 +1,24 @@
+## v1.74.2 (2026-10-22): an unread Codex is not a green step
+
+- **B-252 closed:** the 1.74.1 `update` printed "11 of 11 steps, all green" beside "not read:
+  codex plugin list failed — spawnSync codex ETIMEDOUT", and Codex stayed at older pins. The
+  read took 31.5 s at a load average near 60 against a 30 s limit. A Codex read now has 120 s
+  (`SSHLG_CODEX_READ_TIMEOUT_MS` overrides, never below one second), and a Codex that cannot be
+  read makes the run PARTIAL instead of green. `test/codex_unread_test.js` (4 cases, red on
+  1.74.1).
+
+## v1.74.1 (2026-10-22): a git worktree's local scope no longer fails the Claude update
+
+- **B-251 closed:** the 1.74.0 `update` on the operator machine failed xr-dev (and rolled it
+  back) because one of its local scopes was a linked git worktree. Claude Code 2.1.299 runs a
+  local-scope `update` from a worktree against its main repository's record and exits 0
+  (measured in a scratch HOME: "updated ... for scope local (<repo>)", the worktree's record
+  unchanged), so the transaction's readback saw the wrong record move. The planner
+  (`lib/claude-pinned.js`) now leaves a worktree's record as recorded beside a recorded main
+  repository, disclosed as `left as recorded: <worktree> (alias of <main>)`, and blocks the member
+  by name when the main repository has no record. A submodule checkout is unaffected.
+  `test/claude_pinned_test.js` 34 to 37 cases.
+
 ## v1.74.0 (2026-10-22): the design-review gate, subscription growth, milestones M1 and M2
 
 - **Pins:** task-pipeline 1.101.0 (1.100.0's design-review gate: the `design-tester` agent, a

package/bin/sshlg-skills.js

@@ -875,11 +875,14 @@ function codexPinRef(s, opts) {
  * counted like every other `update` step, and a failure lands in the closing summary; a
  * read (`--version`, `plugin list`) is captured and stays quiet.
  */
+// A read of Codex's plugin list took 31.5 s on a loaded machine (2026-10-22); 30 s timed it
+// out. SSHLG_CODEX_READ_TIMEOUT_MS overrides, never below one second.
+const CODEX_READ_TIMEOUT_MS = Math.max(1000, Number(process.env.SSHLG_CODEX_READ_TIMEOUT_MS) || 120000);
 function codexRunner(cmd, args, opts) {
   if (!opts || !opts.read || !(args.length === 1 && args[0] === '--version'
     || args[0] === 'plugin' && args[1] === 'list' && (args.length === 2 || args.length === 3 && args[2] === '--json'))) throw new Error('Codex native mutation is deferred');
   const r = spawnSync(cmd, args, { encoding: 'utf8', shell: process.platform === 'win32',
-    stdio: ['ignore', 'pipe', 'pipe'], timeout: 30000, maxBuffer: 32 * 1024 * 1024 });
+    stdio: ['ignore', 'pipe', 'pipe'], timeout: CODEX_READ_TIMEOUT_MS, maxBuffer: 32 * 1024 * 1024 });
   return { status: r.status, signal: r.signal, stdout: r.stdout || '', stderr: r.stderr || '', error: r.error };
 }
 
@@ -921,7 +924,8 @@ function refreshCodexPlugins(f) {
   }
   if (out.status === 'unread') {
     log(`  not read: codex plugin list failed — ${out.why}. Nothing in Codex was touched.`);
-    return true;
+    // Not looked is not green: the summary reads PARTIAL and names this section.
+    return false;
   }
   for (const it of out.items) {
     if (it.action === 'skip') log(`  ${it.pluginId}: left alone — ${it.why}`);
@@ -4090,4 +4094,4 @@ if (require.main === module) {
   process.exit(main(process.argv));
 }
 
-module.exports = { cliSpec, pinnedArgv, resolvePayloads, resolveProviders };
+module.exports = { cliSpec, pinnedArgv, resolvePayloads, resolveProviders, refreshCodexPlugins, CODEX_READ_TIMEOUT_MS };

package/lib/claude-pinned.js

@@ -55,6 +55,14 @@ function configured(manifest) {
 // Claude spells one payload directory differently per record (/var and /private/var on
 // macOS, measured on 2.1.299), so installs are compared by their physical path.
 const physical=p=>{try{return fs.realpathSync(p);}catch(_){return p;}};
+// The main working tree of a linked git worktree (`.git` is a file naming
+// `<main>/.git/worktrees/<name>`), or null. A submodule's `.git/modules/` is not one.
+function worktreeMain(dir) {
+  let text;try{text=fs.readFileSync(path.join(dir,'.git'),'utf8');}catch(_){return null;}
+  const m=/^gitdir:\s*(.+?)\s*$/m.exec(text);if(!m) return null;
+  const gitdir=path.resolve(dir,m[1]),at=gitdir.lastIndexOf(path.sep+'.git'+path.sep+'worktrees'+path.sep);
+  return at<0?null:physical(gitdir.slice(0,at));
+}
 function prepare(members,inventory,opts) {
   const requested={profile:path.resolve(opts.profileRoot),home:path.resolve(opts.home)};
   const rows=Source.validate(inventory,members),profile=Bindings.profilePath(requested.profile),home=Bindings.profilePath(requested.home);
@@ -109,6 +117,14 @@ function prepare(members,inventory,opts) {
       for(const r of existing) {
         if(r.scope==='user') {targets.push({scope:'user',projectPath:null,record:r});continue;}
         let real=null;try{real=fs.realpathSync(r.projectPath);}catch(_){}
+        // A linked git worktree: Claude runs a local-scope update from it against its main
+        // repository's record (measured on 2.1.299, 2026-10-22), so the worktree's own
+        // record is left as recorded beside a recorded main, and blocks without one.
+        const main=real===r.projectPath?worktreeMain(real):null;
+        if(main) {
+          if(locals.some(o=>o!==r && o.projectPath===main)) {aliases.push({projectPath:r.projectPath,real:main,record:r});continue;}
+          unaddressable=r.projectPath+' is a git worktree of '+main+', which has no record';break;
+        }
         if(real===r.projectPath && fs.statSync(real).isDirectory()) targets.push({scope:'local',projectPath:r.projectPath,record:r});
         // A path that resolves to ANOTHER record's project is that project under an
         // old name: Claude never matches it, so it is left as recorded and read back.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sshlg-skills",
-  "version": "1.74.0",
+  "version": "1.74.2",
   "skillsCli": "skills@1.7.2",
   "description": "The ssheleg harness skill layer: routing, delivery gates, specialist skills and durable handoffs for coding agents.",
   "bin": {