task-pipeline-skill 1.91.0 → 1.91.2

package/CHANGELOG.md

@@ -1,3 +1,28 @@
+## v1.91.2 — v1.91.1's payload, released with its no-stamp declaration
+
+`release.yml` refused the `v1.91.1` tag's own tree: the release carried no run stamp and was
+not named in `## Releases that carry no stamp`. Nothing was published under it. This
+release is the same payload with the declaration in `docs/evidence/retro.md`. What v1.91.1
+ships is described in its section below.
+
+## v1.91.1 — the gates read the current run only, and a broken python3 stops only releases
+
+- **The release gate read every run in the ledger.** `.task-pipeline/run.md` is
+  append-only, and a project that reuses it holds earlier runs above the current one.
+  The gate took the FIRST `stage: … tests … verdict pass` in the whole file, so a
+  previous release's pass admitted `git tag` while this run's tests were still PENDING
+  (reported 2026-10-11 from a live ledger: the 0.2.0 pass would have released 0.4.0).
+  Both gates now read only what follows the last `Run:` header — the line
+  `templates/run.md` writes once per run; a ledger with no header is one run.
+- **The build gate had the same leak.** A previous run that had entered dev silenced
+  the ask for a new run still in planning. Same scoping, same fixture shape.
+- **A failed python3 no longer blocks every command.** With the disk full, python3
+  could not start, and the gate refused `ls` in any project with a run in flight. A
+  shell pre-filter now lets a command through when it carries none of
+  `tag`/`push`/`release`/`publish`; anything that could release still fails closed.
+
+Four fixtures in `test/release_gate_test.py`, each watched failing before its fix.
+
 ## v1.91.0 — the description says «баг», and a lightweight tag is refused before release
 
 v1.90.0 added `bug` to the description so "fix this bug" routes here by name. The Russian

package/SKILL-CARD.md

@@ -12,7 +12,7 @@ harmless.
 |---|---|
 | **Purpose** | Runs a substantial task through ten gated delivery stages — intake grill, docs study, brainstorm, spec, plan, subagent build, tests, lint/deploy, post-deploy, docs+registers, acceptance — refusing to advance until each gate passes |
 | **Owner** | ssheleg ([github.com/ssheleg/task-pipeline](https://github.com/ssheleg/task-pipeline)) |
-| **Version** | 1.91.0 |
+| **Version** | 1.91.2 |
 | **Surface** | Claude Code (filesystem skill + plugin) and the vercel `skills` CLI. **Not** uploaded to the Skills API; custom Skills do not sync across surfaces |
 | **Dependencies** | None required. Optional: `context7` (MCP), `figma` (MCP), super-ux, agent-sync, graphify, obsidian-wiki, and **one of two browser channels** — `playwright` (CLI or MCP) or `chrome-devtools` (MCP); either satisfies the browser step and neither is required. Every stage's doctrine ships in-repo; the one conditional requirement is super-ux for the stage-3 UX track on a user-facing task |
 | **Evaluation status** | Suite authored, 5 categories. One recorded run, **self-observed by the author**; **zero blind runs on zero of three models** — the split, and the numbers, live in [`evals/RESULTS.md`](evals/RESULTS.md) and are computed by `evals/run.py` |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "task-pipeline-skill",
-  "version": "1.91.0",
+  "version": "1.91.2",
   "description": "Full-cycle delivery pipeline for coding agents: a mandatory built-in intake grill, then 10 gated stages (docs, brainstorm+decompose, spec, plan, build, tests, lint/deploy, post-deploy, docs/wiki, acceptance). Every stage's doctrine ships inside the skill — no companion plugin required. This package is the installer CLI.",
   "bin": {
     "task-pipeline": "bin/task-pipeline.js"

package/plugins/task-pipeline/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "task-pipeline",
   "displayName": "Task Pipeline",
   "description": "Runs a substantial task through a mandatory built-in intake grill, then 10 gated stages (docs, brainstorm+decompose, spec, plan, subagent build, tests, lint/deploy, post-deploy, docs/wiki, acceptance). Every stage's doctrine is built into the skill — no companion plugin required — with typed auto/judgment/manual gates, a frozen requirement spine that closes with evidence, a work board and a verification ledger that outlive a run, an exposure line naming what shipped unconfirmed, a progress rail computed from the project's own config, a loop guard whose review ceiling measures rather than stops, and stage-3 tracks for what a product does, how it sounds and how it looks. Two modes need no task: `checkup` (what is unverified) and `setup` (audit existing docs). Retro insights can publish upstream as issues, opt-in and redacted.",
-  "version": "1.91.0",
+  "version": "1.91.2",
   "author": {
     "name": "ssheleg",
     "url": "https://x.com/sshlg93"

package/plugins/task-pipeline/hooks/build-gate.sh

@@ -54,6 +54,12 @@ try:
 except Exception:
     raise SystemExit(0)
 
+# Only the CURRENT run speaks: everything after the last `Run:` header. A previous
+# run that entered dev in a reused, append-only ledger silenced this gate (B-151).
+_lines = text.splitlines()
+_starts = [i for i, l in enumerate(_lines) if l.strip().startswith("Run:")]
+text = "\n".join(_lines[_starts[-1]:] if _starts else _lines)
+
 stage_lines = [l.strip() for l in text.splitlines() if l.strip().startswith("stage:")]
 if not stage_lines:
     raise SystemExit(0)

package/plugins/task-pipeline/hooks/release-gate.sh

@@ -155,6 +155,14 @@ except Exception:
     # gate cannot tell. Fail closed, and say which file to look at.
     print("block\t%s\tthe run ledger could not be read" % act); raise SystemExit(0)
 
+# B-151: the ledger is append-only, and a project that reuses it holds earlier runs
+# above this one. Only the CURRENT run speaks — everything after the last `Run:`
+# header (templates/run.md writes one per run); a ledger with no header is one run.
+# A previous release's `verdict pass` admitted a tag whose own tests were PENDING.
+_lines = text.splitlines()
+_starts = [i for i, l in enumerate(_lines) if l.strip().startswith("Run:")]
+text = "\n".join(_lines[_starts[-1]:] if _starts else _lines)
+
 stage_lines = [l.strip() for l in text.splitlines() if l.strip().startswith("stage:")]
 
 
@@ -243,6 +251,13 @@ status=$?
 # A gate that cannot reach its own decision must not wave the release through.
 if [ $status -ne 0 ] || [ -z "$verdict" ]; then
   [ -f "$ledger" ] || exit 0
+  # B-152: without python3 the command cannot be classified, and refusing EVERY
+  # Bash call took the whole session down on a full disk. A word-level pre-filter
+  # keeps fail-closed exactly where it matters: anything that could tag, push,
+  # release or publish is still refused; `ls` is not.
+  if ! printf '%s' "$input" | grep -Eq '(^|[^[:alnum:]_])(tag|tags|push|release|publish)([^[:alnum:]_]|$)'; then
+    exit 0
+  fi
   echo "task-pipeline: the stage-7 gate could not run (python3 missing or failed), and this project has a run in flight ($ledger). Refusing an outward act rather than failing open." >&2
   exit 2
 fi