From 3ac7e9a79697eacb90f2847dc4ce911606e4fb23 Mon Sep 17 00:00:00 2001 From: BigSimmo <87357024+BigSimmo@users.noreply.github.com> Date: Thu, 30 Jul 2026 20:44:38 +0800 Subject: [PATCH 1/5] docs: prefer GitHub connector in Codex Cloud --- AGENTS.md | 1 + 1 file changed, 1 insertion(+) diff --git a/AGENTS.md b/AGENTS.md index e44efbdff2..df36db77eb 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -843,6 +843,7 @@ Use `docs/codex-cloud.md` as the environment contract: - The Codex GitHub connection used to clone a repository is separate from agent-shell `git push` or `gh` authentication. Reconnect the repository in Codex settings if a controlled write test cannot publish; never add a PAT to Cloud variables or secrets. +- For GitHub-related work, use the connected GitHub connector first whenever it supports the task: pull-request, issue, comment, and review-thread reads; review-thread replies and resolution; GitHub Actions run, job, log, and artifact inspection; and supported GitHub API mutations. Do not treat a missing `gh` CLI as a blocker for connector-supported work, and never add a PAT as a workaround. The intended connection is `BigSimmo` with administrator access to this repository; verify the exact target and connector result before any write. Use shell `git` or `gh` only for a genuine connector gap and only when the task permits it. - Cloud browser proof is Playwright/Chromium, Firefox, or WebKit container evidence, not physical iPhone Safari/PWA acceptance. From dec3cfff3076d6681d9680df677a9c1f91024fe8 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Fri, 31 Jul 2026 00:17:58 +0000 Subject: [PATCH 2/5] docs: record PR #1447 reopen-prep review on connector policy Local docs/policy review of codex/cloud-github-connector-policy at fc42cf0c found no high-confidence P0-P2 issues; ledger append only. Co-authored-by: BigSimmo --- docs/branch-review-ledger.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/branch-review-ledger.md b/docs/branch-review-ledger.md index 02fb182afc..457dbc990f 100644 --- a/docs/branch-review-ledger.md +++ b/docs/branch-review-ledger.md @@ -329,3 +329,4 @@ Records before 2026-07-28 were written by hand and had drifted: 146 lines carrie | 2026-07-31 | claude/root-dir-coverage-gate-v2 | 398660144d93aeefc2e5649c156948a68925cb64 | docs:check-index repo-root coverage, stale script counts, ledger correction | MERGED as PR #1458 (squash 907fd9f4a). Root-directory coverage pass for docs:check-index, red-then-green proven (flagged .cursor/.design-sync/.vscode, then 49 entries vs 31). Main landed an equivalent pass independently in #1480, so the two overlapped; no duplication reached main. Row not recorded at the time - appended retrospectively | verify:cheap exit 0, 435 test files / 4574 tests pass; codebase-index-coverage 10/10 incl 4 new root cases; eslint clean; docs gates green; prettier clean | | 2026-07-31 | claude/pre-commit-fail-open | 7b96a09b8500adc917cf5549b1c61142b2244b39 | pre-commit hook fail-open when the inventory script is absent | MERGED as PR #1494 (squash 387c3b653). Resolves ledger #153: core.hooksPath is absolute to the primary checkout, so the hook ran in worktrees lacking scripts/update-docs-inventory.mjs and aborted with MODULE_NOT_FOUND. Guard drops the inventory task and re-checks the all-tasks-empty exit; grep carries \|\| true because set -e treats a fully-filtering grep as failure | isolated-repo probe with the script genuinely absent: prints skipping inventory sync, commit succeeds; sh -n clean; no-op when the script is present; prettier does not parse shell so format:check skips it | | 2026-07-31 | claude/ledger-relanding | 30ec06964e4235d9f0b4bb782f357e6b4fb59430 | re-land the three session findings lost when PR #1490 was closed | MERGED as PR #1508 (squash 7b551abc4). Ledger-only: #151 corrects the claim that CI is unreadable (PAT has Actions:read though not Checks:read), #152 re-lands the at-risk worktree inventory with the four preservation snapshots, #153 archives the hook fix. Verified landed by content on main, not by PR state or row id | CI, PR Policy, PR mergeability, SAST, Secret Scan all completed/success via the Actions API; check:outstanding-issues 151 rows 45 open unique ids next-id=154; docs:check-links 1414 refs; prettier clean | +| 2026-07-31 | codex/cloud-github-connector-policy | fc42cf0c5d7b68c055abade44682cb1c1a600608 | PR #1447 reopen prep | no high-confidence P0-P2; residual: Cursor shell-git vs connector-gap wording | ledger:lookup NOT REVIEWED; git diff origin/main...HEAD (AGENTS.md+docs/codex-cloud.md); check:codex-cloud PASS (prior+rerun); format:check PASS (prior); merge-tree clean (prior); no Bugbot; no GitHub mutate | From 6b2e90851d418bf1f778fb6a1e0fe9c31256a08e Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Fri, 31 Jul 2026 00:18:53 +0000 Subject: [PATCH 3/5] docs: clarify Cursor Cloud shell git remains allowed Avoid over-reading the connector-first Cursor Cloud bullet as a ban on ordinary authorised git branch publication; keep shell gh for genuine connector gaps only. Co-authored-by: BigSimmo --- AGENTS.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/AGENTS.md b/AGENTS.md index bb9c7857ce..fb28df4884 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -905,5 +905,6 @@ Durable notes for Cloud Agents. Standard commands live in `README.md` and `packa support (including run/job/log/artifact inspection and review-thread replies/resolution). A missing `gh` CLI is not a blocker for connector-supported work; never add a PAT as a workaround. The intended connection is `BigSimmo` with administrator access to this - repository. Verify the exact target and connector result before any write. Use shell - `git` or `gh` only for a genuine connector gap and only when the task permits it. + repository. Verify the exact target and connector result before any write. Ordinary + authorised shell `git` branch publication remains allowed; use shell `gh` only for a + genuine connector gap and only when the task permits it. From e0121b87bf2300439674a9650c6b226d5a0a851e Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Fri, 31 Jul 2026 00:18:54 +0000 Subject: [PATCH 4/5] docs: supersede PR #1447 reopen-prep ledger after wording fix Co-authored-by: BigSimmo --- docs/branch-review-ledger.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/branch-review-ledger.md b/docs/branch-review-ledger.md index 457dbc990f..9490e5068d 100644 --- a/docs/branch-review-ledger.md +++ b/docs/branch-review-ledger.md @@ -330,3 +330,4 @@ Records before 2026-07-28 were written by hand and had drifted: 146 lines carrie | 2026-07-31 | claude/pre-commit-fail-open | 7b96a09b8500adc917cf5549b1c61142b2244b39 | pre-commit hook fail-open when the inventory script is absent | MERGED as PR #1494 (squash 387c3b653). Resolves ledger #153: core.hooksPath is absolute to the primary checkout, so the hook ran in worktrees lacking scripts/update-docs-inventory.mjs and aborted with MODULE_NOT_FOUND. Guard drops the inventory task and re-checks the all-tasks-empty exit; grep carries \|\| true because set -e treats a fully-filtering grep as failure | isolated-repo probe with the script genuinely absent: prints skipping inventory sync, commit succeeds; sh -n clean; no-op when the script is present; prettier does not parse shell so format:check skips it | | 2026-07-31 | claude/ledger-relanding | 30ec06964e4235d9f0b4bb782f357e6b4fb59430 | re-land the three session findings lost when PR #1490 was closed | MERGED as PR #1508 (squash 7b551abc4). Ledger-only: #151 corrects the claim that CI is unreadable (PAT has Actions:read though not Checks:read), #152 re-lands the at-risk worktree inventory with the four preservation snapshots, #153 archives the hook fix. Verified landed by content on main, not by PR state or row id | CI, PR Policy, PR mergeability, SAST, Secret Scan all completed/success via the Actions API; check:outstanding-issues 151 rows 45 open unique ids next-id=154; docs:check-links 1414 refs; prettier clean | | 2026-07-31 | codex/cloud-github-connector-policy | fc42cf0c5d7b68c055abade44682cb1c1a600608 | PR #1447 reopen prep | no high-confidence P0-P2; residual: Cursor shell-git vs connector-gap wording | ledger:lookup NOT REVIEWED; git diff origin/main...HEAD (AGENTS.md+docs/codex-cloud.md); check:codex-cloud PASS (prior+rerun); format:check PASS (prior); merge-tree clean (prior); no Bugbot; no GitHub mutate | +| 2026-07-31 | codex/cloud-github-connector-policy | 6b2e90851d418bf1f778fb6a1e0fe9c31256a08e | PR #1447 reopen prep | no P0-P2; Cursor shell-git wording clarified; merge-clean vs main; Bugbot none; PR left closed | check:codex-cloud,format:check,merge-tree,bugbot:none,diff-review | From 502362b75f8070205cc71a1790deffe829c98647 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Fri, 31 Jul 2026 04:57:46 +0000 Subject: [PATCH 5/5] docs: record PR #1447 review+bugbot+fix ledger Local ledger append for tip after main sync; not pushed alone (ledger-only tip policy). Co-authored-by: BigSimmo --- docs/branch-review-ledger.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/branch-review-ledger.md b/docs/branch-review-ledger.md index 2f0739efb6..83656c8736 100644 --- a/docs/branch-review-ledger.md +++ b/docs/branch-review-ledger.md @@ -508,3 +508,4 @@ Records before 2026-07-28 were written by hand and had drifted: 146 lines carrie | 2026-07-31 | PR-1520 | 6e6998464a6996a66fdaaadcd482388e39af611e | PR #1520 branch and worktree reconciliation records | APPROVE; 146 historical cleanup dispositions retained as ledger-only evidence with no repository mutation | check:branch-review-ledger PASS 444 live 1206 archived; diff check PASS; current-main merge clean | | 2026-07-31 | claude/issues-133-evidence | 5bb1bc8d8b1d3ba8aebdce5c348887c596f6b8e6 | docs/outstanding-issues.md: re-land #154 (id-allocation hazard) and #155 (--med-accent-soft) after PR #1506 closed unmerged | Recorded. Branch synced to origin/main; main had since taken #151 so the hazard row moved to #154 and --med-accent-soft landed as #155 (its fifth renumber) - both self-demonstrating the row's own claim. PR #1506 to be reopened by the user. | check:outstanding-issues exit 0 (153 rows, 45 open, 108 archived, unique ids, next-id=156, no ids deleted from base); verified zero origin/main ids lost after taking main's table as canonical; pre-push guard passed on pushed commit | | 2026-07-31 | claude/issues-133-evidence | 37f71f02f731175e4fed500f95529c3ef9eb568f | PR #1506 reopen prep: sync main, renumber hazard to #155, supersede #112 residual | READY — conflict cleared vs origin/main; main #154 preserved; hazard=#155 with archived #112 residual cross-link; med-accent=#156; false #155 evidence clause removed; Codex P2 addressed; Bugbot P1/P2 fixed; PR left CLOSED | check:outstanding-issues 154 rows/46 open next-id=157; check:branch-review-ledger 277 live; merge-tree clean da0c63d0; format no-op | +| 2026-07-31 | codex/cloud-github-connector-policy | 0213d15db355f5da721546513ed0493ad32fadac | PR #1447 review+bugbot+fix | no P0-P2; behind-but-clean synced; Bugbot/Codex threads none; merge-tree clean; docs-only additive connector policy | merge-tree,check:codex-cloud,prettier:AGENTS+codex-cloud,bugbot:none,ci:awaiting-after-sync |