Skip to content

ci(leakcheck): scan every commit a push publishes, and read dotfiles (main) - #46

Open
e1daru wants to merge 1 commit into
mainfrom
ci/leak-gate-every-commit-main
Open

e1daru wants to merge 1 commit into
mainfrom
ci/leak-gate-every-commit-main

Conversation

@e1daru

@e1daru e1daru commented Sep 29, 2026

Copy link
Copy Markdown
Contributor

Summary

Published counterpart of #26, already merged into pre-main. Installed plugins run what is on main, so this is how that change reaches users.

For contributors only; the installed plugin is unchanged.

  • .githooks/pre-push scans every commit a push publishes, not only the last one.
  • .github/scripts/leakcheck.mjs also reads dotfiles, which are published like any other file.

main carries no sources or tests. Every file here matches pre-main at the merge of #26, with two differences: bundles lose their inline sourcemap line, and paths that don't ship (sources, tests, labs/, verify.yml) are left out. Applied to pre-main before this series, that rule reproduces today's main byte for byte.

Merge order

1 of 16. Merge first.

Test plan

  • Sources: ci(leakcheck): scan every commit a push publishes, and read dotfiles #26's CI on pre-main. At the pre-main tip: Claude Code 2341 on source and dist, Codex 635 on both, manifests, bundles match their source.
  • This tip: every shipped script passes node --check, and none carries an inline sourcemap.
  • Both hosts, offline in a throwaway home: session-start and capture --stop exit 0 with valid output, and both MCP servers answer initialize and tools/list (mubit-memory@0.13.2, 7 tools).
  • leakcheck --strict exit 0.

🤖 Generated with Claude Code

…(main)

Published form of #26: the rebuilt bundles without their inline
sourcemap line, and the docs, skills and manifests that ship. Sources
and tests stay on pre-main.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Copilot AI balanced review requested due to automatic review settings September 29, 2026 12:41

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants