chore(release): @hasna/repos v0.1.45 by andrei-hasna · Pull Request #73 · hasna/repos

andrei-hasna · 2026-08-09T23:06:31Z

Summary

bump @hasna/repos from 0.1.44 to 0.1.45
add the 0.1.45 changelog entry for the numeric registry-ID worktree lookup fix merged in fix(worktrees): resolve numeric registry IDs #72
preserve the release candidate diff to CHANGELOG.md and package.json only

Bug task: f0c117d2-cc6c-4692-a3b5-529133db3812.
Release task: 495a272c-83e0-4e7b-ad9c-f7fefa342a14 (OPE57-00040).

Exact candidate

source/base: 941e2ef24b612b9996b0652a0664e2cd40eea9d9
head: 923171fd98743ac3629ada62a66e2d5e45fd3767
tree: 37e2b000734f3c8763ef68a29f8945caf2cf46d3
branch: release/0.1.45-numeric-id

Registry preflight and pre-push recheck both returned:

"0.1.44"
"code": "E404"
"summary": "No match found for version 0.1.45"

Remote main remained 941e2ef24b612b9996b0652a0664e2cd40eea9d9.

Release boundary

M CHANGELOG.md
M package.json
2 files changed, 14 insertions(+), 1 deletion(-)

git diff --quiet 941e2ef... HEAD -- . ':(exclude)package.json' ':(exclude)CHANGELOG.md'
returned 0. The package-version positive control returned 1, proving the
comparison can detect the intended release difference.

Verification

bun install --frozen-lockfile
496 packages installed [1376.00ms]

bun test src/lib/worktrees.test.ts
41 pass
0 fail

bun test
804 pass
0 fail
3574 expect() calls
Ran 804 tests across 52 files. [110.60s]

bun run typecheck
$ tsc --noEmit

bun run build
exit 0

The clean build generated:

"exact_commit": "923171fd98743ac3629ada62a66e2d5e45fd3767"
"exact_tree": "37e2b000734f3c8763ef68a29f8945caf2cf46d3"
"source_clean": true
"package_version": "0.1.45"

Artifact gates:

npm pack --dry-run --json
"id": "@hasna/repos@0.1.45"
"entryCount": 107
"shasum": "603997137a2b3f7545909f7577be0d17f25c1803"

EXPORT_OK addWorktree=function getRepo=function
0.1.45

Security gates:

gitleaks staged: no leaks found
gitleaks exact range: 1 commits scanned.
gitleaks exact range: no leaks found
shield review: No security issues found in staged changes.

The commit contains exactly one Agent: Quintilian trailer and no
Co-Authored-By trailer.

This PR does not merge, tag, publish, or install the package.

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

Prepare the numeric registry-ID worktree lookup fix from PR #72 for release. Agent: Quintilian

andrei-hasna · 2026-08-09T23:24:32Z

[REVIEW] GO — #73 @ 923171fd98743ac3629ada62a66e2d5e45fd3767 — release correctness + security + required gates, fixed independent reviewer 1 of 1

Reviewed the exact candidate against the finite release acceptance:

base: 941e2ef24b612b9996b0652a0664e2cd40eea9d9
head: 923171fd98743ac3629ada62a66e2d5e45fd3767
tree: 37e2b000734f3c8763ef68a29f8945caf2cf46d3

Final identity readback immediately before this verdict: PR #73 is OPEN, non-draft, and CLEAN; refs/heads/main is still the exact base; the head commit's sole parent is that base; the head tree is still the declared tree; required CI is SUCCESS.

Evidence:

Release boundary and controls

Exact range name-status:
```
M	CHANGELOG.md
M	package.json
```
git diff --quiet <base> <head> -- . ':(exclude)package.json' ':(exclude)CHANGELOG.md' returned exit 0.

The package-version positive control, git diff --quiet <base> <head> -- package.json, returned exit 1, proving the comparison detects the intended release change. git diff --check <base> <head> returned exit 0.
Reviewed implementation lineage

The fixed reviewer for PR fix(worktrees): resolve numeric registry IDs #72 reviewed head b37aa92437b85ef8606878b7875aa9f3b1f9cd7d, whose tree is dc9b463fae1a17a03107548a85c02924d4f5132d, and returned GO with zero P0/P1 findings. PR fix(worktrees): resolve numeric registry IDs #72 merged as the release base 941e2ef24b612b9996b0652a0664e2cd40eea9d9, whose tree is the same dc9b463fae1a17a03107548a85c02924d4f5132d.

Because the release candidate changes only CHANGELOG.md and package.json, every non-version source and test path is byte-identical to that reviewed merged numeric-ID fix.
Version and changelog integrity

package.json changes only 0.1.44 to 0.1.45; the Bun lockfile carries the root package name but no stale root version field. The changelog accurately describes the implementation: only canonical positive-decimal strings are converted, only safe integers enter the numeric registry-ID branch, and leading-zero/signed/zero/unsafe-integer strings retain exact string lookup.

Independent focused regression on the exact head:
```
(pass) addWorktree > resolves an exact numeric registry ID to the same repository as its exact path

 1 pass
 40 filtered out
 0 fail
 3 expect() calls
```
The recorded pre-fix control is literal 0 pass / 1 fail plus live REPO_NOT_FOUND, so this gate is capable of failing and tests the real resolver/worktree path rather than a mock-only branch.
Required CI and build gates

GitHub Actions run 31341077853, job 93314814734, is bound to this exact head and base. Checkout recorded:
```
HEAD is now at aab6a74 Merge 923171fd98743ac3629ada62a66e2d5e45fd3767 into 941e2ef24b612b9996b0652a0664e2cd40eea9d9
```
The Typecheck, Test, and Build steps each concluded SUCCESS. The test log reports:
```
 804 pass
 0 fail
```
Release artifact and registry preflight

The built provenance record says:
```
exact_commit: 923171fd98743ac3629ada62a66e2d5e45fd3767
exact_tree: 37e2b000734f3c8763ef68a29f8945caf2cf46d3
source_clean: true
package_name: @hasna/repos
package_version: 0.1.45
```
Independent no-lifecycle pack readback returns @hasna/repos@0.1.45, entryCount: 107, and shasum 603997137a2b3f7545909f7577be0d17f25c1803, matching the handoff. The built CLI prints literal 0.1.45; the export smoke prints:
```
EXPORT_OK addWorktree=function getRepo=function
```
Current registry preflight remains literal "0.1.44" for latest, while exact 0.1.45 returns E404 / No match found for version 0.1.45.
Secrets and attribution

The isolated staged-candidate reconstruction contains exactly the two declared paths. Gitleaks scanned the exact 1.24 KB binary patch and reported:
```
scanned ~1238 bytes (1.24 KB)
no leaks found
```
The independent exact Git range scan reported:
```
1 commits scanned.
scanned ~606 bytes (606 bytes)
no leaks found
```
The candidate has one commit. Its body contains exactly one Agent: Quintilian trailer and no Co-Authored-By trailer; Quintilian is the same classical-name token stored lowercased in the agent registry.

Blocking findings:

P0: none.
P1: none.

Non-blocking follow-ups: none.

Merge, tag, publish, install, and post-install live numeric-ID acceptance were deliberately not performed by this reviewer; they remain the release task's later gates.

Verdict: GO for exact head 923171fd98743ac3629ada62a66e2d5e45fd3767.

andrei-hasna · 2026-08-09T23:25:42Z

[REVIEW] GO — #73 @ 923171f — lens: correctness+security+gates, reviewer Trebius (1 of 1)

Reviewed the exact candidate against freshly fetched base 941e2ef.

What I ran:

bun install — exit 0; setup only; 496 packages installed.
bun run typecheck — exit 0; tsc --noEmit emitted no pass/fail counts.
bun run test — exit 0; 804 pass, 0 fail, Ran 804 tests across 52 files. [101.96s].
git diff --check origin/main...HEAD — exit 0; no output.
npm view @hasna/repos version --json — exit 0; "0.1.44", so the proposed 0.1.45 does not collide with the currently published version.

What I read:

git log --oneline origin/main..HEAD and the complete origin/main...HEAD diff.
Both changed files in full context: package.json and CHANGELOG.md.
The mainline implementation and focused regression described by the release entry: src/lib/worktrees.ts, src/lib/worktrees.test.ts, the getRepo exact-ID/path/name resolver in src/db/repos.ts, and the CLI call site in src/cli/index.tsx.

Blocking P0/P1 findings: none. The candidate changes only release metadata, accurately describes the already-landed numeric registry-ID fix, introduces no changed trust boundary, and passes the declared typecheck and test gates.

Non-blocking follow-ups: none.

chore(release): @hasna/repos v0.1.45

923171f

Prepare the numeric registry-ID worktree lookup fix from PR #72 for release. Agent: Quintilian

andrei-hasna merged commit 12be25f into main Aug 9, 2026
2 checks passed

andrei-hasna deleted the release/0.1.45-numeric-id branch August 9, 2026 23:26

Navigation Menu

Uh oh!

chore(release): @hasna/repos v0.1.45 - #73

chore(release): @hasna/repos v0.1.45#73
andrei-hasna merged 1 commit into
mainfrom
release/0.1.45-numeric-id

andrei-hasna commented Aug 9, 2026 •

edited by blacksmith-sh Bot

Loading

Uh oh!

andrei-hasna commented Aug 9, 2026

Uh oh!

andrei-hasna commented Aug 9, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

andrei-hasna commented Aug 9, 2026 • edited by blacksmith-sh Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Exact candidate

Release boundary

Verification

Uh oh!

andrei-hasna commented Aug 9, 2026

Uh oh!

andrei-hasna commented Aug 9, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

andrei-hasna commented Aug 9, 2026 •

edited by blacksmith-sh Bot

Loading