MARS-30 Adopt .gitpush-strict marker in Mars repo root to prevent add -A peer-WIP sweeps

MARS-30 · mars

Adopt .gitpush-strict marker in Mars repo root to prevent add -A peer-WIP sweeps

Ref: MARS-30 (#712)
Project: mars
Status: done
Priority: high
Type: task
Assigned: coder02-mars-cc coder
Created by: wi-cli-venus
Blocked reason: Coder found .gitpush-strict has a coupled side-effect (gitpush.sh v3.9 L373-378): on a website repo it also SKIPS the auto version-bump. For Mars that freezes package.json/APP_VERSION, breaking the per-push /api/app-version change that Push-to-Done live-verify + MARS-65 frozen-prod detection depend on. Decision: path C — enhance gitpush.sh so a STRICT+website repo still auto-bumps + auto-includes the version file in --only (fleet-wide; Pluto/Venus same). bin-whey-cc owns gitpush.sh; coder requesting the enhancement. Marker held until gitpush supports strict+website-bump. Interim anti-sweep = pre-push git-status-for-foreign-dirty-files (existing practice). BLOCKED on bin-whey gitpush enhancement.
Created: 2026-06-06T05:09:05.082Z
Updated: 2026-06-15T03:56:29.214Z
Closed: 2026-06-15T03:56:29.214Z

Sub-items

No sub-items.

+ Add sub-item

Questions

No questions.

Event log

2026-06-06T05:09:05.082Z · created · wi-cli-venus
2026-06-06T05:09:14.839Z · commented · wi-cli-venus

Track-only until Elazar ratifies (PM escalating). Context: MARS-29 push (2f9bdd2) swept coder-mars MARS-28 WIP + peer agent dirs because gitpush.sh --only is a NO-OP in non-strict repos — it ran git add -A. The mars-commons flock mutex only serializes pushes; it does NOT stop add -A sweeping a co-worker's uncommitted WIP. Fix (a): add a .gitpush-strict marker at Mars repo root (as sh.git/llmmsg-srv do) → every push must then pass --only <paths>, committing exactly those. Side effects requiring ratification: mars-commons push recipe must be rewritten (always --only incl. the auto-bumped version file, gitpush.sh handles via the strict branch), all push-lane agents retrained. Interim safeguard (PM ruling): mandatory stash-dance (option b). No implementation until Elazar rules.
2026-06-14T22:21:52.423Z · blocked · wi-cli-venus

Coder found .gitpush-strict has a coupled side-effect (gitpush.sh v3.9 L373-378): on a website repo it also SKIPS the auto version-bump. For Mars that freezes package.json/APP_VERSION, breaking the per-push /api/app-version change that Push-to-Done live-verify + MARS-65 frozen-prod detection depend on. Decision: path C — enhance gitpush.sh so a STRICT+website repo still auto-bumps + auto-includes the version file in --only (fleet-wide; Pluto/Venus same). bin-whey-cc owns gitpush.sh; coder requesting the enhancement. Marker held until gitpush supports strict+website-bump. Interim anti-sweep = pre-push git-status-for-foreign-dirty-files (existing practice). BLOCKED on bin-whey gitpush enhancement.
2026-06-15T03:56:29.214Z · completed · wi-cli-venus

.gitpush-strict anti-sweep marker live at mars repo root (9f1989e v2.16.48) on bin-whey's gitpush v4.0 (strict+website coexist: --only mandatory, bare gitpush aborts, auto-includes bumped package.json so PTD tracking intact). Verified real scoped push leaves stray files untracked — the MARS-49/d61ac52 sweep is now structurally impossible. Commons §Git/Push Rules updated to strict --only canonical (4b3bb36 v2.16.49). Both audit PASS + live-confirmed.