chore!: rename the Go module path to umbra #285

Merged
coilysiren merged 1 commit from chore/rename-module-path into main 2026-08-14 03:06:12 +00:00
Member

The repo has been coilyco-flight-deck/umbra on Forgejo for a while; the module path had not caught up. It is now forgejo.coilysiren.me/coilyco-flight-deck/umbra, and the product name in prose follows it.

151 files, 463 lines, purely mechanical. Full gate green (build, vet, tidy, test, lint 0 issues).

BREAKING, but not disruptive: consumers requiring the old path must bump. They pin specific commits per the v0.x contract, so nothing breaks until each chooses to.

Deliberately NOT renamed

Four things carry the old name on purpose. Each would be a silent breakage, not a compile error.

CLIGUARD_JAILED / CLIGUARD_NO_SANDBOX / CLIGUARD_REALBIN_*

A runtime env contract, set in 10+ live places across two other repos: agentic-os (ci.yml, promote.yml, docker/dev-base/verify-common.sh, tests/test_aosguard.py) and coilyco-bridge/deploy (six deploy workflows). Renaming these stops those opt-outs from being honoured with no error at all - the sandbox posture in CI changes silently. Wants a release that accepts both spellings before the old one drops.

pkg/config.FallbackAppDir = ".cli-guard"

A live on-disk path. ~/.cli-guard/audit/<repo-slug>.jsonl holds real audit logs and is documented in the kai-linux-env skill. Changing it orphans existing history - that is a migration, not a rename.

DepLock.CLIGuard and its json:"cliGuard" tag

Serialized into every consumer's specverb.lock. AOS's committed lock currently reads "cliGuard": "v0.132.0". Renaming the tag turns an old lock into a silently empty ref rather than a loud mismatch. Belongs with a deliberate lock-format change, alongside the exported CLIGuardRef / CLIGuardReplace / DefaultCLIGuardRef identifiers.

github.com/coilysiren/cli-guard URLs - 23 refs across 6 files

The GitHub mirror still carries the old name and answers 200; github.com/coilysiren/umbra 404s. Renaming these now points the README badges, docs links and mkdocs.yml repo_url at dead pages. Unblocks as soon as the mirror is renamed. (Both coilysiren.github.io Pages URLs already 404 independently of this, so the docs site is not currently published either way.)

Follow-up required in AOS

.specgen/guardfiles/specverb.lock still pins the old module path (3 occurrences). specgen gen was verified working against the renamed tree and emits the new path, but AOS needs a specgen lock re-run after this ships, plus its Dockerfile, scripts/aos-release-build.sh, scripts/ci/repo-test-gate.sh and aos-cli/repositories/sealed-repos.gitignore updated - 5 files carrying the path.

ward (104 files) and mcp-beaver (7 files) each need their own bump when convenient; both keep building on their current pins until then.

Refs #282.

The repo has been `coilyco-flight-deck/umbra` on Forgejo for a while; the module path had not caught up. It is now `forgejo.coilysiren.me/coilyco-flight-deck/umbra`, and the product name in prose follows it. 151 files, 463 lines, purely mechanical. Full gate green (`build`, `vet`, `tidy`, `test`, `lint` 0 issues). **BREAKING**, but not disruptive: consumers requiring the old path must bump. They pin specific commits per the v0.x contract, so nothing breaks until each chooses to. ## Deliberately NOT renamed Four things carry the old name on purpose. Each would be a silent breakage, not a compile error. ### `CLIGUARD_JAILED` / `CLIGUARD_NO_SANDBOX` / `CLIGUARD_REALBIN_*` A runtime env contract, set in **10+ live places across two other repos**: agentic-os (`ci.yml`, `promote.yml`, `docker/dev-base/verify-common.sh`, `tests/test_aosguard.py`) and coilyco-bridge/deploy (six deploy workflows). Renaming these stops those opt-outs from being honoured **with no error at all** - the sandbox posture in CI changes silently. Wants a release that accepts both spellings before the old one drops. ### `pkg/config.FallbackAppDir = ".cli-guard"` A live on-disk path. `~/.cli-guard/audit/<repo-slug>.jsonl` holds real audit logs and is documented in the kai-linux-env skill. Changing it orphans existing history - that is a migration, not a rename. ### `DepLock.CLIGuard` and its `json:"cliGuard"` tag Serialized into every consumer's `specverb.lock`. AOS's committed lock currently reads `"cliGuard": "v0.132.0"`. Renaming the tag turns an old lock into a **silently empty ref** rather than a loud mismatch. Belongs with a deliberate lock-format change, alongside the exported `CLIGuardRef` / `CLIGuardReplace` / `DefaultCLIGuardRef` identifiers. ### `github.com/coilysiren/cli-guard` URLs - 23 refs across 6 files The GitHub mirror still carries the old name and answers **200**; `github.com/coilysiren/umbra` **404s**. Renaming these now points the README badges, docs links and `mkdocs.yml` `repo_url` at dead pages. Unblocks as soon as the mirror is renamed. (Both `coilysiren.github.io` Pages URLs already 404 independently of this, so the docs site is not currently published either way.) ## Follow-up required in AOS `.specgen/guardfiles/specverb.lock` still pins the old module path (3 occurrences). `specgen gen` was verified working against the renamed tree and emits the new path, but AOS needs a `specgen lock` re-run after this ships, plus its `Dockerfile`, `scripts/aos-release-build.sh`, `scripts/ci/repo-test-gate.sh` and `aos-cli/repositories/sealed-repos.gitignore` updated - 5 files carrying the path. ward (104 files) and mcp-beaver (7 files) each need their own bump when convenient; both keep building on their current pins until then. Refs #282.
chore!: rename the Go module path to umbra
All checks were successful
ci / lint (pull_request) Successful in 29s
ci / test (pull_request) Successful in 45s
ci / secrets (pull_request) Successful in 7s
45a76dbf84
The repo has been coilyco-flight-deck/umbra on Forgejo for a while; the
module path had not caught up. It now reads
`forgejo.coilysiren.me/coilyco-flight-deck/umbra`, and the product name in
prose follows it.

BREAKING: consumers requiring the old path must bump. They pin specific
commits per the v0.x contract, so nothing breaks until they choose to.

Deliberately NOT renamed, each for a reason:

  CLIGUARD_JAILED / CLIGUARD_NO_SANDBOX / CLIGUARD_REALBIN_*
      Runtime env contract, set in 10+ live places across agentic-os and
      coilyco-bridge/deploy (ci.yml, promote.yml, verify-common.sh,
      test_aosguard.py, six deploy workflows). Renaming silently stops
      those opt-outs and changes sandbox posture in CI with no error.
      Wants a release that accepts both names before the old one drops.

  pkg/config.FallbackAppDir = ".cli-guard"
      A live on-disk path. ~/.cli-guard/audit/<repo-slug>.jsonl holds real
      audit logs and is documented in kai-linux-env. Changing it orphans
      history; wants a migration, not a rename.

  DepLock.CLIGuard `json:"cliGuard"` and the CLIGuard* identifiers
      The json tag is serialized into every consumer's specverb.lock.
      Renaming it turns an old lock into a silently empty ref instead of a
      loud mismatch. Belongs with a lock-format change.

  github.com/coilysiren/cli-guard URLs (23 refs, 6 files)
      The GitHub mirror still carries the old name and answers 200; umbra
      404s. Renaming these now would point the README badges, docs links
      and mkdocs repo_url at dead pages. Unblocks once the mirror is
      renamed.

Verified: full gate green, and specgen renders AOS guardfiles emitting the
new module path. AOS's committed specverb.lock still pins the old path and
needs a `specgen lock` re-run after this ships.

Co-authored-by: Kai Siren <coilysiren@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
coilyco-flight-deck/umbra!285
No description provided.