mirror of
https://github.com/paperclipai/agent-plugins.git
synced 2026-11-07 06:15:58 -10:00
41 lines
2.3 KiB
Markdown
41 lines
2.3 KiB
Markdown
# Vendor complete snapshots with an explicit source revision
|
|
|
|
`pstack` is a plain copy of the tracked files in
|
|
[paperclipai/poteto-stack](https://github.com/paperclipai/poteto-stack), imported at
|
|
`37d2ddde97aaef8017ccef811e682948f421062d` on 2026-10-10. It is committed as ordinary
|
|
files: no nested repository, Git submodule, or subtree integration.
|
|
|
|
`pstack.lock.json` records every imported file's SHA-256 hash and executable bit.
|
|
Run `python3 scripts/verify_vendor.py` from the repository root to detect changed,
|
|
missing, or extra snapshot files. The lock records the installed snapshot,
|
|
including the local patches listed below; it is not a cryptographic signature
|
|
of upstream authorship. `revision` identifies the upstream base, while
|
|
`local_patches` records each patched file and its original upstream hash.
|
|
|
|
Keep `pstack/LICENSE`, `NOTICE.md`, `UPSTREAM.md`, and `metadata/` intact. The
|
|
Paperclip fork itself records its earlier import from Cursor and its portability
|
|
changes. This outer lock records the specific Paperclip revision we vendored.
|
|
|
|
To update, fetch the desired upstream revision into a temporary checkout, compare
|
|
it with this snapshot, then replace the tracked files and regenerate the outer
|
|
lock after reviewing the differences. Preserve executable bits and check for
|
|
removed files. Keep adaptations in our own packaging where possible; if a vendor
|
|
patch is necessary, document it explicitly instead of hiding it in a refreshed hash.
|
|
|
|
The upstream `scripts/validate.py` calls `git show 89b26b3:...` against its original
|
|
import history. That history deliberately is not included here, so use our outer
|
|
snapshot verifier for preservation. Run upstream history-dependent checks in an
|
|
upstream clone. The upstream installation documentation and scripts are otherwise
|
|
preserved unchanged.
|
|
|
|
## Local patches
|
|
|
|
- **2026-10-21 — `skills/principle-boundary-discipline/SKILL.md`:** expand the
|
|
principle to cover module ownership, justification of shared changes, delivery
|
|
scope, and verification across consumers. Preserve its explicit invocation
|
|
policy. This is an intentional local addition requested by the library owner.
|
|
|
|
Reconcile these patches during upstream updates rather than silently discarding
|
|
or attributing them to upstream. The vendored upstream metadata remains the
|
|
imported baseline; this file and the outer lock record our subsequent patches.
|