chore(research-radar): pin shared-intake shadow dependency#8
Conversation
Why: - Research Radar needs a concrete consumer contract for shared-intake-governance instead of silently following whatever upstream checkout is current. - Consumer projects need a clear upgrade path: bump a pinned shared-intake commit, validate local configs, then run shadow before changing automation. What changed: - Add a shared-intake consumer lock, profile, and source configs for Research Radar. - Add a dependency preflight helper that verifies the pinned shared-intake commit and validates the consumer-owned profile/source configs through the shared CLI. - Add a manual shadow runner that uses the locked dependency and writes only shared runtime artifacts outside git. - Document the version bump workflow and keep the existing run_daily.py automation path unchanged. - Add Python unittest coverage for lock validation, root resolution, commit mismatch handling, and preflight command ordering. Testing: - python3 -m unittest tests.test_research_radar_shared_intake_dependency - python3 -m py_compile research-radar/bin/check_shared_intake_dependency.py research-radar/bin/run_shared_shadow.py tests/test_research_radar_shared_intake_dependency.py - python3 research-radar/bin/check_shared_intake_dependency.py --shared-repo-root /Users/vi/personal/heurema/shared-intake-governance - python3 research-radar/bin/run_shared_shadow.py --shared-repo-root /Users/vi/personal/heurema/shared-intake-governance --runtime-root /tmp/code-intel-kernel-shared-intake-shadow --source-id rust-analyzer --output-id 2026-06-08-smoke - bash scripts/run-deterministic-tests.sh Not tested: - Full all-source shadow run was not run to avoid broad external network dependence in this slice. - Scheduled Codex App automation was not changed or run. Risk: - narrow - this adds a manual shadow/preflight path and docs without changing the scheduled Research Radar collector. Directive: - Do not point Research Radar automation at a new shared-intake revision unless this consumer lock is bumped and preflight/shadow checks pass.
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 5b49dc923b
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
|
|
||
| def actual_git_commit(shared_repo_root: Path) -> str: | ||
| completed = subprocess.run( | ||
| ["git", "rev-parse", "HEAD"], |
There was a problem hiding this comment.
Reject dirty shared-intake checkouts
When the shared checkout has uncommitted edits but HEAD is still the pinned commit, this preflight passes even though run_shared_cli() executes the modified working tree via PYTHONPATH. That breaks the lock's guarantee that Research Radar is validated against the exact shared-intake version; add a dirty/untracked-worktree check before trusting the checkout.
Useful? React with 👍 / 👎.
Summary
heurema/shared-intake-governancecommitc9a28c55c95267d5e6ff09435cf6d2ff39a2bef9.run_daily.pyautomation stays unchanged.Issue
Test plan
python3 -m unittest tests.test_research_radar_shared_intake_dependencypython3 -m py_compile research-radar/bin/check_shared_intake_dependency.py research-radar/bin/run_shared_shadow.py tests/test_research_radar_shared_intake_dependency.pypython3 research-radar/bin/check_shared_intake_dependency.py --shared-repo-root /Users/vi/personal/heurema/shared-intake-governancepython3 research-radar/bin/run_shared_shadow.py --shared-repo-root /Users/vi/personal/heurema/shared-intake-governance --runtime-root /tmp/code-intel-kernel-shared-intake-shadow --source-id rust-analyzer --output-id 2026-06-08-smokebash scripts/run-deterministic-tests.shRisk
Merge strategy recommendation