From 6fed424b470bfeba1379f53dbb20683d5012efaa Mon Sep 17 00:00:00 2001 From: Howard Enos Date: Sun, 21 Jun 2026 14:19:01 -0700 Subject: [PATCH] sync: auto-sync from HOWARD-HOME at 2026-06-21 14:18:27 Author: Howard Enos Machine: HOWARD-HOME Timestamp: 2026-06-21 14:18:27 --- .claude/scripts/sync.sh | 13 +++++++++++-- errorlog.md | 8 ++++++++ 2 files changed, 19 insertions(+), 2 deletions(-) diff --git a/.claude/scripts/sync.sh b/.claude/scripts/sync.sh index 1b6791fd..7bef1506 100755 --- a/.claude/scripts/sync.sh +++ b/.claude/scripts/sync.sh @@ -335,8 +335,17 @@ if [ -f ".gitmodules" ] && git config --file .gitmodules --get-regexp '^submodul ;; esac fi - # Populate if missing (fresh clone) at the pinned commit. - git submodule update --init -- "$ppath" >/dev/null 2>&1 + # Populate ONLY if missing (fresh clone). Do NOT re-run on an + # already-populated submodule: `git submodule update` checks out the + # parent's pinned gitlink (which CLAUDE.md intentionally lets lag main) + # in DETACHED HEAD, clobbering whatever branch / in-progress work the + # developer has checked out in the submodule and reverting it to the + # stale pin. (Friction 2026-06-21: this silently reset guru-rmm to a + # 5-commits-stale commit on every sync โ€” detaching HEAD, discarding + # uncommitted edits, and making the working tree lag main.) + if ! git -C "$ppath" rev-parse --git-dir >/dev/null 2>&1; then + git submodule update --init -- "$ppath" >/dev/null 2>&1 + fi # Reconcile this submodule's git identity to match identity.json โ€” same # guarantee the parent repo gets at sync.sh:157-158. Without this, commits # in newly-cloned submodules land under the system default (e.g. diff --git a/errorlog.md b/errorlog.md index 43f5a8f4..b95e2ef4 100644 --- a/errorlog.md +++ b/errorlog.md @@ -17,6 +17,14 @@ Categories (the `[type]` tag): _(none)_ = skill/command execution failure ยท +2026-06-21 | Howard-Home | bitdefender | GravityZone API error [network.assignPolicy]: The 'inheritFromAbove' parameter should not be used with 'policyId' or 'forcePolicyInheritance' parameter. [ctx: cmd=raw] + +2026-06-21 | Howard-Home | bitdefender | GravityZone API error [network.assignPolicy]: The 'inheritFromAbove' parameter should not be used with 'policyId' or 'forcePolicyInheritance' parameter. [ctx: cmd=raw] + +2026-06-21 | Howard-Home | bitdefender | GravityZone API error [network.assignPolicy]: The 'inheritFromAbove' parameter should not be used with 'policyId' or 'forcePolicyInheritance' parameter. [ctx: cmd=raw] + +2026-06-21 | Howard-Home | bitdefender | GravityZone API error [network.assignPolicy]: The 'inheritFromAbove' parameter should not be used with 'policyId' or 'forcePolicyInheritance' parameter. [ctx: cmd=assign-policy] + 2026-06-21 | Howard-Home | rmm-audit/submodule | [friction] Audit agents read the guru-rmm WORKING TREE which the background auto-sync had pinned at a stale gitlink (2e469f1, 5 commits behind origin/main). One MEDIUM finding (500-body info-disclosure, 17 sites) was ALREADY FIXED in main (commit 58c1a96) โ€” wasted a fix attempt on already-fixed code. FIX: before any audit/analysis that reads the working tree, assert the submodule HEAD == origin/main (git rev-parse HEAD vs origin/main); if behind, checkout origin/main first OR have agents read 'git show origin/main:'. Always re-verify a finding against the real target ref before fixing. Root cause shared with the detached-HEAD friction: submodule pinned behind main + auto-sync resets the working tree to the stale gitlink. [ctx: ref=git/submodule detached-HEAD friction] 2026-06-21 | Howard-Home | bitdefender | GravityZone API error [network.createUninstallSecurityAgentTask]: The requested API method not found. [ctx: cmd=raw]