Add beta branch-aware package workspaces - #420
Conversation
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 2 potential issues.
There are 3 total unresolved issues (including 1 from previous review).
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 35692cf. Configure here.
| "revision", | ||
| "serverRevision", | ||
| "filesystemName", | ||
| ]; |
There was a problem hiding this comment.
Manifest metadata allowlist too narrow
Medium Severity
FORBIDDEN_METADATA_FIELDS used when validating and writing remote manifest metadata is a strict subset of NON_SEMANTIC_NODE_FIELDS enforced when reading local node files. Fields such as createdBy, updatedBy, lastModifiedAt, and draft IDs can pass pull validation, get written under .package/nodes, then cause later status, push, or pull calls to reject the workspace as invalid node metadata.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit 35692cf. Configure here.
| break; | ||
| } | ||
| length = Math.min(64, length + 4); | ||
| } |
There was a problem hiding this comment.
Suffix uniqueness check always passes
Low Severity
In disambiguate, uniquePrefixes is computed with Set.add inside every. Set.add returns the set object, which is always truthy, so prefix uniqueness is never actually verified. Sibling nodes whose node-key hashes share a short prefix can receive identical derived filenames when the occupied-name check also passes.
Reviewed by Cursor Bugbot for commit 35692cf. Configure here.
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
Includes-AI-Code: true
|





Summary
Adds beta filesystem-style package workspaces with lightweight conditional manifests and incremental file synchronization.
Testing
npm run build