Skip to content

refactor: rename recall→ask, fix multi-repo bootstrap, add security s…#15

Merged
josephgoksu merged 4 commits intomainfrom
refactor/recall-to-ask-and-security-scanning
Feb 21, 2026
Merged

refactor: rename recall→ask, fix multi-repo bootstrap, add security s…#15
josephgoksu merged 4 commits intomainfrom
refactor/recall-to-ask-and-security-scanning

Conversation

@josephgoksu
Copy link
Copy Markdown
Owner

…canning

Rename:

  • DB column suggested_recall_queries → suggested_ask_queries with migration
  • Go variable recallLimit → candidateLimit (IR terminology preserved)
  • Stale comments referencing /tw-brief and recall updated throughout
  • CLAUDE.md, AGENTS.md, GEMINI.md slash commands synced with registry
  • Shell scripts, architecture docs, and training data updated

Bootstrap fixes:

  • Fix 100% evidence rejection in multi-repo mode by prefixing evidence file paths with service-relative directory before verification
  • Fix split-brain database: refresh project context after init creates local .taskwing/ so ingestion writes to correct DB
  • Handle workspace-relative git paths in verification agent

Cleanup:

  • Remove removedLegacySlashCommands backward compatibility mechanism
  • Fix stale /tw-brief references in DemoSection, WORKFLOW_CONTRACT

Security:

  • Add CodeQL workflow for Go static analysis
  • Add Trivy workflow with filesystem and binary vulnerability scanning

…canning

Rename:
- DB column suggested_recall_queries → suggested_ask_queries with migration
- Go variable recallLimit → candidateLimit (IR terminology preserved)
- Stale comments referencing /tw-brief and recall updated throughout
- CLAUDE.md, AGENTS.md, GEMINI.md slash commands synced with registry
- Shell scripts, architecture docs, and training data updated

Bootstrap fixes:
- Fix 100% evidence rejection in multi-repo mode by prefixing evidence
  file paths with service-relative directory before verification
- Fix split-brain database: refresh project context after init creates
  local .taskwing/ so ingestion writes to correct DB
- Handle workspace-relative git paths in verification agent

Cleanup:
- Remove removedLegacySlashCommands backward compatibility mechanism
- Fix stale /tw-brief references in DemoSection, WORKFLOW_CONTRACT

Security:
- Add CodeQL workflow for Go static analysis
- Add Trivy workflow with filesystem and binary vulnerability scanning
@github-advanced-security
Copy link
Copy Markdown

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

Remove newPostHogClientWithEnqueuer (unused after test file deletion)
and integration-opencode CI job (tests/integration/ no longer exists).
UpsertNodeBySummary takes Node by value, so the ID generated inside
the store never propagates back to the caller. Generate node ID in
AddNode before passing to the store.
Add missing `taskwing ask` to core_commands partial and re-sync all
target files (README, CLAUDE, GEMINI, TUTORIAL, PRODUCT_VISION) to
match the canonical partials.
@josephgoksu josephgoksu merged commit 6f109da into main Feb 21, 2026
8 checks passed
@josephgoksu josephgoksu deleted the refactor/recall-to-ask-and-security-scanning branch February 21, 2026 19:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants