fix: add idempotency guard to sgonly verifier wrapper and hydrate incident-113 oracle

The sgonly_verifier_wrapper.sh was being sourced twice (test.sh then
eval.sh), causing double-clone of large repos like grafana and timeouts.
Added _SG_ONLY_RESTORED env guard so the second source is a no-op.
Propagated to all 224 task copies.

Also hydrated CCX-incident-113 oracle with grafana v38 migration files
(v38.go, migrations.go) and symbols (processPanelsV38, migrateOverrides).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: sjarmak

benchmarks/ccb_build/bustub-hyperloglog-impl-001/tests/sgonly_verifier_wrapper.sh

@@ -30,6 +30,13 @@ if [ ! -f /tmp/.sg_only_mode ]; then
     return 0 2>/dev/null || exit 0
 fi
 
+# Idempotency guard: skip if already sourced (avoids double-clone when
+# test.sh sources this wrapper and then eval.sh sources it again)
+if [ -n "${_SG_ONLY_RESTORED:-}" ]; then
+    return 0 2>/dev/null || exit 0
+fi
+export _SG_ONLY_RESTORED=1
+
 echo "[sg_only_verifier] Detected sg_only mode, restoring full repo..."
 
 # ---------------------------------------------------------------------------
@@ -113,6 +120,13 @@ if [ -f "$MANIFEST" ]; then
                 # Copy cloned files (except .git)
                 cd "$TMPCLONE"
                 find . -mindepth 1 -maxdepth 1 ! -name '.git' -exec cp -a {} "$CLONE_TARGET/" \;
+                # If workspace has no HEAD (bare git init), use mirror .git
+                # so that git diff HEAD works for diff-based verifiers.
+                if ! git -C "$CLONE_TARGET" rev-parse HEAD >/dev/null 2>&1; then
+                    rm -rf "$CLONE_TARGET/.git"
+                    cp -a "$TMPCLONE/.git" "$CLONE_TARGET/.git"
+                    echo "[sg_only_verifier] Replaced empty .git with mirror .git for diff baseline"
+                fi
                 cd /
                 rm -rf "$TMPCLONE"
                 echo "[sg_only_verifier] Restored $MIRROR to $CLONE_TARGET"

benchmarks/ccb_build/camel-fix-protocol-feat-001/tests/sgonly_verifier_wrapper.sh

@@ -30,6 +30,13 @@ if [ ! -f /tmp/.sg_only_mode ]; then
     return 0 2>/dev/null || exit 0
 fi
 
+# Idempotency guard: skip if already sourced (avoids double-clone when
+# test.sh sources this wrapper and then eval.sh sources it again)
+if [ -n "${_SG_ONLY_RESTORED:-}" ]; then
+    return 0 2>/dev/null || exit 0
+fi
+export _SG_ONLY_RESTORED=1
+
 echo "[sg_only_verifier] Detected sg_only mode, restoring full repo..."
 
 # ---------------------------------------------------------------------------

benchmarks/ccb_build/cgen-deps-install-001/tests/sgonly_verifier_wrapper.sh

@@ -30,6 +30,13 @@ if [ ! -f /tmp/.sg_only_mode ]; then
     return 0 2>/dev/null || exit 0
 fi
 
+# Idempotency guard: skip if already sourced (avoids double-clone when
+# test.sh sources this wrapper and then eval.sh sources it again)
+if [ -n "${_SG_ONLY_RESTORED:-}" ]; then
+    return 0 2>/dev/null || exit 0
+fi
+export _SG_ONLY_RESTORED=1
+
 echo "[sg_only_verifier] Detected sg_only mode, restoring full repo..."
 
 # ---------------------------------------------------------------------------

benchmarks/ccb_build/codecoverage-deps-install-001/tests/sgonly_verifier_wrapper.sh

@@ -30,6 +30,13 @@ if [ ! -f /tmp/.sg_only_mode ]; then
     return 0 2>/dev/null || exit 0
 fi
 
+# Idempotency guard: skip if already sourced (avoids double-clone when
+# test.sh sources this wrapper and then eval.sh sources it again)
+if [ -n "${_SG_ONLY_RESTORED:-}" ]; then
+    return 0 2>/dev/null || exit 0
+fi
+export _SG_ONLY_RESTORED=1
+
 echo "[sg_only_verifier] Detected sg_only mode, restoring full repo..."
 
 # ---------------------------------------------------------------------------

benchmarks/ccb_build/dotenv-expand-deps-install-001/tests/sgonly_verifier_wrapper.sh

@@ -30,6 +30,13 @@ if [ ! -f /tmp/.sg_only_mode ]; then
     return 0 2>/dev/null || exit 0
 fi
 
+# Idempotency guard: skip if already sourced (avoids double-clone when
+# test.sh sources this wrapper and then eval.sh sources it again)
+if [ -n "${_SG_ONLY_RESTORED:-}" ]; then
+    return 0 2>/dev/null || exit 0
+fi
+export _SG_ONLY_RESTORED=1
+
 echo "[sg_only_verifier] Detected sg_only mode, restoring full repo..."
 
 # ---------------------------------------------------------------------------

benchmarks/ccb_build/dotnetkoans-deps-install-001/tests/sgonly_verifier_wrapper.sh

@@ -30,6 +30,13 @@ if [ ! -f /tmp/.sg_only_mode ]; then
     return 0 2>/dev/null || exit 0
 fi
 
+# Idempotency guard: skip if already sourced (avoids double-clone when
+# test.sh sources this wrapper and then eval.sh sources it again)
+if [ -n "${_SG_ONLY_RESTORED:-}" ]; then
+    return 0 2>/dev/null || exit 0
+fi
+export _SG_ONLY_RESTORED=1
+
 echo "[sg_only_verifier] Detected sg_only mode, restoring full repo..."
 
 # ---------------------------------------------------------------------------

benchmarks/ccb_build/envoy-grpc-server-impl-001/tests/sgonly_verifier_wrapper.sh

@@ -30,6 +30,13 @@ if [ ! -f /tmp/.sg_only_mode ]; then
     return 0 2>/dev/null || exit 0
 fi
 
+# Idempotency guard: skip if already sourced (avoids double-clone when
+# test.sh sources this wrapper and then eval.sh sources it again)
+if [ -n "${_SG_ONLY_RESTORED:-}" ]; then
+    return 0 2>/dev/null || exit 0
+fi
+export _SG_ONLY_RESTORED=1
+
 echo "[sg_only_verifier] Detected sg_only mode, restoring full repo..."
 
 # ---------------------------------------------------------------------------

benchmarks/ccb_build/eslint-markdown-deps-install-001/tests/sgonly_verifier_wrapper.sh

@@ -30,6 +30,13 @@ if [ ! -f /tmp/.sg_only_mode ]; then
     return 0 2>/dev/null || exit 0
 fi
 
+# Idempotency guard: skip if already sourced (avoids double-clone when
+# test.sh sources this wrapper and then eval.sh sources it again)
+if [ -n "${_SG_ONLY_RESTORED:-}" ]; then
+    return 0 2>/dev/null || exit 0
+fi
+export _SG_ONLY_RESTORED=1
+
 echo "[sg_only_verifier] Detected sg_only mode, restoring full repo..."
 
 # ---------------------------------------------------------------------------

benchmarks/ccb_build/flink-pricing-window-feat-001/tests/sgonly_verifier_wrapper.sh

@@ -30,6 +30,13 @@ if [ ! -f /tmp/.sg_only_mode ]; then
     return 0 2>/dev/null || exit 0
 fi
 
+# Idempotency guard: skip if already sourced (avoids double-clone when
+# test.sh sources this wrapper and then eval.sh sources it again)
+if [ -n "${_SG_ONLY_RESTORED:-}" ]; then
+    return 0 2>/dev/null || exit 0
+fi
+export _SG_ONLY_RESTORED=1
+
 echo "[sg_only_verifier] Detected sg_only mode, restoring full repo..."
 
 # ---------------------------------------------------------------------------

benchmarks/ccb_build/flipt-dep-refactor-001/tests/sgonly_verifier_wrapper.sh

@@ -30,6 +30,13 @@ if [ ! -f /tmp/.sg_only_mode ]; then
     return 0 2>/dev/null || exit 0
 fi
 
+# Idempotency guard: skip if already sourced (avoids double-clone when
+# test.sh sources this wrapper and then eval.sh sources it again)
+if [ -n "${_SG_ONLY_RESTORED:-}" ]; then
+    return 0 2>/dev/null || exit 0
+fi
+export _SG_ONLY_RESTORED=1
+
 echo "[sg_only_verifier] Detected sg_only mode, restoring full repo..."
 
 # ---------------------------------------------------------------------------