feat(stack): topic branch names and per-file notes in PR bodies

[ywy50]

Summary

Two improvements to what a stacked-PR run publishes.

Branch names. Stack layers were named gauntlet/stack/<tip12>/<NN>-<review>, which says nothing about the change. They now publish as review/<NN>-<review>-<topic> (e.g. review/03-sec-review-input-validation): NN is the 1-based schedule position, so merge order stays visible and sortable, and the topic is a slug cut from the layer's commit subject. Because the topic does not exist before the review commits, each layer starts under a deterministic provisional name (review/<NN>-<review>-wip-<base6>) and is renamed just before the push. Resume and recovery no longer recompute one exact name: they list local and remote branches under the deterministic review/<NN>-<review> prefix and verify each candidate by commit graph — a recovered layer must be a one-commit child of the previous layer's tip — so a same-named leftover from an older stack is rejected by ancestry, and when such a leftover occupies the topic name the new layer appends the stack's short base commit at the end. Recovery also finishes the rename for a run killed between commit and push, from the stranded commit's own subject. The preflight dry-run probe moved to the same review/ namespace, and review/ branches are excluded from merge-target listings the same way gauntlet/ already was.

PR bodies. The ## Changes section listed bare paths. The runner now parses the per-file PATH: <file>: <what was done> lines the review protocol already asks for and renders them beside the paths (- \path` — what was done). Notes are matched against the layer's own commit, so a note naming a file the commit never touched is dropped; each note is flattened, length-bounded, and backtick-neutralized like every other untrusted value in the body, and the whole body is now capped. A layer with no usable notes renders exactly what it rendered before. rules/suffix.md` now spells out the parseable line form.

Testing

• make check and make test (full suite, race detector, shuffled) pass.
• Stacked mode exercised end to end against the fake-remote/fake-gh harness, including new tests for: a stale same-named branch from an older stack rejected by ancestry and disambiguated on publish; recovery finishing the rename of a committed-but-unpushed provisional layer without rerunning the agent; per-file notes rendered in the body and notes for untouched paths dropped.
• New unit tests for branch naming (check-ref-format validity under hostile subjects, topic budget), prefix listing/rename primitives, ParseFileNotes (dedupe, sanitization, bounds), and hostile-input body rendering (markdown injection, unbalanced backticks, long paths).

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Team

Run ID: 5a625ed0-6b28-453b-94a7-d208a6349524

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}