feat: harden stack alpha workflows

Author: roodboi

README.md

@@ -12,19 +12,32 @@ drift clearly, and favors repairable workflows over hidden automation.
 - per-worktree operation journals for interrupted rebases
 - command-first UX with polished terminal output
 - read-only Bubble Tea dashboard for stack inspection
+- deterministic restack and recovery scaffolding
+- explicit submit, sync, move, and queue command flows
 - `git` and `gh` CLI only
 - no GraphQL, no backend, no synthetic refs
 
-## First Commands
+## Implemented Commands
 
 - `stack init`
 - `stack create <branch>`
 - `stack track <branch> --parent <parent>`
 - `stack status`
 - `stack tui`
+- `stack restack`
+- `stack continue`
+- `stack abort`
+- `stack submit`
+- `stack sync`
+- `stack move`
+- `stack queue`
 
-Later phases add restack, submit, sync, move, queue, and recovery commands on
-top of the same state model.
+## Current Caveats
+
+- restack and sync safety are implemented, but still need deeper fixture coverage
+- GitHub sandbox coverage for submit, sync, and queue still needs expansion
+- the TUI is intentionally read-only in the current alpha
+- ambiguous merged-parent repair cases stop for review instead of guessing
 
 ## Tooling
 
@@ -41,10 +54,10 @@ top of the same state model.
 ```bash
 mise install
 mise exec -- go test ./...
+mise exec -- go build ./...
 mise exec -- go run ./cmd/stack status
 ```
 
 ## Design
 
 The reduced V1 design lives at [docs/v1.md](docs/v1.md).
-

docs/v1.md

@@ -14,16 +14,13 @@
 - shared graph state: `$(git rev-parse --git-common-dir)/stack/state.json`
 - per-worktree op journal: `$(git rev-parse --git-dir)/stack/op.json`
 
-## Alpha Commands
+## Implemented Alpha Commands
 
 - `stack init`
 - `stack create`
 - `stack track`
 - `stack status`
 - `stack tui`
-
-## Next Commands
-
 - `stack restack`
 - `stack continue`
 - `stack abort`
@@ -32,3 +29,16 @@
 - `stack move`
 - `stack queue`
 
+## Current Guardrails
+
+- write operations refuse to run when repo-level metadata has hard errors
+- restack refuses invalid anchors and does not guess a merge base
+- interrupted restacks are recorded per worktree and validated before resume
+- submit fetches first, previews intended changes, and uses explicit lease-protected pushes
+- queue handoff refuses stale remote heads, draft PRs, and non-trunk PR bases
+
+## Current Gaps
+
+- merged-parent repair logic is conservative and only auto-applies clean cases
+- submit, sync, and queue still need broader GitHub sandbox coverage
+- the TUI is read-only and focused on inspection, not editing