@elalfner/relevo 0.4.0 → 0.5.0

package/scripts/lib/init.mjs

@@ -8,12 +8,14 @@
 import { loadConfig } from './config.mjs';
 import { LEGACY_PLATFORMS } from './platforms.mjs';
 import { labelDefinitions } from './labels.mjs';
+import { agentWorkflow } from './agent-workflow.mjs';
 import { OPENSPEC_INSTALL, REQUIRED_SKILLS, SKILL_INSTALL, WORKFLOW_FILES } from './doctor.mjs';
 
 export const REVIEW_MODES = ['none', 'peer', 'roles'];
 
 export const RUNS = ['cloud', 'local', 'both'];
 export const CREDENTIALS = ['api_key', 'subscription'];
+export const AGENT_BUILDS = ['claude', 'antigravity'];
 const API_KEY_LINE = '          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}';
 const TOKEN_LINE = '          # claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}';
 
@@ -87,7 +89,12 @@ export function renderConfig(template, answers = {}) {
   if (answers.specWriter !== undefined) out = set(out, 'spec_writer', answers.specWriter ?? 'null');
   if (answers.reviewMode) out = set(out, 'mode', answers.reviewMode);
   if (answers.merger) out = set(out, 'merger', answers.merger);
-  if (answers.runMaxCost !== undefined) out = set(out, 'run_max_cost', answers.runMaxCost);
+  if (answers.agentBuild === 'antigravity') {
+    // The agent has no cost limit: the limit of the run is a number of tokens, and the agent is named in its own group.
+    out = out.replace(/^(\s*)run_max_cost:[^\n]*$/m, '$1run_max_tokens: 2000000          # REQUIRED with agent.build antigravity: tokens per unattended run; choose your own');
+    out = `${out.trimEnd()}\n\n# Which agent builds in the cloud: claude (the default) or antigravity.\nagent:\n  build: antigravity\n`;
+    if (answers.runMaxTokens !== undefined) out = set(out, 'run_max_tokens', answers.runMaxTokens);
+  } else if (answers.runMaxCost !== undefined) out = set(out, 'run_max_cost', answers.runMaxCost);
   if (answers.language) out = set(out, 'language', answers.language);
   const check = loadConfig(out);
   if (!check.ok) throw new Error(`the answers produce an invalid relevo.yml: ${check.errors.map((e) => e.message).join('; ')}`);
@@ -178,6 +185,20 @@ export function planInit({ facts, answers, templates, current, admin }) {
   if (!facts.openspec) items.push(item('install.openspec', 'todo', 'Install the OpenSpec command-line tool', { install: true, command: 'npm install --global @fission-ai/openspec', detail: OPENSPEC_INSTALL }));
   REQUIRED_SKILLS.filter((n) => !facts.skills[n]).forEach((n) => items.push(item(`install.skill.${n}`, 'todo', `Install the ${n} skill`, { install: true, command: n === 'openspec-explore' ? 'openspec init' : 'npx skills add mattpocock/skills', detail: SKILL_INSTALL[n] })));
 
+  const configuredPlatforms = facts.config?.platforms ?? answers.platforms ?? (answers.platform ? { app: LEGACY_PLATFORMS[answers.platform] } : {});
+  const hasSupabase = Object.values(configuredPlatforms).some((p) => p?.stack === 'supabase');
+  if (hasSupabase) {
+    ['supabase', 'supabase-postgres-best-practices'].forEach((skill) => {
+      if (facts.skills?.[skill] === false) {
+        items.push(item(`install.skill.${skill}`, 'todo', `Install the ${skill} skill`, {
+          install: true,
+          command: `npx skills add supabase/agent-skills --skill ${skill}`,
+          detail: SKILL_INSTALL[skill] ?? `run \`npx skills add supabase/agent-skills --skill ${skill}\``,
+        }));
+      }
+    });
+  }
+
   // the plugin, declared in the project so that a teammate who clones the repository is offered it
   if (facts.pluginDeclared?.declared) items.push(item('install.plugin-project', 'ok', 'The repository declares the Relevo plugin (.claude/settings.json)'));
   else if (facts.pluginDeclared?.unreadable) items.push(item('install.plugin-project', 'manual', '.claude/settings.json is not valid JSON: fix it, then run init again to declare the Relevo plugin in the project'));
@@ -225,10 +246,13 @@ export function planInit({ facts, answers, templates, current, admin }) {
   const credential = answers.credential ?? 'api_key';
   if (!RUNS.includes(runs)) throw new Error(`runs must be one of ${RUNS.join(', ')} (got "${runs}")`);
   if (!CREDENTIALS.includes(credential)) throw new Error(`credential must be one of ${CREDENTIALS.join(', ')} (got "${credential}")`);
+  const build = answers.agentBuild ?? 'claude';
+  if (!AGENT_BUILDS.includes(build)) throw new Error(`agentBuild must be one of ${AGENT_BUILDS.join(', ')} (got "${build}")`);
   const cloudFiles = ['relevo-go.yml', 'relevo-queue.yml'];
   WORKFLOW_FILES.forEach((file) => {
     if (runs === 'local' && cloudFiles.includes(file)) return;
-    const wanted = file === 'relevo-go.yml' ? credentialLine(templates.workflows[file], credential) : templates.workflows[file];
+    const shared = file === 'relevo-go.yml' ? credentialLine(templates.workflows[file], credential) : templates.workflows[file];
+    const wanted = agentWorkflow(shared, build, templates.agentBlocks);
     const have = current.workflows[file] ?? null;
     if (have === null) items.push(item(`workflow.${file}`, 'todo', `Add .github/workflows/${file}`, { path: `.github/workflows/${file}`, content: wanted }));
     else if (have === wanted) items.push(item(`workflow.${file}`, 'ok', `.github/workflows/${file} is up to date`));
@@ -262,6 +286,9 @@ export function planInit({ facts, answers, templates, current, admin }) {
     if ((facts.secrets ?? []).includes('RELEVO_LINKS_TOKEN')) items.push(item('manual.links-token', 'ok', 'The RELEVO_LINKS_TOKEN secret exists (init never reads it)'));
     else items.push(item('manual.links-token', 'manual', `If ${links.join(', ')} ${links.length > 1 ? 'are' : 'is'} private, create a fine-grained token with read access to issues and pull requests and store it yourself as the secret RELEVO_LINKS_TOKEN (init never reads or writes it; Relevo only reads with it, and public repositories need none)`));
   }
+  if (hasSupabase) {
+    items.push(item('manual.supabase-mcp', 'manual', 'To explore your Supabase database in Claude Code or Antigravity during /relevo:think, consider connecting the Supabase MCP server (see https://supabase.com/docs/guides/ai-tools)'));
+  }
   items.push(item('manual.push', 'manual', 'Commit and push the new files to the default branch: a workflow only runs from there'));
 
   return items;

package/scripts/lib/protected-paths.mjs

@@ -2,10 +2,15 @@
 //
 // Two tiers:
 //   hard  never allowed, whatever the issue says: workflows, the Relevo configuration, the folders of skills and
-//         the file with the project rules (a defect is fixed in the code, not by rewriting the rule).
+//         the file with the project rules (a defect is fixed in the code, not by rewriting the rule), and what carries
+//         the instructions or the permissions of another agent (`.agents/`, `.gemini/`, `AGENTS.md`, `GEMINI.md`):
+//         a run that could edit them could rewrite its own instructions.
 //   soft  dependency manifests and lock files: allowed only when the issue lists them in an `Allow-paths:` line.
 
-export const HARD_PATTERNS = ['.github/', 'relevo.yml', '.relevo/', '.claude/skills/', '.agents/skills/', 'skills-lock.json'];
+export const HARD_PATTERNS = ['.github/', 'relevo.yml', '.relevo/', '.claude/skills/', '.agents/', '.gemini/', 'skills-lock.json'];
+
+// Files that an agent reads from the folder of whatever it edits, so they are protected at any depth.
+export const HARD_ANY_DEPTH = ['AGENTS.md', 'GEMINI.md'];
 
 export const SOFT_FILES = [
   'pubspec.yaml', 'pubspec.lock',
@@ -60,7 +65,8 @@ const matchesHard = (path, pattern) => {
 
 /** The hard rule a path breaks, or null. */
 export function hardRule(path, { rulesFile = null } = {}) {
-  return hardPatterns(rulesFile).find((pattern) => matchesHard(path, pattern)) ?? null;
+  const name = clean(path).split('/').pop();
+  return hardPatterns(rulesFile).find((pattern) => matchesHard(path, pattern)) ?? HARD_ANY_DEPTH.find((f) => f === name) ?? null;
 }
 
 /** Is the file a dependency manifest or lock file (soft tier)? */
@@ -87,7 +93,7 @@ export function checkProtected(paths, { allow = [], rulesFile = null } = {}) {
 
 /** Entries of an `Allow-paths:` list that name (or would cover) a hard-protected path: they can never be allowed. */
 export function hardPathsInAllow(allow, { rulesFile = null } = {}) {
-  const probes = [...HARD_PATTERNS.map((pattern) => (pattern.endsWith('/') ? `${pattern}x` : pattern)), ...ruleFiles(rulesFile)].filter(Boolean);
+  const probes = [...HARD_PATTERNS.map((pattern) => (pattern.endsWith('/') ? `${pattern}x` : pattern)), ...HARD_ANY_DEPTH, ...ruleFiles(rulesFile)].filter(Boolean);
   return (allow ?? []).filter((entry) => hardRule(entry, { rulesFile }) || probes.some((probe) => matchesGlob(probe, entry)));
 }
 

package/scripts/lib/run-usage.mjs

@@ -57,7 +57,7 @@ export function usageLine(usage, { subscription = false } = {}) {
 // Messages the Claude CLI and the API document for a usage limit, a quota or an empty credit balance. These patterns
 // are not from a failed run seen here (see docs/pilot-findings.md); a wrong guess only changes the wording of a
 // comment on a run that already failed.
-const LIMIT_RE = /usage limit|limit reached|rate[ _-]?limit|credit balance is too low|exceeded your (current )?quota|insufficient[ _]quota/i;
+const LIMIT_RE = /usage limit|limit reached|rate[ _-]?limit|credit balance is too low|exceeded your (current )?quota|quota exceeded|resource[ _]exhausted|insufficient[ _]quota/i;
 
 /** Does the log show that a usage limit, a quota or the credit was reached? */
 export function reachedUsageLimit(text) {

package/scripts/lib/select.mjs

@@ -58,3 +58,61 @@ export function select({ title, choices, defaultIndex = 0, input, output, hint =
     draw();
   });
 }
+
+/**
+ * Like `select`, but several choices can be ticked: Space (or the digit of a choice) toggles, Enter confirms.
+ * choices: [{ value, label }]; initial: the values ticked at the start. Resolves the array of ticked values in the
+ * order of `choices` (possibly empty), or null when the person cancels.
+ */
+export function selectMany({ title, choices, initial = [], input, output, hint = 'Arrows to move, Space or a number to tick, Enter to confirm, Esc to cancel' }) {
+  if (!input?.isTTY || typeof input.setRawMode !== 'function') return Promise.reject(new Error('the list needs a terminal'));
+  if (!Array.isArray(choices) || choices.length === 0) return Promise.reject(new Error('the list has no choices'));
+  return new Promise((resolve) => {
+    const ticked = new Set(initial);
+    let index = 0;
+    let drawn = 0;
+    const draw = () => {
+      const lines = [title, ...choices.map((c, i) => `${i === index ? '>' : ' '} [${ticked.has(c.value) ? 'x' : ' '}] ${i + 1}. ${c.label}`), hint];
+      output.write(`${drawn ? UP(drawn) : ''}\r${CLEAR}${lines.join('\n')}\n`);
+      drawn = lines.length;
+    };
+    const finish = (value) => {
+      input.removeListener('keypress', onKey);
+      try {
+        input.setRawMode(false);
+      } finally {
+        input.pause?.();
+        output.write(SHOW);
+      }
+      resolve(value);
+    };
+    const toggle = (i) => {
+      const v = choices[i].value;
+      if (ticked.has(v)) ticked.delete(v);
+      else ticked.add(v);
+    };
+    function onKey(str, key = {}) {
+      try {
+        if (key.ctrl && (key.name === 'c' || key.name === 'd')) return finish(null);
+        if (key.name === 'escape' || str === 'q') return finish(null);
+        if (key.name === 'return' || key.name === 'enter') return finish(choices.map((c) => c.value).filter((v) => ticked.has(v)));
+        if (key.name === 'up' || str === 'k') index = (index + choices.length - 1) % choices.length;
+        else if (key.name === 'down' || str === 'j') index = (index + 1) % choices.length;
+        else if (key.name === 'space' || str === ' ') toggle(index);
+        else if (/^[1-9]$/.test(str ?? '') && Number(str) <= choices.length) toggle(Number(str) - 1);
+        else return undefined;
+        draw();
+      } catch (err) {
+        finish(null);
+        throw err;
+      }
+      return undefined;
+    }
+    emitKeypressEvents(input);
+    input.setRawMode(true);
+    input.resume?.();
+    input.on('keypress', onKey);
+    output.write(HIDE);
+    draw();
+  });
+}

package/skills/init/SKILL.md

@@ -33,11 +33,12 @@ If `relevo.yml` already exists and is valid, skip this step. Otherwise ask, in s
 - who builds and reviews (GitHub usernames) and who writes the specs;
 - the review mode: `none` (a solo project), `peer` or `roles`;
 - the language of the hand-off messages (`en` or `es`);
-- the platforms: for each one a name, its stack (look at the project to propose one: the profiles in `${CLAUDE_PLUGIN_ROOT}/stacks/` are the stacks Relevo ships with: `flutter`, `vue` and `laravel`), the folder where it lives (`.` for a repository with one platform, `apps/web` in a monorepo) and, for a stack that has targets, which ones (for Flutter: `android`, `ios`, `web`; for Vue: `web`; Laravel has none). Several platforms in one repository are written down, but `go` builds only a repository with one for now;
+- the platforms: for each one a name, its stack (look at the project to propose one: the profiles in `${CLAUDE_PLUGIN_ROOT}/stacks/` are the stacks Relevo ships with: `flutter`, `vue`, `laravel` and `supabase`), the folder where it lives (`.` for a repository with one platform, `apps/web` in a monorepo) and, for a stack that has targets, which ones (for Flutter: `android`, `ios`, `web`; for Vue: `web`; Laravel and Supabase have none). Several platforms in one repository are written down, but `go` builds only a repository with one for now;
 - where `go` builds: in the cloud, on each person's machine, or both (the default), and, for the cloud, with an API key from the Anthropic Console (the default) or with a subscription token. A subscription's quota is shared by every run and by the interactive use of the account, so `init` sets `limits.concurrent_agents` to 1 for it. Nothing about this goes in `relevo.yml` apart from that number: the installed workflows, the secret that exists and the repository variable `RELEVO_CLOUD_GO` (`off` pauses the cloud at once, with no pull request) decide it;
 - the repositories this one depends on, if any (`owner/repo`, for example the back end of a front end): they are written to `links`, the closed list that `Depends-on: owner/repo#N` is checked against;
 - whether to create a commented `.relevo/stacks/<stack>.md` for each stack, where the project can add its own hygiene to the plugin's profile (optional; it is not committed);
-- the cost limit per unattended run in US dollars: the template's 5 is a placeholder the person must accept or change.
+- which agent builds in the cloud, only when the person says they use Antigravity: `claude` (the default) or `antigravity`. With `antigravity` the model key is `GEMINI_API_KEY`, a key made only for Relevo in its own Google Cloud project with a quota, and the limit asked below is a number of tokens (`limits.run_max_tokens`) because that agent has no cost limit; `docs/security.md` says what else it cannot enforce;
+- the cost limit per unattended run in US dollars: the template's 5 is a placeholder the person must accept or change (with `antigravity`, the token limit instead).
 
 Write the answers as JSON to a temporary file **outside the repository**, with the keys `members`, `specWriter`, `reviewMode`, `language`, `platforms` (a map of name to `{ stack, path, targets }`), `links` (a list of `owner/repo`, possibly none), `runs` (`cloud`, `local` or `both`), `credential` (`api_key` or `subscription`), `stackProfiles` (the stacks that get a profile file, possibly none) and, if given, `runMaxCost`. Never put a secret in it.
 

package/skills/review/SKILL.md

@@ -152,6 +152,16 @@ Only when `decide` exited 0.
 - `evidence.policy: local_only`: delete the `evidence/` folder now. Nothing is attached anywhere.
 - `evidence.policy: attach_to_pr`: GitHub has no API for attaching images, so you cannot upload them. List the files in `evidence/` and ask the person to drag them into the pull request description. Keep the folder until they say they did, then delete it.
 
+### 9. Return to base branch
+
+Restore the working tree to the base branch so the workspace remains clean on the base branch for other tasks or subsequent reviews, but only where that is possible: in the main checkout, and when no other worktree holds the base branch.
+
+```bash
+[ "$(git rev-parse --git-dir)" = "$(git rev-parse --git-common-dir)" ] && ! git worktree list --porcelain | grep -qx "branch refs/heads/<base>" && git switch <base>
+```
+
+If the condition does not hold (a separate worktree, or the base branch is checked out elsewhere), do not switch: say which branch the working tree stays on. If `git switch` fails, say so; it never changes the verdict or the state of the issue, because the pull request already exists.
+
 ## Report
 
 Finish with one short block: the issue, the review verdict, the checklist result, the pull request link (or why none was opened), and the issue's new state.

package/stacks/supabase.md

@@ -0,0 +1,63 @@
+---
+stack: supabase
+commands:
+  analyze: supabase db lint
+  test: supabase test db
+  format: npx prettier --write supabase/
+generated: []
+tools: [supabase, docker]
+requires_skills:
+  - supabase
+  - supabase-postgres-best-practices
+skills:
+  dev:
+    - supabase
+    - supabase-postgres-best-practices
+  qa:
+    - supabase
+    - supabase-postgres-best-practices
+  issue:
+    - supabase
+    - supabase-postgres-best-practices
+  review: []
+---
+
+# Supabase
+
+## Verification
+
+Run the verification commands from the platform directory: `analyze` (`supabase db lint`) and `test` (`supabase test db`). These commands require the Supabase CLI and a running Docker daemon.
+
+Do not claim the database schema is valid, clean, or passes tests unless you ran the commands and saw the results. All tests run hermetically against local Docker containers; never point tests at a remote Supabase project.
+
+## Questions for the issue writer
+
+- **Authorization & RLS**: Who is permitted to select, insert, update, and delete rows in these tables? Which Postgres roles (`anon`, `authenticated`) should have access?
+- **Relationships & Deletes**: If a parent row or user is deleted, what is the expected cascade behavior (`CASCADE`, `SET NULL`, or `RESTRICT`)?
+- **Storage & Files**: If files are uploaded, what are the allowed MIME types, max file sizes, and who can overwrite or delete objects?
+- **Query Performance & Filters**: Which columns will be filtered in `WHERE` clauses, sorted, or referenced in RLS policies (`auth.uid() = user_id`)?
+
+## Hygiene for the developer
+
+- Follow the official guidelines from `supabase` and `supabase-postgres-best-practices`.
+- Enable Row Level Security on every public table: `ALTER TABLE <table_name> ENABLE ROW LEVEL SECURITY;`.
+- Avoid using `auth.role()` in policies; use the `TO` clause instead (e.g. `TO authenticated` or `TO anon`).
+- Combine `TO authenticated` with an explicit ownership predicate (e.g. `(select auth.uid()) = user_id`) to prevent broken object-level authorization (BOLA / IDOR).
+- Always include both `USING` and `WITH CHECK` clauses on `UPDATE` policies so users cannot reassign ownership columns.
+- Ensure all views on tables with RLS specify `WITH (security_invoker = true)` (Postgres 15+).
+- Avoid `SECURITY DEFINER` functions in the `public` schema; if required, keep them in a private schema and validate caller identity explicitly.
+- Create an index on every foreign key column and on every column evaluated in RLS policies.
+- Structure all schema changes as versioned, timestamped migrations in `supabase/migrations/`.
+- Maintain test and sample data in `supabase/seed.sql` using idempotent statements (`INSERT ... ON CONFLICT DO NOTHING;`).
+- Write pgTAP test suites in `supabase/tests/` verifying that unauthorized or anonymous callers cannot read or modify protected rows.
+
+## What the auditor looks for in the diff
+
+- **Missing RLS**: Any table created in an exposed schema without `ENABLE ROW LEVEL SECURITY`.
+- **Incomplete Update Policies**: An `UPDATE` policy that defines `USING` but omits `WITH CHECK`.
+- **Permissive Policies**: Policies using `USING (true)` or checking only `TO authenticated` without row-ownership verification on private user data.
+- **Unprotected Views**: Views defined without `security_invoker = true`.
+- **Privilege Escalation**: `SECURITY DEFINER` functions placed in `public` or callable without `auth.uid()` checks.
+- **Missing Indexes**: Foreign key constraints or RLS filter columns without an index.
+- **Destructive Migrations**: `DROP TABLE`, `DROP COLUMN`, or `TRUNCATE` operations without explicit migration plans or rollback safety.
+- **Exposed Secrets**: Hardcoded `service_role` keys, API tokens, or service passwords in code, migrations, or seed files.

package/templates/agents/antigravity-step.yml

@@ -0,0 +1,70 @@
+# What `relevo-go.yml` and `relevo-queue.yml` run when `agent.build` in relevo.yml is `antigravity`. This file is not a
+# workflow: each block below replaces, in the shared workflow, the lines between the markers with the same name, and
+# nothing else of the workflow changes (a test checks it). Edit the shared workflow for anything that is not about the
+# agent. Written for ubuntu-latest (x86-64).
+#
+# What Antigravity CLI cannot do on its own, and what stands in for it (docs/security.md):
+#   turn and token limits  the run guard (scripts/agent-guard.mjs) reads the event stream and stops the agent; the numbers
+#                          are those of relevo.yml (limits.run_max_turns, limits.run_max_tokens)
+#   cost limit             none: the quota and the budget of the Google Cloud project that owns the key are the ceiling.
+#                          Use a key made for Relevo, in its own project, with a quota
+#   refused tools          the agent exits 0 when a tool is refused; the guard reads the refusal and fails the run
+#   closed tool list       the settings file written below: the web is denied and only listed commands are allowed. It is
+#                          a prefix list, not an operating-system boundary: `node` can run any script, as Bash can for Claude
+#   the key                GEMINI_API_KEY is an environment variable of the agent's own commands, so the agent can read it
+#   the binary             pinned by version and sha512 below; to update it, copy the url and the checksum from
+#                          https://antigravity-cli-auto-updater-974169037036.us-central1.run.app/manifests/linux_amd64.json
+
+# relevo:credential begin
+          # Without a model credential the cloud cannot build: the issue stays ready and a comment says to run it locally.
+          HAS_CREDENTIAL: ${{ secrets.GEMINI_API_KEY != '' }}
+# relevo:credential end
+
+# relevo:agent-step begin
+      # Antigravity CLI, at the version and with the checksum written here. The installer script of the vendor takes
+      # the latest version; this takes only the one that was tried.
+      - name: Install the Antigravity CLI
+        env:
+          AGY_VERSION: '1.4.4'
+          AGY_URL: https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.4-4783783166214144/linux-x64/cli_linux_x64.tar.gz
+          AGY_SHA512: 7ce149d350344c1046c7b59b6659bcc5d659f351bf3a07c6c085887d93427ceb89d927752e4ccd0844b53ffb91d33d6a49f72835ceb276c7cffdd13cfb8023b8
+        run: |
+          curl -fsSL -o "$RUNNER_TEMP/agy.tar.gz" "$AGY_URL"
+          echo "$AGY_SHA512  $RUNNER_TEMP/agy.tar.gz" | sha512sum --check --strict -
+          tar -xzf "$RUNNER_TEMP/agy.tar.gz" -C "$RUNNER_TEMP" antigravity
+          mkdir -p "$HOME/.local/bin"
+          install -m 0755 "$RUNNER_TEMP/antigravity" "$HOME/.local/bin/agy"
+          echo "$HOME/.local/bin" >> "$GITHUB_PATH"
+          [ "$("$HOME/.local/bin/agy" --version)" = "$AGY_VERSION" ] || { echo "::error::agy is not version $AGY_VERSION"; exit 1; }
+
+      # The Relevo plugin is rendered from the package unpacked in the step "Check the toolchain" and installed for the
+      # machine, so nothing is added to the working tree (the agent needs it clean). The settings of the run go to the
+      # user-level file of the CLI, outside the repository: a pull request cannot loosen them.
+      - name: Set up the Antigravity run
+        env:
+          PLATFORM: ${{ needs.decide.outputs.platform }}
+        run: |
+          for f in scripts/cli.mjs scripts/agent-guard.mjs; do
+            [ -f "$RUNNER_TEMP/relevo/$f" ] || { echo "::error::The Relevo package $RELEVO_VERSION lacks $f"; exit 1; }
+          done
+          node "$RUNNER_TEMP/relevo/scripts/cli.mjs" init --tools antigravity --scope machine --yes
+          node "$RUNNER_TEMP/relevo/scripts/agent-guard.mjs" settings --platform "$PLATFORM" --plugin-root "$RUNNER_TEMP/relevo" --out "$HOME/.gemini/antigravity-cli/settings.json"
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+
+      # The issue text is data, never instructions: the skill tells the agent so. The decision the `decide` job already
+      # made travels with the prompt, encoded so that the issue title in it is never read as an instruction. Both
+      # values reach the shell as variables, never pasted into the script.
+      - id: agent
+        env:
+          OPENSPEC_TELEMETRY: '0'
+          GH_TOKEN: ${{ github.token }}
+          GEMINI_API_KEY: ${{ secrets.GEMINI_API_KEY }}
+          ISSUE: ${{ github.event.issue.number || inputs.issue }}
+          DECISION: ${{ needs.decide.outputs.decision_b64 }}
+        run: |
+          node "$RUNNER_TEMP/relevo/scripts/agent-guard.mjs" run \
+            --prompt "/relevo:go $ISSUE --decision $DECISION" \
+            --config relevo.yml --timeout-minutes 50 \
+            --summary "$RUNNER_TEMP/relevo-guard-summary.json" --github-output "$GITHUB_OUTPUT"
+# relevo:agent-step end

package/templates/deploy-supabase.yml

@@ -0,0 +1,75 @@
+name: Deploy Supabase Migrations
+
+# Automatically applies migrations to Supabase Cloud after Relevo pull requests are merged.
+# - Push to base branch ('dev'): deploys to Staging.
+# - Push to release branch ('main'): deploys to Production (under GitHub Environment protection).
+
+on:
+  push:
+    branches:
+      - dev   # Relevo base branch (Staging)
+      - main  # Relevo release branch (Production)
+    paths:
+      - 'supabase/migrations/**'
+      - 'supabase/functions/**'
+      - 'supabase/config.toml'
+  workflow_dispatch:
+
+jobs:
+  deploy-staging:
+    name: Deploy to Staging
+    if: github.ref_name == 'dev'
+    runs-on: ubuntu-latest
+    environment: staging
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Supabase CLI
+        uses: supabase/setup-cli@v1
+        with:
+          version: latest
+
+      - name: Link and Push Migrations to Staging
+        env:
+          SUPABASE_ACCESS_TOKEN: ${{ secrets.SUPABASE_ACCESS_TOKEN }}
+        run: |
+          supabase link --project-ref ${{ secrets.SUPABASE_PROJECT_ID_STAGING }}
+          supabase db push
+
+      - name: Deploy Edge Functions (if present)
+        if: hashFiles('supabase/functions/**') != ''
+        env:
+          SUPABASE_ACCESS_TOKEN: ${{ secrets.SUPABASE_ACCESS_TOKEN }}
+        run: |
+          supabase functions deploy
+
+  deploy-production:
+    name: Deploy to Production
+    if: github.ref_name == 'main'
+    runs-on: ubuntu-latest
+    # Configure the 'production' environment in GitHub Settings > Environments with required reviewers
+    # so human approval is mandatory before this job executes.
+    environment: production
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Supabase CLI
+        uses: supabase/setup-cli@v1
+        with:
+          version: latest
+
+      - name: Link and Push Migrations to Production
+        env:
+          SUPABASE_ACCESS_TOKEN: ${{ secrets.SUPABASE_ACCESS_TOKEN }}
+        run: |
+          supabase link --project-ref ${{ secrets.SUPABASE_PROJECT_ID_PROD }}
+          supabase db push
+
+      - name: Deploy Edge Functions (if present)
+        if: hashFiles('supabase/functions/**') != ''
+        env:
+          SUPABASE_ACCESS_TOKEN: ${{ secrets.SUPABASE_ACCESS_TOKEN }}
+        run: |
+          supabase functions deploy

package/templates/workflows/relevo-digest.yml

@@ -9,7 +9,7 @@ name: relevo-digest
 # The version of @elalfner/relevo whose scripts this workflow runs. The plugin's templates carry the version they
 # were released with, and `/relevo:init` reports this file as different when it is older; change it by hand to update.
 env:
-  RELEVO_VERSION: '0.4.0'
+  RELEVO_VERSION: '0.5.0'
 
 on:
   schedule:

package/templates/workflows/relevo-go.yml

@@ -15,7 +15,7 @@ name: relevo-go
 # The version of @elalfner/relevo whose scripts this workflow runs. The plugin's templates carry the version they
 # were released with, and `/relevo:init` reports this file as different when it is older; change it by hand to update.
 env:
-  RELEVO_VERSION: '0.4.0'
+  RELEVO_VERSION: '0.5.0'
 
 on:
   issues:
@@ -82,8 +82,10 @@ jobs:
           GH_LINKS_TOKEN: ${{ secrets.RELEVO_LINKS_TOKEN }}
           GITHUB_REPOSITORY: ${{ github.repository }}
           ISSUE: ${{ github.event.issue.number || inputs.issue }}
+          # relevo:credential begin
           # Without a model credential the cloud cannot build: the issue stays ready and a comment says to run it locally.
           HAS_CREDENTIAL: ${{ secrets.ANTHROPIC_API_KEY != '' || secrets.CLAUDE_CODE_OAUTH_TOKEN != '' }}
+          # relevo:credential end
         run: node .relevo-plugin/scripts/go-plan.mjs --repo "$GITHUB_REPOSITORY" --only "$ISSUE" --apply --claim --credential "$HAS_CREDENTIAL" --github-output "$GITHUB_OUTPUT"
 
       # See the same step in `build`. A failure before the issue is claimed (the plugin cannot be cloned, the
@@ -194,6 +196,7 @@ jobs:
           echo "::error::The runner has no $missing, so nothing was built"
           exit 1
 
+      # relevo:agent-step begin
       - id: agent
         uses: anthropics/claude-code-action@v1
         env:
@@ -233,6 +236,7 @@ jobs:
             --max-budget-usd 5
             --allowedTools "Bash,Read,Write,Edit,Glob,Grep,Task"
             --disallowedTools "WebFetch,WebSearch,Bash(curl:*),Bash(wget:*)"
+      # relevo:agent-step end
 
       # The scripts of the next two steps come from the plugin package. It is unpacked into the workspace only now, after the agent has
       # finished, because the agent's preflight needs a clean working tree and a checkout inside it would not be.

package/templates/workflows/relevo-queue.yml

@@ -10,7 +10,7 @@ name: relevo-queue
 # The version of @elalfner/relevo whose scripts this workflow runs. The plugin's templates carry the version they
 # were released with, and `/relevo:init` reports this file as different when it is older; change it by hand to update.
 env:
-  RELEVO_VERSION: '0.4.0'
+  RELEVO_VERSION: '0.5.0'
 
 on:
   issues:
@@ -62,8 +62,10 @@ jobs:
           # name, never to write, and an empty value is fine (public repositories are read without it).
           GH_LINKS_TOKEN: ${{ secrets.RELEVO_LINKS_TOKEN }}
           GITHUB_REPOSITORY: ${{ github.repository }}
+          # relevo:credential begin
           # Without a model credential nothing is dispatched.
           HAS_CREDENTIAL: ${{ secrets.ANTHROPIC_API_KEY != '' || secrets.CLAUDE_CODE_OAUTH_TOKEN != '' }}
+          # relevo:credential end
         run: |
           result=$(node .relevo-plugin/scripts/requeue.mjs --repo "$GITHUB_REPOSITORY" --credential "$HAS_CREDENTIAL")
           echo "$result"

package/templates/workflows/relevo-review.yml

@@ -10,7 +10,7 @@ name: relevo-review
 # The version of @elalfner/relevo whose scripts this workflow runs. The plugin's templates carry the version they
 # were released with, and `/relevo:init` reports this file as different when it is older; change it by hand to update.
 env:
-  RELEVO_VERSION: '0.4.0'
+  RELEVO_VERSION: '0.5.0'
 
 on:
   pull_request_review:

package/templates/workflows/relevo-sla.yml

@@ -8,7 +8,7 @@ name: relevo-sla
 # The version of @elalfner/relevo whose scripts this workflow runs. The plugin's templates carry the version they
 # were released with, and `/relevo:init` reports this file as different when it is older; change it by hand to update.
 env:
-  RELEVO_VERSION: '0.4.0'
+  RELEVO_VERSION: '0.5.0'
 
 on:
   schedule: