@fitlab-ai/agent-infra 0.5.4 → 0.5.5

package/README.md

@@ -410,7 +410,7 @@ The generated `.agents/.airc.json` file is the central contract between the boot
   "project": "my-project",
   "org": "my-org",
   "language": "en",
-  "templateVersion": "v0.5.4",
+  "templateVersion": "v0.5.5",
   "files": {
     "managed": [
       ".agents/workspace/README.md",

package/README.zh-CN.md

@@ -410,7 +410,7 @@ import-issue #42                    从 GitHub Issue 导入任务
   "project": "my-project",
   "org": "my-org",
   "language": "en",
-  "templateVersion": "v0.5.4",
+  "templateVersion": "v0.5.5",
   "files": {
     "managed": [
       ".agents/workspace/README.md",

package/lib/defaults.json

@@ -36,6 +36,7 @@
       ".claude/hooks/",
       ".gemini/commands/",
       ".github/hooks/check-version-format.sh",
+      ".github/scripts/",
       ".opencode/commands/"
     ],
     "merged": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fitlab-ai/agent-infra",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "description": "Bootstrap tool for AI multi-tool collaboration infrastructure — works with Claude Code, Codex, Gemini CLI, and OpenCode",
   "license": "MIT",
   "type": "module",

package/templates/.agents/rules/issue-pr-commands.github.en.md

@@ -99,12 +99,21 @@ gh pr list --state {state} --base {base-branch} --json number,title,url,headRefN
 Create a PR:
 
 ```bash
-gh pr create --base "{target-branch}" --title "{title}" --assignee @me --body "$(cat <<'EOF'
+gh pr create --base "{target-branch}" --title "{title}" --assignee @me \
+  {label-args} {milestone-arg} \
+  --body "$(cat <<'EOF'
 {pr-body}
 EOF
 )"
 ```
 
+- expand `{label-args}` into repeated `--label "{label}"` flags from the validated label list
+- pass `{label-args}` only when `has_triage=true`; otherwise omit it and continue
+- omit all `--label` flags when nothing valid remains
+- expand `{milestone-arg}` into `--milestone "{milestone}"`
+- pass `{milestone-arg}` only when `has_triage=true`; otherwise omit it and continue
+- omit `{milestone-arg}` entirely when no milestone should be set
+
 ## Update PRs
 
 Update PR titles, labels, or milestones with:

package/templates/.agents/rules/issue-pr-commands.github.zh-CN.md

@@ -99,12 +99,21 @@ gh pr list --state {state} --base {base-branch} --json number,title,url,headRefN
 创建 PR：
 
 ```bash
-gh pr create --base "{target-branch}" --title "{title}" --assignee @me --body "$(cat <<'EOF'
+gh pr create --base "{target-branch}" --title "{title}" --assignee @me \
+  {label-args} {milestone-arg} \
+  --body "$(cat <<'EOF'
 {pr-body}
 EOF
 )"
 ```
 
+- `{label-args}` 由调用方按有效 label 列表展开为多个 `--label "{label}"`
+- 仅当 `has_triage=true` 时传入 `{label-args}`；否则整体省略并继续
+- 没有有效 label 时省略全部 `--label`
+- `{milestone-arg}` 展开为 `--milestone "{milestone}"`
+- 仅当 `has_triage=true` 时传入 `{milestone-arg}`；否则整体省略并继续
+- `{milestone-arg}` 为空时整体省略
+
 ## PR 更新
 
 更新 PR 标题、label 或 milestone：

package/templates/.agents/rules/issue-sync.github.en.md

@@ -70,20 +70,22 @@ Decision rules:
 
 ## Direct `status:` Label Updates
 
-If task.md contains a valid `issue_number` (not empty and not `N/A`) and the Issue state is `OPEN`, replace every existing `status:` label and add the target one:
+Algorithm note: keep the flow below aligned with `.github/scripts/sync-labels-to-set.sh` (set-diff sync). This is the AI agent-side equivalent implementation for the `target_set = {"{target-status-label}"}` case. If either side changes, update the other one in the same patch to avoid drift between the agent and the bot.
+
+If task.md contains a valid `issue_number` (not empty and not `N/A`) and the Issue state is `OPEN`, sync the `status:` labels to the target value with an idempotent set diff:
 
 ```bash
 state=$(gh issue view {issue-number} -R "$upstream_repo" --json state --jq '.state' 2>/dev/null)
 if [ "$state" = "OPEN" ]; then
-  gh issue view {issue-number} -R "$upstream_repo" --json labels \
-    --jq '.labels[].name | select(startswith("status:"))' 2>/dev/null \
-  | while IFS= read -r label; do
-      [ -z "$label" ] && continue
-      if [ "$has_triage" = "true" ]; then
-        gh issue edit {issue-number} -R "$upstream_repo" --remove-label "$label" 2>/dev/null || true
-      fi
-    done
-  if [ "$has_triage" = "true" ]; then
+  current_status_labels=$(gh issue view {issue-number} -R "$upstream_repo" \
+    --json labels --jq '.labels[].name | select(startswith("status:"))' 2>/dev/null || true)
+  printf '%s\n' "$current_status_labels" | while IFS= read -r label; do
+    [ -z "$label" ] && continue
+    if [ "$label" != "{target-status-label}" ] && [ "$has_triage" = "true" ]; then
+      gh issue edit {issue-number} -R "$upstream_repo" --remove-label "$label" 2>/dev/null || true
+    fi
+  done
+  if [ "$has_triage" = "true" ] && ! printf '%s\n' "$current_status_labels" | grep -qxF "{target-status-label}"; then
     gh issue edit {issue-number} -R "$upstream_repo" --add-label "{target-status-label}" 2>/dev/null || true
   fi
 fi

package/templates/.agents/rules/issue-sync.github.zh-CN.md

@@ -70,20 +70,22 @@ current_user=$(gh api user --jq '.login' 2>/dev/null || echo "")
 
 ## status label 设置
 
-如果 task.md 中存在有效的 `issue_number`（非空、非 `N/A`），且 Issue 状态为 `OPEN`，则替换所有 `status:` label 并设置目标值：
+算法说明：下面的流程与 `.github/scripts/sync-labels-to-set.sh` 保持一致（集合差集）。本章节是 AI Agent 侧的等价实现（`target_set = {"{target-status-label}"}` 的特例）。修改任一侧时，必须同步另一侧，避免 Agent 与 Bot 的行为漂移。
+
+如果 task.md 中存在有效的 `issue_number`（非空、非 `N/A`），且 Issue 状态为 `OPEN`，则按幂等差集方式将 `status:` label 同步到目标值：
 
 ```bash
 state=$(gh issue view {issue-number} -R "$upstream_repo" --json state --jq '.state' 2>/dev/null)
 if [ "$state" = "OPEN" ]; then
-  gh issue view {issue-number} -R "$upstream_repo" --json labels \
-    --jq '.labels[].name | select(startswith("status:"))' 2>/dev/null \
-  | while IFS= read -r label; do
-      [ -z "$label" ] && continue
-      if [ "$has_triage" = "true" ]; then
-        gh issue edit {issue-number} -R "$upstream_repo" --remove-label "$label" 2>/dev/null || true
-      fi
-    done
-  if [ "$has_triage" = "true" ]; then
+  current_status_labels=$(gh issue view {issue-number} -R "$upstream_repo" \
+    --json labels --jq '.labels[].name | select(startswith("status:"))' 2>/dev/null || true)
+  printf '%s\n' "$current_status_labels" | while IFS= read -r label; do
+    [ -z "$label" ] && continue
+    if [ "$label" != "{target-status-label}" ] && [ "$has_triage" = "true" ]; then
+      gh issue edit {issue-number} -R "$upstream_repo" --remove-label "$label" 2>/dev/null || true
+    fi
+  done
+  if [ "$has_triage" = "true" ] && ! printf '%s\n' "$current_status_labels" | grep -qxF "{target-status-label}"; then
     gh issue edit {issue-number} -R "$upstream_repo" --add-label "{target-status-label}" 2>/dev/null || true
   fi
 fi

package/templates/.agents/scripts/platform-adapters/platform-sync.github.js

@@ -82,6 +82,7 @@ export function check({ taskDir, config, artifactFile }, shared) {
     checkCommentContent,
     checkTaskCommentContent,
     checkInLabelsComputed,
+    checkPrTypeLabel,
     checkInLabelsMatchPr,
     checkPrAssignee,
     checkSyncedRequirements,
@@ -251,10 +252,11 @@ function fetchRemoteData(context) {
   let prMilestone;
   let prAssignees;
   if (((context.config.verify_in_labels_match_pr && context.hasTriage)
+    || (context.config.verify_pr_type_label && context.hasTriage)
     || (context.config.verify_milestone && context.hasTriage)
     || (context.config.verify_pr_assignee && context.hasPush)) && context.prNumber) {
     const prFields = [];
-    if (context.config.verify_in_labels_match_pr) {
+    if (context.config.verify_in_labels_match_pr || context.config.verify_pr_type_label) {
       prFields.push("labels");
     }
     if (context.config.verify_milestone) {
@@ -280,7 +282,7 @@ function fetchRemoteData(context) {
       };
     }
 
-    prLabels = context.config.verify_in_labels_match_pr
+    prLabels = (context.config.verify_in_labels_match_pr || context.config.verify_pr_type_label)
       ? extractLabelNames(prResult.value?.labels)
       : null;
     prMilestone = context.config.verify_milestone
@@ -302,6 +304,22 @@ function fetchRemoteData(context) {
   };
 }
 
+function mapTaskTypeToLabel(taskType) {
+  const mapping = {
+    bug: "type: bug",
+    bugfix: "type: bug",
+    feature: "type: feature",
+    enhancement: "type: enhancement",
+    refactor: "type: enhancement",
+    refactoring: "type: enhancement",
+    documentation: "type: documentation",
+    "dependency-upgrade": "type: dependency-upgrade",
+    task: "type: task"
+  };
+
+  return mapping[taskType] || null;
+}
+
 function shouldFetchComments(config) {
   return Boolean(
     config.expected_comment_marker
@@ -481,6 +499,26 @@ function checkTaskCommentContent(context, remoteData) {
   );
 }
 
+function checkPrTypeLabel(context, remoteData) {
+  if (!context.config.verify_pr_type_label || !context.hasTriage || !context.prNumber || !remoteData.prLabels) {
+    return null;
+  }
+
+  const expectedLabel = mapTaskTypeToLabel(context.task.metadata.type);
+  if (!expectedLabel) {
+    return null;
+  }
+
+  if (remoteData.prLabels.includes(expectedLabel)) {
+    return null;
+  }
+
+  return failResult(CHECK_TYPE,
+    `Expected type label '${expectedLabel}' not found on PR #${context.prNumber}`,
+    "check_failed"
+  );
+}
+
 function checkInLabelsMatchPr(context, remoteData) {
   if (!context.config.verify_in_labels_match_pr || !context.hasTriage || !context.prNumber || !remoteData.prLabels) {
     return null;

package/templates/.agents/skills/create-pr/config/verify.json

@@ -21,6 +21,8 @@
       "when": "issue_number_exists",
       "expected_pr_comment_marker": "<!-- sync-pr:{task-id}:summary -->",
       "verify_in_labels_match_pr": true,
+      "verify_pr_type_label": true,
+      "verify_pr_assignee": true,
       "verify_milestone": true
     }
   }

package/templates/.agents/skills/create-pr/reference/pr-body-template.en.md

@@ -27,7 +27,7 @@ git diff <target-branch>...HEAD
 
 Read `.agents/rules/issue-pr-commands.md` before this step.
 
-Before syncing linked Issue metadata, complete authentication and code-hosting platform detection through that rule. Keep `gh pr list` / `gh pr edit` on the current repository.
+Before syncing linked Issue metadata, complete authentication and code-hosting platform detection through that rule. Keep `gh pr list` / `gh pr create` on the current repository.
 
 Before syncing labels, verify the standard label system:
 
@@ -52,13 +52,12 @@ Type label mapping:
 
 Metadata sync order:
 1. query Issue labels and milestone via the Issue read command in `.agents/rules/issue-pr-commands.md`
-2. handle the mapped type label via the PR update command and permission-degradation rules in `.agents/rules/issue-pr-commands.md`
-3. handle inheritance of non-`type:` and non-`status:` Issue labels via repeated PR update commands and the same permission-degradation rules
-4. copy the current Issue `in:` labels to the PR (commit already computed them, so do not recompute them here and do not write back to the Issue)
-5. handle the milestone by following "Phase 3: `create-pr`" in `.agents/rules/milestone-inference.md`, including its permission rules, and reuse the Issue milestone directly
-6. ensure the PR body contains `Closes #{issue-number}` or an equivalent closing keyword
+2. build `{label-args}` from the mapped type label, non-`type:` / non-`status:` Issue labels, and the current Issue `in:` labels (commit already computed them, so do not recompute them here and do not write back to the Issue)
+3. build `{milestone-arg}` by following "Phase 3: `create-pr`" in `.agents/rules/milestone-inference.md` and reusing the Issue milestone directly
+4. pass `{label-args}` and `{milestone-arg}` atomically to `gh pr create` by using the create-PR command template and permission-degradation rules in `.agents/rules/issue-pr-commands.md`
+5. ensure the PR body contains `Closes #{issue-number}` or an equivalent closing keyword
 
-If those rules say to skip the direct metadata writes above, keep only the PR body linkage plus later comment sync.
+If those rules say to skip the direct metadata arguments above, keep only the PR body linkage plus later comment sync.
 
 Milestone rule:
 - Follow "Phase 3: `create-pr`" in `.agents/rules/milestone-inference.md`

package/templates/.agents/skills/create-pr/reference/pr-body-template.zh-CN.md

@@ -27,7 +27,7 @@ git diff <target-branch>...HEAD
 
 执行前先读取 `.agents/rules/issue-pr-commands.md`。
 
-同步关联 Issue 元数据前，先按该规则完成认证和代码托管平台检测；`gh pr list` / `gh pr edit` 仍保持作用于当前仓库。
+同步关联 Issue 元数据前，先按该规则完成认证和代码托管平台检测；`gh pr list` / `gh pr create` 仍保持作用于当前仓库。
 
 在同步 label 之前，先确认标准 label 体系已经存在：
 
@@ -52,13 +52,12 @@ Type label 映射：
 
 元数据同步顺序：
 1. 按 `.agents/rules/issue-pr-commands.md` 的 Issue 读取命令查询关联 Issue 的 labels 和 milestone
-2. 按 `.agents/rules/issue-pr-commands.md` 的 PR 更新命令和权限降级规则处理映射后的 type label
-3. 按同一规则的 PR 更新命令和权限降级规则处理非 `type:`、非 `status:` 的 Issue labels 继承
-4. 将 Issue 当前的 `in:` labels 复制到 PR（commit 阶段已完成计算，此处不重新计算也不反向更新 Issue）
-5. 按 `.agents/rules/milestone-inference.md` 的「阶段 3：`create-pr`」及其权限规则处理 milestone，直接复用 Issue milestone
-6. 确保 PR 正文包含 `Closes #{issue-number}` 或等价的 closing keyword
+2. 构建 `{label-args}`：包含映射后的 type label、非 `type:`/`status:` 的 Issue labels，以及 Issue 当前的 `in:` labels（commit 阶段已完成计算，此处不重新计算也不反向更新 Issue）
+3. 构建 `{milestone-arg}`：按 `.agents/rules/milestone-inference.md` 的「阶段 3：`create-pr`」直接复用 Issue milestone
+4. 按 `.agents/rules/issue-pr-commands.md` 的创建 PR 命令模板与权限降级规则，将 `{label-args}` 和 `{milestone-arg}` 原子化传入 `gh pr create`
+5. 确保 PR 正文包含 `Closes #{issue-number}` 或等价的 closing keyword
 
-如果上述规则判定应跳过直接元数据写入，则只保留 PR 正文中的关联信息与后续评论同步。
+如果上述规则判定应跳过直接元数据参数写入，则只保留 PR 正文中的关联信息与后续评论同步。
 
 Milestone 规则：
 - 按 `.agents/rules/milestone-inference.md` 的「阶段 3：`create-pr`」处理

package/templates/.agents/skills/create-release-note/SKILL.en.md

@@ -54,7 +54,7 @@ Read `.agents/rules/release-commands.md` before this step.
 - When generating release notes in Step 7, **must** follow both the historical format style and the full category list gathered in Step 3
 - If no historical release notes exist, use the default format defined in Step 7
 
-### 4. Collect Merged PRs
+### 4. Collect Merged PRs and Contributors
 
 Get the date range between tags, then query merged PRs:
 
@@ -71,6 +71,17 @@ Also collect direct commits without PRs:
 git log v<prev-version>..v<version> --format="%H %s" --no-merges
 ```
 
+Collect collaborative contributors from commit `Co-authored-by` trailers:
+
+```bash
+git log v<prev-version>..v<version> \
+  --no-merges \
+  --format='%(trailers:key=Co-authored-by,valueonly,unfold)' \
+  | grep -v '^$' | sort | uniq -c | sort -rn
+```
+
+Each output line is `Name <email>` and `uniq -c` provides the number of commits where that identity appeared as a co-author within the range.
+
 ### 5. Collect Related Issues
 
 From each PR body, extract linked Issues:
@@ -115,7 +126,21 @@ If no historical release notes exist, use the following default Markdown format:
 1. Item format: `- [scope] Description by @author in [#N](url)`
 2. Issue + PR: `in [#Issue](url) and [#PR](url)`
 3. Description: Use PR title, remove `type(scope):` prefix, capitalize first letter
-4. Contributors: Deduplicated, sorted by contribution count (descending)
+4. **Contributor collection**:
+   - **Data sources**:
+     - PR authors from Step 4 `gh pr list --json author`
+     - Commit co-authors from Step 4 `git log ... --format='%(trailers:key=Co-authored-by,valueonly,unfold)'`
+   - **Contribution count**: `PR count + co-authored commit count` for the same identity, merged across both sources
+   - **Name -> `@login` mapping**:
+     - Raw `Co-authored-by` values are `Name <email>` and must be mapped to a GitHub `@login`
+     - Prefer email extraction: if it matches `(\d+\+)?(\S+?)@users\.noreply\.github\.com`, use the second capture group lowercased; this regex covers both `{id}+{login}@users.noreply.github.com` and `{login}@users.noreply.github.com`
+     - Otherwise use a Name heuristic: take the first token before a space and lowercase it, for example `Claude Opus 4.6 (1M context)` -> `@claude`, `Codex` -> `@codex`, `Gemini` -> `@gemini`
+     - If the login already appears in the PR author list, merge counts into that login so `Claude` and `@claude` do not become separate entries
+     - Merge all Name variants that map to the same login before counting and sorting; for example, `Claude` and `Claude Opus 4.6 (1M context)` should both collapse into `@claude`
+     - Preserve bot identities as-is, for example `dependabot[bot]`
+     - If the login still cannot be determined reliably, output `@{lowercased first Name token}` and append `<!-- TODO(reviewer): confirm GitHub login for {original Name <email>} -->` below the `Contributors` section
+   - **Sorting**: descending by contribution count, then lexicographically by login for ties
+   - **Deduplication**: use the final mapped `@login` as the key
 5. Empty sections: Omit sections with no entries
 
 ### 8. Present and Confirm

package/templates/.agents/skills/create-release-note/SKILL.zh-CN.md

@@ -54,7 +54,7 @@ git rev-parse v<prev-version>
 - 后续步骤 7 生成发布说明时，**必须**同时参考步骤 3 的历史格式风格和完整分类清单，保持版本间的一致性
 - 如果没有历史发布说明，则使用步骤 7 中定义的默认格式
 
-### 4. 收集已合并的 PR
+### 4. 收集已合并的 PR 与贡献者
 
 获取标签之间的日期范围，然后查询已合并的 PR：
 
@@ -71,6 +71,17 @@ git log v<version> --format=%aI -1
 git log v<prev-version>..v<version> --format="%H %s" --no-merges
 ```
 
+从 commit `Co-authored-by` trailer 中收集协作贡献者：
+
+```bash
+git log v<prev-version>..v<version> \
+  --no-merges \
+  --format='%(trailers:key=Co-authored-by,valueonly,unfold)' \
+  | grep -v '^$' | sort | uniq -c | sort -rn
+```
+
+输出每行一个 `Name <email>`（`uniq -c` 给出该身份在范围内作为 co-author 的 commit 数）。
+
 ### 5. 收集关联 Issue
 
 从每个 PR body 中提取关联的 Issue：
@@ -115,7 +126,21 @@ git log v<prev-version>..v<version> --format="%H %s" --no-merges
 1. 条目格式：`- [scope] Description by @author in [#N](url)`
 2. Issue + PR：`in [#Issue](url) and [#PR](url)`
 3. 描述：使用 PR 标题，移除 `type(scope):` 前缀，首字母大写
-4. 贡献者：去重，按贡献数量降序排列
+4. **贡献者搜集**：
+   - **数据源**：
+     - PR author：来自步骤 4 的 `gh pr list --json author`
+     - Commit co-authors：来自步骤 4 的 `git log ... --format='%(trailers:key=Co-authored-by,valueonly,unfold)'`
+   - **贡献数定义**：`该人的 PR 数 + 该人作为 co-author 的 commit 数`（同一身份跨来源合并计数）
+   - **Name → `@login` 映射**：
+     - `Co-authored-by` 原始格式为 `Name <email>`，需要推断对应的 GitHub `@login`
+     - 优先从 email 提取：匹配 `(\d+\+)?(\S+?)@users\.noreply\.github\.com` 时，取第二个捕获组并转为小写；该正则同时覆盖 `{id}+{login}@users.noreply.github.com` 与 `{login}@users.noreply.github.com`
+     - 否则按 Name 启发式：取首个空格前的 token 并转为小写（例如 `Claude Opus 4.6 (1M context)` → `@claude`、`Codex` → `@codex`、`Gemini` → `@gemini`）
+     - 已出现在 PR author 列表中的 login，必须按该 login 合并计数，避免把 `Claude` 和 `@claude` 拆成两个条目
+     - 同一 login 的所有 Name 变体都必须归并后再计数与排序；例如 `Claude` 与 `Claude Opus 4.6 (1M context)` 都映射到 `@claude` 时，应先合并为同一个贡献者
+     - Bot 身份保留原样（如 `dependabot[bot]`）
+     - 若仍无法可靠确定 login，则输出 `@{Name 首 token 小写}`，并在 `Contributors` 段落下追加 `<!-- TODO(reviewer): 确认 {原始 Name <email>} 的 GitHub login -->`
+   - **排序**：按贡献数降序；贡献数相同时按 login 字典序
+   - **去重**：以最终映射后的 `@login` 为键
 5. 空部分：省略没有条目的部分
 
 ### 8. 展示并确认

package/templates/.agents/skills/update-agent-infra/scripts/sync-templates.js

@@ -56,6 +56,7 @@ const DEFAULTS = {
       ".claude/hooks/",
       ".gemini/commands/",
       ".github/hooks/check-version-format.sh",
+      ".github/scripts/",
       ".opencode/commands/"
     ],
     "merged": [
@@ -76,7 +77,7 @@ const DEFAULTS = {
   }
 };
 
-const INSTALLER_VERSION = "v0.5.4";
+const INSTALLER_VERSION = "v0.5.5";
 const PACKAGE_NAME = '@fitlab-ai/agent-infra';
 // Add a new identifier here only after shipping matching .{platform}. template variants.
 const KNOWN_PLATFORMS = new Set(['github']);

package/templates/.github/scripts/sync-labels-to-set.sh

@@ -0,0 +1,110 @@
+#!/bin/sh
+# Ensure the labels matching --prefix on an issue or PR equal the set passed via
+# repeated --target flags (0, 1, or N labels).
+# Algorithm must stay in sync with .agents/rules/issue-sync.md.
+
+set -e
+
+usage() {
+  printf 'Usage: %s --repo <owner/repo> (--issue <number> | --pr <number>) --prefix <prefix> [--target <label> ...]\n' "$0" >&2
+  exit 1
+}
+
+append_target() {
+  if [ -n "$targets" ]; then
+    targets=$(printf '%s\n%s' "$targets" "$1")
+  else
+    targets=$1
+  fi
+}
+
+repo=""
+number=""
+kind=""
+prefix=""
+targets=""
+
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --repo)
+      [ $# -ge 2 ] || usage
+      repo=$2
+      shift 2
+      ;;
+    --issue)
+      [ $# -ge 2 ] || usage
+      [ -z "$kind" ] || usage
+      kind="issue"
+      number=$2
+      shift 2
+      ;;
+    --pr)
+      [ $# -ge 2 ] || usage
+      [ -z "$kind" ] || usage
+      kind="pr"
+      number=$2
+      shift 2
+      ;;
+    --prefix)
+      [ $# -ge 2 ] || usage
+      prefix=$2
+      shift 2
+      ;;
+    --target)
+      [ $# -ge 2 ] || usage
+      append_target "$2"
+      shift 2
+      ;;
+    *)
+      printf 'Unknown argument: %s\n' "$1" >&2
+      usage
+      ;;
+  esac
+done
+
+[ -n "$repo" ] || usage
+[ -n "$number" ] || usage
+[ -n "$kind" ] || usage
+[ -n "$prefix" ] || usage
+
+while IFS= read -r label; do
+  [ -z "$label" ] && continue
+  case "$label" in
+    "$prefix"*) ;;
+    *)
+      printf 'Target "%s" must start with prefix "%s"\n' "$label" "$prefix" >&2
+      exit 1
+      ;;
+  esac
+done <<EOF
+$targets
+EOF
+
+current_labels=$(gh "$kind" view "$number" \
+  --repo "$repo" \
+  --json labels --jq ".labels[].name | select(startswith(\"$prefix\"))" \
+  2>/dev/null || true)
+
+while IFS= read -r label; do
+  [ -z "$label" ] && continue
+  if ! printf '%s\n' "$targets" | grep -qxF "$label"; then
+    gh "$kind" edit "$number" \
+      --repo "$repo" \
+      --remove-label "$label" \
+      2>/dev/null || true
+  fi
+done <<EOF
+$current_labels
+EOF
+
+while IFS= read -r label; do
+  [ -z "$label" ] && continue
+  if ! printf '%s\n' "$current_labels" | grep -qxF "$label"; then
+    gh "$kind" edit "$number" \
+      --repo "$repo" \
+      --add-label "$label" \
+      2>/dev/null || true
+  fi
+done <<EOF
+$targets
+EOF

package/templates/.github/workflows/metadata-sync.yml

@@ -54,6 +54,13 @@ jobs:
           printf 'type=%s\n' "$type" >> "$GITHUB_OUTPUT"
           printf 'milestone=%s\n' "$milestone" >> "$GITHUB_OUTPUT"
 
+      - name: Checkout shared scripts
+        if: steps.metadata.outputs.is_task_comment == 'true' && steps.metadata.outputs.type != ''
+        uses: actions/checkout@v4
+        with:
+          sparse-checkout: .github/scripts
+          sparse-checkout-cone-mode: false
+
       - name: Sync type label
         if: steps.metadata.outputs.is_task_comment == 'true' && steps.metadata.outputs.type != ''
         env:
@@ -72,27 +79,11 @@ jobs:
           esac
 
           if [ -n "$TYPE_LABEL" ]; then
-            current_type_labels=$(gh issue view "$ISSUE_NUMBER" \
+            .github/scripts/sync-labels-to-set.sh \
               --repo "$GITHUB_REPOSITORY" \
-              --json labels --jq '.labels[].name | select(startswith("type:"))' \
-              2>/dev/null || true)
-
-            printf '%s\n' "$current_type_labels" | while IFS= read -r label; do
-              [ -z "$label" ] && continue
-              if [ "$label" != "$TYPE_LABEL" ]; then
-                gh issue edit "$ISSUE_NUMBER" \
-                  --repo "$GITHUB_REPOSITORY" \
-                  --remove-label "$label" \
-                  2>/dev/null || true
-              fi
-            done || true
-
-            if ! printf '%s\n' "$current_type_labels" | grep -qxF "$TYPE_LABEL"; then
-              gh issue edit "$ISSUE_NUMBER" \
-                --repo "$GITHUB_REPOSITORY" \
-                --add-label "$TYPE_LABEL" \
-                2>/dev/null || true
-            fi
+              --issue "$ISSUE_NUMBER" \
+              --prefix "type:" \
+              --target "$TYPE_LABEL"
           fi
 
       - name: Sync milestone

package/templates/.github/workflows/pr-label.yml

@@ -37,28 +37,19 @@ jobs:
             | map("in: " + .key)
             | .[]?')
 
-          current_labels=$(gh pr view "$PR_NUMBER" \
+          set -- \
             --repo "$GITHUB_REPOSITORY" \
-            --json labels --jq '.labels[].name | select(startswith("in: "))' \
-            2>/dev/null || true)
+            --pr "$PR_NUMBER" \
+            --prefix "in: "
 
-          printf '%s\n' "$should_labels" | while IFS= read -r label; do
+          while IFS= read -r label; do
             [ -z "$label" ] && continue
-            if ! printf '%s\n' "$current_labels" | grep -qxF "$label"; then
-              gh pr edit "$PR_NUMBER" \
-                --repo "$GITHUB_REPOSITORY" \
-                --add-label "$label" 2>/dev/null || true
-            fi
-          done
+            set -- "$@" --target "$label"
+          done <<EOF
+          $should_labels
+          EOF
 
-          printf '%s\n' "$current_labels" | while IFS= read -r label; do
-            [ -z "$label" ] && continue
-            if ! printf '%s\n' "$should_labels" | grep -qxF "$label"; then
-              gh pr edit "$PR_NUMBER" \
-                --repo "$GITHUB_REPOSITORY" \
-                --remove-label "$label" 2>/dev/null || true
-            fi
-          done
+          .github/scripts/sync-labels-to-set.sh "$@"
 
       - name: Assign PR creator if unassigned
         env:

package/templates/.github/workflows/status-label.yml

@@ -14,6 +14,16 @@ jobs:
   manage-status-labels:
     runs-on: ubuntu-latest
     steps:
+      - name: Checkout shared scripts
+        if: >-
+          (github.event_name == 'issues' && github.event.action == 'closed' && github.event.issue.state_reason == 'completed') ||
+          (github.event_name == 'issues' && github.event.action == 'reopened') ||
+          (github.event_name == 'pull_request_target' && github.event.action == 'closed' && github.event.pull_request.merged == true)
+        uses: actions/checkout@v4
+        with:
+          sparse-checkout: .github/scripts
+          sparse-checkout-cone-mode: false
+
       - name: Remove status labels on issue close
         if: >-
           github.event_name == 'issues' &&
@@ -23,16 +33,10 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           ISSUE_NUMBER: ${{ github.event.issue.number }}
         run: |
-          gh issue view "$ISSUE_NUMBER" \
+          .github/scripts/sync-labels-to-set.sh \
             --repo "$GITHUB_REPOSITORY" \
-            --json labels --jq '.labels[].name | select(startswith("status:"))' \
-            2>/dev/null \
-          | while IFS= read -r label; do
-              [ -z "$label" ] && continue
-              gh issue edit "$ISSUE_NUMBER" \
-                --repo "$GITHUB_REPOSITORY" \
-                --remove-label "$label"
-            done || true
+            --issue "$ISSUE_NUMBER" \
+            --prefix "status:"
 
       - name: Add triage label on issue reopen
         if: github.event_name == 'issues' && github.event.action == 'reopened'
@@ -40,23 +44,11 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           ISSUE_NUMBER: ${{ github.event.issue.number }}
         run: |
-          current_status_labels=$(gh issue view "$ISSUE_NUMBER" \
+          .github/scripts/sync-labels-to-set.sh \
             --repo "$GITHUB_REPOSITORY" \
-            --json labels --jq '.labels[].name | select(startswith("status:"))' \
-            2>/dev/null || true)
-          printf '%s\n' "$current_status_labels" | while IFS= read -r label; do
-            [ -z "$label" ] && continue
-            if [ "$label" != "status: waiting-for-triage" ]; then
-              gh issue edit "$ISSUE_NUMBER" \
-                --repo "$GITHUB_REPOSITORY" \
-                --remove-label "$label"
-            fi
-          done || true
-          if ! printf '%s\n' "$current_status_labels" | grep -qxF "status: waiting-for-triage"; then
-            gh issue edit "$ISSUE_NUMBER" \
-              --repo "$GITHUB_REPOSITORY" \
-              --add-label "status: waiting-for-triage"
-          fi
+            --issue "$ISSUE_NUMBER" \
+            --prefix "status:" \
+            --target "status: waiting-for-triage"
 
       - name: Clean status labels on PR merge
         if: >-
@@ -75,15 +67,9 @@ jobs:
               --repo "$GITHUB_REPOSITORY" \
               --json state --jq '.state')
             if [ "$state" = "CLOSED" ]; then
-              gh issue view "$issue_number" \
+              .github/scripts/sync-labels-to-set.sh \
                 --repo "$GITHUB_REPOSITORY" \
-                --json labels --jq '.labels[].name | select(startswith("status:"))' \
-                2>/dev/null \
-              | while IFS= read -r label; do
-                  [ -z "$label" ] && continue
-                  gh issue edit "$issue_number" \
-                    --repo "$GITHUB_REPOSITORY" \
-                    --remove-label "$label"
-                done || true
+                --issue "$issue_number" \
+                --prefix "status:"
             fi
           done