@fitlab-ai/agent-infra 0.7.0 → 0.7.2

package/templates/.agents/skills/create-task/SKILL.en.md

@@ -22,6 +22,10 @@ After executing this skill, you **must** immediately update task status in task.
 
 Version stamp rule: when creating or updating `task.md` frontmatter, read `.agents/rules/version-stamp.md` first and write or refresh `agent_infra_version`.
 
+## Task id short ref
+
+> If `{task-id}` matches `^[#]?[0-9]+$` (bare numeric or `#`-prefixed), follow the "SKILL parameter resolver" section of `.agents/rules/task-short-id.md`; treat `{task-id}` as the resolved full `TASK-YYYYMMDD-HHMMSS` form for every downstream command.
+
 ## Steps
 
 ### 1. Parse the User Description
@@ -105,12 +109,12 @@ Update `.agents/workspace/active/{task-id}/task.md`:
 - `## Context` -> `- **Branch**:`: update it to the generated branch name
 - **Append** to `## Activity Log` (do NOT overwrite previous entries):
   ```
-  - {YYYY-MM-DD HH:mm:ss±HH:MM} — **Task Created** by {agent} — Task created from description
+  - {YYYY-MM-DD HH:mm:ss±HH:MM} — **Create Task** by {agent} — Task created from description
   ```
 
 ### 4. Cascade Issue Creation via `.agents/rules/create-issue.md`
 
-After task.md is written and `Task Created` is recorded, read `.agents/rules/create-issue.md` first and follow the steps it describes to create an Issue.
+After task.md is written and `Create Task` is recorded, read `.agents/rules/create-issue.md` first and follow the steps it describes to create an Issue.
 
 The rule's content is determined by the configured code platform:
 - A platform that supports Issue creation: contains the full flow for auth detection, template detection, label/type/milestone inference, the create-Issue call, and writing back to `task.md`
@@ -126,6 +130,14 @@ Handle the result:
 
 ### 5. Verification Gate
 
+**Allocate short id first** (ensures the registry entry is allocated; the validation gate will read it):
+
+```bash
+node .agents/scripts/task-short-id.js alloc "$task_id"
+```
+
+If this fails (non-zero exit), follow the message — archive some active tasks or raise `task.shortIdLength` — and do NOT continue.
+
 Run the verification gate to confirm the task artifact and sync state are valid:
 
 ```bash
@@ -143,14 +155,14 @@ Keep the gate output in your reply as fresh evidence. Do not claim completion wi
 
 > Execute this step only after the verification gate passes.
 
-> **IMPORTANT**: All TUI command formats listed below must be output in full. Do not show only the format for the current AI agent. If `.agents/.airc.json` configures custom TUIs (via `customTUIs`), read each tool's `name` and `invoke`, then add the matching command line in the same format (`${skillName}` becomes the skill name and `${projectName}` becomes the project name).
+> **IMPORTANT**: All TUI command formats listed below must be output in full. Do not show only the format for the current AI agent. If `.agents/.airc.json` configures custom TUIs (via `customTUIs`), read each tool's `name` and `invoke`, then add the matching command line in the same format (`${skillName}` becomes the skill name and `${projectName}` becomes the project name). Before rendering the "Next steps" commands, read `.agents/rules/next-step-output.md` and use its short-id snippet to render `{task-ref}` in the commands as the short id `#NN` (falling back to the full TASK-id when unallocated or released).
 
 Scenario A: when an Issue was created, output:
 ```
 Task created and Issue creation cascaded successfully.
 
 Task information:
-- Task ID: {task-id}
+- Task ID: {task-id} (short id {task-ref})
 - Title: {title}
 - Type: {type}
 - Workflow: {workflow}
@@ -160,9 +172,9 @@ Output file:
 - Task file: .agents/workspace/active/{task-id}/task.md
 
 Next step - run requirements analysis:
-  - Claude Code / OpenCode: /analyze-task {task-id}
-  - Gemini CLI: /{{project}}:analyze-task {task-id}
-  - Codex CLI: $analyze-task {task-id}
+  - Claude Code / OpenCode: /analyze-task {task-ref}
+  - Gemini CLI: /{{project}}:analyze-task {task-ref}
+  - Codex CLI: $analyze-task {task-ref}
 ```
 
 Scenario B: when no Issue was created, output:
@@ -170,7 +182,7 @@ Scenario B: when no Issue was created, output:
 Task created.
 
 Task information:
-- Task ID: {task-id}
+- Task ID: {task-id} (short id {task-ref})
 - Title: {title}
 - Type: {type}
 - Workflow: {workflow}
@@ -179,9 +191,9 @@ Output file:
 - Task file: .agents/workspace/active/{task-id}/task.md
 
 Next step - run requirements analysis:
-  - Claude Code / OpenCode: /analyze-task {task-id}
-  - Gemini CLI: /{{project}}:analyze-task {task-id}
-  - Codex CLI: $analyze-task {task-id}
+  - Claude Code / OpenCode: /analyze-task {task-ref}
+  - Gemini CLI: /{{project}}:analyze-task {task-ref}
+  - Codex CLI: $analyze-task {task-ref}
 ```
 
 Scenario C: when Issue creation failed, output:
@@ -189,7 +201,7 @@ Scenario C: when Issue creation failed, output:
 Task created, but cascade Issue creation failed.
 
 Task information:
-- Task ID: {task-id}
+- Task ID: {task-id} (short id {task-ref})
 - Title: {title}
 - Type: {type}
 - Workflow: {workflow}
@@ -203,13 +215,15 @@ Output file:
 - Task file: .agents/workspace/active/{task-id}/task.md
 
 Next step - run requirements analysis:
-  - Claude Code / OpenCode: /analyze-task {task-id}
-  - Gemini CLI: /{{project}}:analyze-task {task-id}
-  - Codex CLI: $analyze-task {task-id}
+  - Claude Code / OpenCode: /analyze-task {task-ref}
+  - Gemini CLI: /{{project}}:analyze-task {task-ref}
+  - Codex CLI: $analyze-task {task-ref}
 
 For later platform sync: after fixing auth / network / template issues, manually run the Issue creation flow in `.agents/rules/create-issue.md` for this task; or manually create/find an Issue and write `issue_number` into task.md so later skills can take over cascade sync.
 ```
 
+
+
 ## Completion Checklist
 
 - [ ] Created the task file `.agents/workspace/active/{task-id}/task.md`

package/templates/.agents/skills/create-task/SKILL.zh-CN.md

@@ -22,8 +22,11 @@ description: "根据自然语言描述创建任务"
 
 版本戳规则：创建或更新 `task.md` frontmatter 时，先读取 `.agents/rules/version-stamp.md`，并写入或刷新 `agent_infra_version`。
 
-## 执行步骤
+## 任务入参短号别名
+
+> 如果 `{task-id}` 入参匹配 `^[#]?[0-9]+$`（裸数字或带 `#` 前缀），先读取 `.agents/rules/task-short-id.md` 的「SKILL 入参解析」段执行解析；后续命令视 `{task-id}` 为解析后的全长 `TASK-YYYYMMDD-HHMMSS` 形式。
 
+## 执行步骤
 ### 1. 解析用户描述
 
 从自然语言描述中提取：
@@ -105,12 +108,12 @@ date "+%Y-%m-%d %H:%M:%S%:z"
 - `## 上下文` 中的 `- **分支**：`：更新为生成的分支名
 - **追加**到 `## Activity Log`（不要覆盖之前的记录）：
   ```
-  - {YYYY-MM-DD HH:mm:ss±HH:MM} — **Task Created** by {agent} — Task created from description
+  - {YYYY-MM-DD HH:mm:ss±HH:MM} — **Create Task** by {agent} — Task created from description
   ```
 
 ### 4. 按 `.agents/rules/create-issue.md` 级联创建 Issue
 
-在 task.md 落盘并记录 `Task Created` 后，先读取 `.agents/rules/create-issue.md` 并按其中描述的步骤执行 Issue 创建。
+在 task.md 落盘并记录 `Create Task` 后，先读取 `.agents/rules/create-issue.md` 并按其中描述的步骤执行 Issue 创建。
 
 规则文件由当前配置的代码平台决定其内容：
 - 支持 Issue 创建的平台：包含完整的认证检测、模板检测、label/Issue Type/milestone 推断、Issue 创建调用、`task.md` 回写流程
@@ -126,6 +129,14 @@ date "+%Y-%m-%d %H:%M:%S%:z"
 
 ### 5. 完成校验
 
+**先调用短号分配**（保证注册表 entry 已分配；完成校验阶段会读取）：
+
+```bash
+node .agents/scripts/task-short-id.js alloc "$task_id"
+```
+
+如失败（退出码非 0），按提示「归档若干任务」或「调高 task.shortIdLength」处理；不要继续执行后续步骤。
+
 运行完成校验，确认任务产物和同步状态符合规范：
 
 ```bash
@@ -143,14 +154,14 @@ node .agents/scripts/validate-artifact.js gate create-task .agents/workspace/act
 
 > 仅在校验通过后执行本步骤。
 
-> **重要**：以下「下一步」中列出的所有 TUI 命令格式必须完整输出，不要只展示当前 AI 代理对应的格式。如果 `.agents/.airc.json` 中配置了自定义 TUI（`customTUIs`），读取每个工具的 `name` 和 `invoke`，按同样格式补充对应命令行（`${skillName}` 替换为技能名，`${projectName}` 替换为项目名）。
+> **重要**：以下「下一步」中列出的所有 TUI 命令格式必须完整输出，不要只展示当前 AI 代理对应的格式。如果 `.agents/.airc.json` 中配置了自定义 TUI（`customTUIs`），读取每个工具的 `name` 和 `invoke`，按同样格式补充对应命令行（`${skillName}` 替换为技能名，`${projectName}` 替换为项目名）。 渲染「下一步」命令前，先读取 `.agents/rules/next-step-output.md`，按其取短号片段把命令中的 `{task-ref}` 渲染为短号 `#NN`（未分配/已释放时回退完整 TASK-id）。
 
 场景 A：已创建 Issue 时输出：
 ```
 任务已创建，并已级联创建 Issue。
 
 任务信息：
-- 任务 ID：{task-id}
+- 任务 ID：{task-id}（短号 {task-ref}）
 - 标题：{title}
 - 类型：{type}
 - 工作流：{workflow}
@@ -160,9 +171,9 @@ node .agents/scripts/validate-artifact.js gate create-task .agents/workspace/act
 - 任务文件：.agents/workspace/active/{task-id}/task.md
 
 下一步 - 执行需求分析：
-  - Claude Code / OpenCode：/analyze-task {task-id}
-  - Gemini CLI：/{{project}}:analyze-task {task-id}
-  - Codex CLI：$analyze-task {task-id}
+  - Claude Code / OpenCode：/analyze-task {task-ref}
+  - Gemini CLI：/{{project}}:analyze-task {task-ref}
+  - Codex CLI：$analyze-task {task-ref}
 ```
 
 场景 B：未创建 Issue 时输出：
@@ -170,7 +181,7 @@ node .agents/scripts/validate-artifact.js gate create-task .agents/workspace/act
 任务已创建。
 
 任务信息：
-- 任务 ID：{task-id}
+- 任务 ID：{task-id}（短号 {task-ref}）
 - 标题：{title}
 - 类型：{type}
 - 工作流：{workflow}
@@ -179,9 +190,9 @@ node .agents/scripts/validate-artifact.js gate create-task .agents/workspace/act
 - 任务文件：.agents/workspace/active/{task-id}/task.md
 
 下一步 - 执行需求分析：
-  - Claude Code / OpenCode：/analyze-task {task-id}
-  - Gemini CLI：/{{project}}:analyze-task {task-id}
-  - Codex CLI：$analyze-task {task-id}
+  - Claude Code / OpenCode：/analyze-task {task-ref}
+  - Gemini CLI：/{{project}}:analyze-task {task-ref}
+  - Codex CLI：$analyze-task {task-ref}
 ```
 
 场景 C：Issue 创建失败时输出：
@@ -189,7 +200,7 @@ node .agents/scripts/validate-artifact.js gate create-task .agents/workspace/act
 任务已创建，但 Issue 级联创建失败。
 
 任务信息：
-- 任务 ID：{task-id}
+- 任务 ID：{task-id}（短号 {task-ref}）
 - 标题：{title}
 - 类型：{type}
 - 工作流：{workflow}
@@ -203,13 +214,15 @@ Issue 创建失败：
 - 任务文件：.agents/workspace/active/{task-id}/task.md
 
 下一步 - 执行需求分析：
-  - Claude Code / OpenCode：/analyze-task {task-id}
-  - Gemini CLI：/{{project}}:analyze-task {task-id}
-  - Codex CLI：$analyze-task {task-id}
+  - Claude Code / OpenCode：/analyze-task {task-ref}
+  - Gemini CLI：/{{project}}:analyze-task {task-ref}
+  - Codex CLI：$analyze-task {task-ref}
 
 后续如需平台同步：修复认证/网络/模板问题后，可按 `.agents/rules/create-issue.md` 对当前任务手动执行一次 Issue 创建；或手动创建/查找 Issue，并把 `issue_number` 写入 task.md，后续技能会接管级联同步。
 ```
 
+
+
 ## 完成检查清单
 
 - [ ] 创建了任务文件 `.agents/workspace/active/{task-id}/task.md`

package/templates/.agents/skills/create-task/config/verify.json

@@ -18,7 +18,7 @@
       "expected_status": "active"
     },
     "activity-log": {
-      "expected_action_pattern": "Task Created",
+      "expected_action_pattern": "(Create Task|Task Created)",
       "freshness_minutes": 30
     },
     "platform-sync": {

package/templates/.agents/skills/import-codescan/SKILL.en.md

@@ -13,6 +13,10 @@ Import the specified Code Scanning (CodeQL) alert and create a remediation task.
 - Do NOT auto-commit. Never execute `git commit` or `git add` automatically
 - After executing this skill, you **must** immediately update task status in task.md
 
+## Task id short ref
+
+> If `{task-id}` matches `^[#]?[0-9]+$` (bare numeric or `#`-prefixed), follow the "SKILL parameter resolver" section of `.agents/rules/task-short-id.md`; treat `{task-id}` as the resolved full `TASK-YYYYMMDD-HHMMSS` form for every downstream command.
+
 ## Execution Flow
 
 ### 1. Retrieve Alert Information
@@ -53,11 +57,19 @@ date "+%Y-%m-%d %H:%M:%S%:z"
 Update task.md: `current_step` -> `requirement-analysis`.
 - **Append** to `## Activity Log` (do NOT overwrite previous entries):
   ```
-  - {YYYY-MM-DD HH:mm:ss±HH:MM} — **Import Code Scanning Alert** by {agent} — Code Scanning alert #{alert-number} imported
+  - {YYYY-MM-DD HH:mm:ss±HH:MM} — **Import Codescan** by {agent} — Code Scanning alert #{alert-number} imported
   ```
 
 ### 4. Verification Gate
 
+**Allocate short id first** (ensures the registry entry is allocated; the validation gate will read it):
+
+```bash
+node .agents/scripts/task-short-id.js alloc "$task_id"
+```
+
+If this fails (non-zero exit), follow the message — archive some active tasks or raise `task.shortIdLength` — and do NOT continue.
+
 Run the verification gate to confirm the task artifact and sync state are valid:
 
 ```bash
@@ -75,7 +87,7 @@ Keep the gate output in your reply as fresh evidence. Do not claim completion wi
 
 > Execute this step only after the verification gate passes.
 
-> **IMPORTANT**: All TUI command formats listed below must be output in full. Do not show only the format for the current AI agent. If `.agents/.airc.json` configures custom TUIs (via `customTUIs`), read each tool's `name` and `invoke`, then add the matching command line in the same format (`${skillName}` becomes the skill name and `${projectName}` becomes the project name).
+> **IMPORTANT**: All TUI command formats listed below must be output in full. Do not show only the format for the current AI agent. If `.agents/.airc.json` configures custom TUIs (via `customTUIs`), read each tool's `name` and `invoke`, then add the matching command line in the same format (`${skillName}` becomes the skill name and `${projectName}` becomes the project name). Before rendering the "Next steps" commands, read `.agents/rules/next-step-output.md` and use its short-id snippet to render `{task-ref}` in the commands as the short id `#NN` (falling back to the full TASK-id when unallocated or released).
 
 ```
 Code Scanning alert #{alert-number} imported.
@@ -86,14 +98,16 @@ Alert information:
 - Location: {file-path}:{line-number}
 
 Task information:
-- Task ID: {task-id}
+- Task ID: {task-id} (short id {task-ref})
 
 Next step:
-  - Claude Code / OpenCode: /analyze-task {task-id}
-  - Gemini CLI: /{{project}}:analyze-task {task-id}
-  - Codex CLI: $analyze-task {task-id}
+  - Claude Code / OpenCode: /analyze-task {task-ref}
+  - Gemini CLI: /{{project}}:analyze-task {task-ref}
+  - Codex CLI: $analyze-task {task-ref}
 ```
 
+
+
 ## Completion Checklist
 
 - [ ] Retrieved and recorded the key alert information

package/templates/.agents/skills/import-codescan/SKILL.zh-CN.md

@@ -13,6 +13,10 @@ description: "导入 Code Scanning 告警并创建修复任务"
 - 不要自动提交。绝不自动执行 `git commit` 或 `git add`
 - 执行本技能后，你**必须**立即更新 task.md 中的任务状态
 
+## 任务入参短号别名
+
+> 如果 `{task-id}` 入参匹配 `^[#]?[0-9]+$`（裸数字或带 `#` 前缀），先读取 `.agents/rules/task-short-id.md` 的「SKILL 入参解析」段执行解析；后续命令视 `{task-id}` 为解析后的全长 `TASK-YYYYMMDD-HHMMSS` 形式。
+
 ## 执行流程
 
 ### 1. 获取告警信息
@@ -53,11 +57,19 @@ date "+%Y-%m-%d %H:%M:%S%:z"
 更新 task.md：`current_step` -> `requirement-analysis`。
 - **追加**到 `## Activity Log`（不要覆盖之前的记录）：
   ```
-  - {YYYY-MM-DD HH:mm:ss±HH:MM} — **Import Code Scanning Alert** by {agent} — Code Scanning alert #{alert-number} imported
+  - {YYYY-MM-DD HH:mm:ss±HH:MM} — **Import Codescan** by {agent} — Code Scanning alert #{alert-number} imported
   ```
 
 ### 4. 完成校验
 
+**先调用短号分配**（保证注册表 entry 已分配；完成校验阶段会读取）：
+
+```bash
+node .agents/scripts/task-short-id.js alloc "$task_id"
+```
+
+如失败（退出码非 0），按提示「归档若干任务」或「调高 task.shortIdLength」处理；不要继续执行后续步骤。
+
 运行完成校验，确认任务产物和同步状态符合规范：
 
 ```bash
@@ -75,7 +87,7 @@ node .agents/scripts/validate-artifact.js gate import-codescan .agents/workspace
 
 > 仅在校验通过后执行本步骤。
 
-> **重要**：以下「下一步」中列出的所有 TUI 命令格式必须完整输出，不要只展示当前 AI 代理对应的格式。如果 `.agents/.airc.json` 中配置了自定义 TUI（`customTUIs`），读取每个工具的 `name` 和 `invoke`，按同样格式补充对应命令行（`${skillName}` 替换为技能名，`${projectName}` 替换为项目名）。
+> **重要**：以下「下一步」中列出的所有 TUI 命令格式必须完整输出，不要只展示当前 AI 代理对应的格式。如果 `.agents/.airc.json` 中配置了自定义 TUI（`customTUIs`），读取每个工具的 `name` 和 `invoke`，按同样格式补充对应命令行（`${skillName}` 替换为技能名，`${projectName}` 替换为项目名）。 渲染「下一步」命令前，先读取 `.agents/rules/next-step-output.md`，按其取短号片段把命令中的 `{task-ref}` 渲染为短号 `#NN`（未分配/已释放时回退完整 TASK-id）。
 
 ```
 Code Scanning 告警 #{alert-number} 已导入。
@@ -86,14 +98,16 @@ Code Scanning 告警 #{alert-number} 已导入。
 - 位置：{file-path}:{line-number}
 
 任务信息：
-- 任务 ID：{task-id}
+- 任务 ID：{task-id}（短号 {task-ref}）
 
 下一步：
-  - Claude Code / OpenCode：/analyze-task {task-id}
-  - Gemini CLI：/agent-infra:analyze-task {task-id}
-  - Codex CLI：$analyze-task {task-id}
+  - Claude Code / OpenCode：/analyze-task {task-ref}
+  - Gemini CLI：/agent-infra:analyze-task {task-ref}
+  - Codex CLI：$analyze-task {task-ref}
 ```
 
+
+
 ## 完成检查清单
 
 - [ ] 获取并记录了告警关键信息

package/templates/.agents/skills/import-codescan/config/verify.json

@@ -17,7 +17,7 @@
       "expected_status": "active"
     },
     "activity-log": {
-      "expected_action_pattern": "Import Code Scanning Alert",
+      "expected_action_pattern": "(Import Codescan|Import Code Scanning Alert)",
       "freshness_minutes": 30
     },
     "platform-sync": null

package/templates/.agents/skills/import-dependabot/SKILL.en.md

@@ -13,6 +13,10 @@ Import the specified Dependabot security alert and create a remediation task.
 - Do NOT auto-commit. Never execute `git commit` or `git add` automatically
 - After executing this skill, you **must** immediately update task status in task.md
 
+## Task id short ref
+
+> If `{task-id}` matches `^[#]?[0-9]+$` (bare numeric or `#`-prefixed), follow the "SKILL parameter resolver" section of `.agents/rules/task-short-id.md`; treat `{task-id}` as the resolved full `TASK-YYYYMMDD-HHMMSS` form for every downstream command.
+
 ## Execution Flow
 
 ### 1. Retrieve Alert Information
@@ -54,11 +58,19 @@ date "+%Y-%m-%d %H:%M:%S%:z"
 Update task.md: `current_step` -> `requirement-analysis`.
 - **Append** to `## Activity Log` (do NOT overwrite previous entries):
   ```
-  - {YYYY-MM-DD HH:mm:ss±HH:MM} — **Import Dependabot Alert** by {agent} — Dependabot alert #{alert-number} imported
+  - {YYYY-MM-DD HH:mm:ss±HH:MM} — **Import Dependabot** by {agent} — Dependabot alert #{alert-number} imported
   ```
 
 ### 4. Verification Gate
 
+**Allocate short id first** (ensures the registry entry is allocated; the validation gate will read it):
+
+```bash
+node .agents/scripts/task-short-id.js alloc "$task_id"
+```
+
+If this fails (non-zero exit), follow the message — archive some active tasks or raise `task.shortIdLength` — and do NOT continue.
+
 Run the verification gate to confirm the task artifact and sync state are valid:
 
 ```bash
@@ -76,7 +88,7 @@ Keep the gate output in your reply as fresh evidence. Do not claim completion wi
 
 > Execute this step only after the verification gate passes.
 
-> **IMPORTANT**: All TUI command formats listed below must be output in full. Do not show only the format for the current AI agent. If `.agents/.airc.json` configures custom TUIs (via `customTUIs`), read each tool's `name` and `invoke`, then add the matching command line in the same format (`${skillName}` becomes the skill name and `${projectName}` becomes the project name).
+> **IMPORTANT**: All TUI command formats listed below must be output in full. Do not show only the format for the current AI agent. If `.agents/.airc.json` configures custom TUIs (via `customTUIs`), read each tool's `name` and `invoke`, then add the matching command line in the same format (`${skillName}` becomes the skill name and `${projectName}` becomes the project name). Before rendering the "Next steps" commands, read `.agents/rules/next-step-output.md` and use its short-id snippet to render `{task-ref}` in the commands as the short id `#NN` (falling back to the full TASK-id when unallocated or released).
 
 ```
 Security alert #{alert-number} imported.
@@ -87,17 +99,19 @@ Vulnerability information:
 - Affected package: {package-name}
 
 Task information:
-- Task ID: {task-id}
+- Task ID: {task-id} (short id {task-ref})
 
 Output file:
 - Task file: .agents/workspace/active/{task-id}/task.md
 
 Next step:
-  - Claude Code / OpenCode: /analyze-task {task-id}
-  - Gemini CLI: /{{project}}:analyze-task {task-id}
-  - Codex CLI: $analyze-task {task-id}
+  - Claude Code / OpenCode: /analyze-task {task-ref}
+  - Gemini CLI: /{{project}}:analyze-task {task-ref}
+  - Codex CLI: $analyze-task {task-ref}
 ```
 
+
+
 ## Completion Checklist
 
 - [ ] Retrieved and recorded the key alert information

package/templates/.agents/skills/import-dependabot/SKILL.zh-CN.md

@@ -13,6 +13,10 @@ description: "导入 Dependabot 安全告警并创建修复任务"
 - 不要自动提交。绝不自动执行 `git commit` 或 `git add`
 - 执行本技能后，你**必须**立即更新 task.md 中的任务状态
 
+## 任务入参短号别名
+
+> 如果 `{task-id}` 入参匹配 `^[#]?[0-9]+$`（裸数字或带 `#` 前缀），先读取 `.agents/rules/task-short-id.md` 的「SKILL 入参解析」段执行解析；后续命令视 `{task-id}` 为解析后的全长 `TASK-YYYYMMDD-HHMMSS` 形式。
+
 ## 执行流程
 
 ### 1. 获取告警信息
@@ -54,11 +58,19 @@ date "+%Y-%m-%d %H:%M:%S%:z"
 更新 task.md：`current_step` -> `requirement-analysis`。
 - **追加**到 `## Activity Log`（不要覆盖之前的记录）：
   ```
-  - {YYYY-MM-DD HH:mm:ss±HH:MM} — **Import Dependabot Alert** by {agent} — Dependabot alert #{alert-number} imported
+  - {YYYY-MM-DD HH:mm:ss±HH:MM} — **Import Dependabot** by {agent} — Dependabot alert #{alert-number} imported
   ```
 
 ### 4. 完成校验
 
+**先调用短号分配**（保证注册表 entry 已分配；完成校验阶段会读取）：
+
+```bash
+node .agents/scripts/task-short-id.js alloc "$task_id"
+```
+
+如失败（退出码非 0），按提示「归档若干任务」或「调高 task.shortIdLength」处理；不要继续执行后续步骤。
+
 运行完成校验，确认任务产物和同步状态符合规范：
 
 ```bash
@@ -76,7 +88,7 @@ node .agents/scripts/validate-artifact.js gate import-dependabot .agents/workspa
 
 > 仅在校验通过后执行本步骤。
 
-> **重要**：以下「下一步」中列出的所有 TUI 命令格式必须完整输出，不要只展示当前 AI 代理对应的格式。如果 `.agents/.airc.json` 中配置了自定义 TUI（`customTUIs`），读取每个工具的 `name` 和 `invoke`，按同样格式补充对应命令行（`${skillName}` 替换为技能名，`${projectName}` 替换为项目名）。
+> **重要**：以下「下一步」中列出的所有 TUI 命令格式必须完整输出，不要只展示当前 AI 代理对应的格式。如果 `.agents/.airc.json` 中配置了自定义 TUI（`customTUIs`），读取每个工具的 `name` 和 `invoke`，按同样格式补充对应命令行（`${skillName}` 替换为技能名，`${projectName}` 替换为项目名）。 渲染「下一步」命令前，先读取 `.agents/rules/next-step-output.md`，按其取短号片段把命令中的 `{task-ref}` 渲染为短号 `#NN`（未分配/已释放时回退完整 TASK-id）。
 
 ```
 安全告警 #{alert-number} 已导入。
@@ -87,17 +99,19 @@ node .agents/scripts/validate-artifact.js gate import-dependabot .agents/workspa
 - 受影响包：{package-name}
 
 任务信息：
-- 任务 ID：{task-id}
+- 任务 ID：{task-id}（短号 {task-ref}）
 
 产出文件：
 - 任务文件：.agents/workspace/active/{task-id}/task.md
 
 下一步：
-  - Claude Code / OpenCode：/analyze-task {task-id}
-  - Gemini CLI：/agent-infra:analyze-task {task-id}
-  - Codex CLI：$analyze-task {task-id}
+  - Claude Code / OpenCode：/analyze-task {task-ref}
+  - Gemini CLI：/agent-infra:analyze-task {task-ref}
+  - Codex CLI：$analyze-task {task-ref}
 ```
 
+
+
 ## 完成检查清单
 
 - [ ] 获取并记录了告警关键信息

package/templates/.agents/skills/import-dependabot/config/verify.json

@@ -17,7 +17,7 @@
       "expected_status": "active"
     },
     "activity-log": {
-      "expected_action_pattern": "Import Dependabot Alert",
+      "expected_action_pattern": "(Import Dependabot|Import Dependabot Alert)",
       "freshness_minutes": 30
     },
     "platform-sync": null

package/templates/.agents/skills/import-issue/SKILL.en.md

@@ -13,6 +13,10 @@ Import the specified Issue and create a task. Argument: issue number.
 - Do not write or modify business code; import only
 - After executing this skill, you **must** immediately update task status
 
+## Task id short ref
+
+> If `{task-id}` matches `^[#]?[0-9]+$` (bare numeric or `#`-prefixed), follow the "SKILL parameter resolver" section of `.agents/rules/task-short-id.md`; treat `{task-id}` as the resolved full `TASK-YYYYMMDD-HHMMSS` form for every downstream command.
+
 ## Execution Flow
 
 ### 1. Retrieve Issue Information
@@ -119,6 +123,14 @@ If task.md contains a valid `issue_number`, perform these sync actions (skip and
 
 ### 7. Verification Gate
 
+**Allocate short id first** (ensures the registry entry is allocated; the validation gate will read it):
+
+```bash
+node .agents/scripts/task-short-id.js alloc "$task_id"
+```
+
+If this fails (non-zero exit), follow the message — archive some active tasks or raise `task.shortIdLength` — and do NOT continue.
+
 Run the verification gate to confirm the task artifact and sync state are valid:
 
 ```bash
@@ -136,13 +148,13 @@ Keep the gate output in your reply as fresh evidence. Do not claim completion wi
 
 > Execute this step only after the verification gate passes.
 
-> **IMPORTANT**: All TUI command formats listed below must be output in full. Do not show only the format for the current AI agent. If `.agents/.airc.json` configures custom TUIs (via `customTUIs`), read each tool's `name` and `invoke`, then add the matching command line in the same format (`${skillName}` becomes the skill name and `${projectName}` becomes the project name).
+> **IMPORTANT**: All TUI command formats listed below must be output in full. Do not show only the format for the current AI agent. If `.agents/.airc.json` configures custom TUIs (via `customTUIs`), read each tool's `name` and `invoke`, then add the matching command line in the same format (`${skillName}` becomes the skill name and `${projectName}` becomes the project name). Before rendering the "Next steps" commands, read `.agents/rules/next-step-output.md` and use its short-id snippet to render `{task-ref}` in the commands as the short id `#NN` (falling back to the full TASK-id when unallocated or released).
 
 ```
 Issue #{number} imported.
 
 Task information:
-- Task ID: {task-id}
+- Task ID: {task-id} (short id {task-ref})
 - Title: {title}
 - Workflow: {workflow}
 
@@ -150,11 +162,13 @@ Output file:
 - Task file: .agents/workspace/active/{task-id}/task.md
 
 Next step - run requirements analysis:
-  - Claude Code / OpenCode: /analyze-task {task-id}
-  - Gemini CLI: /{{project}}:analyze-task {task-id}
-  - Codex CLI: $analyze-task {task-id}
+  - Claude Code / OpenCode: /analyze-task {task-ref}
+  - Gemini CLI: /{{project}}:analyze-task {task-ref}
+  - Codex CLI: $analyze-task {task-ref}
 ```
 
+
+
 ## Completion Checklist
 
 - [ ] Created the task file `.agents/workspace/active/{task-id}/task.md`

package/templates/.agents/skills/import-issue/SKILL.zh-CN.md

@@ -13,6 +13,10 @@ description: "从 Issue 导入并创建任务"
 - 不要编写或修改业务代码。仅做导入
 - 执行本技能后，你**必须**立即更新任务状态
 
+## 任务入参短号别名
+
+> 如果 `{task-id}` 入参匹配 `^[#]?[0-9]+$`（裸数字或带 `#` 前缀），先读取 `.agents/rules/task-short-id.md` 的「SKILL 入参解析」段执行解析；后续命令视 `{task-id}` 为解析后的全长 `TASK-YYYYMMDD-HHMMSS` 形式。
+
 ## 执行流程
 
 ### 1. 获取 Issue 信息
@@ -119,6 +123,14 @@ date "+%Y-%m-%d %H:%M:%S%:z"
 
 ### 7. 完成校验
 
+**先调用短号分配**（保证注册表 entry 已分配；完成校验阶段会读取）：
+
+```bash
+node .agents/scripts/task-short-id.js alloc "$task_id"
+```
+
+如失败（退出码非 0），按提示「归档若干任务」或「调高 task.shortIdLength」处理；不要继续执行后续步骤。
+
 运行完成校验，确认任务产物和同步状态符合规范：
 
 ```bash
@@ -136,13 +148,13 @@ node .agents/scripts/validate-artifact.js gate import-issue .agents/workspace/ac
 
 > 仅在校验通过后执行本步骤。
 
-> **重要**：以下「下一步」中列出的所有 TUI 命令格式必须完整输出，不要只展示当前 AI 代理对应的格式。如果 `.agents/.airc.json` 中配置了自定义 TUI（`customTUIs`），读取每个工具的 `name` 和 `invoke`，按同样格式补充对应命令行（`${skillName}` 替换为技能名，`${projectName}` 替换为项目名）。
+> **重要**：以下「下一步」中列出的所有 TUI 命令格式必须完整输出，不要只展示当前 AI 代理对应的格式。如果 `.agents/.airc.json` 中配置了自定义 TUI（`customTUIs`），读取每个工具的 `name` 和 `invoke`，按同样格式补充对应命令行（`${skillName}` 替换为技能名，`${projectName}` 替换为项目名）。 渲染「下一步」命令前，先读取 `.agents/rules/next-step-output.md`，按其取短号片段把命令中的 `{task-ref}` 渲染为短号 `#NN`（未分配/已释放时回退完整 TASK-id）。
 
 ```
 Issue #{number} 已导入。
 
 任务信息：
-- 任务 ID：{task-id}
+- 任务 ID：{task-id}（短号 {task-ref}）
 - 标题：{title}
 - 工作流：{workflow}
 
@@ -150,11 +162,13 @@ Issue #{number} 已导入。
 - 任务文件：.agents/workspace/active/{task-id}/task.md
 
 下一步 - 执行需求分析：
-  - Claude Code / OpenCode：/analyze-task {task-id}
-  - Gemini CLI：/agent-infra:analyze-task {task-id}
-  - Codex CLI：$analyze-task {task-id}
+  - Claude Code / OpenCode：/analyze-task {task-ref}
+  - Gemini CLI：/agent-infra:analyze-task {task-ref}
+  - Codex CLI：$analyze-task {task-ref}
 ```
 
+
+
 ## 完成检查清单
 
 - [ ] 创建了任务文件 `.agents/workspace/active/{task-id}/task.md`