@fitlab-ai/agent-infra 0.9.12 → 0.9.14

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (402) hide show
  1. package/README.md +11 -11
  2. package/README.zh-CN.md +11 -11
  3. package/bin/cli.ts +26 -9
  4. package/dist/bin/cli.js +173 -157
  5. package/dist/bin/internal-cli.js +66 -40
  6. package/dist/lib/agent-client.js +5 -0
  7. package/dist/lib/agent-clients/next-steps.js +6 -1
  8. package/dist/lib/decide.js +3 -3
  9. package/dist/lib/internal/agent-client.js +5 -2
  10. package/dist/lib/internal/cli-route-inventory.js +152 -0
  11. package/dist/lib/internal/codex-lifecycle.js +9 -6
  12. package/dist/lib/internal/codex-sandbox-controller.js +8 -2
  13. package/dist/lib/internal/git-workflow.js +10 -6
  14. package/dist/lib/internal/platform-checks.js +19 -7
  15. package/dist/lib/internal/platform-comment.js +25 -13
  16. package/dist/lib/internal/platform-context.js +6 -3
  17. package/dist/lib/internal/platform-issue.js +20 -13
  18. package/dist/lib/internal/platform-metadata.js +88 -0
  19. package/dist/lib/internal/platform-pr-review.js +26 -13
  20. package/dist/lib/internal/platform-pr.js +84 -31
  21. package/dist/lib/internal/platform-release-notes.js +9 -6
  22. package/dist/lib/internal/platform-security.js +93 -0
  23. package/dist/lib/internal/pr-review-grade.js +25 -12
  24. package/dist/lib/internal/release-workflow.js +23 -9
  25. package/dist/lib/internal/sandbox-control.js +50 -7
  26. package/dist/lib/internal/task-activity.js +16 -7
  27. package/dist/lib/internal/task-artifact.js +235 -24
  28. package/dist/lib/internal/task-context.js +4 -1
  29. package/dist/lib/internal/task-create.js +50 -17
  30. package/dist/lib/internal/task-delivery.js +4 -1
  31. package/dist/lib/internal/task-event.js +10 -4
  32. package/dist/lib/internal/task-finalization.js +6 -3
  33. package/dist/lib/internal/task-invalidation.js +63 -0
  34. package/dist/lib/internal/task-ledger.js +20 -6
  35. package/dist/lib/internal/task-lifecycle.js +6 -3
  36. package/dist/lib/internal/task-operation-registry.js +421 -0
  37. package/dist/lib/internal/task-orchestration.js +12 -0
  38. package/dist/lib/internal/task-override.js +14 -7
  39. package/dist/lib/internal/task-qualification.js +90 -0
  40. package/dist/lib/internal/task-review.js +7 -4
  41. package/dist/lib/internal/task-short-id.js +11 -1
  42. package/dist/lib/internal/task-snapshot.js +4 -1
  43. package/dist/lib/internal/task-validate.js +7 -2
  44. package/dist/lib/internal/task-verify.js +11 -7
  45. package/dist/lib/internal/task-warning.js +11 -4
  46. package/dist/lib/platform/adapters.js +1 -3
  47. package/dist/lib/platform/change-request-git-evidence.js +27 -7
  48. package/dist/lib/platform/comment-safety.js +226 -0
  49. package/dist/lib/platform/completion-backfill.js +6 -5
  50. package/dist/lib/platform/context.js +70 -130
  51. package/dist/lib/platform/github-client.js +1 -1
  52. package/dist/lib/platform/github-provider.js +1130 -0
  53. package/dist/lib/platform/in-label-sync.js +143 -0
  54. package/dist/lib/platform/issue-comments.js +237 -72
  55. package/dist/lib/platform/issues.js +335 -189
  56. package/dist/lib/platform/metadata-labels.js +6 -2
  57. package/dist/lib/platform/none-provider.js +28 -0
  58. package/dist/lib/platform/pr-change-report.js +545 -0
  59. package/dist/lib/platform/pr-checks.js +119 -104
  60. package/dist/lib/platform/pr-review.js +88 -72
  61. package/dist/lib/platform/pr-summary.js +541 -50
  62. package/dist/lib/platform/provider-bridge.js +45 -0
  63. package/dist/lib/platform/provider-contract.d.ts +553 -0
  64. package/dist/lib/platform/provider-contract.js +99 -0
  65. package/dist/lib/platform/provider-loader.js +251 -0
  66. package/dist/lib/platform/provider-validation.js +577 -0
  67. package/dist/lib/platform/pull-request-metadata.js +8 -6
  68. package/dist/lib/platform/pull-requests.js +734 -543
  69. package/dist/lib/platform/release-notes.js +78 -55
  70. package/dist/lib/platform/releases.js +79 -50
  71. package/dist/lib/platform/repository-metadata.js +377 -0
  72. package/dist/lib/platform/resource-identity.d.ts +26 -0
  73. package/dist/lib/platform/resource-identity.js +92 -0
  74. package/dist/lib/platform/security-alerts.js +155 -0
  75. package/dist/lib/platform/task-identities.js +31 -0
  76. package/dist/lib/platform/verification-required.js +11 -12
  77. package/dist/lib/platform/verification-sync.js +129 -248
  78. package/dist/lib/pr-review/evidence-grading.js +19 -6
  79. package/dist/lib/process-data/index.js +7 -0
  80. package/dist/lib/run/index.js +68 -23
  81. package/dist/lib/sandbox/commands/control-status.js +22 -0
  82. package/dist/lib/sandbox/commands/create.js +32 -6
  83. package/dist/lib/sandbox/commands/ls.js +5 -0
  84. package/dist/lib/sandbox/commands/rm.js +827 -120
  85. package/dist/lib/sandbox/commands/show.js +16 -0
  86. package/dist/lib/sandbox/control/client.js +174 -19
  87. package/dist/lib/sandbox/control/completed-reentry.js +85 -0
  88. package/dist/lib/sandbox/control/container-identity.js +28 -31
  89. package/dist/lib/sandbox/control/executor.js +151 -16
  90. package/dist/lib/sandbox/control/lifecycle.js +621 -127
  91. package/dist/lib/sandbox/control/native-file-lock.js +177 -0
  92. package/dist/lib/sandbox/control/protocol.js +77 -0
  93. package/dist/lib/sandbox/control/server.js +677 -34
  94. package/dist/lib/sandbox/control/state.js +209 -4
  95. package/dist/lib/sandbox/control/task-view.js +183 -0
  96. package/dist/lib/sandbox/engines/authority.js +289 -0
  97. package/dist/lib/sandbox/engines/docker-exact-discovery.js +97 -0
  98. package/dist/lib/sandbox/index.js +5 -0
  99. package/dist/lib/sandbox/recovery.js +21 -1
  100. package/dist/lib/sandbox/workspace-view.js +2 -1
  101. package/dist/lib/sandbox/worktree-safety.js +4 -1
  102. package/dist/lib/server/index.js +8 -0
  103. package/dist/lib/server/protocol.js +38 -1
  104. package/dist/lib/task/activity-log.js +8 -1
  105. package/dist/lib/task/artifact-lifecycle.js +75 -18
  106. package/dist/lib/task/artifact-operations.js +520 -0
  107. package/dist/lib/task/artifact-repair-intent.js +59 -0
  108. package/dist/lib/task/artifact-schema.js +135 -0
  109. package/dist/lib/task/capabilities.js +310 -0
  110. package/dist/lib/task/commands/status.js +32 -0
  111. package/dist/lib/task/commit-operation.js +12 -1
  112. package/dist/lib/task/control-authority.js +12 -5
  113. package/dist/lib/task/create-service.js +111 -12
  114. package/dist/lib/task/create.js +25 -0
  115. package/dist/lib/task/current-contract.js +5 -1
  116. package/dist/lib/task/decision-details.js +1 -1
  117. package/dist/lib/task/events.js +416 -17
  118. package/dist/lib/task/finalization.js +37 -13
  119. package/dist/lib/task/human-override.js +58 -36
  120. package/dist/lib/task/index.js +11 -3
  121. package/dist/lib/task/invalidation-command.js +86 -0
  122. package/dist/lib/task/invalidation.js +260 -0
  123. package/dist/lib/task/ledger-intents.js +37 -0
  124. package/dist/lib/task/local-artifact-finalization.js +299 -0
  125. package/dist/lib/task/orchestration.js +240 -144
  126. package/dist/lib/task/pr-delivery-fact.js +102 -101
  127. package/dist/lib/task/qualification-audit.js +490 -0
  128. package/dist/lib/task/qualification-confirmation.js +109 -0
  129. package/dist/lib/task/qualification-intents.js +148 -0
  130. package/dist/lib/task/review-artifacts.js +22 -23
  131. package/dist/lib/task/review-finalization.js +121 -4
  132. package/dist/lib/task/review-fingerprint.js +24 -2
  133. package/dist/lib/task/rework-intent.js +138 -0
  134. package/dist/lib/task/sections.js +6 -4
  135. package/dist/lib/task/skill-scope.js +23 -0
  136. package/dist/lib/task/task-execution-lock.js +27 -17
  137. package/dist/lib/task/verification-config.js +11 -0
  138. package/dist/lib/task/verification-engine.js +93 -16
  139. package/dist/lib/task/verification.js +3 -3
  140. package/dist/lib/task/workflow-warning-intents.js +1 -1
  141. package/dist/lib/task/write.js +11 -0
  142. package/dist/lib/version.js +11 -1
  143. package/dist/lifecycle-build-manifest.json +3 -3
  144. package/lib/agent-client.ts +9 -0
  145. package/lib/agent-clients/next-steps.ts +6 -1
  146. package/lib/decide.ts +3 -3
  147. package/lib/init.ts +1 -1
  148. package/lib/internal/agent-client.ts +4 -2
  149. package/lib/internal/cli-route-inventory.ts +140 -0
  150. package/lib/internal/codex-lifecycle.ts +8 -6
  151. package/lib/internal/codex-sandbox-controller.ts +7 -2
  152. package/lib/internal/git-workflow.ts +9 -6
  153. package/lib/internal/platform-checks.ts +14 -6
  154. package/lib/internal/platform-comment.ts +20 -12
  155. package/lib/internal/platform-context.ts +5 -3
  156. package/lib/internal/platform-issue.ts +17 -11
  157. package/lib/internal/platform-metadata.ts +70 -0
  158. package/lib/internal/platform-pr-review.ts +23 -12
  159. package/lib/internal/platform-pr.ts +65 -27
  160. package/lib/internal/platform-release-notes.ts +8 -6
  161. package/lib/internal/platform-security.ts +83 -0
  162. package/lib/internal/pr-review-grade.ts +20 -11
  163. package/lib/internal/release-workflow.ts +21 -9
  164. package/lib/internal/sandbox-control.ts +44 -6
  165. package/lib/internal/task-activity.ts +15 -7
  166. package/lib/internal/task-artifact.ts +204 -22
  167. package/lib/internal/task-context.ts +3 -1
  168. package/lib/internal/task-create.ts +78 -17
  169. package/lib/internal/task-delivery.ts +3 -1
  170. package/lib/internal/task-event.ts +9 -4
  171. package/lib/internal/task-finalization.ts +6 -4
  172. package/lib/internal/task-invalidation.ts +41 -0
  173. package/lib/internal/task-ledger.ts +21 -8
  174. package/lib/internal/task-lifecycle.ts +5 -3
  175. package/lib/internal/task-operation-registry.ts +482 -0
  176. package/lib/internal/task-orchestration.ts +12 -0
  177. package/lib/internal/task-override.ts +15 -9
  178. package/lib/internal/task-qualification.ts +61 -0
  179. package/lib/internal/task-review.ts +6 -4
  180. package/lib/internal/task-short-id.ts +10 -1
  181. package/lib/internal/task-snapshot.ts +3 -1
  182. package/lib/internal/task-validate.ts +6 -2
  183. package/lib/internal/task-verify.ts +10 -7
  184. package/lib/internal/task-warning.ts +10 -4
  185. package/lib/platform/adapters.ts +3 -2
  186. package/lib/platform/change-request-git-evidence.ts +36 -9
  187. package/lib/platform/comment-safety.ts +250 -0
  188. package/lib/platform/completion-backfill.ts +9 -8
  189. package/lib/platform/context.ts +97 -134
  190. package/lib/platform/github-client.ts +2 -2
  191. package/lib/platform/github-provider.ts +1132 -0
  192. package/lib/platform/in-label-sync.ts +208 -0
  193. package/lib/platform/issue-comments.ts +255 -80
  194. package/lib/platform/issues.ts +344 -174
  195. package/lib/platform/metadata-labels.ts +5 -2
  196. package/lib/platform/none-provider.ts +35 -0
  197. package/lib/platform/pr-change-report.ts +639 -0
  198. package/lib/platform/pr-checks.ts +126 -106
  199. package/lib/platform/pr-review.ts +88 -85
  200. package/lib/platform/pr-summary.ts +581 -53
  201. package/lib/platform/provider-bridge.ts +82 -0
  202. package/lib/platform/provider-contract.ts +611 -0
  203. package/lib/platform/provider-loader.ts +307 -0
  204. package/lib/platform/provider-validation.ts +611 -0
  205. package/lib/platform/pull-request-metadata.ts +10 -7
  206. package/lib/platform/pull-requests.ts +781 -550
  207. package/lib/platform/release-notes.ts +76 -59
  208. package/lib/platform/releases.ts +77 -43
  209. package/lib/platform/repository-metadata.ts +453 -0
  210. package/lib/platform/resource-identity.ts +121 -0
  211. package/lib/platform/security-alerts.ts +191 -0
  212. package/lib/platform/task-identities.ts +40 -0
  213. package/lib/platform/types.ts +4 -2
  214. package/lib/platform/verification-required.ts +11 -13
  215. package/lib/platform/verification-sync.ts +128 -304
  216. package/lib/pr-review/evidence-grading.ts +25 -8
  217. package/lib/process-data/index.ts +7 -0
  218. package/lib/run/index.ts +62 -22
  219. package/lib/sandbox/commands/control-status.ts +26 -0
  220. package/lib/sandbox/commands/create.ts +46 -6
  221. package/lib/sandbox/commands/ls.ts +7 -0
  222. package/lib/sandbox/commands/rm.ts +1000 -87
  223. package/lib/sandbox/commands/show.ts +16 -0
  224. package/lib/sandbox/control/client.ts +203 -19
  225. package/lib/sandbox/control/completed-reentry.ts +98 -0
  226. package/lib/sandbox/control/container-identity.ts +27 -43
  227. package/lib/sandbox/control/executor.ts +180 -15
  228. package/lib/sandbox/control/lifecycle.ts +629 -17
  229. package/lib/sandbox/control/native-file-lock.ts +209 -0
  230. package/lib/sandbox/control/protocol.ts +118 -2
  231. package/lib/sandbox/control/server.ts +724 -34
  232. package/lib/sandbox/control/state.ts +257 -4
  233. package/lib/sandbox/control/task-view.ts +240 -0
  234. package/lib/sandbox/engines/authority.ts +365 -0
  235. package/lib/sandbox/engines/docker-exact-discovery.ts +132 -0
  236. package/lib/sandbox/index.ts +7 -0
  237. package/lib/sandbox/recovery.ts +21 -1
  238. package/lib/sandbox/workspace-view.ts +9 -3
  239. package/lib/sandbox/worktree-safety.ts +4 -1
  240. package/lib/server/index.ts +10 -0
  241. package/lib/server/protocol.ts +36 -1
  242. package/lib/task/activity-log.ts +8 -0
  243. package/lib/task/artifact-lifecycle.ts +70 -22
  244. package/lib/task/artifact-operations.ts +626 -0
  245. package/lib/task/artifact-repair-intent.ts +71 -0
  246. package/lib/task/artifact-schema.ts +192 -0
  247. package/lib/task/capabilities.ts +331 -0
  248. package/lib/task/commands/status.ts +38 -0
  249. package/lib/task/commit-operation.ts +12 -1
  250. package/lib/task/control-authority.ts +22 -9
  251. package/lib/task/create-service.ts +139 -14
  252. package/lib/task/create.ts +27 -0
  253. package/lib/task/current-contract.ts +6 -1
  254. package/lib/task/decision-details.ts +6 -2
  255. package/lib/task/events.ts +392 -16
  256. package/lib/task/finalization.ts +50 -14
  257. package/lib/task/human-override.ts +70 -46
  258. package/lib/task/index.ts +16 -3
  259. package/lib/task/invalidation-command.ts +86 -0
  260. package/lib/task/invalidation.ts +332 -0
  261. package/lib/task/ledger-intents.ts +35 -1
  262. package/lib/task/local-artifact-finalization.ts +432 -0
  263. package/lib/task/orchestration.ts +223 -133
  264. package/lib/task/pr-delivery-fact.ts +131 -148
  265. package/lib/task/qualification-audit.ts +599 -0
  266. package/lib/task/qualification-confirmation.ts +117 -0
  267. package/lib/task/qualification-intents.ts +150 -0
  268. package/lib/task/review-artifacts.ts +21 -22
  269. package/lib/task/review-finalization.ts +133 -4
  270. package/lib/task/review-fingerprint.ts +23 -2
  271. package/lib/task/rework-intent.ts +165 -0
  272. package/lib/task/sections.ts +6 -4
  273. package/lib/task/skill-scope.ts +24 -0
  274. package/lib/task/task-execution-lock.ts +23 -14
  275. package/lib/task/verification-config.ts +12 -0
  276. package/lib/task/verification-engine.ts +103 -17
  277. package/lib/task/verification.ts +4 -4
  278. package/lib/task/workflow-warning-intents.ts +1 -1
  279. package/lib/task/write.ts +19 -0
  280. package/lib/update.ts +1 -1
  281. package/lib/version.ts +15 -1
  282. package/package.json +12 -1
  283. package/templates/.agents/rules/README.en.md +3 -1
  284. package/templates/.agents/rules/README.zh-CN.md +3 -1
  285. package/templates/.agents/rules/decision-qualification.en.md +22 -0
  286. package/templates/.agents/rules/decision-qualification.zh-CN.md +22 -0
  287. package/templates/.agents/rules/evidence-reporting.en.md +28 -0
  288. package/templates/.agents/rules/evidence-reporting.zh-CN.md +28 -0
  289. package/templates/.agents/rules/issue-pr-commands.en.md +1 -1
  290. package/templates/.agents/rules/issue-pr-commands.zh-CN.md +1 -1
  291. package/templates/.agents/rules/issue-sync.en.md +2 -0
  292. package/templates/.agents/rules/issue-sync.zh-CN.md +2 -0
  293. package/templates/.agents/rules/label-milestone-setup.en.md +7 -7
  294. package/templates/.agents/rules/label-milestone-setup.zh-CN.md +7 -7
  295. package/templates/.agents/rules/local-artifact-repair.en.md +13 -2
  296. package/templates/.agents/rules/local-artifact-repair.zh-CN.md +13 -2
  297. package/templates/.agents/rules/pr-sync.en.md +10 -4
  298. package/templates/.agents/rules/pr-sync.zh-CN.md +17 -4
  299. package/templates/.agents/rules/security-alerts.en.md +8 -8
  300. package/templates/.agents/rules/security-alerts.zh-CN.md +8 -8
  301. package/templates/.agents/rules/task-short-id.en.md +1 -4
  302. package/templates/.agents/rules/task-short-id.zh-CN.md +1 -3
  303. package/templates/.agents/skills/analyze-task/SKILL.en.md +28 -5
  304. package/templates/.agents/skills/analyze-task/SKILL.zh-CN.md +29 -5
  305. package/templates/.agents/skills/analyze-task/config/verify.en.json +1 -12
  306. package/templates/.agents/skills/analyze-task/config/verify.zh-CN.json +1 -12
  307. package/templates/.agents/skills/check-task/SKILL.en.md +16 -37
  308. package/templates/.agents/skills/check-task/SKILL.zh-CN.md +16 -37
  309. package/templates/.agents/skills/close-codescan/SKILL.en.md +2 -2
  310. package/templates/.agents/skills/close-codescan/SKILL.zh-CN.md +2 -2
  311. package/templates/.agents/skills/close-dependabot/SKILL.en.md +2 -2
  312. package/templates/.agents/skills/close-dependabot/SKILL.zh-CN.md +2 -2
  313. package/templates/.agents/skills/code-task/SKILL.en.md +41 -9
  314. package/templates/.agents/skills/code-task/SKILL.zh-CN.md +43 -11
  315. package/templates/.agents/skills/code-task/config/verify.en.json +6 -14
  316. package/templates/.agents/skills/code-task/config/verify.zh-CN.json +6 -14
  317. package/templates/.agents/skills/code-task/reference/code-rules.en.md +5 -4
  318. package/templates/.agents/skills/code-task/reference/code-rules.zh-CN.md +5 -4
  319. package/templates/.agents/skills/code-task/reference/dual-mode.en.md +1 -1
  320. package/templates/.agents/skills/code-task/reference/dual-mode.zh-CN.md +1 -1
  321. package/templates/.agents/skills/code-task/reference/fix-mode.en.md +3 -1
  322. package/templates/.agents/skills/code-task/reference/fix-mode.zh-CN.md +3 -1
  323. package/templates/.agents/skills/code-task/reference/report-template.en.md +42 -15
  324. package/templates/.agents/skills/code-task/reference/report-template.zh-CN.md +39 -12
  325. package/templates/.agents/skills/commit/reference/issue-metadata-sync.en.md +2 -0
  326. package/templates/.agents/skills/commit/reference/issue-metadata-sync.zh-CN.md +2 -0
  327. package/templates/.agents/skills/commit/reference/pr-summary-sync.en.md +3 -3
  328. package/templates/.agents/skills/commit/reference/pr-summary-sync.zh-CN.md +3 -3
  329. package/templates/.agents/skills/complete-manual-validation/SKILL.en.md +10 -4
  330. package/templates/.agents/skills/complete-manual-validation/SKILL.zh-CN.md +10 -4
  331. package/templates/.agents/skills/complete-manual-validation/reference/report-template.en.md +2 -0
  332. package/templates/.agents/skills/complete-manual-validation/reference/report-template.zh-CN.md +2 -0
  333. package/templates/.agents/skills/complete-manual-validation/reference/summary-update.en.md +4 -3
  334. package/templates/.agents/skills/complete-manual-validation/reference/summary-update.zh-CN.md +4 -3
  335. package/templates/.agents/skills/complete-task/SKILL.en.md +26 -21
  336. package/templates/.agents/skills/complete-task/SKILL.zh-CN.md +25 -21
  337. package/templates/.agents/skills/create-pr/SKILL.en.md +7 -6
  338. package/templates/.agents/skills/create-pr/SKILL.zh-CN.md +7 -7
  339. package/templates/.agents/skills/create-pr/config/verify.json +1 -0
  340. package/templates/.agents/skills/create-pr/reference/change-report.en.md +16 -4
  341. package/templates/.agents/skills/create-pr/reference/change-report.zh-CN.md +16 -4
  342. package/templates/.agents/skills/create-pr/reference/comment-publish.en.md +5 -3
  343. package/templates/.agents/skills/create-pr/reference/comment-publish.zh-CN.md +5 -3
  344. package/templates/.agents/skills/create-pr/reference/pr-body-template.en.md +1 -1
  345. package/templates/.agents/skills/create-pr/reference/pr-body-template.zh-CN.md +1 -1
  346. package/templates/.agents/skills/create-pr/scripts/change-report.mjs +3 -0
  347. package/templates/.agents/skills/create-task/SKILL.en.md +8 -0
  348. package/templates/.agents/skills/create-task/SKILL.zh-CN.md +7 -0
  349. package/templates/.agents/skills/import-codescan/SKILL.en.md +1 -1
  350. package/templates/.agents/skills/import-codescan/SKILL.zh-CN.md +1 -1
  351. package/templates/.agents/skills/import-dependabot/SKILL.en.md +1 -1
  352. package/templates/.agents/skills/import-dependabot/SKILL.zh-CN.md +1 -1
  353. package/templates/.agents/skills/init-labels/SKILL.en.md +8 -8
  354. package/templates/.agents/skills/init-labels/SKILL.zh-CN.md +8 -8
  355. package/templates/.agents/skills/init-milestones/SKILL.en.md +9 -11
  356. package/templates/.agents/skills/init-milestones/SKILL.zh-CN.md +9 -11
  357. package/templates/.agents/skills/plan-task/SKILL.en.md +27 -4
  358. package/templates/.agents/skills/plan-task/SKILL.zh-CN.md +26 -4
  359. package/templates/.agents/skills/plan-task/config/verify.en.json +4 -14
  360. package/templates/.agents/skills/plan-task/config/verify.zh-CN.json +4 -14
  361. package/templates/.agents/skills/review-analysis/SKILL.en.md +17 -4
  362. package/templates/.agents/skills/review-analysis/SKILL.zh-CN.md +17 -4
  363. package/templates/.agents/skills/review-analysis/config/verify.en.json +1 -18
  364. package/templates/.agents/skills/review-analysis/config/verify.zh-CN.json +1 -18
  365. package/templates/.agents/skills/review-analysis/reference/report-template.en.md +50 -23
  366. package/templates/.agents/skills/review-analysis/reference/report-template.zh-CN.md +45 -18
  367. package/templates/.agents/skills/review-code/SKILL.en.md +18 -5
  368. package/templates/.agents/skills/review-code/SKILL.zh-CN.md +18 -5
  369. package/templates/.agents/skills/review-code/config/verify.en.json +1 -23
  370. package/templates/.agents/skills/review-code/config/verify.zh-CN.json +1 -23
  371. package/templates/.agents/skills/review-code/reference/report-template.en.md +49 -22
  372. package/templates/.agents/skills/review-code/reference/report-template.zh-CN.md +45 -18
  373. package/templates/.agents/skills/review-plan/SKILL.en.md +17 -4
  374. package/templates/.agents/skills/review-plan/SKILL.zh-CN.md +17 -4
  375. package/templates/.agents/skills/review-plan/config/verify.en.json +1 -18
  376. package/templates/.agents/skills/review-plan/config/verify.zh-CN.json +1 -18
  377. package/templates/.agents/skills/review-plan/reference/report-template.en.md +49 -22
  378. package/templates/.agents/skills/review-plan/reference/report-template.zh-CN.md +45 -18
  379. package/templates/.agents/skills/review-pr/SKILL.en.md +5 -1
  380. package/templates/.agents/skills/review-pr/SKILL.zh-CN.md +5 -1
  381. package/templates/.agents/skills/review-pr/reference/report-template.en.md +4 -3
  382. package/templates/.agents/skills/review-pr/reference/report-template.zh-CN.md +4 -3
  383. package/templates/.agents/skills/run-manual-validation/SKILL.en.md +9 -3
  384. package/templates/.agents/skills/run-manual-validation/SKILL.zh-CN.md +9 -3
  385. package/templates/.agents/skills/run-manual-validation/reference/report-template.en.md +3 -1
  386. package/templates/.agents/skills/run-manual-validation/reference/report-template.zh-CN.md +3 -1
  387. package/templates/.agents/skills/test/SKILL.en.md +13 -2
  388. package/templates/.agents/skills/test/SKILL.zh-CN.md +13 -2
  389. package/templates/.agents/skills/update-agent-infra/scripts/sync-templates.js +14 -0
  390. package/templates/.agents/skills/watch-pr/SKILL.en.md +2 -2
  391. package/templates/.agents/skills/watch-pr/SKILL.zh-CN.md +2 -2
  392. package/templates/.agents/skills/watch-pr/reference/monitor-and-heal.en.md +6 -0
  393. package/templates/.agents/skills/watch-pr/reference/monitor-and-heal.zh-CN.md +6 -0
  394. package/templates/.agents/templates/task.en.md +24 -1
  395. package/templates/.agents/templates/task.zh-CN.md +24 -1
  396. package/templates/.github/workflows/pr-label.yml +7 -26
  397. package/templates/.agents/scripts/security-alerts.github.sh +0 -151
  398. package/templates/.agents/scripts/security-alerts.sh +0 -31
  399. package/templates/.agents/skills/init-labels/scripts/init-labels.github.sh +0 -146
  400. package/templates/.agents/skills/init-labels/scripts/init-labels.sh +0 -32
  401. package/templates/.agents/skills/init-milestones/scripts/init-milestones.github.sh +0 -294
  402. package/templates/.agents/skills/init-milestones/scripts/init-milestones.sh +0 -6
@@ -0,0 +1,432 @@
1
+ import fs from 'node:fs';
2
+
3
+ import { inspectDecisionDetailDuplicates, scanVisibleMarkdown } from './decision-details.ts';
4
+ import {
5
+ parseArtifactName,
6
+ validateCompletedArtifact
7
+ } from './artifact-lifecycle.ts';
8
+ import { resolveTaskRef } from './resolve-ref.ts';
9
+ import { expectedQualificationRelations, validateQualificationAudit } from './qualification-audit.ts';
10
+ import { canonicalSemanticDigest, inspectArtifactPatterns, inspectArtifactStructure, sha256Content } from './artifact-operations.ts';
11
+ import { getArtifactSchema } from './artifact-schema.ts';
12
+ import { readArtifactRepairIntent, writeArtifactRepairIntent } from './artifact-repair-intent.ts';
13
+ import type { ArtifactRepairIntent } from './artifact-repair-intent.ts';
14
+
15
+ type LocalArtifactFamily = 'analysis' | 'plan' | 'code';
16
+
17
+ const LOCAL_ARTIFACT_REQUIRED_SECTIONS: Readonly<Record<LocalArtifactFamily, readonly string[]>> = {
18
+ analysis: getArtifactSchema('analysis')!.sections.map((section) => section.headings.zh),
19
+ plan: getArtifactSchema('plan')!.sections.map((section) => section.headings.zh),
20
+ code: getArtifactSchema('code')!.sections.map((section) => section.headings.zh)
21
+ };
22
+
23
+ type LocalArtifactDiagnosticCode =
24
+ | 'LOCAL_ARTIFACT_EMPTY'
25
+ | 'LOCAL_ARTIFACT_MISSING_SECTION'
26
+ | 'LOCAL_ARTIFACT_DUPLICATE_SECTION'
27
+ | 'LOCAL_STATUS_COMMAND_MISSING'
28
+ | 'LOCAL_DECISION_DETAIL_DUPLICATE'
29
+ | 'LOCAL_REQUIRED_PATTERN_MISSING'
30
+ | 'LOCAL_STRUCTURAL_INVALID'
31
+ | 'LOCAL_SECTION_HEADING_TRAILING_PUNCTUATION'
32
+ | 'LOCAL_REPAIR_PROVENANCE_CONFLICT'
33
+ | 'LOCAL_REPAIR_BASELINE_MISMATCH'
34
+ | 'LOCAL_QUALIFICATION_AUDIT_INVALID';
35
+
36
+ type LocalArtifactDiagnostic = {
37
+ code: LocalArtifactDiagnosticCode;
38
+ message: string;
39
+ repairable: boolean;
40
+ line: number | null;
41
+ from?: string;
42
+ to?: string;
43
+ operation?: 'replace-line';
44
+ };
45
+
46
+ type LocalArtifactValidationOptions = {
47
+ family: LocalArtifactFamily;
48
+ requiredSections?: readonly string[];
49
+ taskContent?: string;
50
+ artifact?: string;
51
+ };
52
+
53
+ type LocalArtifactValidationResult = {
54
+ ok: boolean;
55
+ family: LocalArtifactFamily;
56
+ semanticDigest: string;
57
+ repairable: boolean;
58
+ diagnostics: readonly LocalArtifactDiagnostic[];
59
+ };
60
+
61
+ type LocalArtifactFinalizationRequest = {
62
+ taskRef: string;
63
+ family: LocalArtifactFamily;
64
+ artifact: string;
65
+ repoRoot?: string;
66
+ requiredSections?: readonly string[];
67
+ };
68
+
69
+ type LocalArtifactFinalizationResult = {
70
+ status: 'passed' | 'failed';
71
+ changed: false;
72
+ taskId: string | null;
73
+ taskDir: string | null;
74
+ family: LocalArtifactFamily;
75
+ artifact: string;
76
+ artifactSha256: string | null;
77
+ semanticDigest: string | null;
78
+ repairable: boolean;
79
+ diagnostics: readonly LocalArtifactDiagnostic[];
80
+ error: { code: string; message: string } | null;
81
+ };
82
+
83
+ type LocalArtifactFinalizationIntent = ArtifactRepairIntent;
84
+
85
+ function readLocalArtifactFinalizationIntent(
86
+ repoRoot: string,
87
+ taskId: string,
88
+ family: LocalArtifactFamily,
89
+ artifact: string
90
+ ): LocalArtifactFinalizationIntent | null {
91
+ return readArtifactRepairIntent(repoRoot, taskId, family, artifact);
92
+ }
93
+
94
+ function writeLocalArtifactFinalizationIntent(repoRoot: string, value: LocalArtifactFinalizationIntent): void {
95
+ writeArtifactRepairIntent(repoRoot, value);
96
+ }
97
+
98
+ function consumeLocalArtifactFinalizationIntent(
99
+ repoRoot: string,
100
+ intent: LocalArtifactFinalizationIntent
101
+ ): LocalArtifactFinalizationIntent {
102
+ if (intent.state === 'consumed') return intent;
103
+ if (intent.state !== 'passed') throw new Error('LOCAL_FINALIZATION_INTENT_INVALID: only passed provenance can be consumed');
104
+ const consumed = { ...intent, state: 'consumed' as const };
105
+ writeLocalArtifactFinalizationIntent(repoRoot, consumed);
106
+ return consumed;
107
+ }
108
+
109
+ function localDiagnosticCode(code: string): LocalArtifactDiagnosticCode | null {
110
+ const map: Record<string, LocalArtifactDiagnosticCode> = {
111
+ ARTIFACT_EMPTY: 'LOCAL_ARTIFACT_EMPTY',
112
+ ARTIFACT_MISSING_SECTION: 'LOCAL_ARTIFACT_MISSING_SECTION',
113
+ ARTIFACT_DUPLICATE_SECTION: 'LOCAL_ARTIFACT_DUPLICATE_SECTION',
114
+ ARTIFACT_HEADING_TRAILING_PUNCTUATION: 'LOCAL_SECTION_HEADING_TRAILING_PUNCTUATION'
115
+ };
116
+ return map[code] ?? 'LOCAL_STRUCTURAL_INVALID';
117
+ }
118
+
119
+ function localDiagnostic(
120
+ item: { code: string; message: string; line: number | null; repairable: boolean; operation?: { kind: string; from: string; to: string } }
121
+ ): LocalArtifactDiagnostic | null {
122
+ const code = localDiagnosticCode(item.code);
123
+ if (!code) return null;
124
+ return {
125
+ code,
126
+ message: item.message,
127
+ repairable: item.repairable,
128
+ line: item.line,
129
+ ...(item.operation?.kind === 'replace-line'
130
+ ? { from: item.operation.from, to: item.operation.to, operation: 'replace-line' as const }
131
+ : {})
132
+ };
133
+ }
134
+
135
+ function isStatusPattern(pattern: string): boolean {
136
+ return pattern === '^\\$ ';
137
+ }
138
+
139
+ function validateLocalArtifact(
140
+ content: string,
141
+ options: LocalArtifactValidationOptions
142
+ ): LocalArtifactValidationResult {
143
+ const schema = getArtifactSchema(options.family)!;
144
+ const patterns = schema.requiredPatterns;
145
+ const diagnostics: LocalArtifactDiagnostic[] = [];
146
+ const scanned = scanVisibleMarkdown(content);
147
+ const structure = inspectArtifactStructure(content, schema);
148
+ for (const item of structure.diagnostics) {
149
+ const mapped = localDiagnostic(item);
150
+ if (mapped) diagnostics.push(mapped);
151
+ }
152
+
153
+ const statusSection = schema.sections.find((section) => section.id === 'state-check');
154
+ if (statusSection) {
155
+ const statusHeading = scanned.headings.find((heading) => (
156
+ heading.level === 2 && [statusSection.headings.zh, statusSection.headings.en].some((name) => (
157
+ heading.text === name || heading.text === `${name}:` || heading.text === `${name}:`
158
+ ))
159
+ ));
160
+ if (statusHeading) {
161
+ const next = scanned.headings.find((candidate) => candidate.start > statusHeading.start && candidate.level <= 2);
162
+ const body = content.slice(statusHeading.end, next?.start ?? content.length);
163
+ for (const pattern of patterns.filter(isStatusPattern)) {
164
+ if (!new RegExp(pattern, 'm').test(body)) {
165
+ diagnostics.push({ code: 'LOCAL_STATUS_COMMAND_MISSING', message: `status section '${statusHeading.text}' is missing required command output`, repairable: false, line: content.slice(0, statusHeading.start).split('\n').length });
166
+ }
167
+ }
168
+ }
169
+ }
170
+
171
+ const patternInspection = inspectArtifactPatterns(content, {
172
+ ...schema,
173
+ requiredPatterns: patterns.filter((item) => !isStatusPattern(item))
174
+ });
175
+ for (const item of patternInspection.diagnostics) {
176
+ diagnostics.push({ code: 'LOCAL_REQUIRED_PATTERN_MISSING', message: item.message, repairable: false, line: null });
177
+ }
178
+
179
+ const decisionDetails = inspectDecisionDetailDuplicates(content);
180
+ if (!decisionDetails.ok) {
181
+ diagnostics.push({ code: 'LOCAL_DECISION_DETAIL_DUPLICATE', message: decisionDetails.message, repairable: false, line: null });
182
+ }
183
+
184
+ if (options.taskContent !== undefined) {
185
+ const expected = expectedQualificationRelations(options.taskContent, options.family);
186
+ if (!expected.ok) {
187
+ diagnostics.push({ code: 'LOCAL_QUALIFICATION_AUDIT_INVALID', message: `${expected.code}: ${expected.message}`, repairable: false, line: null });
188
+ }
189
+ const qualification = validateQualificationAudit(options.taskContent, content, {
190
+ family: options.family === 'analysis' ? 'analysis' : options.family === 'plan' ? 'plan' : 'code',
191
+ artifact: options.artifact,
192
+ expectedUpstreamRelations: expected.ok ? expected.relations : undefined
193
+ });
194
+ if (!qualification.ok) {
195
+ diagnostics.push({ code: 'LOCAL_QUALIFICATION_AUDIT_INVALID', message: `${qualification.code}: ${qualification.message}`, repairable: false, line: null });
196
+ }
197
+ }
198
+
199
+ const repairable = structure.repair !== null && diagnostics.length === 1 && diagnostics[0]?.repairable === true;
200
+ const semanticDigestValue = canonicalSemanticDigest(content, structure.repair);
201
+
202
+ return {
203
+ ok: diagnostics.length === 0,
204
+ family: options.family,
205
+ semanticDigest: semanticDigestValue,
206
+ repairable,
207
+ diagnostics
208
+ };
209
+ }
210
+
211
+ function failedFinalization(
212
+ request: LocalArtifactFinalizationRequest,
213
+ error: { code: string; message: string },
214
+ extra: Partial<LocalArtifactFinalizationResult> = {}
215
+ ): LocalArtifactFinalizationResult {
216
+ return {
217
+ status: 'failed', changed: false,
218
+ taskId: null, taskDir: null,
219
+ family: request.family, artifact: request.artifact,
220
+ artifactSha256: null, semanticDigest: null,
221
+ repairable: false, diagnostics: [], error, ...extra
222
+ };
223
+ }
224
+
225
+ function provenanceFailure(
226
+ request: LocalArtifactFinalizationRequest,
227
+ resolved: { taskId: string; taskDir: string },
228
+ content: string,
229
+ artifactSha256: string,
230
+ semanticDigestValue: string,
231
+ code: LocalArtifactDiagnosticCode,
232
+ message: string
233
+ ): LocalArtifactFinalizationResult {
234
+ return failedFinalization(request, { code, message }, {
235
+ taskId: resolved.taskId,
236
+ taskDir: resolved.taskDir,
237
+ artifactSha256,
238
+ semanticDigest: semanticDigestValue,
239
+ diagnostics: [{ code, message, repairable: false, line: null }]
240
+ });
241
+ }
242
+
243
+ function finalizeLocalArtifact(request: LocalArtifactFinalizationRequest): LocalArtifactFinalizationResult {
244
+ const resolved = resolveTaskRef(request.taskRef, { repoRoot: request.repoRoot });
245
+ if (!resolved.ok) return failedFinalization(request, { code: resolved.code, message: resolved.message });
246
+ const parsed = parseArtifactName(request.artifact);
247
+ if (!parsed || parsed.family !== request.family) {
248
+ return failedFinalization(request, {
249
+ code: 'ARTIFACT_IDENTITY_INVALID',
250
+ message: `artifact '${request.artifact}' does not match ${request.family}`
251
+ }, { taskId: resolved.taskId, taskDir: resolved.taskDir });
252
+ }
253
+ const validated = validateCompletedArtifact(resolved.taskDir, request.family, request.artifact, parsed.round);
254
+ if (!validated.ok) {
255
+ return failedFinalization(request, validated.error, { taskId: resolved.taskId, taskDir: resolved.taskDir });
256
+ }
257
+ let content: string;
258
+ try { content = fs.readFileSync(validated.artifact.path, 'utf8'); }
259
+ catch (error) {
260
+ return failedFinalization(request, { code: 'ARTIFACT_NOT_READABLE', message: String(error) }, {
261
+ taskId: resolved.taskId, taskDir: resolved.taskDir
262
+ });
263
+ }
264
+ let taskContent: string;
265
+ try { taskContent = fs.readFileSync(resolved.taskMdPath, 'utf8'); }
266
+ catch (error) {
267
+ return failedFinalization(request, { code: 'TASK_READ_FAILED', message: error instanceof Error ? error.message : String(error) }, {
268
+ taskId: resolved.taskId, taskDir: resolved.taskDir
269
+ });
270
+ }
271
+ const result = validateLocalArtifact(content, {
272
+ family: request.family,
273
+ requiredSections: request.requiredSections,
274
+ taskContent,
275
+ artifact: request.artifact
276
+ });
277
+ const artifactSha256 = sha256Content(content);
278
+ let intent: LocalArtifactFinalizationIntent | null;
279
+ try {
280
+ intent = readLocalArtifactFinalizationIntent(resolved.repoRoot, resolved.taskId, request.family, request.artifact);
281
+ } catch (error) {
282
+ return failedFinalization(request, {
283
+ code: 'LOCAL_FINALIZATION_INTENT_INVALID',
284
+ message: error instanceof Error ? error.message : String(error)
285
+ }, { taskId: resolved.taskId, taskDir: resolved.taskDir, artifactSha256, semanticDigest: result.semanticDigest });
286
+ }
287
+ if (result.repairable) {
288
+ if (intent && (intent.state !== 'awaiting-repair' || intent.baselineSemanticDigest !== result.semanticDigest)) {
289
+ return provenanceFailure(
290
+ request, resolved, content, artifactSha256, result.semanticDigest,
291
+ 'LOCAL_REPAIR_PROVENANCE_CONFLICT',
292
+ 'a different local repair baseline is already recorded for this artifact'
293
+ );
294
+ }
295
+ if (!intent) {
296
+ try {
297
+ writeLocalArtifactFinalizationIntent(resolved.repoRoot, {
298
+ version: 1,
299
+ taskId: resolved.taskId,
300
+ family: request.family,
301
+ artifact: request.artifact,
302
+ state: 'awaiting-repair',
303
+ baselineSemanticDigest: result.semanticDigest,
304
+ artifactSha256,
305
+ semanticDigest: result.semanticDigest
306
+ });
307
+ } catch (error) {
308
+ return failedFinalization(request, {
309
+ code: 'LOCAL_FINALIZATION_INTENT_WRITE_FAILED',
310
+ message: error instanceof Error ? error.message : String(error)
311
+ }, { taskId: resolved.taskId, taskDir: resolved.taskDir, artifactSha256, semanticDigest: result.semanticDigest });
312
+ }
313
+ }
314
+ return {
315
+ status: 'failed',
316
+ changed: false,
317
+ taskId: resolved.taskId,
318
+ taskDir: resolved.taskDir,
319
+ family: request.family,
320
+ artifact: request.artifact,
321
+ artifactSha256,
322
+ semanticDigest: result.semanticDigest,
323
+ repairable: true,
324
+ diagnostics: result.diagnostics,
325
+ error: {
326
+ code: 'LOCAL_ARTIFACT_INVALID',
327
+ message: result.diagnostics.map((item) => `${item.code}: ${item.message}`).join('; ')
328
+ }
329
+ };
330
+ }
331
+ if (!result.ok) {
332
+ return {
333
+ status: 'failed',
334
+ changed: false,
335
+ taskId: resolved.taskId,
336
+ taskDir: resolved.taskDir,
337
+ family: request.family,
338
+ artifact: request.artifact,
339
+ artifactSha256,
340
+ semanticDigest: result.semanticDigest,
341
+ repairable: false,
342
+ diagnostics: result.diagnostics,
343
+ error: {
344
+ code: 'LOCAL_ARTIFACT_INVALID',
345
+ message: result.diagnostics.map((item) => `${item.code}: ${item.message}`).join('; ')
346
+ }
347
+ };
348
+ }
349
+ if (intent?.state === 'awaiting-repair' && intent.baselineSemanticDigest !== result.semanticDigest) {
350
+ return provenanceFailure(
351
+ request, resolved, content, artifactSha256, result.semanticDigest,
352
+ 'LOCAL_REPAIR_BASELINE_MISMATCH',
353
+ 'the repaired artifact semantic digest does not match the recorded repair baseline'
354
+ );
355
+ }
356
+ if ((intent?.state === 'passed' || intent?.state === 'consumed')
357
+ && (intent.artifactSha256 !== artifactSha256 || intent.semanticDigest !== result.semanticDigest)) {
358
+ return provenanceFailure(
359
+ request, resolved, content, artifactSha256, result.semanticDigest,
360
+ 'LOCAL_REPAIR_PROVENANCE_CONFLICT',
361
+ 'the artifact changed after its finalization provenance was recorded'
362
+ );
363
+ }
364
+ if (intent?.state === 'consumed') {
365
+ return {
366
+ status: 'passed',
367
+ changed: false,
368
+ taskId: resolved.taskId,
369
+ taskDir: resolved.taskDir,
370
+ family: request.family,
371
+ artifact: request.artifact,
372
+ artifactSha256,
373
+ semanticDigest: result.semanticDigest,
374
+ repairable: false,
375
+ diagnostics: result.diagnostics,
376
+ error: null
377
+ };
378
+ }
379
+ try {
380
+ writeLocalArtifactFinalizationIntent(resolved.repoRoot, {
381
+ version: 1,
382
+ taskId: resolved.taskId,
383
+ family: request.family,
384
+ artifact: request.artifact,
385
+ state: 'passed',
386
+ baselineSemanticDigest: intent?.baselineSemanticDigest ?? null,
387
+ artifactSha256,
388
+ semanticDigest: result.semanticDigest
389
+ });
390
+ } catch (error) {
391
+ return failedFinalization(request, {
392
+ code: 'LOCAL_FINALIZATION_INTENT_WRITE_FAILED',
393
+ message: error instanceof Error ? error.message : String(error)
394
+ }, { taskId: resolved.taskId, taskDir: resolved.taskDir, artifactSha256, semanticDigest: result.semanticDigest });
395
+ }
396
+ return {
397
+ status: result.ok ? 'passed' : 'failed',
398
+ changed: false,
399
+ taskId: resolved.taskId,
400
+ taskDir: resolved.taskDir,
401
+ family: request.family,
402
+ artifact: request.artifact,
403
+ artifactSha256,
404
+ semanticDigest: result.semanticDigest,
405
+ repairable: result.repairable,
406
+ diagnostics: result.diagnostics,
407
+ error: result.ok ? null : {
408
+ code: 'LOCAL_ARTIFACT_INVALID',
409
+ message: result.diagnostics.map((item) => `${item.code}: ${item.message}`).join('; ')
410
+ }
411
+ };
412
+ }
413
+
414
+ export {
415
+ LOCAL_ARTIFACT_REQUIRED_SECTIONS,
416
+ consumeLocalArtifactFinalizationIntent,
417
+ finalizeLocalArtifact,
418
+ readLocalArtifactFinalizationIntent,
419
+ canonicalSemanticDigest as semanticDigest,
420
+ sha256Content,
421
+ validateLocalArtifact
422
+ };
423
+ export type {
424
+ LocalArtifactDiagnostic,
425
+ LocalArtifactDiagnosticCode,
426
+ LocalArtifactFamily,
427
+ LocalArtifactFinalizationRequest,
428
+ LocalArtifactFinalizationResult,
429
+ LocalArtifactFinalizationIntent,
430
+ LocalArtifactValidationOptions,
431
+ LocalArtifactValidationResult
432
+ };