@fitlab-ai/agent-infra 0.9.13 → 0.9.15

package/templates/.agents/skills/test/SKILL.en.md

@@ -23,11 +23,31 @@ Execute the project's full test workflow including compilation checks and unit t
 
 Confirm no compilation errors.
 
-## 2. Run Unit Tests by Layer
+## 2. Run Tests by Layer
 
-This project uses three test layers as an optional optimization; if the test suite is small, all layers may map to the same full test command.
+This project uses test layers as an optional optimization; if the test suite is small, all layers may map to the same full test command.
 
-### smoke (target <5s)
+### fast smoke (reference target <10s)
+
+```bash
+# TODO: Replace with this project's fast smoke subset command
+# npm run test:smoke:fast       (Node.js)
+# pytest -m "not slow"          (Python)
+# go test -short ./...          (Go)
+```
+
+Use for code-task inner loops when the project provides a build-free fast path. It should cover the same tests as smoke while skipping redundant compilation or generation.
+
+### platform-smoke (cross-platform boundary)
+
+```bash
+# TODO: Replace with this project's cross-platform integration subset command
+# npm run test:platform-smoke:fast (Node.js)
+```
+
+Use for real CLI, git, shell, or subprocess tests moved out of the unit tier while preserving their original Windows/macOS execution boundary.
+
+### smoke (reference target <10s)
 
 ```bash
 # TODO: Replace with this project's smoke subset command
@@ -37,11 +57,11 @@ This project uses three test layers as an optional optimization; if the test sui
 ```
 
 Use for:
-- code-task inner loops
-- save-and-run / frequent feedback
+- after completing an implementation step
+- save-and-run / frequent feedback when no fast path exists
 - project structure, configuration, and template contract checks
 
-### core (target <15s)
+### core (reference target <95s)
 
 ```bash
 # TODO: Replace with this project's core subset command
@@ -55,7 +75,7 @@ Use for:
 - final verification before writing code.md / code-r{N}.md
 - local gate before pushing a PR
 
-### full (complete test suite)
+### full (reference target <100s)
 
 ```bash
 # TODO: Replace with this project's full test command
@@ -72,6 +92,8 @@ Use for:
 
 If the project is not layered yet, smoke / core / full may all map to the same full test command; layering is a feedback-speed optimization, not a prerequisite for using the collaboration workflow.
 
+Reference targets are feedback budgets, not merge gates. If coverage is collected, document whether it runs only on the main branch and whether it blocks acceptance.
+
 ## 3. Output Results
 
 Report test result summary:

package/templates/.agents/skills/test/SKILL.zh-CN.md

@@ -21,11 +21,31 @@ description: >
 
 确认没有编译错误。
 
-## 2. 运行单元测试（按层级选择）
+## 2. 运行测试（按层级选择）
 
-三层测试是可选的反馈速度优化；如果测试套件较小，所有层级都可以映射到同一个完整测试命令。
+测试层级是可选的反馈速度优化；如果测试套件较小，所有层级都可以映射到同一个完整测试命令。
 
-### smoke（目标 <5s）
+### fast smoke（参考目标 <10s）
+
+```bash
+# TODO：替换为项目的 fast smoke 子集命令
+# npm run test:smoke:fast       (Node.js)
+# pytest -m "not slow"          (Python)
+# go test -short ./...          (Go)
+```
+
+当项目提供不重复构建的快速路径时，用于 code-task 内循环。它应覆盖与 smoke 相同的测试，同时跳过重复的编译或生成步骤。
+
+### platform-smoke（跨平台边界）
+
+```bash
+# TODO：替换为项目的跨平台 integration 子集命令
+# npm run test:platform-smoke:fast (Node.js)
+```
+
+用于承接从 unit 层迁出的真实 CLI、git、shell 或子进程测试，同时保留其原有 Windows/macOS 执行边界。
+
+### smoke（参考目标 <10s）
 
 ```bash
 # TODO：替换为项目的 smoke 子集命令
@@ -35,11 +55,11 @@ description: >
 ```
 
 适用场景：
-- code-task 内循环
-- 保存即跑 / 频繁反馈
+- 完成一个实施步骤后
+- 项目没有 fast 路径时的保存即跑 / 频繁反馈
 - 仅断言项目结构、配置、模板契约
 
-### core（目标 <15s）
+### core（参考目标 <95s）
 
 ```bash
 # TODO：替换为项目的 core 子集命令
@@ -53,7 +73,7 @@ description: >
 - 写 code.md / code-r{N}.md 报告前的最终验证
 - 推送 PR 前的本地把关
 
-### full（完整测试套件）
+### full（参考目标 <100s）
 
 ```bash
 # TODO：替换为项目的完整测试命令
@@ -70,6 +90,8 @@ description: >
 
 如果项目尚未分层，smoke / core / full 可以全部使用完整测试命令；分层不是使用协作工作流的前置条件。
 
+参考目标是反馈预算，不是合并门禁。如果采集覆盖率，应说明是否仅在 main 分支运行，以及是否阻塞验收。
+
 ## 3. 输出结果
 
 报告测试结果摘要：

package/templates/.agents/skills/update-agent-infra/scripts/sync-templates.js

@@ -1269,6 +1269,9 @@ function syncTemplates(projectRoot, templateRootOverride) {
     }
   }
   const version = resolveVersionFromTemplateRoot(templateRoot);
+  const projectTemplateRoot = path.join(projectRoot, 'templates');
+  const sourceRepositoryTemplate = fs.existsSync(projectTemplateRoot)
+    && fs.realpathSync(templateRoot) === fs.realpathSync(projectTemplateRoot);
 
   const { project, org, language: lang = 'en' } = cfg;
   const platformType = cfg.platform?.type || DEFAULTS.platform.type;
@@ -1771,6 +1774,17 @@ function syncTemplates(projectRoot, templateRootOverride) {
     for (const [tgt, src] of selected) {
       if (expectedTargets) expectedTargets.add(tgt);
 
+      if (sourceRepositoryTemplate && tgt === '.github/workflows/pr-label.yml') {
+        report.managed.protected.push({
+          target: tgt,
+          reason: 'source-repository',
+          baseline: trustedBaseline(managedBaselines[tgt]),
+          local: fs.existsSync(path.join(projectRoot, tgt)) ? sha256(fs.readFileSync(path.join(projectRoot, tgt))) : null,
+          template: sha256(renderContent(fs.readFileSync(path.join(templateRoot, src), 'utf8'), vars))
+        });
+        continue;
+      }
+
       if (matchesAny(tgt, merged) || matchesAny(tgt, ejected)) {
         report.managed.skippedMerged.push(tgt);
         continue;

package/templates/.agents/templates/task.en.md

@@ -36,10 +36,16 @@ delivery_remote_head:          # Most recent successfully delivered task branch
 
 ### Constraints
 
+| constraint_id | statement | status | authority | source | evidence | derived_from | approval_evidence |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+
 ### Confirmed Decisions
 
 ### Candidate and Rejected Options
 
+| candidate_id | statement | status | constraint_ids | impact | evidence |
+| --- | --- | --- | --- | --- | --- |
+
 ### Acceptance Criteria
 
 ### Open Questions

package/templates/.agents/templates/task.zh-CN.md

@@ -36,10 +36,16 @@ delivery_remote_head:          # 最近一次成功交付到 remote 的任务分
 
 ### 约束
 
+| constraint_id | statement | status | authority | source | evidence | derived_from | approval_evidence |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+
 ### 已确认决策
 
 ### 候选与否决方案
 
+| candidate_id | statement | status | constraint_ids | impact | evidence |
+| --- | --- | --- | --- | --- | --- |
+
 ### 验收标准
 
 ### 未决事项

package/templates/.claude/commands/run-manual-validation.en.md

@@ -1,6 +1,6 @@
 ---
 description: "Run host-side task validation and record sanitized evidence"
-usage: "/run-manual-validation [--task <ref> | -t <ref>] [--scope snapshot|inplace] [--timeout <ms>] [--format text|json] -- <command...>"
+usage: "/run-manual-validation [--task <ref> | -t <ref> | --branch <ref>] [--scope snapshot|inplace] [--timeout <ms>] [--format text|json] -- <command...>"
 disable-model-invocation: true
 ---
 

package/templates/.claude/commands/run-manual-validation.zh-CN.md

@@ -1,6 +1,6 @@
 ---
 description: "运行宿主侧任务校验并记录去敏证据"
-usage: "/run-manual-validation [--task <ref> | -t <ref>] [--scope snapshot|inplace] [--timeout <ms>] [--format text|json] -- <command...>"
+usage: "/run-manual-validation [--task <ref> | -t <ref> | --branch <ref>] [--scope snapshot|inplace] [--timeout <ms>] [--format text|json] -- <command...>"
 disable-model-invocation: true
 ---
 

package/dist/lib/platform/adapters.js

@@ -1,56 +0,0 @@
-const adapters = new Map();
-function registerPlatformAdapter(adapter) {
-    if (!adapter.type.trim())
-        throw new Error('Platform adapter type is required');
-    adapters.set(adapter.type, adapter);
-}
-function getPlatformAdapter(type) {
-    return type ? adapters.get(type) ?? null : null;
-}
-function registerPlatformCapabilities(type, capabilities) {
-    const adapter = adapters.get(type) ?? { type };
-    adapters.set(type, { ...adapter, ...capabilities });
-}
-function hasPlatformCapability(type, capability) {
-    const adapter = getPlatformAdapter(type);
-    if (capability === 'change-request')
-        return typeof adapter?.inspectChangeRequest === 'function';
-    if (capability === 'issue-closing-change-requests')
-        return typeof adapter?.inspectIssueClosingChangeRequests === 'function';
-    if (capability === 'required-checks')
-        return typeof adapter?.inspectRequiredChecks === 'function';
-    return typeof adapter?.resolveChangeRequestGitEvidence === 'function';
-}
-function inspectPlatformIssueClosingChangeRequests(type, context) {
-    const adapter = getPlatformAdapter(type);
-    return adapter?.inspectIssueClosingChangeRequests?.(context) ??
-        unsupported(type, 'issue closing change-request inspection');
-}
-function unsupported(type, capability) {
-    return {
-        ok: false,
-        error: {
-            code: 'PLATFORM_CAPABILITY_UNSUPPORTED',
-            message: `Platform '${type || 'none'}' does not provide ${capability}`,
-            retryable: false
-        }
-    };
-}
-function inspectPlatformChangeRequest(type, context) {
-    const adapter = getPlatformAdapter(type);
-    return adapter?.inspectChangeRequest?.(context) ?? unsupported(type, 'change-request inspection');
-}
-function inspectPlatformRequiredChecks(type, context) {
-    const adapter = getPlatformAdapter(type);
-    return adapter?.inspectRequiredChecks?.(context) ?? unsupported(type, 'required-checks inspection');
-}
-function resolvePlatformChangeRequestGitEvidence(type, context) {
-    const adapter = getPlatformAdapter(type);
-    return adapter?.resolveChangeRequestGitEvidence?.(context) ??
-        unsupported(type, 'change-request Git evidence');
-}
-function listPlatformAdapters() {
-    return [...adapters.keys()].sort();
-}
-export { getPlatformAdapter, hasPlatformCapability, inspectPlatformChangeRequest, inspectPlatformIssueClosingChangeRequests, inspectPlatformRequiredChecks, listPlatformAdapters, registerPlatformAdapter, registerPlatformCapabilities, resolvePlatformChangeRequestGitEvidence };
-//# sourceMappingURL=adapters.js.map

package/lib/platform/adapters.ts

@@ -1,197 +0,0 @@
-import type { PlatformError, PlatformResult } from './types.ts';
-import type { ResourceIdentity } from './resource-identity.ts';
-
-type PlatformAdapterContext = {
-  cwd: string;
-  gitRemote?: (cwd: string) => string | null;
-  client?: unknown;
-};
-
-type PlatformMergeability = {
-  state: 'mergeable' | 'conflicting' | 'unknown';
-  detail: string | null;
-};
-
-type PlatformChangeRequestSnapshot = {
-  repository: string;
-  number: number;
-  nodeId: string;
-  url: string;
-  state: 'open' | 'closed';
-  title: string;
-  body: string;
-  draft: boolean;
-  head: { repository: string; ref: string; sha: string };
-  base: { repository: string; ref: string; sha: string };
-  mergedAt: string | null;
-  mergeCommitSha: string | null;
-  labels: string[];
-  assignees: string[];
-  milestone: string | null;
-  mergeability?: PlatformMergeability;
-  identity?: ResourceIdentity;
-};
-
-type PlatformCheckSnapshot = {
-  name: string;
-  bucket: 'pass' | 'fail' | 'pending' | 'cancel';
-  workflow?: string | null;
-  conclusion?: string | null;
-  detailsUrl?: string | null;
-  startedAt?: string | null;
-  completedAt?: string | null;
-};
-
-type PlatformInspectionResult<T> = {
-  ok: boolean;
-  value?: T;
-  error?: PlatformError;
-};
-
-type ChangeRequestInspectionContext = PlatformAdapterContext & {
-  repository: string;
-  number: number;
-};
-
-type IssueClosingChangeRequestsContext = PlatformAdapterContext & {
-  repository: string;
-  issueNumber: number;
-};
-
-type RequiredChecksInspectionContext = ChangeRequestInspectionContext & {
-  headSha: string;
-};
-
-type ChangeRequestGitEvidenceContext = ChangeRequestInspectionContext & {
-  pullRequest: PlatformChangeRequestSnapshot;
-};
-
-type PlatformChangeRequestGitEvidenceSpec = {
-  remoteUrl: string;
-  reviewedHeadRef: string;
-  targetHeadRef: string;
-};
-
-type PlatformAdapter = {
-  type: string;
-  resolveContext(context: PlatformAdapterContext): PlatformResult;
-  inspectChangeRequest?(
-    context: ChangeRequestInspectionContext
-  ): PlatformInspectionResult<PlatformChangeRequestSnapshot>;
-  inspectIssueClosingChangeRequests?(
-    context: IssueClosingChangeRequestsContext
-  ): PlatformInspectionResult<PlatformChangeRequestSnapshot[]>;
-  inspectRequiredChecks?(
-    context: RequiredChecksInspectionContext
-  ): PlatformInspectionResult<PlatformCheckSnapshot[]>;
-  resolveChangeRequestGitEvidence?(
-    context: ChangeRequestGitEvidenceContext
-  ): PlatformInspectionResult<PlatformChangeRequestGitEvidenceSpec>;
-};
-
-const adapters = new Map<string, PlatformAdapter>();
-
-function registerPlatformAdapter(adapter: PlatformAdapter): void {
-  if (!adapter.type.trim()) throw new Error('Platform adapter type is required');
-  adapters.set(adapter.type, adapter);
-}
-
-function getPlatformAdapter(type: string | null): PlatformAdapter | null {
-  return type ? adapters.get(type) ?? null : null;
-}
-
-function registerPlatformCapabilities(
-  type: string,
-  capabilities: Pick<
-    PlatformAdapter,
-    'inspectChangeRequest' | 'inspectIssueClosingChangeRequests' | 'inspectRequiredChecks' | 'resolveChangeRequestGitEvidence'
-  >
-): void {
-  const adapter = adapters.get(type) ?? { type } as PlatformAdapter;
-  adapters.set(type, { ...adapter, ...capabilities });
-}
-
-function hasPlatformCapability(
-  type: string | null,
-  capability: 'change-request' | 'issue-closing-change-requests' | 'required-checks' | 'change-request-git-evidence'
-): boolean {
-  const adapter = getPlatformAdapter(type);
-  if (capability === 'change-request') return typeof adapter?.inspectChangeRequest === 'function';
-  if (capability === 'issue-closing-change-requests') return typeof adapter?.inspectIssueClosingChangeRequests === 'function';
-  if (capability === 'required-checks') return typeof adapter?.inspectRequiredChecks === 'function';
-  return typeof adapter?.resolveChangeRequestGitEvidence === 'function';
-}
-
-function inspectPlatformIssueClosingChangeRequests(
-  type: string | null,
-  context: IssueClosingChangeRequestsContext
-): PlatformInspectionResult<PlatformChangeRequestSnapshot[]> {
-  const adapter = getPlatformAdapter(type);
-  return adapter?.inspectIssueClosingChangeRequests?.(context) ??
-    unsupported(type, 'issue closing change-request inspection');
-}
-
-function unsupported<T>(type: string | null, capability: string): PlatformInspectionResult<T> {
-  return {
-    ok: false,
-    error: {
-      code: 'PLATFORM_CAPABILITY_UNSUPPORTED',
-      message: `Platform '${type || 'none'}' does not provide ${capability}`,
-      retryable: false
-    }
-  };
-}
-
-function inspectPlatformChangeRequest(
-  type: string | null,
-  context: ChangeRequestInspectionContext
-): PlatformInspectionResult<PlatformChangeRequestSnapshot> {
-  const adapter = getPlatformAdapter(type);
-  return adapter?.inspectChangeRequest?.(context) ?? unsupported(type, 'change-request inspection');
-}
-
-function inspectPlatformRequiredChecks(
-  type: string | null,
-  context: RequiredChecksInspectionContext
-): PlatformInspectionResult<PlatformCheckSnapshot[]> {
-  const adapter = getPlatformAdapter(type);
-  return adapter?.inspectRequiredChecks?.(context) ?? unsupported(type, 'required-checks inspection');
-}
-
-function resolvePlatformChangeRequestGitEvidence(
-  type: string | null,
-  context: ChangeRequestGitEvidenceContext
-): PlatformInspectionResult<PlatformChangeRequestGitEvidenceSpec> {
-  const adapter = getPlatformAdapter(type);
-  return adapter?.resolveChangeRequestGitEvidence?.(context) ??
-    unsupported(type, 'change-request Git evidence');
-}
-
-function listPlatformAdapters(): string[] {
-  return [...adapters.keys()].sort();
-}
-
-export {
-  getPlatformAdapter,
-  hasPlatformCapability,
-  inspectPlatformChangeRequest,
-  inspectPlatformIssueClosingChangeRequests,
-  inspectPlatformRequiredChecks,
-  listPlatformAdapters,
-  registerPlatformAdapter,
-  registerPlatformCapabilities,
-  resolvePlatformChangeRequestGitEvidence
-};
-export type {
-  ChangeRequestGitEvidenceContext,
-  ChangeRequestInspectionContext,
-  IssueClosingChangeRequestsContext,
-  PlatformAdapter,
-  PlatformAdapterContext,
-  PlatformChangeRequestGitEvidenceSpec,
-  PlatformChangeRequestSnapshot,
-  PlatformCheckSnapshot,
-  PlatformInspectionResult,
-  PlatformMergeability,
-  RequiredChecksInspectionContext
-};

package/templates/.agents/scripts/security-alerts.github.sh

@@ -1,151 +0,0 @@
-#!/bin/sh
-
-set -e
-
-operation="${1:-}"
-shift || true
-number=""
-reason=""
-comment_file=""
-
-while [ "$#" -gt 0 ]; do
-  case "$1" in
-    --number)
-      number="${2:-}"
-      shift
-      ;;
-    --reason)
-      reason="${2:-}"
-      shift
-      ;;
-    --comment-file)
-      comment_file="${2:-}"
-      shift
-      ;;
-    *)
-      echo "Unknown option: $1" >&2
-      exit 2
-      ;;
-  esac
-  shift
-done
-
-emit_error() {
-  code="$1"
-  message="$2"
-  node - "$operation" "$code" "$message" <<'NODE'
-const [operation, code, message] = process.argv.slice(2);
-process.stdout.write(`${JSON.stringify({ status: "failed", operation, error: { code, message } })}\n`);
-NODE
-}
-
-case "$operation" in
-  read-dependabot|dismiss-dependabot|read-codescan|dismiss-codescan) ;;
-  *)
-    emit_error "SECURITY_OPERATION_INVALID" "Unknown security alert operation."
-    exit 1
-    ;;
-esac
-
-case "$number" in
-  ''|*[!0-9]*)
-    emit_error "SECURITY_NUMBER_INVALID" "Alert number must be a positive integer."
-    exit 1
-    ;;
-esac
-
-if ! command -v gh >/dev/null 2>&1; then
-  emit_error "PLATFORM_CLI_MISSING" "The platform CLI is not installed."
-  exit 1
-fi
-if ! gh auth token >/dev/null 2>&1; then
-  emit_error "PLATFORM_NOT_AUTHENTICATED" "The platform CLI is not authenticated."
-  exit 1
-fi
-repo="$(gh repo view --json nameWithOwner --jq '.nameWithOwner')" || {
-  emit_error "PLATFORM_REPOSITORY_UNAVAILABLE" "Unable to access the current repository."
-  exit 1
-}
-
-case "$operation" in
-  *dependabot*) endpoint="repos/$repo/dependabot/alerts/$number" ;;
-  *codescan*) endpoint="repos/$repo/code-scanning/alerts/$number" ;;
-esac
-
-tmpdir="$(mktemp -d)"
-trap 'rm -rf "$tmpdir"' EXIT HUP INT TERM
-
-if [ "$operation" = "read-dependabot" ] || [ "$operation" = "read-codescan" ]; then
-  if ! gh api "$endpoint" > "$tmpdir/response.json" 2> "$tmpdir/error.txt"; then
-    emit_error "SECURITY_API_FAILED" "Unable to read the security alert."
-    exit 2
-  fi
-else
-  if [ -z "$reason" ] || [ -z "$comment_file" ] || [ ! -f "$comment_file" ]; then
-    emit_error "SECURITY_DISMISS_INPUT_INVALID" "Dismissal reason and comment file are required."
-    exit 1
-  fi
-  if ! gh api "$endpoint" > "$tmpdir/current.json" 2> "$tmpdir/error.txt"; then
-    emit_error "SECURITY_API_FAILED" "Unable to read the security alert before dismissal."
-    exit 2
-  fi
-  state="$(node - "$tmpdir/current.json" <<'NODE'
-const fs = require("node:fs");
-try {
-  const alert = JSON.parse(fs.readFileSync(process.argv[2], "utf8"));
-  process.stdout.write(typeof alert.state === "string" ? alert.state : "invalid");
-} catch {
-  process.stdout.write("invalid");
-}
-NODE
-)"
-  case "$state" in
-    open) ;;
-    dismissed|fixed)
-      node - "$operation" "$tmpdir/current.json" <<'NODE'
-const fs = require("node:fs");
-const [operation, responsePath] = process.argv.slice(2);
-const data = JSON.parse(fs.readFileSync(responsePath, "utf8"));
-process.stdout.write(`${JSON.stringify({ status: "no-op", operation, data })}\n`);
-NODE
-      exit 0
-      ;;
-    *)
-      emit_error "SECURITY_RESPONSE_INVALID" "The platform returned an alert without a valid state."
-      exit 1
-      ;;
-  esac
-  node - "$reason" "$comment_file" > "$tmpdir/payload.json" <<'NODE'
-const fs = require("node:fs");
-const [reason, commentFile] = process.argv.slice(2);
-process.stdout.write(JSON.stringify({
-  state: "dismissed",
-  dismissed_reason: reason,
-  dismissed_comment: fs.readFileSync(commentFile, "utf8")
-}));
-NODE
-  if ! gh api --method PATCH "$endpoint" --input "$tmpdir/payload.json" > "$tmpdir/response.json" 2> "$tmpdir/error.txt"; then
-    emit_error "SECURITY_API_FAILED" "Unable to dismiss the security alert."
-    exit 2
-  fi
-fi
-
-node - "$operation" "$tmpdir/response.json" <<'NODE'
-const fs = require("node:fs");
-const [operation, responsePath] = process.argv.slice(2);
-const raw = fs.readFileSync(responsePath, "utf8").trim();
-let data = null;
-if (raw) {
-  try {
-    data = JSON.parse(raw);
-  } catch {
-    process.stdout.write(`${JSON.stringify({
-      status: "failed",
-      operation,
-      error: { code: "SECURITY_RESPONSE_INVALID", message: "The platform returned invalid JSON." }
-    })}\n`);
-    process.exit(1);
-  }
-}
-process.stdout.write(`${JSON.stringify({ status: "applied", operation, data })}\n`);
-NODE

package/templates/.agents/scripts/security-alerts.sh

@@ -1,31 +0,0 @@
-#!/bin/sh
-
-set -e
-
-operation="${1:-}"
-
-node - "$operation" <<'NODE'
-const operation = process.argv[2] || "";
-const known = new Set([
-  "read-dependabot",
-  "dismiss-dependabot",
-  "read-codescan",
-  "dismiss-codescan"
-]);
-const payload = known.has(operation)
-  ? {
-      status: "degraded",
-      operation,
-      error: {
-        code: "PLATFORM_SECURITY_UNSUPPORTED",
-        message: "The current platform does not provide a security alert adapter."
-      }
-    }
-  : {
-      status: "failed",
-      operation,
-      error: { code: "SECURITY_OPERATION_INVALID", message: "Unknown security alert operation." }
-    };
-process.stdout.write(`${JSON.stringify(payload)}\n`);
-process.exit(known.has(operation) ? 0 : 1);
-NODE