@lchase/kiln 0.0.0-stage → 0.1.0

package/workflows/feature.yaml

@@ -0,0 +1,239 @@
+# One Kiln job, run by yak (@lchase/yak).
+#
+# Faithful to Lawrence Chase's factory plugin v0.7.0 (MIT):
+# https://github.com/lchase/coding-agent-plugins/tree/4c84a2ce7fbde5ac298c0de9f0b90141eac4ed98/plugins/factory
+#   skills/factory/SKILL.md          (the loop: spec, build, 4 reviews, approver)
+#   agents/spec-writer.md            model opus
+#   agents/builder.md                model opus
+#   agents/review-security.md        model opus
+#   agents/review-ux.md              model sonnet
+#   agents/review-ui.md              model sonnet
+#   agents/review-code.md            model sonnet
+#   agents/approver.md               model opus
+# The prompt bodies are copied verbatim into prompts/factory/. Each step's
+# prompt file is a Kiln preamble (prompts/kiln/) that maps the factory's
+# job-folder files onto yak artifacts and tells the agent to return JSON
+# instead of writing a file. `kiln tick` appends the factory body and rewrites
+# prompt.file to an absolute path under the kiln directory before launching,
+# because yak resolves prompt.file from the checkout cwd
+# (yak src/steps/agent.ts, path.resolve(cwd, file)).
+#
+# yak 0.6.1 limits this file still works inside:
+# - command.run is not templated. verify runs $KILN_TEST through
+#   dist/truncate-output.js ($KILN_VERIFY_WRAPPER). `kiln tick` sets
+#   KILN_TEST from repos.<repo>.test. An empty value fails the step. The
+#   wrapper keeps the test's exit code and cuts stdout/stderr to the last
+#   200 lines or 20KB, with a leading `[truncated:` line when it cuts.
+#   land commits with `git commit -m "kiln: $KILN_TASK_TITLE"`. verify and
+#   land need `input` (it carries a per-launch runNonce) so one job cannot
+#   cache-hit another. land runs only when approval.decision is approve,
+#   and it does not fail when the index is empty. `git add -A` stages every
+#   uncommitted path in the worktree.
+# - input.baseRef is the commit the worktree was branched from (full SHA).
+#   deliver=local uses checkout HEAD. deliver=pr uses origin/<base>, or the
+#   upstream yak/<run-id> tip when the job is stacked. Every preamble maps
+#   `<main branch>` to that SHA. The worktree branch is yak/<run-id>.
+# - A loop body does not evaluate skipIf, so the UI reviewer is a real step.
+#   review-ui.md itself returns PASS when no UI changed.
+# - A loop-body artifact is not a top-level producer. The approver reads the
+#   last verify on rounds.verify; needs: [verify] on the approver is rejected.
+#   Reviewers run inside the loop, so they need verify directly. They inherit
+#   input (for baseRef) instead of listing it in needs, and the loop's
+#   concurrency is 4 so the four reviewers start together.
+name: kiln-feature
+version: "1"
+inputSchema:
+  inline:
+    type: object
+    additionalProperties: false
+    properties:
+      title: { type: string }
+      description: { type: string }
+      acceptance: { type: string }
+      runNonce: { type: string }
+      baseRef: { type: string }
+    required: [title, description, acceptance, runNonce, baseRef]
+steps:
+  - id: spec
+    needs: [input]
+    agent:
+      model: opus
+      prompt:
+        file: prompts/kiln/spec.md
+      schema:
+        inline:
+          type: object
+          additionalProperties: false
+          properties:
+            goal: { type: string }
+            design: { type: string }
+            acceptance: { type: string }
+          required: [goal, design, acceptance]
+      tools: [Read, Grep, Glob, Bash, Write, Skill]
+    produces: spec
+
+  - id: revise
+    needs: [spec]
+    loop:
+      # A BLOCKED build, a red verify (exitCode != 0), or any CHANGES verdict
+      # sends the builder around again. failOn: never on verify is what keeps
+      # a red test from failing the run before that can happen. max 2 rounds,
+      # then the approver still runs (factory step 5: round 2 done goes to
+      # the approver).
+      until: 'build.status == "READY" && security.verdict == "PASS" && ux.verdict == "PASS" && ui.verdict == "PASS" && code.verdict == "PASS" && verify.exitCode == 0'
+      budget:
+        maxIterations: 2
+      onExhausted: continue
+      concurrency: 4
+      body:
+        # security, ux, ui, code, and verify are later in this body, so on
+        # build they are the previous round. Round 1 leaves them undefined;
+        # the prompt's `.field ||` defaults cover findings and verify text.
+        # Round 1 leaves verify undefined. A verify that ran with exitCode
+        # null was signal-killed, so `verify.exitCode == null` is not labeled
+        # round 1. Exit code 0 still renders as 0.
+        # `{{ security || "x" }}` does not validate.
+        - id: build
+          needs: [input, spec, security, ux, ui, code, verify]
+          agent:
+            model: opus
+            prompt:
+              file: prompts/kiln/build.md
+            schema:
+              inline:
+                type: object
+                additionalProperties: false
+                properties:
+                  summary: { type: string }
+                  status: { type: string, enum: [READY, BLOCKED] }
+                required: [summary, status]
+            tools: [Read, Grep, Glob, Bash, Write, Edit, Skill]
+          produces: build
+
+        - id: verify
+          needs: [input, build]
+          command:
+            run: 'node "${KILN_VERIFY_WRAPPER:?KILN_VERIFY_WRAPPER is empty}"'
+            failOn: never
+            capture: [stdout, stderr, exitCode]
+          produces: verify
+
+        # Build and verify stay in order. These four do not need each other,
+        # so concurrency 4 starts them together. They have no Write or Edit.
+        # Bash stays, because the factory prompts diff with git. Yak warns
+        # that concurrent Bash steps share one cwd. The preambles forbid
+        # re-running tests, builds, and any other write; git and file reads
+        # stay. input is inherited for baseRef; it is not in needs.
+        - id: security
+          needs: [spec, build, verify]
+          agent:
+            model: opus
+            context:
+              inherit: [input]
+            prompt:
+              file: prompts/kiln/security.md
+            schema:
+              inline:
+                type: object
+                additionalProperties: false
+                properties:
+                  verdict: { type: string, enum: [PASS, CHANGES] }
+                  findings: { type: string }
+                required: [verdict, findings]
+            tools: [Read, Grep, Glob, Bash, Skill]
+          produces: security
+
+        - id: ux
+          needs: [spec, build, verify]
+          agent:
+            model: sonnet
+            context:
+              inherit: [input]
+            prompt:
+              file: prompts/kiln/ux.md
+            schema:
+              inline:
+                type: object
+                additionalProperties: false
+                properties:
+                  verdict: { type: string, enum: [PASS, CHANGES] }
+                  findings: { type: string }
+                required: [verdict, findings]
+            tools: [Read, Grep, Glob, Bash, Skill]
+          produces: ux
+
+        - id: ui
+          needs: [spec, build, verify]
+          agent:
+            model: sonnet
+            context:
+              inherit: [input]
+            prompt:
+              file: prompts/kiln/ui.md
+            schema:
+              inline:
+                type: object
+                additionalProperties: false
+                properties:
+                  verdict: { type: string, enum: [PASS, CHANGES] }
+                  findings: { type: string }
+                required: [verdict, findings]
+            tools: [Read, Grep, Glob, Bash, Skill]
+          produces: ui
+
+        - id: code
+          needs: [spec, build, verify]
+          agent:
+            model: sonnet
+            context:
+              inherit: [input]
+            prompt:
+              file: prompts/kiln/code.md
+            schema:
+              inline:
+                type: object
+                additionalProperties: false
+                properties:
+                  verdict: { type: string, enum: [PASS, CHANGES] }
+                  findings: { type: string }
+                required: [verdict, findings]
+            tools: [Read, Grep, Glob, Bash, Skill]
+          produces: code
+    produces: rounds
+
+  - id: approver
+    needs: [input, spec, rounds]
+    agent:
+      model: opus
+      prompt:
+        file: prompts/kiln/approver.md
+      schema:
+        inline:
+          type: object
+          additionalProperties: false
+          properties:
+            decision: { type: string, enum: [APPROVE, ESCALATE] }
+            reason: { type: string }
+          required: [decision, reason]
+      tools: [Read, Grep, Glob, Bash, Write, Skill]
+    produces: decision
+
+  - id: approve
+    needs: [input, decision]
+    gate:
+      schema:
+        inline:
+          type: object
+          additionalProperties: false
+          properties:
+            decision: { type: string, enum: [approve, reject] }
+          required: [decision]
+      render:
+        inline: 'Approve "{{input.title}}"? Agent decision: {{decision.decision}}. {{decision.reason}}'
+    produces: approval
+
+  - id: land
+    needs: [input, approval]
+    skipIf: 'approval.decision != "approve"'
+    command:
+      run: 'git add -A && git diff --cached --quiet || git commit -m "kiln: $KILN_TASK_TITLE"'