@minionry/minion 0.7.36

package/dist/server/services/plan/board-export.js

@@ -0,0 +1,214 @@
+// Copyright (c) 2025-present Minionry, Inc.
+// SPDX-License-Identifier: LicenseRef-Minionry-Software
+import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, relative } from 'node:path';
+import { SPACE_DIRNAME, SPACE_LAYOUT } from '../space-layout.js';
+import { NO_SPECS_DIR_ERROR, parseBoardDirectory, resolvePmDir } from './parser.js';
+import { validateTemplate } from './template-instantiator.js';
+const REDACTED = '[REDACTED]';
+const REDACTED_EMAIL = '[redacted-email]';
+const SECRET_PATTERNS = [
+    /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
+    /\bsk-ant-[A-Za-z0-9_-]{8,}/g,
+    /\bsk-[A-Za-z0-9_-]{20,}/g,
+    /\bgh[pousr]_[A-Za-z0-9]{20,}/g,
+    /\bgithub_pat_[A-Za-z0-9_]{20,}/g,
+    /\bAKIA[0-9A-Z]{16}\b/g,
+    /\bxox[baprs]-[A-Za-z0-9-]{8,}/g,
+    /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{4,}/g,
+    /\bBearer\s+[A-Za-z0-9._~+/=-]{16,}/g,
+];
+const SECRET_ASSIGNMENT = /\b((?:api[_-]?key|apikey|secret|token|password|passwd|access[_-]?key|auth[_-]?token|client[_-]?secret)s?)(\s*[:=]\s*)(["']?)[^\s"'`,;]{6,}\3/gi;
+const EMAIL_PATTERN = /[\w.+-]+@[\w-]+(?:\.[\w-]+)+/g;
+function escapeRegExp(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+export function sanitizeExportText(text, ctx) {
+    if (!text)
+        return text;
+    let out = text;
+    const home = ctx.home ?? homedir();
+    const wd = ctx.workingDir.replace(/\/+$/, '');
+    if (wd) {
+        out = out.replace(new RegExp(`${escapeRegExp(wd)}/`, 'g'), '');
+        out = out.replace(new RegExp(escapeRegExp(wd), 'g'), '.');
+    }
+    if (home && home !== '/') {
+        out = out.replace(new RegExp(escapeRegExp(home), 'g'), '~');
+    }
+    out = out.replace(/(?:\/home|\/Users)\/[A-Za-z0-9._-]+/g, '~');
+    out = out.replace(/[A-Za-z]:\\Users\\[A-Za-z0-9._-]+/g, '~');
+    for (const pattern of SECRET_PATTERNS) {
+        out = out.replace(pattern, REDACTED);
+    }
+    out = out.replace(SECRET_ASSIGNMENT, (_m, key, sep) => `${key}${sep}${REDACTED}`);
+    out = out.replace(EMAIL_PATTERN, REDACTED_EMAIL);
+    return out;
+}
+function refPathToId(refPath) {
+    const base = refPath.split('/').pop() ?? refPath;
+    return base.replace(/\.md$/, '');
+}
+function toIdList(paths, known) {
+    const ids = paths.map(refPathToId).filter(id => known.has(id));
+    return ids.length > 0 ? ids : undefined;
+}
+const EXPORT_PRIORITIES = new Set(['P0', 'P1', 'P2', 'P3']);
+export function boardTemplateId(boardId, title) {
+    const slug = title.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '');
+    return slug || boardId.toLowerCase();
+}
+function applyTemplateRefs(out, issue, known) {
+    const epicId = issue.epic ? refPathToId(issue.epic) : null;
+    if (epicId && known.has(epicId))
+        out.epic = epicId;
+    const children = toIdList(issue.children, known);
+    if (children)
+        out.children = children;
+    const blockedBy = toIdList(issue.blockedBy, known);
+    if (blockedBy)
+        out.blocked_by = blockedBy;
+    const blocks = toIdList(issue.blocks, known);
+    if (blocks)
+        out.blocks = blocks;
+}
+function toTemplateIssue(issue, known, ctx) {
+    const clean = (s) => sanitizeExportText(s, ctx);
+    const out = {
+        id: issue.id,
+        type: issue.type,
+        title: clean(issue.title),
+    };
+    if (EXPORT_PRIORITIES.has(issue.priority))
+        out.priority = issue.priority;
+    if (issue.estimate != null)
+        out.estimate = issue.estimate;
+    if (issue.labels.length > 0)
+        out.labels = issue.labels.map(clean);
+    applyTemplateRefs(out, issue, known);
+    if (issue.description)
+        out.description = clean(issue.description);
+    if (issue.acceptanceCriteria.length > 0) {
+        out.acceptance_criteria = issue.acceptanceCriteria.map(c => clean(c.text));
+    }
+    if (issue.technicalNotes)
+        out.technical_notes = clean(issue.technicalNotes);
+    if (issue.filesToModify.length > 0)
+        out.files_to_modify = issue.filesToModify.map(clean);
+    out.review_gate = issue.reviewGate;
+    out.output_type = issue.outputType;
+    if (issue.outputFile)
+        out.output_file = clean(issue.outputFile);
+    if (issue.model)
+        out.model = issue.model;
+    if (issue.effortLevel)
+        out.effort_level = issue.effortLevel;
+    if (issue.fastMode != null)
+        out.fast_mode = issue.fastMode;
+    return out;
+}
+export function buildBoardTemplate(boardState, ctx, options = {}) {
+    const clean = (s) => sanitizeExportText(s, ctx);
+    const { board } = boardState;
+    const issues = [...boardState.issues].sort((a, b) => a.id.localeCompare(b.id));
+    const known = new Set(issues.map(i => i.id));
+    const template = {
+        template_id: boardTemplateId(board.id, board.title),
+        name: clean(board.title),
+        description: clean(board.goal),
+        version: '1.0.0',
+        board: {
+            title: clean(board.title),
+            goal: clean(board.goal),
+            status: 'draft',
+            max_parallel_agents: board.maxParallelAgents,
+            quality_gate: board.qualityGate,
+        },
+        issues: issues.map(i => toTemplateIssue(i, known, ctx)),
+    };
+    if (options.author)
+        template.author = clean(options.author);
+    const validation = validateTemplate(template);
+    if (!validation.valid) {
+        const summary = validation.errors.map(e => `${e.pointer ?? '<root>'}: ${e.message}`).join('; ');
+        throw new Error(`Exported template failed validation: ${summary}`);
+    }
+    return template;
+}
+const SNAPSHOT_DROPPED_FM_KEYS = /^(assigned):/;
+export function sanitizeSnapshotFile(content, ctx) {
+    const fmMatch = content.match(/^---\n([\s\S]*?)\n---\n?([\s\S]*)$/);
+    if (fmMatch) {
+        const fmLines = fmMatch[1].split('\n').filter(l => !SNAPSHOT_DROPPED_FM_KEYS.test(l.trim()));
+        content = `---\n${fmLines.join('\n')}\n---\n${fmMatch[2]}`;
+    }
+    return sanitizeExportText(content, ctx);
+}
+const STATUS_DONE = new Set(['done', 'completed', 'shipped']);
+function renderReadme(boardState, template, ctx) {
+    const { board } = boardState;
+    const issues = [...boardState.issues].sort((a, b) => a.id.localeCompare(b.id));
+    const done = issues.filter(i => STATUS_DONE.has(i.status.toLowerCase())).length;
+    const cell = (s) => sanitizeExportText(s, ctx).replace(/\|/g, '\\|');
+    const rows = issues.map(i => `| [${i.id}](snapshot/backlog/${i.id}.md) | ${cell(i.title)} | ${i.type} | ${cell(i.status)} | ${cell(i.priority)} |`);
+    return [
+        `# ${template.board.title}`,
+        '',
+        '> The board that built this project — exported from Minionry Specs.',
+        '> Remix it: copy [template.json](template.json) into `.minionry/specs/templates/` in your own Space and instantiate it from the Specs app.',
+        '',
+        '## Goal',
+        '',
+        template.board.goal || '_(no goal recorded)_',
+        '',
+        '## Issues',
+        '',
+        `${issues.length} issues — ${done} done.`,
+        '',
+        '| ID | Title | Type | Status | Priority |',
+        '|---|---|---|---|---|',
+        ...rows,
+        '',
+        `Snapshot of \`${board.id}\` — read-only. Regenerate with a fresh export; do not edit by hand.`,
+        '',
+    ].join('\n');
+}
+export const BOARD_EXPORT_DIRNAME = join(SPACE_DIRNAME, SPACE_LAYOUT.boardExport);
+export function exportBoardToRepo(workingDir, boardId, options = {}) {
+    const pmDir = resolvePmDir(workingDir);
+    if (!pmDir)
+        throw new Error(NO_SPECS_DIR_ERROR);
+    const boardState = parseBoardDirectory(pmDir, boardId);
+    if (!boardState)
+        throw new Error(`Board not found: ${boardId}`);
+    const ctx = { workingDir };
+    const template = buildBoardTemplate(boardState, ctx, { author: options.author });
+    const exportDir = join(workingDir, BOARD_EXPORT_DIRNAME);
+    rmSync(exportDir, { recursive: true, force: true });
+    mkdirSync(join(exportDir, 'snapshot', 'backlog'), { recursive: true });
+    const files = [];
+    const write = (absPath, content) => {
+        writeFileSync(absPath, content, 'utf-8');
+        files.push(relative(workingDir, absPath));
+    };
+    write(join(exportDir, 'template.json'), `${JSON.stringify(template, null, 2)}\n`);
+    write(join(exportDir, 'README.md'), renderReadme(boardState, template, ctx));
+    const boardDir = join(pmDir, 'boards', boardId);
+    for (const name of ['board.md', 'progress.md']) {
+        const src = join(boardDir, name);
+        if (!existsSync(src))
+            continue;
+        write(join(exportDir, 'snapshot', name), sanitizeSnapshotFile(readFileSync(src, 'utf-8'), ctx));
+    }
+    const backlogDir = join(boardDir, 'backlog');
+    const backlogFiles = existsSync(backlogDir)
+        ? readdirSync(backlogDir).filter(f => f.endsWith('.md')).sort()
+        : [];
+    for (const name of backlogFiles) {
+        const content = readFileSync(join(backlogDir, name), 'utf-8');
+        write(join(exportDir, 'snapshot', 'backlog', name), sanitizeSnapshotFile(content, ctx));
+    }
+    files.sort();
+    return { boardId, exportDir, files, template };
+}

package/dist/server/services/plan/composer-prompt.js

@@ -0,0 +1,115 @@
+// Copyright (c) 2025-present Minionry, Inc.
+// SPDX-License-Identifier: LicenseRef-Minionry-Software
+export const ISSUE_FORMAT_SPEC = `## Issue format
+
+Each issue file must have this structure:
+\`\`\`markdown
+---
+id: IS-NNN
+title: "Short descriptive title"
+type: issue
+status: todo
+priority: P0|P1|P2|P3
+estimate: 1-5
+labels: []
+epic: backlog/EP-NNN.md    # if part of an epic
+created: "YYYY-MM-DD"
+blocked_by: []             # Use backlog-relative paths: backlog/IS-NNN.md
+blocks: []                 # Use backlog-relative paths: backlog/IS-NNN.md
+review_gate: auto
+review_model: fable        # model that runs the AI review gate — see "review_model rules" below
+output_type: auto          # code = modify source files, document = produce written artifact, auto = infer
+output_file: null
+agents: []                 # Agent hints — see "agents field rules" below
+---
+
+# IS-NNN: Title
+
+## Description
+What needs to be done and why. For bugs: the observed behavior, how to
+reproduce it, and the expected behavior — stated as verified facts.
+
+## Acceptance Criteria
+- [ ] Criterion 1 (testable — phrased so a reviewer can verify it objectively)
+- [ ] Criterion 2
+
+## Technical Notes
+Verified pointers, constraints & design intent, out-of-scope boundaries,
+test expectations — see "issue detail rules" below.
+
+## Files to Modify
+- path/to/file.ts
+\`\`\`
+
+## Issue detail rules (critical — issues are executed by cheaper models than you)
+
+Each issue is the executing agent's entire mission briefing, and that agent is
+usually a smaller model than you. The bar: given your issue, the executor
+should produce the same result you would have produced yourself. Verified
+detail transfers your judgment; speculation transfers your mistakes.
+
+- State only what you have VERIFIED by reading the code during this planning
+  run. Every file path, symbol name, and behavioral claim in an issue must
+  come from files you actually read — cite paths precisely.
+- Pointers, not diagnoses. For bug issues: describe the symptom, the repro,
+  and WHERE to look (files, flows) — and leave root-causing to the executor.
+  Do NOT include suspected root causes or ranked hypotheses: an unverified
+  hypothesis anchors the executor on the wrong fix — worse than no hypothesis
+  at all. Only state a root cause when you definitively confirmed it by
+  reading the code, and then state it as fact with file evidence, never as a
+  guess.
+- Technical Notes must record decisions and boundaries:
+  - Constraints & design intent: decisions already made that the executor must
+    not relitigate (existing architecture choices, conventions to follow,
+    contracts that must not change — e.g. WebSocket message shapes).
+  - Out of scope: adjacent code or behaviors the executor must leave alone.
+  - Test expectations: which suites to run and where new coverage belongs.
+- Be concise. Short, self-contained issues outperform long ones — include only
+  details that change what the executor would do next.
+- Acceptance criteria must be objectively checkable — a review agent verifies
+  each one against the actual output.
+
+## review_model rules
+
+\`review_model\` names the model that runs the AI review gate after the
+issue's implementation completes. ALWAYS set \`review_model: fable\` on every
+issue, regardless of the issue's execution \`model\` — the review gate is the
+quality equalizer that lets cheaper execution models deliver frontier-quality
+results, so it must run on the strongest model. The gate itself is pinned to
+fable at max effort and overrides any other value, so never write a different
+one.
+
+## Issue scoping rules (critical for execution quality)
+
+- Each issue is executed by a single AI agent with its own context window
+- Issues estimated at 1-3 story points execute well (focused, single concern)
+- Issues at 5 story points are viable if scoped to one subsystem
+- Issues at 8+ story points MUST be decomposed into smaller sub-issues
+- Issues at 13+ story points MUST become an epic with child issues
+- Each issue should touch one logical concern (one component, one service, one data flow)
+- If an issue requires work across multiple subsystems, split it into one issue per subsystem with blocked_by edges between them
+- Research/investigation issues should be separate from implementation issues
+
+## output_type rules (critical — determines how the AI executes and reviews each issue)
+
+- Set \`output_type: document\` for research, design, analysis, writing, planning, learning, or educational issues — anything that produces a written artifact rather than code changes
+- Set \`output_type: code\` for issues that MUST modify source code files (implementation, bug fixes, refactoring)
+- Set \`output_type: auto\` when unsure — the system will infer from "Files to Modify" (if the section lists real source paths it's treated as code, otherwise as document)
+- When output_type is \`document\`, "Files to Modify" entries are treated as references, not files to edit. The AI produces a document artifact and is reviewed on document quality.
+- When output_type is \`code\`, "Files to Modify" lists actual source files the AI must edit. The review gate verifies source files were changed.
+
+## agents field rules
+
+The \`agents\` field is a list of agent hints for the executing Claude Code session. The executor uses Claude Code's Task tool to delegate work to matching subagents in the user's \`.claude/agents/\` directory (project / global / bundled), with a fallback to the general-purpose agent when no match is found.
+
+- ALWAYS populate \`agents\` with the most relevant 1–4 agents for the work the issue describes. Empty arrays mean "no hints" — only use \`[]\` when no agent type plausibly applies (rare).
+- Entries can be specific agent file names (e.g. \`backend-architect\`, \`frontend-developer\`, \`code-reviewer\`, \`security-auditor\`) OR general role pointers the user's system can match (e.g. \`backend engineer\`, \`product designer\`, \`marketing\`). Prefer specific names — they resolve more reliably.
+- Match agents to the actual work, not the issue's surface topic. A "fix login button" issue is frontend work (\`frontend-developer\`); a "design login flow" issue is product/design (\`product-designer\`, \`ux-writer\`).
+- Common pairings:
+  - Code implementation: pick from \`frontend-developer\`, \`backend-architect\`, \`typescript-pro\`, \`python-pro\`, \`golang-pro\`, etc., based on stack
+  - UI/design work: \`ui-designer\`, \`product-designer\`, \`design-system-architect\`, \`ux-writer\`
+  - Data/DB: \`database-architect\`, \`database-optimizer\`, \`data-engineer\`, \`sql-pro\`
+  - Quality: pair an implementation agent with \`code-reviewer\`, \`test-automator\`, or \`security-auditor\` for sensitive issues
+  - Product/strategy: \`product-manager\`, \`product-marketing\`, \`business-analyst\`
+- YAML format: inline \`agents: [backend-architect, code-reviewer]\` or block list with \`-\` items both work.
+`;