@ngockhoale/ukit 1.3.1 → 1.4.1

package/src/index/verificationPlan.js

@@ -1,6 +1,7 @@
 import fs from 'node:fs/promises';
 import path from 'node:path';
 
+import { detectPackageManagerFromFingerprint, getDeclaredPackageManager } from '../core/packageManager.js';
 import { resolveContext } from './resolveContext.js';
 
 const RISKY_SKILL_IDS = new Set(['discover-security', 'repo-maintenance']);
@@ -25,6 +26,7 @@ export async function deriveVerificationPlan({
   contextResult = null,
   impactContext = null,
   skillIds = [],
+  autonomyLevel = 'balanced',
 } = {}) {
   const absoluteRoot = path.resolve(rootDir);
   const resolvedContext = contextResult ?? await resolveContext({
@@ -43,6 +45,7 @@ export async function deriveVerificationPlan({
     taskType: effectiveTaskType,
     skillIds,
     context,
+    autonomyLevel,
   });
 
   const cachedPlan = getRecentCacheEntry(VERIFICATION_PLAN_CACHE, verificationPlanCacheKey);
@@ -160,6 +163,7 @@ export async function deriveVerificationPlan({
         fallbackCommands: fallbackCommandList,
         reasons: reasonList,
         context,
+        autonomyLevel,
       }),
       context,
     };
@@ -274,7 +278,7 @@ async function loadProjectVerificationEnvironment({
     .then((resolvedPkg) => ({
       pkg: resolvedPkg,
       scripts: extractScripts(resolvedPkg),
-      packageManager: detectPackageManager({ fingerprintEntries, pkg: resolvedPkg }),
+      packageManager: detectPackageManagerFromFingerprint({ fingerprintEntries, pkg: resolvedPkg }),
     }))
     .catch((error) => {
       PROJECT_VERIFICATION_ENV_CACHE.delete(cacheKey);
@@ -294,41 +298,6 @@ function extractScripts(pkg = null) {
   return pkg?.scripts && typeof pkg.scripts === 'object' ? pkg.scripts : {};
 }
 
-function detectPackageManager({ fingerprintEntries = [], pkg = null } = {}) {
-  const declaredPackageManager = getDeclaredPackageManager(pkg);
-  if (declaredPackageManager) return declaredPackageManager;
-
-  const existingFiles = new Set(
-    fingerprintEntries
-      .filter((entry) => entry && entry.mtimeMs !== null)
-      .map((entry) => entry.filePath),
-  );
-  const checks = [
-    ['pnpm-lock.yaml', 'pnpm'],
-    ['yarn.lock', 'yarn'],
-    ['bun.lockb', 'bun'],
-    ['bun.lock', 'bun'],
-    ['package-lock.json', 'npm'],
-  ];
-
-  for (const [lockFile, pm] of checks) {
-    if (existingFiles.has(lockFile)) {
-      return pm;
-    }
-  }
-
-  return 'npm';
-}
-
-function getDeclaredPackageManager(pkg = null) {
-  const declared = String(pkg?.packageManager ?? '').toLowerCase();
-  if (declared.startsWith('pnpm')) return 'pnpm';
-  if (declared.startsWith('yarn')) return 'yarn';
-  if (declared.startsWith('bun')) return 'bun';
-  if (declared.startsWith('npm')) return 'npm';
-  return null;
-}
-
 function buildScriptCommand(packageManager, scriptName, args = []) {
   const filteredArgs = args.filter(Boolean);
 
@@ -354,6 +323,7 @@ function deriveExecutionPolicy({
   fallbackCommands = [],
   reasons = [],
   context = {},
+  autonomyLevel = 'balanced',
 } = {}) {
   const relatedTests = context.relatedTests ?? [];
   const sharedAbstractions = context.sharedAbstractions ?? [];
@@ -366,10 +336,12 @@ function deriveExecutionPolicy({
   const sharedScope = sharedAbstractions.length > 0;
   const noRelatedTests = relatedTests.length === 0;
   const broadOnlyPrimary = hasPrimaryCommands && !hasTargetedPrimaryCommands && noRelatedTests;
-  const requiresHumanConfirmationForBroadOrRisky = risky && broadOnlyPrimary;
+  const isConservative = autonomyLevel === 'conservative';
+  const isFreeRun = autonomyLevel === 'free-run';
+  const requiresHumanConfirmationForBroadOrRisky = !isFreeRun && risky && broadOnlyPrimary;
   const shouldAutoRunPrimaryCommands = hasPrimaryCommands && !docsOnly && !requiresHumanConfirmationForBroadOrRisky;
   const shouldEscalateToFallbacks = !docsOnly && fallbackCommands.length > 0 && (risky || sharedScope);
-  const shouldAutoRunFallbacks = shouldEscalateToFallbacks && !requiresHumanConfirmationForBroadOrRisky;
+  const shouldAutoRunFallbacks = shouldEscalateToFallbacks && !requiresHumanConfirmationForBroadOrRisky && !isConservative;
 
   let policyMode = 'recommend-only';
   if (docsOnly) {
@@ -409,6 +381,7 @@ function buildVerificationPlanCacheKey({
   taskType,
   skillIds = [],
   context = {},
+  autonomyLevel = 'balanced',
 } = {}) {
   return JSON.stringify({
     rootDir,
@@ -417,6 +390,7 @@ function buildVerificationPlanCacheKey({
     taskType: String(taskType || '').trim(),
     skillIds: unique(skillIds).sort(),
     context,
+    autonomyLevel: String(autonomyLevel || 'balanced').trim(),
   });
 }
 

package/templates/.claude/hooks/skill-router.sh

@@ -945,10 +945,13 @@ const { pathToFileURL } = require('url');
     const sharedScope = sharedAbstractions.length > 0;
     const noRelatedTests = relatedTests.length === 0;
     const broadOnlyPrimary = hasPrimaryCommands && !hasTargetedPrimaryCommands && noRelatedTests;
-    const requiresHumanConfirmationForBroadOrRisky = risky && broadOnlyPrimary;
+    const autonomyLevel = runtimeConfig?.autonomy?.level || 'balanced';
+    const isConservative = autonomyLevel === 'conservative';
+    const isFreeRun = autonomyLevel === 'free-run';
+    const requiresHumanConfirmationForBroadOrRisky = !isFreeRun && risky && broadOnlyPrimary;
     const shouldAutoRunPrimaryCommands = hasPrimaryCommands && !docsOnly && !requiresHumanConfirmationForBroadOrRisky;
     const shouldEscalateToFallbacks = !docsOnly && fallbackCommands.length > 0 && (risky || sharedScope);
-    const shouldAutoRunFallbacks = shouldEscalateToFallbacks && !requiresHumanConfirmationForBroadOrRisky;
+    const shouldAutoRunFallbacks = shouldEscalateToFallbacks && !requiresHumanConfirmationForBroadOrRisky && !isConservative;
 
     let policyMode = 'recommend-only';
     if (docsOnly) {

package/templates/.claude/ukit/index/route-catalog.mjs

@@ -66,7 +66,7 @@ export const ROUTE_CATALOG = [
   {
     id: 'postgres',
     path: '.claude/skills/postgres/SKILL.md',
-    order: 4,
+    order: 4.5,
     signals: [
       { type: 'prompt', regex: /\b(sql|postgres|postgresql|migration|schema|table|view|index|trigger|function|stored procedure|materialized view|query plan|explain)\b/i, score: 5 },
       { type: 'command', regex: /\b(psql|prisma|drizzle|knex|sequelize|typeorm)\b/i, score: 4 },

package/templates/.claude/ukit/index/route-task.mjs

@@ -1105,6 +1105,7 @@ function deriveDelegationRecommendation({
   routingContext = {},
   contextRecommendation = null,
   verificationRecommendation = null,
+  autonomyLevel = 'balanced',
 } = {}) {
   const skillIds = activeSkills.map((item) => item.id);
   const lower = `${routingContext.promptText ?? ''}\n${routingContext.commandText ?? ''}`.toLowerCase();
@@ -1129,6 +1130,21 @@ function deriveDelegationRecommendation({
     return null;
   }
 
+  if (autonomyLevel === 'conservative') {
+    if (
+      skillIds.includes('executing-plans')
+      || /\b(execute this plan|follow this plan|implementation plan|rollout plan|controlled batches?|review checkpoints?|batch execution|execute in batches)\b/.test(lower)
+    ) {
+      return {
+        hint: 'subagent-driven-development',
+        when,
+        reason: 'Explicit plan/batch execution is separable enough for deliberate subagent passes.',
+      };
+    }
+
+    return null;
+  }
+
   if (
     skillIds.includes('executing-plans')
     || /\b(execute this plan|follow this plan|implementation plan|rollout plan|controlled batches?|review checkpoints?|batch execution|execute in batches)\b/.test(lower)
@@ -1145,7 +1161,8 @@ function deriveDelegationRecommendation({
     || /\b(debug|error|crash|stack(?: trace)?|failing|flake|flaky|timeout|triage|root cause)\b/.test(lower)
     || verificationRecommendation?.executionPolicy?.policyMode === 'confirm-then-broad'
   );
-  if (noisyDebugLane && (!localizedIndexedLane || !hasRelatedTests || contextBreadth >= 4)) {
+  const debugDelegationThreshold = autonomyLevel === 'free-run' ? 3 : 4;
+  if (noisyDebugLane && (!localizedIndexedLane || !hasRelatedTests || contextBreadth >= debugDelegationThreshold)) {
     return {
       hint: 'bug-debugger',
       when,
@@ -1156,11 +1173,15 @@ function deriveDelegationRecommendation({
   const hasImplementationSkill = skillIds.some((id) => DELEGATABLE_IMPLEMENTATION_SKILL_IDS.has(id));
   const clearImplementationSignal = /\b(implement|build|create|add|ship|deliver|refactor|integrat(?:e|ion)|scaffold|feature)\b/.test(lower);
   const multiLaneSignal = /\b(multiple|several|parallel|independent|across files|across modules|batch)\b/.test(lower);
+  const featureDelegationTaskType = autonomyLevel === 'free-run'
+    ? (routingContext.taskType === 'non-trivial' || routingContext.taskType === 'simple')
+    : routingContext.taskType === 'non-trivial';
+  const featureDelegationBreadth = autonomyLevel === 'free-run' ? 3 : 4;
   if (
     hasImplementationSkill
     && clearImplementationSignal
-    && routingContext.taskType === 'non-trivial'
-    && (!localizedIndexedLane || !hasExplicitTarget || contextBreadth >= 4 || multiLaneSignal)
+    && featureDelegationTaskType
+    && (autonomyLevel === 'free-run' || !localizedIndexedLane || !hasExplicitTarget || contextBreadth >= featureDelegationBreadth || multiLaneSignal)
   ) {
     return {
       hint: 'feature-implementer',
@@ -1179,11 +1200,13 @@ function buildRouteSummary({
   verificationRecommendation = null,
   nextAction = null,
 } = {}) {
+  const autonomyLevel = routingContext.autonomyLevel ?? 'balanced';
   const delegationRecommendation = deriveDelegationRecommendation({
     activeSkills,
     routingContext,
     contextRecommendation,
     verificationRecommendation,
+    autonomyLevel,
   });
   const preview = contextRecommendation?.preview ?? {};
   const primaryTargets = summarizeCompactList(preview.primaryTargets ?? [], 2);
@@ -1197,6 +1220,8 @@ function buildRouteSummary({
   );
   const policyMode = verificationRecommendation?.executionPolicy?.policyMode ?? null;
   const editGuardHint = isSharedImpactFile(routingContext.targetFile) ? 'anchor-required' : null;
+  const taskType = routingContext.taskType ?? null;
+  const contextMode = deriveContextMode(taskType);
   const compactHelperLane = nextAction?.type === 'pull-indexed-context'
     && typeof contextRecommendation?.command === 'string'
     && contextRecommendation.command.trim();
@@ -1218,6 +1243,7 @@ function buildRouteSummary({
     editGuardHint ? `editGuard=${editGuardHint}` : null,
     delegationRecommendation?.hint ? `delegate=${delegationRecommendation.hint}` : null,
     policyMode ? `policy=${policyMode}` : null,
+    contextMode ? `mode=${contextMode}` : null,
   ].filter(Boolean).join(' | ');
 
   return {
@@ -1231,10 +1257,17 @@ function buildRouteSummary({
     nextActionType: nextAction?.type ?? null,
     nextActionCommand,
     helperHint,
+    contextMode,
     line: line || 'task=unknown',
   };
 }
 
+function deriveContextMode(taskType) {
+  if (taskType === 'trivial' || taskType === 'simple') return 'LITE';
+  if (taskType === 'non-trivial' || taskType === 'shared-simple') return 'FULL';
+  return null;
+}
+
 function deriveExecutionPolicy({
   taskType = 'simple',
   mode = 'minimal',
@@ -1242,6 +1275,7 @@ function deriveExecutionPolicy({
   fallbackCommands = [],
   reasons = [],
   context = {},
+  autonomyLevel = 'balanced',
 } = {}) {
   const relatedTests = context.relatedTests ?? [];
   const sharedAbstractions = context.sharedAbstractions ?? [];
@@ -1254,10 +1288,12 @@ function deriveExecutionPolicy({
   const sharedScope = sharedAbstractions.length > 0;
   const noRelatedTests = relatedTests.length === 0;
   const broadOnlyPrimary = hasPrimaryCommands && !hasTargetedPrimaryCommands && noRelatedTests;
-  const requiresHumanConfirmationForBroadOrRisky = risky && broadOnlyPrimary;
+  const isConservative = autonomyLevel === 'conservative';
+  const isFreeRun = autonomyLevel === 'free-run';
+  const requiresHumanConfirmationForBroadOrRisky = !isFreeRun && risky && broadOnlyPrimary;
   const shouldAutoRunPrimaryCommands = hasPrimaryCommands && !docsOnly && !requiresHumanConfirmationForBroadOrRisky;
   const shouldEscalateToFallbacks = !docsOnly && fallbackCommands.length > 0 && (risky || sharedScope);
-  const shouldAutoRunFallbacks = shouldEscalateToFallbacks && !requiresHumanConfirmationForBroadOrRisky;
+  const shouldAutoRunFallbacks = shouldEscalateToFallbacks && !requiresHumanConfirmationForBroadOrRisky && !isConservative;
 
   let policyMode = 'recommend-only';
   if (docsOnly) {

package/templates/.claude/ukit/index/verify-context.mjs

@@ -23,6 +23,7 @@ const args = process.argv.slice(2);
 const rootDir = getRootDir(args);
 const targetFile = readFlagValue(args, '--target');
 const taskType = readFlagValue(args, '--type');
+const autonomyLevel = readFlagValue(args, '--autonomy') ?? 'balanced';
 const intent = collectPositionalArgs(args, ['--root', '--target', '--type']);
 const effectiveIntent = deriveHelperIntent({ intent, targetFile });
 
@@ -42,6 +43,7 @@ if (!intent && !targetFile) {
     intent: effectiveIntent,
     targetFile,
     taskType,
+    autonomyLevel,
   });
   const cached = await readRecentCacheEntry(cachePath, requestKey, {
     maxEntries: DEFAULT_RECENT_CACHE_MAX_ENTRIES,
@@ -71,6 +73,7 @@ if (!intent && !targetFile) {
       contextResult: expandHelperContext(cachedContext?.result ?? null),
       fingerprintEntries: projectVerification.entries,
       pkg: projectVerification.pkg,
+      autonomyLevel,
     });
 
   if (!cached) {
@@ -122,6 +125,7 @@ async function deriveVerificationPlan({
   contextResult = null,
   fingerprintEntries = [],
   pkg = null,
+  autonomyLevel = 'balanced',
 } = {}) {
   const absoluteRoot = path.resolve(rootDir);
   const context = expandHelperContext(contextResult ?? await resolveContext({
@@ -223,6 +227,7 @@ async function deriveVerificationPlan({
       fallbackCommands: fallbackCommandList,
       reasons: reasonList,
       context: summarizedContext,
+      autonomyLevel,
     }),
   };
 }
@@ -614,6 +619,7 @@ function deriveExecutionPolicy({
   fallbackCommands = [],
   reasons = [],
   context = {},
+  autonomyLevel = 'balanced',
 } = {}) {
   const relatedTests = context.relatedTests ?? [];
   const sharedAbstractions = context.sharedAbstractions ?? [];
@@ -626,10 +632,12 @@ function deriveExecutionPolicy({
   const sharedScope = sharedAbstractions.length > 0;
   const noRelatedTests = relatedTests.length === 0;
   const broadOnlyPrimary = hasPrimaryCommands && !hasTargetedPrimaryCommands && noRelatedTests;
-  const requiresHumanConfirmationForBroadOrRisky = risky && broadOnlyPrimary;
+  const isConservative = autonomyLevel === 'conservative';
+  const isFreeRun = autonomyLevel === 'free-run';
+  const requiresHumanConfirmationForBroadOrRisky = !isFreeRun && risky && broadOnlyPrimary;
   const shouldAutoRunPrimaryCommands = hasPrimaryCommands && !docsOnly && !requiresHumanConfirmationForBroadOrRisky;
   const shouldEscalateToFallbacks = !docsOnly && fallbackCommands.length > 0 && (risky || sharedScope);
-  const shouldAutoRunFallbacks = shouldEscalateToFallbacks && !requiresHumanConfirmationForBroadOrRisky;
+  const shouldAutoRunFallbacks = shouldEscalateToFallbacks && !requiresHumanConfirmationForBroadOrRisky && !isConservative;
 
   let policyMode = 'recommend-only';
   if (docsOnly) {

package/templates/.codex/README.md

@@ -12,7 +12,7 @@ Auto-generated by UKit for OpenAI Codex.
 - Do not make end users memorize skill names, helper scripts, or routing internals unless they are debugging UKit itself.
 - **Treat helper commands as internal orchestration. Do not ask end users to run them.**
 
-## UKit v1.3.1 Shared Runtime
+## UKit v1.4.1 Shared Runtime
 
 - Shared runtime state lives in `.ukit/storage/`.
 - Treat `.ukit/storage/config.json` as the source of compact, token-pipeline, router, memory, validation, and Safe Patch guardrail toggles.

package/templates/CLAUDE.md

@@ -42,7 +42,7 @@
 - **Do not ask normal contributors to run internal helper commands**; run them yourself or tell them to rerun `ukit install`.
 - Do not ask normal contributors to memorize `ukit doctor`, `ukit diff`, `ukit uninstall`, or `ukit index ...` unless they explicitly need maintainer/debug help.
 
-## UKit v1.3.1 Shared Runtime
+## UKit v1.4.1 Shared Runtime
 
 - Shared runtime state lives in `.ukit/storage/`.
 - Treat `.ukit/storage/config.json` as the source of runtime toggles for compact, token pipeline, router, memory, validation, and Safe Patch behavior.
@@ -95,6 +95,14 @@
 - Good delegation triggers: noisy research/log lanes, 3+ independent failures, explicit batch execution, or a broad debug/implementation lane with a clean handoff.
 - If route memory includes `delegate=<lane>`, treat it as an internal hint after any required indexed-context step.
 
+## Adaptive Autonomy
+
+- `autonomy.level` in `.ukit/storage/config.json` controls how much UKit acts without asking first: `conservative` (ask more), `balanced` (default, current behavior), `free-run` (auto-run more).
+- `conservative`: do not auto-run fallback verification; ask before broad/risky escalation; suppress non-essential delegation (except explicit plan/batch execution and small-task maintainer).
+- `balanced`: default behavior unchanged — targeted verification auto-runs, broad risky asks confirmation, delegation follows existing thresholds.
+- `free-run`: auto-run fallback verification; remove broad verification confirmation for escalation-only; lower feature/debug delegation thresholds slightly.
+- End users should not need to change this; maintainers may tune it per-project.
+
 ## Project Snapshot
 
 - Project: {{project.name}} | Root: {{project.root}}

package/templates/ukit/README.md

@@ -1,6 +1,6 @@
 # UKit Shared Runtime
 
-This folder stores shared UKit runtime state for v1.3.1 features.
+This folder stores shared UKit runtime state for v1.4.1 features.
 
 - `storage/config.json` — runtime feature flags and defaults
 - `storage/cache/` — prompt-cache, compact history, compact pressure state, output summaries, and preserved raw tool outputs under `storage/cache/tee/`

package/templates/ukit/storage/config.json

@@ -1,6 +1,11 @@
 {
-  "version": "1.3.1",
+  "version": "1.4.1",
   "agent": "claude-code",
+  "autonomy": {
+    "level": "balanced",
+    "affectVerification": true,
+    "affectDelegation": true
+  },
   "compact": {
     "enabled": true,
     "tokenThreshold": 100000,
@@ -141,15 +146,23 @@
       "stepBudgets": {
         "trivial": {
           "maxSteps": 1,
-          "verification": "skip-unless-risky"
+          "verification": "skip-unless-risky",
+          "label": "LITE"
         },
         "simple": {
           "maxSteps": 2,
-          "verification": "targeted-if-covered"
+          "verification": "targeted-if-covered",
+          "label": "LITE"
+        },
+        "sharedSimple": {
+          "maxSteps": 3,
+          "verification": "targeted-then-widen-on-risk",
+          "label": "FULL"
         },
         "nonTrivial": {
           "maxSteps": 4,
-          "verification": "targeted-then-widen-on-risk"
+          "verification": "targeted-then-widen-on-risk",
+          "label": "FULL"
         }
       },
       "executionMode": "sidecar-parallel",
@@ -196,6 +209,11 @@
     },
     "version": "Phiên bản config runtime đi kèm package UKit.",
     "agent": "Adapter mặc định của workspace. Thường giữ nguyên theo lúc install.",
+    "autonomy": {
+      "level": "Mức tự chủ của UKit. conservative: hỏi trước khi fallback/escalate, không tự delegate. balanced: mặc định, hành vi hiện tại. free-run: tự chạy fallback, delegate tự nhiên hơn, bớt xác nhận.",
+      "affectVerification": "Nếu true, autonomy.level ảnh hưởng hành vi verification plan.",
+      "affectDelegation": "Nếu true, autonomy.level ảnh hưởng ngưỡng delegation."
+    },
     "compact": {
       "enabled": "Bật/tắt toàn bộ helper compact của UKit.",
       "tokenThreshold": "Ngưỡng token chung cho runtime compact dùng chung.",
@@ -282,7 +300,7 @@
         "maxSidecarWaitMs": "0 nghĩa là không chờ sidecar trước khi tiếp tục task chính.",
         "optimizeOrder": "Thứ tự ưu tiên khi ra quyết định nội bộ.",
         "decisions": "Nhóm quyết định sidecar được phép hỗ trợ.",
-        "stepBudgets": "Gợi ý số bước planning tối đa theo độ lớn task trước khi reassess."
+        "stepBudgets": "Gợi ý số bước planning tối đa theo độ lớn task trước khi reassess. label LITE/FULL cho biết subagent dùng model nhỏ hay đầy đủ."
       }
     },
     "safePatch": {