@yeaft/webchat-agent 1.0.526 → 1.0.527

package/yeaft/routing/router.js

@@ -28,122 +28,6 @@
 import { resolveMemberId } from '../sessions/roster.js';
 import { createLoopGuard, extendCausedBy } from './loop-guard.js';
 
-const repoApprovals = new WeakMap();
-const REPO_APPROVAL_ISSUER_IDS = new Set(['martin']);
-export const REPO_APPROVAL_TTL_MS = 2 * 60 * 1000;
-
-function normalizeId(value) {
-  return typeof value === 'string' ? value.trim() : '';
-}
-
-function normalizeSha(value) {
-  const sha = normalizeId(value).toLowerCase();
-  return /^[0-9a-f]{40}$/.test(sha) ? sha : '';
-}
-
-function normalizeApprovalRepository(value) {
-  const repository = normalizeId(value).replace(/\.git$/i, '');
-  const segments = repository.split('/');
-  if (segments.length === 2) segments.unshift('github.com');
-  if (segments.length !== 3) return '';
-  const [host, owner, name] = segments;
-  const safePart = part => /^[a-z0-9_.-]+$/i.test(part) && part !== '.' && part !== '..';
-  if (!safePart(host) || !safePart(owner) || !safePart(name) || !host.includes('.')) return '';
-  return `${host}/${owner}/${name}`.toLowerCase();
-}
-
-function isRepoApprovalIssuer(vpId) {
-  return REPO_APPROVAL_ISSUER_IDS.has(normalizeId(vpId));
-}
-
-/**
- * Mint authority only inside the canonical Router path after roster identity
- * resolution. Keeping this function module-private prevents callers from
- * turning a claimed issuer string into landing authority.
- */
-function issueRepoApprovalCapability(input = {}, { now = Date.now } = {}) {
-  const sessionId = normalizeId(input.sessionId);
-  const issuerVpId = normalizeId(input.issuerVpId);
-  const recipientVpId = normalizeId(input.recipientVpId);
-  const repository = normalizeApprovalRepository(input.repository);
-  const pr = Number(input.pr);
-  const baseBranch = normalizeId(input.baseBranch);
-  const baseSha = normalizeSha(input.baseSha);
-  const reviewedHead = normalizeSha(input.reviewedHead);
-  const reviewedSnapshot = normalizeSha(input.reviewedSnapshot);
-  const issuedAt = Number(now());
-  if (!sessionId || !isRepoApprovalIssuer(issuerVpId) || !recipientVpId || issuerVpId === recipientVpId
-    || !repository || !Number.isSafeInteger(pr) || pr <= 0 || !baseBranch || !baseSha
-    || !reviewedHead || !reviewedSnapshot || !Number.isFinite(issuedAt)) {
-    return null;
-  }
-  const capability = Object.freeze(Object.create(null));
-  repoApprovals.set(capability, {
-    sessionId,
-    issuerVpId,
-    recipientVpId,
-    repository,
-    pr,
-    baseBranch,
-    baseSha,
-    reviewedHead,
-    reviewedSnapshot,
-    issuedAt,
-    expiresAt: issuedAt + REPO_APPROVAL_TTL_MS,
-    turnId: null,
-  });
-  return capability;
-}
-
-export function isRepoApprovalCapability(capability) {
-  return Boolean(capability && typeof capability === 'object' && repoApprovals.has(capability));
-}
-
-/** Bind a freshly issued capability to the exact Web execution that received it. */
-export function bindRepoApprovalCapability(capability, expected = {}, { now = Date.now } = {}) {
-  if (!capability || typeof capability !== 'object') return false;
-  const grant = repoApprovals.get(capability);
-  const turnId = normalizeId(expected.turnId);
-  const currentTime = Number(now());
-  if (!grant || !turnId || !Number.isFinite(currentTime)) return false;
-  if (currentTime > grant.expiresAt
-    || grant.turnId
-    || grant.sessionId !== normalizeId(expected.sessionId)
-    || grant.recipientVpId !== normalizeId(expected.recipientVpId)) {
-    repoApprovals.delete(capability);
-    return false;
-  }
-  grant.turnId = turnId;
-  return true;
-}
-
-export function revokeRepoApprovalCapability(capability) {
-  if (!capability || typeof capability !== 'object') return false;
-  return repoApprovals.delete(capability);
-}
-
-/** Consume a capability exactly once and verify its complete landing tuple. */
-export function consumeRepoApprovalCapability(capability, expected = {}, { now = Date.now } = {}) {
-  if (!capability || typeof capability !== 'object') return null;
-  const grant = repoApprovals.get(capability);
-  repoApprovals.delete(capability);
-  if (!grant) return null;
-  const currentTime = Number(now());
-  const matches = Number.isFinite(currentTime)
-    && currentTime <= grant.expiresAt
-    && grant.turnId
-    && grant.turnId === normalizeId(expected.turnId)
-    && grant.sessionId === normalizeId(expected.sessionId)
-    && grant.recipientVpId === normalizeId(expected.recipientVpId)
-    && grant.repository === normalizeApprovalRepository(expected.repository)
-    && grant.pr === Number(expected.pr)
-    && grant.baseBranch === normalizeId(expected.baseBranch)
-    && grant.baseSha === normalizeSha(expected.baseSha)
-    && grant.reviewedHead === normalizeSha(expected.reviewedHead)
-    && grant.reviewedSnapshot === normalizeSha(expected.reviewedSnapshot);
-  return matches ? Object.freeze({ ...grant }) : null;
-}
-
 function routeForwardParentFromEnvelope(envelope) {
   const msg = envelope?.msg;
   const meta = msg?.meta;
@@ -265,24 +149,6 @@ export function createRouter(deps = {}) {
     // spec's intent ("depth of forwards already taken").
     const chain = extendCausedBy(args.inboundEnvelope || null, null);
     const routeForwardParent = routeForwardParentFromEnvelope(args.inboundEnvelope);
-    let repoApproval = null;
-    if (args.repoApproval !== undefined) {
-      if (targetVpId === 'all') {
-        return { ok: false, error: 'repo_approval_requires_single_target' };
-      }
-      if (!isRepoApprovalIssuer(senderVpId)) {
-        return { ok: false, error: 'repo_approval_issuer_forbidden' };
-      }
-      repoApproval = issueRepoApprovalCapability({
-        ...args.repoApproval,
-        sessionId: meta.id,
-        issuerVpId: senderVpId,
-        recipientVpId: targetVpId,
-      }, { now });
-      if (!repoApproval) {
-        return { ok: false, error: 'invalid_repo_approval' };
-      }
-    }
 
     // Loop guard: for broadcast, use 'all' as the target key so one VP
     // spamming @all still gets throttled even if each cycle hits different
@@ -319,7 +185,6 @@ export function createRouter(deps = {}) {
         // of UI replay and future visible history so it doesn't render as a
         // second assistant/user block after the target VP answers.
         internal: true,
-        ...(repoApproval ? { _repoApproval: repoApproval } : {}),
         meta: {
           synthetic: true,
           injectedBy: 'route_forward',

package/yeaft/tools/activation.js

@@ -55,7 +55,6 @@ export const CONDITIONAL_BUILTIN_TOOL_NAMES = new Set([
   'JsRepl',
   'NotebookEdit',
   'ImageGeneration',
-  'RepoWorkflow',
 ]);
 
 const HISTORY_INTENT_RE = /(?:\bhistory\b|\b(?:prior|previous) (?:chat|conversation|discussion)\b|\bprevious(?:ly)? discussed\b|\bwhat did we (?:decide|discuss|say|agree)\b|\b(?:our|the) (?:earlier|last) decision\b|历史|之前(?:的)?(?:对话|讨论|会话|决定)|过去(?:的)?会话|我们(?:之前|上次)(?:决定|讨论|说)了什么)/iu;
@@ -67,7 +66,6 @@ const WORK_ITEM_INTENT_RE = /(?:\bwork ?center\b|\bwork ?item\b|\bdurable tracki
 const REPL_INTENT_RE = /(?:\bjs ?repl\b|\bjavascript (?:calculation|experiment|evaluation)\b|\bcalculate\b|\bdata transform\b|JavaScript (?:计算|实验|求值)|数据转换|快速计算)/iu;
 const NOTEBOOK_INTENT_RE = /(?:\.ipynb\b|\bjupyter\b|\bnotebook (?:cell|file)\b|Jupyter|笔记本单元格)/iu;
 const IMAGE_GENERATION_INTENT_RE = /(?:\b(?:generate|make|design|draw) (?:me |us )?(?:an? |the )?(?:image|picture|logo|icon|illustration|graphic)\b|\bcreate (?:me |us )?(?:an? |the )?(?:illustration|image|picture|logo|icon|graphic)\b|生成(?:一张)?(?:图片|图像|标志|图标|插图)|创建(?:一张)?(?:插图|图片|图像|标志|图标)|画(?:一张)?(?:图|图片|图标))/iu;
-const REPO_WORKFLOW_INTENT_RE = /(?:\b(?:git |github )?(?:worktree|pull request|pr) (?:workflow|review|merge|landing|prepare)\b|\b(?:review|merge|land|prepare) (?:a |the )?(?:github )?(?:pull request|pr)\b|\bhead[- ]match(?:ed)? merge\b|\bmerge (?:and|\+) tag\b|\breview[- ]prep\b|\bye?aft-repo\b|仓库(?:工作流|流程)|准备(?:开发|审查|review) worktree|(?:审查|评审|合并|准备) ?(?:github )?(?:pr|pull request|拉取请求)|合并(?:并|和)?打 tag|精确 head 合并)/iu;
 const MCP_INTENT_RE = /(?:\bmcp\b|model context protocol|模型上下文协议)/iu;
 
 function messageText(message) {
@@ -159,7 +157,6 @@ export function resolveActiveToolNames({
   if (REPL_INTENT_RE.test(intentText)) active.add('JsRepl');
   if (NOTEBOOK_INTENT_RE.test(intentText)) active.add('NotebookEdit');
   if (imageGenerationConfigured && IMAGE_GENERATION_INTENT_RE.test(intentText)) active.add('ImageGeneration');
-  if (REPO_WORKFLOW_INTENT_RE.test(intentText)) active.add('RepoWorkflow');
 
   for (const name of matchedMcpTools(intentText, toolNames)) active.add(name);
 

package/yeaft/tools/index.js

@@ -22,7 +22,6 @@ import { ToolRegistry } from './registry.js';
 import skillTool from './skill.js';
 import enterWorktree from './enter-worktree.js';
 import exitWorktree from './exit-worktree.js';
-import repoWorkflow from './repo-workflow.js';
 
 // --- P0 Core tools ---
 import askUser from './ask-user.js';
@@ -89,7 +88,6 @@ export const allTools = [
   skillTool,
   enterWorktree,
   exitWorktree,
-  repoWorkflow,
 
   // P0 Core
   askUser,

package/yeaft/tools/route-forward.js

@@ -99,23 +99,6 @@ Returns JSON: { ok, dispatched?, error?, detail? }.`,
           zh: '可选：转交的简短原因',
         },
       },
-      repoApproval: {
-        type: 'object',
-        description: {
-          en: 'Optional structured repository landing approval. The host binds it to the authenticated sender VP, target VP, and current Session, then issues a non-serializable one-time capability.',
-          zh: '可选的结构化仓库落地批准。宿主会将其绑定到真实发送 VP、目标 VP 和当前 Session，并签发不可序列化的一次性 capability。',
-        },
-        properties: {
-          repository: { type: 'string', description: 'GitHub owner/repository identity' },
-          pr: { type: 'integer', minimum: 1 },
-          baseBranch: { type: 'string', description: 'Exact approved destination branch' },
-          baseSha: { type: 'string', description: 'Exact approved 40-character base SHA' },
-          reviewedHead: { type: 'string', description: 'Exact approved 40-character PR head SHA' },
-          reviewedSnapshot: { type: 'string', description: 'Exact approved 40-character merge snapshot SHA' },
-        },
-        required: ['repository', 'pr', 'baseBranch', 'baseSha', 'reviewedHead', 'reviewedSnapshot'],
-        additionalProperties: false,
-      },
     },
     required: ['to', 'text'],
   },
@@ -126,7 +109,7 @@ Returns JSON: { ok, dispatched?, error?, detail? }.`,
   // dispatch is rejected; the cost is one fresh read, not stale workspace data.
   mayMutateWorkspaceAfterReturn: () => true,
   async execute(input, ctx = {}) {
-    const { to, text, reason, repoApproval } = input || {};
+    const { to, text, reason } = input || {};
     if (!to || typeof to !== 'string') {
       return JSON.stringify({ ok: false, error: 'to_required' });
     }
@@ -151,7 +134,6 @@ Returns JSON: { ok, dispatched?, error?, detail? }.`,
         taskId: ctx.taskId ?? null,
         inboundEnvelope: ctx.inboundEnvelope ?? null,
         sourceThreadId: ctx.threadId ?? null,
-        repoApproval,
       },
       { taskMembers: ctx.taskMembers },
     );

package/yeaft/web-bridge.js

@@ -77,12 +77,7 @@ import { hydrateYeaftStatusFromSession } from './status-cache.js';
 import { handleVpSubscribe } from './vp/vp-bridge.js';
 import { createVp, updateVp, deleteVp, readVp, VpCrudError } from './vp/vp-crud.js';
 import { scanVpLibrary } from './vp/vp-store.js';
-import {
-  bindRepoApprovalCapability,
-  createRouter,
-  isRepoApprovalCapability,
-  revokeRepoApprovalCapability,
-} from './routing/router.js';
+import { createRouter } from './routing/router.js';
 import {
   SessionCrudError,
   createSessionFromSpec,
@@ -473,22 +468,6 @@ const turnAbortCtrls = new Map();
  * @type {Map<string, { sessionId: string, vpId: string, threadId: string, key: string }>}
  */
 const turnAbortMeta = new Map();
-/** @type {Map<string, { capability: object, sessionId: string, vpId: string }>} Exact-turn repo approvals, never persisted or projected. */
-const turnRepoApprovals = new Map();
-
-function revokeTurnRepoApproval(turnId) {
-  const grant = turnRepoApprovals.get(turnId);
-  turnRepoApprovals.delete(turnId);
-  return grant ? revokeRepoApprovalCapability(grant.capability) : false;
-}
-
-function revokeRepoApprovalsForRecipient(sessionId, vpId) {
-  for (const [turnId, grant] of turnRepoApprovals.entries()) {
-    if (grant.sessionId !== sessionId || grant.vpId !== vpId) continue;
-    revokeTurnRepoApproval(turnId);
-  }
-}
-
 /**
  * Per-VP status broker — the agent-side authority for VP timeline
  * status. Lazy-initialized on first use because `sendSessionEvent` is
@@ -1175,7 +1154,6 @@ function invalidateGroupContext(sessionId, { abortRuntime = false } = {}) {
   }
   for (const [turnId, meta] of Array.from(turnAbortMeta.entries())) {
     if (meta?.sessionId !== sessionId) continue;
-    revokeTurnRepoApproval(turnId);
     turnAbortCtrls.delete(turnId);
     turnAbortMeta.delete(turnId);
   }
@@ -2159,21 +2137,12 @@ async function routeEnvelopeToVpThread(sessionId, vpId, envelope) {
   let related = false;
 
   const meta = envelope?.msg?.meta || {};
-  const repoApproval = envelope?._repoApproval;
-  const hasRepoApproval = isRepoApprovalCapability(repoApproval);
-  if (envelope?.msg?.role === 'user' || envelope?.msg?.from === 'user') {
-    revokeRepoApprovalsForRecipient(sessionId, vpId);
-  }
   const isTaskResult = meta.injectedBy === 'task_result';
   const sourceThreadId = typeof meta.sourceThreadId === 'string' && meta.sourceThreadId.trim()
     ? meta.sourceThreadId.trim()
     : null;
 
-  if (hasRepoApproval) {
-    // Approval is an execution capability, not text. It must never collapse
-    // into a related thread's pendingQueries/rescue path.
-    thread = getOrCreateVpThread({ sessionId, vpId, title: fallbackTitle(text) });
-  } else if (isTaskResult && sourceThreadId) {
+  if (isTaskResult && sourceThreadId) {
     thread = getOrCreateVpThread({ sessionId, vpId, threadId: sourceThreadId, title: fallbackTitle(text) });
   } else if (runningThreads.length === 0) {
     thread = getOrCreateVpThread({ sessionId, vpId, title: fallbackTitle(text) });
@@ -2216,12 +2185,6 @@ async function routeEnvelopeToVpThread(sessionId, vpId, envelope) {
   if (!thread) return null;
   rememberThreadMessage(thread, envelope?.msg);
   const turnId = `${randomUUID().slice(0, 8)}:${vpId}`;
-  if (hasRepoApproval) {
-    if (!bindRepoApprovalCapability(repoApproval, { sessionId, recipientVpId: vpId, turnId })) {
-      return null;
-    }
-    turnRepoApprovals.set(turnId, { capability: repoApproval, sessionId, vpId });
-  }
   const perfTraceId = envelope?._perfTraceId || envelope?.perfTraceId || null;
   if (perfTraceId) {
     recordAgentPerfTrace(ctx.CONFIG, {
@@ -2397,7 +2360,6 @@ function ensureDriverRunning(sessionId, vpId, threadId = 'main') {
       } catch (err) {
         console.warn('[Yeaft] driveVp: runVpTurn failed', vpId, err?.message || err);
       } finally {
-        revokeTurnRepoApproval(turnId);
         turnAbortCtrls.delete(turnId);
         turnAbortMeta.delete(turnId);
         if (vpAborts.get(key) === vpAbort) vpAborts.delete(key);
@@ -2532,7 +2494,6 @@ export async function __testResetVpState() {
     if (Array.isArray(inbox)) inbox.length = 0;
   }
   vpThreads.clear();
-  for (const turnId of turnRepoApprovals.keys()) revokeTurnRepoApproval(turnId);
   turnAbortCtrls.clear();
   turnAbortMeta.clear();
   await __testDrainVpDrivers();
@@ -5442,7 +5403,6 @@ async function runVpTurnWithEscalation(args) {
     graceMs: ESCALATE_AFTER_ABORT_MS,
     onEscalate: () => {
       if (escalationState.escalated) return;
-      revokeTurnRepoApproval(turnId);
       escalationState.escalated = true;
       escalationState.terminalEmitted = true;
       console.error(
@@ -5661,7 +5621,6 @@ async function runVpTurn({ prompt, promptParts = null, sessionId, vpId, threadId
       queryTimer = setTimeout(() => {
         if (!vpAbort.signal.aborted) {
           console.error(`[Yeaft] query timeout after ${queryTimeoutMs / 1000}s of silence — aborting VP ${vpId}`);
-          revokeTurnRepoApproval(turnId);
           try { vpAbort.abort(); } catch { /* best-effort */ }
         }
       }, queryTimeoutMs);
@@ -6346,10 +6305,6 @@ function emitQueuedTurnAbort(meta, turnId) {
 }
 
 function abortAllVpRuntime(aborted, sessionId = null) {
-  for (const [turnId, meta] of Array.from(turnAbortMeta.entries())) {
-    if (sessionId && meta?.sessionId !== sessionId) continue;
-    revokeTurnRepoApproval(turnId);
-  }
   for (const [key, ctrl] of vpAborts) {
     if (sessionId && !key.startsWith(`${sessionId}::`)) continue;
     try {
@@ -6392,7 +6347,6 @@ export function handleYeaftAbortThread(_msg = {}) {
       const meta = turnAbortMeta.get(turnId);
       if ((meta?.threadId || 'main') !== targetThreadId) continue;
       try { if (!ctrl.signal.aborted) { ctrl.abort(); aborted.push(turnId); } } catch { /* best-effort */ }
-      revokeTurnRepoApproval(turnId);
       turnAbortCtrls.delete(turnId);
       turnAbortMeta.delete(turnId);
     }
@@ -6411,7 +6365,6 @@ export function handleYeaftAbortThread(_msg = {}) {
   for (const [turnId, ctrl] of turnAbortCtrls) {
     try { if (!ctrl.signal.aborted) { ctrl.abort(); aborted.push(turnId); } } catch { /* best-effort */ }
   }
-  for (const turnId of turnAbortMeta.keys()) revokeTurnRepoApproval(turnId);
   turnAbortCtrls.clear();
   turnAbortMeta.clear();
   abortAllVpRuntime(aborted);
@@ -6438,12 +6391,10 @@ export function handleYeaftAbortAll(msg = {}) {
     const meta = turnAbortMeta.get(turnId);
     if (sessionId && meta?.sessionId !== sessionId) continue;
     try { if (!ctrl.signal.aborted) { ctrl.abort(); aborted.push(turnId); } } catch { /* best-effort */ }
-    revokeTurnRepoApproval(turnId);
     turnAbortCtrls.delete(turnId);
     turnAbortMeta.delete(turnId);
   }
   if (!sessionId) {
-    for (const turnId of turnAbortMeta.keys()) revokeTurnRepoApproval(turnId);
     turnAbortCtrls.clear();
     turnAbortMeta.clear();
   }
@@ -6490,7 +6441,6 @@ export function handleYeaftAbortTurn(msg = {}) {
       success = true;
       abortedTurnIds.push(turnId);
     }
-    revokeTurnRepoApproval(turnId);
     turnAbortCtrls.delete(turnId);
     turnAbortMeta.delete(turnId);
   }
@@ -7827,7 +7777,6 @@ export async function resetYeaftSession() {
     try { if (!ctrl.signal.aborted) ctrl.abort(); } catch { /* best-effort */ }
   }
   vpAborts.clear();
-  for (const turnId of turnAbortMeta.keys()) revokeTurnRepoApproval(turnId);
   turnAbortCtrls.clear();
   turnAbortMeta.clear();
   vpInboxes.clear();
@@ -8306,7 +8255,6 @@ export const __testHooks = {
     return loadAndBroadcastYeaftSkillSlashCommands();
   },
   resetAbortState() {
-    for (const turnId of turnRepoApprovals.keys()) revokeTurnRepoApproval(turnId);
     turnAbortCtrls.clear();
     turnAbortMeta.clear();
     vpAborts.clear();

package/skills/review-merge-tag/SKILL.md

@@ -1,78 +0,0 @@
----
-name: review-merge-tag
-description: 用 RepoWorkflow 在任意 GitHub 仓库执行开发 worktree、精确 PR review snapshot、base-ref CAS landing、数字 tag 与 workflow 验证；避免重复手工 git/gh 检查。
----
-
-# Repository Workflow
-
-不要逐条调用 `git fetch`、`git worktree list`、`gh pr view`、`git ls-remote` 和 `gh run watch` 来发现同一批事实。Session 内使用 `RepoWorkflow` 工具。非 Yeaft 环境可用 `yeaft-repo` CLI 执行 `prepare` 和 `review-prep`，这两个阶段返回与工具相同的紧凑 JSON；CLI 不能执行 `land`。
-
-## 三个边界
-
-### 1. 开发准备
-
-```json
-{
-  "phase": "prepare",
-  "name": "fix-short-description"
-}
-```
-
-它会在当前仓库中确定远端默认分支、拉取最新精确基线、检查 worktree/branch/path 冲突，并创建或安全复用 `yeaft-wt/<name>`。后续开发只使用返回的 `worktree.path`。
-
-### 2. 独立 review 准备
-
-Reviewer 调用：
-
-```json
-{
-  "phase": "review-prep",
-  "pr": 123
-}
-```
-
-它会一次冻结 GitHub PR 的 base branch/base SHA/head/merge snapshot、检查 draft/conflict/checks，并创建 detached exact-snapshot review worktree。Reviewer 必须审查返回的 `reviewWorktree.path`，并把明确结论、`pullRequest.baseBranch`、`pullRequest.baseSha`、`pullRequest.headSha` 和 `pullRequest.snapshotSha` 交回开发者。
-
-工具只冻结事实，不替代代码审查。
-
-### 3. Review 通过后的落地
-
-只有收到独立 reviewer 的明确批准后才能调用。Reviewer 必须用 `RouteForward` 把绑定仓库、PR、exact base branch/base SHA/head/merge snapshot 的结构化批准交回 landing VP；宿主会随该 handoff 铸造不可序列化、一次性的 approval capability。随后 landing VP 才能在处理该 handoff 的同一 turn 调用：
-
-```json
-{
-  "phase": "land",
-  "pr": 123,
-  "baseBranch": "main",
-  "baseSha": "<exact 40-char base SHA>",
-  "reviewedHead": "<exact 40-char head SHA>",
-  "reviewedSnapshot": "<exact 40-char merge snapshot SHA>",
-  "tagPrefix": "v1.0.",
-  "workflow": "Dev Release"
-}
-```
-
-`approvedBy` 等普通字符串没有授权语义。`land` 只接受宿主 capability，并重新冻结 PR；任何 repo、PR、recipient、base branch、base SHA、head 或 snapshot 不匹配都会停止。Reviewed snapshot 必须以批准的 base SHA/head 为两个父提交；landing 的目标 ref 只从批准的 base branch 推导，并在任何写入前拒绝 PR retarget。之后它通过单次 receive-pack 更新，用 `--force-with-lease=<base-ref>:<approved-base>` 将该 exact snapshot 安装到批准的远端 base。若 base 在最后冻结与 receive 之间前进，lease 会拒绝更新，并且不会创建 tag。若要求 tag，它只在 base CAS 成功后从远端 tags 数值计算下一版，用 create-only lease 推送并复核 base 与 tag。若要求 workflow，它等待匹配 tag 与 reviewed snapshot SHA 的 run 完成。
-
-Worktree cleanup 不属于 landing。`land` 会在任何仓库或远端副作用前拒绝 cleanup 请求，包括 active `repoRoot`；需要 cleanup 时必须在 landing 完成后走独立操作，cleanup 失败不能改变 landing 结果。
-
-## 通用性与边界
-
-- 适用于 Agent 可访问的任意本地 GitHub 仓库，不包含项目路径或固定 `main` 假设。
-- 需要 `git` 和已认证的 `gh` CLI；不依赖 Python，也不通过 shell 拼接命令。
-- 当前不支持 GitLab/Bitbucket；不要把 GitHub 成功误报为 forge-agnostic。
-- 自动化只消除重复事实核对，不消除独立 review、测试选择、代码判断或用户授权。
-- `land` 后若 workflow 失败，merge/tag 可能已经完成；读取错误 JSON 的 `details.remoteEffects`，不要盲目重试或重打 tag。
-
-## CLI
-
-Yeaft 外部或人工终端只可运行准备阶段：
-
-```bash
-yeaft-repo prepare --name fix-short-description
-yeaft-repo review-prep --pr 123
-```
-
-独立 CLI 不能执行 `land`。Landing 必须在 Session 中通过 `RepoWorkflow` 工具执行，并携带当前 handoff 由宿主签发、绑定 exact review 的 approval capability；普通参数或 `approvedBy` 字符串不能替代该 capability。
-
-每条可用命令 stdout 只输出一个成功 JSON；失败时 stderr 输出一个带稳定 `code` 和副作用状态的 JSON。

package/yeaft/tools/repo-workflow.js

@@ -1,80 +0,0 @@
-import { defineTool } from './types.js';
-import {
-  formatRepoWorkflowError,
-  landRepoWorkflow,
-  prepareRepoReview,
-  prepareRepoWorkflow,
-} from '../../repo-workflow.js';
-
-const repoWorkflow = defineTool({
-  name: 'RepoWorkflow',
-  description: {
-    en: `Run one deterministic GitHub repository workflow phase and return compact structured evidence.
-
-Use this instead of repeatedly issuing git/gh shell commands:
-- prepare: fetch the remote default branch and create/reuse an exact-base development worktree.
-- review-prep: freeze a PR's exact base/head/GitHub merge snapshot and create/reuse a clean detached review worktree.
-- land: re-freeze an independently approved exact base branch/base SHA/head/snapshot and atomically install that exact snapshot on the approved remote base with an expected-old lease, then optionally create the next numeric tag and wait for a workflow. Worktree cleanup is deliberately separate.
-
-This tool does not review code and never infers approval. The land phase requires the reviewer identity and exact SHAs returned by review-prep. Supports any local GitHub repository available to the Agent; git and authenticated gh CLIs are required.`,
-    zh: `执行一个确定性的 GitHub 仓库工作流阶段，并返回紧凑的结构化证据。
-
-应使用此工具代替反复执行 git/gh shell 命令：
-- prepare：拉取远端默认分支，并创建或复用精确基线的开发 worktree。
-- review-prep：冻结 PR 的精确 base/head/GitHub merge snapshot，并创建或复用干净的 detached review worktree。
-- land：重新冻结已经独立批准的 exact base branch/base SHA/head/snapshot，以 expected-old lease 在已批准的远端 base 上原子安装该 exact snapshot，随后可选创建下一个数字 tag 并等待 workflow。Worktree cleanup 刻意与 landing 分离。
-
-此工具不做代码审查，也不会推断 review 已通过。land 必须提供 reviewer 身份以及 review-prep 返回的精确 SHA。适用于 Agent 可访问的任意本地 GitHub 仓库；需要 git 和已认证的 gh CLI。`,
-  },
-  parameters: {
-    type: 'object',
-    properties: {
-      phase: { type: 'string', enum: ['prepare', 'review-prep', 'land'] },
-      cwd: { type: 'string', description: 'Repository or worktree path; defaults to the current engine cwd' },
-      remote: { type: 'string', description: 'Git remote name (default: origin)' },
-      baseBranch: { type: 'string', description: 'Explicit base branch for prepare, or exact approved destination branch for land' },
-      baseSha: { type: 'string', description: 'Exact independently approved base SHA for land' },
-      name: { type: 'string', description: 'Development or review worktree name' },
-      worktreePath: { type: 'string', description: 'Explicit worktree path' },
-      pr: { type: 'integer', description: 'GitHub pull request number' },
-      reviewedHead: { type: 'string', description: 'Exact independently approved PR head SHA' },
-      reviewedSnapshot: { type: 'string', description: 'Exact independently approved GitHub merge snapshot SHA' },
-      tagPrefix: { type: 'string', description: 'Optional numeric tag prefix, for example v1.0.' },
-      tagStart: { type: 'integer', minimum: 0 },
-      workflow: { type: 'string', description: 'Optional GitHub Actions workflow name to wait for' },
-      waitTimeoutMs: { type: 'integer', minimum: 1 },
-      pollIntervalMs: { type: 'integer', minimum: 1 },
-    },
-    required: ['phase'],
-  },
-  timeoutMs: 0,
-  isConcurrencySafe: () => false,
-  isReadOnly: () => false,
-  isDestructive: input => input?.phase === 'land',
-  async execute(input, ctx) {
-    const options = { ...input, cwd: input.cwd || ctx?.cwd || process.cwd() };
-    try {
-      const dependencies = input.phase === 'land'
-        ? {
-          signal: ctx?.signal,
-          approvalCapability: ctx?.inboundEnvelope?._repoApproval,
-          approvalContext: {
-            sessionId: ctx?.sessionId,
-            recipientVpId: ctx?.senderVpId,
-            turnId: ctx?.turnId,
-          },
-        }
-        : { signal: ctx?.signal };
-      const result = input.phase === 'prepare'
-        ? await prepareRepoWorkflow(options, dependencies)
-        : input.phase === 'review-prep'
-          ? await prepareRepoReview(options, dependencies)
-          : await landRepoWorkflow(options, dependencies);
-      return JSON.stringify(result);
-    } catch (error) {
-      return JSON.stringify(formatRepoWorkflowError(error));
-    }
-  },
-});
-
-export default repoWorkflow;