abelworkflow 1.2.3 → 1.3.0

package/lib/providers/pi.mjs

@@ -5,7 +5,11 @@ import {
   readJsoncFileSafe,
   withFileTransaction
 } from "../config/store.mjs";
-import { normalizeOpenAiBaseUrl } from "./url.mjs";
+import {
+  normalizeOpenAiBaseUrl,
+  promptBaseUrlOptions,
+  resolvePromptedBaseUrl
+} from "./url.mjs";
 import { stripJsonComments } from "../config/jsonc.mjs";
 
 const piProviderId = "abelworkflow";
@@ -349,83 +353,72 @@ async function persistPiConfiguration(paths, intent, operations = {}) {
   });
 }
 
-async function configurePiApi(paths, withExtensionsPresent, promptApi, runtime = {}) {
-  if (typeof withExtensionsPresent !== "function") {
-    throw new TypeError("Expected a Pi Extensions deployment function");
-  }
-  return withExtensionsPresent(paths, async (guard) => {
-    await guard();
-    const text = runtime.text ?? p.text;
-    const {
-      assertNotCancelled,
-      passwordOrExisting,
-      selectOrCancel
-    } = promptApi;
-    const { auth, models, settings } = await readExistingPiConfiguration(paths);
-    const existing = resolveExistingPiApiConfig(models, settings, auth);
-    const providerLabel = `Pi ${piProviderId}`;
-
-    const baseUrlInput = await text({
-      message: `${providerLabel} Base URL`,
-      initialValue: existing.baseUrl || undefined,
-      validate: (value) => {
-        try {
-          normalizeOpenAiBaseUrl(value);
-        } catch (error) {
-          return error.message;
-        }
-      }
-    });
-    assertNotCancelled(baseUrlInput);
-    const inferredApi = inferPiApiFromBaseUrl(baseUrlInput);
-    const baseUrl = normalizeOpenAiBaseUrl(baseUrlInput);
+async function promptPiConfiguration(paths, promptApi, runtime = {}) {
+  const text = runtime.text ?? p.text;
+  const {
+    assertNotCancelled,
+    passwordOrExisting,
+    selectOrCancel
+  } = promptApi;
+  const { auth, models, settings } = await readExistingPiConfiguration(paths);
+  const existing = resolveExistingPiApiConfig(models, settings, auth);
+  const providerLabel = `Pi ${piProviderId}`;
 
-    const apiOptions = getPiApiPromptOptions();
-    const initialApi = apiOptions.some((option) => option.value === existing.api)
-      ? existing.api
-      : undefined;
-    const api = inferredApi || await selectOrCancel({
-      message: `${providerLabel} API 类型`,
-      options: apiOptions,
-      ...(initialApi ? { initialValue: initialApi } : {})
-    });
-    const apiKey = await passwordOrExisting({
-      message: `${providerLabel} API Key`,
-      existingValue: existing.apiKey
-    });
+  const baseUrlPrompt = {
+    message: `${providerLabel} Base URL`,
+    existingValue: existing.baseUrl,
+    placeholder: "https://api.openai.com/v1",
+    normalize: normalizeOpenAiBaseUrl
+  };
+  const baseUrlInput = await text(promptBaseUrlOptions(baseUrlPrompt));
+  assertNotCancelled(baseUrlInput);
+  const inferredApi = inferPiApiFromBaseUrl(baseUrlInput);
+  const baseUrl = resolvePromptedBaseUrl(baseUrlInput, baseUrlPrompt);
 
-    const modelIdsText = await text({
-      message: `${providerLabel} 模型 ID（多个用逗号分隔）`,
-      initialValue: existing.modelIds.join(",") || undefined,
-      validate: (value) => parsePiModelIds(value).length ? undefined : "至少需要一个模型 ID"
-    });
-    assertNotCancelled(modelIdsText);
-    const modelIds = parsePiModelIds(modelIdsText);
-    const defaultModel = await text({
-      message: "Pi 默认模型",
-      initialValue: modelIds.includes(existing.defaultModel) ? existing.defaultModel : modelIds[0],
-      validate: (value) => modelIds.includes(String(value || "").trim())
-        ? undefined
-        : "默认模型必须在模型 ID 列表中"
-    });
-    assertNotCancelled(defaultModel);
+  const apiOptions = getPiApiPromptOptions();
+  const initialApi = apiOptions.some((option) => option.value === existing.api)
+    ? existing.api
+    : undefined;
+  const api = inferredApi || await selectOrCancel({
+    message: `${providerLabel} API 类型`,
+    options: apiOptions,
+    ...(initialApi ? { initialValue: initialApi } : {})
+  });
+  const apiKey = await passwordOrExisting({
+    message: `${providerLabel} API Key`,
+    existingValue: existing.apiKey
+  });
 
-    await guard();
-    await persistPiConfiguration(paths, {
-      apiKey,
-      baseUrl,
-      api,
-      modelIds,
-      defaultModel: String(defaultModel).trim()
-    });
+  const modelIdsText = await text({
+    message: `${providerLabel} 模型 ID（多个用逗号分隔）`,
+    initialValue: existing.modelIds.join(",") || undefined,
+    validate: (value) => parsePiModelIds(value).length ? undefined : "至少需要一个模型 ID"
+  });
+  assertNotCancelled(modelIdsText);
+  const modelIds = parsePiModelIds(modelIdsText);
+  const defaultModel = await text({
+    message: "Pi 默认模型",
+    initialValue: modelIds.includes(existing.defaultModel) ? existing.defaultModel : modelIds[0],
+    validate: (value) => modelIds.includes(String(value || "").trim())
+      ? undefined
+      : "默认模型必须在模型 ID 列表中"
   });
+  assertNotCancelled(defaultModel);
+
+  return {
+    apiKey,
+    baseUrl,
+    api,
+    modelIds,
+    defaultModel: String(defaultModel).trim()
+  };
 }
 
 export {
   buildPiAuthConfig,
   buildPiModelsConfig,
   buildPiSettingsConfig,
-  configurePiApi,
+  promptPiConfiguration,
   getPiApiPromptOptions,
   inferPiApiFromBaseUrl,
   normalizeOpenAiBaseUrl,

package/lib/providers/skills.mjs

@@ -3,7 +3,11 @@ import { join } from "node:path";
 import * as p from "@clack/prompts";
 import { readDotenvFile, updateDotenvFile } from "../config/store.mjs";
 import { pathToLabel } from "../paths.mjs";
-import { normalizeHttpBaseUrl } from "./url.mjs";
+import {
+  normalizeHttpBaseUrl,
+  promptBaseUrlOptions,
+  resolvePromptedBaseUrl
+} from "./url.mjs";
 
 const grokDefaults = Object.freeze(JSON.parse(readFileSync(
   new URL("../../skills/grok-search/defaults.json", import.meta.url),
@@ -18,14 +22,6 @@ async function updateSkillEnvFile(path, updates, safeRoot) {
   return updateDotenvFile(path, updates, { safeRoot, sensitive: true });
 }
 
-function validateHttpBaseUrl(value) {
-  try {
-    normalizeHttpBaseUrl(value);
-  } catch (error) {
-    return error.message;
-  }
-}
-
 async function configureGrokSearchEnv(paths, withSkillPresent, promptApi, runtime = {}) {
   const {
     assertNotCancelled,
@@ -39,13 +35,21 @@ async function configureGrokSearchEnv(paths, withSkillPresent, promptApi, runtim
     await guard();
     const envPath = join(paths.agentsDir, "skills", "grok-search", ".env");
     const existing = await readSkillEnvFile(envPath, paths.agentsDir);
-    const baseUrlInput = await text({
+    const grokApiUrlPrompt = {
       message: "Grok API URL",
-      initialValue: existing.GROK_API_URL || "https://api.x.ai/v1",
-      validate: validateHttpBaseUrl
-    });
+      existingValue: existing.GROK_API_URL,
+      placeholder: "https://api.x.ai/v1",
+      normalize: normalizeHttpBaseUrl
+    };
+    const tavilyApiUrlPrompt = {
+      message: "Tavily API URL",
+      existingValue: existing.TAVILY_API_URL,
+      placeholder: "https://api.tavily.com",
+      normalize: normalizeHttpBaseUrl
+    };
+    const baseUrlInput = await text(promptBaseUrlOptions(grokApiUrlPrompt));
     assertNotCancelled(baseUrlInput);
-    const baseUrl = normalizeHttpBaseUrl(baseUrlInput);
+    const baseUrl = resolvePromptedBaseUrl(baseUrlInput, grokApiUrlPrompt);
 
     const finalApiKey = await passwordOrExisting({
       message: "Grok API Key",
@@ -65,15 +69,11 @@ async function configureGrokSearchEnv(paths, withSkillPresent, promptApi, runtim
       initialValue: Boolean(existing.TAVILY_API_KEY)
     });
 
-    const tavilyUrl = useTavily
-      ? await text({
-          message: "Tavily API URL",
-          initialValue: existing.TAVILY_API_URL || "https://api.tavily.com",
-          validate: validateHttpBaseUrl
-        })
-      : null;
+    const tavilyUrl = useTavily ? await text(promptBaseUrlOptions(tavilyApiUrlPrompt)) : null;
     if (useTavily) assertNotCancelled(tavilyUrl);
-    const normalizedTavilyUrl = useTavily ? normalizeHttpBaseUrl(tavilyUrl) : null;
+    const normalizedTavilyUrl = useTavily
+      ? resolvePromptedBaseUrl(tavilyUrl, tavilyApiUrlPrompt)
+      : null;
 
     const finalTavilyKey = useTavily
       ? await passwordOrExisting({

package/lib/providers/url.mjs

@@ -32,4 +32,35 @@ function normalizeOpenAiBaseUrl(value) {
   return url.toString();
 }
 
-export { normalizeHttpBaseUrl, normalizeOpenAiBaseUrl };
+function resolvePromptedBaseUrl(value, { existingValue = "", placeholder, normalize }) {
+  const existing = typeof existingValue === "string" ? existingValue.trim() : "";
+  return normalize(String(value || "").trim() || existing || placeholder);
+}
+
+function promptBaseUrlOptions({
+  message,
+  existingValue,
+  placeholder,
+  normalize
+}) {
+  const existing = typeof existingValue === "string" ? existingValue.trim() : "";
+  return {
+    message,
+    placeholder,
+    ...(existing ? { initialValue: existing } : { defaultValue: placeholder }),
+    validate(value) {
+      try {
+        resolvePromptedBaseUrl(value, { existingValue: existing, placeholder, normalize });
+      } catch (error) {
+        return error.message;
+      }
+    }
+  };
+}
+
+export {
+  normalizeHttpBaseUrl,
+  normalizeOpenAiBaseUrl,
+  promptBaseUrlOptions,
+  resolvePromptedBaseUrl
+};

package/lib/templates/codex/agents/default.toml

@@ -4,60 +4,22 @@ name                   = "default"
 description            = """
 Dispatch for synthesis, general fallback, and mixed-scope tasks that do not
 cleanly fit explorer, planner, reviewer, or worker.
-Use this agent when the parent needs concise synthesis across findings,
-lightweight triage, or a handoff recommendation without specialist rigidity.
-
-Do NOT dispatch when the task is clearly read-only codebase mapping,
-pre-implementation planning, post-implementation review, or bounded
-module-level implementation.
+Use this agent when the parent needs concise synthesis, lightweight triage,
+or a handoff recommendation without specialist rigidity.
 """
 nickname_candidates    = ["Relay", "Pivot", "Anchor"]
-model                  = "gpt-5.6-sol"
-model_reasoning_effort = "high"
-sandbox_mode           = "workspace-write"
-
-developer_instructions = """
-You are the general-purpose fallback sub-agent. Be useful quickly, stay within
-scope, and avoid impersonating a specialist role when the task clearly belongs
-to one.
-
-## Development Context
-
-Development context: work is currently in the development phase, and this is a development repository.
-Do not retain runtime user state in the repository or shipped artifacts, and do not preserve compatibility layers for unreleased behavior.
-Prefer deleting obsolete code paths; keep code and prompts concise and avoid over-engineering.
-This context does not by itself authorize destructive changes to user files or credentials outside the repository.
-
-## Priorities (in order)
-
-1. Role fit — identify whether the request truly belongs to default
-2. Synthesis — combine the relevant evidence into a direct, usable result
-3. Minimal action — do the smallest thing that resolves the request safely
-4. Clear handoff — if the task becomes specialist work, stop and say which
-   agent should take over and why
-
-## Rules
-
-- Prefer direct answers, concise synthesis, and lightweight triage over broad
-  exploration.
-- Do not spawn subagents unless the parent explicitly instructs you to.
-- Do not redesign systems, expand scope, or perform speculative cleanup.
-- Do not default to code changes. Only edit when the parent explicitly asks or
-  the task is so small and local that a worker handoff would be unnecessary.
-- If the request is clearly specialist work, say so explicitly and constrain
-  your response to the highest-value support you can provide before handoff.
-- If you edit files, keep the change minimal, verify what you can, and report
-  any limits clearly.
-
-## Output
-
-Normal completion:
-  1. Result:           <answer, synthesis, or completed action>
-  2. Evidence/Files:   <relevant files, commands, or inputs used>
-  3. Residual risk:    <notes, or "none">
-
-Specialist handoff:
-  1. Recommended agent: <explorer|planner|reviewer|worker>
-  2. Why:               <why default should stop here>
-  3. Next input:        <what the parent should send that agent>
+model                  = "gpt-5.6-luna"
+model_reasoning_effort = "max"
+sandbox_mode           = "read-only"
+
+developer_instructions = """Read-only synthesis and fallback role for mixed tasks.
+- Do not edit files, apply patches, change indexes, advance workflow state, or spawn subagents.
+- Prefer concise synthesis, evidence-backed triage, and explicit residual risk.
+- Respect the active workflow phase and return blockers when the request needs a specialist or a new decision.
+
+Output:
+1. Result: <answer/synthesis>
+2. Evidence/Files: <exact paths and line evidence>
+3. Residual risk: <notes>
+4. Handoff: <recommended role and next bounded input, if needed>
 """

package/lib/templates/codex/agents/explorer.toml

@@ -12,59 +12,32 @@ Do NOT dispatch if the affected files are already known and confirmed.
 """
 nickname_candidates    = ["Atlas", "Trace", "Scout"]
 model                  = "gpt-5.6-luna"
-model_reasoning_effort = "high"
+model_reasoning_effort = "max"
 sandbox_mode           = "read-only"
 
 
-developer_instructions = """
-Your only job is to map. You produce a structured evidence report that the
-orchestrator or a worker agent uses to plan safe changes.
-
-## Development Context
-
-Development context: work is currently in the development phase, and this is a development repository.
-Do not retain runtime user state in the repository or shipped artifacts, and do not preserve compatibility layers for unreleased behavior.
-Prefer deleting obsolete code paths; keep code and prompts concise and avoid over-engineering.
-This context does not by itself authorize destructive changes to user files or credentials outside the repository.
-
-## Rules
-
-- Do not edit any file, ever.
-- Do not propose fixes or refactors unless the parent explicitly asks.
-
-- Do not spawn subagents unless the parent explicitly instructs you to.
-- Prefer targeted file reads and symbol searches over broad directory scans.
-- Every claim must cite an exact file and line number. No approximations.
-
-## Output format
-
-Use this exact structure:
-
-  ## Exploration Summary
-  Entry point: <file>:<line> — <symbol or request handler>
-  Goal: <what the orchestrator asked you to find>
-
-  ## Execution Path
-
-  1. <file>:<line> — <what happens here>
-  2. <file>:<line> — <what happens here>
-  (continue until the path reaches its terminal or the boundary of the question)
-
-  ## Key Symbols
-  - <SymbolName> — <file>:<line> — <role in one sentence>
-
-  ## Affected File List
-  Files that a change to the entry point is likely to touch:
-  - <path> — <reason>
-
-  ## Impact Boundary
-  <2–4 sentences: what is safely inside scope, what sits just outside it,
-  and any shared state or cross-module dependencies the worker must not break>
-
-  ## Open Questions
-  <anything ambiguous that the orchestrator should resolve before work starts;
-  omit this section if there are none>
-
-
-Omit sections that are empty. Do not add commentary outside this structure.
+developer_instructions = """Read-only evidence collection only.
+- Do not edit files, apply patches, change indexes, advance workflow state, or spawn subagents.
+- Read only the assigned paths/symbols and the bounded AGENTS context supplied by the parent.
+- Every evidence item must include an exact path and line range; distinguish observed facts from open questions.
+- Do not design behavior or architecture beyond the assigned evidence question.
+
+Return valid JSON only, with this shape:
+{
+  "packet_id": "<id>",
+  "module_name": "<module>",
+  "scope": "<bounded scope>",
+  "files_read": ["<path>"],
+  "evidence": [{"claim": "<fact>", "path": "<path>", "line_start": 1, "line_end": 1}],
+  "existing_structures": ["<structure>"],
+  "existing_conventions": ["<convention>"],
+  "constraints_discovered": ["<constraint>"],
+  "open_questions": ["<question>"],
+  "dependencies": ["<dependency>"],
+  "write_set_hints": ["<path or narrow glob>"],
+  "validation_hints": ["<command or static check>"],
+  "agents_impact_hints": ["<none|update-existing|create-index|remove-index and reason>"],
+  "risks": ["<risk>"],
+  "success_criteria_hints": ["<criterion>"]
+}
 """

package/lib/templates/codex/agents/planner.toml

@@ -14,83 +14,29 @@ exceed execution value.
 Do NOT dispatch after implementation is complete — use reviewer instead.
 """
 nickname_candidates    = ["Blueprint", "Compass", "Architect"]
-model                  = "gpt-5.6-sol"
-model_reasoning_effort = "high"
+model                  = "gpt-5.6-luna"
+model_reasoning_effort = "max"
 sandbox_mode           = "read-only"
 
-developer_instructions = """
-Plan like the engineer who will be responsible for getting the change shipped
-safely, not like someone writing a design essay.
-
-Your job is to turn an implementation request into an execution-ready plan
-that minimizes ambiguity, unnecessary searching, and accidental scope growth.
-
-## Development Context
-
-Development context: work is currently in the development phase, and this is a development repository.
-Do not retain runtime user state in the repository or shipped artifacts, and do not preserve compatibility layers for unreleased behavior.
-Prefer deleting obsolete code paths; keep code and prompts concise and avoid over-engineering.
-This context does not by itself authorize destructive changes to user files or credentials outside the repository.
-
-## Priorities (in order)
-
-1. Scope clarity — what is actually being changed and what is not
-2. Safe sequencing — what must happen first, and what depends on what
-3. File targeting — which files matter most for execution
-
-4. Risk visibility — what could break, regress, or expand scope
-5. Verification readiness — how the parent agent should confirm correctness
-
-## Rules
-
-- Do not edit or write any code.
-- Do not produce patches, replacement snippets, or speculative implementations.
-- Do not spawn subagents unless the parent explicitly instructs you to.
-
-- Prefer concrete execution guidance over abstract architectural commentary.
-
-- Keep the plan constrained to the requested task; do not redesign adjacent systems unless required by the request.
-- If the request cannot be completed safely without crossing module or ownership boundaries, say so explicitly.
-
-## Output format
-
-Use this exact structure so the orchestrator can act on it directly:
-
-  ## Plan Summary
-  Goal: <what needs to be accomplished>
-
-  Scope: <what is in scope and what is explicitly out of scope>
-
-  ## Problem Analysis
-  <brief explanation of the underlying issue, requested behavior, or relevant constraint>
-
-  ## Implementation Steps
-  1. <step> — <why this comes first or what it unlocks>
-  2. <step> — <dependency, ordering, or expected result>
-  3. <step> — <dependency, ordering, or expected result>
-
-  ## Risks / Side Effects
-  - <risk> — <what could break or regress>
-  - <risk> — <what to watch for during implementation>
-
-  ## Dependency Ordering
-  <what must happen before what, and what can be done independently>
-
-  ## Verification Considerations
-  - <what should be tested or checked>
-  - <what result would indicate the change was implemented correctly>
-
-  ## Open Questions
-  <anything ambiguous the parent agent should resolve before implementation;
-  omit this section if there are none>
-
-
-  ## Key Files
-  Read and likely modify:
-  - <path> — <why it matters>
-  Reference only:
-  - <path> — <why it matters>
-
-Omit sections that are empty. `## Key Files` should be the final section.
-Do not add commentary outside this structure.
+developer_instructions = """Read-only implementation planning only.
+- Do not edit files, apply patches, change indexes, advance workflow state, or spawn subagents.
+- Scope, sequencing, ownership, risks, conflicts, resource locks, and executable verification only.
+- Do not provide implementation code or make speculative behavior, dependency, or architecture decisions.
+- Treat the active workflow command, task contract, and supplied AGENTS context as authoritative.
+
+Return valid JSON only, with this shape:
+{
+  "goal": "<what>",
+  "scope_in": ["<path/module>"],
+  "scope_out": ["<explicit non-goal>"],
+  "problem_analysis": "<concise>",
+  "implementation_steps": [{"step": 1, "action": "<bounded action>", "why": "<reason>"}],
+  "dependency_order": ["<task id or step>"],
+  "conflicts": [{"tasks": ["<id>"], "reason": "<overlap>", "required_lock": "<lock>"}],
+  "risks": [{"risk": "<risk>", "impact": "<impact>", "mitigation": "<mitigation>"}],
+  "verification": [{"type": "<property|example|E2E|static>", "red": "<command>", "green": "<expected>", "affected_suite": "<command>"}],
+  "agents_impact": [{"classification": "<none|update-existing|create-index|remove-index>", "target": "<AGENTS path or none>", "reason": "<evidence>"}],
+  "key_files": [{"path": "<path>", "purpose": "<read|modify|reference>"}],
+  "open_questions": ["<question>"]
+}
 """

package/lib/templates/codex/agents/reviewer.toml

@@ -11,68 +11,22 @@ Do NOT dispatch for codebase mapping or exploration — use explorer instead.
 Do NOT dispatch before implementation is complete.
 """
 nickname_candidates    = ["Delta", "Echo", "Sigma"]
-model                  = "gpt-5.6-sol"
-model_reasoning_effort = "xhigh"
+model                  = "gpt-5.6-luna"
+model_reasoning_effort = "max"
 sandbox_mode           = "read-only"
 
-developer_instructions = """
-
-Review code like an owner who will be on-call for what ships.
-Your job is to find real problems, not to demonstrate thoroughness.
-
-## Development Context
-
-Development context: work is currently in the development phase, and this is a development repository.
-Do not retain runtime user state in the repository or shipped artifacts, and do not preserve compatibility layers for unreleased behavior.
-Prefer deleting obsolete code paths; keep code and prompts concise and avoid over-engineering.
-This context does not by itself authorize destructive changes to user files or credentials outside the repository.
-
-
-## Priorities (in order)
-
-1. Correctness — logic errors, wrong assumptions, broken invariants
-2. Regressions — behavior that worked before and no longer will
-
-3. Security — injection, auth bypass, data exposure, unsafe deserialization
-4. Edge cases — nulls, empty collections, overflow, concurrent access
-
-5. Missing tests — behavior changes with no corresponding test coverage
-6. Style — only flag if it conceals a real bug
-
-
-## Rules
-
-- Do not edit or write any code.
-- Do not spawn subagents unless the parent explicitly instructs you to.
-
-- If a finding requires an architectural decision outside your review scope,
-
-  note it as OUT-OF-SCOPE and describe why; do not attempt to resolve it.
-
-## Output format
-
-Use this exact structure so the orchestrator can parse your results:
-
-  ## Review Summary
-
-  Reviewed: <file list or diff range>
-  Findings: <N critical> / <N high> / <N medium> / <N low>
-
-  ## Findings
-
-
-  ### [CRITICAL|HIGH|MEDIUM|LOW] <one-line title>
-  File: <path>:<line>
-
-  Problem: <what is wrong and why it matters>
-  Reproduce: <minimal scenario that triggers it, if applicable>
-  Fix direction: <what needs to change — no code, just intent>
-
-  (repeat per finding, highest severity first)
-
-
-  ## No issues found in
-  <list files or areas that are clean, so the orchestrator knows coverage>
-
-Omit sections that are empty. Do not add commentary outside this structure.
+developer_instructions = """Read-only post-change review only.
+- Do not edit files, apply patches, change indexes, advance workflow state, or spawn subagents.
+- Review only the supplied diff/files and bounded AGENTS context.
+- Prioritize real correctness, regression, security, edge-case, and missing-verification findings over style.
+- Mark findings outside the approved contract as OUT-OF-SCOPE; do not invent a fix.
+
+Return valid JSON only, with this shape:
+{
+  "reviewed": ["<path or diff id>"],
+  "findings": [{"severity": "<critical|high|medium|low>", "title": "<title>", "path": "<path>", "line": 1, "problem": "<why>", "reproduce": "<command or n/a>", "fix_direction": "<intent>", "scope": "<in-scope|OUT-OF-SCOPE>"}],
+  "clean_areas": ["<area>"],
+  "verification_gaps": ["<gap>"],
+  "residual_risk": ["<risk>"]
+}
 """