agent-devkit 0.0.3 → 0.1.0

package/runtime/providers/github.yaml

@@ -0,0 +1,42 @@
+id: github
+name: GitHub
+kind: cli-provider
+status: draft
+description: GitHub provider backed by the official GitHub CLI.
+auth_methods:
+  - id: gh-auth
+    label: GitHub CLI auth
+    native: true
+    secret_fields: []
+  - id: token
+    label: GitHub token
+    secret_fields:
+      - GITHUB_TOKEN
+config_fields:
+  - name: GITHUB_TOKEN
+    required: false
+    secret: true
+  - name: GITHUB_HOST
+    required: false
+    secret: false
+detection:
+  env_any:
+    - GITHUB_TOKEN
+health_check:
+  command: gh auth status
+risk:
+  default: read
+  writes: true
+fallbacks:
+  - report_only
+  - manual_steps
+capabilities:
+  read:
+    - pr.list-review-requests
+    - pr.inspect
+    - pr.review-report
+  write:
+    - pr.comment
+    - pr.approve
+    - pr.request-changes
+write: true

package/runtime/providers/local-notification.yaml

@@ -0,0 +1,19 @@
+id: local-notification
+name: Local Notification
+kind: local-runtime
+status: draft
+description: Local notification provider for terminal notifications.
+auth_methods: []
+config_fields: []
+health_check:
+  command: agent provider doctor local-notification
+risk:
+  default: local-notification
+  writes: true
+fallbacks:
+  - skip_provider
+capabilities:
+  read: []
+  write:
+    - notification.terminal
+write: true

package/runtime/providers/local-scheduler.yaml

@@ -0,0 +1,24 @@
+id: local-scheduler
+name: Local Scheduler
+kind: local-runtime
+status: draft
+description: Local scheduler provider for Agent DevKit task execution.
+auth_methods: []
+config_fields: []
+health_check:
+  command: agent scheduler run-once --dry-run
+risk:
+  default: local-write
+  writes: true
+fallbacks:
+  - dry_run
+  - manual_steps
+capabilities:
+  read:
+    - task.list
+    - task.history
+  write:
+    - task.create
+    - task.update
+    - task.delete
+write: true

package/runtime/scripts/README.md

@@ -34,7 +34,7 @@ python3 scripts/validate-repo.py --json
 python3 scripts/validate-repo.py --strict
 python3 scripts/mvp-readiness.py
 python3 scripts/mvp-readiness.py --json
-npm run release:verify -- v0.0.3
+npm run release:verify -- v0.0.4
 ```
 
 ## Regras

package/runtime/scripts/verify-release-alignment.mjs

@@ -63,7 +63,7 @@ function run(command, args, options = {}) {
 async function main() {
   const [rawVersion] = process.argv.slice(2);
   if (!rawVersion) {
-    throw new Error("Usage: npm run release:verify -- v0.0.3");
+    throw new Error("Usage: npm run release:verify -- v0.0.4");
   }
 
   const version = normalizeVersion(rawVersion);

package/runtime/vendor/skills/napkin/napkin.md

@@ -17,15 +17,25 @@
 ## Shell & Command Reliability
 1. **[2026-06-20] Azure DevOps SSL can fail through Python urllib**
    Do instead: use the repository's curl-backed transport for Azure DevOps API calls in local/serverless execution.
-2. **[2026-06-27] Runtime `--source` can conflict with capability domain args**
+2. **[2026-06-28] Toolchain install deve ser plan-first e idempotente**
+   Do instead: diagnosticar PATH antes de planejar instalacao externa; se a ferramenta ja existe, retornar `already-installed` e nao executar reinstalacao.
+3. **[2026-06-28] Saida de instaladores externos pode vazar ambiente**
+   Do instead: antes de persistir stdout/stderr de comandos de setup/toolchain, redigir valores de variaveis com KEY/TOKEN/SECRET/PASSWORD/PASS/PAT.
+4. **[2026-06-27] Runtime `--source` can conflict with capability domain args**
    Do instead: intercept `--source` only for capabilities that explicitly support Agent DevKit source registry injection; otherwise leave it for the runner domain contract.
 
 ## Domain Behavior Guardrails
 1. **[2026-06-28] Agentes devem ser agnosticos de cliente/projeto**
    Do instead: mover nomes de produto, cliente, URLs, paths locais, regras de elegibilidade e campos XML especificos para provider/config/env antes de versionar o agente.
-2. **[2026-06-20] Azure card descriptions may include sensitive production log data**
+2. **[2026-06-28] Sessao ativa nao deve vazar contexto entre projetos**
+   Do instead: ao persistir contexto de conversa, reutilizar automaticamente apenas sessoes do mesmo projeto; para outro projeto, criar nova sessao ou exigir retomada explicita.
+3. **[2026-06-28] Roteamento de PR deve usar tokens reais**
+   Do instead: detectar `pr`, `prs` ou `pull request` como tokens/expressao, nao substring ampla que captura palavras como `problema`.
+4. **[2026-06-28] Tasks com escrita externa devem bloquear por padrao**
+   Do instead: permitir `dry-run`, mas bloquear execucao real quando `action.external_writes=true` sem permissao explicita de escrita externa.
+5. **[2026-06-20] Azure card descriptions may include sensitive production log data**
    Do instead: retrieve the complete card for validation, but summarize PII-heavy log payloads in user-facing responses unless raw content is explicitly required.
-3. **[2026-06-21] N1 restrictive-base uses a scoped SQL Server override**
+6. **[2026-06-21] N1 restrictive-base uses a scoped SQL Server override**
    Do instead: when the N1 agent checks the restrictive base, prefer `DB_RESTRICTIVE_CONN_STRING` only in the subprocess environment for `sqlserver-data-analyzer`, without changing the global SQL Server analyzer default.
 
 ## User Directives