makdoong2-team 1.3.0

package/scripts/lint-agent-prompts.sh

@@ -0,0 +1,74 @@
+#!/usr/bin/env bash
+# lint-agent-prompts.sh — agent 프롬프트 및 게이트 스크립트에서 state.json flat 표기 재유입 감지.
+#
+# 검증 대상: agents/*.md, gates/*.sh 파일
+# 감지 패턴 (BUG):
+#   .stages."<PHASE>.<SUBSTAGE>"                     예: .stages."1_planning.jira"
+#
+# 정상 패턴:
+#   .stages."<PHASE>".substages."<SUBSTAGE>"         예: .stages."1_planning".substages."jira"
+#
+# 허용 예외 (의도적):
+#   .policy.auto_approve."<PHASE>.<SUBSTAGE>"        (opencode-plugin.ts STAGE_ORDER 는 flat)
+#   .policy.categorized_by = "<PHASE>.<SUBSTAGE>"    (policy 값)
+#
+# 발견 시 파일:라인 + 정확한 hierarchical 대체 경로를 출력하고 exit 1.
+# CI/pre-commit 훅에서 호출한다.
+
+set -euo pipefail
+
+REPO_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+AGENTS_DIR="${REPO_ROOT}/agents"
+GATES_DIR="${REPO_ROOT}/gates"
+
+if [ ! -d "$AGENTS_DIR" ]; then
+  echo "[lint-agent-prompts] agents/ directory not found at $AGENTS_DIR" >&2
+  exit 2
+fi
+
+if [ ! -d "$GATES_DIR" ]; then
+  echo "[lint-agent-prompts] gates/ directory not found at $GATES_DIR" >&2
+  exit 2
+fi
+
+# grep -P (PCRE) 를 사용해 negative lookbehind 로 policy 예외를 제외한다.
+# 매칭: `.stages."<phase>.<sub>"` (앞에 .policy 가 붙지 않은 경우만).
+# 부수적으로 `.stages.\"<phase>.<sub>\"` (escape 형태) 도 잡는다.
+PATTERN='(?<!policy)\.stages\.\\?"[0-9]+_[a-z_]+\.[a-z]+\\?"'
+
+matches_agents=$(grep -rnP "$PATTERN" "$AGENTS_DIR" || true)
+matches_gates=$(grep -rnP "$PATTERN" "$GATES_DIR" || true)
+matches="${matches_agents}${matches_gates}"
+
+if [ -z "$matches" ]; then
+  echo "[lint-agent-prompts] OK — no flat stage notation found in agents/ or gates/"
+  exit 0
+fi
+
+echo "[lint-agent-prompts] FAIL — flat stage notation detected in agent prompts:" >&2
+echo "" >&2
+echo "$matches" | while IFS=: read -r file line rest; do
+  # 힌트: 발견된 flat path 에서 phase.substage 를 파싱해 대체안 제시.
+  hint=$(echo "$rest" | grep -oP '\.stages\.\\?"([0-9]+_[a-z_]+)\.([a-z]+)\\?"' | head -n1 || true)
+  suggest=""
+  if [ -n "$hint" ]; then
+    phase=$(echo "$hint" | sed -E 's|.*"([0-9]+_[a-z_]+)\.([a-z]+)".*|\1|')
+    sub=$(echo "$hint" | sed -E 's|.*"([0-9]+_[a-z_]+)\.([a-z]+)".*|\2|')
+    suggest=".stages.\"${phase}\".substages.\"${sub}\""
+  fi
+  echo "  ${file}:${line}" >&2
+  echo "    line   : ${rest}" >&2
+  [ -n "$suggest" ] && echo "    fix    : ${suggest}" >&2
+  echo "" >&2
+done
+
+cat >&2 <<EOF
+state.json 스키마 규약 (AGENTS.md "state.json 스키마 규약 (hardrule)" 참조):
+  hierarchical : .stages."<PHASE>".substages."<SUBSTAGE>".<field>
+  flat (금지)  : .stages."<PHASE>.<SUBSTAGE>".<field>
+
+허용 예외:
+  .policy.auto_approve."<PHASE>.<SUBSTAGE>" — opencode-plugin.ts STAGE_ORDER 매핑용 flat 키.
+EOF
+
+exit 1

package/scripts/log-event.sh

@@ -0,0 +1,44 @@
+#!/usr/bin/env bash
+# log-event.sh — append a structured NDJSON event for an issue.
+#
+# 목적: state.json은 *현재 상태*만 보관한다. 단계 전이·폴백·게이트 차단 같은
+# *이력*은 append-only `events.ndjson`으로 남겨 회고·디버깅·메트릭 산출에 사용한다.
+#
+# 사용:
+#   log-event.sh <issue> <kind> [key=value ...]
+# 예:
+#   log-event.sh PROJ-1 stage_dispatched stage=4_dev agent=makdoong2-dev model=gpt-5.1-codex
+#   log-event.sh PROJ-1 gate_blocked stage=2_requirements reason=jira_validation_failed
+#   log-event.sh PROJ-1 fallback agent=makdoong2-dev from=gpt-5.1-codex to=claude-haiku-4.5
+#
+# 저장 위치: <git toplevel>/.makdoong2-team/<issue>/events.ndjson
+# 의존: jq
+set -euo pipefail
+
+ISSUE="${1:?usage: log-event.sh <issue> <kind> [key=value ...]}"
+KIND="${2:?usage: log-event.sh <issue> <kind> [key=value ...]}"
+shift 2
+
+_STATE="$(cd "$(dirname "$0")" && pwd)/state.sh"
+ROOT="$("$_STATE" root)"
+DIR="$ROOT/.makdoong2-team/$ISSUE"
+mkdir -p "$DIR"
+LOG="$DIR/events.ndjson"
+TS="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+
+# Accumulate key=value pairs into a JSON object via jq.
+ATTRS='{}'
+for kv in "$@"; do
+  if [[ "$kv" == *"="* ]]; then
+    k="${kv%%=*}"
+    v="${kv#*=}"
+    ATTRS=$(printf '%s' "$ATTRS" | jq -c --arg k "$k" --arg v "$v" '. + {($k): $v}')
+  fi
+done
+
+jq -nc \
+  --arg ts "$TS" \
+  --arg issue "$ISSUE" \
+  --arg kind "$KIND" \
+  --argjson attrs "$ATTRS" \
+  '{ts:$ts, issue:$issue, kind:$kind} + $attrs' >> "$LOG"

package/scripts/model-policy.mjs

@@ -0,0 +1,183 @@
+// model-policy.mjs — JS mirror of src/model-fallback-policy.ts.
+//
+// Why mirror: bin/cli.js and scripts/smoke-test.mjs need to run under plain
+// `node` (no bun, no transpile) — npx-friendly. The TS source is the canonical
+// definition; this mirror MUST be kept structurally in sync. The smoke test
+// asserts the mirror matches the runtime behavior described in the TS source.
+//
+// Shared by:
+//   - scripts/smoke-test.mjs (chain logic tests)
+//   - bin/cli.js (`validate` subcommand — checks user config without bun)
+
+
+
+export const DEFAULT_ALLOWED_PRIMARIES = new Set([
+  "github-copilot/claude-haiku-4.5",
+  "github-copilot/claude-opus-4.5",
+  "github-copilot/claude-opus-4.6",
+  "github-copilot/claude-opus-4.6-fast",
+  "github-copilot/claude-opus-4.7",
+  "github-copilot/claude-opus-4.7-fast",
+  "github-copilot/claude-opus-4.8",
+  "github-copilot/claude-opus-4.8-fast",
+  "github-copilot/claude-opus-41",
+  "github-copilot/claude-sonnet-4",
+  "github-copilot/claude-sonnet-4.5",
+  "github-copilot/claude-sonnet-4.6",
+  "github-copilot/claude-sonnet-5",
+  "github-copilot/gemini-2.5-pro",
+  "github-copilot/gemini-3-flash-preview",
+  "github-copilot/gemini-3-pro-preview",
+  "github-copilot/gemini-3.1-pro-preview",
+  "github-copilot/gemini-3.5-flash",
+  "github-copilot/gpt-4.1",
+  "github-copilot/gpt-4o",
+  "github-copilot/gpt-5",
+  "github-copilot/gpt-5-mini",
+  "github-copilot/gpt-5.1",
+  "github-copilot/gpt-5.1-codex",
+  "github-copilot/gpt-5.1-codex-max",
+  "github-copilot/gpt-5.1-codex-mini",
+  "github-copilot/gpt-5.2",
+  "github-copilot/gpt-5.2-codex",
+  "github-copilot/gpt-5.3-codex",
+  "github-copilot/gpt-5.4",
+  "github-copilot/gpt-5.4-mini",
+  "github-copilot/gpt-5.5",
+  "github-copilot/gpt-5.6-luna",
+  "github-copilot/gpt-5.6-sol",
+  "github-copilot/gpt-5.6-terra",
+  "github-copilot/grok-code-fast-1",
+  "github-copilot/kimi-k2.7-code",
+  "github-copilot/mai-code-1-flash-picker",
+  "local/qwen3.6-27b",
+  "local/qwen3.6-35b-a3b",
+]);
+
+export const TIER_RANK = { low: 1, medium: 2, high: 3, max: 4 };
+
+// Mirrors POLICIES in src/model-fallback-policy.ts. 5 agents matching
+// agent-stage-config.ts (team-leader + planner/engineer/publisher/verifier).
+export const DEFAULT_POLICIES = Object.freeze({
+  "makdoong2-team-leader": {
+    primary:   { id: "local/qwen3.6-27b",                    variant: "high",   tier: "medium" },
+    fallbacks: [{ id: "github-copilot/claude-haiku-4.5",                         tier: "low" }],
+  },
+  "makdoong2-analyzer": {
+    primary:   { id: "local/qwen3.6-27b",                    variant: "high",   tier: "medium" },
+    fallbacks: [{ id: "github-copilot/claude-haiku-4.5",                         tier: "low" }],
+  },
+  "makdoong2-planner": {
+    primary:   { id: "local/qwen3.6-27b",                    variant: "high",   tier: "medium" },
+    fallbacks: [{ id: "github-copilot/claude-haiku-4.5",                         tier: "low" }],
+  },
+  "makdoong2-engineer": {
+    primary:   { id: "local/qwen3.6-27b",                    variant: "medium", tier: "medium" },
+    fallbacks: [{ id: "github-copilot/claude-haiku-4.5",                         tier: "low" }],
+  },
+  "makdoong2-publisher": {
+    primary:   { id: "local/qwen3.6-27b",                    variant: "high",   tier: "medium" },
+    fallbacks: [{ id: "github-copilot/claude-haiku-4.5",                         tier: "low" }],
+  },
+  "makdoong2-verifier": {
+    primary:   { id: "local/qwen3.6-27b",                                        tier: "medium" },
+    fallbacks: [{ id: "github-copilot/claude-haiku-4.5",                         tier: "low" }],
+  },
+});
+
+function clonePolicies(src) {
+  const out = {};
+  for (const [k, v] of Object.entries(src)) {
+    out[k] = { primary: { ...v.primary }, fallbacks: v.fallbacks.map(f => ({ ...f })) };
+  }
+  return out;
+}
+
+export function nextModel({ agent, current, reason }, policies) {
+  const pol = (policies ?? DEFAULT_POLICIES)[agent];
+  if (!pol) return { next: null, exhausted: true, chain: [], reasonAccepted: "unknown agent" };
+  const chain = [pol.primary, ...pol.fallbacks];
+  const idx = chain.findIndex(m => m.id === current);
+  const nextIdx = idx < 0 ? 0 : idx + 1;
+  if (nextIdx >= chain.length) {
+    return { next: null, exhausted: true, chain, reasonAccepted: reason ?? "unknown" };
+  }
+  return { next: chain[nextIdx], exhausted: false, chain, reasonAccepted: reason ?? "unknown" };
+}
+
+export function validatePolicies(policies, allowedPrimaries) {
+  const allowed = allowedPrimaries ?? DEFAULT_ALLOWED_PRIMARIES;
+  for (const [agent, pol] of Object.entries(policies)) {
+    if (!allowed.has(pol.primary.id)) {
+      throw new Error(
+        `agent '${agent}' primary '${pol.primary.id}' violates policy ` +
+        `(allowed: ${[...allowed].join(", ")})`
+      );
+    }
+    const primaryRank = TIER_RANK[pol.primary.tier];
+    if (primaryRank === undefined) {
+      throw new Error(`agent '${agent}' primary tier '${pol.primary.tier}' is not a valid tier`);
+    }
+    for (const fb of pol.fallbacks) {
+      const r = TIER_RANK[fb.tier];
+      if (r === undefined) {
+        throw new Error(`agent '${agent}' fallback '${fb.id}' tier '${fb.tier}' is not a valid tier`);
+      }
+      if (r >= primaryRank) {
+        throw new Error(
+          `agent '${agent}' fallback '${fb.id}' (tier=${fb.tier}) is not strictly lower than ` +
+          `primary (tier=${pol.primary.tier})`
+        );
+      }
+    }
+  }
+}
+
+function normalizeFallback(entry) {
+  if (typeof entry === "string") return { id: entry, tier: "low" };
+  if (entry && typeof entry === "object" && typeof entry.id === "string") {
+    return { id: entry.id, tier: entry.tier ?? "low" };
+  }
+  throw new Error(`invalid fallback_models entry: ${JSON.stringify(entry)}`);
+}
+
+/**
+ * Apply agents + model_policy overrides to a fresh copy of DEFAULT_POLICIES.
+ * Returns { policies, allowed } on success.
+ * Throws on validation failure (CALLER must decide whether to surface or roll back).
+ *
+ * This mirrors src/model-fallback-policy.ts:applyConfigOverrides except it
+ * returns a new structure instead of mutating module-level state — CLI tools
+ * need pure functions for "validate-without-applying" semantics.
+ */
+export function buildPoliciesFromConfig({ agents, model_policy } = {}) {
+  const policies = clonePolicies(DEFAULT_POLICIES);
+  const allowed = new Set(DEFAULT_ALLOWED_PRIMARIES);
+
+  if (model_policy && Array.isArray(model_policy.allowed_primaries)) {
+    for (const id of model_policy.allowed_primaries) {
+      if (typeof id === "string" && id.length > 0) allowed.add(id);
+    }
+  }
+
+  if (agents && typeof agents === "object") {
+    for (const [agent, ov] of Object.entries(agents)) {
+      if (!ov || typeof ov !== "object" || !ov.model) continue;
+      const existing = policies[agent];
+      const tier = existing?.primary.tier ?? "medium";
+      const rawFb =
+        ov.fallback_models == null
+          ? (existing?.fallbacks.map(f => ({ id: f.id, tier: f.tier })) ?? [])
+          : Array.isArray(ov.fallback_models)
+            ? ov.fallback_models
+            : [ov.fallback_models];
+      policies[agent] = {
+        primary: { id: ov.model, variant: ov.variant ?? existing?.primary.variant, tier },
+        fallbacks: rawFb.map(normalizeFallback),
+      };
+    }
+  }
+
+  validatePolicies(policies, allowed);
+  return { policies, allowed };
+}

package/scripts/publish-if-changed.sh

@@ -0,0 +1,207 @@
+#!/usr/bin/env bash
+# publish-if-changed.sh - push 시점에 version 변경을 감지해 npm 공개 배포를 트리거
+#
+# 동작:
+#   1. push 대상 커밋들 중 package.json version이 변경되었는지 확인
+#   2. registry에 이미 해당 버전이 있으면 skip (release.sh 경유 push 재실행 대응)
+#   3. 변경되었고 registry에 없으면 승인 게이트 2회 후 npm publish
+#
+# 호출 경로:
+#   - .husky/pre-push 에서 stdin 으로 <local_ref> <local_sha> <remote_ref> <remote_sha> 4개씩 수신
+#   - 직접 실행 시 HEAD~1..HEAD 범위로 검사
+#
+# 옵션:
+#   HOOK_STDIN=1  stdin에서 git push ref 정보 읽기 (husky hook)
+#   AUTO_YES=1    대화형 승인 스킵 (CI 전용)
+#   SKIP_PUBLISH=1 감지 로직만 실행, publish 스킵 (테스트)
+
+set -euo pipefail
+
+RED=$'\033[0;31m'
+GREEN=$'\033[0;32m'
+YELLOW=$'\033[0;33m'
+BLUE=$'\033[0;34m'
+CYAN=$'\033[0;36m'
+BOLD=$'\033[1m'
+RESET=$'\033[0m'
+
+log()    { printf "%s[auto-release]%s %s\n" "$CYAN" "$RESET" "$*"; }
+info()   { printf "%s[info]%s          %s\n" "$BLUE" "$RESET" "$*"; }
+ok()     { printf "%s[ok]%s            %s\n" "$GREEN" "$RESET" "$*"; }
+warn()   { printf "%s[warn]%s          %s\n" "$YELLOW" "$RESET" "$*"; }
+err()    { printf "%s[error]%s         %s\n" "$RED" "$RESET" "$*" >&2; }
+prompt() { printf "%s[confirm]%s       %s" "$BOLD" "$RESET" "$*"; }
+
+AUTO_YES="${AUTO_YES:-0}"
+HOOK_STDIN="${HOOK_STDIN:-0}"
+SKIP_PUBLISH="${SKIP_PUBLISH:-0}"
+
+confirm() {
+  local message="$1"
+  if [ "$AUTO_YES" = "1" ]; then
+    info "[AUTO_YES=1] 자동 승인: $message"
+    return 0
+  fi
+  if [ ! -t 0 ] && [ ! -e /dev/tty ]; then
+    err "TTY 없음 - 대화형 승인 불가. AUTO_YES=1 명시 필요."
+    return 1
+  fi
+  local reply
+  prompt "$message [y/N]: "
+  read -r reply </dev/tty
+  case "$reply" in
+    [yY]|[yY][eE][sS]) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+cd "$PROJECT_ROOT"
+
+# ---------- STEP 1: push 범위 파악 ----------
+# husky pre-push는 stdin으로 4개 필드씩 여러 줄을 전달한다:
+#   <local_ref> <local_sha> <remote_ref> <remote_sha>
+# 새 브랜치의 경우 remote_sha가 0000...0000 (40 zeros)
+push_ranges=()
+if [ "$HOOK_STDIN" = "1" ]; then
+  while IFS=' ' read -r local_ref local_sha remote_ref remote_sha; do
+    [ -z "$local_sha" ] && continue
+    [ "$local_sha" = "0000000000000000000000000000000000000000" ] && continue
+
+    if [ "$remote_sha" = "0000000000000000000000000000000000000000" ]; then
+      # 새 브랜치: 원격에 없는 모든 커밋
+      range="$(git rev-list "$local_sha" --not --remotes | tr '\n' ' ')"
+      [ -n "$range" ] && push_ranges+=("$remote_sha..$local_sha")
+    else
+      push_ranges+=("$remote_sha..$local_sha")
+    fi
+  done
+else
+  push_ranges+=("HEAD~1..HEAD")
+fi
+
+if [ ${#push_ranges[@]} -eq 0 ]; then
+  info "push할 커밋 없음 - 릴리스 건너뜀"
+  exit 0
+fi
+
+# ---------- STEP 2: version 변경 감지 ----------
+version_changed=0
+new_version=""
+old_version=""
+
+for range in "${push_ranges[@]}"; do
+  # range 형식: <old_sha>..<new_sha>
+  from_sha="${range%..*}"
+  to_sha="${range#*..}"
+
+  if ! git diff --name-only "$from_sha" "$to_sha" 2>/dev/null | grep -q '^package.json$'; then
+    continue
+  fi
+
+  # package.json은 dependencies 변경으로도 diff에 잡히므로 version 필드만 별도 파싱하여 비교
+  from_ver="$(git show "$from_sha:package.json" 2>/dev/null | node -e "
+    let d=''; process.stdin.on('data', c=>d+=c).on('end', ()=>{
+      try { console.log(JSON.parse(d).version || ''); } catch(e) { console.log(''); }
+    });
+  " 2>/dev/null || echo "")"
+  to_ver="$(git show "$to_sha:package.json" 2>/dev/null | node -e "
+    let d=''; process.stdin.on('data', c=>d+=c).on('end', ()=>{
+      try { console.log(JSON.parse(d).version || ''); } catch(e) { console.log(''); }
+    });
+  " 2>/dev/null || echo "")"
+
+  if [ -n "$to_ver" ] && [ "$from_ver" != "$to_ver" ]; then
+    version_changed=1
+    new_version="$to_ver"
+    old_version="$from_ver"
+    break
+  fi
+done
+
+if [ "$version_changed" = "0" ]; then
+  info "version 변경 없음 - 릴리스 건너뜀"
+  exit 0
+fi
+
+log "=========================================="
+log "버전 변경 감지: ${old_version:-<없음>} → $new_version"
+log "=========================================="
+
+# ---------- STEP 3: registry에 이미 배포되었는지 확인 ----------
+# release.sh 로 이미 publish 후 push 하는 경우 중복 시도 방지
+PACKAGE_NAME="$(node -p "require('./package.json').name")"
+info "registry 확인 중: $PACKAGE_NAME@$new_version"
+
+if npm view "${PACKAGE_NAME}@${new_version}" version >/dev/null 2>&1; then
+  ok "registry에 이미 $new_version 존재 - 재-publish 건너뜀"
+  info "(release.sh 로 이미 배포 후 push 하는 경우입니다)"
+  exit 0
+fi
+
+info "registry에 $new_version 없음 - 배포 진행 필요"
+
+# ---------- STEP 4: 승인 게이트 #1 (버전 확인) ----------
+log "=========================================="
+log "승인 게이트 #1: 버전 확인"
+log "=========================================="
+
+info "이 push에는 다음 버전 변경이 포함되어 있습니다:"
+info "  ${old_version:-<없음>} → ${BOLD}${new_version}${RESET}"
+
+if ! confirm "${BOLD}${YELLOW}이 버전을 공개 npm registry에 배포하시겠습니까?${RESET}"; then
+  err "사용자가 배포를 거부함 - push 차단"
+  err "이 버전을 배포하지 않으려면:"
+  err "  1) package.json 의 version을 이전 값으로 되돌린 커밋을 추가"
+  err "  2) 또는 git push --no-verify 로 hook 우회 (권장하지 않음)"
+  exit 1
+fi
+
+# ---------- STEP 5: dry-run 검증 ----------
+log "=========================================="
+log "npm publish --dry-run 검증"
+log "=========================================="
+
+if ! npm publish --dry-run 2>&1 | tail -30; then
+  err "Dry-run 실패 - 배포 중단, push 차단"
+  exit 1
+fi
+ok "Dry-run 통과"
+
+# ---------- STEP 6: 승인 게이트 #2 (돌이킬 수 없는 배포) ----------
+log "=========================================="
+log "승인 게이트 #2: npm 공개 배포 확인"
+log "=========================================="
+
+warn "이제 공개 npm registry (registry.npmjs.org) 에 $new_version 을(를) 배포합니다."
+warn "배포 후에는 동일 버전 재-publish 가 registry에 의해 거부됩니다."
+warn "돌이킬 수 없는 작업입니다."
+
+if ! confirm "${BOLD}${RED}정말 공개 npm registry에 $new_version 을(를) 배포하시겠습니까?${RESET}"; then
+  err "사용자가 최종 배포를 거부함 - push 차단"
+  err "다시 시도하려면 git push 를 재실행하세요."
+  exit 1
+fi
+
+# ---------- STEP 7: 실제 publish ----------
+if [ "$SKIP_PUBLISH" = "1" ]; then
+  warn "[SKIP_PUBLISH=1] publish 건너뜀 (테스트 모드)"
+  exit 0
+fi
+
+log "=========================================="
+log "npm publish 실행 → public npm registry"
+log "=========================================="
+
+if ! npm publish; then
+  err "npm publish 실패 - push 차단"
+  err "수동 확인 필요:"
+  err "  - npm 로그인 상태 (npm whoami)"
+  err "  - 동일 버전 중복 배포 여부"
+  err "  - 문제 해결 후 git push 재실행"
+  exit 1
+fi
+
+ok "${BOLD}${GREEN}npm 배포 완료: ${PACKAGE_NAME}@${new_version}${RESET}"
+info "push를 계속 진행합니다..."