viepilot 2.49.0 → 3.7.2

package/lib/intake/setup-wizard.cjs

@@ -0,0 +1,215 @@
+'use strict';
+
+const path = require('path');
+const { appendChannel, initIntakeDir } = require('./channels.cjs');
+const { isSharingLink } = require('./adapters/excel-m365.cjs');
+
+// ─── Helpers ──────────────────────────────────────────────────────────────────
+
+function slugify(name) {
+  return name
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, '-')
+    .replace(/^-+|-+$/g, '');
+}
+
+function extractSpreadsheetId(urlOrId) {
+  const match = urlOrId.match(/\/spreadsheets\/d\/([a-zA-Z0-9_-]+)/);
+  return match ? match[1] : urlOrId.trim();
+}
+
+function printCredentialsGuide(type) {
+  if (type === 'google_sheets') {
+    return [
+      '',
+      '  Google Sheets — Service Account setup:',
+      '  1. Go to console.cloud.google.com → IAM & Admin → Service Accounts → Create',
+      '  2. Create a key (JSON) → download it',
+      '  3. Share your Google Sheet with the service account email',
+      '  4. Save the JSON key to: .viepilot/.credentials/google-service-account.json',
+      '',
+    ].join('\n');
+  }
+  if (type === 'excel_m365') {
+    return [
+      '',
+      '  Excel M365 — Azure App Registration:',
+      '  1. Go to portal.azure.com → Azure Active Directory → App Registrations → New',
+      '  2. Add API permission: Microsoft Graph → Files.Read.All (Application)',
+      '  3. Grant admin consent → Certificates & Secrets → New client secret',
+      '  4. Save to: .viepilot/.credentials/m365-credentials.json',
+      '     { "tenant_id": "...", "client_id": "...", "client_secret": "..." }',
+      '',
+    ].join('\n');
+  }
+  return '';
+}
+
+// ─── Per-type config collectors ───────────────────────────────────────────────
+
+async function collectCsvConfig(name, id, askFn) {
+  const filePath = await askFn('Đường dẫn file CSV/TSV? (relative to project root, vd: ./reports/tickets.csv)', null, false);
+  const titleCol = await askFn('Header tên cột TITLE là gì? (vd: summary)', null, false);
+  const descCol  = await askFn('Header tên cột DESCRIPTION là gì? (vd: details)', null, false);
+  const repCol   = await askFn('Header tên cột REPORTER? (để trống nếu không có)', null, false);
+  const dateCol  = await askFn('Header tên cột DATE? (để trống nếu không có)', null, false);
+
+  const column_map = { title: titleCol, description: descCol };
+  if (repCol)  column_map.reporter = repCol;
+  if (dateCol) column_map.date = dateCol;
+
+  return { id, type: 'csv', name, path: filePath, column_map };
+}
+
+async function collectGSheetsConfig(name, id, askFn) {
+  const rawId     = await askFn('Spreadsheet ID hoặc URL Google Sheets?', null, false);
+  const spreadId  = extractSpreadsheetId(rawId);
+  const sheetName = await askFn('Sheet name? (mặc định: Sheet1 — để trống dùng Sheet1)', null, false) || 'Sheet1';
+  const titleCol  = await askFn('Cột TITLE ở cột letter nào? (vd: B)', null, false);
+  const descCol   = await askFn('Cột DESCRIPTION? (vd: C)', null, false);
+  const repCol    = await askFn('Cột REPORTER? (optional, để trống nếu không có)', null, false);
+  const dateCol   = await askFn('Cột DATE? (optional)', null, false);
+
+  const column_map = { title: titleCol.toUpperCase(), description: descCol.toUpperCase() };
+  if (repCol)  column_map.reporter = repCol.toUpperCase();
+  if (dateCol) column_map.date = dateCol.toUpperCase();
+
+  return { id, type: 'google_sheets', name, spreadsheet_id: spreadId, sheet_name: sheetName, column_map };
+}
+
+async function collectM365Config(name, id, askFn) {
+  const workbookId = await askFn('Workbook ID? (từ SharePoint URL, dạng item ID)', null, false);
+  const sheetName  = await askFn('Sheet name? (mặc định: Sheet1)', null, false) || 'Sheet1';
+  const titleCol   = await askFn('Cột TITLE? (letter, vd: B)', null, false);
+  const descCol    = await askFn('Cột DESCRIPTION? (vd: C)', null, false);
+  const repCol     = await askFn('Cột REPORTER? (optional)', null, false);
+  const dateCol    = await askFn('Cột DATE? (optional)', null, false);
+
+  const column_map = { title: titleCol.toUpperCase(), description: descCol.toUpperCase() };
+  if (repCol)  column_map.reporter = repCol.toUpperCase();
+  if (dateCol) column_map.date = dateCol.toUpperCase();
+
+  return { id, type: 'excel_m365', name, workbook_id: workbookId, sheet_name: sheetName, column_map };
+}
+
+async function collectSharePointConfig(name, id, askFn) {
+  let sharingUrl = '';
+  while (!isSharingLink(sharingUrl)) {
+    sharingUrl = await askFn(
+      'SharePoint sharing URL? (dạng https://xxx.sharepoint.com/:x:/g/... hoặc /:x:/r/...)',
+      null,
+      false
+    );
+    if (!isSharingLink(sharingUrl)) {
+      process.stdout.write('  ⚠  URL không đúng định dạng sharing link. Vui lòng dán đúng URL chia sẻ.\n');
+    }
+  }
+
+  const sheetName = await askFn('Sheet name? (để trống = dùng sheet đầu tiên)', null, false) || '';
+  const titleCol  = await askFn('Cột TITLE? (letter, vd: B)', null, false);
+  const descCol   = await askFn('Cột DESCRIPTION? (vd: C)', null, false);
+  const repCol    = await askFn('Cột REPORTER? (optional)', null, false);
+  const dateCol   = await askFn('Cột DATE? (optional)', null, false);
+
+  const column_map = { title: titleCol.toUpperCase(), description: descCol.toUpperCase() };
+  if (repCol)  column_map.reporter = repCol.toUpperCase();
+  if (dateCol) column_map.date = dateCol.toUpperCase();
+
+  const ch = { id, type: 'excel_m365', name, sharing_url: sharingUrl, column_map };
+  if (sheetName) ch.sheet_name = sheetName;
+  return ch;
+}
+
+// ─── Single channel wizard ────────────────────────────────────────────────────
+
+const CHANNEL_TYPE_OPTIONS = [
+  { label: 'CSV / TSV file (local)',                 description: 'Đọc từ file .csv hoặc .tsv trên máy' },
+  { label: 'Google Sheets',                          description: 'Đọc từ Google Sheets qua Service Account' },
+  { label: 'Excel M365 — Graph API (Azure App)',     description: 'Đọc từ OneDrive/SharePoint qua Microsoft Graph API' },
+  { label: 'SharePoint Sharing Link (no credentials)', description: 'Dán link chia sẻ SharePoint — không cần cấu hình OAuth' },
+];
+
+async function wizardOneChannel(projectRoot, askFn) {
+  // Step 1 — loại channel
+  const typeChoice = await askFn(
+    'Bạn muốn cấu hình loại nguồn ticket nào?',
+    CHANNEL_TYPE_OPTIONS,
+    false
+  );
+
+  // Step 2 — display name → id
+  const name = await askFn('Tên hiển thị cho channel này? (vd: UAT Tickets Q2)', null, false);
+  const id   = slugify(name) || `channel-${Date.now()}`;
+
+  // Step 3 — collect per-type fields
+  let channelObj;
+  if (typeChoice === 'CSV / TSV file (local)') {
+    channelObj = await collectCsvConfig(name, id, askFn);
+  } else if (typeChoice === 'Google Sheets') {
+    process.stdout.write(printCredentialsGuide('google_sheets'));
+    channelObj = await collectGSheetsConfig(name, id, askFn);
+  } else if (typeChoice === 'Excel M365 — Graph API (Azure App)') {
+    process.stdout.write(printCredentialsGuide('excel_m365'));
+    channelObj = await collectM365Config(name, id, askFn);
+  } else {
+    // SharePoint Sharing Link
+    channelObj = await collectSharePointConfig(name, id, askFn);
+  }
+
+  // Step 4 — preview + confirm
+  process.stdout.write('\n  Preview cấu hình:\n');
+  process.stdout.write(JSON.stringify(channelObj, null, 2).split('\n').map(l => '  ' + l).join('\n'));
+  process.stdout.write('\n');
+
+  const confirm = await askFn('Lưu cấu hình này?', [
+    { label: 'Lưu',         description: 'Ghi channel vào channels.json' },
+    { label: 'Cấu hình lại', description: 'Nhập lại thông tin channel này' },
+    { label: 'Huỷ',          description: 'Bỏ qua channel này' },
+  ], false);
+
+  if (confirm === 'Cấu hình lại') {
+    return wizardOneChannel(projectRoot, askFn);
+  }
+  if (confirm === 'Huỷ') {
+    return null;
+  }
+
+  // Step 5 — write
+  appendChannel(projectRoot, channelObj);
+  process.stdout.write(`\n  ✓ Channel "${name}" đã được lưu vào .viepilot/intake/channels.json\n\n`);
+  return channelObj;
+}
+
+// ─── Public entry point ───────────────────────────────────────────────────────
+
+/**
+ * Run the interactive setup wizard.
+ * @param {string} projectRoot
+ * @param {Function} askFn  async (question, options, multiSelect) → string
+ * @returns {object|null}  last channel created, or null if none
+ */
+async function runSetupWizard(projectRoot, askFn) {
+  initIntakeDir(projectRoot);
+  process.stdout.write('\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n');
+  process.stdout.write(' VP-INTAKE ► Setup Wizard\n');
+  process.stdout.write('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n');
+
+  let lastCreated = null;
+
+  // eslint-disable-next-line no-constant-condition
+  while (true) {
+    const ch = await wizardOneChannel(projectRoot, askFn);
+    if (ch) lastCreated = ch;
+
+    const more = await askFn('Cấu hình thêm channel khác?', [
+      { label: 'Không — tiếp tục import', description: 'Chuyển sang chọn channel và import ticket' },
+      { label: 'Có — thêm channel',       description: 'Cấu hình thêm một nguồn ticket nữa' },
+    ], false);
+
+    if (more !== 'Có — thêm channel') break;
+  }
+
+  return lastCreated;
+}
+
+module.exports = { runSetupWizard, slugify, extractSpreadsheetId };

package/lib/intake/triage-ux.cjs

@@ -58,6 +58,14 @@ function truncate(str, max) {
   return str.length > max ? str.slice(0, max - 1) + '…' : str;
 }
 
+function getValidationBadge(ticket) {
+  if (!ticket._validation) return '';
+  const { status, file, similar_request } = ticket._validation;
+  if (status === 'found')   return ` ✅ ${truncate(file || 'codebase match', 35)}`;
+  if (status === 'similar') return ` ⚠️ similar: ${similar_request || 'existing request'}`;
+  return ' ❓ no codebase match';
+}
+
 async function runTriage(tickets, channel, projectRoot, askUserQuestionFn) {
   const accepted = [];
   const declined = [];
@@ -82,7 +90,7 @@ async function runTriage(tickets, channel, projectRoot, askUserQuestionFn) {
         : `${labelPrefix}: select tickets to ACCEPT`;
 
       const options = page.map((t) => ({
-        label: `[${t._classified}] #${t.id || t._source_row} — ${truncate(t.title, 55)}`,
+        label: `[${t._classified}] #${t.id || t._source_row} — ${truncate(t.title, 45)}${getValidationBadge(t)}`,
         description: truncate(t.description, 100),
       }));
 
@@ -90,7 +98,7 @@ async function runTriage(tickets, channel, projectRoot, askUserQuestionFn) {
       const selectedLabels = Array.isArray(answer) ? answer : (answer ? [answer] : []);
 
       for (const t of page) {
-        const label = `[${t._classified}] #${t.id || t._source_row} — ${truncate(t.title, 55)}`;
+        const label = `[${t._classified}] #${t.id || t._source_row} — ${truncate(t.title, 45)}${getValidationBadge(t)}`;
         if (selectedLabels.includes(label)) {
           accepted.push(t);
         } else {

package/lib/intake/validator.cjs

@@ -0,0 +1,97 @@
+'use strict';
+
+const fs            = require('fs');
+const path          = require('path');
+const { execSync }  = require('child_process');
+
+const BATCH_SIZE = 10;
+
+// ─── Keyword extraction ───────────────────────────────────────────────────────
+
+function extractKeywords(ticket) {
+  const title = ticket.title || '';
+  // Extract capitalized words (≥4 chars) — likely proper nouns / component names
+  const capitalized = title.match(/\b[A-Z][a-zA-Z]{3,}\b/g) || [];
+  // Also extract lower-case content words ≥5 chars (skip stop words)
+  const STOP = new Set(['with', 'from', 'that', 'this', 'have', 'will', 'when', 'then', 'into', 'about']);
+  const content = (title.match(/\b[a-z]{5,}\b/g) || []).filter((w) => !STOP.has(w));
+  const combined = [...new Set([...capitalized, ...content])];
+  return combined.slice(0, 3);
+}
+
+// ─── Single-ticket validation ─────────────────────────────────────────────────
+
+async function validateTicket(ticket, projectRoot) {
+  const keywords = extractKeywords(ticket);
+  if (keywords.length === 0) return { status: 'unknown' };
+
+  let fileMatch = null;
+  let similarRequest = null;
+
+  // ── Codebase match: non-CC inline grep ──────────────────────────────────────
+  // (Claude Code path: caller may swap this out with file-scanner-agent)
+  const srcDirs = ['src', 'lib', 'app', 'components', 'pages'].filter(
+    (d) => fs.existsSync(path.join(projectRoot, d)),
+  );
+  const searchRoot = srcDirs.length > 0 ? path.join(projectRoot, srcDirs[0]) : projectRoot;
+
+  for (const kw of keywords) {
+    try {
+      const result = execSync(
+        `grep -r -l --include="*.ts" --include="*.tsx" --include="*.js" --include="*.cjs" -i "${kw}" "${searchRoot}" 2>/dev/null`,
+        { encoding: 'utf8', timeout: 5000 },
+      ).trim();
+      if (result) {
+        const firstFile = result.split('\n')[0];
+        const rel = path.relative(projectRoot, firstFile);
+        fileMatch = rel;
+        break;
+      }
+    } catch {
+      // grep returns exit 1 when no match — ignore
+    }
+  }
+
+  // ── Duplicate detection: scan existing requests ───────────────────────────
+  const reqDir = path.join(projectRoot, '.viepilot', 'requests');
+  if (fs.existsSync(reqDir)) {
+    const files = fs.readdirSync(reqDir).filter((f) => f.endsWith('.md'));
+    for (const f of files) {
+      const content = fs.readFileSync(path.join(reqDir, f), 'utf8').toLowerCase();
+      const matchCount = keywords.filter((kw) => content.includes(kw.toLowerCase())).length;
+      if (matchCount >= 2) {
+        similarRequest = f.replace('.md', '');
+        break;
+      }
+    }
+  }
+
+  if (similarRequest) return { status: 'similar', similar_request: similarRequest };
+  if (fileMatch)      return { status: 'found',   file: fileMatch };
+  return { status: 'unknown' };
+}
+
+// ─── Fan-out validation ───────────────────────────────────────────────────────
+
+async function validateTickets(tickets, projectRoot, options = {}) {
+  if (options.skipValidation) return tickets;
+
+  const batches = [];
+  for (let i = 0; i < tickets.length; i += BATCH_SIZE) {
+    batches.push(tickets.slice(i, i + BATCH_SIZE));
+  }
+
+  for (const batch of batches) {
+    const results = await Promise.all(batch.map((t) => {
+      // Claude Code path: if Agent tool available, caller may override validateTicket
+      // to use subagent_type: "file-scanner-agent" for richer results.
+      // Non-CC: runs inline grep + duplicate check above.
+      return validateTicket(t, projectRoot).catch(() => ({ status: 'unknown' }));
+    }));
+    batch.forEach((t, i) => { t._validation = results[i]; });
+  }
+
+  return tickets;
+}
+
+module.exports = { validateTickets, extractKeywords, validateTicket };

package/lib/intake/writeback.cjs

@@ -104,7 +104,7 @@ async function writebackCsv(channel, triageResult, projectRoot) {
 function httpsRequest(method, url, body, headers) {
   return new Promise((resolve, reject) => {
     const urlObj = new URL(url);
-    const payload = body ? JSON.stringify(body) : '';
+    const payload = body ? (typeof body === 'string' ? body : JSON.stringify(body)) : '';
     const req = https.request({
       hostname: urlObj.hostname,
       path: urlObj.pathname + urlObj.search,
@@ -201,6 +201,94 @@ async function writebackGoogleSheets(channel, triageResult, projectRoot) {
   }
 }
 
+// ---------------------------------------------------------------------------
+// Excel M365 write-back (Graph API PATCH)
+// ---------------------------------------------------------------------------
+
+async function writebackExcelM365(channel, triageResult, projectRoot) {
+  if (channel.sharing_url) {
+    return {
+      success: false,
+      error: `Channel "${channel.id || channel.name}" uses a sharing_url — write-back is read-only for sharing links.\n` +
+             `To enable write-back: configure workbook_id + .viepilot/.credentials/m365-credentials.json`,
+    };
+  }
+
+  const root = projectRoot || process.cwd();
+  const credPath = path.join(root, '.viepilot', '.credentials', 'm365-credentials.json');
+  if (!fs.existsSync(credPath)) {
+    return {
+      success: false,
+      error: `m365-credentials.json not found at ${credPath}.\n` +
+             `Create it with: { "tenant_id": "...", "client_id": "...", "client_secret": "..." }`,
+    };
+  }
+
+  let creds;
+  try {
+    creds = JSON.parse(fs.readFileSync(credPath, 'utf8'));
+  } catch (e) {
+    return { success: false, error: `Failed to parse m365-credentials.json: ${e.message}` };
+  }
+
+  try {
+    const tokenUrl = `https://login.microsoftonline.com/${creds.tenant_id}/oauth2/v2.0/token`;
+    const tokenBody = [
+      `grant_type=client_credentials`,
+      `client_id=${encodeURIComponent(creds.client_id)}`,
+      `client_secret=${encodeURIComponent(creds.client_secret)}`,
+      `scope=https%3A%2F%2Fgraph.microsoft.com%2F.default`,
+    ].join('&');
+
+    const tokenRes = await httpsRequest('POST', tokenUrl, tokenBody, {
+      'Content-Type': 'application/x-www-form-urlencoded',
+      'Content-Length': Buffer.byteLength(tokenBody),
+    });
+
+    if (!tokenRes.access_token) {
+      return { success: false, error: `M365 authentication failed: ${JSON.stringify(tokenRes)}` };
+    }
+
+    const token = tokenRes.access_token;
+    const workbookId = channel.workbook_id;
+    const sheetName = encodeURIComponent(channel.sheet_name || 'Sheet1');
+    const colMap = channel.column_map || {};
+    const lastColIdx = Object.values(colMap).length > 0
+      ? Math.max(...Object.values(colMap).map(colLetterToIndex))
+      : 5;
+    const vpStatusCol  = indexToColLetter(lastColIdx + 1);
+    const vpCommentCol = indexToColLetter(lastColIdx + 2);
+    const vpReqCol     = indexToColLetter(lastColIdx + 3);
+
+    const decisions = buildTicketDecisions(triageResult);
+    const allTickets = [
+      ...triageResult.accepted.map((a) => a.ticket),
+      ...triageResult.declined.map((d) => d.ticket),
+      ...(triageResult.unclear || []).map((u) => u.ticket),
+    ];
+
+    let updatedCount = 0;
+    for (const ticket of allTickets) {
+      const d = decisions[ticket._source_row];
+      if (!d) continue;
+      const rowNum = ticket._source_row + 1;
+      const rangeAddress = `${vpStatusCol}${rowNum}:${vpReqCol}${rowNum}`;
+      const url = `https://graph.microsoft.com/v1.0/me/drive/items/${workbookId}/workbook/worksheets/${sheetName}/range(address='${rangeAddress}')`;
+      const res = await httpsRequest('PATCH', url, { values: [[d.vp_status, d.vp_comment, d.vp_request_id]] }, {
+        Authorization: `Bearer ${token}`,
+      });
+      if (res.error) {
+        return { success: false, error: `Graph API PATCH error: ${res.error.message || JSON.stringify(res.error)}` };
+      }
+      updatedCount++;
+    }
+
+    return { success: true, updated: updatedCount };
+  } catch (e) {
+    return { success: false, error: e.message };
+  }
+}
+
 // ---------------------------------------------------------------------------
 // Main writeback dispatcher
 // ---------------------------------------------------------------------------
@@ -214,7 +302,7 @@ async function writeback(channel, triageResult, projectRoot) {
   } else if (channel.type === 'google_sheets') {
     result = await writebackGoogleSheets(channel, triageResult, root);
   } else if (channel.type === 'excel_m365') {
-    result = { success: false, error: 'Excel/M365 write-back requires Graph API — see task 123.4' };
+    result = await writebackExcelM365(channel, triageResult, root);
   } else {
     result = { success: false, error: `Unknown channel type: ${channel.type}` };
   }
@@ -225,4 +313,82 @@ async function writeback(channel, triageResult, projectRoot) {
   return result;
 }
 
-module.exports = { writeback };
+// ---------------------------------------------------------------------------
+// Post-task intake write-back (ENH-095)
+// ---------------------------------------------------------------------------
+
+/**
+ * Write task completion status back to the original source row.
+ * Called by vp-auto post-PASS hook when a task has an ## Intake Source block.
+ *
+ * @param {object} channel   - Original intake channel config (type, sharing_url or workbook_id)
+ * @param {number} sourceRow - 0-based row index (ticket._source_row)
+ * @param {object} response  - { status, phaseTask, version, date }
+ * @param {string} projectRoot
+ * @param {string} [sheetName]    - Sheet name from manifest
+ * @param {string} [responseCol]  - Column letter from manifest write_back.response_col
+ * @returns {Promise<{success: boolean, cell?: string, text?: string, error?: string}>}
+ */
+async function writebackIntakeResponse(channel, sourceRow, response, projectRoot, sheetName, responseCol) {
+  const text = [
+    response.status   || 'Done',
+    response.phaseTask || '',
+    response.version  || '',
+    response.date     || new Date().toISOString().slice(0, 10),
+  ].filter(Boolean).join(' | ');
+
+  if (!channel || !channel.type) {
+    process.stderr.write(`[vp-intake] Write-back skipped: no channel info\n`);
+    return { success: false, error: 'no channel info' };
+  }
+
+  if (channel.type === 'excel_m365' && channel.sharing_url) {
+    process.stderr.write(`[vp-intake] Write-back skipped for sharing_url channel (read-only). Text: ${text}\n`);
+    return { success: false, error: 'sharing_url is read-only — use workbook_id for write-back' };
+  }
+
+  if (channel.type === 'excel_m365' && channel.workbook_id) {
+    const root     = projectRoot || process.cwd();
+    const credPath = path.join(root, '.viepilot', '.credentials', 'm365-credentials.json');
+    if (!fs.existsSync(credPath)) {
+      process.stderr.write(`[vp-intake] Write-back skipped: m365-credentials.json not found\n`);
+      return { success: false, error: 'm365-credentials.json not found' };
+    }
+    try {
+      const creds     = JSON.parse(fs.readFileSync(credPath, 'utf8'));
+      const tokenUrl  = `https://login.microsoftonline.com/${creds.tenant_id}/oauth2/v2.0/token`;
+      const tokenBody = [
+        'grant_type=client_credentials',
+        `client_id=${encodeURIComponent(creds.client_id)}`,
+        `client_secret=${encodeURIComponent(creds.client_secret)}`,
+        'scope=https%3A%2F%2Fgraph.microsoft.com%2F.default',
+      ].join('&');
+      const tokenRes = await httpsRequest('POST', tokenUrl, tokenBody, {
+        'Content-Type': 'application/x-www-form-urlencoded',
+        'Content-Length': Buffer.byteLength(tokenBody),
+      });
+      if (!tokenRes.access_token) {
+        return { success: false, error: `M365 auth failed: ${JSON.stringify(tokenRes)}` };
+      }
+      const col      = responseCol || 'G';
+      const sheet    = encodeURIComponent(sheetName || channel.sheet_name || 'Sheet1');
+      const cell     = `${col}${sourceRow + 2}`;
+      const url      = `https://graph.microsoft.com/v1.0/me/drive/items/${channel.workbook_id}/workbook/worksheets/${sheet}/range(address='${cell}')`;
+      const res      = await httpsRequest('PATCH', url, { values: [[text]] }, {
+        Authorization: `Bearer ${tokenRes.access_token}`,
+      });
+      if (res.error) {
+        return { success: false, error: `Graph API error: ${res.error.message || JSON.stringify(res.error)}` };
+      }
+      return { success: true, cell, text };
+    } catch (e) {
+      return { success: false, error: e.message };
+    }
+  }
+
+  // Google Sheets, CSV, browser, unknown: skip silently
+  process.stderr.write(`[vp-intake] Write-back skipped for channel type "${channel.type}" (not writable or not yet implemented)\n`);
+  return { success: false, error: `channel type "${channel.type}" does not support post-task write-back` };
+}
+
+module.exports = { writeback, writebackIntakeResponse };

package/lib/request/url-enricher.cjs

@@ -0,0 +1,69 @@
+'use strict';
+
+const URL_ROUTES = {
+  github:  /github\.com\/[^/]+\/[^/]+\/issues\/\d+/,
+  linear:  /linear\.app\/[^/]+\/issue\/[A-Z]+-\d+/,
+  jira:    /atlassian\.net\/browse\/[A-Z]+-\d+/,
+  trello:  /trello\.com\/c\/[a-zA-Z0-9]+/,
+  notion:  /notion\.so\/[a-f0-9-]{8,}/,
+};
+
+/**
+ * Detect whether input string contains a known issue-tracker URL.
+ * @param {string} input - raw user input (may contain URL anywhere)
+ * @returns {{ matched: boolean, source?: string, url?: string }}
+ */
+function detectIssueUrl(input) {
+  if (!input || typeof input !== 'string') return { matched: false };
+  // Extract first https?:// URL from input
+  const urlMatch = input.match(/https?:\/\/[^\s]+/);
+  if (!urlMatch) return { matched: false };
+  const url = urlMatch[0].replace(/[.,!?)]+$/, ''); // strip trailing punctuation
+  for (const [source, pattern] of Object.entries(URL_ROUTES)) {
+    if (pattern.test(url)) return { matched: true, source, url };
+  }
+  return { matched: false };
+}
+
+/**
+ * Enrich a request with details extracted from an issue URL via browser-intake-agent.
+ * Returns null (never throws) when extraction fails or agent is unavailable.
+ * CC adapter only — dispatched by vp-request SKILL.md / workflows/request.md.
+ * @param {string} url
+ * @param {string} source - detected source type
+ * @param {string} projectRoot
+ * @returns {Promise<{title,type,description,priority,labels}|null>}
+ */
+async function enrichFromUrl(url, source, projectRoot) {
+  try {
+    // CC adapter: Agent dispatch is handled by request.md (orchestrator layer).
+    // Direct callers (non-CC) receive null — enrichment silently skipped.
+    return null;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Format pre-fill display for user confirmation.
+ * @param {object} enriched - { title, type, description, priority, labels }
+ * @param {string} url
+ * @returns {string} formatted display string
+ */
+function formatPreFillDisplay(enriched, url) {
+  if (!enriched) return '';
+  const lines = [
+    `Context extracted from: ${url}`,
+    ``,
+    `  Title:       ${enriched.title || '(not detected)'}`,
+    `  Type:        ${enriched.type || '(not detected)'}`,
+    `  Description: ${String(enriched.description || '').slice(0, 120)}${(enriched.description || '').length > 120 ? '...' : ''}`,
+    `  Priority:    ${enriched.priority || '(not detected)'}`,
+  ];
+  if (enriched.labels && enriched.labels.length > 0) {
+    lines.push(`  Labels:      ${enriched.labels.join(', ')}`);
+  }
+  return lines.join('\n');
+}
+
+module.exports = { detectIssueUrl, enrichFromUrl, formatPreFillDisplay, URL_ROUTES };

package/lib/viepilot-install.cjs

@@ -203,6 +203,21 @@ function buildInstallPlan(packageRoot, envSource = process.env, opts = {}) {
         steps.push(ent.isDirectory() ? { kind: 'copy_dir', from: src, to: dest } : { kind: 'copy_file', from: src, to: dest });
       }
     }
+    // BUG-027: copy adapter-native agent definitions to adapter's native agents dir
+    // e.g. agents/claude-code/ → ~/.claude/agents/ (not ~/.claude/viepilot/agents/claude-code/)
+    if (adapter.claudeAgentsSrc && adapter.claudeAgentsDir) {
+      const agentsSrcDir = path.join(root, adapter.claudeAgentsSrc);
+      const agentsDestDir = adapter.claudeAgentsDir(home);
+      if (fs.existsSync(agentsSrcDir)) {
+        steps.push({ kind: 'mkdir', path: agentsDestDir });
+        for (const ent of fs.readdirSync(agentsSrcDir, { withFileTypes: true })) {
+          const src = path.join(agentsSrcDir, ent.name);
+          const dest = path.join(agentsDestDir, ent.name);
+          steps.push(ent.isDirectory() ? { kind: 'copy_dir', from: src, to: dest } : { kind: 'copy_file', from: src, to: dest });
+        }
+      }
+    }
+
     // BUG-007: copy package.json so resolveViepilotPackageRoot() finds the root
     steps.push({ kind: 'copy_file', from: path.join(root, 'package.json'), to: path.join(vpDir, 'package.json') });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "viepilot",
-  "version": "2.49.0",
+  "version": "3.7.2",
   "description": "**Autonomous Vibe Coding Framework / Bộ khung phát triển tự động có kiểm soát**",
   "main": "index.js",
   "bin": {