Commit graph

1355 commits

Author SHA1 Message Date
XiaoSeS
c33cd75e7a Merge remote-tracking branch 'origin/main' into feature/skill-suites-signed-final
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-09 13:55:06 +08:00
XiaoSeS
8c0b853023 fix(suite): close rollout and concurrency gaps
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-09 13:54:59 +08:00
XiaoSeS
2e0cd691aa fix(suite): align super admin member selection
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-09 13:54:59 +08:00
XiaoSeS
a4b35b236a fix(suite): bind exact members and protect local installs
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-09 13:54:59 +08:00
XiaoSeS
d0e8c168fa feat(suite): require and expose entry skill
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-09 13:54:59 +08:00
XiaoSeS
1e5fe097fe
fix(cli): serialize concurrent stale lock recovery (#839)
* test(cli): reproduce concurrent stale lock ownership

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* test(cli): wait for every stale lock contender

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* fix(cli): serialize stale target lock recovery

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* fix(cli): recover abandoned acquisition gates

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* test(cli): cover acquisition gate crash recovery

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* test(cli): keep live acquisition tickets

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* fix(cli): use crash-recoverable acquisition queue

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* perf(cli): minimize acquisition queue scans

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* fix(cli): stabilize acquisition queue election

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* test(cli): verify stalled contenders retain ownership

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* fix(cli): wait for acquisition queue turn

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* test(cli): recover stale target after gate owner exit

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* test(cli): assert stale target cleanup after recovery

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

---------

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-09 13:43:33 +08:00
XiaoSeS
a838078cd9 fix(web): separate skill and suite discovery
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-09 09:12:44 +08:00
XiaoSeS
717165bd69
fix(cli): preserve shared SkillHub state fields (#835)
Some checks are pending
Deploy Docs / build (push) Waiting to run
Deploy Docs / Deploy (push) Blocked by required conditions
Security / Dependency Review (push) Waiting to run
Security / CodeQL (java-kotlin) (push) Waiting to run
Security / CodeQL (javascript-typescript) (push) Waiting to run
Security / CodeQL (python) (push) Waiting to run
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 19:41:49 +08:00
XiaoSeS
859987e3bb feat(suite): add first-class skill suites
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 19:30:57 +08:00
XiaoSeS
25e18e047c
Merge pull request #829 from iflytek/codex/feat/issue-819-hidden-skill-restore-20260908
fix(governance): restore hidden skill management
2026-09-08 14:35:22 +08:00
XiaoSeS
c9dca27cc2
Merge pull request #830 from iflytek/codex/fix/issue-827-secret-expression-regression-20260908
fix(validation): ignore credential expressions
2026-09-08 14:33:44 +08:00
XiaoSeS
a6aa073627 fix(validation): preserve wrapper expression boundaries
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 12:25:29 +08:00
XiaoSeS
52969c997c fix(validation): classify bare secrets by file context
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 12:17:03 +08:00
XiaoSeS
8f9db2ada7 fix(validation): scan all sensitive assignments
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 12:03:56 +08:00
XiaoSeS
9d0431f7d3 fix(validation): preserve credential literal boundaries
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 11:45:48 +08:00
XiaoSeS
7c62aa218a fix(validation): avoid regex stack overflow
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 11:34:51 +08:00
XiaoSeS
702a1cc34f perf(governance): batch hidden skill summaries
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 11:32:20 +08:00
XiaoSeS
4efd6c6366 refactor(governance): page hidden skill queries
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 11:27:36 +08:00
XiaoSeS
927780db46 fix(governance): exclude hidden skills from owner list
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 11:19:06 +08:00
XiaoSeS
824a992afc fix(validation): ignore credential expressions
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 11:17:22 +08:00
XiaoSeS
5c5634dd22 fix(governance): restore hidden skill management
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 11:15:04 +08:00
XiaoSeS
19cc56be9e
Merge pull request #826 from iflytek/feature/skill-suites-spec
docs(spec): define skill suite lifecycle and compatibility
2026-09-07 17:06:53 +08:00
XiaoSeS
accd0e1f67 docs(spec): define skill suite lifecycle and compatibility
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-07 16:52:26 +08:00
XiaoSeS
53df1041f5
Merge pull request #818 from iflytek/docs/weekly-w36-official
Some checks failed
Security / Dependency Review (push) Has been cancelled
Deploy Docs / build (push) Has been cancelled
Security / CodeQL (java-kotlin) (push) Has been cancelled
Security / CodeQL (javascript-typescript) (push) Has been cancelled
Security / CodeQL (python) (push) Has been cancelled
Deploy Docs / Deploy (push) Has been cancelled
docs(weekly): publish 2026 W36 report
2026-09-04 22:32:00 +08:00
XiaoSeS
5960a6c3bf docs(weekly): publish 2026 W36 report
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 22:28:12 +08:00
dongmucat
64e1fecbe7
Merge pull request #816 from iflytek/release/cli-v0.1.11
chore(cli): release 0.1.11
2026-09-04 18:06:20 +08:00
dongmucat
bb8abbb46e chore(cli): bump version to 0.1.11
Signed-off-by: dongmucat <1127093059@qq.com>
2026-09-04 18:04:19 +08:00
XiaoSeS
5258b24462
Merge pull request #815 from iflytek/fix/cli-explicit-sync-submit-semantics
fix(cli): align publish and namespace sync semantics
2026-09-04 17:44:12 +08:00
XiaoSeS
ed925aca99 docs(cli): show repeatable sync skill syntax
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 16:42:58 +08:00
XiaoSeS
3421ee7923 docs(cli): clarify sync pull selection option
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 16:42:58 +08:00
XiaoSeS
a5a723d8f7 fix(cli): align publish and namespace sync semantics
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 16:42:58 +08:00
XiaoSeS
b9972af39f
Merge pull request #814 from iflytek/codex/issue-728-plugin-scanner-20260904
feat(builtin-skills): add HOL Guard plugin scanner
2026-09-04 16:32:29 +08:00
XiaoSeS
d73d4590ff
Merge pull request #813 from iflytek/fix/dependabot-security-alerts
chore(deps): patch open Dependabot alerts
2026-09-04 16:32:14 +08:00
XiaoSeS
3364869b6f
Merge pull request #812 from FenjuFu/fix/issue-810-spa-cache
fix(web): revalidate SPA entry point after upgrades
2026-09-04 16:31:53 +08:00
XiaoSeS
1ea1c0867f test(builtin-skills): avoid manifest size coupling
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:56:00 +08:00
XiaoSeS
9761205e77 feat(builtin-skills): publish plugin scanner artifact
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:51:31 +08:00
XiaoSeS
bcef4fc5f0 test(builtin-skills): constrain runtime inventory
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:27:04 +08:00
XiaoSeS
7d9ea67169 test(builtin-skills): derive collection size from catalog
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:25:02 +08:00
XiaoSeS
d6345924d8 fix(builtin-skills): isolate scanner policy
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:23:07 +08:00
XiaoSeS
4f79bea9c2 fix(builtin-skills): preserve upstream license text
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:14:05 +08:00
XiaoSeS
6f4f294326 feat(builtin-skills): add plugin scanner
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:11:47 +08:00
dongmucat
dc043a208c chore(deps): patch open Dependabot alerts
Signed-off-by: dongmucat <1127093059@qq.com>
2026-09-04 14:53:43 +08:00
XiaoSeS
63b220420d
Merge pull request #788 from FenjuFu/feat/install-for-agent
feat(skill): add install-for-agent prompt
2026-09-04 14:49:19 +08:00
XiaoSeS
a41ce7656c fix(skill): simplify agent install prompt
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 14:29:29 +08:00
XiaoSeS
42a0e423f4 fix(skill): version exact-install guidance update
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 14:01:55 +08:00
XiaoSeS
1f2fe961c5 test(skill): cover exact-source install guidance
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 13:54:15 +08:00
XiaoSeS
857797f0cc fix(skill): keep exact installs on selected registry
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 13:49:57 +08:00
XiaoSeS
5fea369d60 fix(web): preserve registry in agent onboarding
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 12:56:56 +08:00
XiaoSeS
400240b5d6 test(web): align install guidance expectations
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 12:34:09 +08:00
FenjuFu
3c9eda199c fix(web): preserve LF endings in nginx assets
Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>
2026-09-04 11:56:16 +08:00