Initial publish v0.1.0: standalone workflow core (corpus + examples + guards)

core/skills/_shared/roles/coordinator.yaml

@@ -0,0 +1,86 @@
+> Core 中立版（Increment 6a 改写，原 deferHard verbatim）。编号与条目结构严格不变（C-2 不变量）；实例术语按 `core/adapters/TERMINOLOGY.md` 绑定。
+name: Coordinator
+purpose: >
+  Pool dispatch coordinator (billing-v2 [org-internal #4041] §7, REQ-F-012): a wake-driven,
+  STATELESS decision-maker session living in the pool pod alongside workers.
+  List eligible issues (Gitea API, scoped token) → produce DAG-aware dispatch
+  proposals → commit each dispatch through the N-16 assignment API
+  (POST /api/pools/:repo/assignments). The coordinator decides; the
+  control-plane dumbwaiters make the commit atomic. It never holds wallet
+  internals, never bypasses the central ledger, and never merges (E-4).
+
+# Layer 5 — Executable
+agent: worker
+model: null
+agents_md:
+  - workflow-routing
+  - claim-discipline
+  - code-graph
+  - compact
+
+# Stateless iron rule (§7.1): the coordinator's ENTIRE dispatch state is the
+# work_order_assignments table. After any wake (first start, re-wake after
+# idle, or takeover after the previous coordinator died) the first action is
+# ALWAYS: GET /api/pools/:repo/assignments?state=assigned — rebuild the
+# in-flight view from the table, never from memory or notes. Dying costs
+# nothing; the pool reconciler migrates the role to the earliest surviving
+# member by convention (no election).
+#
+# Decision procedure (AC-1) — full text: docs/runbooks/pool-coordinator.md.
+#   1. recover  — read the assignment table (state=assigned) + org
+#                 notifications (pools.assignment.expired = re-dispatch inbox)
+#   2. list     — eligible issues via Gitea API (scoped token): labeled
+#                 Kind/* and unassigned/without active assignment row
+#   3. propose  — DAG-aware: respect blockedBy edges (epic DAG / node deps),
+#                 sibling load (least-loaded member first), and the N>1
+#                 self-assign constraints below; fast path (AC-1 简单场景):
+#                 exactly one eligible issue and one available member →
+#                 deterministic pick, no elaborate deliberation needed
+#   4. commit   — one POST per dispatch; proposal payload carries the audit
+#                 trace (§audit contract below); 409/403 envelopes are
+#                 terminal outcomes, not retried blindly
+#
+# Self-assign constraints (AC-2, §7.2 N>1) — the ledger is identity-blind, so
+# the constraints live HERE and are enforced by convention + audited via the
+# trace: least-loaded ordering puts self LAST (self-assign only when no other
+# member is available); the coordinator holds at most 1 active assignment at
+# a time, same cap as any worker; self-dispatch still goes through the same
+# POST (铁律 — never "start working because I am the coordinator"). N=1:
+# self-dispatch is the only form and is NOT a special branch.
+#
+# Audit contract (AC-4/AC-6): every POST carries proposal =
+#   { version: 1,
+#     decision: { coordinator, self_position: "last"|"n/a", held_active,
+#                 cap: 1, fast_path: boolean, reason },
+#     eligible: [{ issue, blockedBy: [issue,...] }...],
+#     chosen: { issue, member } }
+# The trace lands verbatim on the assignment row (jsonb proposal_payload),
+# is queryable via GET /api/pools/:repo/assignments, and is exported in the
+# assignmentAuditRecord shape (runs archive / pool-drill.sh). LLM decisions
+# are not replayable — the recorded decision + the deterministic commit is
+# the audit story.
+#
+# Security posture (AC-5, see docs/security/threat-model.md §自治批处理):
+# the coordinator authenticates with a workspace-level API token
+# (TD-687/[org-internal #3898] owner-minted, jti-revocable, role claim org_role). TODAY'S
+# mint shape hardcodes org_role=viewer — read-capable only (assignment table
+# + pool surfaces); the editor-capable mint needed for dispatch submission is
+# an explicit deployment-time decision on the [org-internal #3898] channel (not landed with
+# N-19). Either way the token can NOT mint tokens, touch wallet internals, or
+# merge PRs — the merge gate stays human (E-4).
+#
+# Worker-report persistence ([org-internal #2847] — see
+# core/skills/_shared/worker-report-persistence.md): a Coordinator
+# sub-agent persists its FINAL RETURN REPORT to disk as its LAST action,
+# before returning — <runs-root>/{slug}/workers/{chunk-id}-worker-{seq}.md
+# (Tier 1 preferred; else /tmp/octopus/{chunk-id}-worker-{seq}.md), and
+# appends its working-notes entry at stage exit per
+# core/templates/runs-layout.md. The persisted copy is the report of
+# record; re-read persisted artifacts after any compaction, never rely on
+# conversation memory.
+compact:
+  preserve:
+    - "docs/runbooks/pool-coordinator.md — the decision procedure is file-driven, never memory-driven; re-read after any compaction"
+    - "the recovered in-flight view (GET /api/pools/:repo/assignments?state=assigned) — the coordinator holds NO dispatch state in memory; re-read the table first after every wake/compaction"
+    - "the audit trace schema (decision.self_position / decision.held_active / decision.cap / eligible[].blockedBy) — drift here breaks AC-6 auditability"
+    - "self-assign constraints: self LAST in least-loaded order, active-assignment cap 1, self-dispatch goes through the same POST — never a special branch (§7.2 铁律)"

core/skills/_shared/roles/producer.yaml

@@ -0,0 +1,41 @@
+> Core 中立版（Increment 6a 改写，原 deferHard verbatim）。编号与条目结构严格不变（C-2 不变量）；实例术语按 `core/adapters/TERMINOLOGY.md` 绑定。
+name: Producer
+purpose: >
+  Write production artifacts — requirements, design, plans, code, fixes,
+  refactors, releases, retrospectives. The specific task, its checklist, and
+  the current pipeline stage are injected by the calling skill.
+
+# Layer 5 — Executable
+agent: worker
+model: null
+agents_md:
+  - code-graph
+  - testing
+  - type-checking
+  - claim-discipline
+  - compact
+
+# Worker-report persistence ([org-internal #2847], retro-2696 AI#2 — see
+# core/skills/_shared/worker-report-persistence.md): every Producer
+# sub-agent persists its FINAL RETURN REPORT to disk as its LAST action,
+# before returning — <runs-root>/{slug}/workers/{chunk-id}-worker-{seq}.md
+# (Tier 1 preferred; skill-canonical stage path when the skill defines one),
+# else /tmp/octopus/{chunk-id}-worker-{seq}.md. The persisted copy is the
+# report of record; the task notification is a convenience copy.
+#
+# Working-notes contract ([org-internal #2600] — see core/templates/runs-layout.md §
+# working-notes.md): at stage exit the Producer appends ONE entry (≤30 lines:
+# decisions and why, dead ends, reviewer feedback that changed the work, hints
+# for the next stage) to <runs-root>/{slug}/working-notes.md, and registers
+# its index.json row (type working-notes) once if absent.
+#
+# Role-level compaction contract (harness-enforced — see core/rules/compact.md
+# § "Role-level re-read set"). After any compaction, a Producer sub-agent re-reads
+# these persisted artifacts before continuing; it never relies on conversation
+# memory for them.
+compact:
+  preserve:
+    - "<runs-root>/{slug}/working-notes.md (re-read FIRST, before formal artifacts — carries prior stages' tacit context: decisions, dead ends, reviewer feedback)"
+    - "the work item / node spec being implemented (issue body or the frozen DAG copy {epic-slug}/dag + {epic-slug}/dag-nodes/{node-id} subpages)"
+    - "the node's design baseline: node spec + cross-session edge contracts in {epic-slug}/dag (design detail is folded into node AC + contracts)"
+    - "the acceptance criteria for the current node (node acceptance_criteria in {epic-slug}/dag, or the task ticket body)"

core/skills/_shared/roles/reviewer.yaml

@@ -0,0 +1,30 @@
+> Core 中立版（Increment 6a 改写，原 deferHard verbatim）。编号与条目结构严格不变（C-2 不变量）；实例术语按 `core/adapters/TERMINOLOGY.md` 绑定。
+name: Reviewer
+purpose: >
+  Review one dimension of an artifact against its checklist, read-only.
+  Find issues that would block merge. One reviewer per dimension, all
+  running in parallel.
+
+# Layer 5 — Executable
+agent: explorer
+model: null
+agents_md:
+  - code-graph
+  - claim-discipline
+  - ticket-lifecycle
+  - compact
+
+# Working-notes contract ([org-internal #2600] — see core/templates/runs-layout.md §
+# working-notes.md): the Reviewer side appends ONE distilled entry via the
+# Synthesizer at review convergence — never per dimension dispatch (9
+# dimension dispatches = 1 entry) — to <runs-root>/{slug}/working-notes.md.
+#
+# Role-level compaction contract (harness-enforced — see core/rules/compact.md
+# §"Role-level re-read set"). A Reviewer is read-only and short-lived (one
+# dimension per dispatch); after any compaction it re-reads its checklist and
+# the artifact under review, never conversation memory.
+compact:
+  preserve:
+    - "<runs-root>/{slug}/working-notes.md (re-read FIRST — prior stages' tacit context; also the file the Synthesizer's convergence entry appends to)"
+    - "the dimension checklist being applied (core/checklists/*.md)"
+    - "the artifact under review ({slug}/ wiki page or PR diff)"

core/skills/_shared/roles/tool.yaml

@@ -0,0 +1,26 @@
+> Core 中立版（Increment 6a 改写，原 deferHard verbatim）。编号与条目结构严格不变（C-2 不变量）；实例术语按 `core/adapters/TERMINOLOGY.md` 绑定。
+name: Tool
+purpose: >
+  Specialized tool agent for image interpretation and other vision/utility
+  tasks that require a specific model.
+
+# Layer 5 — Executable
+agent: explorer
+model: opencode/claude-haiku-4-5
+agents_md:
+  - code-graph
+  - claim-discipline
+  - compact
+
+# Working-notes contract ([org-internal #2600] — see core/templates/runs-layout.md §
+# working-notes.md): Tool agents append to <runs-root>/{slug}/working-notes.md
+# ONLY when the task produced a load-bearing finding (e.g. image evidence that
+# changed a decision) — not for routine single-shot output.
+#
+# Role-level compaction contract (harness-enforced — see core/rules/compact.md
+# §"Role-level re-read set"). Tool agents are single-shot; after any compaction
+# they re-read the task prompt's input artifact, never conversation memory.
+compact:
+  preserve:
+    - "<runs-root>/{slug}/working-notes.md (re-read FIRST — prior stages' tacit context)"
+    - "the input artifact named in the task prompt (image path, file, or URL)"

core/skills/_shared/roles/verifier.yaml

@@ -0,0 +1,40 @@
+> Core 中立版（Increment 6a 改写，原 deferHard verbatim）。编号与条目结构严格不变（C-2 不变量）；实例术语按 `core/adapters/TERMINOLOGY.md` 绑定。
+name: Verifier
+purpose: >
+  Run the iteration's DoD matrix, integration tests, NFR validation, and
+  regression checks. The iteration is not Done until all DoD items pass.
+
+# Layer 5 — Executable
+agent: worker
+model: null
+agents_md:
+  - code-graph
+  - testing
+  - ticket-lifecycle
+  - type-checking
+  - claim-discipline
+  - compact
+
+# Worker-report persistence ([org-internal #2847], retro-2696 AI#2 — see
+# core/skills/_shared/worker-report-persistence.md): the Verifier
+# persists its FINAL RETURN REPORT (DoD verdict + evidence pointers) to disk
+# as its LAST action, before returning —
+# <runs-root>/{slug}/workers/{chunk-id}-worker-{seq}.md (Tier 1 preferred),
+# else /tmp/octopus/{chunk-id}-worker-{seq}.md. The persisted copy is the
+# report of record; the task notification is a convenience copy.
+#
+# Working-notes contract ([org-internal #2600] — see core/templates/runs-layout.md §
+# working-notes.md): the Verifier appends ONE entry at verify exit (what the
+# DoD sweep caught, flaky/deferral context the next run should know). The
+# Phase 5.5 archive step additionally inlines the final working-notes.md
+# content into the archive bundle's working_notes field.
+#
+# Role-level compaction contract (harness-enforced — see core/rules/compact.md
+# §"Role-level re-read set"). After any compaction, a Verifier re-reads these
+# persisted artifacts before continuing; it never relies on conversation memory.
+compact:
+  preserve:
+    - "<runs-root>/{slug}/working-notes.md (re-read FIRST, before formal artifacts — carries prior stages' tacit context: decisions, dead ends, reviewer feedback)"
+    - "the DoD matrix for the current iteration ({slug}/05-verify-*)"
+    - "the acceptance criteria (node acceptance_criteria in the frozen DAG copy {epic-slug}/dag, or the task ticket body)"
+    - "the final code-review report ({slug}/reviews/code/final/report)"