feat: optimized AIOX agents and skills for Grok Build - #800
Merged
Conversation
Introduce .grok/ integration with token-efficient agent profiles, slash skills, roles, personas, and compact rules. Add regenerable sync script (npm run sync:skills:grok) so Grok stays aligned with .source agents under .aiox-core/development/agents/.
Clarify the generator module purpose so entity-registry extraction no longer picks an unrelated CodeRabbit comment string.
Make Claude subagent governance validate the core aiox-* set instead of exact directory equality, and guard dev-context-loader cacheHits when status/shape is incomplete.
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
github-actions
Bot
added
type: test
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (20)
✅ Files skipped from review due to trivial changes (4)
🚧 Files skipped from review as they are similar to previous changes (13)
WalkthroughThis PR adds a Grok sync generator, generated Grok agent/skill/persona/role/rules files, repository wiring for running the sync, and updates to governance and loader tests. ChangesGrok Skills Sync Feature
Estimated code review effort: 4 (Complex) | ~45 minutes Suggested labels: Suggested reviewers: 🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Contributor
📊 Coverage ReportCoverage report not available
Generated by PR Automation (Story 6.1) |
CI Install Manifest Validation failed because data/entity-registry.yaml hash no longer matched install-manifest.yaml after IDS updates.
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 6
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In @.aiox-core/infrastructure/scripts/grok-skills-sync/index.js:
- Around line 700-703: The generated Grok frontmatter/TOML in the sync script is
writing raw agent text into quoted scalar fields, so titles, descriptions, or
whenToUse values containing quotes or newlines can break the output. Update the
builders in the metadata/frontmatter generation paths (including the sections
referenced by the same sync flow) to serialize or escape these interpolated
values before writing them, and reuse the existing agent/title/whenToUse
variables so the fix applies consistently across all emitted config blocks.
- Around line 931-955: The file emission in the skill sync flow can write
outside the intended output tree because skillId is derived from agentData.id
and then used in path.join for the targets files. Update the logic around
getSkillId, files, and the writeFileSync loop to validate the id and verify each
resolved path stays under the expected .grok/agents base before writing. Reject
or skip any agentData.id that would escape the target root, and perform the
containment check on the final resolved path for all generated outputs.
In @.grok/agents/aiox-squad-creator.md:
- Around line 42-45: The blocked-actions list in aiox-squad-creator.md still
allows a git push exception, which conflicts with the devops-only boundary
enforced by aiox-core. Update the Blocked / must delegate section so the agent
blocks git push unconditionally, and remove any conditional wording tied to
acting as devops or release path. Keep the change aligned with the policy
structure used in the agent definition so the restriction is clear and
consistent.
In @.grok/README.md:
- Around line 18-23: Add a language tag to the first fenced block in the README
so markdownlint no longer flags it; update the fence around the /aiox-dev,
/aiox-qa, /aiox-devops, and /aiox-squad-creator list in the README to use a tag
like text (or bash) while keeping the content unchanged.
In @.grok/skills/aiox-commit/SKILL.md:
- Around line 17-23: The fenced example in SKILL.md is missing a language tag,
so update the markdown fence for the commit-message example to use a plain-text
label such as text. Locate the fenced block showing the feat/fix/docs/test/chore
examples and add the label directly to the opening fence so markdownlint stops
flagging it.
In `@tests/unit/dev-context-loader.test.js`:
- Around line 76-79: The cached-load assertion in the dev context loader test is
too weak because it only checks that `result.cacheHits` is a number, not that
caching actually happened. Update the guarded assertion in
`tests/unit/dev-context-loader.test.js` within the `successfulFiles.length > 0
&& result.status === 'loaded'` block to assert `result.cacheHits` is greater
than 0 so the test verifies real cache usage. Use the existing
`result.cacheHits`, `successfulFiles`, and `result.status` checks to keep the
assertion safe for partial/no-file cases.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: e57090a1-eece-49ab-ba05-d69eb65cc048
📒 Files selected for processing (62)
.aiox-core/data/entity-registry.yaml.aiox-core/infrastructure/scripts/grok-skills-sync/README.md.aiox-core/infrastructure/scripts/grok-skills-sync/index.js.aiox-core/install-manifest.yaml.grok/README.md.grok/agents/aiox-analyst.md.grok/agents/aiox-architect.md.grok/agents/aiox-data-engineer.md.grok/agents/aiox-dev.md.grok/agents/aiox-devops.md.grok/agents/aiox-master.md.grok/agents/aiox-pm.md.grok/agents/aiox-po.md.grok/agents/aiox-qa.md.grok/agents/aiox-sm.md.grok/agents/aiox-squad-creator.md.grok/agents/aiox-ux-design-expert.md.grok/personas/aiox-analyst.toml.grok/personas/aiox-architect.toml.grok/personas/aiox-data-engineer.toml.grok/personas/aiox-dev.toml.grok/personas/aiox-devops.toml.grok/personas/aiox-master.toml.grok/personas/aiox-pm.toml.grok/personas/aiox-po.toml.grok/personas/aiox-qa.toml.grok/personas/aiox-sm.toml.grok/personas/aiox-squad-creator.toml.grok/personas/aiox-ux-design-expert.toml.grok/roles/aiox-analyst.toml.grok/roles/aiox-architect.toml.grok/roles/aiox-data-engineer.toml.grok/roles/aiox-dev.toml.grok/roles/aiox-devops.toml.grok/roles/aiox-master.toml.grok/roles/aiox-pm.toml.grok/roles/aiox-po.toml.grok/roles/aiox-qa.toml.grok/roles/aiox-sm.toml.grok/roles/aiox-squad-creator.toml.grok/roles/aiox-ux-design-expert.toml.grok/rules/aiox-core.md.grok/skills/aiox-analyst/SKILL.md.grok/skills/aiox-architect/SKILL.md.grok/skills/aiox-commit/SKILL.md.grok/skills/aiox-data-engineer/SKILL.md.grok/skills/aiox-dev/SKILL.md.grok/skills/aiox-devops/SKILL.md.grok/skills/aiox-handoff/SKILL.md.grok/skills/aiox-master/SKILL.md.grok/skills/aiox-pm/SKILL.md.grok/skills/aiox-po/SKILL.md.grok/skills/aiox-qa/SKILL.md.grok/skills/aiox-quality-gates/SKILL.md.grok/skills/aiox-sdc/SKILL.md.grok/skills/aiox-sm/SKILL.md.grok/skills/aiox-squad-creator/SKILL.md.grok/skills/aiox-ux-design-expert/SKILL.mdAGENTS.mdpackage.jsontests/claude/subagent-governance.test.jstests/unit/dev-context-loader.test.js
Escape YAML/TOML scalars, constrain generated write paths under .grok/, block git push for squad-creator, label markdown fences, and keep the cacheHits > 0 assertion in dev-context-loader.
Keep install-manifest hash aligned with entity-registry so CI Install Manifest Validation stays green.
oalanicolas
added a commit
that referenced
this pull request
Jul 9, 2026
Branch off PR #800 (Grok). Captures P0–P2 waves for SDC skills, runtime hygiene, orchestration merge, IDE parity, and selective constitution updates without importing Sinkra product or enterprise IP. Note: docs/stories is gitignored; force-add for this framework epic only.
Pedrovaleriolopez
approved these changes
Jul 9, 2026
Pedrovaleriolopez
left a comment
Pedrovaleriolopez
left a comment
Contributor
There was a problem hiding this comment.
Aprovado após revisão @devops: CI verde (ESLint, TypeScript, Jest Node 18-25, CodeQL, Security Audit, gates de determinismo), CodeRabbit APPROVED no HEAD, todos os 6 apontamentos anteriores corrigidos, dentro dos limites de autoridade de agente e da fronteira L1-L4. Sem findings bloqueantes.
9 tasks
Pedrovaleriolopez
added a commit
that referenced
this pull request
Jul 9, 2026
* feat: add optimized AIOX agents and skills for Grok Build Introduce .grok/ integration with token-efficient agent profiles, slash skills, roles, personas, and compact rules. Add regenerable sync script (npm run sync:skills:grok) so Grok stays aligned with .source agents under .aiox-core/development/agents/. * fix: improve grok-skills-sync purpose metadata for IDS registry Clarify the generator module purpose so entity-registry extraction no longer picks an unrelated CodeRabbit comment string. * test: harden flaky pre-push suites for local agent pollution Make Claude subagent governance validate the core aiox-* set instead of exact directory equality, and guard dev-context-loader cacheHits when status/shape is incomplete. * fix: regenerate install manifest for entity-registry hash CI Install Manifest Validation failed because data/entity-registry.yaml hash no longer matched install-manifest.yaml after IDS updates. * fix: address CodeRabbit review on Grok skills sync Escape YAML/TOML scalars, constrain generated write paths under .grok/, block git push for squad-creator, label markdown fences, and keep the cacheHits > 0 assertion in dev-context-loader. * chore: sync entity-registry and install manifest after IDS hook Keep install-manifest hash aligned with entity-registry so CI Install Manifest Validation stays green. * docs: add CORE-SUPER-UPDATE epic and roadmap from hub/enterprise harvest Branch off PR #800 (Grok). Captures P0–P2 waves for SDC skills, runtime hygiene, orchestration merge, IDE parity, and selective constitution updates without importing Sinkra product or enterprise IP. Note: docs/stories is gitignored; force-add for this framework epic only. * docs: apply roundtable APPROVE_WITH_FIXES to CORE-SUPER-UPDATE MVP cut (A+B), hard A3 merge gates, B0 lean spike, denylist CI story, deferred D5/E4/F3, semver ship train, tightened A1 ACs. Full finding resolution table embedded in epic (100% resolved). * docs: rehome CORE-SUPER-UPDATE under docs/framework/epics (architect-first) Address architect-first findings: public versionable path (no force-add gitignored docs/stories), drop stale stories index, ARCH-A slice, A2 as #797 residual investigation (unref already present), permissions metric clarified (extend not replace), Wave B–E blocked until per-wave ARCH, hard ban on workspace/ in OSS, hub XI/XII numbering locked for constitution. * feat(synapse): complete CORE-SU.A1 configurable pipeline timeout tests/docs Engine already resolves AIOX_SYNAPSE_PIPELINE_TIMEOUT_MS > core-config synapse.pipelineTimeoutMs > 100ms default with clamp and timeout warn. Add unit coverage for precedence/invalid values/soft-fail path and document knobs in config-override-guide. Closes #798 when merged. * feat(synapse): wire configurable pipeline timeout in engine and core-config Export resolvePipelineTimeoutMs (env > config > 100ms default, clamp 1-30000), soft-fail remaining layers with console.warn. Config key synapse.pipelineTimeoutMs. Completes CORE-SU.A1 implementation. * chore: sync manifest after A1 + mark A1 done on roadmap * fix(config): skip ConfigCache sweep timer under Jest (#797) unref() alone still allows post-teardown callbacks. Skip setInterval when JEST_WORKER_ID is set; keep production timer + unref; gate logs on AIOX_DEBUG; export disposeConfigCacheTimers. Applies to core and infrastructure copies. CORE-SU.A2 YOLO. * chore: regenerate install manifest after ConfigCache fix * feat(permissions): add path, prompt, and SSRF guards (CORE-SU.A3) Extend core/permissions without replacing PermissionMode/OperationGuard. OSS path deny list excludes product workspace/ trees. Unit tests for traversal, injection patterns, private/metadata SSRF. Wave A P0. * chore: regenerate install manifest after permissions guards * feat(security): OSS port denylist CI + doctor check (CORE-SU.A4) Add scan for hub/enterprise leakage (workspace product paths, sinkra_*, mux-adapter, coolify, machine paths). npm run validate:port-denylist; doctor check port-denylist. Completes Wave A. * chore: regenerate install manifest after port-denylist * feat(sdc): Wave B lean SDC skills + Grok sync (CORE-SUPER-UPDATE) Ship OSS lean SDC skill wrappers (validate → develop → review → apply-qa-fixes → close + full-sdc orchestrator) with tasks as SOT. Wire grok-skills-sync to copy development/skills → .grok/skills/aiox-*. Sequence Lock: only close-story sets Done. No product harvest trees. * feat(sdc): executable full-sdc + wave-execute runtime (CLI First) Add lean SDC/wave engines under .aiox-core/core/sdc with aiox sdc and aiox wave CLI for plan/next/verify/progress. Upgrade full-sdc skill to EXECUTE loop; add wave-execute that dispatches full-sdc children via DAG + file-ownership batches. Grok skills synced; unit tests included. * feat(sdc): C1 wave-run controller + close Wave A residuals Close CORE-SU.A1 with hook-runtime synapse config wiring and QA PASS. Add ARCH-C and wave-run advance/mark/cascade/report CLI. Normalize A2–A4 to Done; package scripts sdc/wave; unit tests for wave-run. * fix(security): harden port-denylist scan + format sdc modules Scan .claude surfaces; fail closed on unreadable paths; doctor wraps scan errors. Apply lint formatting to sdc/wave-run modules. * feat(sdc): complete Wave C via wave-execute + full-sdc (C2–C4) Execute CORE-SU-C wave: dispatch-adapter (parallel/sequential pool), epic-glue + aiox wave from-epic, tests (23). Stories C2–C4 Done; wave report completed. Skills updated for from-epic flow. * feat(install): Windows npx ECOMPROMISED guidance (CORE-SU.F1 #773) Add install-time hint, doctor windows-npx-install check (17 total), and docs for cold-cache lock timeout. ARCH-D/E drafts unlock stretch planning. Wave CORE-SU-F completed via full-sdc. * feat(core): real pm.sh agent CLI + constitution XI/XII + IDE contract Remove pm.sh echo-stub: invoke CLAUDE_CMD/claude or fail closed. Port OSS-safe Articles XI (Squad-First) and XII (Model Governance). Add ide-sync-contract (D1) and closeout stories for wave-execute. * docs(governance): dual-path stories + ignore unhardened .codex Official policy: docs/framework/epics/ for versioned framework OSS work; docs/stories/ remains project L4 (gitignored template). Align AGENTS.md, CLAUDE.md, story-lifecycle paths, and Grok sync prompts. Gitignore .codex/ until absolute paths / force-push wording are hardened for OSS. * feat(harvest): Wave 0 three-way framework diff + analysis corrections Add npm run diff:framework-3way (peer discovery via env/flags), doctor advisory framework-3way-diff (18 checks), and ANALYSIS-3WAY-CORRECTIONS from verified OSS×hub×enterprise facts. Prefer enterprise lean full-sdc as skill enrichment base; never blind-merge OSS-wins modules. * docs(harvest): mark Wave 0 arch/story Done; peer env vars * feat(synapse): port memory-bridge heuristics from hub (CORE-SU.MB) Cold/warm timeouts, processSessionDigest + debounced reinforce worker, OSS global-heuristic-hints.yaml, and heuristics unit tests. Does not replace hook-runtime wholesale. Graceful when MIS absent. * docs(epic): mark core super update pr-ready * chore(ids): refresh generated registry metadata * chore(epic): freeze CORE-SUPER-UPDATE required scope complete Mark epic complete for ship; document optional/deferred backlog as out-of-release. Gitignore legacy .claude/skills/aios-*/ local noise before pre-push and CodeRabbit. * fix(doctor): keep framework-3way check lightweight Avoid full tree hash in aiox doctor (was timing out CLI tests when peers exist). Presence-only advisory; full report stays on npm run diff:framework-3way. * chore(ids): sync entity-registry after doctor check fix * docs: strip trailing whitespace in ROADMAP for pre-push * chore(ids): sync registry metadata after pre-push * fix(security): address CodeRabbit majors from pre-push review SSRF fe80::/10 + IPv4-mapped delegation; memory-bridge warm only on success; wave cascade skip origin; SDC safeId/loadJson/plan validation; npx hint null-env; port-denylist Windows path; gate match anchoring. * chore(ids): refresh entity-registry after CR fixes * fix(ci): allow Claude SDC skills in parity gate * chore(ids): sync registry after parity fix * fix(ids): skip registry rewrite when entity is unchanged Avoid lastVerified thrash on no-op processChanges; covers pre-push noise from IDS hooks. * chore(ids): sync registry after idempotent updater fix * docs(security): mark path/ssrf guards as standalone, not wired to enforcement path-guard.js and ssrf-guard.js (CORE-SU.A3) are exported from permissions/index.js but are not called by OperationGuard.guard() and are not registered as a PreToolUse hook. No write path or outbound request is validated by these guards automatically today. Add the same standalone-library notice prompt-guard.js already carries so callers don't assume runtime enforcement is active. No logic changed. Epic: docs/framework/epics/core-super-update/EPIC-CORE-SUPER-UPDATE.md --------- Co-authored-by: Pedro Valerio <pedro@allfluence.com.br>
Pedrovaleriolopez
pushed a commit
that referenced
this pull request
Jul 10, 2026
* feat: add optimized AIOX agents and skills for Grok Build Introduce .grok/ integration with token-efficient agent profiles, slash skills, roles, personas, and compact rules. Add regenerable sync script (npm run sync:skills:grok) so Grok stays aligned with .source agents under .aiox-core/development/agents/. * fix: improve grok-skills-sync purpose metadata for IDS registry Clarify the generator module purpose so entity-registry extraction no longer picks an unrelated CodeRabbit comment string. * test: harden flaky pre-push suites for local agent pollution Make Claude subagent governance validate the core aiox-* set instead of exact directory equality, and guard dev-context-loader cacheHits when status/shape is incomplete. * fix: regenerate install manifest for entity-registry hash CI Install Manifest Validation failed because data/entity-registry.yaml hash no longer matched install-manifest.yaml after IDS updates. * fix: address CodeRabbit review on Grok skills sync Escape YAML/TOML scalars, constrain generated write paths under .grok/, block git push for squad-creator, label markdown fences, and keep the cacheHits > 0 assertion in dev-context-loader. * chore: sync entity-registry and install manifest after IDS hook Keep install-manifest hash aligned with entity-registry so CI Install Manifest Validation stays green. * docs: add CORE-SUPER-UPDATE epic and roadmap from hub/enterprise harvest Branch off PR #800 (Grok). Captures P0–P2 waves for SDC skills, runtime hygiene, orchestration merge, IDE parity, and selective constitution updates without importing Sinkra product or enterprise IP. Note: docs/stories is gitignored; force-add for this framework epic only. * docs: apply roundtable APPROVE_WITH_FIXES to CORE-SUPER-UPDATE MVP cut (A+B), hard A3 merge gates, B0 lean spike, denylist CI story, deferred D5/E4/F3, semver ship train, tightened A1 ACs. Full finding resolution table embedded in epic (100% resolved). * docs: rehome CORE-SUPER-UPDATE under docs/framework/epics (architect-first) Address architect-first findings: public versionable path (no force-add gitignored docs/stories), drop stale stories index, ARCH-A slice, A2 as #797 residual investigation (unref already present), permissions metric clarified (extend not replace), Wave B–E blocked until per-wave ARCH, hard ban on workspace/ in OSS, hub XI/XII numbering locked for constitution. * feat(synapse): complete CORE-SU.A1 configurable pipeline timeout tests/docs Engine already resolves AIOX_SYNAPSE_PIPELINE_TIMEOUT_MS > core-config synapse.pipelineTimeoutMs > 100ms default with clamp and timeout warn. Add unit coverage for precedence/invalid values/soft-fail path and document knobs in config-override-guide. Closes #798 when merged. * feat(synapse): wire configurable pipeline timeout in engine and core-config Export resolvePipelineTimeoutMs (env > config > 100ms default, clamp 1-30000), soft-fail remaining layers with console.warn. Config key synapse.pipelineTimeoutMs. Completes CORE-SU.A1 implementation. * chore: sync manifest after A1 + mark A1 done on roadmap * fix(config): skip ConfigCache sweep timer under Jest (#797) unref() alone still allows post-teardown callbacks. Skip setInterval when JEST_WORKER_ID is set; keep production timer + unref; gate logs on AIOX_DEBUG; export disposeConfigCacheTimers. Applies to core and infrastructure copies. CORE-SU.A2 YOLO. * chore: regenerate install manifest after ConfigCache fix * feat(permissions): add path, prompt, and SSRF guards (CORE-SU.A3) Extend core/permissions without replacing PermissionMode/OperationGuard. OSS path deny list excludes product workspace/ trees. Unit tests for traversal, injection patterns, private/metadata SSRF. Wave A P0. * chore: regenerate install manifest after permissions guards * feat(security): OSS port denylist CI + doctor check (CORE-SU.A4) Add scan for hub/enterprise leakage (workspace product paths, sinkra_*, mux-adapter, coolify, machine paths). npm run validate:port-denylist; doctor check port-denylist. Completes Wave A. * chore: regenerate install manifest after port-denylist * feat(sdc): Wave B lean SDC skills + Grok sync (CORE-SUPER-UPDATE) Ship OSS lean SDC skill wrappers (validate → develop → review → apply-qa-fixes → close + full-sdc orchestrator) with tasks as SOT. Wire grok-skills-sync to copy development/skills → .grok/skills/aiox-*. Sequence Lock: only close-story sets Done. No product harvest trees. * feat(sdc): executable full-sdc + wave-execute runtime (CLI First) Add lean SDC/wave engines under .aiox-core/core/sdc with aiox sdc and aiox wave CLI for plan/next/verify/progress. Upgrade full-sdc skill to EXECUTE loop; add wave-execute that dispatches full-sdc children via DAG + file-ownership batches. Grok skills synced; unit tests included. * feat(sdc): C1 wave-run controller + close Wave A residuals Close CORE-SU.A1 with hook-runtime synapse config wiring and QA PASS. Add ARCH-C and wave-run advance/mark/cascade/report CLI. Normalize A2–A4 to Done; package scripts sdc/wave; unit tests for wave-run. * fix(security): harden port-denylist scan + format sdc modules Scan .claude surfaces; fail closed on unreadable paths; doctor wraps scan errors. Apply lint formatting to sdc/wave-run modules. * feat(sdc): complete Wave C via wave-execute + full-sdc (C2–C4) Execute CORE-SU-C wave: dispatch-adapter (parallel/sequential pool), epic-glue + aiox wave from-epic, tests (23). Stories C2–C4 Done; wave report completed. Skills updated for from-epic flow. * feat(install): Windows npx ECOMPROMISED guidance (CORE-SU.F1 #773) Add install-time hint, doctor windows-npx-install check (17 total), and docs for cold-cache lock timeout. ARCH-D/E drafts unlock stretch planning. Wave CORE-SU-F completed via full-sdc. * feat(core): real pm.sh agent CLI + constitution XI/XII + IDE contract Remove pm.sh echo-stub: invoke CLAUDE_CMD/claude or fail closed. Port OSS-safe Articles XI (Squad-First) and XII (Model Governance). Add ide-sync-contract (D1) and closeout stories for wave-execute. * docs(governance): dual-path stories + ignore unhardened .codex Official policy: docs/framework/epics/ for versioned framework OSS work; docs/stories/ remains project L4 (gitignored template). Align AGENTS.md, CLAUDE.md, story-lifecycle paths, and Grok sync prompts. Gitignore .codex/ until absolute paths / force-push wording are hardened for OSS. * feat(harvest): Wave 0 three-way framework diff + analysis corrections Add npm run diff:framework-3way (peer discovery via env/flags), doctor advisory framework-3way-diff (18 checks), and ANALYSIS-3WAY-CORRECTIONS from verified OSS×hub×enterprise facts. Prefer enterprise lean full-sdc as skill enrichment base; never blind-merge OSS-wins modules. * docs(harvest): mark Wave 0 arch/story Done; peer env vars * feat(synapse): port memory-bridge heuristics from hub (CORE-SU.MB) Cold/warm timeouts, processSessionDigest + debounced reinforce worker, OSS global-heuristic-hints.yaml, and heuristics unit tests. Does not replace hook-runtime wholesale. Graceful when MIS absent. * docs(epic): mark core super update pr-ready * chore(ids): refresh generated registry metadata * chore(epic): freeze CORE-SUPER-UPDATE required scope complete Mark epic complete for ship; document optional/deferred backlog as out-of-release. Gitignore legacy .claude/skills/aios-*/ local noise before pre-push and CodeRabbit. * fix(doctor): keep framework-3way check lightweight Avoid full tree hash in aiox doctor (was timing out CLI tests when peers exist). Presence-only advisory; full report stays on npm run diff:framework-3way. * chore(ids): sync entity-registry after doctor check fix * docs: strip trailing whitespace in ROADMAP for pre-push * chore(ids): sync registry metadata after pre-push * fix(security): address CodeRabbit majors from pre-push review SSRF fe80::/10 + IPv4-mapped delegation; memory-bridge warm only on success; wave cascade skip origin; SDC safeId/loadJson/plan validation; npx hint null-env; port-denylist Windows path; gate match anchoring. * chore(ids): refresh entity-registry after CR fixes * fix(ci): allow Claude SDC skills in parity gate * chore(ids): sync registry after parity fix * fix(ids): skip registry rewrite when entity is unchanged Avoid lastVerified thrash on no-op processChanges; covers pre-push noise from IDS hooks. * chore(ids): sync registry after idempotent updater fix * fix(core): harden core super update governance * chore(ids): sync registry after core hardening * docs(core): bind final QA provenance to commit * fix(ci): restore Vercel preview build * docs(core): bind Vercel QA provenance * fix(core): address PR review feedback * chore(ids): regen entity-registry * docs(core): bind PR review QA provenance * chore(ids): restore deterministic registry * docs(core): finalize PR review provenance * fix(core): respect interactive QA remediation mode * chore(ids): refresh review remediation registry * docs(core): record interactive remediation QA * fix(core): enforce preflight before phase execution * chore(ids): refresh preflight remediation registry * docs(core): record preflight ordering QA * test(core): decouple lifecycle audit wording * chore(ids): refresh CI remediation registry * docs(core): record CI remediation QA * fix(core): halt failed QA remediation verification * chore(ids): refresh QA loop remediation registry * docs(core): record QA remediation verification
Pedrovaleriolopez
added a commit
that referenced
this pull request
Jul 11, 2026
…haining (#804) Every semantic-release run was blocked at the prepublishOnly safety gate: validate-publish.js (Check 5) requires .aiox-core/package.json to match the root version, but semantic-release only bumps the root manifest. Fixes: - scripts/sync-version-lockstep.js: syncs .aiox-core/package.json and compat/aiox-core/package.json (version + @aiox-squads/core dependency pin) to the target version. Idempotent, standalone-usable. - .releaserc.json: @semantic-release/exec prepare step runs the sync with ${nextRelease.version} — the gate now passes inside the release run. - semantic-release.yml: after a non-dry-run release, explicitly dispatch npm-publish.yml (stable, all) via gh workflow run — the GITHUB_TOKEN tag/ release events do not chain workflows (anti-recursion); workflow_dispatch is the documented exception (same pattern as release.yml trigger-npm-publish). Requires the new actions:write permission. - Version bump 5.2.9 -> 5.3.0 committed across the three manifests (repo convention: chore(release) bump PRs), so the chained npm-publish.yml can publish the legacy aiox-core wrapper at 5.3.0 from the committed tree. Context: docs/handoffs (aiox-cockpit) 2026-07-11-env-normalization- consolidation.md, Fase 4. The orphan v5.3.0 tag from the failed attempt was deleted; baseline tag for semantic-release remains v5.2.8 (next: 5.3.0, minor, driven by the feat commits in #800/#801). Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Contributor
|
🎉 This PR is included in version 5.3.0 🎉 The release is available on: Your semantic-release bot 📦🚀 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds first-class Grok Build TUI integration for Synkra AIOX: token-efficient agent profiles, slash skills, roles, personas, compact rules, and a regenerable sync script.
.grok/— 12 agents, 16 skills (12 personas + 4 workflows), 12 roles, 12 personas, rulesnpm run sync:skills:grok— generator from.aiox-core/development/agents/cacheHitsassertHow to use
npm run sync:skills:grok # In Grok TUI: /aiox-dev /aiox-qa /aiox-devops /aiox-sdcPre-push
npm run lint— PASSnpm run typecheck— PASSnpm test— PASS (356 suites / 8769 tests)Test plan
npm run sync:skills:grokregenerates without errorgrok inspectlists project skillsaiox-*and agents under.grok/agents//aiox-devactivates Dex persona with starter commands.grok/Summary by CodeRabbit
.groklayout, including per-agent configurations and handoff/SDC/quality-gate skills.