diff --git a/AGENTS.md b/AGENTS.md index 37ec717..9b9b709 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -70,6 +70,7 @@ Clean test-only scratch directories after verification with `find tests -maxdept - `scripts/yao_cli_config.py`: CLI target maps, archetype heuristics, diagnosis copy, and side-effect-free shaping helpers. - `scripts/yao_cli_parser.py`: CLI argparse command surface, flags, choices, and command handler binding. - `scripts/yao_cli_telemetry.py`: opt-in metadata-only CLI run telemetry. Keep it free of prompt, argument, output, transcript, note, or message capture. +- `scripts/import_telemetry_events.py`: external telemetry importer. Validate the whole input before appending events, and keep raw prompt/output/transcript/message/note fields blocked. New helper modules that are imported by CLI/report scripts but are not standalone commands must declare: diff --git a/Makefile b/Makefile index 88edf3e..458d1c2 100644 --- a/Makefile +++ b/Makefile @@ -2,7 +2,7 @@ PYTHON ?= python3 LOCAL_SKILL_INSTALL_DIR ?= $(HOME)/.agents/skills.disabled/yao-meta-skill ACTIVE_SKILL_INSTALL_DIR ?= $(HOME)/.agents/skills/yao-meta-skill -.PHONY: eval eval-suite route-scorecard route-confusion-check description-optimization judge-blind-eval description-optimization-check promotion-check yao-cli-check skill-overview-check skill-report-metrics-check skill-report-charts-check skill-ir-check compiler-check output-eval-check output-execution-check output-review-adjudication-check runtime-conformance-check runtime-permission-check trust-check skill-atlas-check registry-audit-check package-verify-check install-simulation-check upgrade-check review-viewer-check review-studio-check feedback-check adoption-drift-check review-waivers-check review-annotations-check baseline-compare-check reference-scan-check github-benchmark-scan-check intent-confidence-check reference-synthesis-check output-risk-profile-check artifact-design-profile-check prompt-quality-profile-check system-model-check iteration-directions-check description-drift-history iteration-ledger results-panel regression-history context-reports portability-report portability-check failure-regression-check package-check package-failure-check security-boundary-check local-install-sync-check snapshot-check validate lint governance-check resource-boundary-check quality-check sync-local-install sync-active-install test ci-test clean +.PHONY: eval eval-suite route-scorecard route-confusion-check description-optimization judge-blind-eval description-optimization-check promotion-check yao-cli-check skill-overview-check skill-report-metrics-check skill-report-charts-check skill-ir-check compiler-check output-eval-check output-execution-check output-review-adjudication-check runtime-conformance-check runtime-permission-check trust-check skill-atlas-check registry-audit-check package-verify-check install-simulation-check upgrade-check review-viewer-check review-studio-check feedback-check adoption-drift-check telemetry-import-check review-waivers-check review-annotations-check baseline-compare-check reference-scan-check github-benchmark-scan-check intent-confidence-check reference-synthesis-check output-risk-profile-check artifact-design-profile-check prompt-quality-profile-check system-model-check iteration-directions-check description-drift-history iteration-ledger results-panel regression-history context-reports portability-report portability-check failure-regression-check package-check package-failure-check security-boundary-check local-install-sync-check snapshot-check validate lint governance-check resource-boundary-check quality-check sync-local-install sync-active-install test ci-test clean eval: $(PYTHON) scripts/trigger_eval.py --description-file evals/improved_description.txt --cases evals/trigger_cases.json --baseline-description-file evals/baseline_description.txt @@ -91,6 +91,9 @@ feedback-check: adoption-drift-check: $(PYTHON) tests/verify_adoption_drift.py +telemetry-import-check: + $(PYTHON) tests/verify_telemetry_import.py + review-waivers-check: $(PYTHON) tests/verify_review_waivers.py @@ -187,11 +190,11 @@ sync-local-install: package-check sync-active-install: package-check $(PYTHON) scripts/sync_local_install.py --install-dir "$(ACTIVE_SKILL_INSTALL_DIR)" -test: eval eval-suite route-scorecard route-confusion-check description-optimization description-optimization-check promotion-check yao-cli-check skill-overview-check skill-report-metrics-check skill-report-charts-check skill-ir-check compiler-check output-eval-check output-execution-check output-review-adjudication-check runtime-conformance-check runtime-permission-check trust-check skill-atlas-check registry-audit-check package-verify-check install-simulation-check upgrade-check review-viewer-check review-studio-check feedback-check adoption-drift-check review-waivers-check review-annotations-check baseline-compare-check reference-scan-check github-benchmark-scan-check intent-confidence-check reference-synthesis-check output-risk-profile-check artifact-design-profile-check prompt-quality-profile-check system-model-check iteration-directions-check description-drift-history iteration-ledger regression-history context-reports portability-report portability-check failure-regression-check package-check package-failure-check security-boundary-check local-install-sync-check snapshot-check validate lint governance-check resource-boundary-check quality-check +test: eval eval-suite route-scorecard route-confusion-check description-optimization description-optimization-check promotion-check yao-cli-check skill-overview-check skill-report-metrics-check skill-report-charts-check skill-ir-check compiler-check output-eval-check output-execution-check output-review-adjudication-check runtime-conformance-check runtime-permission-check trust-check skill-atlas-check registry-audit-check package-verify-check install-simulation-check upgrade-check review-viewer-check review-studio-check feedback-check adoption-drift-check telemetry-import-check review-waivers-check review-annotations-check baseline-compare-check reference-scan-check github-benchmark-scan-check intent-confidence-check reference-synthesis-check output-risk-profile-check artifact-design-profile-check prompt-quality-profile-check system-model-check iteration-directions-check description-drift-history iteration-ledger regression-history context-reports portability-report portability-check failure-regression-check package-check package-failure-check security-boundary-check local-install-sync-check snapshot-check validate lint governance-check resource-boundary-check quality-check ci-test: $(PYTHON) scripts/ci_test.py clean: - rm -rf dist tests/tmp tests/tmp_snapshot tests/tmp_cli tests/tmp_skill_overview tests/tmp_skill_report_metrics tests/tmp_skill_report_charts tests/tmp_skill_ir tests/tmp_compile_skill tests/tmp_output_eval tests/tmp_output_execution tests/tmp_output_review_adjudication tests/tmp_conformance tests/tmp_runtime_permission tests/tmp_trust tests/tmp_skill_atlas tests/tmp_registry tests/tmp_package_verification tests/tmp_install_simulation tests/tmp_upgrade_check tests/tmp_reference_scan tests/tmp_iteration_directions tests/tmp_review_viewer tests/tmp_review_studio tests/tmp_feedback tests/tmp_adoption_drift tests/tmp_review_waivers tests/tmp_review_annotations tests/tmp_github_benchmark_scan tests/tmp_intent_confidence tests/tmp_reference_synthesis tests/tmp_output_risk_profile tests/tmp_artifact_design_profile tests/tmp_prompt_quality_profile tests/tmp_system_model tests/tmp_security tests/tmp_baseline_compare.json tests/tmp_baseline_compare.md + rm -rf dist tests/tmp tests/tmp_snapshot tests/tmp_cli tests/tmp_skill_overview tests/tmp_skill_report_metrics tests/tmp_skill_report_charts tests/tmp_skill_ir tests/tmp_compile_skill tests/tmp_output_eval tests/tmp_output_execution tests/tmp_output_review_adjudication tests/tmp_conformance tests/tmp_runtime_permission tests/tmp_trust tests/tmp_skill_atlas tests/tmp_registry tests/tmp_package_verification tests/tmp_install_simulation tests/tmp_upgrade_check tests/tmp_reference_scan tests/tmp_iteration_directions tests/tmp_review_viewer tests/tmp_review_studio tests/tmp_feedback tests/tmp_adoption_drift tests/tmp_telemetry_import tests/tmp_review_waivers tests/tmp_review_annotations tests/tmp_github_benchmark_scan tests/tmp_intent_confidence tests/tmp_reference_synthesis tests/tmp_output_risk_profile tests/tmp_artifact_design_profile tests/tmp_prompt_quality_profile tests/tmp_system_model tests/tmp_security tests/tmp_baseline_compare.json tests/tmp_baseline_compare.md find . -type d -name __pycache__ -prune -exec rm -rf {} + diff --git a/README.md b/README.md index 426cf05..5bdde0a 100644 --- a/README.md +++ b/README.md @@ -31,7 +31,7 @@ It turns rough workflows, transcripts, prompts, notes, and runbooks into reusabl - a systems-thinking model that maps boundaries, feedback loops, drift risks, recurring failure patterns, and highest-leverage quality moves - three high-value next iteration directions after the first package is created - a lightweight feedback log that does not require a full promotion cycle -- a local-first metadata-only adoption and drift report that turns real usage signals into next iteration candidates, with optional `yao.py` CLI run capture that records command names and outcomes without arguments or raw content +- a local-first metadata-only adoption and drift report that turns real usage signals into next iteration candidates, with optional `yao.py` CLI run capture and external client JSONL import that record command names and outcomes without arguments or raw content - a Skill Atlas drift layer that reads aggregate adoption reports and surfaces portfolio-level drift signals without packaging raw telemetry logs - a baseline compare report for with-skill vs baseline review - a conversation-style, archetype-aware quickstart that steers new packages toward scaffold, production, library, or governed fits @@ -109,6 +109,7 @@ python3 scripts/yao.py system-model my-skill python3 scripts/yao.py feedback my-skill --note "Tighten exclusions before adding scripts." --rating 4 --category boundary python3 scripts/yao.py adoption-drift my-skill --record-event skill_activation --activation-type explicit --outcome accepted YAO_CLI_TELEMETRY=1 python3 scripts/yao.py validate my-skill +python3 scripts/yao.py telemetry-import my-skill --input-jsonl /tmp/external-client-events.jsonl --command browser-extension python3 scripts/yao.py review-waivers my-skill --add-waiver --gate-key trust-report --reviewer "Yao Team" --reason "Known warning accepted for this release with bounded follow-up." --expires-at 2026-09-30 python3 scripts/yao.py review-waivers my-skill --add-waiver --gate-key permission-gates --reviewer "Yao Team" --reason "Permission warning accepted only for this non-governed release window." --expires-at 2026-09-30 python3 scripts/yao.py review-annotations my-skill --add-annotation --gate-key output-lab --target-path reports/output_quality_scorecard.md --line 1 --body "Clarify recorded fixture vs model-executed evidence before release." @@ -414,6 +415,7 @@ Utility scripts that make the meta-skill operational: - `simulate_install.py`: extracts a generated zip into a temporary skill root and verifies entrypoint, manifest, interface, reports, and adapters can be loaded - `upgrade_check.py`: compares current and previous registry package metadata, recommends a version bump, and blocks incompatible upgrade claims - `render_adoption_drift_report.py`: records metadata-only local telemetry and renders adoption, missed-trigger, bad-output, script-error, and review-drift signals without packaging raw event logs +- `import_telemetry_events.py`: imports external metadata-only telemetry JSONL after whole-file privacy validation, then refreshes the aggregate adoption drift report - `yao_cli_telemetry.py`: opt-in metadata-only `yao.py` run capture for command name, source, outcome, and failure class without command arguments or raw content - `render_review_waivers.py`: validates human reviewer risk approvals with gate keys, reasons, expiry dates, and blocker-safe waiver policy - `init_skill.py`, `lint_skill.py`, `validate_skill.py`, `diff_eval.py`: minimal authoring toolchain diff --git a/references/telemetry-drift-method.md b/references/telemetry-drift-method.md index 14caaff..6e443c0 100644 --- a/references/telemetry-drift-method.md +++ b/references/telemetry-drift-method.md @@ -61,6 +61,24 @@ python3 scripts/yao.py --no-cli-telemetry validate . Successful CLI runs record `event=script_run`, `source=yao_cli`, `outcome=accepted`, and `failure_type=none`. Failed CLI runs record `outcome=failed` and `failure_type=script_error`. The command name is normalized to the subcommand only; command arguments are never recorded. +## External Client Import + +External clients, browser extensions, editor adapters, or wrapper scripts may hand off already-sanitized JSONL through `telemetry-import`: + +```bash +python3 scripts/yao.py telemetry-import . \ + --input-jsonl /tmp/external-client-events.jsonl \ + --command browser-extension +``` + +The importer defaults missing `source` to `external` and missing `command` to `external-client`. It validates the entire JSONL file before writing anything. If any line includes a raw content field, unsupported source, unsupported outcome, unsupported failure type, unknown field, malformed JSON, or an unsafe command name, the whole import is rejected and the existing local event stream is left untouched. + +Use `--dry-run` to validate an external batch without writing `reports/telemetry_events.jsonl` or refreshing aggregate reports: + +```bash +python3 scripts/yao.py telemetry-import . --input-jsonl /tmp/external-client-events.jsonl --dry-run +``` + ## Privacy Rule The raw JSONL event log is local evidence and should not be distributed in skill packages. The distributable artifact is the aggregate report: @@ -79,7 +97,7 @@ Package builders should exclude `reports/telemetry_events.jsonl`. The root repos ## Iteration Loop -1. Capture metadata-only events locally, either manually with `adoption-drift --record-event` or automatically with opt-in `yao.py` CLI capture. +1. Capture metadata-only events locally, either manually with `adoption-drift --record-event`, automatically with opt-in `yao.py` CLI capture, or through validated external JSONL import. 2. Render `reports/adoption_drift_report.md`. 3. Convert missed triggers into trigger eval cases. 4. Convert bad outputs into Output Eval assertions and failure taxonomy entries. diff --git a/registry/index.json b/registry/index.json index 653004b..5807dff 100644 --- a/registry/index.json +++ b/registry/index.json @@ -16,7 +16,7 @@ "vscode" ], "package_metadata": "registry/packages/yao-meta-skill.json", - "package_sha256": "495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2" + "package_sha256": "57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9" } ] } diff --git a/registry/packages/yao-meta-skill.json b/registry/packages/yao-meta-skill.json index 8537a80..6efeb49 100644 --- a/registry/packages/yao-meta-skill.json +++ b/registry/packages/yao-meta-skill.json @@ -16,8 +16,8 @@ "trust_level": "local", "license": "MIT", "checksums": { - "package_sha256": "495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2", - "archive_sha256": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474" + "package_sha256": "57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9", + "archive_sha256": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c" }, "compatibility": { "openai": "pass", @@ -48,7 +48,7 @@ }, "distribution": { "archive_verified": true, - "archive_sha256": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474", + "archive_sha256": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c", "package_verification": "reports/package_verification.json", "install_simulated": true, "install_simulation": "reports/install_simulation.json" diff --git a/reports/adoption_drift_report.json b/reports/adoption_drift_report.json index 269794a..49f9988 100644 --- a/reports/adoption_drift_report.json +++ b/reports/adoption_drift_report.json @@ -1,7 +1,7 @@ { "ok": true, "schema_version": "2.0", - "generated_at": "2026-06-13T13:30:00Z", + "generated_at": "2026-06-13T13:45:00Z", "skill_dir": ".", "privacy_contract": { "storage": "local-first", diff --git a/reports/compiled_targets.json b/reports/compiled_targets.json index e917ddc..11aa443 100644 --- a/reports/compiled_targets.json +++ b/reports/compiled_targets.json @@ -159,6 +159,7 @@ "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", "scripts/governance_check.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/judge_blind_eval.py", "scripts/lint_skill.py", @@ -265,7 +266,7 @@ ], "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 } @@ -371,7 +372,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -384,6 +385,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -456,14 +458,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -485,7 +487,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -506,7 +508,7 @@ "strategy": "Ship the neutral source tree and expose OpenAI-facing interface metadata as a generated companion file.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -517,7 +519,7 @@ }, "scripts": { "strategy": "Keep scripts as local package resources; expose help-smoke and permission metadata for reviewer approval before execution.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -598,7 +600,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -611,6 +613,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -683,14 +686,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -710,7 +713,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -731,7 +734,7 @@ "strategy": "Ship the neutral source tree and expose OpenAI-facing interface metadata as a generated companion file.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -742,7 +745,7 @@ }, "scripts": { "strategy": "Keep scripts as local package resources; expose help-smoke and permission metadata for reviewer approval before execution.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -958,6 +961,7 @@ "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", "scripts/governance_check.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/judge_blind_eval.py", "scripts/lint_skill.py", @@ -1064,7 +1068,7 @@ ], "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 } @@ -1170,7 +1174,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -1183,6 +1187,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -1255,14 +1260,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -1284,7 +1289,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -1305,7 +1310,7 @@ "strategy": "Preserve the source tree directly; write target notes in targets/claude/README.md.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -1316,7 +1321,7 @@ }, "scripts": { "strategy": "Scripts remain local package resources and must be reviewed through trust and permission reports before use.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -1397,7 +1402,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -1410,6 +1415,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -1482,14 +1488,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -1509,7 +1515,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -1530,7 +1536,7 @@ "strategy": "Preserve the source tree directly; write target notes in targets/claude/README.md.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -1541,7 +1547,7 @@ }, "scripts": { "strategy": "Scripts remain local package resources and must be reviewed through trust and permission reports before use.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -1757,6 +1763,7 @@ "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", "scripts/governance_check.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/judge_blind_eval.py", "scripts/lint_skill.py", @@ -1863,7 +1870,7 @@ ], "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 } @@ -1969,7 +1976,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -1982,6 +1989,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -2054,14 +2062,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -2083,7 +2091,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -2104,7 +2112,7 @@ "strategy": "Preserve references, scripts, assets, evals, reports, and adapter metadata as relative package resources.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -2114,7 +2122,7 @@ }, "scripts": { "strategy": "Expose script and permission metadata for downstream clients or installers to enforce.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -2189,7 +2197,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -2202,6 +2210,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -2274,14 +2283,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -2301,7 +2310,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -2322,7 +2331,7 @@ "strategy": "Preserve references, scripts, assets, evals, reports, and adapter metadata as relative package resources.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -2332,7 +2341,7 @@ }, "scripts": { "strategy": "Expose script and permission metadata for downstream clients or installers to enforce.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -2540,6 +2549,7 @@ "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", "scripts/governance_check.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/judge_blind_eval.py", "scripts/lint_skill.py", @@ -2646,7 +2656,7 @@ ], "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 } @@ -2752,7 +2762,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -2765,6 +2775,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -2837,14 +2848,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -2866,7 +2877,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -2887,7 +2898,7 @@ "strategy": "Keep optional directories as relative resources next to SKILL.md.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -2898,7 +2909,7 @@ }, "scripts": { "strategy": "Scripts remain local optional resources and should advertise --help when executable.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -2972,7 +2983,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -2985,6 +2996,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -3057,14 +3069,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -3084,7 +3096,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -3105,7 +3117,7 @@ "strategy": "Keep optional directories as relative resources next to SKILL.md.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -3116,7 +3128,7 @@ }, "scripts": { "strategy": "Scripts remain local optional resources and should advertise --help when executable.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -3323,6 +3335,7 @@ "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", "scripts/governance_check.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/judge_blind_eval.py", "scripts/lint_skill.py", @@ -3429,7 +3442,7 @@ ], "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 } @@ -3535,7 +3548,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -3548,6 +3561,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -3620,14 +3634,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -3649,7 +3663,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -3670,7 +3684,7 @@ "strategy": "Install as project or user scoped skill source, preserving relative references and scripts.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -3681,7 +3695,7 @@ }, "scripts": { "strategy": "Scripts require workspace trust and operator/client approval outside this compiler.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -3759,7 +3773,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -3772,6 +3786,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -3844,14 +3859,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -3871,7 +3886,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -3892,7 +3907,7 @@ "strategy": "Install as project or user scoped skill source, preserving relative references and scripts.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -3903,7 +3918,7 @@ }, "scripts": { "strategy": "Scripts require workspace trust and operator/client approval outside this compiler.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { diff --git a/reports/context_budget.json b/reports/context_budget.json index b068fe2..1e3f4cc 100644 --- a/reports/context_budget.json +++ b/reports/context_budget.json @@ -6,10 +6,10 @@ "context_budget_tier": "production", "context_budget_limit": 1000, "skill_body_tokens": 751, - "other_text_tokens": 917960, + "other_text_tokens": 922840, "estimated_initial_load_tokens": 944, - "estimated_total_text_tokens": 918711, - "relevant_file_count": 394, + "estimated_total_text_tokens": 923591, + "relevant_file_count": 398, "unused_resource_dirs": [], "quality_signal_points": 130, "quality_density": 137.7 diff --git a/reports/install_simulation.json b/reports/install_simulation.json index 6973bf8..e3685de 100644 --- a/reports/install_simulation.json +++ b/reports/install_simulation.json @@ -8,7 +8,7 @@ "installed_skill_dir": "dist/install-simulation/simulate-yao-meta-skill/yao-meta-skill", "summary": { "archive_present": true, - "archive_entry_count": 495, + "archive_entry_count": 497, "archive_extracted": true, "entrypoint_loaded": true, "manifest_loaded": true, diff --git a/reports/output_execution_runs.json b/reports/output_execution_runs.json index 78b3d8c..235b5e3 100644 --- a/reports/output_execution_runs.json +++ b/reports/output_execution_runs.json @@ -34,7 +34,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 31.15, + "duration_ms": 31.38, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -62,7 +62,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 31.4, + "duration_ms": 30.75, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -85,7 +85,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 33.61, + "duration_ms": 30.8, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -113,7 +113,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 33.86, + "duration_ms": 32.43, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -136,7 +136,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 33.02, + "duration_ms": 31.92, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -164,7 +164,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 31.39, + "duration_ms": 32.23, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -187,7 +187,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 30.77, + "duration_ms": 31.19, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -214,7 +214,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 32.92, + "duration_ms": 34.13, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -237,7 +237,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 29.09, + "duration_ms": 32.55, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -266,7 +266,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 27.95, + "duration_ms": 32.09, "provider": "local-output-eval-runner", "model": "", "usage": { diff --git a/reports/output_execution_runs.md b/reports/output_execution_runs.md index a4d9cd1..fb489a5 100644 --- a/reports/output_execution_runs.md +++ b/reports/output_execution_runs.md @@ -23,16 +23,16 @@ Command runner evidence is present. This proves the eval harness executed an ext | Case | Variant | Mode | Model | Duration ms | Tokens | Score | Status | | --- | --- | --- | --- | ---: | ---: | ---: | --- | -| skill-package-contract | baseline | command | local-output-eval-runner | 31.15 | 33 | 0.0 | pass | -| skill-package-contract | with_skill | command | local-output-eval-runner | 31.4 | 73 | 100.0 | pass | -| output-eval-expectation | baseline | command | local-output-eval-runner | 33.61 | 36 | 0.0 | pass | -| output-eval-expectation | with_skill | command | local-output-eval-runner | 33.86 | 80 | 100.0 | pass | -| ir-before-packaging | baseline | command | local-output-eval-runner | 33.02 | 33 | 0.0 | pass | -| ir-before-packaging | with_skill | command | local-output-eval-runner | 31.39 | 80 | 100.0 | pass | -| near-neighbor-boundary | baseline | command | local-output-eval-runner | 30.77 | 36 | 0.0 | pass | -| near-neighbor-boundary | with_skill | command | local-output-eval-runner | 32.92 | 65 | 100.0 | pass | -| file-backed-governed-package | baseline | command | local-output-eval-runner | 29.09 | 37 | 0.0 | pass | -| file-backed-governed-package | with_skill | command | local-output-eval-runner | 27.95 | 98 | 100.0 | pass | +| skill-package-contract | baseline | command | local-output-eval-runner | 31.38 | 33 | 0.0 | pass | +| skill-package-contract | with_skill | command | local-output-eval-runner | 30.75 | 73 | 100.0 | pass | +| output-eval-expectation | baseline | command | local-output-eval-runner | 30.8 | 36 | 0.0 | pass | +| output-eval-expectation | with_skill | command | local-output-eval-runner | 32.43 | 80 | 100.0 | pass | +| ir-before-packaging | baseline | command | local-output-eval-runner | 31.92 | 33 | 0.0 | pass | +| ir-before-packaging | with_skill | command | local-output-eval-runner | 32.23 | 80 | 100.0 | pass | +| near-neighbor-boundary | baseline | command | local-output-eval-runner | 31.19 | 36 | 0.0 | pass | +| near-neighbor-boundary | with_skill | command | local-output-eval-runner | 34.13 | 65 | 100.0 | pass | +| file-backed-governed-package | baseline | command | local-output-eval-runner | 32.55 | 37 | 0.0 | pass | +| file-backed-governed-package | with_skill | command | local-output-eval-runner | 32.09 | 98 | 100.0 | pass | ## Next Fixes diff --git a/reports/package_verification.json b/reports/package_verification.json index b390b49..34a4ba9 100644 --- a/reports/package_verification.json +++ b/reports/package_verification.json @@ -8,8 +8,8 @@ "target_count": 4, "adapter_count": 4, "archive_present": true, - "archive_sha256": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474", - "archive_entry_count": 495, + "archive_sha256": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c", + "archive_entry_count": 497, "failure_count": 0, "warning_count": 0 }, diff --git a/reports/package_verification.md b/reports/package_verification.md index 7178423..9e7c423 100644 --- a/reports/package_verification.md +++ b/reports/package_verification.md @@ -4,7 +4,7 @@ - Package directory: `dist` - Targets: `4 / 4` adapters present - Archive present: `True` -- Archive SHA256: `0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474` +- Archive SHA256: `7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c` - Failures: `0` - Warnings: `0` diff --git a/reports/registry_audit.json b/reports/registry_audit.json index 001d867..185a8a6 100644 --- a/reports/registry_audit.json +++ b/reports/registry_audit.json @@ -21,8 +21,8 @@ "trust_level": "local", "license": "MIT", "checksums": { - "package_sha256": "495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2", - "archive_sha256": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474" + "package_sha256": "57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9", + "archive_sha256": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c" }, "compatibility": { "openai": "pass", @@ -53,7 +53,7 @@ }, "distribution": { "archive_verified": true, - "archive_sha256": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474", + "archive_sha256": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c", "package_verification": "reports/package_verification.json", "install_simulated": true, "install_simulation": "reports/install_simulation.json" @@ -78,7 +78,7 @@ "vscode" ], "package_metadata": "registry/packages/yao-meta-skill.json", - "package_sha256": "495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2" + "package_sha256": "57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9" } ] }, diff --git a/reports/registry_audit.md b/reports/registry_audit.md index 98065b2..8658947 100644 --- a/reports/registry_audit.md +++ b/reports/registry_audit.md @@ -6,8 +6,8 @@ - Maturity: `governed` - Owner: `Yao Team` - License: `MIT` -- Package SHA256: `495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2` -- Archive SHA256: `0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474` +- Package SHA256: `57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9` +- Archive SHA256: `7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c` - Install simulated: `True` ## Compatibility diff --git a/reports/review-studio.html b/reports/review-studio.html index 2a86ed1..549ba4f 100644 --- a/reports/review-studio.html +++ b/reports/review-studio.html @@ -242,12 +242,12 @@

核心指标

-
Skill IR2.0.0

5 targets in platform-neutral contract

Compiler5/5

target contracts compiled from Skill IR

Output Delta100.0

5 cases; 1 file-backed

Exec Runs10

command 10; model 0; recorded 0

Blind A/B5

review pairs hide baseline vs with-skill labels

Review A/B0/5

adjudication decisions; pending 5

Runtime5/5

target conformance pass rate

Perm Probe4/4

0 native enforcement targets

Trust0

70 scripts scanned; secrets found

Atlas5

12 scanned skills; route collisions

Driftlow

1 metadata events; 0 missed triggers

Waivers0

0 gates covered; human risk decisions

Notes0/0

0 open blocker annotations

Registry1.1.0

5 targets; MIT license

Archivepass

495 zip entries; package verification

Installpass

4 adapters; 12 permissions enforced; 0 permission failures

Upgrademinor

declared minor; 0 breaking changes

+
Skill IR2.0.0

5 targets in platform-neutral contract

Compiler5/5

target contracts compiled from Skill IR

Output Delta100.0

5 cases; 1 file-backed

Exec Runs10

command 10; model 0; recorded 0

Blind A/B5

review pairs hide baseline vs with-skill labels

Review A/B0/5

adjudication decisions; pending 5

Runtime5/5

target conformance pass rate

Perm Probe4/4

0 native enforcement targets

Trust0

71 scripts scanned; secrets found

Atlas5

12 scanned skills; route collisions

Driftlow

1 metadata events; 0 missed triggers

Waivers0

0 gates covered; human risk decisions

Notes0/0

0 open blocker annotations

Registry1.1.0

5 targets; MIT license

Archivepass

497 zip entries; package verification

Installpass

4 adapters; 12 permissions enforced; 0 permission failures

Upgrademinor

declared minor; 0 breaking changes

审查闸门

-
通过

意图画布

intent confidence 100/100; Intent is clear enough to package the first routeable version.

reports/intent-confidence.json 证据
通过

触发实验

13 trigger cases; 0 misroutes; 0 ambiguous

reports/route_scorecard.json 证据
关注

输出实验

5/5 cases; with-skill 100.0; baseline 0.0; file-backed 1; near-neighbor 1; blind A/B 5; exec 10; command 10; model 0; recorded 0; reviewed 0/5; review pending 5

reports/output_quality_scorecard.json 证据
通过

上下文

initial load 944/1000; quality density 137.7

reports/context_budget.json 证据
通过

运行矩阵

5 / 5 targets pass

reports/conformance_matrix.json 证据
通过

信任报告

0 secrets; 70 scripts; 3 network-capable scripts; 0 help smoke failures

reports/security_trust_report.json 证据
通过

权限批准

3/3 permissions approved; gaps 0; required file_write, network, subprocess

reports/security_trust_report.json + security/permission_policy.json 证据
通过

权限探针

4/4 targets probed; native 0; metadata fallback 4; residual risks 4

reports/runtime_permission_probes.json 证据
通过

组合治理

12 skills, 1 actionable; 0 actionable route collisions; 0 actionable owner gaps; 0 actionable stale; 0 actionable drift; 24 scoped non-actionable issues

reports/skill_atlas.json 证据
通过

运营回路

1 metadata events; adoption 0; missed 0; bad-output 0; risk low

reports/adoption_drift_report.json 证据
关注

人工批准

0 active waivers; 1 warning gates still need reviewer decision

reports/review_waivers.json 证据
通过

注册审计

yao-meta-skill 1.1.0; 6/6 compatibility entries pass; install pass with 4 adapters; installer permissions 12 enforced / 0 failures

reports/registry_audit.json + reports/install_simulation.json 证据
通过

发布路线

0 promote; 3 keep current; 0 blocked; upgrade minor declared / minor recommended

reports/promotion_decisions.json + reports/upgrade_check.json + docs/migration-v2.md 证据
+
通过

意图画布

intent confidence 100/100; Intent is clear enough to package the first routeable version.

reports/intent-confidence.json 证据
通过

触发实验

13 trigger cases; 0 misroutes; 0 ambiguous

reports/route_scorecard.json 证据
关注

输出实验

5/5 cases; with-skill 100.0; baseline 0.0; file-backed 1; near-neighbor 1; blind A/B 5; exec 10; command 10; model 0; recorded 0; reviewed 0/5; review pending 5

reports/output_quality_scorecard.json 证据
通过

上下文

initial load 944/1000; quality density 137.7

reports/context_budget.json 证据
通过

运行矩阵

5 / 5 targets pass

reports/conformance_matrix.json 证据
通过

信任报告

0 secrets; 71 scripts; 3 network-capable scripts; 0 help smoke failures

reports/security_trust_report.json 证据
通过

权限批准

3/3 permissions approved; gaps 0; required file_write, network, subprocess

reports/security_trust_report.json + security/permission_policy.json 证据
通过

权限探针

4/4 targets probed; native 0; metadata fallback 4; residual risks 4

reports/runtime_permission_probes.json 证据
通过

组合治理

12 skills, 1 actionable; 0 actionable route collisions; 0 actionable owner gaps; 0 actionable stale; 0 actionable drift; 24 scoped non-actionable issues

reports/skill_atlas.json 证据
通过

运营回路

1 metadata events; adoption 0; missed 0; bad-output 0; risk low

reports/adoption_drift_report.json 证据
关注

人工批准

0 active waivers; 1 warning gates still need reviewer decision

reports/review_waivers.json 证据
通过

注册审计

yao-meta-skill 1.1.0; 6/6 compatibility entries pass; install pass with 4 adapters; installer permissions 12 enforced / 0 failures

reports/registry_audit.json + reports/install_simulation.json 证据
通过

发布路线

0 promote; 3 keep current; 0 blocked; upgrade minor declared / minor recommended

@@ -313,7 +313,7 @@
-

信任报告

Secret
0
脚本数
70
网络脚本
3
Help 失败
0
包体哈希
495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2
+

信任报告

Secret
0
脚本数
71
网络脚本
3
Help 失败
0
包体哈希
57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9

安全边界

高风险 secret、远程 inline execution、缺失依赖策略或无法解释的脚本接口应阻断 governed release。

@@ -344,12 +344,12 @@

注册审计

yao-meta-skill 1.1.0; 6/6 compatibility entries pass; install pass with 4 adapters; installer permissions 12 enforced / 0 failures

-

包体元数据

名称
yao-meta-skill
版本
1.1.0
Maturity
governed
Owner
Yao Team
License
MIT
信任级别
local
目标平台
openai, claude, generic, agent-skills-compatible, vscode
兼容通过
6/6
归档哈希
0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474
+

包体元数据

名称
yao-meta-skill
版本
1.1.0
Maturity
governed
Owner
Yao Team
License
MIT
信任级别
local
目标平台
openai, claude, generic, agent-skills-compatible, vscode
兼容通过
6/6
归档哈希
7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c

发布路线

0 promote; 3 keep current; 0 blocked; upgrade minor declared / minor recommended

-

包体验证

目标数
4
Adapter
4
归档存在
是
Zip 条目
495
失败数
0
警告数
0
归档哈希
0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474
+

包体验证

目标数
4
Adapter
4
归档存在
是
Zip 条目
497
失败数
0
警告数
0
归档哈希
7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c
diff --git a/reports/review-studio.json b/reports/review-studio.json index 0e0b726..c69c2d3 100644 --- a/reports/review-studio.json +++ b/reports/review-studio.json @@ -59,7 +59,7 @@ "key": "trust-report", "label": "信任报告", "status": "pass", - "detail": "0 secrets; 70 scripts; 3 network-capable scripts; 0 help smoke failures", + "detail": "0 secrets; 71 scripts; 3 network-capable scripts; 0 help smoke failures", "evidence": "reports/security_trust_report.json", "link": "security_trust_report.md" }, @@ -355,7 +355,7 @@ "label": "上下文成本", "score": 42, "reasons": [ - "入口约 350 个词/字，references 约 14859 个词/字。", + "入口约 350 个词/字，references 约 14978 个词/字。", "分数越高代表上下文成本越低。", "上下文成本偏高，建议压缩入口或拆分 references。" ] @@ -459,7 +459,7 @@ "已生成 Output Review Adjudication，可记录盲评决策、一致率和待评审项。" ], "gaps": [ - "上下文成本需要补强：入口约 350 个词/字，references 约 14859 个词/字。" + "上下文成本需要补强：入口约 350 个词/字，references 约 14978 个词/字。" ], "recommendations": [ "先改触发边界，再扩展工作流。", @@ -692,7 +692,7 @@ "path": "scripts", "label": "Deterministic helpers or local tooling", "kind": "folder", - "file_count": 70 + "file_count": 71 }, { "path": "evals", @@ -707,7 +707,7 @@ "file_count": 171 } ], - "file_count": 305, + "file_count": 306, "folder_count": 4, "distribution": [ { @@ -732,7 +732,7 @@ }, { "label": "scripts", - "value": 70 + "value": 71 }, { "label": "evals", @@ -861,7 +861,7 @@ "path": "scripts", "label": "Deterministic helpers or local tooling", "kind": "folder", - "file_count": 70 + "file_count": 71 }, { "path": "evals", @@ -1207,8 +1207,8 @@ "failures": [] }, "trust_security": { - "scanned_files": 154, - "script_count": 70, + "scanned_files": 155, + "script_count": 71, "internal_module_count": 10, "secret_findings": 0, "dependency_files": [ @@ -1217,18 +1217,18 @@ "network_script_count": 3, "network_policy_covered_count": 3, "network_policy_missing_count": 0, - "file_write_script_count": 47, + "file_write_script_count": 48, "permission_required_count": 3, "permission_approved_count": 3, "permission_missing_count": 0, "permission_invalid_count": 0, "permission_expired_count": 0, - "help_smoke_checked_count": 60, + "help_smoke_checked_count": 61, "help_smoke_failed_count": 0, "interactive_script_count": 0, "package_hash_scope": "source-contract-without-generated-reports", - "package_hash_file_count": 154, - "package_sha256": "495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2" + "package_hash_file_count": 155, + "package_sha256": "57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9" }, "skill_atlas": { "skill_count": 12, @@ -1266,8 +1266,8 @@ "trust_level": "local", "license": "MIT", "checksums": { - "package_sha256": "495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2", - "archive_sha256": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474" + "package_sha256": "57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9", + "archive_sha256": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c" }, "compatibility": { "openai": "pass", @@ -1298,7 +1298,7 @@ }, "distribution": { "archive_verified": true, - "archive_sha256": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474", + "archive_sha256": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c", "package_verification": "reports/package_verification.json", "install_simulated": true, "install_simulation": "reports/install_simulation.json" @@ -1314,8 +1314,8 @@ "target_count": 4, "adapter_count": 4, "archive_present": true, - "archive_sha256": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474", - "archive_entry_count": 495, + "archive_sha256": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c", + "archive_entry_count": 497, "failure_count": 0, "warning_count": 0 }, @@ -1326,7 +1326,7 @@ "ok": true, "summary": { "archive_present": true, - "archive_entry_count": 495, + "archive_entry_count": 497, "archive_extracted": true, "entrypoint_loaded": true, "manifest_loaded": true, @@ -1393,12 +1393,12 @@ { "field": "archive_sha256", "from": "", - "to": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474" + "to": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c" }, { "field": "package_sha256", "from": "0000000000000000000000000000000000000000000000000000000000000000", - "to": "495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2" + "to": "57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9" } ] }, @@ -3132,7 +3132,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 31.15, + "duration_ms": 31.38, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -3160,7 +3160,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 31.4, + "duration_ms": 30.75, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -3183,7 +3183,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 33.61, + "duration_ms": 30.8, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -3211,7 +3211,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 33.86, + "duration_ms": 32.43, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -3234,7 +3234,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 33.02, + "duration_ms": 31.92, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -3262,7 +3262,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 31.39, + "duration_ms": 32.23, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -3285,7 +3285,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 30.77, + "duration_ms": 31.19, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -3312,7 +3312,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 32.92, + "duration_ms": 34.13, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -3335,7 +3335,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 29.09, + "duration_ms": 32.55, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -3364,7 +3364,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 27.95, + "duration_ms": 32.09, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -3832,6 +3832,7 @@ "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", "scripts/governance_check.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/judge_blind_eval.py", "scripts/lint_skill.py", @@ -3938,7 +3939,7 @@ ], "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 } @@ -4044,7 +4045,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -4057,6 +4058,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -4129,14 +4131,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -4158,7 +4160,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -4179,7 +4181,7 @@ "strategy": "Ship the neutral source tree and expose OpenAI-facing interface metadata as a generated companion file.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -4190,7 +4192,7 @@ }, "scripts": { "strategy": "Keep scripts as local package resources; expose help-smoke and permission metadata for reviewer approval before execution.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -4271,7 +4273,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -4284,6 +4286,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -4356,14 +4359,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -4383,7 +4386,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -4404,7 +4407,7 @@ "strategy": "Ship the neutral source tree and expose OpenAI-facing interface metadata as a generated companion file.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -4415,7 +4418,7 @@ }, "scripts": { "strategy": "Keep scripts as local package resources; expose help-smoke and permission metadata for reviewer approval before execution.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -4631,6 +4634,7 @@ "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", "scripts/governance_check.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/judge_blind_eval.py", "scripts/lint_skill.py", @@ -4737,7 +4741,7 @@ ], "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 } @@ -4843,7 +4847,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -4856,6 +4860,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -4928,14 +4933,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -4957,7 +4962,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -4978,7 +4983,7 @@ "strategy": "Preserve the source tree directly; write target notes in targets/claude/README.md.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -4989,7 +4994,7 @@ }, "scripts": { "strategy": "Scripts remain local package resources and must be reviewed through trust and permission reports before use.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -5070,7 +5075,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -5083,6 +5088,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -5155,14 +5161,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -5182,7 +5188,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -5203,7 +5209,7 @@ "strategy": "Preserve the source tree directly; write target notes in targets/claude/README.md.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -5214,7 +5220,7 @@ }, "scripts": { "strategy": "Scripts remain local package resources and must be reviewed through trust and permission reports before use.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -5430,6 +5436,7 @@ "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", "scripts/governance_check.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/judge_blind_eval.py", "scripts/lint_skill.py", @@ -5536,7 +5543,7 @@ ], "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 } @@ -5642,7 +5649,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -5655,6 +5662,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -5727,14 +5735,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -5756,7 +5764,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -5777,7 +5785,7 @@ "strategy": "Preserve references, scripts, assets, evals, reports, and adapter metadata as relative package resources.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -5787,7 +5795,7 @@ }, "scripts": { "strategy": "Expose script and permission metadata for downstream clients or installers to enforce.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -5862,7 +5870,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -5875,6 +5883,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -5947,14 +5956,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -5974,7 +5983,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -5995,7 +6004,7 @@ "strategy": "Preserve references, scripts, assets, evals, reports, and adapter metadata as relative package resources.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -6005,7 +6014,7 @@ }, "scripts": { "strategy": "Expose script and permission metadata for downstream clients or installers to enforce.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -6213,6 +6222,7 @@ "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", "scripts/governance_check.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/judge_blind_eval.py", "scripts/lint_skill.py", @@ -6319,7 +6329,7 @@ ], "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 } @@ -6425,7 +6435,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -6438,6 +6448,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -6510,14 +6521,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -6539,7 +6550,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -6560,7 +6571,7 @@ "strategy": "Keep optional directories as relative resources next to SKILL.md.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -6571,7 +6582,7 @@ }, "scripts": { "strategy": "Scripts remain local optional resources and should advertise --help when executable.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -6645,7 +6656,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -6658,6 +6669,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -6730,14 +6742,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -6757,7 +6769,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -6778,7 +6790,7 @@ "strategy": "Keep optional directories as relative resources next to SKILL.md.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -6789,7 +6801,7 @@ }, "scripts": { "strategy": "Scripts remain local optional resources and should advertise --help when executable.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -6996,6 +7008,7 @@ "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", "scripts/governance_check.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/judge_blind_eval.py", "scripts/lint_skill.py", @@ -7102,7 +7115,7 @@ ], "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 } @@ -7208,7 +7221,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -7221,6 +7234,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -7293,14 +7307,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -7322,7 +7336,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -7343,7 +7357,7 @@ "strategy": "Install as project or user scoped skill source, preserving relative references and scripts.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -7354,7 +7368,7 @@ }, "scripts": { "strategy": "Scripts require workspace trust and operator/client approval outside this compiler.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -7432,7 +7446,7 @@ }, "file_write": { "required": true, - "script_count": 47, + "script_count": 48, "scripts": [ "scripts/adjudicate_output_review.py", "scripts/build_confusion_matrix.py", @@ -7445,6 +7459,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -7517,14 +7532,14 @@ }, "help_smoke": { "enabled": true, - "checked_count": 60, + "checked_count": 61, "failed_count": 0, "failed_scripts": [] }, "trust_summary": { "secret_findings": 0, "network_script_count": 3, - "file_write_script_count": 47, + "file_write_script_count": 48, "subprocess_script_count": 7, "interactive_script_count": 0, "help_smoke_failed_count": 0 @@ -7544,7 +7559,7 @@ ], "capability_counts": { "network": 3, - "file_write": 47, + "file_write": 48, "subprocess": 7, "interactive": 0 }, @@ -7565,7 +7580,7 @@ "strategy": "Install as project or user scoped skill source, preserving relative references and scripts.", "counts": { "references": 32, - "scripts": 70, + "scripts": 71, "assets": 2, "reports": 41 }, @@ -7576,7 +7591,7 @@ }, "scripts": { "strategy": "Scripts require workspace trust and operator/client approval outside this compiler.", - "script_count": 70, + "script_count": 71, "help_smoke_failed_count": 0 }, "permissions": { @@ -8216,8 +8231,8 @@ "ok": true, "skill_dir": ".", "summary": { - "scanned_files": 154, - "script_count": 70, + "scanned_files": 155, + "script_count": 71, "internal_module_count": 10, "secret_findings": 0, "dependency_files": [ @@ -8226,18 +8241,18 @@ "network_script_count": 3, "network_policy_covered_count": 3, "network_policy_missing_count": 0, - "file_write_script_count": 47, + "file_write_script_count": 48, "permission_required_count": 3, "permission_approved_count": 3, "permission_missing_count": 0, "permission_invalid_count": 0, "permission_expired_count": 0, - "help_smoke_checked_count": 60, + "help_smoke_checked_count": 61, "help_smoke_failed_count": 0, "interactive_script_count": 0, "package_hash_scope": "source-contract-without-generated-reports", - "package_hash_file_count": 154, - "package_sha256": "495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2" + "package_hash_file_count": 155, + "package_sha256": "57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9" }, "failures": [], "warnings": [], @@ -8448,6 +8463,20 @@ "network_urls": [], "network_hosts": [] }, + { + "path": "scripts/import_telemetry_events.py", + "interface": "cli", + "interface_declared": false, + "interface_reason": "Default CLI classification; add SCRIPT_INTERFACE for internal modules.", + "has_argparse": true, + "has_main_guard": true, + "uses_input": false, + "uses_network": false, + "uses_file_write": true, + "uses_subprocess": false, + "network_urls": [], + "network_hosts": [] + }, { "path": "scripts/init_skill.py", "interface": "cli", @@ -9271,9 +9300,9 @@ "help_smoke": { "enabled": true, "timeout_seconds": 5.0, - "candidate_count": 60, - "checked_count": 60, - "passed_count": 60, + "candidate_count": 61, + "checked_count": 61, + "passed_count": 61, "failed_count": 0, "skipped_count": 10, "failed_scripts": [], @@ -9418,6 +9447,16 @@ "stdout_excerpt": "usage: governance_check.py [-h] [--require-manifest] skill_dir\n\nCheck skill governance metadata and lifecycle readiness.\n\npositional arguments:\n skill_dir\n\noptions:\n -h, --help show this help message and exit\n --require-manifest", "stderr_excerpt": "" }, + { + "path": "scripts/import_telemetry_events.py", + "command": "python3 scripts/import_telemetry_events.py --help", + "returncode": 0, + "timed_out": false, + "passed": true, + "has_help_text": true, + "stdout_excerpt": "usage: import_telemetry_events.py [-h] --input-jsonl INPUT_JSONL\n [--events-jsonl EVENTS_JSONL]\n [--output-json OUTPUT_JSON]\n [--output-md OU", + "stderr_excerpt": "" + }, { "path": "scripts/init_skill.py", "command": "python3 scripts/init_skill.py --help", @@ -9985,6 +10024,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", @@ -10087,10 +10127,10 @@ "context_budget_tier": "production", "context_budget_limit": 1000, "skill_body_tokens": 751, - "other_text_tokens": 917960, + "other_text_tokens": 922840, "estimated_initial_load_tokens": 944, - "estimated_total_text_tokens": 918711, - "relevant_file_count": 394, + "estimated_total_text_tokens": 923591, + "relevant_file_count": 398, "unused_resource_dirs": [], "quality_signal_points": 130, "quality_density": 137.7 @@ -10968,6 +11008,7 @@ "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", "scripts/governance_check.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/judge_blind_eval.py", "scripts/lint_skill.py", @@ -11919,7 +11960,7 @@ "adoption_drift": { "ok": true, "schema_version": "2.0", - "generated_at": "2026-06-13T13:30:00Z", + "generated_at": "2026-06-13T13:45:00Z", "skill_dir": ".", "privacy_contract": { "storage": "local-first", @@ -12087,8 +12128,8 @@ "trust_level": "local", "license": "MIT", "checksums": { - "package_sha256": "495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2", - "archive_sha256": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474" + "package_sha256": "57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9", + "archive_sha256": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c" }, "compatibility": { "openai": "pass", @@ -12119,7 +12160,7 @@ }, "distribution": { "archive_verified": true, - "archive_sha256": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474", + "archive_sha256": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c", "package_verification": "reports/package_verification.json", "install_simulated": true, "install_simulation": "reports/install_simulation.json" @@ -12144,7 +12185,7 @@ "vscode" ], "package_metadata": "registry/packages/yao-meta-skill.json", - "package_sha256": "495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2" + "package_sha256": "57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9" } ] }, @@ -12167,8 +12208,8 @@ "target_count": 4, "adapter_count": 4, "archive_present": true, - "archive_sha256": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474", - "archive_entry_count": 495, + "archive_sha256": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c", + "archive_entry_count": 497, "failure_count": 0, "warning_count": 0 }, @@ -12833,7 +12874,7 @@ "installed_skill_dir": "dist/install-simulation/simulate-yao-meta-skill/yao-meta-skill", "summary": { "archive_present": true, - "archive_entry_count": 495, + "archive_entry_count": 497, "archive_extracted": true, "entrypoint_loaded": true, "manifest_loaded": true, @@ -13175,12 +13216,12 @@ { "field": "archive_sha256", "from": "", - "to": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474" + "to": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c" }, { "field": "package_sha256", "from": "0000000000000000000000000000000000000000000000000000000000000000", - "to": "495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2" + "to": "57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9" } ] }, diff --git a/reports/security_trust_report.json b/reports/security_trust_report.json index 3d7d373..e719ebc 100644 --- a/reports/security_trust_report.json +++ b/reports/security_trust_report.json @@ -2,8 +2,8 @@ "ok": true, "skill_dir": ".", "summary": { - "scanned_files": 154, - "script_count": 70, + "scanned_files": 155, + "script_count": 71, "internal_module_count": 10, "secret_findings": 0, "dependency_files": [ @@ -12,18 +12,18 @@ "network_script_count": 3, "network_policy_covered_count": 3, "network_policy_missing_count": 0, - "file_write_script_count": 47, + "file_write_script_count": 48, "permission_required_count": 3, "permission_approved_count": 3, "permission_missing_count": 0, "permission_invalid_count": 0, "permission_expired_count": 0, - "help_smoke_checked_count": 60, + "help_smoke_checked_count": 61, "help_smoke_failed_count": 0, "interactive_script_count": 0, "package_hash_scope": "source-contract-without-generated-reports", - "package_hash_file_count": 154, - "package_sha256": "495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2" + "package_hash_file_count": 155, + "package_sha256": "57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9" }, "failures": [], "warnings": [], @@ -234,6 +234,20 @@ "network_urls": [], "network_hosts": [] }, + { + "path": "scripts/import_telemetry_events.py", + "interface": "cli", + "interface_declared": false, + "interface_reason": "Default CLI classification; add SCRIPT_INTERFACE for internal modules.", + "has_argparse": true, + "has_main_guard": true, + "uses_input": false, + "uses_network": false, + "uses_file_write": true, + "uses_subprocess": false, + "network_urls": [], + "network_hosts": [] + }, { "path": "scripts/init_skill.py", "interface": "cli", @@ -1057,9 +1071,9 @@ "help_smoke": { "enabled": true, "timeout_seconds": 5.0, - "candidate_count": 60, - "checked_count": 60, - "passed_count": 60, + "candidate_count": 61, + "checked_count": 61, + "passed_count": 61, "failed_count": 0, "skipped_count": 10, "failed_scripts": [], @@ -1204,6 +1218,16 @@ "stdout_excerpt": "usage: governance_check.py [-h] [--require-manifest] skill_dir\n\nCheck skill governance metadata and lifecycle readiness.\n\npositional arguments:\n skill_dir\n\noptions:\n -h, --help show this help message and exit\n --require-manifest", "stderr_excerpt": "" }, + { + "path": "scripts/import_telemetry_events.py", + "command": "python3 scripts/import_telemetry_events.py --help", + "returncode": 0, + "timed_out": false, + "passed": true, + "has_help_text": true, + "stdout_excerpt": "usage: import_telemetry_events.py [-h] --input-jsonl INPUT_JSONL\n [--events-jsonl EVENTS_JSONL]\n [--output-json OUTPUT_JSON]\n [--output-md OU", + "stderr_excerpt": "" + }, { "path": "scripts/init_skill.py", "command": "python3 scripts/init_skill.py --help", @@ -1771,6 +1795,7 @@ "scripts/cross_packager.py", "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/probe_runtime_permissions.py", "scripts/promotion_checker.py", diff --git a/reports/security_trust_report.md b/reports/security_trust_report.md index 094edde..966df4a 100644 --- a/reports/security_trust_report.md +++ b/reports/security_trust_report.md @@ -1,22 +1,22 @@ # Security Trust Report - OK: `True` -- Scanned files: `154` -- Scripts: `70` +- Scanned files: `155` +- Scripts: `71` - Internal script modules: `10` - Secret findings: `0` - Network-capable scripts: `3` - Network policy covered scripts: `3` - Network policy missing scripts: `0` -- File-write scripts: `47` +- File-write scripts: `48` - Permission approvals: `3 / 3` - Permission approval gaps: `0` -- CLI help smoke checked: `60` +- CLI help smoke checked: `61` - CLI help smoke failures: `0` - Interactive scripts: `0` - Package hash scope: `source-contract-without-generated-reports` -- Package hash files: `154` -- Package SHA256: `495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2` +- Package hash files: `155` +- Package SHA256: `57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9` ## Failures @@ -54,8 +54,8 @@ - Enabled: `True` - Timeout seconds: `5.0` -- Checked scripts: `60` -- Passed scripts: `60` +- Checked scripts: `61` +- Passed scripts: `61` - Failed scripts: `none` ## Script Surface @@ -76,6 +76,7 @@ | scripts/export_skill_ir.py | cli | False | True | True | False | False | True | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | | scripts/github_benchmark_scan.py | cli | False | True | True | False | True | True | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | | scripts/governance_check.py | cli | False | True | True | False | False | False | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | +| scripts/import_telemetry_events.py | cli | False | True | True | False | False | True | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | | scripts/init_skill.py | cli | False | True | True | False | False | True | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | | scripts/judge_blind_eval.py | cli | False | True | True | False | False | False | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | | scripts/lint_skill.py | cli | False | True | True | False | False | False | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | diff --git a/reports/skill-os-2-review.md b/reports/skill-os-2-review.md index 0e47bc9..c72fb3a 100644 --- a/reports/skill-os-2-review.md +++ b/reports/skill-os-2-review.md @@ -23,6 +23,7 @@ Yao Meta Skill is no longer only a Meta Skill factory. The current working tree - Upgrade Check v0 for registry package diffs, semver bump recommendations, breaking-change notes, and release evidence. - Adoption Drift v0 for local-first metadata-only telemetry, privacy-field blocking, usage-signal aggregation, iteration candidate generation, and Skill Atlas drift-signal input. - CLI Telemetry Capture v0 for opt-in `yao.py` command-run metadata that records command name, source, outcome, failure class, and timestamp without command arguments or raw user/model content. +- External Telemetry Import v0 for whole-file validated metadata-only JSONL ingestion from non-CLI clients, with dry-run support and all-or-nothing rejection on raw content fields or schema violations. - Review Waivers v0 for human warning acceptance with reviewer, reason, scope, expiry, and blocker-safe policy. - Governed Permission Gates v0 for reviewer-approved network, file-write, and subprocess capabilities with scope, reason, expiry, evidence, and target-enforcement mapping. - Runtime Permission Probes v0 for packaged target adapter checks, explicit native-enforcement flags, metadata fallback evidence, and residual permission risks. @@ -34,7 +35,7 @@ Yao Meta Skill is no longer only a Meta Skill factory. The current working tree - Output Review Adjudication now preserves blind-review integrity by hiding expected winners for pending or invalid reviewer decisions; answer keys are revealed only after a valid A/B decision exists for that case. - Provider Output Eval Runner v0 so `python3 scripts/yao.py output-exec --provider-runner openai` can collect real provider-backed model evidence through a reviewed OpenAI Responses API compatible runner instead of ad hoc shell glue. -This is still not the final world-class state. Target-native behavior contracts are now explicit, VS Code / Copilot package metadata is auditable, local output-eval command execution is wired, blind-review answers remain hidden until valid decisions exist, a provider-backed output runner exists, installer-level permission coverage is now locally enforced during install simulation and local install sync, opt-in `yao.py` CLI telemetry can capture metadata-only real run signals, and Skill Atlas now consumes aggregate drift reports. Review Studio keeps pending human adjudication visible as a warning instead of treating it as a clean pass. Deeper provider-native execution transforms, external client telemetry capture, provider-native installer integration, real provider holdout runs, real human adjudication decisions, and native runtime permission enforcement remain open. +This is still not the final world-class state. Target-native behavior contracts are now explicit, VS Code / Copilot package metadata is auditable, local output-eval command execution is wired, blind-review answers remain hidden until valid decisions exist, a provider-backed output runner exists, installer-level permission coverage is now locally enforced during install simulation and local install sync, opt-in `yao.py` CLI telemetry can capture metadata-only real run signals, validated external JSONL imports can bring non-CLI client signals into the same drift loop, and Skill Atlas now consumes aggregate drift reports. Review Studio keeps pending human adjudication visible as a warning instead of treating it as a clean pass. Deeper provider-native execution transforms, native client telemetry hooks, provider-native installer integration, real provider holdout runs, real human adjudication decisions, and native runtime permission enforcement remain open. ## Coverage Matrix @@ -55,7 +56,7 @@ This is still not the final world-class state. Target-native behavior contracts | Install Simulation | `scripts/simulate_install.py`, `reports/install_simulation.md`, `tests/verify_install_simulation.py` with installer permission coverage checks | v0 landed | | Local Install Sync Preflight | `scripts/sync_local_install.py`, `tests/verify_local_install_sync.py`, `Makefile` package-check prerequisites | v0 landed | | Upgrade Check | `scripts/upgrade_check.py`, `reports/upgrade_check.md`, `tests/verify_upgrade_check.py` | v0 landed | -| Telemetry & Drift | `scripts/render_adoption_drift_report.py`, `scripts/yao_cli_telemetry.py`, `reports/adoption_drift_report.md`, `tests/verify_adoption_drift.py`, `tests/verify_yao_cli.py`, `references/telemetry-drift-method.md` | v0 landed | +| Telemetry & Drift | `scripts/render_adoption_drift_report.py`, `scripts/yao_cli_telemetry.py`, `scripts/import_telemetry_events.py`, `reports/adoption_drift_report.md`, `tests/verify_adoption_drift.py`, `tests/verify_telemetry_import.py`, `tests/verify_yao_cli.py`, `references/telemetry-drift-method.md` | v0 landed | | Review Waivers | `scripts/render_review_waivers.py`, `reports/review_waivers.md`, `tests/verify_review_waivers.py`, `references/review-waiver-method.md` | v0 landed | | Governed Permission Gates | `security/permission_policy.json`, `scripts/trust_check.py`, `scripts/render_review_studio.py`, `tests/verify_trust_check.py`, `tests/verify_review_studio.py` | v0 landed | | Runtime Permission Probes | `scripts/probe_runtime_permissions.py`, `reports/runtime_permission_probes.md`, `tests/verify_runtime_permission_probes.py`, `tests/verify_review_studio.py` | v0 landed | @@ -85,9 +86,9 @@ Next move: add richer source-line anchors inside generated reports and record re ### 4. Multi-skill operation now links Atlas with drift, but needs real client capture -The new Skill Atlas can scan a workspace and report catalog, route overlap, dependency graph, stale skill, missing owner/review metadata, aggregate drift signals, and no-route opportunities. It now also supports `skill_atlas/policy.json` so release gates distinguish actionable library skills from examples and fixtures while keeping full visibility. Adoption Drift v0 can record metadata-only local events, block raw prompt/output fields, summarize missed-trigger, bad-output, script-error, and review-overdue signals, feed next iteration candidates into Review Studio, and publish aggregate drift input for Atlas. `yao.py` now adds opt-in automatic CLI run capture through `YAO_CLI_TELEMETRY=1` or `--record-cli-telemetry`, recording only `source=yao_cli`, normalized subcommand name, outcome, failure class, and timestamp. It still needs external client-side capture beyond the local CLI. +The new Skill Atlas can scan a workspace and report catalog, route overlap, dependency graph, stale skill, missing owner/review metadata, aggregate drift signals, and no-route opportunities. It now also supports `skill_atlas/policy.json` so release gates distinguish actionable library skills from examples and fixtures while keeping full visibility. Adoption Drift v0 can record metadata-only local events, block raw prompt/output fields, summarize missed-trigger, bad-output, script-error, and review-overdue signals, feed next iteration candidates into Review Studio, and publish aggregate drift input for Atlas. `yao.py` now adds opt-in automatic CLI run capture through `YAO_CLI_TELEMETRY=1` or `--record-cli-telemetry`, recording only `source=yao_cli`, normalized subcommand name, outcome, failure class, and timestamp. `telemetry-import` now accepts already-sanitized external client JSONL, validates the whole file before appending, supports dry-run, defaults `source=external`, and rejects any raw content or unknown metadata fields without mutating the local event stream. It still needs native client hooks that produce those external JSONL batches automatically. -Next move: connect non-CLI client activations and failure history so Atlas can rank stale, drifting, or conflicting skills by real usage impact. +Next move: wire native client hooks to emit the external metadata-only JSONL batches automatically, then let Atlas rank stale, drifting, or conflicting skills by real usage impact. ### 5. Trust report is structural, not full security review @@ -102,22 +103,22 @@ Next move: add real client or installer permission enforcement integration. | Output Eval | `5` cases, with-skill pass rate `100`, baseline pass rate `0`, with file-backed, near-neighbor, boundary coverage, `10` local command-runner execution runs, `0` recorded fixture runs, `0` provider model-executed runs in root release evidence, `10` estimated token counts, provider runner v0 available, `5` blind A/B review pairs, a generated `reports/output_review_decisions.json` template, `0 / 5` reviewer decisions pending, `0` answer keys revealed, and `5` pending answers hidden | | Runtime Conformance | `5 / 5` targets passing | | Target Compiler | `5 / 5` compiled target contracts generated for OpenAI, Claude, generic, Agent Skills compatible, and VS Code / Copilot outputs, including target permission contracts and target-native behavior contracts | -| Trust | `0` secret findings, `1` pinned dependency file, `9` declared internal modules, `3 / 3` network-capable scripts covered by bounded host policy, `60 / 60` CLI help smoke checks passing across `69` scripts, source-contract hash scope explicit | +| Trust | `0` secret findings, `1` pinned dependency file, `10` declared internal modules, `3 / 3` network-capable scripts covered by bounded host policy, `61 / 61` CLI help smoke checks passing across `71` scripts, source-contract hash scope explicit | | Permission Governance | `3 / 3` required high-permission capabilities approved, `0` missing, `0` invalid, `0` expired | | Runtime Permission Probes | `4 / 4` target adapters probed, `0` native-enforcement adapters, `4` explicit metadata fallbacks, `4` residual risks retained for reviewer visibility | | Skill Atlas | `12` scanned skills, `1` actionable root skill, `1` telemetry report, `0` actionable route collisions, `0` actionable owner gaps, `0` actionable stale skills, `0` actionable drift signals, `24` scoped non-actionable issue signals retained for visibility | | Registry Audit | package metadata generated with version, owner, license, source checksum, archive checksum, Skill IR provenance, and compatibility matrix | -| Package Verification | `4 / 4` target adapters present, archive verified, `495` zip entries, `0` failures, `0` warnings | -| Install Simulation | archive with `495` entries extracted into a local verification root, entrypoint/manifest/interface loaded, reports present, `4` adapters readable, `12` installer permission checks enforced, `0` permission failures, `0` failures, `0` warnings | +| Package Verification | `4 / 4` target adapters present, archive verified, `497` zip entries, `0` failures, `0` warnings | +| Install Simulation | archive with `497` entries extracted into a local verification root, entrypoint/manifest/interface loaded, reports present, `4` adapters readable, `12` installer permission checks enforced, `0` permission failures, `0` failures, `0` warnings | | Local Install Sync Preflight | `make sync-local-install` and `make sync-active-install` rebuild the package first, then sync only after install simulation passes with `12` enforced installer permission checks and `0` permission failures | | Upgrade Check | current package declares `minor` over the 1.0.0 baseline, recommended bump is `minor`, and release notes include added targets plus checksum changes | -| Adoption Drift | `1` metadata-only review event, `0` adoption samples, adoption `0`, risk band `low`; optional `yao.py` CLI capture is available but off by default for reproducible release evidence; raw `reports/telemetry_events.jsonl` is gitignored and blocked from zip packages | +| Adoption Drift | `1` metadata-only review event, `0` adoption samples, adoption `0`, risk band `low`; optional `yao.py` CLI capture and validated external JSONL import are available but off by default for reproducible release evidence; raw `reports/telemetry_events.jsonl` is gitignored and blocked from zip packages | | Review Waivers | ledger generated; current release has `1` warning gate that still needs reviewer decision or a time-bounded waiver; blockers remain non-waivable in v0 | | Review Annotations | ledger generated; current release has `0` reviewer annotations and `0` open annotation blockers | | Review Studio | decision `review`, world-class score `92`, `13` gates, `0` blockers, `2` warnings, `2` review actions, `0` open annotation blockers | | IR-first Packaging | `openai`, `claude`, `generic`, and `vscode` adapters include compiler contracts, permission contracts, target-native behavior contracts, IR provenance, semantic parity checks, and install-scope notes where applicable | | Context Budget | initial load `944/1000`, under the production budget | -| CI | `make ci-test` target count is `56` after the VS Code package target update | +| CI | `make ci-test` target count is `57` after the telemetry import gate update | ## Next Highest-Leverage Moves @@ -125,4 +126,4 @@ Next move: add real client or installer permission enforcement integration. 2. Add native client or installer runtime enforcement for approved high-permission capabilities. 3. Run the new provider-backed output runner against holdout cases with real credentials, then record the current blind A/B decisions before claiming fully ready status. 4. Add real reviewer annotation records during the next human review pass. -5. Connect external client telemetry capture and failure history so Atlas drift signals include non-CLI live usage, not only manual samples or opt-in CLI runs. +5. Wire native client telemetry hooks so external JSONL batches are produced automatically, not only imported from already-sanitized files. diff --git a/reports/skill-overview.html b/reports/skill-overview.html index 6197154..dab4358 100644 --- a/reports/skill-overview.html +++ b/reports/skill-overview.html @@ -609,7 +609,7 @@
-
完整度100SKILL.md 已存在，是 Skill 的入口。SKILL.md 已存在，是 Skill 的入口。
触发清晰100frontmatter description 已存在，具备基础路由面。frontmatter description 已存在，具备基础路由面。
证据充分100已生成 20 / 20 类报告证据。已生成 20 / 20 类报告证据。
上下文成本42入口约 350 个词/字，references 约 14859 个词/字。入口约 350 个词/字，references 约 14859 个词/字。
+
完整度100SKILL.md 已存在，是 Skill 的入口。SKILL.md 已存在，是 Skill 的入口。
触发清晰100frontmatter description 已存在，具备基础路由面。frontmatter description 已存在，具备基础路由面。
证据充分100已生成 20 / 20 类报告证据。已生成 20 / 20 类报告证据。
上下文成本42入口约 350 个词/字，references 约 14978 个词/字。入口约 350 个词/字，references 约 14978 个词/字。
@@ -641,10 +641,10 @@

指标判读Reading

先看雷达图判断能力短板，再看下方每项分数的证据原因。分数不是装饰数字，必须和本地文件、reports 证据或证据不足提示对应。Read the radar first for weak spots, then inspect each score with its evidence. Scores must map to local files, reports, or explicit evidence gaps.

-
  1. 稳定Stable完整度100SKILL.md 已存在，是 Skill 的入口。SKILL.md 已存在，是 Skill 的入口。
  2. 稳定Stable触发清晰100frontmatter description 已存在，具备基础路由面。frontmatter description 已存在，具备基础路由面。
  3. 稳定Stable证据充分100已生成 20 / 20 类报告证据。已生成 20 / 20 类报告证据。
  4. 稳定Stable可维护性100SKILL.md 约 350 个词/字。SKILL.md 约 350 个词/字。
  5. 稳定Stable可迁移性100agents/interface.yaml 已存在。agents/interface.yaml 已存在。
  6. 关注Watch上下文成本42入口约 350 个词/字，references 约 14859 个词/字。入口约 350 个词/字，references 约 14859 个词/字。
+
  1. 稳定Stable完整度100SKILL.md 已存在，是 Skill 的入口。SKILL.md 已存在，是 Skill 的入口。
  2. 稳定Stable触发清晰100frontmatter description 已存在，具备基础路由面。frontmatter description 已存在，具备基础路由面。
  3. 稳定Stable证据充分100已生成 20 / 20 类报告证据。已生成 20 / 20 类报告证据。
  4. 稳定Stable可维护性100SKILL.md 约 350 个词/字。SKILL.md 约 350 个词/字。
  5. 稳定Stable可迁移性100agents/interface.yaml 已存在。agents/interface.yaml 已存在。
  6. 关注Watch上下文成本42入口约 350 个词/字，references 约 14978 个词/字。入口约 350 个词/字，references 约 14978 个词/字。
-
完整度100
  • SKILL.md 已存在，是 Skill 的入口。SKILL.md 已存在，是 Skill 的入口。
  • README.md 已存在，便于人工阅读。README.md 已存在，便于人工阅读。
  • agents/interface.yaml 已存在，便于跨平台适配。agents/interface.yaml 已存在，便于跨平台适配。
触发清晰100
  • frontmatter description 已存在，具备基础路由面。frontmatter description 已存在，具备基础路由面。
  • description 有足够长度说明任务边界。description 有足够长度说明任务边界。
  • description 已包含使用场景或排除边界信号。description 已包含使用场景或排除边界信号。
证据充分100
  • 已生成 20 / 20 类报告证据。已生成 20 / 20 类报告证据。
  • skill-ir.json 已存在。skill-ir.json 已存在。
  • compiled_targets.json 已存在。compiled_targets.json 已存在。
可维护性100
  • SKILL.md 约 350 个词/字。SKILL.md 约 350 个词/字。
  • 入口文件保持克制，可维护性较好。入口文件保持克制，可维护性较好。
  • references/ 已承载扩展指导。references/ 已承载扩展指导。
可迁移性100
  • agents/interface.yaml 已存在。agents/interface.yaml 已存在。
  • manifest.json 已存在。manifest.json 已存在。
  • 目标平台或 adapter target 已声明。目标平台或 adapter target 已声明。
上下文成本42
  • 入口约 350 个词/字，references 约 14859 个词/字。入口约 350 个词/字，references 约 14859 个词/字。
  • 分数越高代表上下文成本越低。分数越高代表上下文成本越低。
  • 上下文成本偏高，建议压缩入口或拆分 references。上下文成本偏高，建议压缩入口或拆分 references。
+
完整度100
  • SKILL.md 已存在，是 Skill 的入口。SKILL.md 已存在，是 Skill 的入口。
  • README.md 已存在，便于人工阅读。README.md 已存在，便于人工阅读。
  • agents/interface.yaml 已存在，便于跨平台适配。agents/interface.yaml 已存在，便于跨平台适配。
触发清晰100
  • frontmatter description 已存在，具备基础路由面。frontmatter description 已存在，具备基础路由面。
  • description 有足够长度说明任务边界。description 有足够长度说明任务边界。
  • description 已包含使用场景或排除边界信号。description 已包含使用场景或排除边界信号。
证据充分100
  • 已生成 20 / 20 类报告证据。已生成 20 / 20 类报告证据。
  • skill-ir.json 已存在。skill-ir.json 已存在。
  • compiled_targets.json 已存在。compiled_targets.json 已存在。
可维护性100
  • SKILL.md 约 350 个词/字。SKILL.md 约 350 个词/字。
  • 入口文件保持克制，可维护性较好。入口文件保持克制，可维护性较好。
  • references/ 已承载扩展指导。references/ 已承载扩展指导。
可迁移性100
  • agents/interface.yaml 已存在。agents/interface.yaml 已存在。
  • manifest.json 已存在。manifest.json 已存在。
  • 目标平台或 adapter target 已声明。目标平台或 adapter target 已声明。
上下文成本42
  • 入口约 350 个词/字，references 约 14978 个词/字。入口约 350 个词/字，references 约 14978 个词/字。
  • 分数越高代表上下文成本越低。分数越高代表上下文成本越低。
  • 上下文成本偏高，建议压缩入口或拆分 references。上下文成本偏高，建议压缩入口或拆分 references。
@@ -720,7 +720,7 @@
- +
类型Type证据Evidence建议Action
强项Strength触发面保持精简，并锚定在 frontmatter description。The trigger surface stays lean and anchored in the frontmatter description.保留并复用Keep
强项Strength已生成 Skill IR，核心语义可先于平台打包被审查和迁移。已生成 Skill IR，核心语义可先于平台打包被审查和迁移。保留并复用Keep
强项Strength已生成目标编译报告，可审查 IR 到 OpenAI、Claude、generic 等目标契约的映射。已生成目标编译报告，可审查 IR 到 OpenAI、Claude、generic 等目标契约的映射。保留并复用Keep
缺口Gap上下文成本需要补强：入口约 350 个词/字，references 约 14859 个词/字。上下文成本需要补强：入口约 350 个词/字，references 约 14859 个词/字。纳入下一轮修复Fix next
强项Strength触发面保持精简，并锚定在 frontmatter description。The trigger surface stays lean and anchored in the frontmatter description.保留并复用Keep
强项Strength已生成 Skill IR，核心语义可先于平台打包被审查和迁移。已生成 Skill IR，核心语义可先于平台打包被审查和迁移。保留并复用Keep
强项Strength已生成目标编译报告，可审查 IR 到 OpenAI、Claude、generic 等目标契约的映射。已生成目标编译报告，可审查 IR 到 OpenAI、Claude、generic 等目标契约的映射。保留并复用Keep
缺口Gap上下文成本需要补强：入口约 350 个词/字，references 约 14978 个词/字。上下文成本需要补强：入口约 350 个词/字，references 约 14978 个词/字。纳入下一轮修复Fix next
@@ -771,7 +771,7 @@

让 reviewer 快速确认关键文件、目录和资产分布。Lets reviewers confirm key files, directories, and asset distribution quickly.

-
资产分布305项SKILL.mdREADME.mdagents/interface.yamlmanifest.jsonreferencesscripts
资产分布图展示当前包体的文件和目录重心。
+
资产分布306项SKILL.mdREADME.mdagents/interface.yamlmanifest.jsonreferencesscripts
资产分布图展示当前包体的文件和目录重心。
diff --git a/reports/skill-overview.json b/reports/skill-overview.json index 941260b..90c0102 100644 --- a/reports/skill-overview.json +++ b/reports/skill-overview.json @@ -96,7 +96,7 @@ "label": "上下文成本", "score": 42, "reasons": [ - "入口约 350 个词/字，references 约 14859 个词/字。", + "入口约 350 个词/字，references 约 14978 个词/字。", "分数越高代表上下文成本越低。", "上下文成本偏高，建议压缩入口或拆分 references。" ] @@ -200,7 +200,7 @@ "已生成 Output Review Adjudication，可记录盲评决策、一致率和待评审项。" ], "gaps": [ - "上下文成本需要补强：入口约 350 个词/字，references 约 14859 个词/字。" + "上下文成本需要补强：入口约 350 个词/字，references 约 14978 个词/字。" ], "recommendations": [ "先改触发边界，再扩展工作流。", @@ -433,7 +433,7 @@ "path": "scripts", "label": "Deterministic helpers or local tooling", "kind": "folder", - "file_count": 70 + "file_count": 71 }, { "path": "evals", @@ -448,7 +448,7 @@ "file_count": 171 } ], - "file_count": 305, + "file_count": 306, "folder_count": 4, "distribution": [ { @@ -473,7 +473,7 @@ }, { "label": "scripts", - "value": 70 + "value": 71 }, { "label": "evals", @@ -602,7 +602,7 @@ "path": "scripts", "label": "Deterministic helpers or local tooling", "kind": "folder", - "file_count": 70 + "file_count": 71 }, { "path": "evals", @@ -948,8 +948,8 @@ "failures": [] }, "trust_security": { - "scanned_files": 154, - "script_count": 70, + "scanned_files": 155, + "script_count": 71, "internal_module_count": 10, "secret_findings": 0, "dependency_files": [ @@ -958,18 +958,18 @@ "network_script_count": 3, "network_policy_covered_count": 3, "network_policy_missing_count": 0, - "file_write_script_count": 47, + "file_write_script_count": 48, "permission_required_count": 3, "permission_approved_count": 3, "permission_missing_count": 0, "permission_invalid_count": 0, "permission_expired_count": 0, - "help_smoke_checked_count": 60, + "help_smoke_checked_count": 61, "help_smoke_failed_count": 0, "interactive_script_count": 0, "package_hash_scope": "source-contract-without-generated-reports", - "package_hash_file_count": 154, - "package_sha256": "495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2" + "package_hash_file_count": 155, + "package_sha256": "57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9" }, "skill_atlas": { "skill_count": 12, @@ -1007,8 +1007,8 @@ "trust_level": "local", "license": "MIT", "checksums": { - "package_sha256": "495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2", - "archive_sha256": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474" + "package_sha256": "57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9", + "archive_sha256": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c" }, "compatibility": { "openai": "pass", @@ -1039,7 +1039,7 @@ }, "distribution": { "archive_verified": true, - "archive_sha256": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474", + "archive_sha256": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c", "package_verification": "reports/package_verification.json", "install_simulated": true, "install_simulation": "reports/install_simulation.json" @@ -1055,8 +1055,8 @@ "target_count": 4, "adapter_count": 4, "archive_present": true, - "archive_sha256": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474", - "archive_entry_count": 495, + "archive_sha256": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c", + "archive_entry_count": 497, "failure_count": 0, "warning_count": 0 }, @@ -1067,7 +1067,7 @@ "ok": true, "summary": { "archive_present": true, - "archive_entry_count": 495, + "archive_entry_count": 497, "archive_extracted": true, "entrypoint_loaded": true, "manifest_loaded": true, @@ -1134,12 +1134,12 @@ { "field": "archive_sha256", "from": "", - "to": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474" + "to": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c" }, { "field": "package_sha256", "from": "0000000000000000000000000000000000000000000000000000000000000000", - "to": "495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2" + "to": "57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9" } ] }, diff --git a/reports/skill_atlas.json b/reports/skill_atlas.json index 492bb5d..c14d0a8 100644 --- a/reports/skill_atlas.json +++ b/reports/skill_atlas.json @@ -78,6 +78,7 @@ "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", "scripts/governance_check.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/judge_blind_eval.py", "scripts/lint_skill.py", diff --git a/reports/upgrade_check.json b/reports/upgrade_check.json index 897b5ee..a1fe181 100644 --- a/reports/upgrade_check.json +++ b/reports/upgrade_check.json @@ -70,12 +70,12 @@ { "field": "archive_sha256", "from": "", - "to": "0f80e2e194d003a99da34f73923b9459f260b2d177c5f1f6ec7104fdd5713474" + "to": "7ae19fa1196580440ddebf5ad124810f724f945cb76ac3a4a519da9edde2f14c" }, { "field": "package_sha256", "from": "0000000000000000000000000000000000000000000000000000000000000000", - "to": "495c5824cf84b56ef77bebc75e415191425e2f1131f0a4027d17037631b52fa2" + "to": "57991433fa63fd3a5b34cf9bad76ab118895476dbe12810929c8a396b73796c9" } ] }, diff --git a/scripts/ci_test.py b/scripts/ci_test.py index fda84fe..c3e179a 100644 --- a/scripts/ci_test.py +++ b/scripts/ci_test.py @@ -50,6 +50,7 @@ DEFAULT_TARGETS = [ "review-studio-check", "feedback-check", "adoption-drift-check", + "telemetry-import-check", "review-waivers-check", "review-annotations-check", "baseline-compare-check", diff --git a/scripts/import_telemetry_events.py b/scripts/import_telemetry_events.py new file mode 100644 index 0000000..d2802fe --- /dev/null +++ b/scripts/import_telemetry_events.py @@ -0,0 +1,139 @@ +#!/usr/bin/env python3 +import argparse +import json +from pathlib import Path +from typing import Any + +from render_adoption_drift_report import display_path, normalize_event, render_report, skill_defaults + + +def load_candidate_events( + input_jsonl: Path, + defaults: dict[str, str], + default_source: str, + default_command: str, +) -> tuple[list[dict[str, str]], list[str]]: + events: list[dict[str, str]] = [] + failures: list[str] = [] + for index, line in enumerate(input_jsonl.read_text(encoding="utf-8").splitlines(), start=1): + if not line.strip(): + continue + try: + raw = json.loads(line) + except json.JSONDecodeError as exc: + failures.append(f"line {index}: invalid JSONL event: {exc.msg}") + continue + if not isinstance(raw, dict): + failures.append(f"line {index}: telemetry event must be a JSON object") + continue + raw.setdefault("source", default_source) + raw.setdefault("command", default_command) + event, event_failures = normalize_event(raw, defaults, f"line {index}") + failures.extend(event_failures) + if event: + events.append(event) + return events, failures + + +def append_events(events_jsonl: Path, events: list[dict[str, str]]) -> None: + events_jsonl.parent.mkdir(parents=True, exist_ok=True) + with events_jsonl.open("a", encoding="utf-8") as handle: + for event in events: + handle.write(json.dumps(event, ensure_ascii=False, sort_keys=True) + "\n") + + +def import_events( + skill_dir: Path, + input_jsonl: Path, + events_jsonl: Path | None = None, + output_json: Path | None = None, + output_md: Path | None = None, + generated_at: str | None = None, + default_source: str = "external", + default_command: str = "external-client", + dry_run: bool = False, +) -> dict[str, Any]: + skill_dir = skill_dir.resolve() + input_jsonl = input_jsonl.resolve() + reports_dir = skill_dir / "reports" + events_jsonl = (events_jsonl or reports_dir / "telemetry_events.jsonl").resolve() + output_json = (output_json or reports_dir / "adoption_drift_report.json").resolve() + output_md = (output_md or reports_dir / "adoption_drift_report.md").resolve() + failures: list[str] = [] + if not input_jsonl.exists(): + failures.append(f"Input telemetry JSONL does not exist: {display_path(input_jsonl)}") + candidate_events: list[dict[str, str]] = [] + else: + candidate_events, load_failures = load_candidate_events( + input_jsonl, + skill_defaults(skill_dir), + default_source, + default_command, + ) + failures.extend(load_failures) + + adoption_report: dict[str, Any] | None = None + if not failures and not dry_run: + append_events(events_jsonl, candidate_events) + adoption_report = render_report( + skill_dir, + events_jsonl=events_jsonl, + output_json=output_json, + output_md=output_md, + generated_at=generated_at, + ) + + return { + "ok": not failures, + "schema_version": "1.0", + "skill_dir": display_path(skill_dir), + "input_jsonl": display_path(input_jsonl), + "events_jsonl": display_path(events_jsonl), + "dry_run": dry_run, + "imported_count": 0 if failures or dry_run else len(candidate_events), + "candidate_count": len(candidate_events), + "failures": failures, + "imported_preview": candidate_events[:5], + "artifacts": { + "events_jsonl": display_path(events_jsonl), + "adoption_drift_json": display_path(output_json), + "adoption_drift_md": display_path(output_md), + }, + "adoption_drift": { + "summary": adoption_report.get("summary", {}) if adoption_report else {}, + "artifacts": adoption_report.get("artifacts", {}) if adoption_report else {}, + }, + } + + +def main() -> None: + parser = argparse.ArgumentParser(description="Import external metadata-only telemetry into a local skill event stream.") + parser.add_argument("skill_dir", nargs="?", default=".") + parser.add_argument("--input-jsonl", required=True) + parser.add_argument("--events-jsonl") + parser.add_argument("--output-json") + parser.add_argument("--output-md") + parser.add_argument("--generated-at") + parser.add_argument("--source", choices=["external", "manual", "unknown", "yao_cli"], default="external") + parser.add_argument("--command", default="external-client") + parser.add_argument("--dry-run", action="store_true") + args = parser.parse_args() + + report = import_events( + Path(args.skill_dir), + Path(args.input_jsonl), + events_jsonl=Path(args.events_jsonl) if args.events_jsonl else None, + output_json=Path(args.output_json) if args.output_json else None, + output_md=Path(args.output_md) if args.output_md else None, + generated_at=args.generated_at, + default_source=args.source, + default_command=args.command, + dry_run=args.dry_run, + ) + print(json.dumps(report, ensure_ascii=False, indent=2)) + if not report["ok"]: + raise SystemExit(2) + + +if __name__ == "__main__": + main() diff --git a/scripts/yao.py b/scripts/yao.py index 4de4f77..8227a8e 100644 --- a/scripts/yao.py +++ b/scripts/yao.py @@ -705,6 +705,28 @@ def command_adoption_drift(args: argparse.Namespace) -> int: return 0 if result["ok"] else 2 +def command_telemetry_import(args: argparse.Namespace) -> int: + skill_dir = str(Path(args.skill_dir).resolve()) + cmd = [skill_dir, "--input-jsonl", args.input_jsonl] + if args.events_jsonl: + cmd.extend(["--events-jsonl", args.events_jsonl]) + if args.output_json: + cmd.extend(["--output-json", args.output_json]) + if args.output_md: + cmd.extend(["--output-md", args.output_md]) + if args.generated_at: + cmd.extend(["--generated-at", args.generated_at]) + if args.source: + cmd.extend(["--source", args.source]) + if args.telemetry_command: + cmd.extend(["--command", args.telemetry_command]) + if args.dry_run: + cmd.append("--dry-run") + result = run_script("import_telemetry_events.py", cmd) + print(json.dumps(result["payload"] if result["payload"] is not None else result, ensure_ascii=False, indent=2)) + return 0 if result["ok"] else 2 + + def command_review_waivers(args: argparse.Namespace) -> int: skill_dir = str(Path(args.skill_dir).resolve()) cmd = [skill_dir] diff --git a/scripts/yao_cli_parser.py b/scripts/yao_cli_parser.py index caa5274..eb28884 100644 --- a/scripts/yao_cli_parser.py +++ b/scripts/yao_cli_parser.py @@ -284,6 +284,21 @@ def build_parser(command_handlers: dict[str, Callable[[argparse.Namespace], int] adoption_drift_cmd.add_argument("--version") adoption_drift_cmd.set_defaults(func=_handler(command_handlers, "command_adoption_drift")) + telemetry_import_cmd = subparsers.add_parser( + "telemetry-import", + help="Import external metadata-only telemetry JSONL and refresh the adoption drift report.", + ) + telemetry_import_cmd.add_argument("skill_dir", nargs="?", default=".") + telemetry_import_cmd.add_argument("--input-jsonl", required=True) + telemetry_import_cmd.add_argument("--events-jsonl") + telemetry_import_cmd.add_argument("--output-json") + telemetry_import_cmd.add_argument("--output-md") + telemetry_import_cmd.add_argument("--generated-at") + telemetry_import_cmd.add_argument("--source", choices=["external", "manual", "unknown", "yao_cli"], default="external") + telemetry_import_cmd.add_argument("--command", dest="telemetry_command", default="external-client") + telemetry_import_cmd.add_argument("--dry-run", action="store_true") + telemetry_import_cmd.set_defaults(func=_handler(command_handlers, "command_telemetry_import")) + review_waivers_cmd = subparsers.add_parser( "review-waivers", help="Render or update human reviewer waiver evidence for Review Studio.", diff --git a/skill-ir/examples/yao-meta-skill.json b/skill-ir/examples/yao-meta-skill.json index 7594699..ea787eb 100644 --- a/skill-ir/examples/yao-meta-skill.json +++ b/skill-ir/examples/yao-meta-skill.json @@ -122,6 +122,7 @@ "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", "scripts/governance_check.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/judge_blind_eval.py", "scripts/lint_skill.py", diff --git a/skill_atlas/catalog.json b/skill_atlas/catalog.json index 8b95c36..bc33d3d 100644 --- a/skill_atlas/catalog.json +++ b/skill_atlas/catalog.json @@ -34,6 +34,7 @@ "scripts/export_skill_ir.py", "scripts/github_benchmark_scan.py", "scripts/governance_check.py", + "scripts/import_telemetry_events.py", "scripts/init_skill.py", "scripts/judge_blind_eval.py", "scripts/lint_skill.py", diff --git a/tests/verify_telemetry_import.py b/tests/verify_telemetry_import.py new file mode 100644 index 0000000..9c9dfeb --- /dev/null +++ b/tests/verify_telemetry_import.py @@ -0,0 +1,184 @@ +#!/usr/bin/env python3 +import json +import shutil +import subprocess +import sys +from pathlib import Path + + +ROOT = Path(__file__).resolve().parent.parent +TMP = ROOT / "tests" / "tmp_telemetry_import" +IMPORTER = ROOT / "scripts" / "import_telemetry_events.py" +YAO = ROOT / "scripts" / "yao.py" + + +def run(cmd: list[str]) -> dict: + proc = subprocess.run(cmd, cwd=ROOT, capture_output=True, text=True) + payload = json.loads(proc.stdout) if proc.stdout.strip() else {} + return { + "ok": proc.returncode == 0, + "returncode": proc.returncode, + "payload": payload, + "stdout": proc.stdout, + "stderr": proc.stderr, + } + + +def write_jsonl(path: Path, rows: list[dict]) -> None: + path.write_text("\n".join(json.dumps(row, ensure_ascii=False) for row in rows) + "\n", encoding="utf-8") + + +def main() -> None: + if TMP.exists(): + shutil.rmtree(TMP) + TMP.mkdir(parents=True, exist_ok=True) + + subprocess.run( + [ + sys.executable, + str(ROOT / "scripts" / "init_skill.py"), + "external-telemetry-demo", + "--description", + "Import external client telemetry into a reusable metadata-only drift loop.", + "--output-dir", + str(TMP), + ], + cwd=ROOT, + check=True, + capture_output=True, + text=True, + ) + skill_dir = TMP / "external-telemetry-demo" + input_jsonl = TMP / "external-events.jsonl" + write_jsonl( + input_jsonl, + [ + { + "event": "skill_activation", + "activation_type": "explicit", + "outcome": "accepted", + "failure_type": "none", + "timestamp": "2026-06-13T11:00:00Z", + }, + { + "event": "script_run", + "activation_type": "manual", + "outcome": "failed", + "failure_type": "script_error", + "timestamp": "2026-06-13T11:01:00Z", + }, + ], + ) + + dry_run = run( + [ + sys.executable, + str(IMPORTER), + str(skill_dir), + "--input-jsonl", + str(input_jsonl), + "--command", + "chrome-extension", + "--dry-run", + ] + ) + assert dry_run["ok"], dry_run + assert dry_run["payload"]["dry_run"] is True, dry_run + assert dry_run["payload"]["candidate_count"] == 2, dry_run + assert dry_run["payload"]["imported_count"] == 0, dry_run + assert not (skill_dir / "reports" / "telemetry_events.jsonl").exists(), dry_run + + imported = run( + [ + sys.executable, + str(IMPORTER), + str(skill_dir), + "--input-jsonl", + str(input_jsonl), + "--command", + "chrome-extension", + "--generated-at", + "2026-06-13T11:02:00Z", + ] + ) + assert imported["ok"], imported + assert imported["payload"]["imported_count"] == 2, imported + assert imported["payload"]["adoption_drift"]["summary"]["event_count"] == 2, imported + assert imported["payload"]["adoption_drift"]["summary"]["source_types"]["external"] == 2, imported + assert imported["payload"]["adoption_drift"]["summary"]["command_counts"]["chrome-extension"] == 2, imported + events = [ + json.loads(line) + for line in (skill_dir / "reports" / "telemetry_events.jsonl").read_text(encoding="utf-8").splitlines() + ] + assert len(events) == 2, events + assert {event["source"] for event in events} == {"external"}, events + assert {event["command"] for event in events} == {"chrome-extension"}, events + markdown = (skill_dir / "reports" / "adoption_drift_report.md").read_text(encoding="utf-8") + assert "source=`external` command=`chrome-extension`" in markdown, markdown + + unsafe_jsonl = TMP / "unsafe-events.jsonl" + write_jsonl( + unsafe_jsonl, + [ + { + "event": "skill_activation", + "activation_type": "explicit", + "outcome": "accepted", + "failure_type": "none", + "timestamp": "2026-06-13T11:03:00Z", + }, + { + "event": "skill_activation", + "activation_type": "explicit", + "outcome": "accepted", + "failure_type": "none", + "prompt": "raw user prompt must never be imported", + "timestamp": "2026-06-13T11:04:00Z", + }, + ], + ) + unsafe = run([sys.executable, str(IMPORTER), str(skill_dir), "--input-jsonl", str(unsafe_jsonl)]) + assert unsafe["returncode"] == 2, unsafe + assert not unsafe["payload"]["ok"], unsafe + assert "raw content fields" in "\n".join(unsafe["payload"]["failures"]), unsafe + events_after_failure = (skill_dir / "reports" / "telemetry_events.jsonl").read_text(encoding="utf-8").splitlines() + assert len(events_after_failure) == 2, events_after_failure + + cli_input_jsonl = TMP / "cli-external-events.jsonl" + write_jsonl( + cli_input_jsonl, + [ + { + "event": "skill_output", + "activation_type": "manual", + "outcome": "edited", + "failure_type": "none", + "timestamp": "2026-06-13T11:05:00Z", + } + ], + ) + cli = run( + [ + sys.executable, + str(YAO), + "telemetry-import", + str(skill_dir), + "--input-jsonl", + str(cli_input_jsonl), + "--command", + "browser-plugin", + "--generated-at", + "2026-06-13T11:06:00Z", + ] + ) + assert cli["ok"], cli + assert cli["payload"]["imported_count"] == 1, cli + assert cli["payload"]["adoption_drift"]["summary"]["event_count"] == 3, cli + assert cli["payload"]["adoption_drift"]["summary"]["source_types"]["external"] == 3, cli + assert cli["payload"]["adoption_drift"]["summary"]["command_counts"]["browser-plugin"] == 1, cli + + print(json.dumps({"ok": True}, ensure_ascii=False, indent=2)) + + +if __name__ == "__main__": + main() diff --git a/tests/verify_yao_cli.py b/tests/verify_yao_cli.py index fe1eace..768315c 100644 --- a/tests/verify_yao_cli.py +++ b/tests/verify_yao_cli.py @@ -73,6 +73,7 @@ def main() -> None: parser_help = yao_cli_module.build_parser().format_help() assert "quickstart" in parser_help, parser_help assert "review-studio" in parser_help, parser_help + assert "telemetry-import" in parser_help, parser_help assert "--record-cli-telemetry" in parser_help, parser_help init_result = run("init", "cli-demo-skill", "--description", "CLI demo skill.", "--output-dir", str(tmp_root))
路径Path作用Role类型Type
SKILL.mdSkill 入口文件Skill entrypoint文件file
README.md人类可读使用说明Human-readable usage guide文件file
agents/interface.yaml跨平台接口元数据Neutral interface metadata文件file
manifest.json生命周期与打包元数据Lifecycle and portability metadata文件file
references扩展指导与复用资料Extended guidance and reusable notes目录folder
scripts确定性脚本或本地工具Deterministic helpers or local tooling目录folder
evals触发与质量检查Trigger and quality checks目录folder
reports生成的证据与总结报告Generated evidence and overview artifacts目录folder