sdaduanbilei/cc-haha
1
0
Fork 0
mirror of https://github.com/NanmiCoder/cc-haha synced 2026-07-15 12:53:31 +08:00
Code Issues Packages Projects Releases Wiki Activity
cc-haha/.github/AGENTS.md
程序员阿江(Relakkes) 435e4ccc9f ci: harden deterministic PR quality gates 
Route required checks by changed surface, add offline provider and chat contracts, and keep fork PRs independent of live credentials. Layer agent guidance by subtree and enforce a compact instruction budget.

Tested: bun run check:policy
Confidence: high
Scope-risk: broad
2026-07-10 20:29:01 +08:00

1.2 KiB
Raw Permalink Blame History

CI and Repository Policy

These rules apply to .github/ changes in addition to the root instructions.

  • Treat workflow changes as product changes. Run bun run check:policy; run actionlint when available.
  • scripts/pr/change-policy.ts is the source of truth for path-to-check routing. Do not duplicate the routing graph in advisory automation.
  • Keep pr-quality-gate as the stable required status. Selected jobs must succeed and unselected jobs must be explicitly skipped; never convert failures into success.
  • Required PR jobs must remain offline and must not receive provider credentials or depend on paid/live services.
  • A pull_request_target workflow may inspect PR metadata using trusted base code, but must never execute the PR head, install PR-controlled dependencies, or expose secrets to contributor code.
  • Keep Bun aligned with package.json#packageManager and use frozen lockfile installs in required jobs.
  • Do not weaken coverage, test routing, CODEOWNERS, or branch protections to make another change pass. Maintainer override labels require an explicit, documented decision.
  • Repository settings, rulesets, secrets, and required-check changes require explicit user authorization; editing workflow files alone does not grant it.