v0.9.0 stewardship integration

.cargo/config.toml

@@ -0,0 +1,18 @@
+# HarmonyOS/OpenHarmony cross-build paths are intentionally not configured
+# here. Cargo does not expand environment variables inside target linker paths
+# or CMake toolchain paths, so checked-in absolute SDK paths make the workspace
+# machine-specific.
+#
+# See docs/HarmonyOS.md for setup details.
+#
+# Set OHOS_NATIVE_SDK to the OpenHarmony native SDK directory, then load one of:
+#
+#   PowerShell:
+#     . .\scripts\ohos-env.ps1
+#
+#   Linux/macOS:
+#     . ./scripts/ohos-env.sh
+#
+# The setup scripts export Cargo's target-specific linker, AR, CC, CXX, CFLAGS,
+# CXXFLAGS, CARGO_ENCODED_RUSTFLAGS, CC_SHELL_ESCAPED_FLAGS, and
+# CMAKE_TOOLCHAIN_FILE variables for aarch64-unknown-linux-ohos.

.cnb.yml

@@ -38,6 +38,7 @@
       script: |
         set -eu
         ./scripts/release/check-versions.sh
+        ./scripts/release/check-ohos-deps.sh
         cargo fmt --all -- --check
         cargo check --workspace --all-targets --locked
         cargo clippy --workspace --all-targets --all-features --locked -- -D warnings
@@ -75,6 +76,7 @@
       script: |
         set -eu
         ./scripts/release/check-versions.sh
+        ./scripts/release/check-ohos-deps.sh
         cargo fmt --all -- --check
         cargo check --workspace --all-targets --locked
         cargo clippy --workspace --all-targets --all-features --locked -- -D warnings
@@ -123,6 +125,7 @@ $:
             apt-get install -y git libdbus-1-dev nodejs pkg-config
 
             ./scripts/release/check-versions.sh
+            ./scripts/release/check-ohos-deps.sh
             cargo build --release --locked -p codewhale-cli -p codewhale-tui
 
             mkdir -p target/cnb-release

.github/APPROVED_CONTRIBUTORS

@@ -9,3 +9,48 @@
 #   issue:username
 #   all:username
 all:hmbown
+all:reidliu41
+all:HUQIANTAO
+all:merchloubna70-dot
+all:h3c-hexin
+all:axobase001
+all:donglovejava
+all:Oliver-ZPLiu
+all:idling11
+all:angziii
+all:aboimpinto
+all:encyc
+all:Duducoco
+all:cyq1017
+all:zlh124
+all:THINKER-ONLY
+all:nightt5879
+all:Liu-Vince
+all:JiarenWang
+all:wdw8276
+all:pengyou200902
+all:linzhiqin2003
+all:LING71671
+all:JasonOA888
+all:Inference1
+all:hongqitai
+all:gordonlu
+all:gaord
+all:zhuangbiaowei
+all:yuanchenglu
+all:Vishnu1837
+all:sximelon
+all:Sskift
+all:New2Niu
+all:mvanhorn
+all:MengZ-super
+all:membphis
+all:LeoAlex0
+all:Lee-take
+all:lbcheng888
+all:kunpeng-ai-lab
+all:elowen53
+all:CrepuscularIRIS
+all:chnjames
+all:ChaceLyee2101
+all:AresNing

.github/AUTHOR_MAP

@@ -0,0 +1,91 @@
+# Contributor credit identity map.
+#
+# Format:
+#   alias = Display Name <id+login@users.noreply.github.com>
+#
+# The right-hand side must use GitHub's numeric noreply address so harvested
+# co-author credit lands in the contributor graph. The left-hand side may be a
+# GitHub login, old-style noreply address, raw email from a contributor commit,
+# or local machine email seen in older harvested history.
+
+hmbown = Hmbown <101357273+Hmbown@users.noreply.github.com>
+reidliu41 = reidliu41 <61492567+reidliu41@users.noreply.github.com>
+reid201711@gmail.com = reidliu41 <61492567+reidliu41@users.noreply.github.com>
+HUQIANTAO = HUQIANTAO <58421104+HUQIANTAO@users.noreply.github.com>
+Hu Qiantao = HUQIANTAO <58421104+HUQIANTAO@users.noreply.github.com>
+huqiantao@users.noreply.github.com = HUQIANTAO <58421104+HUQIANTAO@users.noreply.github.com>
+huqiantao@HudeMacBook-Air.local = HUQIANTAO <58421104+HUQIANTAO@users.noreply.github.com>
+tom_huu@qq.com = HUQIANTAO <58421104+HUQIANTAO@users.noreply.github.com>
+merchloubna70-dot = merchloubna70-dot <258170091+merchloubna70-dot@users.noreply.github.com>
+h3c-hexin = h3c-hexin <13790929+h3c-hexin@users.noreply.github.com>
+he.xin@h3c.com = h3c-hexin <13790929+h3c-hexin@users.noreply.github.com>
+axobase001 = axobase001 <138223345+axobase001@users.noreply.github.com>
+donglovejava = donglovejava <211940267+donglovejava@users.noreply.github.com>
+Oliver-ZPLiu = Oliver-ZPLiu <47081637+Oliver-ZPLiu@users.noreply.github.com>
+idling11 = idling11 <8055620+idling11@users.noreply.github.com>
+Hanmiao Li = idling11 <8055620+idling11@users.noreply.github.com>
+894876246@qq.com = idling11 <8055620+idling11@users.noreply.github.com>
+angziii = angziii <177907677+angziii@users.noreply.github.com>
+aboimpinto = aboimpinto <1231687+aboimpinto@users.noreply.github.com>
+Paulo Aboim Pinto = aboimpinto <1231687+aboimpinto@users.noreply.github.com>
+aboimpinto@gmail.com = aboimpinto <1231687+aboimpinto@users.noreply.github.com>
+encyc = encyc <62669951+encyc@users.noreply.github.com>
+Duducoco = Duducoco <69681789+Duducoco@users.noreply.github.com>
+cyq1017 = cyq1017 <61975706+cyq1017@users.noreply.github.com>
+cyq = cyq1017 <61975706+cyq1017@users.noreply.github.com>
+15000851237@163.com = cyq1017 <61975706+cyq1017@users.noreply.github.com>
+zlh124 = zlh124 <56312993+zlh124@users.noreply.github.com>
+THINKER-ONLY = THINKER-ONLY <181556007+THINKER-ONLY@users.noreply.github.com>
+nightt5879 = nightt5879 <87569709+nightt5879@users.noreply.github.com>
+Liu-Vince = Liu-Vince <56624166+Liu-Vince@users.noreply.github.com>
+Vince = Liu-Vince <56624166+Liu-Vince@users.noreply.github.com>
+liuwenchang.x@qq.com = Liu-Vince <56624166+Liu-Vince@users.noreply.github.com>
+JiarenWang = JiarenWang <33421508+JiarenWang@users.noreply.github.com>
+wdw8276 = wdw8276 <3972439+wdw8276@users.noreply.github.com>
+pengyou200902 = pengyou200902 <35026241+pengyou200902@users.noreply.github.com>
+linzhiqin2003 = linzhiqin2003 <123250980+linzhiqin2003@users.noreply.github.com>
+LING71671 = LING71671 <231181387+LING71671@users.noreply.github.com>
+JasonOA888 = JasonOA888 <101583541+JasonOA888@users.noreply.github.com>
+Inference1 = Inference1 <68734681+Inference1@users.noreply.github.com>
+hongqitai = hongqitai <188678175+hongqitai@users.noreply.github.com>
+gordonlu = gordonlu <3125629+gordonlu@users.noreply.github.com>
+gaord = gaord <9567937+gaord@users.noreply.github.com>
+Ben Gao = gaord <9567937+gaord@users.noreply.github.com>
+bengao168@msn.com = gaord <9567937+gaord@users.noreply.github.com>
+zhuangbiaowei = zhuangbiaowei <93194+zhuangbiaowei@users.noreply.github.com>
+yuanchenglu = yuanchenglu <4088730+yuanchenglu@users.noreply.github.com>
+Vishnu1837 = Vishnu1837 <104626273+Vishnu1837@users.noreply.github.com>
+sximelon = sximelon <15710511+sximelon@users.noreply.github.com>
+Sskift = Sskift <163287349+Sskift@users.noreply.github.com>
+New2Niu = New2Niu <19551155+New2Niu@users.noreply.github.com>
+mvanhorn = mvanhorn <455140+mvanhorn@users.noreply.github.com>
+MengZ-super = MengZ-super <121712068+MengZ-super@users.noreply.github.com>
+membphis = membphis <6814606+membphis@users.noreply.github.com>
+LeoAlex0 = LeoAlex0 <31839998+LeoAlex0@users.noreply.github.com>
+Lee-take = Lee-take <210963840+Lee-take@users.noreply.github.com>
+lbcheng888 = lbcheng888 <6716643+lbcheng888@users.noreply.github.com>
+kunpeng-ai-lab = kunpeng-ai-lab <16793595+kunpeng-ai-lab@users.noreply.github.com>
+elowen53 = elowen53 <88364845+elowen53@users.noreply.github.com>
+Elowen = elowen53 <88364845+elowen53@users.noreply.github.com>
+xrnc@outlook.com = elowen53 <88364845+elowen53@users.noreply.github.com>
+CrepuscularIRIS = CrepuscularIRIS <126939795+CrepuscularIRIS@users.noreply.github.com>
+chnjames = chnjames <44110547+chnjames@users.noreply.github.com>
+ChaceLyee2101 = ChaceLyee2101 <95995339+ChaceLyee2101@users.noreply.github.com>
+AresNing = AresNing <49557311+AresNing@users.noreply.github.com>
+
+shenjackyuanjie = shenjackyuanjie <54507071+shenjackyuanjie@users.noreply.github.com>
+shenjack = shenjackyuanjie <54507071+shenjackyuanjie@users.noreply.github.com>
+3695888@qq.com = shenjackyuanjie <54507071+shenjackyuanjie@users.noreply.github.com>
+xyuai = xyuai <281015099+xyuai@users.noreply.github.com>
+Implementist = Implementist <24910011+Implementist@users.noreply.github.com>
+implecao = Implementist <24910011+Implementist@users.noreply.github.com>
+yuyuyu4993@qq.com = Implementist <24910011+Implementist@users.noreply.github.com>
+jrcjrcc = jrcjrcc <192965070+jrcjrcc@users.noreply.github.com>
+jrcjrcc@users.noreply.github.com = jrcjrcc <192965070+jrcjrcc@users.noreply.github.com>
+RefuseOdd = RefuseOdd <192543033+RefuseOdd@users.noreply.github.com>
+wywsoor = wywsoor <26341601+wywsoor@users.noreply.github.com>
+hsdbeebou = hsdbeebou <284843096+hsdbeebou@users.noreply.github.com>
+tdccccc = tdccccc <79492752+tdccccc@users.noreply.github.com>
+greyfreedom = greyfreedom <11493871+greyfreedom@users.noreply.github.com>
+greyfreedom@163.com = greyfreedom <11493871+greyfreedom@users.noreply.github.com>
+puneetdixit200 = puneetdixit200 <236133619+puneetdixit200@users.noreply.github.com>

.github/PULL_REQUEST_TEMPLATE.md

@@ -11,3 +11,4 @@
 - [ ] Updated docs or comments as needed
 - [ ] Added or updated tests where relevant
 - [ ] Verified TUI behavior manually if UI changes
+- [ ] Harvested/co-authored credit uses a GitHub numeric noreply address

.github/workflows/ci.yml

@@ -27,12 +27,16 @@ jobs:
           node-version: 20
       - name: Check version drift
         run: ./scripts/release/check-versions.sh
+      - name: Check OHOS dependency graph
+        run: ./scripts/release/check-ohos-deps.sh
 
   lint:
     name: Lint
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: rustfmt, clippy
@@ -50,6 +54,22 @@ jobs:
         run: cargo clippy --workspace --all-features --locked -- -D warnings
       - name: Check provider registry drift
         run: python3 scripts/check-provider-registry.py
+      - name: Check harvested contributor credit
+        if: github.event_name != 'schedule'
+        shell: bash
+        run: |
+          if [[ "${{ github.event_name }}" == "pull_request" ]]; then
+            git fetch --no-tags origin "${{ github.base_ref }}"
+            RANGE="origin/${{ github.base_ref }}..HEAD"
+          elif [[ "${{ github.event.before }}" != "0000000000000000000000000000000000000000" ]]; then
+            RANGE="${{ github.event.before }}..${{ github.sha }}"
+          else
+            RANGE="HEAD~1..HEAD"
+          fi
+          python3 scripts/check-coauthor-trailers.py \
+            --author-map .github/AUTHOR_MAP \
+            --range "$RANGE" \
+            --check-authors
       - name: Linux clippy location
         run: echo "Linux clippy/test gates run on CNB for mirrored fix/*, rebrand/*, work/v*, and main branches."
 

.github/workflows/issue-gate.yml

@@ -1,4 +1,4 @@
-name: Contribution gate - issues
+name: Contribution intake - issues
 
 on:
   issues:
@@ -8,29 +8,18 @@ permissions:
   contents: read
   issues: write
 
-env:
-  # Keep new gates observable first. Switch to "enforce" only after maintainers
-  # have seeded active contributors and reviewed the dry-run signal.
-  CONTRIBUTION_GATE_MODE: dry-run
-
 jobs:
   gate:
     runs-on: ubuntu-latest
     steps:
-      - name: Gate unapproved external issues
+      - name: Welcome new external issue reporters
         uses: actions/github-script@v7
         with:
           script: |
             const issue = context.payload.issue;
             const owner = context.repo.owner;
             const repo = context.repo.repo;
             const privileged = new Set(['OWNER', 'MEMBER', 'COLLABORATOR']);
-            const gateMode = (process.env.CONTRIBUTION_GATE_MODE || 'dry-run').trim().toLowerCase();
-            const enforceGate = gateMode === 'enforce';
-
-            if (!['dry-run', 'enforce'].includes(gateMode)) {
-              core.warning(`Unknown CONTRIBUTION_GATE_MODE "${gateMode}"; defaulting to dry-run.`);
-            }
 
             if (privileged.has(issue.author_association)) return;
             if (issue.user.login === 'github-actions[bot]') return;
@@ -71,29 +60,25 @@ jobs:
               return;
             }
 
-            const gateMessage = enforceGate
-              ? 'This repository currently uses a maintainer-managed contribution gate, so issues from contributors who are not listed in `.github/APPROVED_CONTRIBUTORS` are closed automatically.'
-              : 'This repository is currently observing a maintainer-managed contribution gate in dry-run mode, so this issue is staying open. When enforcement is enabled, issues from contributors who are not listed in `.github/APPROVED_CONTRIBUTORS` will be closed automatically.';
+            const marker = '<!-- codewhale-issue-intake -->';
+            const { data: comments } = await github.rest.issues.listComments({
+              owner,
+              repo,
+              issue_number: issue.number,
+              per_page: 100,
+            });
+            if (comments.some(comment => (comment.body || '').includes(marker))) return;
 
             await github.rest.issues.createComment({
               owner,
               repo,
               issue_number: issue.number,
               body: [
+                marker,
                 `Thanks @${issue.user.login} for the report.`,
                 '',
-                gateMessage,
+                'This issue is staying open for maintainer triage. CodeWhale gets better because people bring us real edge cases from real machines, providers, regions, and workflows.',
                 '',
-                'Please read `CONTRIBUTING.md` for the expected issue shape. A maintainer can grant issue access by commenting `/lgtmi` on an issue.',
+                'If you can add a reproduction, logs, version output, screenshots, or the provider/model involved, that makes it much easier for us to verify and harvest the fix. Maintainers may comment `/lgtmi` to mark recurring issue reporters as approved so this intake note is skipped next time.',
               ].join('\n'),
             });
-
-            if (!enforceGate) return;
-
-            await github.rest.issues.update({
-              owner,
-              repo,
-              issue_number: issue.number,
-              state: 'closed',
-              state_reason: 'not_planned',
-            });

.github/workflows/pr-gate.yml

@@ -73,21 +73,32 @@ jobs:
             }
 
             const gateMessage = enforceGate
-              ? 'This repository currently uses a maintainer-managed contribution gate, so pull requests from contributors who are not listed in `.github/APPROVED_CONTRIBUTORS` are closed automatically.'
-              : 'This repository is currently observing a maintainer-managed contribution gate in dry-run mode, so this pull request is staying open. When enforcement is enabled, pull requests from contributors who are not listed in `.github/APPROVED_CONTRIBUTORS` will be closed automatically.';
+              ? 'This repository currently limits automated PR intake to contributors listed in `.github/APPROVED_CONTRIBUTORS`. This is a maintainer-safety control for code review and CI load, not a judgment on the contribution. A maintainer can grant recurring PR access with `/lgtm` after review; once the generated allowlist PR is merged, this pull request can be reopened or resubmitted.'
+              : 'This repository is observing a maintainer-managed PR intake gate in dry-run mode, so this pull request is staying open. This note helps maintainers prepare the allowlist before any enforcement is considered.';
 
-            await github.rest.issues.createComment({
+            const marker = '<!-- codewhale-pr-gate -->';
+            const { data: comments } = await github.rest.issues.listComments({
               owner,
               repo,
               issue_number: pr.number,
-              body: [
-                `Thanks @${pr.user.login} for taking the time to contribute.`,
-                '',
-                gateMessage,
-                '',
-                'Please read `CONTRIBUTING.md` for the expected contribution shape. A maintainer can grant PR access by commenting `/lgtm` on a pull request.',
-              ].join('\n'),
+              per_page: 100,
             });
+            const alreadyNoted = comments.some(comment => (comment.body || '').includes(marker));
+            if (!alreadyNoted) {
+              await github.rest.issues.createComment({
+                owner,
+                repo,
+                issue_number: pr.number,
+                body: [
+                  marker,
+                  `Thanks @${pr.user.login} for taking the time to contribute.`,
+                  '',
+                  gateMessage,
+                  '',
+                  'Please read `CONTRIBUTING.md` for the expected contribution shape. A maintainer can grant recurring PR access by commenting `/lgtm` on a pull request.',
+                ].join('\n'),
+              });
+            }
 
             if (!enforceGate) return;
 

.github/workflows/release.yml

@@ -42,6 +42,8 @@ jobs:
         run: cargo fmt --all -- --check
       - name: Compile check
         run: cargo check --workspace --all-targets --locked
+      - name: OHOS dependency graph
+        run: ./scripts/release/check-ohos-deps.sh
       - name: Clippy
         run: cargo clippy --workspace --all-targets --all-features --locked -- -D warnings
       - name: Workspace tests

.gitignore

@@ -50,6 +50,8 @@ docs/*.pdf
 # Local dev scripts and temp files
 *.sh
 *.cmd
+!ohos-clang.sh
+!ohos-clangxx.sh
 !scripts/**
 !.github/scripts/**
 test.txt

AGENTS.md

@@ -0,0 +1,22 @@
+# Repository Agent Guidance
+
+## CodeWhale Stewardship
+
+- Treat community contributors as partners. Good-faith PRs, issue reports,
+  repros, logs, reviews, and verification comments are maintainer evidence,
+  not queue noise.
+- Keep gates warm and dry-run unless Hunter explicitly approves enforcement.
+  Gate copy should guide contributors clearly and respectfully.
+- Credit every harvested PR, issue report, or comment that materially shaped a
+  fix. Preserve authorship when possible; otherwise use mappable GitHub
+  noreply `Co-authored-by` trailers from `.github/AUTHOR_MAP`.
+- Do not tag, publish, create a GitHub Release, or push release artifacts
+  without Hunter approval.
+- Use CodeWhale branding while keeping DeepSeek support first-class. Retiring
+  legacy `deepseek-tui` names must never read as deprecating DeepSeek models or
+  provider support.
+- Review PRs from code, tests, linked issues, comments, and check results.
+  Never merge, close, harvest, or defer community work from title or labels
+  alone.
+- Respect concurrent work in the tree. Do not revert or rewrite unrelated
+  edits by other people or agents.