Skip to content

Add renewal-risk-judge skill#158

Open
xingdi614-alt wants to merge 85 commits into
runxhq:mainfrom
xingdi614-alt:codex/renewal-risk-judge
Open

Add renewal-risk-judge skill#158
xingdi614-alt wants to merge 85 commits into
runxhq:mainfrom
xingdi614-alt:codex/renewal-risk-judge

Conversation

@xingdi614-alt

Copy link
Copy Markdown

Adds the renewal-risk-judge runx skill with inline harness cases, fixtures, local harness evidence, dogfood run, verification evidence, and report.\n\nPackage: renewal-risk-judge@0.1.0\nHarness cases: high_risk_with_save_play, missing_usage_signals_stop\nDogfood receipt: runx:receipt:sha256:033f2803da11f7663f5b5738c8660b6eadc682db42df2272eb24f9081d001559

auscaster and others added 30 commits June 19, 2026 19:55
default to the /internal/thread-outbox pending cursor (drops the fragile client cursor-cache that re-walked history on a fresh runner) and listen for a board-sync repository_dispatch so the venue can trigger the drain low-latency.
a no-ua, no-browser-headers, http1.1 client is an obvious bot signature. the fetch tool now presents a current chrome ua + the browser header set and negotiates http2 with gzip/brotli, applied as overridable defaults. configurable via RUNX_HTTP_USER_AGENT and RUNX_HTTP_BROWSER=0; the anthropic and registry transports stay plain; all transport guards unchanged. tls (ja3/ja4) and http2 fingerprint matching are out of scope.
Conventional follow-up for the pushed lockfile refresh.
Adds the dependency-cve-audit runx skill and registers it in the official catalog.

Verified:
- CI green on PR runxhq#82
- node --check skills/dependency-cve-audit/run.mjs
- runx doctor skills/dependency-cve-audit --json
- runx harness skills/dependency-cve-audit --receipt-dir <tmp> --json
- packages/cli/src/skill-refs.test.ts
Adds the structured-extraction runx skill and completes the paid follow-up integration work.

Maintainer cleanup added:
- deterministic tool fixture for structured.extract
- SKILL.md frontmatter for official catalog generation
- official skill lock/Rust table/catalog allowlist entries

Verified:
- CI green on PR runxhq#80
- local merge simulation after runxhq#82
- node --check skills/structured-extraction/tools/structured/extract/run.mjs
- runx doctor skills/structured-extraction --json
- runx harness skills/structured-extraction --receipt-dir <tmp> --json
- runx dev tools/structured/extract --json with RUNX_PROJECT_DIR set to the skill root
- packages/cli/src/skill-refs.test.ts
auscaster and others added 29 commits June 21, 2026 20:01
Update the native CLI skill execution/export surfaces, add governed data-plane contracts and fixtures, refresh official skill catalog coverage, and remove local .ai state from Git tracking.

Validation: pnpm bindings:check; pnpm exec tsc --noEmit --allowJs --checkJs --module NodeNext --moduleResolution NodeNext --target ES2022 --skipLibCheck scripts/check-upstream-skill-bindings.mjs; git diff --check
Replace the frantic-specific event-replay driver with a generic, stateless
reconcile engine: consume a tenant's desired thread state, diff against live
GitHub, apply only the difference via the provider primitives. Drop the cursor
and the frantic_thread_outbox translator; generalize label ensure.
Reconcile read each issue thread once per run (state, labels, comment markers)
and write only actual differences, instead of re-fetching the whole thread per
comment. Steady state is now one read per thread and zero writes; cut redundant
per-run observations to newly-created threads only.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants