Merge commit '3d83740f88b6aaba6962256be517656496b83f25' into lsp-server

docs/standards/playbook/.gitea/workflows/standards-check.yml

@@ -24,52 +24,48 @@ jobs:
     steps:
       - name: 📥 准备仓库
         run: |
+          set -euo pipefail
+
           echo "========================================"
           echo "📥 准备仓库到 WORKSPACE_DIR"
           echo "========================================"
 
           REPO_NAME="${{ github.event.repository.name }}"
-          REPO_DIR="${{ env.WORKSPACE_DIR }}/$REPO_NAME"
           TOKEN="${{ secrets.WORKFLOW }}"
-          if [ -n "$TOKEN" ]; then
-            REPO_URL="https://oauth2:${TOKEN}@${GITHUB_SERVER_URL#https://}/${{ github.repository }}.git"
-          else
-            REPO_URL="${GITHUB_SERVER_URL}/${{ github.repository }}.git"
-          fi
-
-          if [ -d "$REPO_DIR" ]; then
-            if [ -d "$REPO_DIR/.git" ]; then
-              cd "$REPO_DIR"
-              git clean -fdx
-              git reset --hard
-              git fetch --all --tags --force --prune --prune-tags
-            else
-              rm -rf "$REPO_DIR"
-            fi
-          fi
-
-          if [ ! -d "$REPO_DIR/.git" ]; then
-            mkdir -p "${{ env.WORKSPACE_DIR }}"
-            git clone "$REPO_URL" "$REPO_DIR"
-            cd "$REPO_DIR"
-          fi
-
           TARGET_SHA="${{ github.sha }}"
           TARGET_REF="${{ github.ref }}"
-          if git cat-file -e "$TARGET_SHA^{commit}" 2>/dev/null; then
-            git checkout -f "$TARGET_SHA"
+          TARGET_REF_NAME="${{ github.ref_name }}"
+
+          mkdir -p "$WORKSPACE_DIR"
+          REPO_DIR="$(mktemp -d "$WORKSPACE_DIR/${REPO_NAME}.XXXXXX")"
+
+          if [ -n "$TOKEN" ]; then
+            REPO_URL="https://oauth2:${TOKEN}@${GITHUB_SERVER_URL#https://}/${GITHUB_REPOSITORY}.git"
+          else
+            REPO_URL="${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git"
+          fi
+
+          git clone "$REPO_URL" "$REPO_DIR"
+
+          if git -C "$REPO_DIR" cat-file -e "${TARGET_SHA}^{commit}" 2>/dev/null; then
+            git -C "$REPO_DIR" checkout -f "$TARGET_SHA"
           else
             if [ -n "$TARGET_REF" ]; then
-              git fetch origin "$TARGET_REF"
-              git checkout -f FETCH_HEAD
+              git -C "$REPO_DIR" fetch origin "$TARGET_REF"
+              git -C "$REPO_DIR" checkout -f FETCH_HEAD
             else
-              git checkout -f "${{ github.ref_name }}"
+              git -C "$REPO_DIR" checkout -f "$TARGET_REF_NAME"
             fi
           fi
 
           git config --global --add safe.directory "$REPO_DIR"
-          echo "REPO_DIR=$REPO_DIR" >> $GITHUB_ENV
+          echo "REPO_DIR=$REPO_DIR" >> "$GITHUB_ENV"
       - name: 🧪 Lint commit message / PR title
         run: |
           cd "$REPO_DIR"
           python3 .gitea/ci/commit_message_lint.py
+
+      - name: 🧹 清理临时仓库
+        if: always()
+        run: |
+          rm -rf "$REPO_DIR"

docs/standards/playbook/.gitea/workflows/sync-superpowers.yml

@@ -1,68 +0,0 @@
-name: Sync Superpowers Skills
-
-on:
-  workflow_dispatch:
-
-concurrency:
-  group: superpowers-sync-${{ github.repository }}
-  cancel-in-progress: true
-
-env:
-  WORKSPACE_DIR: "/home/workspace"
-  TARGET_BRANCH: "main"
-  SUPERPOWERS_BRANCH: "thirdparty/skill"
-  SUPERPOWERS_DIR: "superpowers"
-  SUPERPOWERS_LIST: "codex/skills/.sources/superpowers.list"
-
-jobs:
-  sync:
-    name: Sync to main
-    runs-on: ubuntu-22.04
-
-    steps:
-      - name: Prepare repo
-        run: |
-          echo "========================================"
-          echo "Prepare repo to WORKSPACE_DIR"
-          echo "========================================"
-
-          REPO_NAME="${{ github.event.repository.name }}"
-          REPO_DIR="${{ env.WORKSPACE_DIR }}/$REPO_NAME"
-          TOKEN="${{ secrets.WORKFLOW }}"
-          if [ -n "$TOKEN" ]; then
-            REPO_URL="https://oauth2:${TOKEN}@${GITHUB_SERVER_URL#https://}/${{ github.repository }}.git"
-          else
-            REPO_URL="${GITHUB_SERVER_URL}/${{ github.repository }}.git"
-          fi
-
-          if [ -d "$REPO_DIR" ]; then
-            if [ -d "$REPO_DIR/.git" ]; then
-              cd "$REPO_DIR"
-              git clean -fdx
-              git reset --hard
-              git fetch --all --tags --force --prune --prune-tags
-            else
-              rm -rf "$REPO_DIR"
-            fi
-          fi
-
-          if [ ! -d "$REPO_DIR/.git" ]; then
-            mkdir -p "${{ env.WORKSPACE_DIR }}"
-            git clone "$REPO_URL" "$REPO_DIR"
-            cd "$REPO_DIR"
-          fi
-
-          # Always run sync from the latest target branch state.
-          # This prevents stale/manual dispatch refs from using outdated scripts.
-          git fetch origin "${{ env.TARGET_BRANCH }}"
-          git checkout -B "${{ env.TARGET_BRANCH }}" "origin/${{ env.TARGET_BRANCH }}"
-
-          git config --global --add safe.directory "$REPO_DIR"
-          echo "REPO_DIR=$REPO_DIR" >> $GITHUB_ENV
-
-      - name: Sync superpowers skills to main
-        shell: bash
-        run: |
-          set -euo pipefail
-          cd "$REPO_DIR"
-          bash .gitea/ci/sync_superpowers.sh

docs/standards/playbook/.gitea/workflows/test.yml

@@ -17,10 +17,8 @@ concurrency:
 # 🔧 配置区域 - 测试参数
 # ==========================================
 env:
-  # ===== 测试环境配置 =====
   # 测试工作目录
   WORKSPACE_DIR: "/home/workspace"
-  TEST_WORKSPACE: "/home/workspace/playbook-test"
 
 jobs:
   # ==========================================
@@ -33,51 +31,42 @@ jobs:
     steps:
       - name: 📥 准备仓库
         run: |
+          set -euo pipefail
+
           echo "========================================"
           echo "📥 准备仓库到 WORKSPACE_DIR"
           echo "========================================"
 
           REPO_NAME="${{ github.event.repository.name }}"
-          REPO_DIR="${{ env.WORKSPACE_DIR }}/$REPO_NAME"
           TOKEN="${{ secrets.WORKFLOW }}"
-          if [ -n "$TOKEN" ]; then
-            REPO_URL="https://oauth2:${TOKEN}@${GITHUB_SERVER_URL#https://}/${{ github.repository }}.git"
-          else
-            REPO_URL="${GITHUB_SERVER_URL}/${{ github.repository }}.git"
-          fi
-
-          if [ -d "$REPO_DIR" ]; then
-            if [ -d "$REPO_DIR/.git" ]; then
-              cd "$REPO_DIR"
-              git clean -fdx
-              git reset --hard
-              git fetch --all --tags --force --prune --prune-tags
-            else
-              rm -rf "$REPO_DIR"
-            fi
-          fi
-
-          if [ ! -d "$REPO_DIR/.git" ]; then
-            mkdir -p "${{ env.WORKSPACE_DIR }}"
-            git clone "$REPO_URL" "$REPO_DIR"
-            cd "$REPO_DIR"
-          fi
-
           TARGET_SHA="${{ github.sha }}"
           TARGET_REF="${{ github.ref }}"
-          if git cat-file -e "$TARGET_SHA^{commit}" 2>/dev/null; then
-            git checkout -f "$TARGET_SHA"
+          TARGET_REF_NAME="${{ github.ref_name }}"
+
+          mkdir -p "$WORKSPACE_DIR"
+          REPO_DIR="$(mktemp -d "$WORKSPACE_DIR/${REPO_NAME}.XXXXXX")"
+
+          if [ -n "$TOKEN" ]; then
+            REPO_URL="https://oauth2:${TOKEN}@${GITHUB_SERVER_URL#https://}/${GITHUB_REPOSITORY}.git"
+          else
+            REPO_URL="${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git"
+          fi
+
+          git clone "$REPO_URL" "$REPO_DIR"
+
+          if git -C "$REPO_DIR" cat-file -e "${TARGET_SHA}^{commit}" 2>/dev/null; then
+            git -C "$REPO_DIR" checkout -f "$TARGET_SHA"
           else
             if [ -n "$TARGET_REF" ]; then
-              git fetch origin "$TARGET_REF"
-              git checkout -f FETCH_HEAD
+              git -C "$REPO_DIR" fetch origin "$TARGET_REF"
+              git -C "$REPO_DIR" checkout -f FETCH_HEAD
             else
-              git checkout -f "${{ github.ref_name }}"
+              git -C "$REPO_DIR" checkout -f "$TARGET_REF_NAME"
             fi
           fi
 
           git config --global --add safe.directory "$REPO_DIR"
-          echo "REPO_DIR=$REPO_DIR" >> $GITHUB_ENV
+          echo "REPO_DIR=$REPO_DIR" >> "$GITHUB_ENV"
 
       - name: 🔧 安装测试依赖
         run: |
@@ -89,7 +78,7 @@ jobs:
           apt-get install -y python3-pip
 
           python3 -m pip install --upgrade pip
-          python3 -m pip install yamllint
+          python3 -m pip install yamllint tomli
 
           echo ""
           echo "✓ Python 版本: $(python3 --version)"
@@ -127,3 +116,8 @@ jobs:
           echo "========================================"
 
           sh tests/integration/check_doc_links.sh
+
+      - name: 🧹 清理临时仓库
+        if: always()
+        run: |
+          rm -rf "$REPO_DIR"

docs/standards/playbook/.gitea/workflows/update-thirdparty-skills.yml

@@ -0,0 +1,100 @@
+name: 🪄 Update Third-Party Skills
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+  schedule:
+    - cron: "@daily"
+
+concurrency:
+  group: update-thirdparty-${{ github.repository }}
+  cancel-in-progress: false
+
+env:
+  WORKSPACE_DIR: "/home/workspace"
+  THIRDPARTY_BRANCH: "thirdparty/skill"
+  MANIFEST_PATH: ".gitea/ci/thirdparty_skills.json"
+
+jobs:
+  update_and_sync:
+    name: ♻️ Update thirdparty and sync main
+    runs-on: ubuntu-22.04
+
+    steps:
+      - name: 🧰 Prepare repo
+        shell: bash
+        run: |
+          set -euo pipefail
+
+          echo "========================================"
+          echo "🧰 Prepare repo in WORKSPACE_DIR"
+          echo "========================================"
+
+          REPO_NAME="${{ github.event.repository.name }}"
+          TOKEN="${{ secrets.WORKFLOW }}"
+          mkdir -p "${{ env.WORKSPACE_DIR }}"
+          REPO_DIR="$(mktemp -d "${{ env.WORKSPACE_DIR }}/${REPO_NAME}.XXXXXX")"
+          if [ -n "$TOKEN" ]; then
+            REPO_URL="https://oauth2:${TOKEN}@${GITHUB_SERVER_URL#https://}/${{ github.repository }}.git"
+          else
+            REPO_URL="${GITHUB_SERVER_URL}/${{ github.repository }}.git"
+          fi
+
+          git clone "$REPO_URL" "$REPO_DIR"
+
+          git -C "$REPO_DIR" fetch origin main
+          git -C "$REPO_DIR" checkout -B main origin/main
+
+          git config --global --add safe.directory "$REPO_DIR"
+          echo "REPO_DIR=$REPO_DIR" >> "$GITHUB_ENV"
+
+      - name: ♻️ Update thirdparty and sync main
+        shell: bash
+        run: |
+          set -euo pipefail
+          cd "$REPO_DIR"
+
+          echo "========================================"
+          echo "📦 Refresh thirdparty/skill snapshots"
+          echo "========================================"
+
+          before_ref=""
+          if git show-ref --verify --quiet "refs/remotes/origin/$THIRDPARTY_BRANCH"; then
+            before_ref="$(git rev-parse "origin/$THIRDPARTY_BRANCH")"
+            echo "📌 Previous $THIRDPARTY_BRANCH: $before_ref"
+          else
+            echo "📌 Previous $THIRDPARTY_BRANCH: <missing>"
+          fi
+
+          export MANIFEST_PATH="$MANIFEST_PATH"
+          TARGET_BRANCH="$THIRDPARTY_BRANCH" bash .gitea/ci/update_thirdparty_skills.sh
+
+          git fetch origin "$THIRDPARTY_BRANCH"
+          after_ref="$(git rev-parse "origin/$THIRDPARTY_BRANCH")"
+          echo "📌 Current $THIRDPARTY_BRANCH: $after_ref"
+
+          if [ "$after_ref" = "$before_ref" ]; then
+            echo "✅ No thirdparty snapshot change; skip main sync."
+            exit 0
+          fi
+
+          echo "========================================"
+          echo "🚀 Sync skills into main"
+          echo "========================================"
+
+          git fetch origin main
+          git checkout -B main origin/main
+
+          TARGET_BRANCH="main" \
+          THIRDPARTY_BRANCH="$THIRDPARTY_BRANCH" \
+          MANIFEST_PATH="$MANIFEST_PATH" \
+          bash .gitea/ci/sync_thirdparty_skills.sh
+
+          echo "🎉 Update and sync finished."
+
+      - name: 🧹 Clean temporary repo
+        if: always()
+        run: |
+          rm -rf "$REPO_DIR"

docs/standards/playbook/.gitea/workflows/update-thirdparty-superpowers.yml

@@ -1,68 +0,0 @@
-name: Update Third-party Superpowers
-
-on:
-  push:
-    branches:
-      - main
-  workflow_dispatch:
-
-concurrency:
-  group: thirdparty-superpowers-update-${{ github.repository }}
-  cancel-in-progress: true
-
-env:
-  WORKSPACE_DIR: "/home/workspace"
-  TARGET_BRANCH: "thirdparty/skill"
-  UPSTREAM_REPO: "https://github.com/obra/superpowers.git"
-  UPSTREAM_REF: "main"
-
-jobs:
-  update:
-    name: Update thirdparty/skill snapshot
-    runs-on: ubuntu-22.04
-
-    steps:
-      - name: Prepare repo
-        run: |
-          echo "========================================"
-          echo "Prepare repo to WORKSPACE_DIR"
-          echo "========================================"
-
-          REPO_NAME="${{ github.event.repository.name }}"
-          REPO_DIR="${{ env.WORKSPACE_DIR }}/$REPO_NAME"
-          TOKEN="${{ secrets.WORKFLOW }}"
-          if [ -n "$TOKEN" ]; then
-            REPO_URL="https://oauth2:${TOKEN}@${GITHUB_SERVER_URL#https://}/${{ github.repository }}.git"
-          else
-            REPO_URL="${GITHUB_SERVER_URL}/${{ github.repository }}.git"
-          fi
-
-          if [ -d "$REPO_DIR" ]; then
-            if [ -d "$REPO_DIR/.git" ]; then
-              cd "$REPO_DIR"
-              git clean -fdx
-              git reset --hard
-              git fetch --all --tags --force --prune --prune-tags
-            else
-              rm -rf "$REPO_DIR"
-            fi
-          fi
-
-          if [ ! -d "$REPO_DIR/.git" ]; then
-            mkdir -p "${{ env.WORKSPACE_DIR }}"
-            git clone "$REPO_URL" "$REPO_DIR"
-            cd "$REPO_DIR"
-          fi
-
-          git fetch origin main
-          git checkout -B main origin/main
-
-          git config --global --add safe.directory "$REPO_DIR"
-          echo "REPO_DIR=$REPO_DIR" >> $GITHUB_ENV
-
-      - name: Update thirdparty/skill snapshot
-        shell: bash
-        run: |
-          set -euo pipefail
-          cd "$REPO_DIR"
-          bash .gitea/ci/update_thirdparty_superpowers.sh