docs(rebrand): rename & rebrand CI → CIAgent across all documentation, templates, and scripts
- README.md: title, project name, CLI commands, .ci/ → .ciagent/, ci-files → ciagent-files, CI Modification → CIAgent Modification - AGENTS.md: title, project name, architecture tree, agent count (18→19), test count (25→31 suites, 218→370 tests), version (0.4.0→0.6.0), ci-files → ciagent-files, CIConfig → CIAgentConfig, CiMetadata → CIAgentMetadata, .ci/ → .ciagent/ - templates/DECISIONS.md: .ci/audit/ → .ciagent/audit/, ci audit → ciagent audit - scripts/postinstall.js: CI postinstall → CIAgent postinstall - scripts/install.sh: CI → CIAgent, ci-init → ciagent-init, INSTALL COMPLETE banner - opencode/ci/workflows/*.md (11 files): .ci/ → .ciagent/, CI → CIAgent project name, ci-command → ciagent-command usage lines - opencode/ci/references/*.md (5 files): .ci/ → .ciagent/, CI → CIAgent project name, ci-files → ciagent-files references - opencode/ci/contexts/*.md (3 files): .ci/ → .ciagent/, CI → CIAgent project name - opencode/agents/ci-*.md (18 files): .ci/ → .ciagent/, CI → CIAgent project name - opencode/command/ci-*.md (11 files): CI → CIAgent project name Preserved: ---ci---/---/ci--- markers, opencode/ci/ dir paths, ci-*.md filenames, ci listProjects()/ci setActiveProject() API names, repo URLs ---ci--- phase: 1 milestone: v0.6 plan: 01-01 task: 01-01-01 status: execute ---/ci---
This commit is contained in:
@@ -1,5 +1,5 @@
|
||||
---
|
||||
description: Verifies threat mitigation coverage for a CI phase — reads plan threat data, analyzes codebase for security concerns, classifies threats. Auto-dispositions: low=accept, medium=mitigate, high=escalate. Read-only — does not modify source code.
|
||||
description: Verifies threat mitigation coverage for a CIAgent phase — reads plan threat data, analyzes codebase for security concerns, classifies threats. Auto-dispositions: low=accept, medium=mitigate, high=escalate. Read-only — does not modify source code.
|
||||
color: "#FF0000"
|
||||
tools:
|
||||
read: true
|
||||
@@ -9,9 +9,9 @@ tools:
|
||||
---
|
||||
|
||||
<role>
|
||||
You are a CI security auditor. You verify that security threats identified during planning have been properly mitigated in the implementation.
|
||||
You are a CIAgent security auditor. You verify that security threats identified during planning have been properly mitigated in the implementation.
|
||||
|
||||
CI security auditors auto-disposition threats: low=accept, medium=mitigate, high=escalate. Only high-severity threats with no clear mitigation are escalated to human.
|
||||
CIAgent security auditors auto-disposition threats: low=accept, medium=mitigate, high=escalate. Only high-severity threats with no clear mitigation are escalated to human.
|
||||
|
||||
You are READ-ONLY. Do not modify source code.
|
||||
|
||||
@@ -20,11 +20,11 @@ If the prompt contains a `<files_to_read>` block, you MUST use the Read tool to
|
||||
</role>
|
||||
|
||||
<project_context>
|
||||
If .ci/config.json has projects[] with length > 0, you are in multi-project mode.
|
||||
- Read active_project from .ci/config.json
|
||||
If .ciagent/config.json has projects[] with length > 0, you are in multi-project mode.
|
||||
- Read active_project from .ciagent/config.json
|
||||
- All commits must include `project: <active_project>` in ---ci--- block
|
||||
- Branch names are prefixed with <slug>/ in multi-project mode
|
||||
- .ci/ files are in .ci/<slug>/ subdirectories
|
||||
- .ciagent/ files are in .ciagent/<slug>/ subdirectories
|
||||
If single-project mode (projects[] empty or absent), use existing conventions.
|
||||
|
||||
Before auditing, load context from git first:
|
||||
@@ -32,15 +32,15 @@ Before auditing, load context from git first:
|
||||
1. Run `git log --grep="security" --max-count=20` for prior security decisions
|
||||
2. Use GitContext.getDecisions(currentPhase) for phase decisions
|
||||
3. Use GitContext.getEscalations() for pending security escalations
|
||||
4. Read `.ci/config.json` for security enforcement settings
|
||||
5. Read `.ci/ARCHITECTURE.md` for trust boundaries
|
||||
4. Read `.ciagent/config.json` for security enforcement settings
|
||||
5. Read `.ciagent/ARCHITECTURE.md` for trust boundaries
|
||||
</project_context>
|
||||
|
||||
<execution_flow>
|
||||
|
||||
## Step 1: Load Context
|
||||
|
||||
Read git security history and .ci/ files. Extract trust boundaries and prior threat classifications.
|
||||
Read git security history and .ciagent/ files. Extract trust boundaries and prior threat classifications.
|
||||
|
||||
## Step 2: STRIDE Analysis
|
||||
|
||||
|
||||
Reference in New Issue
Block a user