Merge pull request #7 from bigsmartben/extension-release-v2.0.2

Update repository-governance extension to v2.0.2

Author: bigsmartben

extensions/catalog.json

@@ -65,8 +65,8 @@
     "repository-governance": {
       "name": "Repository Governance",
       "id": "repository-governance",
-      "version": "2.0.0",
-      "description": "Generate Repository Governance Framework files with vertical SSOT routing and evidence",
+      "version": "2.0.2",
+      "description": "Generate Repository Governance Framework files from Spec Kit metadata",
       "author": "bigben",
       "repository": "https://github.com/bigsmartben/spec-kit-agent-governance",
       "license": "MIT",

extensions/repository-governance/.extensionignore

@@ -1,5 +1,6 @@
 .git/
 .github/
+docs/
 AGENTS.md
 pyproject.toml
 uv.lock

extensions/repository-governance/.gitignore

@@ -5,3 +5,4 @@ __pycache__/
 .venv/
 dist/
 *.zip
+.worktrees/

extensions/repository-governance/CHANGELOG.md

@@ -2,6 +2,27 @@
 
 ## Unreleased
 
+### Fixed
+
+- Keep spec-kit integration PR sync aligned with the runtime extension package boundary and current spec-kit test node ids.
+
+## [2.0.2] - 2026-06-03
+
+### Fixed
+
+- Fix release workflow smoke installation after `v2.0.1` failed before artifact publication when Spec Kit already installs the bundled repository-governance extension and projects Codex commands as `.agents/skills`.
+- Allow tag release artifact publication to complete when the optional spec-kit integration PR token is unavailable.
+
+## [2.0.1] - 2026-06-03
+
+### Added
+
+- Add GitHub Actions contract CI for repository governance validation.
+- Add a release artifact workflow that builds a deterministic runtime extension zip, smoke-installs the extension, and can open the bundled `bigsmartben/spec-kit` integration PR.
+- Document the local extension package build command for `dist/repository-governance.zip`.
+- Add repository extension governance documentation for command, template, script, path-safety, package-boundary, and verification rules.
+- Add a Spec Kit Agent Adapter layer and scenario capability index for repository-local skills and MCP-backed external tool evidence, with MCP config candidates treated as evidence only and runtime enumeration required before use.
+
 ## [2.0.0] - 2026-05-25
 
 ### Changed

extensions/repository-governance/README.md

@@ -13,6 +13,8 @@ Generate the active Repository Governance Framework SSOT section.
 - Update existing target governance file.
 - Distill detected repository areas into action rules.
 - Capture repository facts as vertical SSOT evidence.
+- Project agent platform adapter rules from Spec Kit integration metadata.
+- Build a scenario capability index for repository-local skills and MCP-backed external tool evidence.
 - Analyze repository areas to depth 2 only.
 - Include hidden and cache directories in repository area governance.
 - Enforce one primary responsibility per directory.
@@ -24,7 +26,7 @@ Generate the active Repository Governance Framework SSOT section.
 ## Install
 
 ```bash
-specify extension add repository-governance --from https://github.com/bigsmartben/spec-kit-agent-governance/archive/refs/tags/v2.0.0.zip
+specify extension add repository-governance --from https://github.com/bigsmartben/spec-kit-agent-governance/archive/refs/tags/v2.0.2.zip
 ```
 
 Local development:
@@ -45,6 +47,14 @@ Helper:
 uv run python .specify/extensions/repository-governance/scripts/refresh_repository_governance.py
 ```
 
+## Build
+
+```bash
+rm -f dist/repository-governance.zip
+mkdir -p dist
+zip -qr dist/repository-governance.zip extension.yml commands scripts templates -x '*/__pycache__/*' '*.pyc'
+```
+
 ## Files
 
 - `extension.yml`
@@ -59,10 +69,19 @@ uv run python .specify/extensions/repository-governance/scripts/refresh_reposito
 - Code Style SSOT evidence from formatter, lint, type-check, and test configuration.
 - Directory Structure SSOT evidence from repository areas scanned to depth 2.
 - Toolchain SSOT evidence from manifests, lockfiles, Docker, compose, and task runner files.
-- Agent Harness SSOT evidence from active agent context files, repository-local skills, and MCP configs.
+- Agent Harness SSOT evidence from active agent context files, repository-local skills, and MCP config candidates.
+
+## Agent Adapter
+
+- Repository Capability: abstract repository-local skill specs and MCP evidence into scenario-level capabilities.
+- Spec Kit Agent Adapter: map the active integration to the context target and supported discovery behavior.
+- Platform Projection: emit only rules the active agent context file can safely apply.
+
+Repository-local `SKILL.md` files are indexed by declared name, description, trigger, and source path. MCP config files are reported as candidates and evidence only; active servers, resources, and tools must be enumerated from the agent platform runtime before use.
 
 ## Verify
 
 ```bash
+uv run python -m py_compile scripts/refresh_repository_governance.py tests/test_governance_domains.py
 uv run pytest -q
 ```

extensions/repository-governance/commands/speckit.repository-governance.refresh.md

@@ -35,9 +35,17 @@ $ARGUMENTS
    - Directory Structure evidence
    - Toolchain evidence
    - Agent Harness evidence
-9. Preserve content outside managed markers.
-10. Preserve managed markers verbatim.
-11. Run:
+9. Resolve the Spec Kit Agent Adapter for the active integration.
+   - context target
+   - repository-local skill discovery behavior
+   - MCP runtime discovery behavior
+   - repository MCP config candidates as evidence only
+10. Project the scenario capability index.
+    - repository-local skill capabilities from `SKILL.md` name, description, trigger, and source path
+    - MCP-backed external tool capability with runtime enumeration before use
+11. Preserve content outside managed markers.
+12. Preserve managed markers verbatim.
+13. Run:
 
    ```bash
    uv run python .specify/extensions/repository-governance/scripts/refresh_repository_governance.py

extensions/repository-governance/extension.yml

@@ -3,7 +3,7 @@ schema_version: "1.0"
 extension:
   id: repository-governance
   name: "Repository Governance"
-  version: "2.0.0"
+  version: "2.0.2"
   description: "Generate Repository Governance Framework files from Spec Kit metadata"
   author: "bigben"
   repository: "https://github.com/bigsmartben/spec-kit-agent-governance"

extensions/repository-governance/pyproject.toml

@@ -485,6 +485,12 @@ def render_projection(root: Path, target: Path, state: dict[str, Any], created_m
         f"- MCP configs: {', '.join(scan_mcp_configs(root)) or 'none'}",
         f"- Extensions config: .specify/extensions.yml ({extensions_status(root)})",
         "",
+        "## Agent Platform Adapter",
+        *agent_adapter_lines(root, target, default_key),
+        "",
+        "## Capability Index",
+        *capability_index_lines(root),
+        "",
         "## Repository Evidence",
         *section_or_default(source_text, ["## Repository Evidence"], repository_evidence_default()),
         "",
@@ -773,12 +779,95 @@ def scan_skills(root: Path) -> list[str]:
     return sorted(rel(root, path) for path in root.rglob("SKILL.md") if not ignored(path))
 
 
+def skill_capability_lines(root: Path) -> list[str]:
+    lines: list[str] = []
+    for path_text in scan_skills(root):
+        path = root / path_text
+        fields = skill_frontmatter(path)
+        name = fields.get("name") or fallback_skill_name(path_text)
+        description = fields.get("description") or f"Repository-local skill spec at {path_text}."
+        lines.extend(
+            [
+                f"- Repository capability: {name}",
+                f"  - Scenario: {description}",
+                f"  - Source: `{path_text}`.",
+                "  - Runtime action: read matching skill before planning or editing.",
+            ]
+        )
+    return lines
+
+
+def skill_frontmatter(path: Path) -> dict[str, str]:
+    try:
+        lines = normalize_newlines(path.read_text(encoding="utf-8-sig")).splitlines()
+    except (OSError, UnicodeDecodeError):
+        return {}
+    if not lines or lines[0].strip() != "---":
+        return {}
+    fields: dict[str, str] = {}
+    for line in lines[1:]:
+        if line.strip() == "---":
+            break
+        key, separator, value = line.partition(":")
+        if not separator:
+            continue
+        key = key.strip()
+        value = value.strip().strip("'\"")
+        if key in {"name", "description"} and value:
+            fields[key] = value
+    return fields
+
+
+def fallback_skill_name(path_text: str) -> str:
+    parent = Path(path_text).parent.name
+    return parent or path_text.replace("/", "-")
+
+
+def capability_index_lines(root: Path) -> list[str]:
+    mcp_configs = scan_mcp_configs(root)
+    mcp_sources = format_values(mcp_configs) if mcp_configs else "none detected"
+    lines = skill_capability_lines(root)
+    lines.extend(
+        [
+            "- Repository capability: MCP-backed external tools",
+            f"  - Sources: MCP config candidates are evidence, not proof of active tools: {mcp_sources}.",
+            "  - Runtime action: enumerate available servers, resources, and tools before use.",
+        ]
+    )
+    return lines
+
+
+def agent_adapter_lines(root: Path, target: Path, integration: str) -> list[str]:
+    lines = [
+        "- Repository Capability layer: abstract repository-local abilities and evidence independent of agent runtime.",
+        "- Agent Adapter layer: translate repository capabilities into platform-specific discovery and activation rules.",
+        "- Platform Projection layer: render the active context target without claiming unavailable platform support.",
+        f"- Active integration: {integration}",
+        f"- Context target: {rel(root, target)}",
+    ]
+    if integration == "codex":
+        lines.extend(
+            [
+                "- Skill discovery: repository-local `SKILL.md` capability specs, sorted by path.",
+                "- MCP discovery: platform runtime enumeration first; repository config candidates are evidence only unless supported by this adapter.",
+            ]
+        )
+    else:
+        lines.extend(
+            [
+                "- Skill discovery: evidence-only repository scan; platform activation is integration-specific.",
+                "- MCP discovery: platform-specific; repository config candidates are evidence only.",
+            ]
+        )
+    return lines
+
+
 def scan_mcp_configs(root: Path) -> list[str]:
     names = {".mcp.json", "mcp.json", "mcp.yml", "mcp.yaml", "mcp.config.json"}
     return sorted(
         rel(root, path)
         for path in root.rglob("*")
-        if path.is_file() and not ignored(path) and (path.name in names or "mcp" in path.name.lower())
+        if path.is_file() and not ignored(path) and path.name in names
     )
 
 

extensions/repository-governance/scripts/refresh_repository_governance.py

@@ -71,14 +71,29 @@ Sync Impact Report
 - Protected files: implementation, CI, MCP config, secrets, permissions, tool settings
 - Protected-file writes: explicit user request only
 
+## Agent Platform Adapter
+
+- Repository Capability: abstract repository-local skill and MCP evidence into scenario capabilities.
+- Spec Kit Agent Adapter: map integration metadata to the active agent context target and supported discovery behavior.
+- Platform Projection: emit only the rules the active agent context file can safely apply.
+
+## Capability Index
+
+- Repository-local skills: use when the task matches a declared skill name, description, or trigger.
+- MCP-backed external tools: use when the task needs external tool or resource access; enumerate runtime tools before use.
+- Repository config candidates are evidence only unless the active adapter supports them.
+
 ## Skill Contract
 
-- Repository-local skill specs should declare purpose, trigger, allowed read paths, allowed write paths, forbidden paths, outputs, and validation command.
+- Repository-local skill specs should declare name, description or trigger, allowed read paths, allowed write paths, forbidden paths, outputs, and validation command.
+- Read matching `SKILL.md` files before planning or editing.
 
 ## MCP Policy
 
 - Default: read-only
 - Mutation: explicit user intent
+- Runtime discovery: enumerate available servers, resources, and tools before use.
+- Config candidates: evidence only, not proof of active tools.
 - External writes: target, action, result
 - Secrets: never log, never write