Merge branch 'main' into codex/fix-vulnerability-in-visual-capture-fallback

Author: JSONbored

.claude/skills/contributing-to-gittensory/reference.md

@@ -149,7 +149,9 @@ All tools are metadata-only (no source upload). Run in this order:
 6. `gittensory_predict_gate` — `{login, owner, repo, title, body, labels, linkedIssues}` → predicted
    conclusion + blockers + warnings + readiness score.
 
-(Auth'd extras: `gittensory_preflight_pr` / `…_local_diff` for lane fit + collision + queue health.)
+(Auth'd extras: `gittensory_preflight_pr` / `…_local_diff` for lane fit + collision + queue health;
+`gittensory_get_pr_ai_review_findings` — `{login, owner, repo, pullNumber}` → structured post-submission
+AI-review inline findings (category/path/severity) for your own PR.)
 
 ---
 

.env.example

@@ -298,9 +298,13 @@ REDIS_URL=redis://redis:6379                # REQUIRED for the self-host review
 #                                            #   Collection and schema are auto-created at startup. Off when unset.
 # QDRANT_API_KEY=                            # Bearer token for an authenticated Qdrant (cloud / on-prem). Omit for
 #                                            #   the local --profile qdrant container (unauthenticated).
-# QDRANT_DIM=768                             # vector dimension of the collection (768 = nomic-embed-text:latest;
-#                                            #   1024 = bge-m3/mxbai-embed-large). Must match AI_EMBED_MODEL;
-#                                            #   recreate the Qdrant collection when changing this after startup.
+# QDRANT_DIM=1024                            # vector dimension of the collection (1024 = bge-m3/mxbai-embed-large,
+#                                            #   the recommended default -- bge-m3's longer native context window
+#                                            #   is a better match for RAG's ~16k-char chunk budget than smaller
+#                                            #   embedders; 768 = nomic-embed-text:latest, a lighter alternative).
+#                                            #   Must match AI_EMBED_MODEL; recreate the Qdrant collection when
+#                                            #   changing this after startup (existing vectors are a fixed width
+#                                            #   and cannot be resized in place).
 # AI_EMBED_BATCH=96                          # items per RAG embed-provider call (#4327). Defaults to 96
 #                                            #   (a conservative bound sized for Workers AI's 100-item cap).
 #                                            #   Tune upward for GPU-accelerated self-host Ollama throughput --
@@ -566,6 +570,20 @@ REDIS_URL=redis://redis:6379                # REQUIRED for the self-host review
 # OLLAMA_NUM_PARALLEL=2                      # concurrent requests per loaded model
 # OLLAMA_MAX_LOADED_MODELS=2                 # distinct models kept resident at once
 # OLLAMA_KEEP_ALIVE=30m                      # how long an idle model stays loaded before eviction
+# OLLAMA_FLASH_ATTENTION=1                   # usually auto-enabled already on supported GPUs (check the ollama
+#                                            #   container's boot log for "Flash Attention was auto, set to
+#                                            #   enabled" to confirm) -- set explicitly anyway, because it is
+#                                            #   REQUIRED alongside OLLAMA_KV_CACHE_TYPE below for KV-cache
+#                                            #   quantization to actually take effect; setting KV_CACHE_TYPE
+#                                            #   alone without this does nothing.
+# OLLAMA_KV_CACHE_TYPE=q8_0                  # f16 (default) | q8_0 | q4_0. q8_0 roughly HALVES per-context KV-
+#                                            #   cache VRAM (confirmed on an RTX A5000: 4608 MiB at f16 -> 2448
+#                                            #   MiB at q8_0 for one loaded context) with published perplexity
+#                                            #   impact of 0.002-0.05 -- undetectable in practice. Frees real
+#                                            #   headroom for more concurrent models or larger contexts on a
+#                                            #   VRAM-constrained GPU. q4_0 quarters it further at more
+#                                            #   noticeable quality cost; q8_0 is the recommended default for
+#                                            #   self-host GPU deployments.
 #
 # Generic OpenAI-compatible reviewer (AI_PROVIDER=openai-compatible). Defaults:
 # OPENAI_COMPATIBLE_AI_BASE_URL=http://localhost:11434/v1, OPENAI_COMPATIBLE_AI_MODEL=llama3.1.
@@ -600,9 +618,9 @@ REDIS_URL=redis://redis:6379                # REQUIRED for the self-host review
 # CODEX_AI_EFFORT=medium                     # low | medium | high | xhigh. `max` is accepted and maps to xhigh.
 # CODEX_AI_TIMEOUT_MS=                       # override CLI timeout in ms; unset scales by effort (low/medium 120s, high 240s, xhigh 360s)
 #                                            # Codex service speed is standard by default. No fast/priority tier is requested by this stack.
-# AI_EMBED_MODEL=nomic-embed-text:latest     # embedding model for RAG (openai-compatible /embeddings). Its output
-#                                            #   dimension must match QDRANT_DIM. Used only when RAG is enabled
-#                                            #   (GITTENSORY_REVIEW_RAG + allowlist).
+# AI_EMBED_MODEL=bge-m3:latest               # embedding model for RAG (openai-compatible /embeddings). Its output
+#                                            #   dimension must match QDRANT_DIM (1024 for bge-m3). Used only when
+#                                            #   RAG is enabled (GITTENSORY_REVIEW_RAG + allowlist).
 # AI_EMBED_BASE_URL=                         # route embeddings to a SEPARATE openai-compatible endpoint instead
 #                                            #   of the review chain's own AI provider — e.g. a dedicated local
 #                                            #   Ollama for embeddings while Claude/Codex handle review. Unset =

.github/workflows/ci.yml

@@ -70,6 +70,7 @@ jobs:
             # build or types in ways only that full toolchain would catch.
             ui:
               - 'apps/gittensory-ui/**'
+              - 'apps/gittensory-miner-ui/**'
               - 'apps/gittensory-extension/**'
               - 'scripts/build-extension.mjs'
               - 'package.json'

.gittensory-miner.yml.example

@@ -52,3 +52,11 @@ maxConcurrentClaims: 1
 # How strongly this repo encourages a miner to open discovery issues.
 # Values: encouraged | neutral | discouraged. Default: neutral.
 issueDiscoveryPolicy: neutral
+
+# Per-repo tuning for the feasibility gate a miner consults before starting work.
+# `enabled` (boolean, default: true) turns the gate off entirely for this repo.
+# `suppressedReasons` (string list, default: []) ignores specific avoid/raise
+# reason codes (e.g. duplicate_cluster_high) from the gate's verdict.
+feasibilityGate:
+  enabled: true
+  suppressedReasons: []

.gittensory.yml

@@ -64,14 +64,24 @@ review:
     skip_drafts: true
     skip_docs_only: true
 
-# Linked-issue label propagation (#priority-linked-issue-gate, #priority-linked-issue-gate-ownership): a PR
-# that closes/fixes/resolves an issue inherits that issue's point-bearing gittensor:* label onto the PR
-# itself, instead of the PR's own label being decided purely by its commit-title prefix. bug/feature are
-# `trustMaintainerAuthoredIssue: true` (routine categorization, no reward at stake, and the title-based
-# fallback already has zero equivalent verification) so they propagate even when the PR author isn't a
-# formal GitHub assignee of the issue — our issues are almost always maintainer-authored for open pickup and
-# rarely formally assigned. priority intentionally omits the flag: it is the scarce, maintainer-hand-picked
-# reward label, and must still require the PR author to be the issue's actual author/assignee.
+# Linked-issue label propagation (#priority-linked-issue-gate, #priority-linked-issue-gate-ownership,
+# #priority-reward-maintainer-trust): a PR that closes/fixes/resolves an issue inherits that issue's
+# point-bearing gittensor:* label onto the PR itself, instead of the PR's own label being decided purely by
+# its commit-title prefix. bug/feature are `trustMaintainerAuthoredIssue: true` (routine categorization, no
+# reward at stake, and the title-based fallback already has zero equivalent verification) so they propagate
+# even when the PR author isn't a formal GitHub assignee of the issue — our issues are almost always
+# maintainer-authored for open pickup and rarely formally assigned. priority is a scarce, maintainer-hand-
+# picked reward label, so it defaults to the strict author-or-assignee-only bar everywhere in this codebase
+# EXCEPT here, where we explicitly opt it into the SAME relaxation via `trustMaintainerAuthoredIssueForReward:
+# true`: our issues are open-pickup by design (see the flag's own doc comment in types.ts), so requiring a
+# literal GitHub assignee relationship -- which GitHub silently refuses for a contributor lacking push/triage
+# access -- meant this label could structurally never reach the external contributors it exists to reward. The
+# maintainer's hand-picking already happened when the issue was labeled `gittensor:priority`, not gated on
+# which contributor later closes it. priority is also `removeOtherTypeLabels: false` (additive) -- unlike
+# bug/feature, which are mutually-exclusive TYPE categories, priority is a separate reward dimension that
+# coexists WITH whichever type already applies (an issue is routinely both gittensor:feature AND
+# gittensor:priority at once); resolvePrTypeLabel composes every additive match alongside the one exclusive
+# winner, rather than the two categories competing for a single slot.
 #
 # Review-evasion protection: closing or converting-to-draft your OWN PR while gittensory has an active
 # review pass running, a prior recorded gate failure, or a repeated ready<->draft cycle on this PR, is
@@ -92,7 +102,8 @@ settings:
         trustMaintainerAuthoredIssue: true
       - issueLabel: "gittensor:priority"
         prLabel: "gittensor:priority"
-        removeOtherTypeLabels: true
+        removeOtherTypeLabels: false
+        trustMaintainerAuthoredIssueForReward: true
   reviewEvasionProtection: close
 
 # Repo-doc generation roadmap (#2993/#3002) — opt-in only, off by default. Uncomment to let Gittensory open a

.gittensory.yml.example

@@ -603,22 +603,32 @@ settings:
   # label like `gittensor:priority` -- it is NEVER inferred from a PR's title, changed files, AI
   # output, or existing PR labels, only ever copied from a linked/closing issue ("Fixes #123") that
   # ALREADY carries the configured issue label. Generic beyond the priority use case: any issue label
-  # can map to any PR label. `removeOtherTypeLabels: true` REPLACES the type label entirely (bug/
-  # feature are removed), matching how `gittensor:priority` behaves today; `false` applies the mapped
-  # label ADDITIVELY alongside the normal title-based bug/feature label, leaving it untouched -- useful
-  # for a mapping unrelated to the bug/feature/priority triad (e.g. a `customer:vip` issue label
-  # copied to a `triage:vip` PR label). Disabled by default (no mappings) -- a self-hoster opts in per
-  # repo. If your labels carry reward or moderation weight, configure this in PRIVATE per-repo/global
-  # config (see `config/examples/README.md`) rather than the public `.gittensory.yml`, so contributors
-  # cannot see the exact mapping rules. A per-repo `mappings` override in the private-config layer
-  # REPLACES the global default list wholesale -- it does not merge with it.
+  # can map to any PR label. `removeOtherTypeLabels: true` marks the mapping EXCLUSIVE -- it REPLACES
+  # the type label entirely (bug/feature are removed), for genuinely mutually-exclusive categories; only
+  # the FIRST-configured exclusive match wins when more than one applies. `false` (e.g. `gittensor:priority`,
+  # which is a reward tag that coexists WITH whichever type already applies, not a type of its own) applies
+  # the mapped label ADDITIVELY alongside whichever exclusive match (or the normal title-based bug/feature
+  # label) already won -- every additive match composes together rather than competing for a single slot.
+  # Each mapping normally requires the PR author to be the linked issue's own author or a GitHub assignee of
+  # it (`trustMaintainerAuthoredIssue: true` relaxes this for a routine, non-reward category like bug/feature
+  # -- see the field's own doc comment in `types.ts`). `trustMaintainerAuthoredIssueForReward: true` opts a
+  # REWARD mapping like `gittensor:priority` into that same relaxation: without it, a mapping like this can
+  # structurally never propagate to most external contributors, since GitHub silently refuses to assign
+  # anyone lacking push/triage access to the repo -- so if your issues are open-pickup (maintainer-authored,
+  # rarely formally assigned to a specific contributor), the reward label needs this flag to ever reach them.
+  # Disabled by default (no mappings) -- a self-hoster opts in per repo. If your labels carry reward or
+  # moderation weight, configure this in PRIVATE per-repo/global config (see `config/examples/README.md`)
+  # rather than the public `.gittensory.yml`, so contributors cannot see the exact mapping rules. A per-repo
+  # `mappings` override in the private-config layer REPLACES the global default list wholesale -- it does
+  # not merge with it.
   # linkedIssueLabelPropagation:
   #   enabled: true
   #   mode: exclusive_type_label
   #   mappings:
   #     - issueLabel: gittensor:priority
   #       prLabel: gittensor:priority
-  #       removeOtherTypeLabels: true
+  #       removeOtherTypeLabels: false
+  #       trustMaintainerAuthoredIssueForReward: true
 
   # Create the label if it does not yet exist. Bool. Default: true.
   createMissingLabel: true
@@ -1120,3 +1130,13 @@ settings:
 # reviewRecap:
 #   enabled: true    # Bool. Default: false (no recap is ever built or posted).
 #   cadenceDays: 7   # Positive integer. Days of activity each recap covers. Default: 7 (weekly).
+
+# Cross-repo maintainer recap digest (#1963, #2250): config-as-code override for the CRON-scheduled digest
+# that folds gate-precision + outcome-calibration across every scanned repo into one report (distinct from
+# the single-repo reviewRecap above). Operator-level, not per-repo -- only meaningful on the gittensory
+# self-repo's own manifest (the repo this instance identifies as); a present block there wins over the
+# GITTENSORY_MAINTAINER_RECAP / GITTENSORY_RECAP_CADENCE env vars, which stay the fallback when absent.
+# maintainerRecap:
+#   enabled: true         # Bool. Default: false (env vars decide instead).
+#   cadence: weekly        # daily | weekly. Default: weekly. Invalid values fall back to weekly.
+#   channel: discord       # discord (only supported channel today). Invalid values fall back to discord.

apps/gittensory-miner-extension/README.md

@@ -0,0 +1,23 @@
+# Gittensory Miner Extension
+
+Contributor-facing browser extension for GitHub **issue** pages. It is intentionally separate from
+[`apps/gittensory-extension/`](../gittensory-extension/) (the **Maintainer Overlay**), which injects private PR/issue
+context for maintainers.
+
+## What it does
+
+- Manifest V3 with issue-page `content_scripts`
+- `background.js` service worker + `content.js` message-passing
+- Read-only opportunity badge (score/tier + short why) for watched repositories
+- Options page for watched repos and a local ranked-candidate cache
+
+The badge surfaces the same ranked signal as `packages/gittensory-miner/lib/opportunity-ranker.js` by reading
+pre-ranked candidates from browser local storage. It never writes to GitHub and omits itself when no ranked signal is
+available for the current issue.
+
+## Local ranked cache
+
+Laptop-mode installs can paste JSON from a miner `discover` run into the options page. The extension stores that list in
+`chrome.storage.local.rankedCandidates` and looks up the current issue there. A discovery-index URL can be saved for a
+future hosted client path; it is not read yet, so when only unranked hosted metadata would be available the badge
+degrades gracefully by staying hidden.

apps/gittensory-miner-extension/background.js

@@ -0,0 +1,84 @@
+import "./opportunity-badge.js";
+
+const badgeApi = globalThis.__gittensoryMinerOpportunityBadge;
+
+const PING_MESSAGE = "gittensory-miner:ping";
+const ISSUE_CONTEXT_MESSAGE = "gittensory-miner:issue-context";
+
+chrome.runtime.onMessage.addListener((message, _sender, sendResponse) => {
+  if (!message || typeof message.type !== "string") return false;
+  if (message.type === PING_MESSAGE) {
+    sendResponse({ ok: true, payload: { ready: true } });
+    return false;
+  }
+  if (message.type === ISSUE_CONTEXT_MESSAGE) {
+    const task = loadIssueOpportunityContext(message);
+    void task.then((payload) => sendResponse({ ok: true, payload })).catch((error) =>
+      sendResponse({ ok: false, error: error instanceof Error ? error.message : String(error) }),
+    );
+    return true;
+  }
+  return false;
+});
+
+async function loadIssueOpportunityContext(message) {
+  const settings = await loadMinerExtensionSettings();
+  const repoFullName = `${message.owner}/${message.repo}`;
+  const watched = settings.watchedRepos.some(
+    (repo) => repo.trim().toLowerCase() === repoFullName.toLowerCase(),
+  );
+  if (!watched) {
+    return {
+      watched: false,
+      issueNumber: message.issueNumber,
+      repoFullName,
+      badge: null,
+      status: "repo-not-watched",
+    };
+  }
+
+  const rankedCandidates = await loadRankedCandidates();
+  const rankedEntry = badgeApi.lookupRankedOpportunity(rankedCandidates, repoFullName, message.issueNumber);
+  if (!rankedEntry) {
+    return {
+      watched: true,
+      issueNumber: message.issueNumber,
+      repoFullName,
+      badge: null,
+      status: "no-signal",
+    };
+  }
+
+  return {
+    watched: true,
+    issueNumber: message.issueNumber,
+    repoFullName,
+    badge: badgeApi.formatOpportunityBadge(rankedEntry),
+    status: "ready",
+  };
+}
+
+async function loadMinerExtensionSettings() {
+  const stored = await chrome.storage.sync.get({ watchedRepos: [], discoveryIndexUrl: "" });
+  const watchedRepos = Array.isArray(stored.watchedRepos)
+    ? stored.watchedRepos.map((value) => String(value).trim()).filter(Boolean)
+    : [];
+  const discoveryIndexUrl =
+    typeof stored.discoveryIndexUrl === "string" ? stored.discoveryIndexUrl.trim() : "";
+  return { watchedRepos, discoveryIndexUrl };
+}
+
+async function loadRankedCandidates() {
+  const stored = await chrome.storage.local.get({ rankedCandidates: [] });
+  return Array.isArray(stored.rankedCandidates) ? stored.rankedCandidates : [];
+}
+
+if (globalThis.__GITTENSORY_MINER_EXTENSION_TEST__) {
+  globalThis.__gittensoryMinerBackgroundInternals = {
+    PING_MESSAGE,
+    ISSUE_CONTEXT_MESSAGE,
+    loadIssueOpportunityContext,
+    loadMinerExtensionSettings,
+    loadRankedCandidates,
+  };
+}