mirror of
https://github.com/microsoft/SkillOpt.git
synced 2026-08-03 07:02:46 +08:00
674d1db185
Addresses remaining maintainer + Copilot review blockers on #134. - Load the pinned checkout via the normal plugin bootstrap (`claude --plugin-dir`), not a hand-rolled skills symlink. A per-run session marker is injected into using-superpowers/SKILL.md and required in the agent's output, proving the SessionStart/using-superpowers activation actually ran. - Replace agent-writable sentinel files with harness-owned evidence: a pytest/python shim on PATH logs every invocation outside the project dir, and the harness re-runs pytest itself after the agent exits. Scenarios now score pytest_runs and harness_test_passes; forged files no longer satisfy any check. - Stop reusing host credentials by default. ~/.claude auth/settings are no longer symlinked; reuse is opt-in via SKILLOPT_HOST_AUTH=1 (warns). Fail closed (NO_AUTH) when neither a key nor host-auth is available. - Add OS-level isolation, opt-in via SKILLOPT_SANDBOX=bwrap|docker. - Prompt on stdin + --output-format text, matching backend.py CLI usage. - Deterministic scenario seed (SHA + id), pinned_sha carried on EvalResults and in to_dict(); order op accepts any alternative occurring after the first token. - Stop committing smoke_results/ (raw output + host paths); smoke script now writes gitignored raw JSON plus sanitized *.summary.txt excerpts to share. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>