Skip to content

fix: use the quiet upstream review handoff - #552

Merged
devantler merged 5 commits into
mainfrom
codex/upstream-review-ready
Oct 9, 2026
Merged

devantler merged 5 commits into
mainfrom
codex/upstream-review-ready

Conversation

@devantler

@devantler devantler commented Oct 8, 2026 •

Copy link
Copy Markdown
Contributor

🤖 Generated by the Agentic Engineer

Why

Contributions to other projects need a clear handoff for maintainer review without internal review comments cluttering their PR conversations.

What

Make the Engineer and Improver use the shared quiet upstream procedure: mark validated work Ready for Review, keep routine updates in the title and description, and answer received feedback in plain English as the contributor. The prerequisite shared procedures are now included on main; the draft waits for current validation and the remaining required gate.

Fixes #551

👉 After merge/promotion: adopt the reviewed plugin in devantler-tech/monorepo#4014.

@devantler devantler closed this Oct 9, 2026
@devantler devantler reopened this Oct 9, 2026
@devantler

Copy link
Copy Markdown
Contributor Author

🤖 Generated by the Agentic Engineer

@coderabbitai review

@coderabbitai

coderabbitai Bot commented Oct 9, 2026 •

Copy link
Copy Markdown
✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@coderabbitai

coderabbitai Bot commented Oct 9, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 0c4c79b7-9881-4d62-92b2-edda9d2140e1
📥 Commits

Reviewing files that changed from the base of the PR and between 1522ce2 and a43bddf.

📒 Files selected for processing (8)
  • .claude-plugin/marketplace.json
  • .github/plugin/marketplace.json
  • plugins/agentic-engineering/.claude-plugin/plugin.json
  • plugins/agentic-engineering/CHANGELOG.md
  • plugins/agentic-engineering/agents/agent-improver.agent.md
  • plugins/agentic-engineering/agents/agentic-engineer.agent.md
  • plugins/agentic-engineering/plugin.json
  • plugins/agentic-engineering/resources/provider-neutral.desired-state.json

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

📜 Recent review details
🧰 Additional context used
📚 Code guidelines (2)
AGENTS.md — auto-discovered
plugins/agentic-engineering/README.md — auto-discovered
📓 Path-based instructions (9)
Source excerpt: **Two manifests in parity.**

📄 CodeRabbit inference engine (AGENTS.md)

Files:

  • .claude-plugin/marketplace.json
  • .github/plugin/marketplace.json
Source excerpt: The consuming repository's canonical `AGENTS.md` must define five named sections.

📄 CodeRabbit inference engine (plugins/agentic-engineering/README.md)

Files:

  • plugins/agentic-engineering/agents/agent-improver.agent.md
  • plugins/agentic-engineering/agents/agentic-engineer.agent.md
Source excerpt: **A plugin's version is its cache key — move it whenever its content changes.**

📄 CodeRabbit inference engine (AGENTS.md)

Files:

  • plugins/agentic-engineering/plugin.json
Source excerpt: Plugins are **thin, additive bundles of curated skills sourced from across the agent-skill ecosystem** — each skill is pulled from **its own upstream**, not from a single repository.

📄 CodeRabbit inference engine (AGENTS.md)

Files:

  • plugins/agentic-engineering/.claude-plugin/plugin.json
  • .claude-plugin/marketplace.json
  • plugins/agentic-engineering/plugin.json
  • .github/plugin/marketplace.json
Source excerpt: So the enforcement is **consumer-side by construction**.

📄 CodeRabbit inference engine (plugins/agentic-engineering/README.md)

Files:

  • plugins/agentic-engineering/resources/provider-neutral.desired-state.json
Source excerpt: **Improvements to a generic role belong upstream of the consumer that found them.**

📄 CodeRabbit inference engine (AGENTS.md)

Files:

  • plugins/agentic-engineering/agents/agent-improver.agent.md
  • plugins/agentic-engineering/agents/agentic-engineer.agent.md
Source excerpt: **A plugin README describes the plugin as it is; its `CHANGELOG.md` carries the history.**

📄 CodeRabbit inference engine (AGENTS.md)

Files:

  • plugins/agentic-engineering/CHANGELOG.md
Source excerpt: Each entry's `source` is a **relative path** (`./plugins/`), so the repo rename (`copilot-plugins` → `agent-plugins`, see [`#7`](https://github.com//issues/7)) and any future move stay link-sa...

📄 CodeRabbit inference engine (AGENTS.md)

Files:

  • .claude-plugin/marketplace.json
  • .github/plugin/marketplace.json
Source excerpt: **Plugin layout.**

📄 CodeRabbit inference engine (AGENTS.md)

Files:

  • plugins/agentic-engineering/agents/agent-improver.agent.md
  • plugins/agentic-engineering/agents/agentic-engineer.agent.md
🔇 Additional comments (8)
plugins/agentic-engineering/agents/agentic-engineer.agent.md (1)

81-87: LGTM!

plugins/agentic-engineering/agents/agent-improver.agent.md (1)

106-112: LGTM!

plugins/agentic-engineering/CHANGELOG.md (1)

24-30: LGTM!

.claude-plugin/marketplace.json (1)

30-30: LGTM!

.github/plugin/marketplace.json (1)

30-30: LGTM!

plugins/agentic-engineering/.claude-plugin/plugin.json (1)

4-4: LGTM!

plugins/agentic-engineering/plugin.json (1)

4-4: LGTM!

plugins/agentic-engineering/resources/provider-neutral.desired-state.json (1)

45-45: 🗄️ Data Integrity & Integration

Both declared digests match their canonical agent files. No hash correction is required.


📝 Walkthrough

Walkthrough

The Engineer and Improver instructions add a procedure for authorized contributions to third-party repositories. It covers private review, the Ready for Review handoff, routine PR updates, and responses to genuine upstream feedback. The changelog records the procedure and notes the retained portfolio-owned definition gate. Plugin versions change to 6.3.2, and the declared agent digests are updated.

Priority: ⬇️ Low

Merge Risk: ⚪ Minimal · up to a43bd

This change updates agent instructions and release metadata for the quiet upstream review handoff. No concrete merge-blocking risk was found, and the declared digests match the definitions.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Linked Issues check Passed The changes satisfy the coding requirements in #551. Both authored entrypoints reference the shared upstream contribution procedure. The procedure requires private validation and review, a Ready for R…
Out of Scope Changes check Passed The changed files stay within #551. The two agent definitions implement the quiet upstream handoff. The changelog, plugin versions, marketplace versions, and desired-state digests support publication …
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Title check Passed The title clearly identifies the main change: using the quiet upstream review handoff for third-party contributions.
Description check Passed The description directly explains the quiet upstream procedure, its purpose, and the affected Engineer and Improver behavior.
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@devantler devantler left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 Generated by the Agentic Engineer

Self-review (fallback — CodeRabbit, Codex and Cursor Bugbot unavailable)

Reviewed commit: b39d84d

  • CodeRabbit: the authenticated included-review refusal, updated 2026-10-09T01:06:29Z, reports the public organization’s free OSS review capacity exhausted; the stated 33-minute window ends at 2026-10-09T01:39:29Z. The command reply also says the review did not complete. This is no substantive verdict.
  • Codex: the authenticated account review-usage refusal, 2026-10-08T23:01:40Z, states the account’s code-review limit is reached. Recovery requires an account limit change or replenishment; no paid credits are authorized. Fresh portfolio evidence shows no later serving event.
  • Cursor Bugbot: the authenticated user/team usage refusal, 2026-10-08T22:47:52Z, states the user/team usage or spend limit is reached. Recovery requires admin intervention. Fresh portfolio evidence shows no later serving event.

Reviewed the complete eight-file diff against reviewed main 6caec15 for correctness and security. Both role references resolve to the shared, already published upstream procedure. Their third-party handoff preserves the portfolio-owned promotion and merge gates. The four manifests agree on 6.3.3, the published 6.3.2 history is retained, and generated definition digests match the role bytes. No bundled skill is changed relative to main; the reviewed skill sync is preserved by the non-destructive integration. Manifest/provenance/license validation, digest checks, version/changelog gates, bundled-edit guard and whitespace checks pass. Direct conversation, review and thread reads found no unresolved finding to discard. The older CodeRabbit green at a43bddf is stale at this new head.

Verdict: no P0/P1 findings

Current-head CI is still completing, and the configured required Code Quality verdict remains UNVERIFIED. This review does not clear either separate gate or authorize promotion or merge.

@devantler

Copy link
Copy Markdown
Contributor Author

🤖 Generated by the Agentic Engineer

The newly reviewed main release is integrated at signed head b39d84dd1533015124ceedd5377b514b77cc048d, based on 6caec1522866f2536d6ccc589f340d86efc71ae6. Published 6.3.2 history is preserved and the draft’s generated version is 6.3.3. The role text is unchanged from the previously reviewed draft; no bundled skill is edited relative to current main.

Local manifest/provenance/license validation, regenerated digest checks, version/changelog gates, the bundled-edit guard, and whitespace validation pass. The posted local review validates as GREEN self@b39d84dd1533015124ceedd5377b514b77cc048d. The previous CodeRabbit green is stale.

Current-head CI is still completing. The configured required Code Quality verdict is independently UNVERIFIED; readiness remains QUERY-UNKNOWN / HOLD. This stays a draft without promotion or merge. Resume by collecting current-head CI and resolving the required verdict, then rebind the full readiness gates.

@devantler

Copy link
Copy Markdown
Contributor Author

🤖 Generated by the Agentic Engineer

Readiness at b39d84dd1533015124ceedd5377b514b77cc048d.

Current-head CI run 37868041504 has completed successfully, including manifest validation, version/digest checks, marketplace automation and packaged-resource tests. The existing local review validates as GREEN self@b39d84dd1533015124ceedd5377b514b77cc048d; complete review/control reads contain no unresolved findings or human requirements.

I reviewed the complete eight-file diff as a plugin consumer. This is instruction and release metadata with no independently exercisable runtime surface: both roles now link the already bundled upstream-contribution procedure, retain the portfolio delivery gate, and carry matching regenerated role digests and manifest versions. No synced skill was edited. Actual adoption by a later consumer dispatch remains separate verification.

The PR base equals the freshly read default head 6caec1522866f2536d6ccc589f340d86efc71ae6, GitHub reports CLEAN, and no live worktree or recent competing activity owns the branch. The diagnostic helper cannot expose the native Code Quality verdict, but the consumer merge policy treats CLEAN as authoritative for required checks. I will use the normal head-pinned promotion and merge path, preserving every native repository rule; a refusal remains a blocker, never a bypass.

@devantler
devantler marked this pull request as ready for review October 9, 2026 04:24
@devantler
devantler merged commit 44a6d03 into main Oct 9, 2026
23 checks passed
@devantler
devantler deleted the codex/upstream-review-ready branch October 9, 2026 04:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: ✅ Done

Development

Successfully merging this pull request may close these issues.

Make engineering agents use the quiet upstream review handoff

1 participant