release: v0.2.2 — IDP, observability, tiered architecture, org cycle

[kokevidaurre]

See full changelog in develop branch commits. 157 files, 17K+ lines. All 1779 tests pass. 13/13 Docker fresh-user tests pass.

[gemini-code-assist]

Code Review

This pull request significantly expands the CLI's capabilities by introducing an Internal Developer Platform (IDP) for service cataloging and scorecard validation, local observability for execution and cost tracking, and a tiered infrastructure system. It also refactors the core execution logic into modular components and implements a layered context system for agents. The review feedback correctly identifies a bug in a GitHub API query within the scorecard engine and suggests refactoring duplicated logic in the git push automation.

[gemini-code-assist]

The first exec call with jq '.[0].conclusion' appears to be incorrect, as the GitHub API for listing repository action runs returns an object with a workflow_runs array, not a direct array. The second call correctly queries .workflow_runs[0].conclusion. The first call is likely redundant and the accompanying comment is misleading. This can be simplified to a single API call.

Suggested change

	const out = exec(`gh api repos/${repo}/actions/runs?per_page=1&status=completed --jq '.[0].conclusion // empty'`);
	// GitHub API returns runs array directly
	const out2 = exec(`gh api repos/${repo}/actions/runs --jq '.workflow_runs[0].conclusion // empty'`);
	const conclusion = out || out2;
	const conclusion = exec(`gh api repos/${repo}/actions/runs?per_page=1&status=completed --jq '.workflow_runs[0].conclusion // empty'`);

[gemini-code-assist]

The else blocks on lines 132-134 and 135-137 are identical, leading to code duplication. This logic can be simplified by determining the push target first and then making a single spawnSync call. This improves readability and maintainability.

      let pushTarget = 'origin';
      // Validate repo format (org/name) to prevent injection
      if (repo && /^[\w.-]+\/[\w.-]+$/.test(repo)) {
        const pushUrl = await getBotPushUrl(repo);
        if (pushUrl) {
          pushTarget = pushUrl;
        }
      }
      spawnSync('git', ['push', pushTarget, 'HEAD'], { ...execOpts, stdio: 'pipe' });