WhyBuddy: Instructions file for Kiro

.kiro/steering/web-aigc-mainline-enhancement-batch-2026-04-23.md

WhyBuddy web-aigc-mainline-enhancement-batch-2026-04-23.md is an instructions file for Kiro from xiaojilele-glitch/WhyBuddy. It costs 995 tokens per session, scanned A, original, MIT.

A work report for improving the main codebase after the initial web AI features were connected. It focuses on shared type definitions, consistent execution results, and deeper links between runtime traces, audit records, and task history.

In plain words
What is it for?
Use it to plan type cleanup, standardize success and failure responses, and connect tool calls, vector changes, audits, and execution records into one traceable history.
Why use it?
It targets the internal inconsistencies that make features harder to connect and investigate. A common result format and shared history make it easier for routes, monitoring, and governance code to agree.

Instructions file for Kiro

Written for Kiro: installed under .kiro/.

This is xiaojilele-glitch/WhyBuddy's own configuration. It tells Kiro how to work on WhyBuddy itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything WhyBuddy configures →

Reuse

Borrowing it

Nothing to install: this file belongs to xiaojilele-glitch/WhyBuddy. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/xiaojilele-glitch/WhyBuddy/main/.kiro/steering/web-aigc-mainline-enhancement-batch-2026-04-23.md
Clone the repo
git clone --depth 1 https://github.com/xiaojilele-glitch/WhyBuddy

Made for: Kiro.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for WhyBuddy web-aigc-mainline-enhancement-batch-2026-04-23.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/xiaojilele-glitch/whybuddy/web-aigc-mainline-enhancement-batch-2026-04-23/github.svg)](https://agentmods.dev/instructions/xiaojilele-glitch/whybuddy/web-aigc-mainline-enhancement-batch-2026-04-23)
Your own site
<a href="https://agentmods.dev/instructions/xiaojilele-glitch/whybuddy/web-aigc-mainline-enhancement-batch-2026-04-23"><img src="https://agentmods.dev/badge/instructions/xiaojilele-glitch/whybuddy/web-aigc-mainline-enhancement-batch-2026-04-23/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for WhyBuddy web-aigc-mainline-enhancement-batch-2026-04-23.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/xiaojilele-glitch/whybuddy/web-aigc-mainline-enhancement-batch-2026-04-23"><img src="https://agentmods.dev/badge/instructions/xiaojilele-glitch/whybuddy/web-aigc-mainline-enhancement-batch-2026-04-23.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 995 This file is loaded in full into every session.
When invoked 995 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00995 $0.00995
Opus 5.5 $0.00398 $0.00398
Sonnet 5.5 $0.00199 $0.00199
Haiku 4.5 $0.00100 $0.00100

Measured 1mo ago against content hash db6f10766601, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

WhyBuddy web-aigc-mainline-enhancement-batch-2026-04-23.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.kiro/steering/web-aigc-mainline-enhancement-batch-2026-04-23.md · 119 lines

How it starts

The opening of the file, as written. The whole thing — 119 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Web-AIGC 主线增强批次纪要(2026-04-23)

范围

本纪要记录的是“主线入口接线收口完成后的下一批工作”,不是新一轮 spec 补写说明。

本批只确认两件事:

  • 哪些入口级能力已经正式进入主线基线
  • 下一批主线增强应该收哪几类内部债务

本批已收口

以下内容在本批之后统一视为已完成基线:

  • workflow runtime governance routes 已接入主仓路由层
  • open-report route 已接入主仓服务端入口
  • main server 的 Web-AIGC route mounting 已完成
  • RAG vectorStore exposure 已完成
  • chat 运行时 documentSearch injection 已完成
  • MCP checker、tool adapter 与 mainline runtime registration 已完成
  • vector update / delete 的 risk action wiring 已完成

这意味着主线当前已经具备入口、治理、检索、MCP 和向量写路径的最小接线闭环。

下一批定义

下一批不再以补 spec 增量为口径,统一收敛到下面五项。

1. 类型债清理

目标:

  • 清理 server、shared、runtime context、route contract 之间的松散类型
  • 优先移除热点路径上的 any、宽 union、重复派生类型和隐式可空字段

收口信号:

  • 主线关键入口的类型边界稳定
  • 共享契约不再需要多份临时补丁类型兜底

2. runtime adapter result 类型统一

目标:

  • 统一节点执行、工具执行、治理判断的结果壳
  • 对齐 success / blocked / needs_approval / failed 等状态表达
  • 对齐 output / error / report / audit / lineage 等结果字段

收口信号:

  • route、runtime、监控、面板消费同一套结果类型
  • checker、tool adapter、runtime adapter 不再输出各自私有结果结构

3. observability / lineage 深化

目标:

  • 打通 execution record、runtime trace、audit trail 与 open-report
  • 给节点执行、工具调用、向量更新 / 删除补齐统一谱系字段
  • 让治理动作和业务动作共用同一套追踪链

收口信号:

  • 任一条主线执行都能回溯到 route、adapter、checker 和 report
  • 向量写路径进入主线观测面

4. HITL / Office 面板闭环

目标:

  • 统一 HITL 决策、恢复执行、状态刷新和 Office 面板来源
  • 对齐 DecisionPanel / DecisionHistory / tasks-store / mission-client
  • 让 Office、监控面板、任务面板共用主线 session / projection / report

收口信号:

  • 人工确认、回写、恢复执行形成端到端闭环
  • Office 面板不再依赖与主线不一致的临时字段

5. tools-and-agents 治理字段统一

目标:

  • 对账 a2a / auto-agent / internal_api / guest-agents / skills / mcp
  • 统一 actor、source、approval、policy、timeout、audit、lineage 命名
  • 让不同入口的工具调用在治理字段上可以直接并排比较

收口信号:

  • 工具与代理入口的治理元数据可直接对账
  • checker、tool adapter、route、runtime 的治理命名统一

推荐顺序

建议按下面顺序推进下一批:

  1. 类型债清理。
  2. runtime adapter result 类型统一。
  3. observability / lineage 深化。
  4. HITL / Office 面板闭环。
  5. tools-and-agents 治理字段统一。

明确不做

下一批不再把下面内容当作目标:

  • 继续追加 web-aigc spec 条目
  • 再做一轮主线入口挂载
  • 用新增 worktree 数量表示推进进度

Read the full file on GitHub · 119 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 119 lines · 995 tokens per session scan A db6f10766601

Subscribe to this mod's changes

WhyBuddy web-aigc-mainline-enhancement-batch-2026-04-23.md is an instructions file published in the GitHub repository xiaojilele-glitch/WhyBuddy (380 stars, last pushed 1mo ago), licensed MIT. It adds 995 tokens to every session, about $0.0040 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-23.

Related

WhyBuddy web-aigc-mainline-enhancement-batch-2026-04-23.md compared with instructions from other repositories

WhyBuddy web-aigc-mainline-enhancement-batch-2026-04-23.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
WhyBuddy web-aigc-mainline-enhancement-batch-2026-04-23.mdxiaojilele-glitch/WhyBuddyInstructions file3801mo agoMITA995Kiro
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143ktodayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode