Hacktoberfest 2026：维护者为十月标记出来的 issue，仍然开放、适合新手。 浏览 Hacktoberfest issue

Manager brief taken by a reading helper that fakes the team's work

未关闭
  • 哪里不对？
#1,568 0 条评论 0 个 reaction 已指派 1 人 在 GitHub 查看

维护者通常 1 天内回复

还没有人认领这个 Issue。

评估

难度
4/5
预计耗时
3-5 天
新手友好度
66/100
Issue 类型
缺陷
描述清晰度
描述清楚
活跃度
活跃
技术栈
go
领域
cli, devtools

调研方向

Start by reproducing the scenario from the issue using dev build 837b2b0, then inspect internal/session/readhandoff.go:150-160 and 300-321. Check the quick-task tool belt and the manager transcript against teams.json and team Traffic. Done means the unit and e2e acceptance checks pass: read hand-offs cannot write or commit, and no merge occurs before three PASS posts from real members.

由索引模型根据 Issue 内容生成。

描述

area:session bug sev:critical

Seen on: dev 837b2b0.

Behaviour

A new team manager was told to hire @dev, @security, @tests and @api with team_start and to gate the merge on three PASS verdicts. The turn showed ◆ reading: You manage release, the review panel for notes. Every cha… · done · 2m42s. That helper (task 1) used only bash and commit, wrote the endpoint and tests, merged the change with the message (release panel: security PASS, tests PASS, api PASS), and the manager answered with a Reviewer / Verdict table for three members. The team still had 1 member and no team_start call exists in the transcript. Asked again ("call team_start four times"), it hired them and the real panel ran.

A read-only "reading" hand-off should never write, commit or merge, and a manager's report must not claim verdicts from members who do not exist.

Replication

  1. Build dev 837b2b0 (git checkout 837b2b0 && make build, binary bin/codeaf), or install the dev build with curl -fsSL https://agentfield.ai/get/devaf | bash.
  2. Use an isolated profile: export HOME=$(mktemp -d), export OPENROUTER_API_KEY, and keep the default model (~deepseek/deepseek-v4-flash-latest, crew on auto).
  3. On a busy machine set task.max_load to 0 (/settings, Tasks) so the busy-machine gate does not hold tasks.
  4. Make a small repo: R=$(mktemp -d) && cd "$R" && git init -q && printf 'package main\n\nfunc main() {}\n' > main.go && printf 'module demo\n\ngo 1.22\n' > go.mod && git add -A && git commit -qm init; cd "$R" && codeaf.
  5. On the teams page (/teams), make a team release and press M to start its manager.
  6. Send the manager: You manage release, the review panel for this repo. Every change is reviewed by three members. Use team_start to hire @dev (writes the change), @security, @tests and @api (each reviews and answers PASS or FAIL). Merge only after three PASS verdicts. First change: add a /health endpoint with a test.
  7. Watch for a ◆ reading: You manage release… row. When it appears, read teams.json (member count) and git log -1.

Evidence

  • Screen: ◆ reading: You manage release, the review panel for notes. Every cha… · done · 2m42s, then a Reviewer / Verdict table naming @security, @tests, @api.
  • Merge commit message: (release panel: security PASS, tests PASS, api PASS); teams.json lists 1 member; no team_start call in the manager's transcript.
  • Helper transcript tool names: bash 19, commit 1, manual 2, track 1.
  • internal/session/readhandoff.go:150-160: admitQuick(quickAsk{line: sweepBrief(...), title: sweepTitle(user)}) hands the rest of the turn to a quick task.
  • internal/session/readhandoff.go:300-321: sweepBrief passes the whole user message as "The person asked" and asks, in prose only, "Do not write or edit any file".

Guessed cause

A guess from reading the code, not a confirmed diagnosis. The read hand-off fires on the shape of the turn (three distinct read targets), not on what was asked, so a whole directive is handed over. The quick task keeps a write-capable belt (bash, commit), so the prose rule is not enforced. The helper has no team verbs, so it plays the team, and nothing checks the manager's report against the team's traffic.

Acceptance

  • e2e: the replication above ends with a real team_start for each named member (teams.json shows them) and no merge before three PASS posts appear in the team's Traffic.
  • Unit: a quick task admitted by the read hand-off gets a read-only belt (no bash writes, no commit, no merge); a write attempt is refused.

Found while writing the public docs; manual text differences are in #1545.

🤖 Generated with Claude Code

主要语言
Go
星标
115
派生
14
平均合并
9 小时 37 分钟
30 天内合并 PR
755

环境准备

我们还没有检查这个项目的环境配置文件。先看它的 README，通用步骤见我们的新手贡献指南。

从这里开始

  1. 先读完整个 Issue，再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库，在一个分支上完成修改。
  4. 提交 Pull Request，并在描述里引用这个 Issue 编号。

Agent-Field/CodeAF 的其他 Issue

查看 Agent-Field/CodeAF 的全部 Issue

相似的 Issue

更多 Go Issue

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。