chore(aiwg): add T3MP3ST maintainer addon

.aiwg/addons/t3mp3st-maintainer/capabilities/t3mp3st-issue-steward-flow.yaml

@@ -0,0 +1,49 @@
+apiVersion: ops.aiwg.io/v1
+kind: OpsCapability
+metadata:
+  name: t3mp3st-issue-steward-flow
+  labels:
+    category: maintainer
+    repository: T3MP3ST
+  annotations:
+    blast-radius: "issue comments or closures only when explicitly requested"
+spec:
+  description: Classify and steward T3MP3ST issues into response, implementation, feature tracking, closure, or security routing.
+  version: "0.1.0"
+  inputs:
+    - name: issues
+      type: list
+      required: true
+      description: Issue numbers, URLs, or an open-issue filter.
+    - name: mutate
+      type: boolean
+      required: false
+      default: false
+      description: Whether comments, labels, or closures may be posted.
+  outputs:
+    - name: classifications
+      type: list
+      description: Issue class and evidence for each issue.
+    - name: recommended_actions
+      type: list
+      description: Comment, close, link PR, address-issues, feature-track, or defer.
+    - name: draft_responses
+      type: list
+      description: Maintainer-ready response drafts when needed.
+  target_requirements:
+    os: [linux, macos]
+    capabilities: [git, gh]
+  agent: t3mp3st-issue-steward
+  idempotent: true
+  steps:
+    - name: read-thread
+      description: Fetch issue body, labels, comments, linked PRs, and recent activity.
+    - name: classify
+      description: Classify each issue as support-answer, bug-address, feature-track, security-contact, linked-pr, resolved, or needs-info.
+    - name: route
+      description: Route implementation tasks to address-issues and security contact requests to the configured anonymous form.
+    - name: draft
+      description: Draft concise maintainer responses without posting unless mutation was requested.
+  verification:
+    command: "gh issue list --repo elder-plinius/T3MP3ST --limit 1 >/dev/null"
+    expect: "command exits 0"

.aiwg/addons/t3mp3st-maintainer/capabilities/t3mp3st-merge-train-flow.yaml

@@ -0,0 +1,56 @@
+apiVersion: ops.aiwg.io/v1
+kind: OpsCapability
+metadata:
+  name: t3mp3st-merge-train-flow
+  labels:
+    category: maintainer
+    repository: T3MP3ST
+  annotations:
+    blast-radius: "repository-wide; merges code into main and may close linked issues"
+spec:
+  description: Merge validated T3MP3ST PRs one at a time with current CI, SHA, review, and issue reconciliation checks.
+  version: "0.1.0"
+  inputs:
+    - name: pr_numbers
+      type: list
+      required: true
+      description: Ordered candidate PR numbers from a current queue audit.
+    - name: method
+      type: string
+      required: false
+      default: squash
+      description: squash, merge, or rebase.
+    - name: dry_run
+      type: boolean
+      required: false
+      default: true
+      description: When true, report the planned merge train without merging.
+  outputs:
+    - name: merged_prs
+      type: list
+      description: PRs merged with SHA, method, checks, and issue outcomes.
+    - name: stopped_before
+      type: list
+      description: PRs skipped or blocked with exact reason.
+    - name: refreshed_queue
+      type: list
+      description: Queue state after each merge or dry-run check.
+  target_requirements:
+    os: [linux, macos]
+    capabilities: [git, gh, npm]
+  agent: t3mp3st-release-integrator
+  idempotent: false
+  steps:
+    - name: confirm-audit
+      description: Require a current t3mp3st-queue-audit result or perform one before merging.
+    - name: verify-candidate
+      description: Re-read PR head SHA, merge state, review decision, and status checks immediately before action.
+    - name: merge-one
+      description: Merge exactly one PR when dry_run is false and all gates pass.
+    - name: reconcile
+      description: Check linked issues and main branch state after each merge.
+    - name: refresh
+      description: Refresh the open PR queue before the next candidate.
+  verification:
+    command: "gh pr list --repo elder-plinius/T3MP3ST --state open --limit 1 >/dev/null && git status --short --branch >/dev/null"
+    expect: "command exits 0"

.aiwg/addons/t3mp3st-maintainer/capabilities/t3mp3st-pr-audit-flow.yaml

@@ -0,0 +1,49 @@
+apiVersion: ops.aiwg.io/v1
+kind: OpsCapability
+metadata:
+  name: t3mp3st-pr-audit-flow
+  labels:
+    category: maintainer
+    repository: T3MP3ST
+  annotations:
+    blast-radius: "read-only review unless explicitly asked to post a review"
+spec:
+  description: Audit one T3MP3ST pull request for correctness, security, tests, and merge readiness.
+  version: "0.1.0"
+  inputs:
+    - name: pr
+      type: string
+      required: true
+      description: Pull request number or GitHub URL.
+    - name: post_review
+      type: boolean
+      required: false
+      default: false
+      description: Whether to post the review decision to GitHub.
+  outputs:
+    - name: head_sha
+      type: string
+      description: Exact PR head SHA audited.
+    - name: findings
+      type: list
+      description: Blocking or non-blocking review findings.
+    - name: decision
+      type: string
+      description: approve, request-changes, comment, or hold.
+  target_requirements:
+    os: [linux, macos]
+    capabilities: [git, gh, npm]
+  agent: t3mp3st-pr-auditor
+  idempotent: true
+  steps:
+    - name: read-pr-state
+      description: Fetch PR metadata, comments, reviews, linked issues, head SHA, merge state, and CI state.
+    - name: inspect-diff
+      description: Compare the current head against upstream/main and identify changed ownership surfaces.
+    - name: verify
+      description: Run targeted checks, then broaden to typecheck, tests, or lint based on risk.
+    - name: decide
+      description: Produce findings-first maintainer decision with exact evidence.
+  verification:
+    command: "gh pr view \"$PR\" --repo elder-plinius/T3MP3ST --json headRefOid,mergeStateStatus,reviewDecision,statusCheckRollup >/dev/null"
+    expect: "command exits 0"