@dzhechkov/skills-idea2prd 0.1.7 → 0.1.8

package/.dz-manifest.json

@@ -3,17 +3,13 @@
     "version": 1,
     "pack": "skills-idea2prd",
     "files": [
-      {
-        "path": "CHANGELOG.md",
-        "sha256": "17403157f3609436e5587a532c022e6095ee85acc255cf313d5473df311cc55f"
-      },
       {
         "path": "LICENSE",
         "sha256": "3b93f7070f6843f37e0cae255f7caff22b466a4017fd2020d7d3216237e5a701"
       },
       {
         "path": "README.md",
-        "sha256": "646b19adeddf1d63c0f07eabef2f4dcce49d65a259563dfc6ab6b4248d262191"
+        "sha256": "a7dbdf9cb81895308026ba0a949dccdd078ec8c6d54a6fe3460d570adb415994"
       },
       {
         "path": "bin/cli.js",
@@ -21,7 +17,7 @@
       },
       {
         "path": "package.json",
-        "sha256": "4bfe6564c3745ab76783640b91973036f6687155111052f3e3e34a3eb4dcd874"
+        "sha256": "fd3017110d63ef30a8fa7ff8870eea278132eeeb39d1965993b6bde9c85196c3"
       },
       {
         "path": "sources.json",
@@ -73,7 +69,7 @@
       },
       {
         "path": "templates/.claude/skills/goap-research-ed25519/SKILL.md",
-        "sha256": "95459a1566b2f88b6fb0c1d2f096f7631d698b95fa156afa26444a7c06e76451"
+        "sha256": "404cb696d537d29585ec35f97a86173a582cd6fcf8d5f172a4f5bbd75ec971a8"
       },
       {
         "path": "templates/.claude/skills/goap-research-ed25519/references/ed25519-verification.md",
@@ -89,11 +85,11 @@
       },
       {
         "path": "templates/.claude/skills/goap-research-ed25519/scripts/check_report_evidence.py",
-        "sha256": "81dfdb14a868c7d0d72a640cfdf8ae3b2b5a453a17fcc1a3396587f3b488a919"
+        "sha256": "5053e677f11d00b4dd8365a81eafa1d2c961eebd25c33f72b02455573a934a32"
       },
       {
         "path": "templates/.claude/skills/goap-research-ed25519/scripts/ed25519_verifier.py",
-        "sha256": "9d0e74bab811a15b5032ec605e66a58081b52129aac873e7402e30b4dc4a2f10"
+        "sha256": "f4a2ac9e6473201583643fe8abf47560863cec600344dad5c9df06091b4298f5"
       },
       {
         "path": "templates/.claude/skills/goap-research-ed25519/scripts/evidence_fetch.py",
@@ -103,13 +99,29 @@
         "path": "templates/.claude/skills/goap-research-ed25519/scripts/fixture_legacy_v1_fact.json",
         "sha256": "e613de4737145cbfb5f349fbf9f1122801ce3508b62c3a18e2e0cba26b9da5b0"
       },
+      {
+        "path": "templates/.claude/skills/goap-research-ed25519/scripts/fixture_legacy_v2_fact.json",
+        "sha256": "3f552b47c3864e4ff7ae8c72516e98c188592c7f4f7703d09ce88b39f586ad9d"
+      },
+      {
+        "path": "templates/.claude/skills/goap-research-ed25519/scripts/fixtures_field_cases.json",
+        "sha256": "e2ee619732ab4a1b57285e57b4349f96b4158b231a5624e5264fadf69edb8983"
+      },
       {
         "path": "templates/.claude/skills/goap-research-ed25519/scripts/goap_planner.py",
-        "sha256": "2ec359e1ddc52ca3118144532ed483dcc609e856a04b29bb191b875c60ff4260"
+        "sha256": "f5cbf4784106710b363e7f29bfa538b75f488cb25e1c273ae40de9f4c2a6710b"
       },
       {
         "path": "templates/.claude/skills/goap-research-ed25519/scripts/learning_bridge.py",
-        "sha256": "f6ec73a2ef239b8195a321b5f20b6ab390d9a7004b42226b2a861181cf9e2d2f"
+        "sha256": "74f8842978ba945ff78c2bd54702415dd87122e61919571e12a19c3cf1e56131"
+      },
+      {
+        "path": "templates/.claude/skills/goap-research-ed25519/scripts/population_match.py",
+        "sha256": "bbd1d3346a6fb75d0e8526cb5d2fc8bc8613bb31ab63ffb0958d436d5e009054"
+      },
+      {
+        "path": "templates/.claude/skills/goap-research-ed25519/scripts/risk_statement.py",
+        "sha256": "320ffece816e875f65624583846f44dc99461f672a0de7cda42be5ddf29d6de5"
       },
       {
         "path": "templates/.claude/skills/goap-research-ed25519/scripts/source_tiers.py",
@@ -117,11 +129,31 @@
       },
       {
         "path": "templates/.claude/skills/goap-research-ed25519/scripts/test_ed25519_verifier.py",
-        "sha256": "ea6d888ac53bac3a0fe236c101f90a984edbac044d787d73c8414f1c4fc540d3"
+        "sha256": "dcba1ce538ff946d6928f30a7c5cbcc37fddf712b6181f91f94c76e20c117ac5"
       },
       {
         "path": "templates/.claude/skills/goap-research-ed25519/scripts/test_evidence_provenance.py",
-        "sha256": "86216fb6a40fcf270eada41c4a534600d2bcb2799052cbacfd64b459229b5bfe"
+        "sha256": "292bfcdcc086934905c77f1543d8400ee483166ff3ce26c79bb526c204320dbb"
+      },
+      {
+        "path": "templates/.claude/skills/goap-research-ed25519/scripts/test_goap_planner.py",
+        "sha256": "7942ada069048b7e97bf2b6e920898a58517ccec090069f347399dbf1fc37731"
+      },
+      {
+        "path": "templates/.claude/skills/goap-research-ed25519/scripts/test_population_match.py",
+        "sha256": "f33f72c0ba6305af1644e6b1a7f7635d3f33273344f19c14e7dbd2f819af0e7f"
+      },
+      {
+        "path": "templates/.claude/skills/goap-research-ed25519/scripts/test_risk_absolute.py",
+        "sha256": "ab353db189650551c374cb772ba4a3a6929e3a2618f2f5c112eca4c3f69e46b6"
+      },
+      {
+        "path": "templates/.claude/skills/goap-research-ed25519/scripts/test_signature_v3.py",
+        "sha256": "a04259296df104c9497c7b31d29556cb9a7ad4dd3339cbe3d8d32a4f53950d25"
+      },
+      {
+        "path": "templates/.claude/skills/goap-research-ed25519/scripts/test_suite_completeness.py",
+        "sha256": "727c5d5b0dad215957012276ebc146397178255077e762ed7b88a60d8178d2ab"
       },
       {
         "path": "templates/.claude/skills/idea2prd-manual/SKILL.md",
@@ -173,5 +205,5 @@
       }
     ]
   },
-  "signature": "Rc5O0UZz+GsMlKiMvr/E8f4SUUtkaHJnL30dpGPXNIxY7Wo5SEYaTnB+P0GRSi1AYJjihTlsAo7d34RrSfQpAQ=="
+  "signature": "qmWsbu50YXN7a/YvCKspTNGIGUt6CupaGyM0KoLfS6dnEYlSiP90o3w6YMIg8GhiGjmqEp1O96kSA8+WgCp3CA=="
 }

package/README.md

@@ -7,9 +7,11 @@ Idea2PRD Manual — composite skill for [Claude Code](https://claude.com/claude-
 > [`@dzhechkov/harness-cli`](https://www.npmjs.com/package/@dzhechkov/harness-cli) is on PATH, the
 > bundled research skill recalls prior METHOD lessons at the start of an investigation and records new
 > ones at four named moments. Without it the skill behaves exactly as before and says so once — it is
-> detected, never required. A guard refuses to record anything shaped like personal data: a method
-> lesson is written in lower case, carries no digits, and holds no identifier. See
-> `skills/goap-research-ed25519/SKILL.md`.
+> detected, never required. Lessons go to a SEPARATE store (`<project>/.health-brain/.dz`) and never
+> to the shared one; recall reads both, so engineering lessons transfer in and medical ones do not
+> leave. A format check refuses identifier shapes (email, phone, record numbers) — it does NOT judge
+> whether a lesson describes a method or a person, and says so: that judgement is the agent's, per
+> the teach protocol. See `skills/goap-research-ed25519/SKILL.md`.
 
 ## What It Does
 
@@ -94,3 +96,13 @@ dz info idea2prd-manual
 ## License
 
 MIT
+
+## Signature scope (this release)
+
+The pack's `.dz-manifest.json` now covers exactly the files this package SHIPS, as reported by
+`npm pack` — not everything present in the author's working tree. Previously it signed files that
+`files[]` excludes (typically `CHANGELOG.md`), so every recipient's verifier reported
+`listed in the manifest but absent` and the pack read as TAMPERED. Re-signing at any earlier moment
+could not fix that: those files were never in the tarball.
+
+Nothing about the shipped content changed in this release — only what the signature describes.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhechkov/skills-idea2prd",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "Idea2PRD Manual — composite skill for Claude Code: from problem/idea to Vibe-Coding-ready docs (PRD + ADR + DDD + C4 + Pseudocode + Test Scenarios + Completion) with 9 checkpoints",
   "main": "src/cli.js",
   "bin": {

package/sbom.json

@@ -9,16 +9,6 @@
     }
   },
   "components": [
-    {
-      "type": "file",
-      "name": "CHANGELOG.md",
-      "hashes": [
-        {
-          "alg": "SHA-256",
-          "content": "17403157f3609436e5587a532c022e6095ee85acc255cf313d5473df311cc55f"
-        }
-      ]
-    },
     {
       "type": "file",
       "name": "LICENSE",
@@ -35,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "646b19adeddf1d63c0f07eabef2f4dcce49d65a259563dfc6ab6b4248d262191"
+          "content": "a7dbdf9cb81895308026ba0a949dccdd078ec8c6d54a6fe3460d570adb415994"
         }
       ]
     },
@@ -55,7 +45,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "4bfe6564c3745ab76783640b91973036f6687155111052f3e3e34a3eb4dcd874"
+          "content": "fd3017110d63ef30a8fa7ff8870eea278132eeeb39d1965993b6bde9c85196c3"
         }
       ]
     },
@@ -185,7 +175,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "95459a1566b2f88b6fb0c1d2f096f7631d698b95fa156afa26444a7c06e76451"
+          "content": "404cb696d537d29585ec35f97a86173a582cd6fcf8d5f172a4f5bbd75ec971a8"
         }
       ]
     },
@@ -225,7 +215,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "81dfdb14a868c7d0d72a640cfdf8ae3b2b5a453a17fcc1a3396587f3b488a919"
+          "content": "5053e677f11d00b4dd8365a81eafa1d2c961eebd25c33f72b02455573a934a32"
         }
       ]
     },
@@ -235,7 +225,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "9d0e74bab811a15b5032ec605e66a58081b52129aac873e7402e30b4dc4a2f10"
+          "content": "f4a2ac9e6473201583643fe8abf47560863cec600344dad5c9df06091b4298f5"
         }
       ]
     },
@@ -259,13 +249,33 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "templates/.claude/skills/goap-research-ed25519/scripts/fixture_legacy_v2_fact.json",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "3f552b47c3864e4ff7ae8c72516e98c188592c7f4f7703d09ce88b39f586ad9d"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "templates/.claude/skills/goap-research-ed25519/scripts/fixtures_field_cases.json",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "e2ee619732ab4a1b57285e57b4349f96b4158b231a5624e5264fadf69edb8983"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "templates/.claude/skills/goap-research-ed25519/scripts/goap_planner.py",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2ec359e1ddc52ca3118144532ed483dcc609e856a04b29bb191b875c60ff4260"
+          "content": "f5cbf4784106710b363e7f29bfa538b75f488cb25e1c273ae40de9f4c2a6710b"
         }
       ]
     },
@@ -275,7 +285,27 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f6ec73a2ef239b8195a321b5f20b6ab390d9a7004b42226b2a861181cf9e2d2f"
+          "content": "74f8842978ba945ff78c2bd54702415dd87122e61919571e12a19c3cf1e56131"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "templates/.claude/skills/goap-research-ed25519/scripts/population_match.py",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "bbd1d3346a6fb75d0e8526cb5d2fc8bc8613bb31ab63ffb0958d436d5e009054"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "templates/.claude/skills/goap-research-ed25519/scripts/risk_statement.py",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "320ffece816e875f65624583846f44dc99461f672a0de7cda42be5ddf29d6de5"
         }
       ]
     },
@@ -295,7 +325,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ea6d888ac53bac3a0fe236c101f90a984edbac044d787d73c8414f1c4fc540d3"
+          "content": "dcba1ce538ff946d6928f30a7c5cbcc37fddf712b6181f91f94c76e20c117ac5"
         }
       ]
     },
@@ -305,7 +335,57 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "86216fb6a40fcf270eada41c4a534600d2bcb2799052cbacfd64b459229b5bfe"
+          "content": "292bfcdcc086934905c77f1543d8400ee483166ff3ce26c79bb526c204320dbb"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "templates/.claude/skills/goap-research-ed25519/scripts/test_goap_planner.py",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "7942ada069048b7e97bf2b6e920898a58517ccec090069f347399dbf1fc37731"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "templates/.claude/skills/goap-research-ed25519/scripts/test_population_match.py",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "f33f72c0ba6305af1644e6b1a7f7635d3f33273344f19c14e7dbd2f819af0e7f"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "templates/.claude/skills/goap-research-ed25519/scripts/test_risk_absolute.py",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "ab353db189650551c374cb772ba4a3a6929e3a2618f2f5c112eca4c3f69e46b6"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "templates/.claude/skills/goap-research-ed25519/scripts/test_signature_v3.py",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "a04259296df104c9497c7b31d29556cb9a7ad4dd3339cbe3d8d32a4f53950d25"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "templates/.claude/skills/goap-research-ed25519/scripts/test_suite_completeness.py",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "727c5d5b0dad215957012276ebc146397178255077e762ed7b88a60d8178d2ab"
         }
       ]
     },