@mingfuyun/star-allinone 0.1.8 → 0.1.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mingfuyun/star-allinone",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "星系运维前端能力包",
   "main": "dist/index.js",
   "bin": {

package/skills/README.md

@@ -259,7 +259,7 @@ StarLink 使用：
 | `shared-ai-review` | SKILL | Hooks、契约、权限、性能、安全的 P0–P3 审查 |
 | `shared-commit-current-changes` | SKILL | 确认门禁、中文 Conventional Commit、禁止未确认就提交 |
 | `shared-review-and-submit` | SKILL | impact → verify → commit review 编排 |
-| `shared-publish-test` | SKILL + `scripts/publish-current-branch.sh` | 云效测试流水线发布；只从 `.star-allinone.json` 读取 `publishPipelineId` |
+| `shared-publish-test` | SKILL + `scripts/publish-current-branch.sh` | 云效测试流水线发布；只从配置读 `publishPipelineId`；git push 后不自动跑，需单独确认「推送流水线」 |
 
 以下内容**不**写进公共 skill 源码：
 

package/skills/shared/commit-current-changes/SKILL.md

@@ -55,6 +55,9 @@ Lead with findings. Then present optional improvements, validation results, chan
 3. Commit without `--no-verify` unless the user explicitly authorizes it. Do not amend unless requested.
 4. Push to upstream, or `git push -u origin HEAD` when none exists. Never force-push.
 5. Report hash, subject, files, validation, and remote branch.
+6. Stop. Do not run `$shared-publish-test` or any Yunxiao pipeline script after git push.
+
+A confirmed commit or push does not authorize the test pipeline. If the user later says `确认推送流水线` or `发布测试环境`, follow `.agents/skills/shared-publish-test/SKILL.md`.
 
 ## Safety
 

package/skills/shared/publish-test/SKILL.md

@@ -1,12 +1,23 @@
 ---
 name: {{sharedSkillName}}
-description: Publish the current frontend Git branch to the project's Yunxiao test pipeline. Use when the user asks to publish, deploy, release, or run the test environment pipeline, especially 发布测试环境, 发布测试云效流水线, or 以当前分支发布.
+description: Publish the current frontend Git branch to the project's Yunxiao test pipeline only after explicit confirmation such as 确认推送流水线 or 发布测试环境. Never run the pipeline automatically after git push.
 ---
 
 # Publish Test Environment
 
 This skill is fully shared. The only project-specific value is `publishPipelineId` in `.star-allinone.json`.
 
+Do not run the pipeline script after a git push. Git push, `确认提交并推送`, and `确认` are not pipeline authorization.
+
+Run the script only after an explicit pipeline confirmation in this conversation, such as:
+
+- `确认推送流水线`
+- `发布测试环境`
+- `发布测试云效流水线`
+- `以当前分支发布`
+
+If the user has not said one of these, stop and ask whether to publish the test pipeline. Do not infer yes from a prior commit or push.
+
 From the business repository root, run:
 
 ```bash

package/skills/shared/review-and-submit/SKILL.md

@@ -59,6 +59,9 @@ Execute the commit phase only after an explicit reply such as `确认` or `确
 4. Create the confirmed commit message.
 5. Push only if the user asked to push.
 6. Report commit, remote branch, and workspace status.
+7. Stop. Do not run `$shared-publish-test` or the pipeline script after git push.
+
+Git push confirmation is not pipeline confirmation. Run the pipeline only after a separate explicit reply such as `确认推送流水线` or `发布测试环境`. Then follow `.agents/skills/shared-publish-test/SKILL.md`.
 
 If the user only says `确认` but the scope is unclear, do not commit; ask for the exact files and message.
 
@@ -72,4 +75,4 @@ If the user says `提交代码` before a review proposal exists, run the three s
 | `$shared-verify` | Convention and command verification |
 | `$shared-commit-current-changes` | Review plus confirmation-gated commit |
 | `$shared-ai-review` | Standalone review without commit |
-| `$shared-publish-test` | After a confirmed push, publish the current branch using `publishPipelineId` |
+| `$shared-publish-test` | Publish to the test pipeline only after a separate `确认推送流水线`. Never run it automatically after git push. |