@xenonbyte/da-vinci-workflow 0.2.4 → 0.2.6

package/CHANGELOG.md

@@ -1,5 +1,40 @@
 # Changelog
 
+## v0.2.6 - 2026-04-04
+
+### Added
+- shared planning gate-envelope helpers (`lib/gate-utils.js`, `lib/planning-quality-utils.js`, `lib/planning-signal-freshness.js`) to normalize gate serialization, status finalization, and signal freshness checks across lint/spec/scope/task surfaces
+- new regression coverage for bounded clarify visibility, stale-signal upstream derivation, analyze orphan/support detection hardening, and strict-promotion routing semantics
+
+### Changed
+- `scope-check` analyze gate now enforces stronger cross-artifact support checks: empty bindings page-traceability is treated as drift, orphan fallback matching is tightened, and unresolved planning-anchor coverage is explicitly downgraded to advisory
+- `lint-tasks` now derives upstream clarify/analyze context from current artifacts when planning signals are stale and merges derived evidence into task-checkpoint gate resolution
+- planning signal freshness for `lint-tasks` now tracks `proposal.md` and page-map surfaces to prevent stale upstream gate carry-forward
+- workflow-state now routes decisions from persisted gate/status truth with explicit stale-signal handling and bounded clarify note propagation
+
+### Fixed
+- integrity audit now keeps clarify bounded-context findings visible for `lint-spec` signals regardless of top-level PASS/WARN/BLOCK status
+- `lint-spec` gate findings attachment no longer carries an unreachable bounded-context branch for non-clarify gates
+
+## v0.2.5 - 2026-04-02
+
+### Added
+- modular CLI command-family handlers for verify/lint surfaces via `lib/cli/verify-family.js`, `lib/cli/lint-family.js`, and shared helpers in `lib/cli/helpers.js`
+- framework-aware scaffold template coverage for React/Next.js/Vue/Svelte with explicit fallback metadata and expanded verify/scaffold regression tests
+- skill-contract split guardrails with `references/skill-workflow-detail.md`, `docs/skill-contract-maintenance.md`, and `scripts/test-skill-contract-core.js`
+
+### Changed
+- `verify-implementation` and `verify-structure` now emit richer evidence and incremental scan metadata (mode, confidence, boundaries, filtered input stats)
+- core `SKILL.md` was reduced to invariant workflow contract plus on-demand reference map; stage-specific procedures now live in owner references
+- shared path helpers (`normalizeRelativePath`, `pathWithinRoot`) moved into `lib/utils.js` to avoid duplicated logic drift
+
+### Fixed
+- `resolveImplementationLanding` now resolves `.vue`, `.svelte`, and SvelteKit `src/routes/<route>/+page.svelte` landings
+- `verify-implementation` no longer treats regex literal bodies as syntax-aware high-confidence coverage evidence
+- `verify-structure` no longer treats comment-only pseudo markup as real structural evidence
+- `--changed-files` now blocks symlink-based root-escape paths via realpath boundary checks
+- framework detection no longer reports definitive `unknown` when probe scans hit file-count limits; now marked ambiguous with warning context
+
 ## v0.2.4 - 2026-04-02
 
 ### Changed

package/README.md

@@ -24,19 +24,25 @@ This workflow is intended for:
 - large existing-product overhauls where flows and logic also change
 - scoped feature delivery on an existing product
 
+## Maintainer Entry
+
+If you are contributing to this repository itself, start with
+[docs/maintainer-bootstrap.md](./docs/maintainer-bootstrap.md).
+Use `da-vinci maintainer-readiness` as the canonical maintainer diagnosis surface after setup.
+
 ## Current release
 
 Latest published npm package:
 
-- `@xenonbyte/da-vinci-workflow@0.2.4`
+- `@xenonbyte/da-vinci-workflow@0.2.6`
 
-Release highlights for `0.2.4`:
+Release highlights for `0.2.6`:
 
-- design-approval stale detection now checks `design.md`, `pencil-design.md`, and `pencil-bindings.md` instead of only one artifact timestamp
-- `lint-tasks` verification command parsing now accepts `da-vinci verify-*` commands from the current task template
-- `worktree-preflight` now warns and recommends isolation when a project is not a git repository (or `git status` cannot be read)
-- `supervisor-review` retry parsing now honors explicit `--review-retries 0` without falling back to default retries
-- `task-execution` and `task-review` resolve-failure messaging now keeps defensive fallback text instead of leaking `undefined`
+- quality-gate alignment landed across `lint-spec` + `scope-check` + `lint-tasks`, with shared gate-envelope utilities and explicit clarify/analyze/task-checkpoint routing
+- `scope-check` analyze gate now catches empty `pencil-bindings.md` page-traceability drift and hardens orphan-task detection (with planning-anchor aware advisory fallback)
+- `lint-tasks` now derives upstream clarify/analyze context from current artifacts when persisted signals are stale, including clarify bounded-context carry-forward
+- planning-signal freshness for `lint-tasks` now includes `proposal.md` and page-map dependencies to avoid stale task-checkpoint trust
+- workflow promotion and integrity audit now keep clarify bounded context visible as notes while preserving non-blocking bounded semantics
 
 ## Discipline And Orchestration Upgrade
 
@@ -57,7 +63,7 @@ Implemented capability set:
 This upgrade does **not** replace artifact truth, checkpoint truth, or completion audit authority.
 `workflow-status`, `next-step`, and orchestration outputs remain bounded by the existing contract.
 
-See [docs/discipline-and-orchestration-upgrade.md](/Users/xubo/x-skills/da-vinci/docs/discipline-and-orchestration-upgrade.md) for operator and maintainer guidance, and the OpenSpec change folder for implementation details.
+See [docs/discipline-and-orchestration-upgrade.md](./docs/discipline-and-orchestration-upgrade.md) for operator and maintainer guidance, and the OpenSpec change folder for implementation details.
 
 ## Supported workflow modes
 
@@ -134,7 +140,7 @@ If the growing CLI surface is the main usability problem, use the built-in termi
 - it supports English/Chinese chrome, light/dark theme auto-detection, and `t` as a manual fallback
 - `p` sets project context, `c` sets change context, `l` toggles language, `J` toggles `--json`, and `Enter` opens/runs the selected item
 
-Use [docs/skill-usage.md](/Users/xubo/x-skills/da-vinci/docs/skill-usage.md) for the operator-facing workflow, resume rules, and TUI guidance.
+Use [docs/skill-usage.md](./docs/skill-usage.md) for the operator-facing workflow, resume rules, and TUI guidance.
 
 ## Visual Assist Quick Start
 

package/README.zh-CN.md

@@ -26,19 +26,26 @@ Da Vinci 是一个把产品需求一路推进到结构化规格、Pencil 设计
 - 基于现有代码做流程、逻辑和 UI 一起变化的大改版
 - 在现有产品上做范围明确的 feature-change
 
+## 维护者入口
+
+如果你是在维护这个仓库本身（而不是在下游项目里使用 Da Vinci），请先看
+[docs/zh-CN/maintainer-bootstrap.md](./docs/zh-CN/maintainer-bootstrap.md)。
+
+完成 setup 后，用 `da-vinci maintainer-readiness` 作为维护者的 canonical 诊断/就绪命令。
+
 ## 当前发布状态
 
 最新已发布 npm 包：
 
-- `@xenonbyte/da-vinci-workflow@0.2.4`
+- `@xenonbyte/da-vinci-workflow@0.2.6`
 
-`0.2.4` 版本重点：
+`0.2.6` 版本重点：
 
-- 设计批准的 stale 检测从单一 `design.md` 扩展为同时检查 `design.md`、`pencil-design.md`、`pencil-bindings.md`
-- `lint-tasks` 的 verification command 解析已支持当前模板里的 `da-vinci verify-*` 命令
-- `worktree-preflight` 在“非 git 仓库”或 `git status` 失败时会返回告警并建议隔离执行
-- `supervisor-review` 现在正确处理显式 `--review-retries 0`，不再错误回退到默认重试
-- `task-execution` / `task-review` 在 resolve-change 失败路径上补强了防御性错误回退，避免输出 `undefined`
+- 完成 `lint-spec`、`scope-check`、`lint-tasks` 质量门对齐，并引入共享 gate-envelope 工具，明确 clarify/analyze/task-checkpoint 路由
+- `scope-check` 的 analyze gate 现在会对空 `pencil-bindings.md` 报告页面可追踪性漂移，并强化 orphan task 检测（支持 planning-anchor 降级为 advisory）
+- `lint-tasks` 在 persisted 信号过期时会从当前工件重新派生 clarify/analyze 上游上下文，并保留 clarify bounded-context
+- `lint-tasks` 的 freshness 依赖新增 `proposal.md` 与 page-map 链路，避免 task-checkpoint 误信陈旧上游信号
+- workflow promotion 与 integrity audit 现在都会稳定展示 clarify bounded context 备注，同时保持 bounded 默认非阻断语义
 
 ## Discipline And Orchestration 升级
 
@@ -59,7 +66,7 @@ Da Vinci 是一个把产品需求一路推进到结构化规格、Pencil 设计
 该升级**不会**替代现有 artifact truth、checkpoint truth 和 completion audit 权威。
 `workflow-status`、`next-step` 与 orchestration 输出仍然受现有契约约束。
 
-可先阅读 [docs/discipline-and-orchestration-upgrade.md](/Users/xubo/x-skills/da-vinci/docs/discipline-and-orchestration-upgrade.md) 了解说明，再结合 OpenSpec 目录查看具体实现拆分。
+可先阅读 [docs/discipline-and-orchestration-upgrade.md](./docs/discipline-and-orchestration-upgrade.md) 了解说明，再结合 OpenSpec 目录查看具体实现拆分。
 
 ## 支持的工作流模式
 
@@ -140,7 +147,7 @@ Da Vinci 当前支持五种模式：
 - 支持中英文界面与浅色/深色自动识别，`t` 可手动切换主题
 - `p` 设置项目上下文，`c` 设置 change 上下文，`l` 切语言，`J` 切 `--json`，`Enter` 进入/执行
 
-如果你想看“人到底怎么用这个 skill、暂停后怎么续跑、TUI 怎么配合”的完整说明，直接看 [docs/zh-CN/skill-usage.md](/Users/xubo/x-skills/da-vinci/docs/zh-CN/skill-usage.md)。
+如果你想看“人到底怎么用这个 skill、暂停后怎么续跑、TUI 怎么配合”的完整说明，直接看 [docs/zh-CN/skill-usage.md](./docs/zh-CN/skill-usage.md)。
 
 ## Visual Assist 快速上手