@xulthekl/team-flow 0.62.0 → 0.64.0

package/.claude/always/phase-guard.md

@@ -1,3 +1,3 @@
-# team-flow v0.62.0 | 阶段: {{state}} | 工作流: {{workflow}}
+# team-flow v0.64.0 | 阶段: {{state}} | 工作流: {{workflow}}
 当前阶段允许的操作由 workflow-start 路由规则定义。
 禁止跨越 DP gate 进入下一阶段。变更范围以 execution-contract.md 的 Intent Lock 为准。

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
     {
       "name": "team-flow",
       "description": "8-state spec workflow + compound global compounding + architecture-design (4A/DDD) + local HTML prototype + product-level orchestration + bootstrap + e2e + session handoff + workflow feedback + independent business analysis. 28 skills + 17 agents with embedded TDD, SDD, code review, debugging, delta spec sync, and design-system-driven prototyping.",
-      "version": "0.62.0",
+      "version": "0.64.0",
       "source": "./",
       "author": {
         "name": "LT",

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "team-flow",
-  "version": "0.62.0",
+  "version": "0.64.0",
   "description": "Unified workflow plugin: team-flow (spec-driven dev: TDD/SDD/code-review/debugging) + compound-engineering core subset (brainstorm/plan/compound/strategy/ideate/proof, global compounding) + architecture-design (4A+DDD incremental design & global compounding) + prototype (local HTML prototype, zero external deps) + e2e (Playwright E2E, AC-driven) + workflow-orchestrator (product-level workflow orchestration) + workflow-bootstrap (existing project onboarding) + session-handoff (context transfer) + workflow-feedback (issue tracking) + business-analysis (independent requirement/scenario artifact) + design-system (design tokens + component contract + AI primer + showcase) + test-strategy (test strategy design) + project-initialize (new service onboarding) + jarvis (team-flow decision agent, opt-in). 28 skills + 17 agents, one install.",
   "source": "./",
   "author": {

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "team-flow",
-  "version": "0.62.0",
+  "version": "0.64.0",
   "description": "Spec-first workflow that bridges OpenSpec-style planning and Superpowers-style execution discipline.",
   "author": {
     "name": "MageByte",

package/.cursor-plugin/marketplace.json

@@ -5,7 +5,7 @@
   },
   "metadata": {
     "description": "Unified workflow plugin marketplace for Cursor (team-flow: team-flow + compound + architecture-design + prototype).",
-    "version": "0.62.0"
+    "version": "0.64.0"
   },
   "plugins": [
     {

package/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "team-flow",
   "displayName": "team-flow",
   "description": "Unified workflow plugin: team-flow (spec-driven dev: TDD/SDD/code-review/debugging) + compound-engineering core subset (brainstorm/plan/compound/strategy/ideate/proof, global compounding) + architecture-design (4A+DDD incremental design & global compounding) + prototype (local HTML prototype, zero external deps) + e2e (Playwright E2E, AC-driven) + workflow-orchestrator (product-level workflow orchestration) + workflow-bootstrap (existing project onboarding) + session-handoff (context transfer) + workflow-feedback (issue tracking) + business-analysis (independent requirement/scenario artifact) + jarvis (team-flow decision agent, opt-in). 28 skills + 17 agents, one install.",
-  "version": "0.62.0",
+  "version": "0.64.0",
   "author": {
     "name": "LT",
     "url": "https://github.com/LT"

package/.github/plugin/marketplace.json

@@ -6,13 +6,13 @@
   },
   "metadata": {
     "description": "Unified workflow plugins and skills for AI coding agents (team-flow: team-flow + compound + architecture-design + prototype).",
-    "version": "0.62.0"
+    "version": "0.64.0"
   },
   "plugins": [
     {
       "name": "team-flow",
       "description": "Unified workflow with planning artifacts, execution contracts, TDD, review gates, systematic debugging, delta spec sync, architecture-design, independent business analysis, and local HTML prototyping.",
-      "version": "0.62.0",
+      "version": "0.64.0",
       "source": ".",
       "author": {
         "name": "LT",

package/.github/workflows/ci.yml

@@ -24,6 +24,7 @@ jobs:
       - run: npm ci
       - run: npm run build
       - run: npm test
+      - run: npm run test:e2e
       - name: Check version consistency
         run: node scripts/check-version-consistency.mjs
       - name: CLI smoke
@@ -83,6 +84,7 @@ jobs:
       - run: npm ci
       - run: npm run build
       - run: npm test
+      - run: npm run test:e2e
       - name: Check version consistency
         run: node scripts/check-version-consistency.mjs
       - name: Token efficiency lint (warning only)

package/CHANGELOG.md

@@ -4,6 +4,73 @@ All notable changes to `team-flow` will be documented in this file.
 
 The format loosely follows Keep a Changelog.
 
+## [0.64.0] - 2026-09-24
+
+### Added（spec-superflow 2.0 同步：双前门 + 轻路径 + 轻量全局态闸门；设计 = docs/plan/spec-superflow-2.0-implementation-plan.md v2.1，P1.5 两轮独立评审 13+13 组全闭合）
+
+**双前门（`workflow_variant` 与 `workflow` 正交）**
+- direct（→`quick`）：零文档零契约，`exploring→approved-for-build→executing→closing` 捷径；planned（→`full`）：proposal+tasks 两份 + `tf execution plan --derive`（tasks.md 派生单 wave，免 recommend/receipt/DP-4）+ 一次最终审查。
+- legacy/null 走既有全量流程零破坏（null≡legacy + TTY 单次提示 / headless 不挂起）；`workflow` 枚举扩为五值（+`quick`/`lightweight`）。
+- 新子命令：`tf state upgrade <dir> <planned|full>`（升档唯一机械入口：方向向上 + `variant_source=upgrade` + 回退 approved-for-build + 重算 hash；**降档拒绝**）。
+- 新 CLI 参数：`tf execution plan --derive`、`tf arch-merge --light`、`tf test-merge --light`（changelog 归因锚 `change:<name>`）、guard `--workflow-variant`/`--planned-arch`。
+
+**11 个新 guard 维度（CHECK_RUNNERS 20→31）+ 共享扫描层**
+- `surface-scan.mjs`：三源合并（committed diff + 工作区 + untracked）+ `base_sha` 基线（缺省 origin merge-base，再缺 fail-closed）+ 架构 surface 路径模式表 + `.team-flow/aggregate-dirs.txt` 聚合清单（**缺失 FAIL，显式空文件 = 确认无聚合**）+ `.team-flow/scan-ignore` 排除。
+- direct 侧：`direct-short-path`（碰 API/DB/聚合 → FAIL+升档指引，G1）、`direct-test-result`/`lightweight-completion-evidence`（只读 `tf test record` 程序化证据，guard 不现场跑测试）。
+- planned 侧 closing「轻回写四灯」：`arch-merged-light`（同 sink：最小 architecture.md/api.md/database.md 持久源 + 全局台账 `change:<name>` 归因）、`compound-writeback-light`（禁 `compound_skipped` 自清）、`test-merged-light`、`cross-change-consistency-light`（**确定性扫描 runner**，语义级仍由 checker agent 兜底）+ `execution-reviews-passed-light`（≥5 行内容契约）+ `artifacts-planned`（proposal≥10 行 + checkbox，反空壳）+ `arch-design-light`/`arch-snapshot-light`（`planned_arch=true` 条件挂载）。
+- 既有 4 维加轻分支：`test-matrix-ready/complete` 无契约轻判据（D4）、`execution-plan-ready` planned 豁免 DP-4、`specs-merged` planned 无 specs 即过/有 specs 无 delta 头 FAIL。
+
+**状态机 schema（三环齐全）**
+- `workflow_variant` / `variant_source` / `variant_direction` / `planned_arch` / `model_profile`（接入既有 `models` 键四档，非新配置）/ `base_sha` / `arch_design_light_skipped(+reason)`；`workflow_variant` 经 `tf state set` 通用通道**仅 exploring 态可写**。
+
+**SKILL 层**
+- workflow-start：Front Doors 三分支路由 + infer 双通道（`suggested_path` 绝不写入 workflow；arch 信号→建议 planned 而非 full）+ 架构门/Guardrails 按 variant 分叉（direct/planned 结构性不经 `exploring:specifying`，Q3 零代码满足的限定条件落地）。
+- release-archivist：关门序列按 variant 三分叉（planned 回写+审查全前置、transition 最后——防 closing 维度死锁；direct 仅 transition）+ Verdict 新增 **ACCEPTED-RISK**（仅非 guard 维度、禁自判、不伪造通过、不自动合并）。
+- jarvis/session-handoff：variant 回显；test-strategy/clean-code description 收紧（§3.8 静态复核）。
+
+**测试（npm test 1237 + test:e2e 103 全绿；CI 补 `npm run test:e2e` 步骤）**
+- `light-paths.test.mjs`（21 用例，每新维度正/负例）、`light-merge-survival.test.mjs`（D8 same-sink 存活三断言：marker 聚合行 + 演进归因 + API 端点经 full merge 存活）、`light-pilot.test.mjs`（P7 双路径真实 CLI 全链 + 升档/禁降档试点）。
+- e2e test-matrix 登记 L1–L5。
+
+## [0.63.0] - 2026-09-23
+
+### Added（sop-flow 效率八项改进 S1–S6 + E1/E2；来源：emp-auth workflow-feedback 20260923-013114，经 308 行独立专家评审定稿）
+
+**新增 guard 维度 `gates-probed`（S2，本版本核心代码变更）**
+- 挂 `bridging → approved-for-build`：契约声明的 G 类闸门必须已在主工作区当前态跑过 dry-run（预期 FAIL = RED 基线）并留档 `.superpowers/test-evidence/bridging-gates-red.txt`。
+- 检查五件：evidence 存在 / 首行逐字 `EXPECTED: FAIL (RED baseline)` / `CONTRACT_HASH` **值**新鲜（不用 mtime——契约字节等价重生成或 git 恢复会让 mtime 变新而内容未变）/ 契约 `## Gate Registry` 的 id 逐 id 覆盖 / **段缺失或解析失败 = FAIL（fail-closed）**。
+- **段存在性是硬要求**：缺段与「零闸门」不可区分——v0.13 RC-1 已删除的内容型豁免不得复活。确无闸门须写 `N/A: <理由>`；另有 `gates_probed_skipped` + 理由作可审计豁免（hotfix 走转移表天然豁免，tweak 会继承故必须靠该键放行）。
+- 三处状态管道同步注册（`state-loader` BUILTIN_DEFAULTS + `writeState` + `cmd-state` SETTABLE_FIELDS）——缺一即「回显成功却零写入」（v0.59.0 同型教训）。
+- 把 `design.md` R-7「闸门命令已实测可跑」长期的**文字自证**物化为机械证据。
+
+**`executing:closing` 补挂 `contract-fresh`（S3 反查锚）**
+- 原状 closing 的反查走 `execution-plan-ready`（`validatePlan` 比对 plan 内嵌 hash），而该比对可被 `tf execution refresh-hash` 一键刷平（只改 plan JSON、revision 不升），且 `wave_fingerprint` 不含 `artifacts_hash` → 把 gate-affecting 变更伪记为陈述性勘误后可**静默通过**。
+- 新挂载直接比对 `state.artifacts_hash` 与制品实算值，`refresh-hash` 无法清屏。
+- 失败信息按时间点分流（P4 评审补强）：冻结前改动可裸 `tf state rebuild`；**冻结后必须走勘误登记/例外 2**，明文禁止用 rebuild 抹平差异。
+
+**新增 references**：`contract-builder/references/freeze-and-errata.md`（勘误登记段模板 + 六条冻结例外 + 三分处方表）、`contract-builder/references/bridging-gate-dry-run.md`（Gate Registry 模板 + dry-run 六条硬要求 + Facts Recheck）、`spec-writer/references/facts-referencing.md`（facts 三件套 + 判据四条 + 跨仓结构）、`build-executor/references/wave-delivery-selfcheck.md`（case↔test 对账三层判据 + Gate-Only receipt 协议）。
+
+### Changed（纪律写入 6 个 skill）
+
+- **S1 事实前置**：制品引用 `facts.json` 键而非裸写数字（基线数字须写成 `<值>（facts:<键>，ts=…）`）；bridging 期由 contract-builder 复测一次，差异摘要**并入 DP-3 ask 呈报**（裁决权归 LT，不得由实施方自行解释掉）。强度如实声明：纪律条款，`tf facts probe` 与 WARNING lint 归远期。
+- **S3 冻结纪律**：DP-3 后 planning 四件默认冻结，陈述性订正记入契约 `## Errata Register`；勘误段写入后 **MUST `tf execution refresh-hash`**（否则卡 `execution-plan-ready`，恰复活 revision 回路）。例外 2 判定权**升格至审查侧**（自判错判方向即伪绿出口）。
+- **S4 对账左移**：build-executor 每 wave 产出 `<wave>-case-test-reconciliation.md`；完成门 = 机械层 + 半机械层通过，**断言点层归 code-reviewer，不构成本步条件**（防卡死、防自填假证据）。code-reviewer Step 5b 独立复核权不减免，且新增「根仓 planning 制品 diff 单列」（多仓下子仓 range 看不到根仓 planning 改动）。
+- **S5 攒批与预批复**：同根因发现攒成一次 ask；DP-6 与 roadmap/push 边界并入 closing 确认；**门禁类 DP（dp_3/dp_4）禁超时代答**（二者是 `dp-gate-passed` 数据源）。
+- **S6 环境清单注入**：`.team-flow/environment.md` 存在则全文附入 dispatch prompt，并**追加元指令要求下游继续附入**（子代理不继承 skills，规则否则到不了第二跳）。
+- **E1 tasks checkbox 形态**：spec-writer 校验清单与 contract-builder 的 hotfix tasks 产出路径**双路径**强制 `- [ ]`——同时消掉 closing 死锁与 hash 漂移重签双源头。
+- **E2 receipt 协议**：零代码/纯闸门波次以根仓 planning commit 作 base..head；**若 G4 未执行须先完成其阻塞询问再 publish**，不得静默代替用户选择。
+
+### Fixed
+
+- `contract-fresh` 失败信息区分「缺 artifacts_hash（状态文件异常）」与「真漂移」，并给出可执行出路——避免 closing 死锁无指示。
+
+### 验证
+
+- `npm test` 1237/1237（新增 `guard-gates-probed` 15 例 + `guard-closing-contract-fresh` 3 例）；`npm run test:e2e` 77/77。
+- **反向验证 ×2**（改门禁后须能证明它有效）：移除 `gates-probed` 挂载 → 测试变红 1 项；移除 closing 的 `contract-fresh` → 变红 2 项（含「删 `## Gate Registry` 段必 FAIL」）。
+- P1.5 标准档两轮对抗验证：第一轮 2C+14M+8m、第二轮 2C+6M+1m（**其中 2 个 Critical 是上一轮修复自身引入的**），全部闭合后进 P2；P4 双评审（plugin-validator / skill-reviewer）12 项发现全部修复。
+- 横展同步 3 处维度计数宣称（`guard-dimensions.test.mjs` 覆盖映射 19→20 维 + `test-matrix.md` + 团队版使用说明）。
+
 ## [0.62.0] - 2026-09-22
 
 ### Changed（PRD 业务可读性改造：§8.4 形态重写 + 规范与体例解耦 + 模板一致性确认门）

package/GEMINI.md

@@ -8,7 +8,7 @@ The workflow is self-contained and does not require OpenSpec or Superpowers at r
 
 
 <!-- team-flow-phase-guard-start -->
-# team-flow v0.62.0 | 阶段: {{state}} | 工作流: {{workflow}}
+# team-flow v0.64.0 | 阶段: {{state}} | 工作流: {{workflow}}
 当前阶段允许的操作由 workflow-start 路由规则定义。
 禁止跨越 DP gate 进入下一阶段。变更范围以 execution-contract.md 的 Intent Lock 为准。
 <!-- team-flow-phase-guard-end -->

package/INSTALL.md

@@ -7,7 +7,7 @@
 - [Fission-AI/OpenSpec](https://github.com/Fission-AI/OpenSpec) — 规划引擎（Schema 验证、Delta Spec、工件解析）
 - [obra/superpowers](https://github.com/obra/superpowers) — 执行纪律（TDD 铁律、SDD、系统化调试、代码审查）
 
-当前发布版本：**v0.62.0**。
+当前发布版本：**v0.64.0**。
 
 ---
 

package/README.md

@@ -1,6 +1,6 @@
 # team-flow
 
-> 当前版本：`v0.62.0`
+> 当前版本：`v0.64.0`
 
 > 统一插件：**team-flow**（spec 驱动开发）+ **compound-engineering 核心子集**（全局复利）+ **architecture-design**（4A+DDD 增量设计）+ **prototype**（本地 HTML 原型）+ **e2e**（AC 驱动 E2E）+ **workflow-orchestrator**（产品级编排）+ **workflow-bootstrap**（既有项目接入）。一次安装，十三套能力协同（详见下文「十三套能力」）。
 

package/docs/README_en.md

@@ -126,7 +126,7 @@ npm install -g team-flow
 
 ### Version
 
-- Current: `v0.62.0`
+- Current: `v0.64.0`
 - v0.9.1 highlights: DP-4 execution-mode recommendations, a portable runtime across 17 platforms, and a raw-package smoke with no plugin-root variable.
 - Self-contained — no OpenSpec or Superpowers runtime required
 - Upstream: [Fission-AI/OpenSpec](https://github.com/Fission-AI/OpenSpec), [obra/superpowers](https://github.com/obra/superpowers)

package/docs/decision-points.md

@@ -131,6 +131,14 @@
 |--------|----------|
 | DP-0 + DP-A | `arch_design_decision == skipped` |
 | DP-3 + G4 + DP-4 | 契约已产出且 hash 有效 |
+| **DP-6 + roadmap/push 边界**（v0.63.0 新增） | closing 型变更（须机器门禁全 PASS 才生效） |
 | DP-7 + 代码落地 + G5 | 恒成立 |
 
 `arch_design_decision == required` 时 DP-A 必须独立（用户需单独审架构产物）。
+
+**v0.63.0 攒批与预批复纪律**（feedback 20260923-013114 S5）：
+
+- **同根因攒批（MUST）**：同一根因的多个发现攒成**一次** ask，不逐个往返。
+- **批量预批复单**：closing 型变更可一次性列出全部待确认项 + 建议取值 + 理由，由用户一次批复。
+- **⛔ 防伪绿护栏**：**门禁类 DP（`dp_3` / `dp_4`）禁止超时代答**（二者是 `dp-gate-passed` 的门禁数据源，`checks/dp-gate-passed.mjs` 仅映射这两个）；**预批复只作用于非门禁确认**；DP-6 预批复为**条件式**。
+- **Rewind 作废**：Rewind 后已发出的预批复自动作废，须重新征询。

package/docs/state-machine.md

@@ -112,6 +112,8 @@ eight core states.
   exploring ──── hotfix ─────────> bridging          (fast-path)
   bridging  ──── hotfix ─────────> approved-for-build
   exploring ──── tweak ──────────> approved-for-build (fast-path)
+  exploring ──── quick/lightweight ─> approved-for-build > executing > closing   (direct 前门, v0.64.0)
+  exploring ──── full+planned ───> approved-for-build > executing > closing     (planned 前门, v0.64.0)
 
   exploring -> specifying -> bridging -> approved-for-build -> executing -> closing
                 ^              ^             |                 ^    |
@@ -159,4 +161,5 @@ If the contract changed, the artifacts changed.
 - `hotfix` follows `exploring -> bridging -> approved-for-build -> executing`.
 - `hotfix` may skip full planning artifacts such as `proposal.md`, `design.md`, and `specs/`; `tasks.md` requires an explicit `tasks_skipped=true` + `tasks_skip_reason` (v0.22 §85) rather than a silent skip. The key is rejected for `full`/`auto` workflows — declare the mode first (`tf state set <dir> workflow hotfix|tweak`) or produce `tasks.md`.
 - `hotfix` still requires a fresh minimal `execution-contract.md` and explicit DP-3 approval before implementation.
-- `tweak` remains the only path that can jump directly from `exploring` to `approved-for-build`.
+- `tweak` is **no longer the only** path from `exploring` to `approved-for-build` (v0.64.0)——`quick`/`lightweight`（direct 前门）与 `full`+`workflow_variant=planned`（planned 前门）同样走该捷径，维度表分别由 `QUICK_TRANSITION_CHECKS` / `PLANNED_TRANSITION_CHECKS` 管辖（见 workflow-start SKILL「Front Doors」与 guard.mjs）。`workflow_variant` 与 `workflow` 是两个正交维度：direct→`quick`、planned→`full`，**不是 workflow 取值**。
+- 升档唯一机械入口 `tf state upgrade <dir> <planned|full>`（方向向上 + `variant_source=upgrade`；降档拒绝）。`executing → debugging → executing` 对 quick/planned 按档分支（direct: `direct-test-result`；planned: `execution-plan-ready`+`tests-passing`），**不回落 full 表**。

package/docs/team-flow /344/275/277/347/224/250/350/257/264/346/230/216/357/274/210/347/240/224/345/217/221/345/233/242/351/230/237/347/211/210/357/274/211.md"

@@ -1,6 +1,6 @@
 # team-flow 使用说明（研发团队版）
 
-> 版本锚点：v0.62.0（28 skills + 17 agents）· 更新日期：2026-09-21
+> 版本锚点：v0.64.0（28 skills + 17 agents）· 更新日期：2026-09-21
 > 读者：使用 team-flow 做日常研发的工程师。不需要你懂插件内部实现，只需要照着路径走。
 > 配套文档：安装细节见 [INSTALL.md](../INSTALL.md)；状态机细节见 [state-machine.md](state-machine.md)；决策点细节见 [decision-points.md](decision-points.md)；平台差异见 [platform-matrix.md](platform-matrix.md)。
 
@@ -232,15 +232,15 @@ workflow-start 在初始化时自动推断（`tf runtime infer`），你也可
 tf runtime guard check <change-dir> <from-state> <to-state> [--workflow full|hotfix|tweak]
 ```
 
-**full 模式的完整转换矩阵**（19 个维度 + 1 个 workflow 限制维度）：
+**full 模式的完整转换矩阵**（31 个维度 + 1 个 workflow 限制维度；v0.64.0 增 quick/lightweight/planned 轻路径 11 维）：
 
 | 转换 | 维度 |
 |------|------|
 | exploring→specifying | arch-design、arch-readiness |
 | specifying→bridging | artifacts-exist、schema-valid |
-| bridging→approved-for-build | artifacts-exist、schema-valid、contract-fresh、dp-gate-passed、dp3-approved |
+| bridging→approved-for-build | artifacts-exist、schema-valid、contract-fresh、dp-gate-passed、dp3-approved、**gates-probed**（v0.63.0） |
 | approved-for-build→executing | artifacts-exist、contract-fresh、dp-gate-passed、execution-plan-ready、test-matrix-ready |
-| **executing→closing** | **10 维**：tasks-complete、tests-passing、specs-merged、execution-plan-ready、execution-reviews-passed、compound-captured、test-matrix-complete、arch-snapshot、delegation-status、arch-merged |
+| **executing→closing** | **11 维**：**contract-fresh（v0.63.0）**、tasks-complete、tests-passing、specs-merged、execution-plan-ready、execution-reviews-passed、compound-captured、test-matrix-complete、arch-snapshot、delegation-status、arch-merged |
 | executing↔debugging | debugging 入口无门禁；回 executing 挂 contract-fresh、execution-plan-ready |
 | exploring→bridging / exploring→approved-for-build | 0 维，但**一一对应**：`exploring→bridging` 仅 hotfix 可走、`exploring→approved-for-build` 仅 tweak 可走；full 走或其他组合都直接 FAIL |
 | 7 条回退 + 6 条放弃 | 0 维（回退是合法操作，不需要门禁放行） |

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "team-flow",
   "description": "Unified workflow plugin: team-flow (spec-driven dev) + compound-engineering core subset + architecture-design (4A/DDD) + prototype (local HTML) + business-analysis (independent requirement/scenario artifact) + jarvis (team-flow decision agent, opt-in). 28 skills, one install.",
-  "version": "0.62.0",
+  "version": "0.64.0",
   "contextFileName": "GEMINI.md"
 }

package/hooks/session-start

@@ -1,11 +1,11 @@
 #!/usr/bin/env bash
-# v0.62.0: auto-sync CLI version with plugin version
+# v0.64.0: auto-sync CLI version with plugin version
 set -e
 
 # ═══════════════════════════════════════════════════════════════
 # Plugin version (update this when releasing new versions)
 # ═══════════════════════════════════════════════════════════════
-PLUGIN_VERSION="0.62.0"
+PLUGIN_VERSION="0.64.0"
 
 # ═══════════════════════════════════════════════════════════════
 # Step 1: Auto-sync CLI version with plugin version

package/llms.txt

@@ -3,7 +3,7 @@
 ## Overview
 spec-superflow is a self-contained workflow integration plugin for Claude Code, Cursor, OpenAI Codex CLI/App, GitHub Copilot CLI, Gemini CLI, OpenCode, WorkBuddy, and Trae. It merges spec-driven planning artifacts (proposal, specs, design, tasks) with disciplined execution guardrails (TDD, review gates, controlled handoff) into one unified workflow.
 
-Current version: v0.62.0.
+Current version: v0.64.0.
 
 ## Key Documents
 - README.md: Chinese homepage with full usage guide and FAQ

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xulthekl/team-flow",
-  "version": "0.62.0",
+  "version": "0.64.0",
   "description": "Unified plugin (28 skills + 17 agents) integrating team-flow, compound-engineering, architecture-design, prototype, design-system, workflow-orchestrator, workflow-bootstrap, e2e, session-handoff, workflow-feedback, business-analysis for multi-agent coding tools.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "team-flow",
-  "version": "0.62.0",
+  "version": "0.64.0",
   "description": "Unified workflow plugin: team-flow (spec-driven dev: TDD/SDD/code-review/debugging) + compound-engineering core subset (brainstorm/plan/compound/strategy/ideate/proof, global compounding) + architecture-design (4A+DDD incremental design & global compounding) + prototype (local HTML prototype, zero external deps) + e2e (Playwright E2E, AC-driven) + workflow-orchestrator (product-level workflow orchestration) + workflow-bootstrap (existing project onboarding) + session-handoff (context transfer) + workflow-feedback (issue tracking) + business-analysis (independent requirement/scenario artifact) + design-system (design tokens + component contract + AI primer + showcase) + test-strategy (test strategy design) + project-initialize (new service onboarding) + jarvis (team-flow decision agent, opt-in). 28 skills + 17 agents, one install.",
   "author": {
     "name": "LT"

package/scripts/guard/checks/_fs-utils.mjs

@@ -0,0 +1,18 @@
+// scripts/guard/checks/_fs-utils.mjs — light check 共享的文件系统小工具
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+
+/** 递归扫描 dir 下所有 .md，文件名或内容任一含 needle 即 true（dir 不存在 → false） */
+export function filesContainDir(dir, needle) {
+  if (!existsSync(dir)) return false;
+  const entries = readdirSync(dir, { recursive: true, withFileTypes: true });
+  for (const e of entries) {
+    if (!e.isFile() || !/\.md$/i.test(e.name)) continue;
+    if (e.name.includes(needle)) return true;
+    const parent = typeof e.parentPath === 'string' ? e.parentPath : dir;
+    try {
+      if (readFileSync(join(parent, e.name), 'utf-8').includes(needle)) return true;
+    } catch { /* skip unreadable */ }
+  }
+  return false;
+}

package/scripts/guard/checks/arch-design-light.mjs

@@ -0,0 +1,39 @@
+// scripts/guard/checks/arch-design-light.mjs — 轻架构说明（§4，可选维度）
+// v0.64.0：挂 planned 且 planned_arch=true（exploring→approved-for-build / approved-for-build→executing）。
+// 判据：architecture/light-note.md 存在非空，或显式 skip-with-reason（arch_design_light_skipped
+// + arch_design_light_skip_reason 两键齐全）。不要求 4A+DDD 全套 + 契约 + DP。
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { readState } from '../../lib/state-loader.mjs';
+
+export function checkArchDesignLight(changeDir) {
+  const state = readState(changeDir);
+
+  if (state.arch_design_light_skipped === 'true') {
+    const reason = (state.arch_design_light_skip_reason || '').trim();
+    if (!reason || reason === 'null') {
+      return {
+        pass: false,
+        failures: ['arch_design_light_skipped=true but no skip reason — set arch_design_light_skip_reason via tf state set'],
+      };
+    }
+    return { pass: true, failures: [], reason: `skipped: ${reason}` };
+  }
+
+  const notePath = join(changeDir, 'architecture', 'light-note.md');
+  if (!existsSync(notePath)) {
+    return {
+      pass: false,
+      failures: [
+        'architecture/light-note.md missing — write a short light architecture note '
+        + '(touched surfaces, key decisions; no 4A+DDD suite needed), or skip explicitly: '
+        + 'tf state set <dir> arch_design_light_skipped true + arch_design_light_skip_reason "<reason>"',
+      ],
+    };
+  }
+  const content = readFileSync(notePath, 'utf-8').trim();
+  if (!content) {
+    return { pass: false, failures: ['architecture/light-note.md is empty — write the light architecture note'] };
+  }
+  return { pass: true, failures: [] };
+}

package/scripts/guard/checks/arch-merged-light.mjs

@@ -0,0 +1,67 @@
+// scripts/guard/checks/arch-merged-light.mjs — 架构台账轻回写（§4，非 negotiable 底线）
+// v0.64.0（D8/D10）：
+// - 无架构 surface → 过（G4）
+// - 有 surface → 最小持久源齐（architecture.md 必产；触及 API/DB 另需 api.md/database.md）
+//   + 全局台账（docs/architecture/**）含归因 `change:<name>`（归因锚 = 扫描 + 条目，非快照）
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { readState } from '../../lib/state-loader.mjs';
+import { scanArchitectureSurface } from '../../lib/surface-scan.mjs';
+
+function filesContain(dir, needle) {
+  if (!existsSync(dir)) return false;
+  const entries = readdirSync(dir, { recursive: true, withFileTypes: true });
+  for (const e of entries) {
+    if (!e.isFile() || !/\.md$/i.test(e.name)) continue;
+    const parent = typeof e.parentPath === 'string' ? e.parentPath : dir;
+    try {
+      if (readFileSync(join(parent, e.name), 'utf-8').includes(needle)) return true;
+    } catch { /* skip unreadable */ }
+  }
+  return false;
+}
+
+function minSourceOk(changeDir, rel) {
+  const p = join(changeDir, 'architecture', rel);
+  return existsSync(p) && readFileSync(p, 'utf-8').trim().length > 0;
+}
+
+export function checkArchMergedLight(changeDir) {
+  const state = readState(changeDir);
+  const changeName = state.change_name || changeDir.split('/').filter(Boolean).pop();
+  const scan = scanArchitectureSurface(changeDir, state);
+
+  if (scan.error === 'no-baseline' || scan.error === 'diff-failed') {
+    return { pass: false, failures: [`surface scan failed (${scan.error}) — cannot verify ledger writeback, fail-closed`] };
+  }
+  if (scan.error === 'aggregate-list-missing') {
+    return {
+      pass: false,
+      failures: ['aggregate list missing (.team-flow/aggregate-dirs.txt) — cannot classify architecture surface, fail-closed'],
+    };
+  }
+
+  if (scan.architectureSurface.length === 0) {
+    return { pass: true, failures: [], reason: 'no architecture surface touched — ledger writeback N/A (G4)' };
+  }
+
+  const failures = [];
+  // D8 最小持久源：architecture.md 必产（聚合注册行 + 演进日志段 = marker 区投影输入）
+  if (!minSourceOk(changeDir, 'architecture.md')) {
+    failures.push('changes/<name>/architecture/architecture.md missing/empty — minimal persistent source required (aggregate lines + ### change:<name> evolution entry); run the light arch writeback');
+  }
+  if (scan.apiFiles.length > 0 && !minSourceOk(changeDir, 'api.md')) {
+    failures.push('API surface touched but architecture/api.md missing/empty — minimal endpoint delta required (feeds arch-merge rebuild)');
+  }
+  if (scan.dbFiles.length > 0 && !minSourceOk(changeDir, 'database.md')) {
+    failures.push('DB surface touched but architecture/database.md missing/empty — minimal schema delta required');
+  }
+
+  const anchor = `change:${changeName}`;
+  const globalLedger = join(scan.projectRoot, 'docs', 'architecture');
+  if (!filesContain(globalLedger, anchor)) {
+    failures.push(`global ledger (docs/architecture/**) has no '${anchor}' attribution — run: tf arch-merge --light <change-dir>`);
+  }
+
+  return failures.length ? { pass: false, failures } : { pass: true, failures: [] };
+}

package/scripts/guard/checks/arch-snapshot-light.mjs

@@ -0,0 +1,30 @@
+// scripts/guard/checks/arch-snapshot-light.mjs — 轻架构快照（§4，条件维度）
+// v0.64.0（D10 裁决）：仅当 light-note 产出时需要快照（供演进日志 diff 展示）；
+// arch-merged-light 的归因锚 = 扫描 + 台账条目，不依赖本快照——无 note / 已 skip → N/A 通过。
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { readState } from '../../lib/state-loader.mjs';
+
+export function checkArchSnapshotLight(changeDir) {
+  const state = readState(changeDir);
+
+  const notePath = join(changeDir, 'architecture', 'light-note.md');
+  const hasNote = existsSync(notePath) && readFileSync(notePath, 'utf-8').trim().length > 0;
+  const skipped = state.arch_design_light_skipped === 'true';
+
+  if (!hasNote || skipped) {
+    return { pass: true, failures: [], reason: 'no light architecture note — snapshot N/A (D10: anchor is scan+ledger, not snapshot)' };
+  }
+
+  const snapPath = join(changeDir, 'architecture', 'snapshot-light.md');
+  if (!existsSync(snapPath)) {
+    return {
+      pass: false,
+      failures: ['light note present but architecture/snapshot-light.md missing — snapshot the touched surfaces before closing'],
+    };
+  }
+  if (!readFileSync(snapPath, 'utf-8').trim()) {
+    return { pass: false, failures: ['architecture/snapshot-light.md is empty'] };
+  }
+  return { pass: true, failures: [] };
+}

package/scripts/guard/checks/artifacts-planned.mjs

@@ -0,0 +1,38 @@
+// scripts/guard/checks/artifacts-planned.mjs — planned 的规划制品判据（§4.5②，替代四件套）
+// v0.64.0（B-01 强化）：不止「存在」——防空壳套餐：
+// proposal.md 非空（≥10 个非空行）+ tasks.md ≥1 条 checkbox。
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { parseTaskLine } from '../../lib/md-normalize.mjs';
+
+function nonEmptyLines(text) {
+  return text.split('\n').filter(l => l.trim()).length;
+}
+
+export function checkArtifactsPlanned(changeDir) {
+  const failures = [];
+  const proposalPath = join(changeDir, 'proposal.md');
+  const tasksPath = join(changeDir, 'tasks.md');
+
+  if (!existsSync(proposalPath)) {
+    failures.push('proposal.md is missing — planned path requires proposal.md + tasks.md');
+  } else {
+    const proposal = readFileSync(proposalPath, 'utf-8');
+    const lines = nonEmptyLines(proposal);
+    if (lines < 10) {
+      failures.push(`proposal.md too thin (${lines} non-empty lines, need ≥10) — state intent, scope, and acceptance criteria`);
+    }
+  }
+
+  if (!existsSync(tasksPath)) {
+    failures.push('tasks.md is missing — planned path requires proposal.md + tasks.md');
+  } else {
+    const tasks = readFileSync(tasksPath, 'utf-8');
+    const taskCount = tasks.split('\n').map(l => parseTaskLine(l)).filter(Boolean).length;
+    if (taskCount < 1) {
+      failures.push('tasks.md has no task checkboxes — add at least one `- [ ]` task');
+    }
+  }
+
+  return failures.length ? { pass: false, failures } : { pass: true, failures: [] };
+}

package/scripts/guard/checks/compound-writeback-light.mjs

@@ -0,0 +1,45 @@
+// scripts/guard/checks/compound-writeback-light.mjs — 复利轻回写（§4，同 sink 不另起台账）
+// v0.64.0：planned closing 必执行（含「无新增决策」的显式空捕获记录），
+// **不走 compound_skipped 自清**（§3.7——自清会让 closed 后的全局库漏写无兜底）。
+// 判据：docs/solutions/** 存在归因 `change:<name>` 的条目（INDEX 单写入口 tf solutions 系列产出）。
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { readState } from '../../lib/state-loader.mjs';
+import { findProjectRoot } from '../../lib/surface-scan.mjs';
+
+function filesContain(dir, needle) {
+  if (!existsSync(dir)) return false;
+  const entries = readdirSync(dir, { recursive: true, withFileTypes: true });
+  for (const e of entries) {
+    if (!e.isFile() || !/\.md$/i.test(e.name)) continue;
+    const parent = typeof e.parentPath === 'string' ? e.parentPath : dir;
+    try {
+      if (readFileSync(join(parent, e.name), 'utf-8').includes(needle)) return true;
+    } catch { /* skip */ }
+  }
+  return false;
+}
+
+export function checkCompoundWritebackLight(changeDir) {
+  const state = readState(changeDir);
+  const changeName = state.change_name || changeDir.split('/').filter(Boolean).pop();
+
+  // 自清通道对本维度无效（planned 禁 compound_skipped，§3.7）
+  if (state.compound_skipped === true || state.compound_skipped === 'true') {
+    return {
+      pass: false,
+      failures: ['compound_skipped is not accepted on the planned light path — capture into the global library (empty capture "no new decisions" is fine): tf solutions capture / ce-compound with change:<name> attribution'],
+    };
+  }
+
+  const projectRoot = findProjectRoot(changeDir);
+  const solutionsDir = join(projectRoot, 'docs', 'solutions');
+  const anchor = `change:${changeName}`;
+  if (filesContain(solutionsDir, anchor) || filesContain(solutionsDir, changeName)) {
+    return { pass: true, failures: [] };
+  }
+  return {
+    pass: false,
+    failures: [`no solution entry attributed '${anchor}' (or '${changeName}') in docs/solutions/** — run compound capture (tf solutions capture / ce-compound), INDEX single-writer + dedup; an explicit 'no new decisions' entry satisfies this gate`],
+  };
+}