artifact-chain-assistant 0.13.0 → 0.14.0

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "artifact-chain-assistant",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "Artifact-chain intake, review/repair/batch/audit workflows, diagnostics, hooks, and version-lock maintenance helpers.",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "artifact-chain-assistant",
   "displayName": "Artifact Chain Assistant",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "Artifact-chain intake, review/repair/batch/audit workflows, diagnostics, and version-lock maintenance helpers.",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.kimi-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "artifact-chain-assistant",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "Artifact-chain intake, review/repair/batch/audit workflows, diagnostics, and version-lock maintenance helpers.",
   "author": {
     "name": "广州市风荷科技有限公司"

package/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 ## Unreleased
 
+## 0.14.0
+
+### Added
+
+- `artifact-audit health` now routes graph checks through `artifact-graph check-professional` and
+  reads existing graph proofs through `read-proof`. Its human-facing result distinguishes a graph
+  pass, findings, incomplete checks, and unavailable evidence; capability and release-gate audits
+  retain their existing scope.
+
+### Changed
+
+- Synchronized runtime compatibility with `artifact-graph@0.14.0`.
+
 ## 0.13.0
 
 ### Added

package/INSTALL.md

@@ -15,7 +15,7 @@ instructions.
 ## Prerequisites
 
 - Node.js `>=22.22.2 <23`.
-- `artifact-graph` 0.13.0 installed in the target project.
+- `artifact-graph` 0.14.0 installed in the target project.
 - **GitHub SSH key** — Claude Code clones `source: github` entries over SSH by default. If you
   have not configured a GitHub SSH key, set `CLAUDE_CODE_PLUGIN_PREFER_HTTPS=1` in your shell
   profile, or add the marketplace with an explicit `https://` URL. Codex users can check
@@ -27,24 +27,24 @@ instructions.
 
 | Plugin | Verified Runtime | Install |
 | --- | --- | --- |
-| `artifact-chain-assistant` 0.13.0 | `artifact-graph` 0.13.0 | `pnpm add -D artifact-graph@0.13.0` |
+| `artifact-chain-assistant` 0.14.0 | `artifact-graph` 0.14.0 | `pnpm add -D artifact-graph@0.14.0` |
 
 ### Install The Runtime
 
 The default installation path uses the npm registry with a precise version:
 
 ```bash
-pnpm add -D artifact-graph@0.13.0
+pnpm add -D artifact-graph@0.14.0
 ```
 
 If the npm registry is unavailable, use the explicit GitHub fallback pinned to the verified tag:
 
 ```bash
-pnpm add -D github:ifoohoo/artifact-graph#artifact-graph-v0.13.0
+pnpm add -D github:ifoohoo/artifact-graph#artifact-graph-v0.14.0
 ```
 
 > **Never** install with an unlocked range (`artifact-graph`, `artifact-graph@latest`,
-> `artifact-graph@^0.13.0`) or an unpinned GitHub URL (`github:ifoohoo/artifact-graph`).
+> `artifact-graph@^0.14.0`) or an unpinned GitHub URL (`github:ifoohoo/artifact-graph`).
 > Unlocked installs produce non-reproducible dependency trees and break version-lock audit.
 
 With pnpm 10+, projects that install `artifact-graph` must allow the native `better-sqlite3`
@@ -71,7 +71,7 @@ allowBuilds:
 
 The plugin's `doctor` command validates the installed runtime version before running any
 diagnostic. If it detects a version mismatch or missing CLI, it reports the exact remediation
-command (`pnpm add -D artifact-graph@0.13.0`) and exits non-zero.
+command (`pnpm add -D artifact-graph@0.14.0`) and exits non-zero.
 
 ### CLI Resolution Order
 
@@ -156,7 +156,7 @@ wrappers, and Stop-hook guardrail. These assistant controls do not replace Git h
 
 > **Marketplace note**: `ifoohoo/artifact-skill-set` is an external independent marketplace. The
 > plugin payload is still published from `ifoohoo/artifact-chain-assistant`. The marketplace entry
-> must publish and enable `artifact-chain-assistant` 0.13.0 before the install commands above will
+> must publish and enable `artifact-chain-assistant` 0.14.0 before the install commands above will
 > succeed.
 
 ### Kimi Code
@@ -303,7 +303,7 @@ The plugin should not move these files into the plugin repository.
 
 For a first-time setup, the end-to-end sequence is:
 
-1. **Install the CLI** — `pnpm add -D artifact-graph@0.13.0` (see Prerequisites above). The
+1. **Install the CLI** — `pnpm add -D artifact-graph@0.14.0` (see Prerequisites above). The
    `artifact-chain-setup` skill can run this and the other mechanical install steps for you
    after showing a plan and getting your confirmation.
 2. **Install the plugin** — follow the Codex or Claude Code section above.
@@ -1346,7 +1346,7 @@ with append-only behavior; it does not overwrite local rules.
 ### Recovery Steps
 
 ```bash
-# 1. Install dependencies from lockfile (gets artifact-graph@0.13.0)
+# 1. Install dependencies from lockfile (gets artifact-graph@0.14.0)
 pnpm install --frozen-lockfile
 
 # 2. Install plugin per your host (Codex / Claude Code / Kimi Code)
@@ -1413,7 +1413,7 @@ pnpm exec artifact-graph hooks install-git --hook all
 ### Enterprise Mirror
 
 If the corporate environment cannot access the public npm registry or GitHub, mirror both
-`artifact-graph@0.13.0` and the plugin marketplace repository on an internal registry. The mirror
+`artifact-graph@0.14.0` and the plugin marketplace repository on an internal registry. The mirror
 does not change the state ownership model: Git-tracked files remain authoritative, local caches
 remain derived.
 

package/README.md

@@ -82,10 +82,13 @@ conformance, or release readiness. Release facts still come from the target proj
 and result records.
 
 Governance checks consume static checklists, project artifacts, and existing result records. They do
-not run target tests, builds, validators, hooks, or business workflows. If the selected specification
-is missing or unreadable, or a required public contract is not published, report the affected
-professional judgment as `unknown` or pending adoption rather than a target violation. Reuse explicit
-authorization already given for the same target and action; ask again when the scope expands.
+not run target tests, builds, validators, hooks, or business workflows. `artifact-audit health`
+routes to `artifact-graph check-professional` and `read-proof` for graph professional scan and proof
+read; capability and release-gate keep their existing scopes. A graph `pass` does not prove content
+semantics, method execution, or publication. If the selected specification is missing or unreadable,
+or a required public contract is not published, report the affected professional judgment as
+`unknown` or pending adoption rather than a target violation. Reuse explicit authorization already
+given for the same target and action; ask again when the scope expands.
 
 ### Extended Artifact Catalog
 
@@ -201,13 +204,13 @@ override, compact query, fallback behavior, and `PLUGIN_ROOT` discovery, see
 
 | Plugin | Runtime | Install |
 | --- | --- | --- |
-| `artifact-chain-assistant` 0.13.0 | `artifact-graph` 0.13.0 | `pnpm add -D artifact-graph@0.13.0` |
+| `artifact-chain-assistant` 0.14.0 | `artifact-graph` 0.14.0 | `pnpm add -D artifact-graph@0.14.0` |
 
 ## Install
 
 ```bash
 # Runtime (required)
-npm install --save-dev artifact-graph@0.13.0
+npm install --save-dev artifact-graph@0.14.0
 ```
 
 ```bash
@@ -229,7 +232,7 @@ codex plugin add artifact-chain-assistant@artifact-skill-set
 
 > **Marketplace note**: `ifoohoo/artifact-skill-set` is an external independent marketplace. The
 > plugin payload is still published from `ifoohoo/artifact-chain-assistant`. The marketplace entry
-> must publish and enable `artifact-chain-assistant` 0.13.0 before the install commands above will
+> must publish and enable `artifact-chain-assistant` 0.14.0 before the install commands above will
 > succeed.
 
 ```text
@@ -258,7 +261,7 @@ For the full installation guide, quick start, Agent prompts, and clone onboardin
 
 ## Quick Start
 
-1. Install plugin 0.13.0 (above) and runtime: `pnpm add -D artifact-graph@0.13.0`.
+1. Install plugin 0.14.0 (above) and runtime: `pnpm add -D artifact-graph@0.14.0`.
 2. Run `artifact-graph doctor --root . --format json` to verify the runtime.
 3. For first-time setup, use the bootstrap skill.
 4. For daily work, use the maintainer skill.

package/README.zh-CN.md

@@ -64,7 +64,9 @@ Audit 定义技能族制品规范，助手帮助项目采用适用的类型、
 发布工具和结果材料证明。
 
 治理检查只读取静态清单、项目制品和已有结果材料，不运行目标项目的测试、构建、validator、hook
-或业务工作流。规范来源缺失、不可读，或所需公共合同尚未发布时，只把相应专业判断记为
+或业务工作流。`artifact-audit health` 路由到 `artifact-graph check-professional` 和 `read-proof`
+做图专业扫描与读证；capability 和 release-gate 仍走原范围。图检查 `pass` 不能证明内容语义、
+方法执行或已经发布。规范来源缺失、不可读，或所需公共合同尚未发布时，只把相应专业判断记为
 `unknown` 或待采用，不把目标判为违规。项目已经明确授权同一目标和动作时可以沿用该授权；范围
 扩大时仍需重新确认。
 
@@ -234,13 +236,13 @@ catalog 还包含 `artifact.generate`，用于从模板和 profile 配置生成
 
 | 插件 | 运行时 | 安装 |
 | --- | --- | --- |
-| `artifact-chain-assistant` 0.13.0 | `artifact-graph` 0.13.0 | `pnpm add -D artifact-graph@0.13.0` |
+| `artifact-chain-assistant` 0.14.0 | `artifact-graph` 0.14.0 | `pnpm add -D artifact-graph@0.14.0` |
 
 ## 安装
 
 ```bash
 # 运行时（必需）
-npm install --save-dev artifact-graph@0.13.0
+npm install --save-dev artifact-graph@0.14.0
 ```
 
 ```bash
@@ -262,7 +264,7 @@ codex plugin add artifact-chain-assistant@artifact-skill-set
 
 > **市场说明**：`ifoohoo/artifact-skill-set` 是外部独立市场，插件载荷仍由
 > `ifoohoo/artifact-chain-assistant` 发布。市场条目必须先发布并启用
-> `artifact-chain-assistant` 0.13.0，上述安装命令才能生效。
+> `artifact-chain-assistant` 0.14.0，上述安装命令才能生效。
 
 ```text
 # Kimi Code 插件（交互式，user 作用域）
@@ -289,7 +291,7 @@ Qoder 当前承诺的边界是技能安装与发现；不提供 Claude Code 的
 
 ## 快速开始
 
-1. 安装插件 0.13.0（见上文）和运行时：`pnpm add -D artifact-graph@0.13.0`。
+1. 安装插件 0.14.0（见上文）和运行时：`pnpm add -D artifact-graph@0.14.0`。
 2. 运行 `artifact-graph doctor --root . --format json` 验证运行时。
 3. 首次搭建，进入 bootstrap 技能。
 4. 日常工作，进入 maintainer 技能。

package/adapters/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "artifact-chain-assistant",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "Artifact-chain intake, review/repair/batch/audit workflows, diagnostics, hooks, and version-lock maintenance helpers.",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/claude/INSTALL.md

@@ -18,7 +18,7 @@ instructions.
 ## Prerequisites
 
 - Node.js `>=22.22.2 <23`.
-- `artifact-graph` 0.13.0 installed in the target project.
+- `artifact-graph` 0.14.0 installed in the target project.
 - **GitHub SSH key** — Claude Code clones `source: github` entries over SSH by default. If you
   have not configured a GitHub SSH key, set `CLAUDE_CODE_PLUGIN_PREFER_HTTPS=1` in your shell
   profile, or add the marketplace with an explicit `https://` URL. Codex users can check
@@ -30,24 +30,24 @@ instructions.
 
 | Plugin | Verified Runtime | Install |
 | --- | --- | --- |
-| `artifact-chain-assistant` 0.13.0 | `artifact-graph` 0.13.0 | `pnpm add -D artifact-graph@0.13.0` |
+| `artifact-chain-assistant` 0.14.0 | `artifact-graph` 0.14.0 | `pnpm add -D artifact-graph@0.14.0` |
 
 ### Install The Runtime
 
 The default installation path uses the npm registry with a precise version:
 
 ```bash
-pnpm add -D artifact-graph@0.13.0
+pnpm add -D artifact-graph@0.14.0
 ```
 
 If the npm registry is unavailable, use the explicit GitHub fallback pinned to the verified tag:
 
 ```bash
-pnpm add -D github:ifoohoo/artifact-graph#artifact-graph-v0.13.0
+pnpm add -D github:ifoohoo/artifact-graph#artifact-graph-v0.14.0
 ```
 
 > **Never** install with an unlocked range (`artifact-graph`, `artifact-graph@latest`,
-> `artifact-graph@^0.13.0`) or an unpinned GitHub URL (`github:ifoohoo/artifact-graph`).
+> `artifact-graph@^0.14.0`) or an unpinned GitHub URL (`github:ifoohoo/artifact-graph`).
 > Unlocked installs produce non-reproducible dependency trees and break version-lock audit.
 
 With pnpm 10+, projects that install `artifact-graph` must allow the native `better-sqlite3`
@@ -74,7 +74,7 @@ allowBuilds:
 
 The plugin's `doctor` command validates the installed runtime version before running any
 diagnostic. If it detects a version mismatch or missing CLI, it reports the exact remediation
-command (`pnpm add -D artifact-graph@0.13.0`) and exits non-zero.
+command (`pnpm add -D artifact-graph@0.14.0`) and exits non-zero.
 
 ### CLI Resolution Order
 
@@ -159,7 +159,7 @@ wrappers, and Stop-hook guardrail. These assistant controls do not replace Git h
 
 > **Marketplace note**: `ifoohoo/artifact-skill-set` is an external independent marketplace. The
 > plugin payload is still published from `ifoohoo/artifact-chain-assistant`. The marketplace entry
-> must publish and enable `artifact-chain-assistant` 0.13.0 before the install commands above will
+> must publish and enable `artifact-chain-assistant` 0.14.0 before the install commands above will
 > succeed.
 
 ### Kimi Code
@@ -306,7 +306,7 @@ The plugin should not move these files into the plugin repository.
 
 For a first-time setup, the end-to-end sequence is:
 
-1. **Install the CLI** — `pnpm add -D artifact-graph@0.13.0` (see Prerequisites above). The
+1. **Install the CLI** — `pnpm add -D artifact-graph@0.14.0` (see Prerequisites above). The
    `artifact-chain-setup` skill can run this and the other mechanical install steps for you
    after showing a plan and getting your confirmation.
 2. **Install the plugin** — follow the Codex or Claude Code section above.
@@ -1349,7 +1349,7 @@ with append-only behavior; it does not overwrite local rules.
 ### Recovery Steps
 
 ```bash
-# 1. Install dependencies from lockfile (gets artifact-graph@0.13.0)
+# 1. Install dependencies from lockfile (gets artifact-graph@0.14.0)
 pnpm install --frozen-lockfile
 
 # 2. Install plugin per your host (Codex / Claude Code / Kimi Code)
@@ -1416,7 +1416,7 @@ pnpm exec artifact-graph hooks install-git --hook all
 ### Enterprise Mirror
 
 If the corporate environment cannot access the public npm registry or GitHub, mirror both
-`artifact-graph@0.13.0` and the plugin marketplace repository on an internal registry. The mirror
+`artifact-graph@0.14.0` and the plugin marketplace repository on an internal registry. The mirror
 does not change the state ownership model: Git-tracked files remain authoritative, local caches
 remain derived.
 

package/adapters/claude/agent-methods/catalog.yaml

@@ -1,7 +1,7 @@
 schemaVersion: 1
 catalog:
   id: artifact-chain-assistant
-  version: "0.13.0"
+  version: "0.14.0"
 entries:
   - ref: artifact.prd-feature.default
     provider:

package/adapters/claude/compatibility.json

@@ -1,9 +1,9 @@
 {
   "schemaVersion": "1.0",
-  "pluginVersion": "0.13.0",
+  "pluginVersion": "0.14.0",
   "artifactGraph": {
-    "verifiedVersion": "0.13.0",
-    "installSpec": "artifact-graph@0.13.0",
-    "githubFallbackSpec": "github:ifoohoo/artifact-graph#artifact-graph-v0.13.0"
+    "verifiedVersion": "0.14.0",
+    "installSpec": "artifact-graph@0.14.0",
+    "githubFallbackSpec": "github:ifoohoo/artifact-graph#artifact-graph-v0.14.0"
   }
 }

package/adapters/claude/family-apis/catalog.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "catalog": {
     "id": "artifact-chain-assistant",
-    "version": "0.13.0"
+    "version": "0.14.0"
   },
   "families": [
     {

package/adapters/claude/skills/artifact-audit/SKILL.md

@@ -14,10 +14,10 @@ argument-hint: "<target> [--root <path>] [--format json|markdown]"
 
 本技能对三个审计域使用不同的配置要求：
 
-- **health**：可只依赖 `artifact-graph.config.yaml` 和运行时状态，不强制要求 profile。readiness check 确认项目标记存在即可。
+- **health**：可只依赖 `artifact-graph.config.yaml` 和运行时状态，不强制要求 profile。health 先识别所选动作：专业扫描、刷新（扫描并写到新的绝对输出路径）或同族读证。扫描和刷新才检查项目标记；纯读证只使用调用方给出的证明根目录和相对路径。
 - **capability**：可只依赖 `artifact-graph.config.yaml` 和运行时状态，检查哪些 artifact type 有完整覆盖。
 - **release-gate**：必须存在 `workflows.audit.release-gate` 配置，并提供可读 checklist 作为发布材料。只有 validators 或项目 worker 声明时返回 `NEEDS_INPUT`，不得伪装为 health 检查。
-- **readiness check**：执行前调用 `check-workflow-profile.mjs` 确认必要配置就绪。该脚本只解析配置、worker 和资源，不启动 validator 或项目 worker。三个域分别调用，不混用。
+- **readiness check**：扫描、刷新、capability 和 release-gate 在执行前调用 `check-workflow-profile.mjs` 确认必要配置就绪。该脚本只解析配置、worker 和资源，不启动 validator 或项目 worker。三个域分别调用，不混用。纯读证不调用该脚本。
 
 ```bash
 node <plugin-root>/scripts/check-workflow-profile.mjs \
@@ -27,7 +27,7 @@ node <plugin-root>/scripts/check-workflow-profile.mjs \
   --root <project-root> --action audit --domain release-gate --format json
 ```
 
-health/capability 返回 `NEEDS_INPUT` 时只报告缺失的项目标记；release-gate 返回 `NEEDS_INPUT` 时要求补齐配置和可读 checklist。
+扫描、刷新或 capability 返回 `NEEDS_INPUT` 时只报告缺失的项目标记；release-gate 返回 `NEEDS_INPUT` 时要求补齐配置和可读 checklist。纯读证不走这条项目就绪判定。
 
 ## 使用
 
@@ -37,27 +37,36 @@ health/capability 返回 `NEEDS_INPUT` 时只报告缺失的项目标记；relea
 /artifact-audit capability --root <path> [--format json|markdown]
 ```
 
-先运行只读检查：
+先识别所选动作，再决定要不要做项目就绪检查。
+
+扫描或刷新时运行：
 
 ```bash
 node <plugin-root>/scripts/check-workflow-profile.mjs \
   --root <project-root> --action audit --domain health --format json
 ```
 
-返回 `NEEDS_INPUT` 时只报告缺失的项目标记；不得继续输出发布就绪结论。
+返回 `NEEDS_INPUT` 时只报告缺失的项目标记；不得继续扫描或刷新。
+
+纯读证直接运行 `artifact-graph read-proof --proof-root <root> --proof <relative> --format json`。仅有证明文件、没有 `artifact-graph.config.yaml` 的目录也可以读证；不要对该目录调用 `check-workflow-profile.mjs`。
 
 | 子命令 | 说明 |
 |--------|------|
-| health | 制品链健康检查（validate + version-lock + 追溯覆盖率） |
-| release-gate | 发布材料检查（health + profile 提供的可读 checklist） |
+| health | 路由到 `artifact-graph check-professional` / `read-proof` 的制品链健康检查 |
+| release-gate | 发布材料检查（读取已有 health 结果 + profile 提供的可读 checklist） |
 | capability | 能力审计（哪些 artifact type 有完整覆盖、哪些缺失） |
 
 ## 健康检查项
 
-1. **validate**：运行 `artifact-graph validate --root <path> --warning-only`。
-2. **version-lock**：运行 `artifact-graph version-lock audit --root <path> --strict-missing-lock`。
-3. **追溯覆盖率**：统计有代码/测试追溯的 artifact 比例。
-4. **孤立检测**：无消费者或无生产者的 artifact。
+health 只解释图内核已经组合好的只读检查，不增加领域规则，也不把 Review Result 当作新合同。
+
+1. **专业扫描**：运行 `artifact-graph check-professional --root <path> --format json`。该命令在内核组合已有 `validate`、`version-lock audit` 和 `coverage`，不先执行会写缓存的 `scan`。
+2. **共同证明**：调用方需要证明文件时再显式给出 `--conclusion-output <absolute-path>`。文件只在该绝对路径排他创建，不覆盖已有证明，也不写入目标图缓存。
+3. **同族读证**：运行 `artifact-graph read-proof --proof-root <root> --proof <relative> --format json`，只解释本族证明，不重新扫描目标，也不依赖当前目标配置或项目就绪检查。
+4. **领域码**：`GRAPH_CLEAR` 且 `completion=complete` 才是读证 `pass`。`GRAPH_FINDINGS`、`GRAPH_CHECK_INCOMPLETE`、`GRAPH_CHECK_UNAVAILABLE` 都是 `not_pass`。缺文件、损坏 JSON、非本族或未知领域码是 `unavailable`（退出 2）。
+5. **范围**：`complete` 只表示声明范围内的检查做完，不等于通过。warning-only 的原生退出 0 仍可能含 issues，必须读取原始 issues。
+
+capability 与 release-gate 保持原范围，不改走新证明合同。
 
 ## 发布门检查项
 
@@ -68,7 +77,8 @@ node <plugin-root>/scripts/check-workflow-profile.mjs \
 
 ## 约束
 
-- health/capability 调用 artifact-graph CLI 读取通用图检查结果；`--warning-only` 退出 0 时仍读取并报告 issues。
+- health 路由到 `check-professional` 与 `read-proof`；不要用 `scan` 冒充检查。capability 仍读取原图 CLI 的类型覆盖结果。
+- `--warning-only` 退出 0 时仍读取并报告 issues；图结果不代替内容语义、方法执行或发布事实。
 - release-gate 只读取配置、checklist 和已有材料，不运行目标测试、构建、安全脚本、hooks 或项目 worker。
 - 不修改项目文件。
 - 结果以 JSON 或 Markdown 输出。
@@ -76,7 +86,8 @@ node <plugin-root>/scripts/check-workflow-profile.mjs \
 
 ## 故障诊断
 
-- 缺 `artifact-graph.config.yaml` 与 `artifacts/`：返回 `NEEDS_INPUT`。
+- 扫描或刷新缺 `artifact-graph.config.yaml` 与 `artifacts/`：返回 `NEEDS_INPUT`。
+- 纯读证缺文件、损坏 JSON、非本族或未知领域码：保留 `read-proof` 的 `unavailable`（退出 2），不改写成项目未就绪。
 - CLI validate/version-lock 非零：保留原始命令、退出码与诊断，release-gate 返回失败。
 - release-gate 只有 validator 或项目 worker、没有可读 checklist：返回 `NEEDS_INPUT`，并指向本入口的材料要求和 release-skill。
 - 项目专用发布材料：由项目 checklist 声明；本技能不推断或硬编码规则。

package/adapters/claude/skills/artifact-chain-help/SKILL.md

@@ -98,13 +98,13 @@ Registry projection: NOT_AVAILABLE (REGISTRY_V2_REQUIRED)
 ## 从需求到交付的公开分工
 
 - **技能负责工作方法**：`artifact-chain-requirements` 保存原始诉求、处置与 SPEC 承接；`artifact-chain-where-am-i` 盘点和定位；制作、审阅、修复技能根据可执行 profile 工作。
-- **artifact-graph CLI 负责确定性图操作**：用 `artifact-graph query --from <type>:<id>` 查询关系，用 `artifact-graph context --target <type>:<id> --mode implementation` 组装上下文，用 `artifact-graph validate --root <root> --warning-only` 检查图。
+- **artifact-graph CLI 负责确定性图操作**：用 `artifact-graph query --from <type>:<id>` 查询关系，用 `artifact-graph context --target <type>:<id> --mode implementation` 组装上下文，用 `artifact-graph validate --root <root> --warning-only` 检查图。需要可复用的图专业证明时，用 `artifact-graph check-professional --root <root> --format json` 做只读扫描，再用 `artifact-graph read-proof --proof-root <root> --proof <relative> --format json` 解释本族证明；不要把 Review Result 或 `scan` 缓存当作该合同。
 - **制品重组技能只补语义判断**：`artifact-chain-restructure` 调用 `artifact-graph restructure inspect/plan` 生成候选；完整人工映射和纯确定性路径直接使用 CLI。授权覆盖且独立复审通过后，同一入口才路由 `restructure apply`、`recover`、`prune-recovery`：apply 需要操作者给出 `--confirm-cooperative-writers`，recover 需要两项维护确认，prune 的普通路径同样需要合作式声明。文件迁移与锁收尾分别报告；计划阶段结果不得报告为已经迁移。
 - **Node API 负责程序化组合**：从 `artifact-graph` 导入 `loadConfig`、`scanArtifacts` 与 `queryGraph`，读取项目配置后扫描，再按 `{ from: '<type>:<id>', schema }` 查询；调用方负责展示或消费结果。
 - **测试与 E2E 负责行为验证**：测试文件或 `verifies` 声明只表明验证意图；只有实际运行结果或验收记录能证明验证事实。
 - **目标项目的发布工具负责发布**：插件不代替 npm、GitHub、应用商店或部署系统。发布事实必须引用工具结果和精确版本。
 
-环境问题用 `artifact-chain-setup` 和 `artifact-graph doctor`；图关系与覆盖健康用 `artifact-audit`。批准、实现、验证、发布四类事实分别给证据，缺证据时显示 `unknown`。
+环境问题用 `artifact-chain-setup` 和 `artifact-graph doctor`；图关系与覆盖健康用 `artifact-audit health`，它路由到上述专业扫描和读证。批准、实现、验证、发布四类事实分别给证据，缺证据时显示 `unknown`。
 
 ## Registry 不可用时的诚实降级
 

package/adapters/claude/skills/artifact-chain-quickstart/SKILL.md

@@ -176,6 +176,16 @@ description: artifact-chain-assistant 插件内的统一路由入口。用户用
 
 **最小提示词**：`请先盘点项目事实和规范适用性，再说明配置采用、通用图检查与专业判断各由谁负责。`
 
+### 图专业证明或 health 扫描
+
+**匹配关键词**：图专业证明、check-professional、read-proof、制品链 health、图健康扫描、读取图证明
+
+**路由目标**：`artifact-audit`
+
+**理由**：`artifact-audit health` 路由到 `artifact-graph check-professional` 与 `read-proof`。capability 和 release-gate 仍走原范围，不把图通过当成内容语义、方法执行或发布事实。
+
+**最小提示词**：`请用 artifact-audit health 做图专业扫描；若需要证明文件，再给出绝对输出路径并用 read-proof 阅读。`
+
 ### 意图不明确
 
 **行为**：输出追问，不猜测路由。

package/adapters/codex/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "artifact-chain-assistant",
   "displayName": "Artifact Chain Assistant",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "Artifact-chain intake, review/repair/batch/audit workflows, diagnostics, and version-lock maintenance helpers.",
   "author": {
     "name": "广州市风荷科技有限公司"

package/adapters/codex/INSTALL.md

@@ -18,7 +18,7 @@ instructions.
 ## Prerequisites
 
 - Node.js `>=22.22.2 <23`.
-- `artifact-graph` 0.13.0 installed in the target project.
+- `artifact-graph` 0.14.0 installed in the target project.
 - **GitHub SSH key** — Claude Code clones `source: github` entries over SSH by default. If you
   have not configured a GitHub SSH key, set `CLAUDE_CODE_PLUGIN_PREFER_HTTPS=1` in your shell
   profile, or add the marketplace with an explicit `https://` URL. Codex users can check
@@ -30,24 +30,24 @@ instructions.
 
 | Plugin | Verified Runtime | Install |
 | --- | --- | --- |
-| `artifact-chain-assistant` 0.13.0 | `artifact-graph` 0.13.0 | `pnpm add -D artifact-graph@0.13.0` |
+| `artifact-chain-assistant` 0.14.0 | `artifact-graph` 0.14.0 | `pnpm add -D artifact-graph@0.14.0` |
 
 ### Install The Runtime
 
 The default installation path uses the npm registry with a precise version:
 
 ```bash
-pnpm add -D artifact-graph@0.13.0
+pnpm add -D artifact-graph@0.14.0
 ```
 
 If the npm registry is unavailable, use the explicit GitHub fallback pinned to the verified tag:
 
 ```bash
-pnpm add -D github:ifoohoo/artifact-graph#artifact-graph-v0.13.0
+pnpm add -D github:ifoohoo/artifact-graph#artifact-graph-v0.14.0
 ```
 
 > **Never** install with an unlocked range (`artifact-graph`, `artifact-graph@latest`,
-> `artifact-graph@^0.13.0`) or an unpinned GitHub URL (`github:ifoohoo/artifact-graph`).
+> `artifact-graph@^0.14.0`) or an unpinned GitHub URL (`github:ifoohoo/artifact-graph`).
 > Unlocked installs produce non-reproducible dependency trees and break version-lock audit.
 
 With pnpm 10+, projects that install `artifact-graph` must allow the native `better-sqlite3`
@@ -74,7 +74,7 @@ allowBuilds:
 
 The plugin's `doctor` command validates the installed runtime version before running any
 diagnostic. If it detects a version mismatch or missing CLI, it reports the exact remediation
-command (`pnpm add -D artifact-graph@0.13.0`) and exits non-zero.
+command (`pnpm add -D artifact-graph@0.14.0`) and exits non-zero.
 
 ### CLI Resolution Order
 
@@ -159,7 +159,7 @@ wrappers, and Stop-hook guardrail. These assistant controls do not replace Git h
 
 > **Marketplace note**: `ifoohoo/artifact-skill-set` is an external independent marketplace. The
 > plugin payload is still published from `ifoohoo/artifact-chain-assistant`. The marketplace entry
-> must publish and enable `artifact-chain-assistant` 0.13.0 before the install commands above will
+> must publish and enable `artifact-chain-assistant` 0.14.0 before the install commands above will
 > succeed.
 
 ### Kimi Code
@@ -306,7 +306,7 @@ The plugin should not move these files into the plugin repository.
 
 For a first-time setup, the end-to-end sequence is:
 
-1. **Install the CLI** — `pnpm add -D artifact-graph@0.13.0` (see Prerequisites above). The
+1. **Install the CLI** — `pnpm add -D artifact-graph@0.14.0` (see Prerequisites above). The
    `artifact-chain-setup` skill can run this and the other mechanical install steps for you
    after showing a plan and getting your confirmation.
 2. **Install the plugin** — follow the Codex or Claude Code section above.
@@ -1349,7 +1349,7 @@ with append-only behavior; it does not overwrite local rules.
 ### Recovery Steps
 
 ```bash
-# 1. Install dependencies from lockfile (gets artifact-graph@0.13.0)
+# 1. Install dependencies from lockfile (gets artifact-graph@0.14.0)
 pnpm install --frozen-lockfile
 
 # 2. Install plugin per your host (Codex / Claude Code / Kimi Code)
@@ -1416,7 +1416,7 @@ pnpm exec artifact-graph hooks install-git --hook all
 ### Enterprise Mirror
 
 If the corporate environment cannot access the public npm registry or GitHub, mirror both
-`artifact-graph@0.13.0` and the plugin marketplace repository on an internal registry. The mirror
+`artifact-graph@0.14.0` and the plugin marketplace repository on an internal registry. The mirror
 does not change the state ownership model: Git-tracked files remain authoritative, local caches
 remain derived.
 

package/adapters/codex/agent-methods/catalog.yaml

@@ -1,7 +1,7 @@
 schemaVersion: 1
 catalog:
   id: artifact-chain-assistant
-  version: "0.13.0"
+  version: "0.14.0"
 entries:
   - ref: artifact.prd-feature.default
     provider:

package/adapters/codex/compatibility.json

@@ -1,9 +1,9 @@
 {
   "schemaVersion": "1.0",
-  "pluginVersion": "0.13.0",
+  "pluginVersion": "0.14.0",
   "artifactGraph": {
-    "verifiedVersion": "0.13.0",
-    "installSpec": "artifact-graph@0.13.0",
-    "githubFallbackSpec": "github:ifoohoo/artifact-graph#artifact-graph-v0.13.0"
+    "verifiedVersion": "0.14.0",
+    "installSpec": "artifact-graph@0.14.0",
+    "githubFallbackSpec": "github:ifoohoo/artifact-graph#artifact-graph-v0.14.0"
   }
 }

package/adapters/codex/family-apis/catalog.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "catalog": {
     "id": "artifact-chain-assistant",
-    "version": "0.13.0"
+    "version": "0.14.0"
   },
   "families": [
     {