artifact-chain-assistant 0.8.0

package/adapters/codex/templates/extended/ops/runbook/starter.md

@@ -0,0 +1,101 @@
+---
+id: {RUN_ID}
+title: {运维手册标题}
+status: draft
+related_features: []
+related_decisions: []
+---
+
+# {RUN_ID}: {运维手册标题}
+
+<!-- 本模板是插件 starter 指导，项目本地模板可完全覆盖 -->
+<!-- 插件模板是入门指导，项目本地模板是权威 -->
+
+## 概述
+
+{描述这个运维手册的适用场景、目标受众和覆盖范围}
+
+## 适用场景
+
+- **触发条件**：{什么情况下使用此手册}
+- **前置条件**：{执行前必须满足的条件}
+- **负责人**：{主要负责人和备份}
+
+## 操作流程
+
+### 步骤 1：{步骤标题}
+
+**目的**：{步骤目的}
+
+**操作**：
+```bash
+{操作命令}
+```
+
+**预期结果**：{结果描述}
+
+**验证方法**：{如何验证操作成功}
+
+### 步骤 2：{步骤标题}
+
+{同上结构}
+
+## 告警与监控
+
+### 关键指标
+
+| 指标 | 阈值 | 告警方式 |
+|------|------|---------|
+| {指标1} | {阈值} | {告警方式} |
+| {指标2} | {阈值} | {告警方式} |
+
+### 告警处理
+
+| 告警 | 原因 | 处理步骤 |
+|------|------|---------|
+| {告警1} | {原因} | {步骤} |
+| {告警2} | {原因} | {步骤} |
+
+## 回滚流程
+
+### 回滚触发条件
+
+{描述什么情况下需要回滚}
+
+### 回滚步骤
+
+1. {回滚步骤 1}
+2. {回滚步骤 2}
+
+### 回滚验证
+
+{如何验证回滚成功}
+
+## 故障排查
+
+### 常见问题
+
+**问题 1**：{问题描述}
+
+**症状**：{症状描述}
+**原因**：{原因分析}
+**解决方案**：{解决步骤}
+
+### 日志位置
+
+| 服务 | 日志路径 | 关键字段 |
+|------|---------|---------|
+| {服务1} | {路径} | {字段} |
+
+## 联系人
+
+| 角色 | 姓名 | 联系方式 |
+|------|------|---------|
+| 主要负责人 | {姓名} | {联系方式} |
+| 备份负责人 | {姓名} | {联系方式} |
+
+## 变更日志
+
+| 日期 | 变更 | 作者 |
+|------|------|------|
+| {YYYY-MM-DD} | 初始版本 | {作者} |

package/adapters/codex/templates/extended/ops/security_review/review-checklist.md

@@ -0,0 +1,56 @@
+# Security Review 审查清单
+
+<!-- 本清单是插件通用基线，项目本地审查规则可覆盖 -->
+
+## 结构完整性
+
+- [ ] `id` 字段存在且符合项目 ID 模式（如 `SEC-{nnn}`）
+- [ ] `title` 清晰描述审查范围
+- [ ] `scope` 已明确界定
+- [ ] 审查类型已标注
+
+## 威胁模型
+
+- [ ] 攻击面已全面识别
+- [ ] 信任边界已明确
+- [ ] 资产分类与敏感级别合理
+- [ ] 数据流图完整
+
+## 发现项质量
+
+- [ ] 发现项按严重度分类（高/中/低）
+- [ ] 每项有清晰的影响描述
+- [ ] 修复状态已跟踪
+- [ ] 误报已排除
+
+## 安全控制覆盖
+
+- [ ] 认证与授权已审查
+- [ ] 数据保护（传输 + 静态）已审查
+- [ ] 输入验证已审查
+- [ ] 依赖安全已扫描
+
+## 合规映射
+
+- [ ] 相关合规标准已识别
+- [ ] 合规状态已明确
+- [ ] 不合规项有修复计划
+
+## 修复跟踪
+
+- [ ] 高严重度发现项有修复方案
+- [ ] 修复责任人已指定
+- [ ] 修复截止日期合理
+- [ ] 修复后回归验证计划存在
+
+## 追溯性
+
+- [ ] 关联功能特性存在
+- [ ] 关联决策存在
+- [ ] 审查可追溯到变更原因
+
+## 周期性
+
+- [ ] 审查周期已设定
+- [ ] 上次审查日期已记录
+- [ ] 下次审查日期已计划

package/adapters/codex/templates/extended/ops/security_review/starter.md

@@ -0,0 +1,125 @@
+---
+id: {SEC_ID}
+title: {安全审查标题}
+status: draft
+scope: {审查范围}
+related_features: []
+related_decisions: []
+---
+
+# {SEC_ID}: {安全审查标题}
+
+<!-- 本模板是插件 starter 指导，项目本地模板可完全覆盖 -->
+<!-- 插件模板是入门指导，项目本地模板是权威 -->
+
+## 概述
+
+{描述这次安全审查的背景、审查范围和目标}
+
+## 审查信息
+
+- **审查范围**：{scope}
+- **审查类型**：代码审查 / 架构审查 / 渗透测试 / 合规审查
+- **审查日期**：{YYYY-MM-DD}
+- **审查人员**：{审查人员}
+- **审核截止日期**：{YYYY-MM-DD}
+
+## 威胁模型
+
+### 攻击面分析
+
+| 攻击面 | 入口点 | 数据流 | 信任边界 |
+|--------|--------|--------|---------|
+| {攻击面1} | {入口} | {数据流描述} | {边界} |
+| {攻击面2} | {入口} | {数据流描述} | {边界} |
+
+### 资产分类
+
+| 资产 | 敏感级别 | 存储位置 | 访问控制 |
+|------|---------|---------|---------|
+| {资产1} | 高/中/低 | {位置} | {控制方式} |
+| {资产2} | 高/中/低 | {位置} | {控制方式} |
+
+## 发现项
+
+### 高严重度
+
+| ID | 发现 | 影响 | 修复状态 |
+|----|------|------|---------|
+| {H-001} | {发现描述} | {影响描述} | 待修复 / 已修复 / 已接受 |
+
+### 中严重度
+
+| ID | 发现 | 影响 | 修复状态 |
+|----|------|------|---------|
+| {M-001} | {发现描述} | {影响描述} | 待修复 / 已修复 / 已接受 |
+
+### 低严重度
+
+| ID | 发现 | 影响 | 修复状态 |
+|----|------|------|---------|
+| {L-001} | {发现描述} | {影响描述} | 待修复 / 已修复 / 已接受 |
+
+## 安全控制清单
+
+### 认证与授权
+
+- [ ] 认证机制已审查
+- [ ] 授权策略已审查
+- [ ] 会话管理已审查
+- [ ] 密码策略已审查
+
+### 数据保护
+
+- [ ] 传输加密已审查（TLS 配置）
+- [ ] 静态加密已审查
+- [ ] 敏感数据脱敏已审查
+- [ ] 密钥管理已审查
+
+### 输入验证
+
+- [ ] SQL 注入防护已审查
+- [ ] XSS 防护已审查
+- [ ] CSRF 防护已审查
+- [ ] 文件上传安全已审查
+
+### 依赖安全
+
+- [ ] 依赖漏洞扫描已完成
+- [ ] 已知漏洞已修复或接受
+- [ ] 依赖版本锁定已确认
+
+## 合规映射
+
+| 合规要求 | 对应控制 | 状态 |
+|---------|---------|------|
+| {要求1} | {控制措施} | 合规 / 不合规 / 不适用 |
+| {要求2} | {控制措施} | 合规 / 不合规 / 不适用 |
+
+## 修复跟踪
+
+| 发现 ID | 修复方案 | 负责人 | 截止日期 | 状态 |
+|---------|---------|--------|---------|------|
+| {H-001} | {修复方案} | {负责人} | {日期} | 待修复 / 已修复 |
+
+## 结论
+
+### 审查结论
+
+{总结审查结论：通过 / 有条件通过 / 不通过}
+
+### 附带条件
+
+{如有条件通过，列出必须满足的条件}
+
+## 关联制品
+
+- 功能特性：{related_features}
+- 决策：{related_decisions}
+- 设计文档：{related_designs}
+
+## 变更日志
+
+| 日期 | 变更 | 作者 |
+|------|------|------|
+| {YYYY-MM-DD} | 初始版本 | {作者} |

package/agent-methods/catalog.yaml

@@ -0,0 +1,260 @@
+schemaVersion: 1
+catalog:
+  id: artifact-chain-assistant
+  version: "0.8.0"
+entries:
+  - ref: artifact.prd-feature.default
+    provider:
+      scope: plugin
+      plugin: artifact-chain-assistant
+      skill: prd-feature
+    kind: workflow
+    summary: "PRD feature 默认路由入口，按意图分派到 author/review/repair"
+    match:
+      domains: [artifact]
+      artifactTypes: [prd-feature]
+      intents: [route]
+    accepts:
+      - "用户需求描述或 PRD 制品变更请求"
+    produces:
+      - "PRD feature 制品草稿、审阅报告或修复补丁"
+    sideEffects:
+      - write-project-artifacts
+
+  - ref: artifact.prd-feature.author
+    provider:
+      scope: plugin
+      plugin: artifact-chain-assistant
+      skill: prd-feature/author
+    kind: workflow
+    summary: "PRD feature 制作入口，从需求描述生成 PRD feature 草稿"
+    match:
+      domains: [artifact]
+      artifactTypes: [prd-feature]
+      intents: [author]
+    accepts:
+      - "用户需求描述"
+    produces:
+      - "PRD feature 制品草稿"
+    sideEffects:
+      - write-project-artifacts
+
+  - ref: artifact.prd-feature.review
+    provider:
+      scope: plugin
+      plugin: artifact-chain-assistant
+      skill: prd-feature/review
+    kind: workflow
+    summary: "PRD feature 审阅入口，检查制品完整性、追溯性和一致性"
+    match:
+      domains: [artifact]
+      artifactTypes: [prd-feature]
+      intents: [review]
+    accepts:
+      - "PRD feature 制品"
+    produces:
+      - "审阅报告"
+    sideEffects:
+      - write-project-artifacts
+
+  - ref: artifact.prd-feature.repair
+    provider:
+      scope: plugin
+      plugin: artifact-chain-assistant
+      skill: prd-feature/repair
+    kind: workflow
+    summary: "PRD feature 修复入口，根据审阅报告修复制品问题"
+    match:
+      domains: [artifact]
+      artifactTypes: [prd-feature]
+      intents: [repair]
+    accepts:
+      - "审阅报告和待修复的 PRD feature 制品"
+    produces:
+      - "修复后的 PRD feature 制品"
+    sideEffects:
+      - write-project-artifacts
+
+  - ref: artifact.scenario-script.default
+    provider:
+      scope: plugin
+      plugin: artifact-chain-assistant
+      skill: scenario-script
+    kind: workflow
+    summary: "场景剧本默认路由入口，按意图分派到 author/review/repair"
+    match:
+      domains: [artifact]
+      artifactTypes: [scenario-script]
+      intents: [route]
+    accepts:
+      - "需求描述或场景剧本变更请求"
+    produces:
+      - "场景剧本草稿、审阅报告或修复补丁"
+    sideEffects:
+      - write-project-artifacts
+
+  - ref: artifact.scenario-script.author
+    provider:
+      scope: plugin
+      plugin: artifact-chain-assistant
+      skill: scenario-script/author
+    kind: workflow
+    summary: "场景剧作入口，从需求描述生成场景剧本草稿"
+    match:
+      domains: [artifact]
+      artifactTypes: [scenario-script]
+      intents: [author]
+    accepts:
+      - "需求描述"
+    produces:
+      - "场景剧本草稿"
+    sideEffects:
+      - write-project-artifacts
+
+  - ref: artifact.scenario-script.review
+    provider:
+      scope: plugin
+      plugin: artifact-chain-assistant
+      skill: scenario-script/review
+    kind: workflow
+    summary: "场景剧本审阅入口，检查剧本完整性、场景覆盖和追溯关系"
+    match:
+      domains: [artifact]
+      artifactTypes: [scenario-script]
+      intents: [review]
+    accepts:
+      - "场景剧本"
+    produces:
+      - "审阅报告"
+    sideEffects:
+      - write-project-artifacts
+
+  - ref: artifact.scenario-script.repair
+    provider:
+      scope: plugin
+      plugin: artifact-chain-assistant
+      skill: scenario-script/repair
+    kind: workflow
+    summary: "场景剧本修复入口，根据审阅报告修复剧本问题"
+    match:
+      domains: [artifact]
+      artifactTypes: [scenario-script]
+      intents: [repair]
+    accepts:
+      - "审阅报告和待修复的场景剧本"
+    produces:
+      - "修复后的场景剧本"
+    sideEffects:
+      - write-project-artifacts
+
+  # ── 通用跨类型入口 ──────────────────────────────────────────────────────
+
+  - ref: artifact.review
+    provider:
+      scope: plugin
+      plugin: artifact-chain-assistant
+      skill: artifact-review
+    kind: workflow
+    summary: "通用制品审阅路由，按 domain 分派到类型专用 worker"
+    match:
+      domains: [artifact]
+      artifactTypes: [design-spec, link, e2e, domain, contract, blueprint, verification]
+      intents: [review]
+    accepts:
+      - "制品文件或目录路径"
+    produces:
+      - "Review Result Protocol v1.0 审阅结果"
+    sideEffects:
+      - write-project-artifacts
+
+  - ref: artifact.repair
+    provider:
+      scope: plugin
+      plugin: artifact-chain-assistant
+      skill: artifact-repair
+    kind: workflow
+    summary: "通用制品修复入口，根据审阅结果修复 open findings"
+    match:
+      domains: [artifact]
+      artifactTypes: [design-spec, link, e2e, domain, contract, blueprint, verification]
+      intents: [repair]
+    accepts:
+      - "审阅结果 JSON 和待修复制品"
+    produces:
+      - "Review Result Protocol v1.0 修复结果"
+    sideEffects:
+      - write-project-artifacts
+
+  - ref: artifact.batch
+    provider:
+      scope: plugin
+      plugin: artifact-chain-assistant
+      skill: artifact-batch
+    kind: workflow
+    summary: "通用批处理编排，确定性切分与合并 Review Result"
+    match:
+      domains: [artifact]
+      artifactTypes: [design-spec, link, e2e, domain, contract, blueprint, verification]
+      intents: [batch]
+    accepts:
+      - "制品目录和批处理参数"
+    produces:
+      - "Review Result Protocol v1.0 批次汇总"
+    sideEffects:
+      - write-project-artifacts
+
+  - ref: artifact.audit
+    provider:
+      scope: plugin
+      plugin: artifact-chain-assistant
+      skill: artifact-audit
+    kind: workflow
+    summary: "制品链健康检查与能力审计"
+    match:
+      domains: [artifact]
+      artifactTypes: [design-spec, link, e2e, domain, contract, blueprint, verification]
+      intents: [audit, health]
+    accepts:
+      - "项目根路径"
+    produces:
+      - "健康检查报告或能力审计结果"
+    sideEffects:
+      - write-project-artifacts
+
+  - ref: artifact.generate
+    provider:
+      scope: plugin
+      plugin: artifact-chain-assistant
+      skill: artifact-generate
+    kind: workflow
+    summary: "通用制品生成入口，从模板和 profile 配置生成非 PRD/scenario 类型制品"
+    match:
+      domains: [artifact]
+      artifactTypes: [design-spec, link, e2e, domain, contract, blueprint, verification]
+      intents: [generate]
+    accepts:
+      - "制品类型、目标路径和模板配置"
+    produces:
+      - "从模板生成的制品文件"
+    sideEffects:
+      - write-project-artifacts
+
+  # ── 插件级发现入口 ──────────────────────────────────────────────────────
+
+  - ref: artifact-chain-help
+    provider:
+      scope: plugin
+      plugin: artifact-chain-assistant
+      skill: artifact-chain-help
+    kind: operation
+    summary: "展示标准 Family API、bundled legacy 方法和安装后采用步骤"
+    match:
+      domains: [artifact]
+      artifactTypes: [design-spec, link, e2e, domain, contract, blueprint, verification, prd-feature, scenario-script]
+      intents: [help]
+    accepts:
+      - "帮助请求或能力查询"
+    produces:
+      - "标准能力概览和采用指导"
+    sideEffects:
+      - read-only

package/compatibility.json

@@ -0,0 +1,9 @@
+{
+  "schemaVersion": "1.0",
+  "pluginVersion": "0.8.0",
+  "artifactGraph": {
+    "verifiedVersion": "0.8.0",
+    "installSpec": "artifact-graph@0.8.0",
+    "githubFallbackSpec": "github:ifoohoo/artifact-graph#artifact-graph-v0.8.0"
+  }
+}

package/package.json

@@ -0,0 +1,85 @@
+{
+  "name": "artifact-chain-assistant",
+  "version": "0.8.0",
+  "description": "Codex and Claude Code assistant plugin for artifact-chain projects",
+  "license": "Apache-2.0",
+  "type": "module",
+  "packageManager": "pnpm@10.17.1",
+  "keywords": [
+    "codex-plugin",
+    "claude-code",
+    "artifact-chain",
+    "traceability",
+    "agent-tools"
+  ],
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "scripts": {
+    "build": "node scripts/generate-schema-validators.mjs && node scripts/sync-skills.mjs && node scripts/build-adapters.mjs && node scripts/build-runtime-bundles.mjs",
+    "test": "pnpm test:node && pnpm check:canonical-json && pnpm check:schema-validators && pnpm sync:skills:check && pnpm build:adapters:check && pnpm build:runtime:check && pnpm check:templates && pnpm check:method-registry && pnpm check:compatibility && pnpm check:family-api",
+    "test:node": "node --test test/*.test.mjs",
+    "test:ci": "pnpm test",
+    "check:templates": "node scripts/check-templates.mjs",
+    "check:method-registry": "node scripts/check-method-registry.mjs",
+    "check:compatibility": "node scripts/check-compatibility.mjs",
+    "check:family-api": "node scripts/check-family-api.mjs",
+    "check:schema-validators": "node scripts/generate-schema-validators.mjs --check",
+    "check:canonical-json": "node scripts/generate-canonical-json-protocol.mjs --check",
+    "typecheck": "node --check runtime/claude/version-lock-stop.mjs && node --check scripts/build-adapters.mjs && node --check scripts/build-runtime-bundles.mjs && node --check scripts/generate-schema-validators.mjs && node --check scripts/generate-canonical-json-protocol.mjs && node --check scripts/check-templates.mjs && node --check scripts/doctor.mjs && node --check scripts/install-git-hooks.mjs && node --check scripts/sync-skills.mjs && node --check scripts/check-method-registry.mjs && node --check scripts/check-compatibility.mjs && node --check scripts/lib/compatibility-policy.mjs && node --check scripts/lib/artifact-graph-runtime.mjs && node --check scripts/lib/inline-yaml-parser.mjs && node --check scripts/lib/workflow-profile.mjs && node --check scripts/lib/generated/canonical-json-v1.generated.mjs && node --check scripts/lib/generated/family-api-validator.generated.mjs && node --check scripts/lib/generated/project-facts-validator.generated.mjs && node --check scripts/batch-split.mjs && node --check scripts/batch-merge.mjs && node --check scripts/check-workflow-profile.mjs && node --check scripts/run-artifact-workflow.mjs && node --check scripts/lib/family-api-validator.mjs && node --check scripts/lib/method-query.mjs && node --check scripts/check-family-api.mjs && node --check scripts/family-compile.mjs && node --check scripts/family-help-render.mjs && node --check scripts/method-query.mjs",
+    "sync:skills": "node scripts/sync-skills.mjs",
+    "sync:skills:check": "node scripts/sync-skills.mjs --check",
+    "build:adapters": "node scripts/build-adapters.mjs",
+    "build:adapters:check": "node scripts/build-adapters.mjs --check",
+    "build:runtime": "node scripts/build-runtime-bundles.mjs",
+    "build:runtime:check": "node scripts/build-runtime-bundles.mjs --check",
+    "doctor": "node scripts/doctor.mjs",
+    "install-git-hooks": "node scripts/install-git-hooks.mjs"
+  },
+  "files": [
+    "compatibility.json",
+    "README.md",
+    "README.zh-CN.md",
+    "CHANGELOG.md",
+    "LICENSE",
+    "NOTICE",
+    "INSTALL.md",
+    "CONTRIBUTING.md",
+    "CODE_OF_CONDUCT.md",
+    "SECURITY.md",
+    "EXTENDED-ARTIFACT-CATALOG.md",
+    "EXTENDED-ARTIFACT-CATALOG.zh-CN.md",
+    ".github",
+    ".agents",
+    ".claude-plugin",
+    ".codex-plugin",
+    "adapters",
+    "skills-src",
+    "templates",
+    "scripts",
+    "runtime",
+    "agent-methods",
+    "schemas",
+    "family-apis",
+    "families-src"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ifoohoo/artifact-chain-assistant.git"
+  },
+  "bugs": {
+    "url": "https://github.com/ifoohoo/artifact-chain-assistant/issues"
+  },
+  "homepage": "https://github.com/ifoohoo/artifact-chain-assistant#readme",
+  "author": "广州市风荷科技有限公司",
+  "contributors": [
+    "mzdbxqh"
+  ],
+  "dependencies": {
+    "agent-method-registry": "0.2.0"
+  },
+  "devDependencies": {
+    "ajv": "^8.20.0",
+    "artifact-graph": "0.8.0"
+  }
+}