artifact-graph 0.8.0 → 0.8.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/CHANGELOG.md +15 -0
  2. package/CONTRIBUTING.md +6 -1
  3. package/README.md +20 -9
  4. package/README.zh-CN.md +7 -0
  5. package/package.json +1 -1
package/CHANGELOG.md CHANGED
@@ -1,5 +1,20 @@
1
1
  # Changelog
2
2
 
3
+ ## 0.8.2
4
+
5
+ ### Changed
6
+
7
+ - **Version bump for dual-repo synchronization with `artifact-chain-assistant@0.8.2`**. No runtime
8
+ code changes in this package; published solely to keep the dual-release version pair in lockstep.
9
+
10
+ ## 0.8.1
11
+
12
+ ### Changed
13
+
14
+ - **Version bump for dual-repo synchronization with `artifact-chain-assistant@0.8.1`**. Includes README
15
+ documentation polish, three new entry skills (`help`, `setup`, `quickstart`), external marketplace
16
+ (`ifoohoo/artifact-skill-set`) installation support, and release gate fixes.
17
+
3
18
  ## 0.8.0
4
19
 
5
20
  ### Added
package/CONTRIBUTING.md CHANGED
@@ -2,6 +2,11 @@
2
2
 
3
3
  Thanks for your interest in contributing.
4
4
 
5
+ > **This repository is a release snapshot.** Documentation (README, CHANGELOG, INSTALL,
6
+ > NOTICE) and shared files are rendered from a private workspace. Direct pull requests
7
+ > against these files will be overwritten by the next render — please open an issue
8
+ > instead, and the maintainers will make the change at the source.
9
+
5
10
  ## Development
6
11
 
7
12
  Use Node.js `>=22.0.0`.
@@ -15,7 +20,7 @@ pnpm test
15
20
  ## Pull Requests
16
21
 
17
22
  - Keep changes focused.
18
- - Update README, CHANGELOG, and tests when behavior changes.
23
+ - Documentation changes should be proposed as issues (see above); code changes should update tests when behavior changes.
19
24
  - Run the package validation commands before opening a pull request.
20
25
  - Do not include private parent-repository artifacts or local machine paths.
21
26
 
package/README.md CHANGED
@@ -75,15 +75,26 @@ npx artifact-graph version-lock audit --root . --strict-missing-lock
75
75
 
76
76
  ## Review Result Protocol
77
77
 
78
- The package publishes `schemas/review-result.schema.json` and a matching TypeScript types + validateReviewResult validator API.
79
- The protocol is project-neutral and supports review, repair, batch evidence, findings, metrics, and
80
- fail-closed decisions. Unknown top-level fields are rejected; `attempt` is limited to 1–3;
81
- successful acceptance requires `producer`; and `PASS`/`PASS_WITH_RESIDUAL_MINOR` cannot contain an
82
- open `block` finding. Independent repair re-review can record `acceptance.reviewer` and
83
- `acceptance.source_result`; the validator rejects self-acceptance by the repair producer. Invalid
84
- fields and semantic violations are reported with stable JSON paths. JSON Schema cannot compare
85
- cross-object field values, so callers must also run the semantic validator; stable identity is
86
- `executor + name`, while `skill` is only metadata and cannot establish independence.
78
+ The package publishes `schemas/review-result.schema.json`, plus matching TypeScript types and a
79
+ `validateReviewResult` validator API. The protocol is project-neutral: it covers review, repair,
80
+ batch evidence, findings, metrics, and fail-closed decisions.
81
+
82
+ Unknown top-level fields are rejected; `attempt` is limited to 1–3; successful acceptance requires
83
+ a `producer`; and `PASS`/`PASS_WITH_RESIDUAL_MINOR` cannot contain an open `block` finding. An
84
+ independent repair re-review may record `acceptance.reviewer` and `acceptance.source_result`; the
85
+ validator rejects self-acceptance by the repair producer. Invalid fields and semantic violations
86
+ are reported with stable JSON paths.
87
+
88
+ Because JSON Schema cannot compare values across objects, callers must also run the semantic
89
+ validator. Stable identity is `executor + name`; `skill` is only metadata and cannot establish
90
+ independence.
91
+
92
+ ## Documentation
93
+
94
+ - [INSTALL.md](INSTALL.md) — detailed installation and pnpm 10+ setup guide
95
+ - [CHANGELOG.md](CHANGELOG.md) — release history
96
+ - [CONTRIBUTING.md](CONTRIBUTING.md) — contribution guidelines
97
+ - [SECURITY.md](SECURITY.md) — security policy
87
98
 
88
99
  ## Related Project
89
100
 
package/README.zh-CN.md CHANGED
@@ -80,6 +80,13 @@ fail-closed decision；非法字段和语义违规都会以稳定的 JSON path
80
80
  JSON Schema 无法比较跨对象的字段值，因此调用方还必须运行语义 validator；稳定身份由
81
81
  `executor + name` 构成，`skill` 只是附加元数据，不能用来证明独立性。
82
82
 
83
+ ## 文档导航
84
+
85
+ - [INSTALL.md](INSTALL.md) — 详细安装指南与 pnpm 10+ 配置
86
+ - [CHANGELOG.md](CHANGELOG.md) — 版本发布历史
87
+ - [CONTRIBUTING.md](CONTRIBUTING.md) — 贡献指南
88
+ - [SECURITY.md](SECURITY.md) — 安全策略
89
+
83
90
  ## 相关项目
84
91
 
85
92
  如果需要 Codex / Claude Code 技能来引导制品链的接入、初始化和日常维护，请使用
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "artifact-graph",
3
- "version": "0.8.0",
3
+ "version": "0.8.2",
4
4
  "description": "Git-native Markdown artifact graph scanner and validator",
5
5
  "license": "Apache-2.0",
6
6
  "type": "module",