duaer-spec 0.27.0 → 0.27.1

package/.claude/rules/agents-workflow.md

@@ -50,6 +50,8 @@ cd .worktree/feat-login
 - Push only when the user explicitly asks (a deploy/hosting ask authorizes
   the `gh` + push needed for that publish — see `docs/agent/deploy-github.md`)
 - Promote **`develop` → `main`** only when the user asks to go online
+- Version: fast iteration bumps the **patch** (`0.27.1`, `0.27.2`, …). Next
+  after `0.27.1` is `0.27.2`. Do not bump the minor on every ship.
 - English docs: no Chinese (CJK); Chinese docs may include English terms
 
 ## GitHub issue / PR intake

package/.claude/rules/duaer-spec.md

@@ -33,6 +33,7 @@ For new behavior, fixes, refactors that change product behavior, or architecture
    as you go so progress is visible. Do not leave only coarse mega-tasks.
 7. Merge to **`develop`** when done (hotfix: **`main`**, then back-merge
    **`develop`**). Promote to **`main`** only if the user asks to go online.
+   Version bump is the patch (`0.27.2` next).
 8. **Handoff (mandatory):** stop processes bound to `.worktree/<id>/`, remove
    the worktree, then restart services from the primary checkout on `develop`
    using `.duaer/handoff.json` / `duaer handoff [--run]`. Never leave the user

package/.cursor/rules/agents-workflow.mdc

@@ -53,6 +53,8 @@ cd .worktree/feat-login
 - Push only when the user explicitly asks (a deploy/hosting ask authorizes
   the `gh` + push needed for that publish — see `docs/agent/deploy-github.md`)
 - Promote **`develop` → `main`** only when the user asks to go online
+- Version: fast iteration bumps the **patch** (`0.27.1`, `0.27.2`, …). Next
+  after `0.27.1` is `0.27.2`. Do not bump the minor on every ship.
 - English docs: no Chinese (CJK); Chinese docs may include English terms
 
 ## GitHub issue / PR intake

package/.cursor/rules/duaer-spec.mdc

@@ -37,6 +37,7 @@ For new behavior, fixes, refactors that change product behavior, or architecture
    as you go so progress is visible. Do not leave only coarse mega-tasks.
 7. Merge to **`develop`** when done (hotfix: **`main`**, then back-merge
    **`develop`**). Promote to **`main`** only if the user asks to go online.
+   Version bump is the patch (`0.27.2` next).
 8. **Handoff (mandatory):** stop processes bound to `.worktree/<id>/`, remove
    the worktree, then restart services from the primary checkout on `develop`
    using `.duaer/handoff.json` / `duaer handoff [--run]`. Never leave the user

package/.duaer/active-job.json

@@ -1,5 +1,5 @@
 {
-  "feature": "269-release-027",
-  "branch": "chore/release-027",
-  "worktree": ".worktree/chore-release-027"
+  "feature": "275-release-0271",
+  "branch": "feat/release-0271",
+  "worktree": ".worktree/feat-release-0271"
 }

package/.duaer/specs/270-patch-version/delivery.json

@@ -0,0 +1,7 @@
+{
+  "status": "accepted",
+  "summary": "Fast iteration ships as patch versions. Next release after 0.27.0 is 0.27.1.",
+  "verification": {
+    "docs": "Policy only; no runtime change. testing.md docs waiver."
+  }
+}

package/.duaer/specs/270-patch-version/spec.md

@@ -0,0 +1,19 @@
+# Feature Specification: Patch versions for fast iteration
+
+## Goal
+
+Ships after 0.27.0 increment the patch number. The next release is 0.27.1.
+
+## In scope
+
+- Release docs and agent rules state the default bump is the last number
+
+## Out of scope
+
+- Cutting 0.27.1 now
+- Changing npm or GitHub release automation
+
+## Acceptance
+
+1. Branching docs say 0.27.0 is followed by 0.27.1, not 0.28.0
+2. Agent rules repeat that patch bump

package/.duaer/specs/270-patch-version/tasks.md

@@ -0,0 +1,4 @@
+# Tasks — 270-patch-version
+
+- [x] Document patch bumps (next release 0.27.1)
+- [x] Repeat the rule in agent workflow files

package/.duaer/specs/271-fde04-compat/delivery.json

@@ -0,0 +1,9 @@
+{
+  "status": "accepted",
+  "summary": "Feature device matrix must name two targets, evidence, and a fallback; kickoff schedules the compat check.",
+  "verification": {
+    "L0": "node --check bin/duaer-live.mjs bin/live-modules.mjs — pass",
+    "L1": "npm test — 239 pass",
+    "L3": "npm run test:live — pass"
+  }
+}

package/.duaer/specs/271-fde04-compat/spec.md

@@ -0,0 +1,25 @@
+# Feature Specification: FDE-04 browser matrix evidence
+
+## Goal
+
+A feature confirm card cannot pass with a vague browser line. The device
+matrix must name real targets, point at evidence, and state a fallback.
+Kickoff schedules that check.
+
+## In scope
+
+- Local validate on deviceMatrix
+- One FDE-04 task per confirmed module
+- Hint, placeholder, and chat/accept prompts
+
+## Out of scope
+
+- Bug desk
+- Running a device lab
+
+## Acceptance
+
+1. "主流浏览器" or a single browser name fails local validate
+2. Two named targets plus screenshot/cloud evidence plus a fallback passes
+3. Kickoff adds an FDE-04 compat evidence task
+4. npm test and npm run test:live pass

package/.duaer/specs/271-fde04-compat/tasks.md

@@ -0,0 +1,5 @@
+# Tasks — 271-fde04-compat
+
+- [x] Validate the browser matrix as evidence
+- [x] Inject an FDE-04 kickoff task
+- [x] Update hints, prompts, docs, and tests

package/.duaer/specs/272-fde03-env-check/delivery.json

@@ -0,0 +1,9 @@
+{
+  "status": "accepted",
+  "summary": "Feature confirm requires a passed DNS/TLS/CORS/auth/third-party checklist, or a no-customer opt-out. Kickoff schedules the probe before implement.",
+  "verification": {
+    "L0": "node --check bin/duaer-live.mjs bin/live-modules.mjs web/live-dev/app.js web/live-dev/env-check.mjs — pass",
+    "L1": "npm test — 242 pass",
+    "L3": "npm run test:live — pass"
+  }
+}

package/.duaer/specs/272-fde03-env-check/spec.md

@@ -0,0 +1,34 @@
+# Feature Specification: FDE-03 environment checklist
+
+## Goal
+
+A feature confirm card cannot pass until the environment checklist records
+DNS, TLS, CORS, auth, and third-party reachability as passed. A failed probe
+blocks confirm. Kickoff schedules that probe before implementation.
+
+## In scope
+
+- Local validate on envChecklist
+- One FDE-03 task per confirmed module that declares a customer environment,
+  placed before that module's implement task
+- Hint, placeholder, and chat/accept prompts
+- Explicit opt-out: no customer environment
+
+## Out of scope
+
+- Bug desk
+- Scanning the customer network from the desk
+
+## Assumptions
+
+- The desk records the checklist; the digital employee runs the probes.
+- 「无客户联调环境」 / "no customer environment" skips the five probes and
+  the kickoff task.
+
+## Acceptance
+
+1. A vague line, a missing probe, or any failed probe fails local validate
+2. All five probes marked passed, or the no-customer opt-out, passes
+3. Kickoff adds an FDE-03 env probe before implement when a customer
+   environment is declared, and skips it on the opt-out
+4. npm test and npm run test:live pass

package/.duaer/specs/272-fde03-env-check/tasks.md

@@ -0,0 +1,5 @@
+# Tasks — 272-fde03-env-check
+
+- [x] Validate the environment checklist (five probes passed, or no-customer opt-out)
+- [x] Inject an FDE-03 kickoff task before implement
+- [x] Update hints, prompts, docs, and tests

package/.duaer/specs/273-fde06-data-precheck/delivery.json

@@ -0,0 +1,9 @@
+{
+  "status": "accepted",
+  "summary": "Feature confirm requires a field mapping, an import failure list, and an export, or a no-import opt-out. Kickoff schedules the precheck before implement.",
+  "verification": {
+    "L0": "node --check bin/duaer-live.mjs bin/live-modules.mjs web/live-dev/app.js web/live-dev/data-precheck.mjs — pass",
+    "L1": "npm test — 246 pass",
+    "L3": "npm run test:live — pass"
+  }
+}

package/.duaer/specs/273-fde06-data-precheck/spec.md

@@ -0,0 +1,37 @@
+# Feature Specification: FDE-06 import precheck
+
+## Goal
+
+A feature confirm card cannot pass until it records a field mapping, an
+import precheck failure list, and that the list can be exported for
+cleanup. Kickoff schedules that precheck before implementation.
+
+## In scope
+
+- Local validate on dataPrecheck
+- One FDE-06 task per confirmed module that declares an import, placed
+  before that module's implement task and after the environment probe
+  when both exist
+- Hint, placeholder, and chat/accept prompts
+- Explicit opt-out: no import for this module
+
+## Out of scope
+
+- Bug desk
+- Scanning a customer database from the desk
+
+## Assumptions
+
+- The desk records the checklist; the digital employee produces the
+  mapping, the failure list, and the export.
+- 「本模块无导入」 / "no import" skips the three requirements and the
+  kickoff task.
+
+## Acceptance
+
+1. A vague line or a line missing mapping, failure list, or export fails
+   local validate
+2. All three present, or the no-import opt-out, passes
+3. Kickoff adds an FDE-06 data precheck before implement when an import
+   is declared, and skips it on the opt-out
+4. npm test and npm run test:live pass

package/.duaer/specs/273-fde06-data-precheck/tasks.md

@@ -0,0 +1,5 @@
+# Tasks — 273-fde06-data-precheck
+
+- [x] Validate the import precheck (mapping, failure list, export, or no-import opt-out)
+- [x] Inject an FDE-06 kickoff task before implement
+- [x] Update hints, prompts, docs, and tests

package/.duaer/specs/274-fde05-external-deps/delivery.json

@@ -0,0 +1,9 @@
+{
+  "status": "accepted",
+  "summary": "Feature confirm requires a blocker, SLA, backup mock, and parallel path, or a no-dependency opt-out. Kickoff schedules the board before implement.",
+  "verification": {
+    "L0": "node --check bin/duaer-live.mjs bin/live-modules.mjs web/live-dev/app.js web/live-dev/external-deps.mjs — pass",
+    "L1": "npm test — 250 pass",
+    "L3": "npm run test:live — pass"
+  }
+}

package/.duaer/specs/274-fde05-external-deps/spec.md

@@ -0,0 +1,37 @@
+# Feature Specification: FDE-05 external dependency board
+
+## Goal
+
+A feature confirm card cannot pass until it records a blocker, an SLA, a
+backup mock, and a parallel path for third-party, ERP, or SSO work.
+Kickoff schedules that board before implementation.
+
+## In scope
+
+- Local validate on externalDeps
+- One FDE-05 task per confirmed module that declares an external
+  dependency, placed before implement and after the env probe and data
+  precheck when those exist
+- Hint, placeholder, and chat/accept prompts
+- Explicit opt-out: no external dependency
+
+## Out of scope
+
+- Bug desk
+- Calling the vendor or the customer ERP from the desk
+
+## Assumptions
+
+- The desk records the board; the digital employee keeps the blocker,
+  SLA, mock, and parallel path current.
+- 「本模块无外部依赖」 / "no external dependency" skips the four items
+  and the kickoff task.
+
+## Acceptance
+
+1. A vague line or a line missing blocker, SLA, mock, or parallel path
+   fails local validate
+2. All four present, or the no-dependency opt-out, passes
+3. Kickoff adds an FDE-05 task before implement when a dependency is
+   declared, and skips it on the opt-out
+4. npm test and npm run test:live pass

package/.duaer/specs/274-fde05-external-deps/tasks.md

@@ -0,0 +1,5 @@
+# Tasks — 274-fde05-external-deps
+
+- [x] Validate the external dependency board (blocker, SLA, mock, parallel path, or opt-out)
+- [x] Inject an FDE-05 kickoff task before implement
+- [x] Update hints, prompts, docs, and tests

package/.duaer/specs/275-release-0271/spec.md

@@ -0,0 +1,13 @@
+# Feature Specification: Release 0.27.1
+
+## Goal
+
+Ship 0.27.1: FDE-03 environment checklist, FDE-04 compat evidence, FDE-05
+external dependency board, FDE-06 import precheck, and the patch-version
+policy. Promote develop to main, publish a GitHub Release, and let npm
+Trusted Publishing run.
+
+## Acceptance
+
+1. `package.json` is `0.27.1`; CHANGELOG has `0.27.1` and an empty Unreleased section.
+2. Tag `v0.27.1` is on `main`; GitHub Release is published.

package/.duaer/specs/275-release-0271/tasks.md

@@ -0,0 +1,4 @@
+# Tasks — 275-release-0271
+
+- [x] Bump 0.27.1 and move changelog notes
+- [ ] Tag v0.27.1 on main and publish the GitHub Release

package/AGENTS.md

@@ -294,7 +294,9 @@ After normal development:
 12. Push only when the user explicitly requested remote publishing for the
     current request
 13. Promote **`develop` → `main`** only when the user explicitly asks to ship /
-    go online (see [branching-and-release](docs/agent/branching-and-release.md))
+    go online (see [branching-and-release](docs/agent/branching-and-release.md)).
+    Fast iteration: bump the **patch** (`0.27.1`, `0.27.2`, …). Do not bump
+    the minor on every ship. The next release after `0.27.1` is `0.27.2`.
 
 **Production hotfix:** base and merge into **`main`**, then merge the fix into
 **`develop`** so integration does not regress. Then clean up the worktree.
@@ -350,7 +352,8 @@ git worktree prune
 13. Stop worktree services; remove worktree; delete short branch; **handoff**
     restart on `develop` (`duaer handoff [--run]` / `.duaer/handoff.json`)
 14. Push only when explicitly requested
-15. Promote **`develop` → `main`** only when the user explicitly asks to go online
+15. Promote **`develop` → `main`** only when the user explicitly asks to go online.
+    Version bump is the patch (`0.27.2` next); see branching-and-release.
 
 Development must not begin before isolation steps 1–3 are complete.
 

package/CHANGELOG.md

@@ -2,6 +2,41 @@
 
 ## Unreleased
 
+## 0.27.1 — 2026-09-21
+
+### Feat: FDE-05 external dependency board before kickoff
+
+- Feature confirm requires a blocker, SLA, backup mock, and parallel path,
+  or an explicit no-dependency opt-out
+- Kickoff adds that board before implement when a third party, ERP, or SSO
+  is declared
+
+### Feat: FDE-06 import precheck before kickoff
+
+- Feature confirm requires a field mapping, an import failure list, and an
+  export for cleanup, or an explicit no-import opt-out
+- Kickoff adds a data-precheck task before implement when an import is
+  declared
+
+### Feat: FDE-03 environment checklist before kickoff
+
+- Feature confirm requires DNS, TLS, CORS, auth, and third-party reachability
+  recorded as passed, or an explicit no-customer opt-out
+- A failed probe blocks confirm
+- Kickoff adds an environment-probe task before implement when a customer
+  environment is declared
+
+### Feat: FDE-04 browser matrix must include evidence
+
+- Device matrix needs two named browsers or domestic clients, screenshot or
+  cloud evidence, and a polyfill or fallback
+- Kickoff adds a compat-evidence task per confirmed module
+
+### Docs: fast iteration uses patch versions
+
+- Default ship bump is the last number (`0.27.1`, `0.27.2`, …)
+- Next release after `0.27.0` is `0.27.1`; do not jump the minor on every ship
+
 ## 0.27.0 — 2026-09-21
 
 ### Feat: FDE-07 UAT pack on confirm