skill-family-engineering-kit 0.1.2 → 0.1.3

package/CONTRIBUTING.md

@@ -1,79 +1,25 @@
-# 贡献指南（Contributing）
+# 贡献指南（skill-family-engineering-kit）
 
-感谢关注 `skill-family-foundation-workspace`。本文件说明本地开发环境、
-验证流程与 PR 规则。行为准则见 [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md)，
-Git 写操作的授权边界见仓库内文档站的生命周期指南（`docs/git-lifecycle.md`）。
+本仓是 `skill-family-engineering-kit` 的公开发布镜像，只承载版本化发布物。开发在私有工作区进行，不在本仓公开。
 
-拓扑说明：本工作区仓永久 private，是唯一开发真源；三个 public 仓
-（`skill-family-contracts`、`skill-family-harness-node`、
-`skill-family-engineering-kit`）是版本化发布镜像，不承载完整开发历史与
-测试。本指南描述的是私有工作区内经授权的开发流程；消费坐标与发布状态
-唯一见 `docs/status/current.md`。
+## 问题报告
 
-## Bug 报告与 Issue
+Bug 报告请在本仓 GitHub Issues 提交：https://github.com/ifoohoo/skill-family-engineering-kit/issues
 
-普通 bug 报告欢迎通过各 public 发布镜像仓的 GitHub Issues 提交（例如
-`https://github.com/ifoohoo/skill-family-engineering-kit/issues`）。提交
-bug 报告时请尽量提供：受影响包与版本、最小复现步骤、预期与实际行为。
+提交时请尽量提供：受影响版本、最小复现步骤、预期与实际行为。
 
-**未经事先讨论的 Pull Request 不予接受。** 如果你希望贡献代码，请先
-通过 Issue 讨论变更的动机与范围，获得维护者确认后再提交 PR。这是为了
-避免重复劳动、确保变更与本项目的架构裁决和发布合同一致。
+## 代码贡献
 
-## 本地安装
+未经事先讨论的 Pull Request 不予接受。请先通过 Issue 讨论变更的动机与范围，获得维护者确认后再提交 PR。
 
-必需工具（精确版本见仓库内 `docs/setup.md` 的安装合同）：
+## 行为准则
 
-- Node.js：`>=22.22.2 <23`（版本取自 `.node-version`）
-- pnpm：10.30.0（`packageManager` 精确锁定）
-- Python：3.10 或更高（仅文档站构建需要）
+互动请遵守本仓 CODE_OF_CONDUCT.md。
 
-```bash
-pnpm install
-pnpm synth
-pnpm check
-```
-
-- `pnpm synth` 再生成 projen 受管文件。受管文件只能通过修改
-  `.projenrc.js` 间接变更；手写源码、文档和 fixture 不会被 synth 覆盖。
-- `pnpm check` 是统一根门禁：10 个稳定门禁 ID 按固定顺序串联执行，
-  任一步骤非 0 即整体失败。
-
-## 提交 PR 前必须做到
-
-1. 只修改当前任务授权的文件，不顺手改动无关文件；
-2. 修改 `.projenrc.js` 后运行 `pnpm synth`，并保证连续两次 synth 零漂移；
-3. 本地完整通过根门禁：
-
-   ```bash
-   pnpm check
-   ```
-
-4. 涉及文档时额外运行文档事实与链接检查：
-
-   ```bash
-   node scripts/docs/fact-check.mjs
-   node scripts/docs/link-check.mjs
-   ```
-
-5. 涉及三个叶子包时，确认发布字节合同仍然成立：
-
-   ```bash
-   pnpm run release-artifacts:build -- --output .artifacts/publish-candidates
-   pnpm run release-artifacts:verify -- --root .artifacts/publish-candidates --manifest .artifacts/publish-candidates/release-artifacts.manifest.json
-   ```
-
-## PR 规则
+## 安全报告
 
-- PR 描述须包含：动机、变更面、本地门禁结果（退出码）与剩余风险；
-- 不得为转绿而弱化任何产品门禁、Action pin、权限、泄漏策略或 tarball 合同；
-- 不新增运行时依赖，除非先经评审并显式修订泄漏策略中的公开依赖清单；
-- 不提交生成物与本地状态：`node_modules`、`site/`、`.artifacts/`、缓存、
-  日志、凭据或本机绝对路径一律不进入提交；
-- 受管投影必须与产生它的源变更在同一 PR 内提交，禁止手改受管文件；
-- 动态状态（实时发布状态、远端对象状态）不写入版本化文档，唯一产品状态
-  口径见 `docs/status/current.md`。
+漏洞报告渠道见本仓 SECURITY.md。请走 Private vulnerability reporting，不要以公开 Issue 提交漏洞。
 
-## 安全报告
+## 许可证
 
-漏洞报告渠道与支持版本见 [SECURITY.md](SECURITY.md)。
+贡献内容默认按 Apache-2.0 授权，与本包许可证一致。

package/README.md

@@ -15,7 +15,7 @@
 ## 使用
 
 ```sh
-npm install --save-dev skill-family-engineering-kit
+npm install --save-dev skill-family-engineering-kit@0.1.3
 npm exec -- skill-family-kit --help
 npm exec -- skill-family-kit scaffold --root <empty-dir> --project-id my-project
 npm exec -- skill-family-kit adopt-plan --root <repo>
@@ -26,7 +26,7 @@ npm exec -- skill-family-kit check --root <repo>
 零安装形式（不修改 package.json）：
 
 ```sh
-npm exec --package=skill-family-engineering-kit -- skill-family-kit --help
+npm exec --package=skill-family-engineering-kit@0.1.3 -- skill-family-kit --help
 ```
 
 ## 边界机制
@@ -73,7 +73,7 @@ projection 只写同时满足两个条件的路径：manifest 列出，且目标
 ## 安装
 
 ```sh
-npm install skill-family-engineering-kit
+npm install skill-family-engineering-kit@0.1.3
 ```
 
 ## 故障诊断

package/SECURITY.md

@@ -12,15 +12,10 @@
 ## 报告漏洞
 
 请勿通过公开 issue 直接披露未修复的安全漏洞。private workspace 仓永久
-private，不是公开报告渠道；请通过以下渠道私下报告：
-
-1. **首选**：通过任一 public 发布镜像仓（例如
-   `https://github.com/ifoohoo/skill-family-engineering-kit`）在 GitHub 上使用
-   **Private vulnerability reporting**（仓库 Security 页签的
-   "Report a vulnerability"）；
-2. **备选**：如上述通道不可用，请通过邮件联系仓库维护者
-   （`ifoohoo` GitHub 组织的 `security` 团队，或仓库 `README.md` 中列出的
-   维护者邮箱）。
+private，不是公开报告渠道；请通过任一 public 发布镜像仓（例如
+`https://github.com/ifoohoo/skill-family-engineering-kit`）在 GitHub 上使用
+**Private vulnerability reporting**（仓库 Security 页签的
+"Report a vulnerability"）私下报告。
 
 报告时请尽量提供：
 

package/THIRD_PARTY_NOTICES

@@ -47,15 +47,20 @@ FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
 IN THE SOFTWARE.
 
 
-2. lunr (search library)
--------------------------
+2. lunr (search library core)
+-----------------------------
 
 Version: 2.3.9
 License: MIT
 Copyright: Copyright (C) 2013 by Oliver Nightingale
-Files:
-  - docs/assets/javascripts/lunr/min/lunr.stemmer.support.min.js
-  - docs/assets/javascripts/lunr/min/lunr.multi.min.js
+
+The lunr core is embedded inside the MkDocs Material JavaScript bundle
+(docs/assets/javascripts/bundle.*.min.js, covered by entry 1 above); no
+standalone lunr core files are distributed with this site. The two
+support files under docs/assets/javascripts/lunr/min/ that earlier
+revisions of this notice attributed to lunr (lunr.stemmer.support.min.js
+and lunr.multi.min.js) are distributed by the lunr-languages project and
+are covered by entry 3 below.
 
 MIT License
 
@@ -83,7 +88,12 @@ IN THE SOFTWARE.
 3. lunr-languages (language stemmers and word cutters)
 -------------------------------------------------------
 
+Version: 1.14.0
+Source: MihaiValentin/lunr-languages (tag 1.14.0); the files listed below
+        are byte-identical to that tag. Bundled by mkdocs-material 9.7.7
+        (pinned in scripts/docs/toolchain.json).
 License: MPL-1.1
+License text: LICENSES/MPL-1.1.txt (repository root of the private workspace)
 Copyright: Mihai Valentin (and individual language stemmer authors)
 Files:
   - docs/assets/javascripts/lunr/min/lunr.ar.min.js
@@ -103,12 +113,14 @@ Files:
   - docs/assets/javascripts/lunr/min/lunr.jp.min.js
   - docs/assets/javascripts/lunr/min/lunr.kn.min.js
   - docs/assets/javascripts/lunr/min/lunr.ko.min.js
+  - docs/assets/javascripts/lunr/min/lunr.multi.min.js
   - docs/assets/javascripts/lunr/min/lunr.nl.min.js
   - docs/assets/javascripts/lunr/min/lunr.no.min.js
   - docs/assets/javascripts/lunr/min/lunr.pt.min.js
   - docs/assets/javascripts/lunr/min/lunr.ro.min.js
   - docs/assets/javascripts/lunr/min/lunr.ru.min.js
   - docs/assets/javascripts/lunr/min/lunr.sa.min.js
+  - docs/assets/javascripts/lunr/min/lunr.stemmer.support.min.js
   - docs/assets/javascripts/lunr/min/lunr.sv.min.js
   - docs/assets/javascripts/lunr/min/lunr.ta.min.js
   - docs/assets/javascripts/lunr/min/lunr.te.min.js
@@ -120,10 +132,11 @@ Files:
   - docs/assets/javascripts/lunr/wordcut.js
 
 These files are licensed under the Mozilla Public License Version 1.1
-(MPL-1.1). The full text of MPL-1.1 is available from the Mozilla project
-at mozilla.org (path: /en-US/MPL/1.1/).
+(MPL-1.1). The full text of MPL-1.1 is shipped with the private workspace
+repository at LICENSES/MPL-1.1.txt and is also available from the Mozilla
+project at mozilla.org (path: /en-US/MPL/1.1/).
 
 MPL-1.1 requires that recipients of a larger work containing MPL-covered
 files be informed of the location of the MPL source. The source for these
-files is the lunr-languages project on GitHub (user: MihaiValentin,
-repo: lunr-languages).
+files is the lunr-languages project, version 1.14.0 (GitHub user:
+MihaiValentin, repo: lunr-languages, tag 1.14.0).

package/docs/404.html

@@ -380,6 +380,33 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="/skill-family-engineering-kit/public/status/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    公开状态
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+    
+      
+      
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="/skill-family-engineering-kit/migration/" class="md-nav__link">
         

package/docs/architecture/index.html

@@ -16,7 +16,7 @@
         <link rel="prev" href="../help/">
       
       
-        <link rel="next" href="../migration/">
+        <link rel="next" href="../public/status/">
       
       
         
@@ -504,6 +504,33 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../public/status/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    公开状态
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+    
+      
+      
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../migration/" class="md-nav__link">
         

package/docs/git-lifecycle/index.html

@@ -526,6 +526,33 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../public/status/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    公开状态
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+    
+      
+      
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../migration/" class="md-nav__link">
         

package/docs/help/index.html

@@ -493,6 +493,33 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../public/status/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    公开状态
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+    
+      
+      
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../migration/" class="md-nav__link">
         

package/docs/index.html

@@ -480,6 +480,33 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="public/status/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    公开状态
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+    
+      
+      
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="migration/" class="md-nav__link">
         

package/docs/integration/audit/failure-evidence/index.html

@@ -389,6 +389,33 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../../../public/status/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    公开状态
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+    
+      
+      
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../../migration/" class="md-nav__link">
         

package/docs/integration/audit/independence/index.html

@@ -391,6 +391,33 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../../../public/status/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    公开状态
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+    
+      
+      
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../../migration/" class="md-nav__link">
         

package/docs/integration/audit/index.html

@@ -391,6 +391,33 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../../public/status/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    公开状态
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+    
+      
+      
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../migration/" class="md-nav__link">
         

package/docs/integration/audit/mutation-taxonomy/index.html

@@ -391,6 +391,33 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../../../public/status/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    公开状态
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+    
+      
+      
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../../migration/" class="md-nav__link">
         

package/docs/integration/audit/version-compatibility/index.html

@@ -391,6 +391,33 @@
   
   
   
+    <li class="md-nav__item">
+      <a href="../../../public/status/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    公开状态
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+    
+      
+      
+  
+  
+  
+  
     <li class="md-nav__item">
       <a href="../../../migration/" class="md-nav__link">
         

package/docs/migration/index.html

@@ -13,7 +13,7 @@
         <link rel="canonical" href="https://ifoohoo.github.io/skill-family-engineering-kit/migration/">
       
       
-        <link rel="prev" href="../architecture/">
+        <link rel="prev" href="../public/status/">
       
       
         <link rel="next" href="../integration/audit/">
@@ -389,6 +389,33 @@
       
   
   
+  
+  
+    <li class="md-nav__item">
+      <a href="../public/status/" class="md-nav__link">
+        
+  
+  
+  <span class="md-ellipsis">
+    
+  
+    公开状态
+  
+
+    
+  </span>
+  
+  
+
+      </a>
+    </li>
+  
+
+    
+      
+      
+  
+  
     
   
   
@@ -976,9 +1003,9 @@
   ],
   &quot;targetProfile&quot;: &quot;generic&quot;,
   &quot;foundationPackages&quot;: [
-    { &quot;name&quot;: &quot;skill-family-contracts&quot;, &quot;version&quot;: &quot;0.1.1&quot;, &quot;digest&quot;: &quot;sha256:&lt;64 位十六进制&gt;&quot; },
-    { &quot;name&quot;: &quot;skill-family-harness-node&quot;, &quot;version&quot;: &quot;0.1.1&quot;, &quot;digest&quot;: &quot;sha256:&lt;64 位十六进制&gt;&quot; },
-    { &quot;name&quot;: &quot;skill-family-engineering-kit&quot;, &quot;version&quot;: &quot;0.1.1&quot;, &quot;digest&quot;: &quot;sha256:&lt;64 位十六进制&gt;&quot; }
+    { &quot;name&quot;: &quot;skill-family-contracts&quot;, &quot;version&quot;: &quot;0.1.2&quot;, &quot;digest&quot;: &quot;sha256:&lt;64 位十六进制&gt;&quot; },
+    { &quot;name&quot;: &quot;skill-family-harness-node&quot;, &quot;version&quot;: &quot;0.1.2&quot;, &quot;digest&quot;: &quot;sha256:&lt;64 位十六进制&gt;&quot; },
+    { &quot;name&quot;: &quot;skill-family-engineering-kit&quot;, &quot;version&quot;: &quot;0.1.2&quot;, &quot;digest&quot;: &quot;sha256:&lt;64 位十六进制&gt;&quot; }
   ],
   &quot;verification&quot;: {
     &quot;unit&quot;: &quot;docs/evidence/unit.json&quot;,