skill-family-engineering-kit 0.8.3 → 0.8.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -8,8 +8,8 @@
8
8
  "url": "https://github.com/ifoohoo/skill-family-engineering-kit/issues"
9
9
  },
10
10
  "dependencies": {
11
- "skill-family-contracts": "0.8.3",
12
- "skill-family-harness-node": "0.8.3"
11
+ "skill-family-contracts": "0.8.4",
12
+ "skill-family-harness-node": "0.8.4"
13
13
  },
14
14
  "description": "Build-time scaffold, adoption planning, projection, and checks.",
15
15
  "engines": {
@@ -48,7 +48,7 @@
48
48
  "url": "https://github.com/ifoohoo/skill-family-engineering-kit.git"
49
49
  },
50
50
  "type": "module",
51
- "version": "0.8.3",
51
+ "version": "0.8.4",
52
52
  "scripts": {
53
53
  "check": "node --test",
54
54
  "test": "node --test"
@@ -4,7 +4,7 @@
4
4
  "spiVersion": 3,
5
5
  "status": "stable",
6
6
  "description": "Stable extension SPI for Skill Family profiles and project adoption declarations. A profile may only DECLARE its finite differences from the common core; a project profile declares its adopting workspace. Enforcement is mechanical with stable result codes.",
7
- "baseContracts": "1.7.0",
7
+ "baseContracts": "1.8.0",
8
8
  "descriptor": {
9
9
  "schemaId": "https://contracts.skill-family.example/v1/profile-descriptor.json",
10
10
  "object": "profile-descriptor",
@@ -0,0 +1,19 @@
1
+ version: 0.8.4
2
+ date: 2026-08-24
3
+ locales:
4
+ en:
5
+ summary: Lockstep Foundation 0.8.4 update documents validated external source authority without changing Kit commands or Profile SPI.
6
+ changes:
7
+ changed:
8
+ - Moves the package version to 0.8.4 together with Contracts and Harness.
9
+ - Documents that consumers validate a source-authority receipt through Contracts before passing the returned coordinates through the existing sourceRepository and sourceBaseCommit fields.
10
+ - Keeps the four stable top-level Kit commands, builder, Profile SPI, and public exports unchanged.
11
+ upgradeNotes: Pin all three Foundation packages to exactly 0.8.4. A provider Profile descriptor upgrading from 0.8.3 and Contracts 1.7.0 must mechanically update its base.contractsVersion field to 1.8.0. Existing functions and Schema shapes, Profile SPI v3, and the four Kit commands require no migration; source-authority consumers only add the Contracts validation step before invoking the existing builder surface.
12
+ zh-CN:
13
+ summary: 随 Foundation 0.8.4 锁步升版,补充外置 source authority 校验用法;Kit 命令与 Profile SPI 不变。
14
+ changes:
15
+ changed:
16
+ - 包版本与 Contracts、Harness 一同升至 0.8.4。
17
+ - 说明消费者先经 Contracts 校验 source-authority receipt,再把返回坐标传入既有 sourceRepository 与 sourceBaseCommit 字段。
18
+ - 四个稳定顶层命令、builder、Profile SPI 与公共导出保持不变。
19
+ upgradeNotes: 消费者必须把三个 Foundation 包精确锁定到 0.8.4。provider Profile descriptor 从 0.8.3 与 Contracts 1.7.0 升级时,必须把自身的 base.contractsVersion 字段机械更新为 1.8.0。既有函数与 Schema 形状、Profile SPI v3、Kit 四命令均不需要迁移;需要 source authority 的消费者只增加调用 builder 前的 Contracts 校验步骤。