tech-lead-skill 5.5.0 → 5.5.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -56,7 +56,7 @@ Ships on the DSH plugin market (npm) as ONE self-contained package, **`dsh-themi
56
56
  dsh plugin --profile headless add dsh-themis
57
57
  ```
58
58
 
59
- 21 read-only lifecycle tools in a single artifact (the original nine audits plus context validation, evidence graph/freshness analysis, progress decisions, critical-path/impact analysis, resume reconciliation, gate planning/aggregation/reopen checks, and mutation preview). Tools compute over caller-supplied JSON only — no filesystem writes, no subprocesses, no network access. The earlier split packages (`dsh-tech-lead-{core,plugin,bundle}`) are deprecated in favor of this one. Source checkouts remain supported: build via `node scripts/build-market-package.mjs` then `dsh plugin add packages/dsh-themis`. The root npm package distributes the skill and installer only.
59
+ 22 registered entry points in a single artifact: 21 read-only governance tools plus a capability-discovery tool (`tech_lead_capabilities`) that lists only what this bundle actually registers (the original nine audits plus context validation, evidence graph/freshness analysis, progress decisions, critical-path/impact analysis, resume reconciliation, gate planning/aggregation/reopen checks, and mutation preview). Tools compute over caller-supplied JSON only — no filesystem writes, no subprocesses, no network access. The earlier split packages (`dsh-tech-lead-{core,plugin,bundle}`) are deprecated in favor of this one. Source checkouts remain supported: build via `node scripts/build-market-package.mjs` then `dsh plugin add packages/dsh-themis`. The root npm package distributes the skill and installer only.
60
60
 
61
61
  ```bash
62
62
  dsh plugin --profile headless add /path/to/tech-lead-skill/packages/dsh-themis
@@ -148,6 +148,6 @@ The executable skill body (`SKILL.md`) is authored in Simplified Chinese; coding
148
148
 
149
149
  ## Version
150
150
 
151
- Current version: `v5.5.0`.
151
+ Current version: `v5.5.1`.
152
152
 
153
153
  See [`docs/TECHNICAL_GUIDE.md`](docs/TECHNICAL_GUIDE.md) for the full operating model and [`docs/AUDIT_REPORT.md`](docs/AUDIT_REPORT.md) for the publication audit.
package/README.zh-CN.md CHANGED
@@ -56,7 +56,7 @@ npx github:240xu/tech-lead-skill
56
56
  dsh plugin --profile headless add dsh-themis
57
57
  ```
58
58
 
59
- 单包内含全部 21 个只读生命周期工具:原九项审计+上下文校验、证据图/新鲜度分析、推进决策、关键路径/影响分析、续跑对账、Gate 计划/聚合/重开、变更预览。仅对调用方传入的 JSON 做计算——无文件写入、无子进程、无网络访问。旧拆分包(`dsh-tech-lead-{core,plugin,bundle}`)已弃用并指向本包。源码安装:`node scripts/build-market-package.mjs` 装配后 `dsh plugin add packages/dsh-themis`。根 npm 包只发布技能与安装器。
59
+ 单包注册 22 个入口:21 个只读治理工具(原九项审计+上下文校验、证据图/新鲜度分析、推进决策、关键路径/影响分析、续跑对账、Gate 计划/聚合/重开、变更预览)+能力发现工具 `tech_lead_capabilities`(只列出本包实际注册的工具)。仅对调用方传入的 JSON 做计算——无文件写入、无子进程、无网络访问。旧拆分包(`dsh-tech-lead-{core,plugin,bundle}`)已弃用并指向本包。源码安装:`node scripts/build-market-package.mjs` 装配后 `dsh plugin add packages/dsh-themis`。根 npm 包只发布技能与安装器。
60
60
 
61
61
  ```bash
62
62
  dsh plugin --profile headless add /path/to/tech-lead-skill/packages/dsh-themis
@@ -148,6 +148,6 @@ dsh --profile headless --dump-config # 确认 tech-lead-tools 行已注入
148
148
 
149
149
  ## 版本
150
150
 
151
- 当前版本:`v5.5.0`.
151
+ 当前版本:`v5.5.1`.
152
152
 
153
153
  完整运行模型见[技术指南](./docs/TECHNICAL_GUIDE.zh-CN.md),发布审计见 [docs/AUDIT_REPORT.md](docs/AUDIT_REPORT.md)。
@@ -35,7 +35,7 @@ The source set was scanned for local absolute paths, passwords, API-key prefixes
35
35
  ### Structural scan
36
36
 
37
37
  - YAML frontmatter has `name: tech-lead` and a trigger description.
38
- - The skill version is `v5.5.0`.
38
+ - The skill version is `v5.5.1`.
39
39
  - The eight templates referenced by the skill exist.
40
40
  - The installer validates options, requires a marker before removing any target, and records the managed package/version after installation.
41
41
  - The release-check template covers allowlist inventory, sensitive-content scanning, reference checks, scope checks, publication results, and remote verification.
@@ -48,7 +48,7 @@ The skill defaults user data to read-only, requires a recovery path before write
48
48
 
49
49
  ## Known Limitations
50
50
 
51
- - Core judgment stays prose-first; the source-checkout-only DSH workspace provides 21 machine-checkable read-only tools for context, evidence, progress, gates, release/install audits, recovery, and mutation preview. The root npm tarball intentionally excludes the private workspace packages. Since R6, legacy tools keep bare shapes except `tech_lead_gate_precheck` (envelope projection preserving `data.pass`/`data.violations`); strengthened tools return ResultEnvelope v1 where every governance-negative state is a valid `ok:true` analysis with closure guidance. Legacy audit arrays over the 500-finding window fail closed with `SCAN_INCOMPLETE` instead of being silently sliced (spec: docs/superpowers/specs/2026-08-26-dsh-themis-guidance-architecture.md).
51
+ - Core judgment stays prose-first; the source-checkout-only DSH workspace registers 22 machine-checkable entry points (21 governance tools + `tech_lead_capabilities` discovery) for context, evidence, progress, gates, release/install audits, recovery, and mutation preview. The root npm tarball intentionally excludes the private workspace packages. Since R6, legacy tools keep bare shapes except `tech_lead_gate_precheck` (envelope projection preserving `data.pass`/`data.violations`); strengthened tools return ResultEnvelope v1 where every governance-negative state is a valid `ok:true` analysis with closure guidance. Legacy audit arrays over the 500-finding window fail closed with `SCAN_INCOMPLETE` instead of being silently sliced (spec: docs/superpowers/specs/2026-08-26-dsh-themis-guidance-architecture.md).
52
52
  - Freshness, reconciliation, and rollback verification depend on the executing environment.
53
53
  - No claim is made that the skill has completed a multi-project effectiveness trial; that is the next validation phase.
54
54
  - The audit validates publication content, not the security of the hosting platform or every consumer's local OpenCode installation.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "tech-lead-skill",
3
- "version": "5.5.0",
3
+ "version": "5.5.1",
4
4
  "description": "Evidence-driven planning and safe change-control skill for OpenCode-compatible agents",
5
5
  "license": "MIT",
6
6
  "repository": {
package/skill/SKILL.md CHANGED
@@ -3,7 +3,7 @@ name: tech-lead
3
3
  description: 用于软件、基础设施、研究和运维中的多步、跨边界或有状态工程交付:项目规划、架构选择、跨模块实现、部署、迁移、发布、恢复、重构、长期运行与跨会话续跑。涉及不可逆/生产变更、回滚验证、真实环境对账、发布安全或项目级交付治理时优先加载,即使用户没有说“项目”或“Tech Lead”。不要仅因一次性小修复、单文件编辑、普通解释、单次测试或只读代码审查而自动加载,除非用户明确要求项目级计划或本规范。
4
4
  ---
5
5
 
6
- # Tech Lead · 自主演进规划与交付规范 v5.5.0
6
+ # Tech Lead · 自主演进规划与交付规范 v5.5.1
7
7
 
8
8
  > 双层架构声明:本文件是**判断层**(自由裁量域)。其中可机械判定的不变量(Gate 前置校验、
9
9
  > 证据锚点存在性、分级判定器、状态机转换有效性)为未来 **MCP 工具化候选**——