universal-dev-standards 6.14.0-beta.3 → 6.14.0-beta.4

package/src/installers/standards-installer.js

@@ -7,7 +7,7 @@ import {
   getOptionSource,
   findOption
 } from '../utils/registry.js';
-import { copyStandard } from '../utils/copier.js';
+import { copyStandard, copyExtension } from '../utils/copier.js';
 import { t } from '../i18n/messages.js';
 import { computeFileHash } from '../utils/hasher.js';
 import { MANIFEST_OPTION_BINDINGS } from '../core/constants.js';
@@ -115,36 +115,29 @@ export async function installStandards(config, projectPath) {
   if (config.languages.length > 0 || config.frameworks.length > 0 || localeExtension) {
     const extSpinner = createSpinner(msg.copyingExtensions).start();
 
-    for (const lang of config.languages) {
-      if (EXTENSION_MAPPINGS[lang]) {
-        const result = await copyStandard(EXTENSION_MAPPINGS[lang], '.standards', projectPath);
-        if (result.success) {
-          results.extensions.push(EXTENSION_MAPPINGS[lang]);
-        } else {
-          results.errors.push(`${EXTENSION_MAPPINGS[lang]}: ${result.error}`);
-        }
+    // One helper, one copy call. Extension files come from the installed package only:
+    // a declared extension that is missing from it is an error naming that file, never a
+    // download and never a silent skip (XSPEC-452 R2).
+    const installExtension = async (sourcePath) => {
+      const result = await copyExtension(sourcePath, '.standards', projectPath);
+      if (result.success) {
+        results.extensions.push(sourcePath);
+      } else {
+        results.errors.push(`${sourcePath}: ${result.error}`);
       }
+    };
+
+    for (const lang of config.languages) {
+      if (EXTENSION_MAPPINGS[lang]) await installExtension(EXTENSION_MAPPINGS[lang]);
     }
 
     for (const fw of config.frameworks) {
-      if (EXTENSION_MAPPINGS[fw]) {
-        const result = await copyStandard(EXTENSION_MAPPINGS[fw], '.standards', projectPath);
-        if (result.success) {
-          results.extensions.push(EXTENSION_MAPPINGS[fw]);
-        } else {
-          results.errors.push(`${EXTENSION_MAPPINGS[fw]}: ${result.error}`);
-        }
-      }
+      if (EXTENSION_MAPPINGS[fw]) await installExtension(EXTENSION_MAPPINGS[fw]);
     }
 
     // Auto-install locale extension based on display language
     if (localeExtension && EXTENSION_MAPPINGS[localeExtension]) {
-      const result = await copyStandard(EXTENSION_MAPPINGS[localeExtension], '.standards', projectPath);
-      if (result.success) {
-        results.extensions.push(EXTENSION_MAPPINGS[localeExtension]);
-      } else {
-        results.errors.push(`${EXTENSION_MAPPINGS[localeExtension]}: ${result.error}`);
-      }
+      await installExtension(EXTENSION_MAPPINGS[localeExtension]);
     }
 
     extSpinner.succeed(msg.copiedExtensions.replace('{count}', results.extensions.length));

package/src/reconciler/plan-executor.js

@@ -249,18 +249,17 @@ async function executeCreateOrUpdate(projectPath, action, manifest) {
       let targetDir = '.standards';
 
       if (metadata?.extensionSource) {
-        // An entry from `manifest.extensions`. PathResolver cannot resolve these
-        // from an npm install: the published package's `files` list is bin, src,
-        // bundled, standards-registry.json and README.md — no `extensions/`. So
-        // `sourcePath` is null for every adopter who did not install from a
-        // source checkout, and this function answered "No source path available"
-        // for a file it was perfectly able to fetch.
+        // An entry from `manifest.extensions`. It is resolved from the installed
+        // package (`bundled/extensions/`, shipped since XSPEC-452) — never from GitHub.
+        // `copyStandard` hands any `extensions/` path to `copyExtension`, which fails
+        // by name when the package lacks the file, instead of downloading it.
         //
-        // The legacy update path never had the bug because it calls copyStandard
-        // directly (`update.js`, "Update extensions"). The same upgrade therefore
-        // refreshed `.standards/zh-tw.md` under `uds update` and failed under the
-        // reconciler — the two paths disagreed about whether the file was
-        // reachable, and only one of them was right. (XSPEC-343)
+        // History: before XSPEC-452 the published package had no `extensions/`, so
+        // `sourcePath` was null for every adopter who did not install from a source
+        // checkout, and this function answered "No source path available" for a file it
+        // could fetch from GitHub. The legacy update path (`update.js`, "Update
+        // extensions") was the one that worked — only because it fell back to a
+        // download. (XSPEC-343)
         sourceStr = metadata.extensionSource;
       } else if (metadata?.registryEntry) {
         const source = metadata.registryEntry.source;

package/src/uninstallers/hook-uninstaller.js

@@ -426,11 +426,13 @@ export function uninstallHook(projectPath, options = {}) {
         if (!dryRun) unlinkSync(nativeHookPath);
         result.removed.push(`.git/hooks/pre-commit (UDS native hook, file removed — ${proof.why})`);
         result.deletedPaths.push('.git/hooks/pre-commit');
-      } else if (!NATIVE_UDS_LINE.test(content)) {
+      } else if (!NATIVE_UDS_LINE.test(content) && !stripUdsHookBlock(content).removed) {
         result.skipped.push('.git/hooks/pre-commit (no UDS lines found)');
       } else {
-        const lines = content.split('\n');
-        const filtered = lines.filter(line => !NATIVE_UDS_LINE.test(line));
+        // The block the native hook carries is removed whole, by its markers — its
+        // inner lines are not individually matchable (same as the husky path above).
+        const filtered = stripUdsHookBlock(content).content.split('\n')
+          .filter(line => !NATIVE_UDS_LINE.test(line));
         if (nothingButShebang(filtered)) {
           if (!dryRun) unlinkSync(nativeHookPath);
           result.removed.push('.git/hooks/pre-commit (UDS native hook, file removed)');

package/src/utils/copier.js

@@ -26,15 +26,72 @@ function getSourcePath(sourcePath) {
   return PathResolver.getStandardSource(sourcePath);
 }
 
+/**
+ * Is this source path one of the add-on files under `extensions/`?
+ * @param {string} sourcePath - Relative path from repo root
+ * @returns {boolean}
+ */
+export function isExtensionPath(sourcePath) {
+  return typeof sourcePath === 'string' && sourcePath.replace(/\\/g, '/').startsWith('extensions/');
+}
+
+/**
+ * Copy an extension file (language style guide, framework pattern, locale pack)
+ * into the target project — from the installed package ONLY.
+ *
+ * 🔴 There is deliberately no download fallback here (XSPEC-452 R2). `extensions/`
+ * used to be missing from the npm package, so the copy below fell through to
+ * `raw.githubusercontent.com/.../main`: offline installs failed, an install pulled
+ * whatever `main` held that day instead of the version the adopter had installed,
+ * and a file that did not exist anywhere (`extensions/locales/zh-cn.md`, XSPEC-451)
+ * hid behind that fallback until someone ran the locale. A declared extension that
+ * is not in the package is a packaging defect, so it fails — by name.
+ *
+ * @param {string} sourcePath - Relative path from repo root (e.g., 'extensions/locales/zh-tw.md')
+ * @param {string} targetDir - Target directory (usually '.standards')
+ * @param {string} projectPath - Project root path
+ * @returns {Promise<Object>} Result with success status and copied path
+ */
+export async function copyExtension(sourcePath, targetDir, projectPath) {
+  try {
+    const source = getSourcePath(sourcePath);
+    if (!source) {
+      return failure(
+        `Extension file not found in the installed package: ${sourcePath} (extension files are never downloaded; reinstall or upgrade universal-dev-standards)`,
+        ERROR_CODES.FILE_NOT_FOUND,
+        { sourcePath, targetDir }
+      );
+    }
+    const targetFolder = join(projectPath, targetDir);
+    const targetFile = join(targetFolder, basename(sourcePath));
+    if (!existsSync(targetFolder)) {
+      mkdirSync(targetFolder, { recursive: true });
+    }
+    copyFileSync(source, targetFile);
+    return success(targetFile, { source: 'local', sourcePath, targetFile });
+  } catch (error) {
+    return failure(
+      error.message,
+      ERROR_CODES.FILE_COPY_FAILED,
+      { sourcePath, targetDir, projectPath }
+    );
+  }
+}
+
 /**
  * Copy a standard file to target project
  * Falls back to downloading from GitHub if local file not found
+ * (except for `extensions/` files, which are package-only — see copyExtension)
  * @param {string} sourcePath - Relative path from repo root (e.g., 'core/anti-hallucination.md')
  * @param {string} targetDir - Target directory (usually '.standards')
  * @param {string} projectPath - Project root path
  * @returns {Promise<Object>} Result with success status and copied path
  */
 export async function copyStandard(sourcePath, targetDir, projectPath) {
+  // Extensions never take the GitHub fallback below, whichever caller got here (XSPEC-452 R2).
+  if (isExtensionPath(sourcePath)) {
+    return copyExtension(sourcePath, targetDir, projectPath);
+  }
   try {
     const targetFolder = join(projectPath, targetDir);
     const targetFile = join(targetFolder, basename(sourcePath));

package/src/utils/git-hooks.js

@@ -189,11 +189,15 @@ export function hookRunsUdsCheck(content) {
  * - Not installed: say what is missing and how to fix it, exit non-zero. It
  *   neither skips the check nor downloads anything.
  *
- * @param {{args?: string}} [opts] extra arguments to keep on the check command
- *   (e.g. `--standard checkin-standards`, which older UDS versions wrote).
+ * @param {{args?: string, hookFile?: string}} [opts]
+ *   args     — extra arguments to keep on the check command
+ *              (e.g. `--standard checkin-standards`, which older UDS versions wrote).
+ *   hookFile — the file the block is written into, named in the "blocked" message so
+ *              it points at the file the adopter actually has (default `.husky/pre-commit`;
+ *              the native hook passes `.git/hooks/pre-commit`).
  * @returns {string} the block, LF line endings, ending with a newline
  */
-export function buildPreCommitBlock({ args = '' } = {}) {
+export function buildPreCommitBlock({ args = '', hookFile = '.husky/pre-commit' } = {}) {
   const cmd = args ? `${UDS_BIN_NAME} check ${args}` : `${UDS_BIN_NAME} check`;
   return [
     UDS_HOOK_MARKER,
@@ -208,7 +212,7 @@ export function buildPreCommitBlock({ args = '' } = {}) {
     '  fi',
     `  echo "[UDS] Pre-commit check cannot run: the UDS CLI (${UDS_BIN_NAME}) is not installed." >&2`,
     `  echo "[UDS] Install it:  npm install --save-dev ${UDS_BIN_NAME}   (or: npm install -g ${UDS_BIN_NAME})" >&2`,
-    '  echo "[UDS] This commit is blocked until it is installed, or until you remove this block from .husky/pre-commit." >&2',
+    `  echo "[UDS] This commit is blocked until it is installed, or until you remove this block from ${hookFile}." >&2`,
     '  exit 1',
     ') || exit $?',
     UDS_HOOK_END_MARKER,

package/src/utils/locale.js

@@ -32,6 +32,24 @@ export function displayLanguageToLocale(displayLanguage) {
   return LOCALE_MAP[displayLanguage.toLowerCase()] || 'en';
 }
 
+/**
+ * Normalise a requested display language and say whether it is supported.
+ *
+ * `uds init --locale zh-CN` used to install English and exit 0: the value was compared case-sensitively
+ * further down, so the upper-case spelling silently missed every Chinese branch. An unsupported value such
+ * as `fr` did the same — English, exit 0, nothing said. The caller still falls back to English for an
+ * unsupported value, but now it can say so.
+ * @param {string|undefined|null} requested - what the user, install.yaml or the environment asked for
+ * @returns {{ displayLanguage: string|undefined|null, supported: boolean }}
+ */
+export function normalizeRequestedLocale(requested) {
+  if (typeof requested !== 'string' || requested.trim() === '') {
+    return { displayLanguage: requested, supported: true };
+  }
+  const displayLanguage = requested.trim().toLowerCase();
+  return { displayLanguage, supported: Object.prototype.hasOwnProperty.call(LOCALE_MAP, displayLanguage) };
+}
+
 /**
  * Check if a locale requires localized skill installation.
  * English locale uses the default source, no localization needed.
@@ -67,6 +85,7 @@ export function detectLocaleFromStandards(projectPath) {
 
 export default {
   displayLanguageToLocale,
+  normalizeRequestedLocale,
   isLocalizedLocale,
   detectLocaleFromStandards,
   LOCALE_MAP

package/standards-registry.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "version": "6.14.0-beta.3",
+  "version": "6.14.0-beta.4",
   "lastUpdated": "2026-05-13",
   "description": "Standards registry for universal-dev-standards with integrated skills and AI-optimized formats",
   "formats": {
@@ -58,14 +58,14 @@
     "standards": {
       "name": "universal-dev-standards",
       "url": "https://github.com/AsiaOstrich/universal-dev-standards",
-      "version": "6.14.0-beta.3"
+      "version": "6.14.0-beta.4"
     },
     "skills": {
       "name": "universal-dev-standards",
       "url": "https://github.com/AsiaOstrich/universal-dev-standards",
       "localPath": "skills",
       "rawUrl": "https://raw.githubusercontent.com/AsiaOstrich/universal-dev-standards/main/skills",
-      "version": "6.14.0-beta.3",
+      "version": "6.14.0-beta.4",
       "note": "Skills are now included in the main repository under skills/"
     }
   },
@@ -382,6 +382,10 @@
       "skills/brainstorm-assistant/SKILL.md",
       "skills/brainstorm-assistant/guide.md"
     ],
+    "comprehension-ladder": [
+      "skills/comprehension-ladder/SKILL.md",
+      "skills/comprehension-ladder/eval-cases.md"
+    ],
     "bdd-assistant": [
       "skills/bdd-assistant/SKILL.md",
       "skills/bdd-assistant/guide.md",
@@ -1536,6 +1540,16 @@
       "description": "Traditional Chinese (Taiwan) localization for all standards",
       "applicability": "Traditional Chinese speaking teams"
     },
+    {
+      "id": "zh-cn-locale",
+      "name": "Simplified Chinese Locale",
+      "nameZh": "简体中文本地化",
+      "source": "extensions/locales/zh-cn.md",
+      "category": "extension",
+      "skillName": null,
+      "description": "Simplified Chinese (Mainland China) localization for all standards",
+      "applicability": "Simplified Chinese speaking teams"
+    },
     {
       "id": "copilot-integration",
       "name": "GitHub Copilot Instructions",
@@ -2295,7 +2309,7 @@
       "id": "license-compliance",
       "name": "License Compliance Standards",
       "nameZh": "授權合規標準",
-      "version": "6.14.0-beta.3",
+      "version": "6.14.0-beta.4",
       "source": {
         "human": "core/license-compliance.md",
         "ai": "ai/standards/license-compliance.ai.yaml"
@@ -2307,7 +2321,7 @@
       "id": "verification-oracle",
       "name": "Verification Oracle Standards",
       "nameZh": "驗證 Oracle 標準",
-      "version": "6.14.0-beta.3",
+      "version": "6.14.0-beta.4",
       "source": {
         "human": "core/verification-oracle.md",
         "ai": "ai/standards/verification-oracle.ai.yaml"
@@ -2319,7 +2333,7 @@
       "id": "model-provenance",
       "name": "Model Provenance Policy Standards",
       "nameZh": "模型來源政策標準",
-      "version": "6.14.0-beta.3",
+      "version": "6.14.0-beta.4",
       "source": {
         "human": "core/model-provenance.md",
         "ai": "ai/standards/model-provenance.ai.yaml"
@@ -2331,7 +2345,7 @@
       "id": "resource-cost-boundary",
       "name": "Resource / Cost Boundary Declaration Standards",
       "nameZh": "資源／成本邊界宣告標準",
-      "version": "6.14.0-beta.3",
+      "version": "6.14.0-beta.4",
       "source": {
         "human": "core/resource-cost-boundary.md",
         "ai": "ai/standards/resource-cost-boundary.ai.yaml"