universal-dev-standards 6.2.6 → 6.2.7

package/bundled/locales/zh-CN/CHANGELOG.md

@@ -1,7 +1,7 @@
 ---
 source: ../../CHANGELOG.md
-source_version: 6.2.6
-translation_version: 6.2.6
+source_version: 6.2.7
+translation_version: 6.2.7
 last_synced: 2026-07-31
 status: current
 ---
@@ -17,6 +17,12 @@ status: current
 
 ## [Unreleased]
 
+## [6.2.7] - 2026-07-31
+
+### 修复
+
+- **reconciler 在任何 npm 安装下都取不到 extension。** `manifest.extensions` 的条目（locale 包之类）抵达 executor 时没有已解析的来源路径，因为发布包的 `files` 清单不含 `extensions/` 目录——于是 `uds update --force` 对它们报告 `No source path available`，而 `uds update` 却更新了同一个文件。executor 现在改以 `copyStandard` 解析 extension，那是它处理 registry entry 时本来就在用的 bundled → repo → download fallback，也正是 legacy 路径一直在用的那一条。完全没有任何来源的条目仍然会失败，本来就该如此。
+
 ## [6.2.6] - 2026-07-31
 
 ### 新增

package/bundled/locales/zh-CN/README.md

@@ -15,7 +15,7 @@ status: current
 
 > **语言**: [English](../../README.md) | [繁體中文](../zh-TW/README.md) | 简体中文
 
-**版本**: 6.2.6 | **发布日期**: 2026-07-31 | **授权**: [双重授权](../../LICENSE) (CC BY 4.0 + MIT)
+**版本**: 6.2.7 | **发布日期**: 2026-07-31 | **授权**: [双重授权](../../LICENSE) (CC BY 4.0 + MIT)
 
 语言无关、框架无关的软件项目文档标准。通过 AI 原生工作流，确保不同技术栈之间的一致性、质量和可维护性。
 

package/bundled/locales/zh-CN/SECURITY.md

@@ -13,7 +13,7 @@ status: current
 <!-- UDS_SUPPORTED_VERSIONS_START -->
 | 版本 | 支持状态 |
 |------|--------|
-| 6.2.6 | ✅ 最新正式版 |
+| 6.2.7 | ✅ 最新正式版 |
 | < 6.0.0 | ❌ 已终止支持 |
 <!-- UDS_SUPPORTED_VERSIONS_END -->
 

package/bundled/locales/zh-TW/CHANGELOG.md

@@ -1,7 +1,7 @@
 ---
 source: ../../CHANGELOG.md
-source_version: 6.2.6
-translation_version: 6.2.6
+source_version: 6.2.7
+translation_version: 6.2.7
 last_synced: 2026-07-31
 status: current
 ---
@@ -17,6 +17,12 @@ status: current
 
 ## [Unreleased]
 
+## [6.2.7] - 2026-07-31
+
+### 修復
+
+- **reconciler 在任何 npm 安裝下都取不到 extension。** `manifest.extensions` 的項目（locale 包之類）抵達 executor 時沒有已解析的來源路徑，因為發布包的 `files` 清單不含 `extensions/` 目錄——於是 `uds update --force` 對它們回報 `No source path available`，而 `uds update` 卻更新了同一個檔案。executor 現在改以 `copyStandard` 解析 extension，那是它處理 registry entry 時本來就在用的 bundled → repo → download fallback，也正是 legacy 路徑一直在用的那一條。完全沒有任何來源的項目仍然會失敗，本來就該如此。
+
 ## [6.2.6] - 2026-07-31
 
 ### 新增

package/bundled/locales/zh-TW/README.md

@@ -15,7 +15,7 @@ status: current
 
 > **語言**: [English](../../README.md) | 繁體中文 | [简体中文](../zh-CN/README.md)
 
-**版本**: 6.2.6 | **發布日期**: 2026-07-31 | **授權**: [雙重授權](../../LICENSE) (CC BY 4.0 + MIT)
+**版本**: 6.2.7 | **發布日期**: 2026-07-31 | **授權**: [雙重授權](../../LICENSE) (CC BY 4.0 + MIT)
 
 語言無關、框架無關的軟體專案文件標準。透過 AI 原生工作流，確保不同技術堆疊之間的一致性、品質和可維護性。
 

package/bundled/locales/zh-TW/SECURITY.md

@@ -13,7 +13,7 @@ status: current
 <!-- UDS_SUPPORTED_VERSIONS_START -->
 | 版本 | 支援狀態 |
 |------|--------|
-| 6.2.6 | ✅ 最新正式版 |
+| 6.2.7 | ✅ 最新正式版 |
 | < 6.0.0 | ❌ 已終止支援 |
 <!-- UDS_SUPPORTED_VERSIONS_END -->
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "universal-dev-standards",
-  "version": "6.2.6",
+  "version": "6.2.7",
   "description": "CLI tool for adopting Universal Development Standards",
   "keywords": [
     "documentation",

package/src/reconciler/plan-executor.js

@@ -221,32 +221,49 @@ async function executeCreateOrUpdate(projectPath, action, manifest) {
   if (action.category === 'standard' || action.category === 'option') {
     const sourcePath = action.details?.sourcePath;
     if (!sourcePath) {
-      // Use copyStandard which handles bundled/repo/download fallback
+      // No absolute path was resolved, so fall back to copyStandard, which walks
+      // bundled → repo → download. Two kinds of entry arrive here.
       const metadata = action.details?.metadata;
-      if (metadata?.registryEntry) {
+      let sourceStr = null;
+      let targetDir = '.standards';
+
+      if (metadata?.extensionSource) {
+        // An entry from `manifest.extensions`. PathResolver cannot resolve these
+        // from an npm install: the published package's `files` list is bin, src,
+        // bundled, standards-registry.json and README.md — no `extensions/`. So
+        // `sourcePath` is null for every adopter who did not install from a
+        // source checkout, and this function answered "No source path available"
+        // for a file it was perfectly able to fetch.
+        //
+        // The legacy update path never had the bug because it calls copyStandard
+        // directly (`update.js`, "Update extensions"). The same upgrade therefore
+        // refreshed `.standards/zh-tw.md` under `uds update` and failed under the
+        // reconciler — the two paths disagreed about whether the file was
+        // reachable, and only one of them was right. (XSPEC-343)
+        sourceStr = metadata.extensionSource;
+      } else if (metadata?.registryEntry) {
         const source = metadata.registryEntry.source;
-        const sourceStr = typeof source === 'string'
+        sourceStr = typeof source === 'string'
           ? source
           : (source?.[metadata.format] || source?.ai || source?.human);
-        if (sourceStr) {
-          const targetDir = action.category === 'option'
-            ? dirname(action.path)
-            : '.standards';
-          const result = await copyStandard(sourceStr, targetDir, projectPath);
-          if (result.success) {
-            // Update hash in manifest
-            const hashInfo = computeFileHash(join(projectPath, action.path));
-            if (hashInfo) {
-              const normalizedPath = action.path.replace(/\\/g, '/');
-              manifest.fileHashes[normalizedPath] = {
-                ...hashInfo,
-                installedAt: new Date().toISOString()
-              };
-            }
-            return { action, success: true };
+        targetDir = action.category === 'option' ? dirname(action.path) : '.standards';
+      }
+
+      if (sourceStr) {
+        const result = await copyStandard(sourceStr, targetDir, projectPath);
+        if (result.success) {
+          // Update hash in manifest
+          const hashInfo = computeFileHash(join(projectPath, action.path));
+          if (hashInfo) {
+            const normalizedPath = action.path.replace(/\\/g, '/');
+            manifest.fileHashes[normalizedPath] = {
+              ...hashInfo,
+              installedAt: new Date().toISOString()
+            };
           }
-          return { action, success: false, error: result.error };
+          return { action, success: true };
         }
+        return { action, success: false, error: result.error };
       }
       return { action, success: false, error: 'No source path available' };
     }

package/standards-registry.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "version": "6.2.6",
+  "version": "6.2.7",
   "lastUpdated": "2026-05-13",
   "description": "Standards registry for universal-dev-standards with integrated skills and AI-optimized formats",
   "formats": {
@@ -58,14 +58,14 @@
     "standards": {
       "name": "universal-dev-standards",
       "url": "https://github.com/AsiaOstrich/universal-dev-standards",
-      "version": "6.2.6"
+      "version": "6.2.7"
     },
     "skills": {
       "name": "universal-dev-standards",
       "url": "https://github.com/AsiaOstrich/universal-dev-standards",
       "localPath": "skills",
       "rawUrl": "https://raw.githubusercontent.com/AsiaOstrich/universal-dev-standards/main/skills",
-      "version": "6.2.6",
+      "version": "6.2.7",
       "note": "Skills are now included in the main repository under skills/"
     }
   },
@@ -2236,7 +2236,7 @@
       "id": "license-compliance",
       "name": "License Compliance Standards",
       "nameZh": "授權合規標準",
-      "version": "6.2.6",
+      "version": "6.2.7",
       "source": {
         "human": "core/license-compliance.md",
         "ai": "ai/standards/license-compliance.ai.yaml"
@@ -2248,7 +2248,7 @@
       "id": "verification-oracle",
       "name": "Verification Oracle Standards",
       "nameZh": "驗證 Oracle 標準",
-      "version": "6.2.6",
+      "version": "6.2.7",
       "source": {
         "human": "core/verification-oracle.md",
         "ai": "ai/standards/verification-oracle.ai.yaml"
@@ -2260,7 +2260,7 @@
       "id": "model-provenance",
       "name": "Model Provenance Policy Standards",
       "nameZh": "模型來源政策標準",
-      "version": "6.2.6",
+      "version": "6.2.7",
       "source": {
         "human": "core/model-provenance.md",
         "ai": "ai/standards/model-provenance.ai.yaml"
@@ -2272,7 +2272,7 @@
       "id": "resource-cost-boundary",
       "name": "Resource / Cost Boundary Declaration Standards",
       "nameZh": "資源／成本邊界宣告標準",
-      "version": "6.2.6",
+      "version": "6.2.7",
       "source": {
         "human": "core/resource-cost-boundary.md",
         "ai": "ai/standards/resource-cost-boundary.ai.yaml"