pipexerp/ai-proj-helper
8
0
Fork 0
Code Issues Pull Requests 3 Actions 2 Packages Projects Releases Wiki Activity
83 Commits 13 Branches 0 Tags
6321a8528a2a2d63e327e1aa2ce82ecdeb92d291
Commit Graph
83 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
qiudl 6321a8528a Merge pull request 'chore(skill): 安全扫描警告清零 + 加入 skill-gate CI' (#14) from chore/scan-cleanup-and-ci into main
skill-gate / gate (push) Waiting to run
Details 
chore(skill): 安全扫描警告清零 + 加入 skill-gate CI
 2026-10-31 14:24:12 +00:00
johnQ b390c29af3 chore(skill): 安全扫描警告清零 + 加入 skill-gate CI
skill-gate / gate (pull_request) Waiting to run
Details 
- scan-skill.sh: loopback 不算风险、命中走允许清单
- 11 个文件的 /Users/<机器名> 绝对路径去环境化（脚本 $HOME、文档 ~）
- 允许清单登记运维环境地址与示例占位符（非凭据），附理由
- scan: 57 warns -> 0 warns / 0 high
- 新增 .gitea/workflows/skill-gate.yml（validate --strict + scan + catalog --check + 测试）
 2026-10-31 22:24:05 +08:00
qiudl f41b14ad0a Merge pull request 'chore(skill): 清理全部 23 条历史校验警告' (#13) from chore/skill-warning-cleanup into main 
chore(skill): 清理全部 23 条历史校验警告
 2026-10-31 14:21:11 +00:00
johnQ 237631147a chore(skill): 清理全部 23 条历史校验警告 
- 11 个超 20KB 的 SKILL.md 拆分，大章节移入 references/details.md
- 7 处非标准字段（arguments/user_invocable）移入 metadata
- 修 req-dev 4 条相对链接；validate 跳过行内代码避免 ![](...) 误报
- validate-skills.py: 23 warns -> 0 warns，0 errors
 2026-10-31 22:21:07 +08:00
johnQ 7d47762303 fix(install): audit 跳过 deprecated 技能，避免把不装的技能算成漂移 2026-10-31 22:19:32 +08:00
qiudl a7a753b833 Merge pull request 'feat(skill): 技能治理 v0.2 —— 分桶/调用模式/校验/安全/清单/安装矩阵' (#12) from feat/skill-management into main 
feat(skill): 技能治理 v0.2（分桶/调用模式/校验/安全/清单/安装矩阵）
 2026-10-31 14:18:15 +00:00
johnQ aecd2ce521 docs: README 加技能路由表入口，CHANGELOG 记录降级与分类调整 2026-10-31 22:18:10 +08:00
johnQ 41a1032ccf chore(skill): 按 SCOPE 降级两个无增量技能 
- verification-before-completion / ai-proj-helper-entry 标记 deprecated
  （3 组难用例均无增量：核心规则已在用户级 AGENTS.md）
- 入口路由内容转成 docs/skill-routing.md（索引不算规则，不占技能目录）
- catalog: promoted 58（40 model-invoked + 18 user-invoked）、beta 1、deprecated 2
 2026-10-31 22:17:06 +08:00
johnQ d5bdfcfb7c refactor(skill): 18 个命令型技能转 user-invoked，压目录预算 
- biz-* 4 个、integration-* 8 个、dev-android/ios/pda、publish、ai-proj-cicd-release、ai-proj-macos-release
- 均加 metadata.invocation: user-invoked + disable-model-invocation: true（DSH 实测生效）
- catalog: promoted/model-invoked 40、promoted/user-invoked 18、beta 3
 2026-10-31 22:16:39 +08:00
johnQ d43b414fc9 feat(skill): 技能治理 v0.2 —— 分桶/调用模式/校验/安全/清单/安装矩阵 
- 新增 SCOPE.md 收录门槛 + .out-of-scope/ 拒绝档案
- 生命周期分桶 promoted/beta/deprecated，marketplace 只发布 promoted
- 调用模式 model-invoked/user-invoked（user-invoked 不占模型目录）
- 新增脚本 validate-skills.py / generate-catalog.py / scan-skill.sh(+allowlist)
- 新增 beta 技能 skill-creator、ai-proj-helper-entry、verification-before-completion（各带 evals）
- install-skills.sh: --agent dsh / --link / --audit / --include-beta / --no-validate
- 融合：dev-review 接收评审意见、req-design 依赖边、agent-swarm 并行编排、dev-test TDD
- catalog.json 61 个技能（58 promoted / 3 beta）；validate 0 错误；scan 0 高危；现有测试通过
 2026-10-31 22:03:13 +08:00
johnQ dde146995e feat(req): 新增「复用盘点」门禁（Gate 5 + PRD §1.5） 
- req 技能：4 道门禁 → 5 道，新增 Gate 5「复用盘点先于估工」；无 file:line 证据或标「未排查」禁止提审、禁止按全新增估工
- req-prd 模板：新增 §1.5「现有实现与复用盘点」强制章节（能力点 / file:line / 复用|改造|新增 / 理由）
- 触发：DS Bot 已有头像上传却被当新增估工的事故复盘
- 版本：req-plugin 2.0.0 → 2.1.0，req-prd-plugin 2.2.0 → 2.3.0；marketplace.json 同步再生成
 2026-10-27 11:03:47 +08:00
johnQ d5550d62c5 docs(slark-dsh-cicd): 修正参考文件错别字（REQ-20261007-0003） 2026-10-07 17:07:15 +08:00
johnQ c74fe71f0a feat(slark-dsh-cicd): 新增 DSH/Slark 发布实战技能（REQ-20261007-0003） 
- 新建 skills-dev/slark-dsh-cicd-plugin：plugin.json + skills/SKILL.md +
  skills/references/fork-release-and-post-checks.md
- 覆盖两条发布线（DSH 插件 pack 双资产 / Slark 宿主重打包+签名）、权限与身份三连
  （push:true 才可写，ls-remote 通 ≠ 能 push）、无上游写权限的 fork 发布且原仓库零改动、
  干净单提交 + git diff --stat <OURS> 树一致性 gate、改指向后必须重新 pack、
  draft→publish 与「更新检查看不到新版」的因果、GitHub HTTPS/fetch 卡死/无 macOS timeout
  的判死处置、发布后 SHA 逐项核对（verify-remote 仅 Windows）、app.asar 完整性约束、
  ai-proj staging→released 与 /req done 证据要求及文档接口故障绕过
- 与 slark-cicd 明确分工并交叉引用，不重复 staging/生产/Desktop 细节
- update-plugin-meta.py PLUGIN_MAP 增加 slark-dsh-cicd-plugin (skill/dev)
- generate-marketplace.py devops 分类补充 slark-dsh-cicd；marketplace.json 仅新增该条目
- 校验：claude plugin validate . 通过（警告为该仓库既有 install_name 字段提示）、git diff --check 干净
 2026-10-07 17:06:36 +08:00
johnQ 2e0f7fe68c feat(dev-coding): 新增「Step 0.5 Shell 环境自检」— node/npm 缺 PATH + HOME 未设置 
在 macOS + Slark/DSH 实测定位到：bash 工具以 bash -c（非登录非交互）执行，
子进程环境等于宿主进程环境（PATH 不被清洗，HOME/USER/TMPDIR/LANG 未设置），
宿主由 GUI 应用拉起继承最小 PATH → node/npm/git 直接不可用。

沉淀内容：
- 5 条根因（不读 rc / PATH 不被清洗 / GUI 宿主 / HOME 未设置 / shell-env 只认 DSH_*）
- 两行 export 模板：HOME + node v22.22.3 PATH（勿混用 homebrew 的 v26）
- HOME 必须补的理由：~ 靠 passwd 展开易误判，git 报 fatal: $HOME not set，
  set -u 脚本报 unbound variable；「node 能跑」≠ 环境完整
- 交付纪律：禁止把「没有 shell / 不能构建」写成交付结论，未跑构建就如实标注
 2026-10-07 07:42:00 +08:00
qiudl 3ffee89840 Merge pull request '[REQ-20260825-0006] Harden Slark handoff recovery guidance' (#10) 2026-08-25 21:15:44 +00:00
qiudl 998b22e905 fix(slark-cicd): document handoff recovery 
Refs REQ-20260825-0006
 2026-08-26 06:33:14 +09:30
qiudl 826bba8485 Merge pull request '[REQ-20260824-0017] Add req-dev read-model migration gate' (#9) from docs/req-dev-read-model-migration-gate into main 2026-08-25 19:57:07 +00:00
qiudl f5c5bd3f40 docs(req-dev): add read-model migration gate 2026-08-26 05:24:36 +09:30
qiudl 4e6ae9036a fix(installer): detect same-metadata content updates 2026-08-22 08:53:46 +09:30
qiudl 3b38deb078 chore(marketplace): add slark-cicd-plugin 2026-08-22 08:15:02 +09:30
qiudl 16e58047a0 Merge PR #8: req-prd dual persistence and OSS prototypes 
Publish req-prd and req-prototype 2.2.0.
 2026-08-21 14:30:01 +00:00
qiudl dec25562a4 feat(req-prd): persist docs and prototypes remotely 2026-08-21 23:59:14 +09:30
qiudl d630b374a3 Merge PR #7: req-prd HTML prototype delivery loop 
Publish req-prd and req-prototype 2.1.0.
 2026-08-21 14:20:27 +00:00
qiudl 8fc1cd05b7 feat(req-prd): add HTML prototype delivery loop 2026-08-21 23:48:43 +09:30
admin b859a84455 Merge PR #6: req-prd design interview and defect convergence 
Adds traceable one-question-per-round product design interviews and a defect-analysis convergence loop.
 2026-08-21 13:05:55 +00:00
qiudl 9a1400758e feat(req-prd): add design interview and defect convergence workflow 2026-08-21 22:34:09 +09:30
qiudl a58dd1aff3 Merge PR #5: make Codex the default skill target 
Validated Codex and explicit Claude install layouts, stable content digests, exclusions, and real user-scope installation.
 2026-08-20 02:37:34 +00:00
qiudl bb5e6be73e feat(skills): make Codex the default install target 2026-08-20 12:07:10 +09:30
qiudl ef0e9ca1f0 Merge PR #4: refresh marketplace release workflows 
Validated installer migration, marketplace integrity, skill frontmatter, plugin manifests, and sanitized release skills.
 2026-08-20 01:45:40 +00:00
qiudl ad4e2b16a8 feat(skills): refresh marketplace release workflows 2026-08-20 10:34:16 +09:30
qiudlandClaude Sonnet 4.6 ba107a54a8 fix(req-prototype): fix arguments regex causing Skill loader error 
arguments 字段中 [REQ-ID] 被 Skill loader 编译为 JS regex 时，
Q-I 字符范围（ASCII 81 > 73）触发 "range out of order" 错误。
改为 <REQ-ID> [subcommand] [options] 避免字符类范围问题。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-17 13:55:55 +09:30
qiudl 4ea6920a13 chore(marketplace): update marketplace.json — req-prototype upload 改用 MCP 直传 COS 2026-05-17 13:36:54 +09:30
qiudlandClaude Sonnet 4.6 039a749e3e feat(req-prototype): upload 模式改用 MCP upload_prototype 直传 COS 
- 移除对本地后端（localhost:8080）的依赖
- 执行流程改为：生成 HTML → base64 编码 → mcp__ai-proj__upload_prototype
- 删除前置条件中「后端运行中」检查项
- 更新异常处理：移除 token/后端错误，新增 base64 兼容性说明

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-17 12:52:28 +09:30
qiudlandClaude Sonnet 4.6 daca19a262 chore(marketplace): req-plugin 归档前强制 AC 验收 Gate 0 
- /req done 新增 Gate 0：归档前逐条确认验收标准
- 无 AC 或有未确认项均阻断，需提供证据或说明 N/A 原因
- AC 确认后自动追加验证记录到需求描述（带日期戳）
- 更新关键约束说明

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-17 08:20:38 +09:30
qiudl ddb5d5cb06 chore(marketplace): remove stale skills-personal entries 
skills-personal/ directory no longer exists; marketplace.json had 9
plugin entries pointing to missing sources (gitea, openclaw,
ops-servers, ops-tools, qiudl-personal, reload-session, req-deploy,
save-session, search-sessions). Regenerated via generate-marketplace.py.
 2026-05-07 02:40:47 +02:00
qiudlandClaude Sonnet 4.6 da57cccf96 chore(marketplace): update req-retro karpathy-score dimension, req-test-gate gate-0b docs 
- req-retro: 新增 karpathy_score × 0.20 维度，QS 公式扩展为 5 维
- req-test-gate: Gate 0B 新增 check-surgical.sh Ratchet 文档

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-21 10:55:13 +09:30
qiudl 7eed2b8f10 chore(marketplace): add karpathy-guidelines-plugin, update dev-coding/dev-review/review-checklist 
Karpathy 四原则融合到 req 技能工作流 (REQ-20260421-0003):
- dev-coding: 新增 Step 0「验证优先」(Goal-Driven Execution)
- dev-review: 五视角 → 六视角，新增 Scope 审计者 (Simplicity + Surgical)
- review-checklist/general: 新增 Karpathy 反模式速查表
- karpathy-guidelines-plugin: 新增独立插件，含四原则全文 + 与 req 工作流映射
 2026-04-21 10:08:18 +09:30
qiudl 5a45916b2c feat: devflow-claude P0/P1 集成 + VP 三件套强制规则 2026-04-20 23:51:03 +00:00
qiudl bcea648e3c merge: resolve conflict in req-prototype SKILL.md, keep iframe display rule from main 2026-04-21 09:20:55 +09:30
qiudlandClaude Sonnet 4.6 e3513f137b feat(req-prd): PRD 模板新增验收标准章节强制含 VP 三件套（REQ-20260421-0002） 
- 模板第7节新增「验收标准」章节，含 VP-Data/VP-Steps/VP-Pass 完整示例
- 检查清单「验收标准可测试」更新说明要求 VP 三件套
- 原第7节「风险评估」顺移为第8节

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-21 09:19:08 +09:30
qiudlandClaude Sonnet 4.6 011916ceb9 feat(req-review): 新增 VP 三件套强制检查（REQ-20260421-0002） 
- 结构检查表新增「VP 三件套」必须项
- 新增「VP 三件套强制检查」章节，含四项检查指标和驳回条件
- 常见驳回原因更新：验收不明包含 VP 缺失场景

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-21 09:17:11 +09:30
dongliangandClaude Sonnet 4.6 48b792fb5a feat(req-prototype): 原型展示必须用 iframe，禁止图片方式 (REQ-20260420-0031) 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-21 01:07:10 +09:30
qiudlandClaude Sonnet 4.6 2ab0a61eb9 fix(install): handle nested skills/ subdirectory (e.g. dev-test) 
resolve_skills_src() detects when SKILL.md is one level deeper than skills/
and uses that subdirectory as rsync source instead.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-21 00:00:01 +09:30
qiudlandClaude Sonnet 4.6 de25f096e7 feat(sync): add install-skills.sh + install metadata to all 62 plugins 
- Add install_name, install_type, dir_category fields to all 62 plugin.json files
  to resolve name-mapping and skill-vs-command routing issues
- Add install-skills.sh: idempotent cross-machine skill sync script
  - Routes skill→~/.claude/skills/<name>/, command→~/.claude/commands/<name>.md
  - rsync full skills/ directory (preserves multi-file skills like dev-test, req-deploy)
  - State file ~/.claude/.installed-skills.json tracks installed versions
  - Conflict detection: warns before overwriting locally modified files
  - --dry-run, --category, --force, --cleanup, --list flags
- Add 9 new plugins migrated from local ~/.claude (agent-swarm, ai-chat,
  defect-analysis, executing-plans, finishing-branch, frontend-design,
  req-audit, req-lookback, req-retro)
- Add update-plugin-meta.py helper used to bulk-update plugin.json
- Fix siyuan SKILL.md: remove hardcoded server credentials, use env vars

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-20 23:55:26 +09:30
qiudlandClaude Sonnet 4.6 84d4e35a42 feat(req-prototype): 新增 HTML 上传模式，版本升至 v2.0.0 
- 添加 /req prototype upload 子命令（推荐模式）
- 含完整 curl 上传流程、HTML 设计规范及模板
- 更新错误处理与版本管理说明
- marketplace 更新（49 个插件）

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-20 18:06:32 +09:30
qiudl e5805cbb51 feat: P1-10/12/13/14 风险扫描 + 粒度判断 + Issue 集成 + PRD 校验 (REQ-20260416-0017) 
P1-10: pm-risk skill — 三维度风险扫描
  需求层: 停滞/草稿滞留/开发无提交/测试超期/批准未开发
  代码层: 未合并分支/频繁修复文件/提交频率下降
  流程层: 跳过评审/PR 无 review/测试门禁跳过/直接推 main
  三级风险: 🔴 严重 / 🟡 警告 / 🔵 提示

P1-12: req-prd 需求粒度 AI 判断
  创建前启发式检查：标题过宽建议拆分、过窄建议合并或改 task
  粒度参考表 + 已有需求扩展决策表 + 前后端拆分规则

P1-13: dev-commit issue 集成规范
  分支名 -iN 后缀传递 issue 编号
  commit message 自动追加 closes #N

P1-14: hooks/validate-prd.sh — PRD 章节校验
  PostToolUse hook 自动检查 10 个必需章节
  缺失时给出明确提示

marketplace: 48 → 49 plugins (新增 pm-risk-plugin)
 2026-04-19 13:33:26 +09:30
qiudl 79c4e55719 feat: P1-8 客户场景章节 + P1-9 pm-ask skill (REQ-20260416-0017) 
P1-8: req-prd 模板增加 "1.4 客户原始诉求" 章节
  - 强制保留客户原话，不做 AI 加工转述
  - 标注提出人/时间/出处
  - 补充"客户原话原则"说明
  借鉴 devflow-claude requirement-template.md 的"1.3 客户场景"

P1-9: 新 skill pm-ask-plugin
  - 基于 ai-proj MCP + git log 真实数据的项目问答
  - 铁律：禁止编造，必须引用 REQ-XXX/commit-sha/文件路径
  - 数据不足时明确说明缺失
  - 区分事实和推测（⚠️ 推测：前缀）
  - 受众适配（高层/客户/内部/新人）
  借鉴 devflow-claude /pm:ask 命令

marketplace: 47 → 48 plugins
 2026-04-16 23:04:54 +09:30
qiudl 23ea8fdca5 feat: 融合 devflow-claude P0 批机制 (REQ-20260416-0017) 
P0-1: SessionStart Hook — hooks/session-context.sh
  从分支名解析 REQ-ID，调 MCP API 查询需求详情注入 system-reminder

P0-2: PreToolUse Hook — hooks/pre-tool-confirm.sh
  拦截生产推送、force push、docker prod 容器操作、git reset --hard 等

P0-3: Release Draft 闸门设计文档 — docs/design/release-draft-gate.md
  完整架构 + 渐进式落地路径（拆 7 个子任务延后）
  附最小可用脚本 hooks/release-draft.sh 创建 Gitea draft release

P0-4: Memory 隔离规则 — 写入 req-prd / req-design / req-workflow
  禁止 auto-memory 污染模板产出物（章节结构、字段定义、文档结构）

P0-5: CLAUDE.md 架构检查 + 架构片段库
  dev-coding skill 执行前检查架构关键词
  新增 templates/claude-md-snippets/ 含 Go+Gin / React+AntD / Vue+Element /
  MCP+TS / generic 五套骨架

P0-6: /commit 分支保护自动化 — 新 skill dev-commit-plugin
  保护分支自动建功能分支 + Conventional Commits + REQ-XXX 自动关联

安装:
  bash hooks/install.sh

后续:
  P0-3 完整实现拆 7 个子任务（P0-3.1 ~ P0-3.7）
  建议先部署 hooks 跑 1-2 周观察，再推进 Release 机制落地
 2026-04-16 21:02:29 +09:30
qiudlandClaude Opus 4.6 bfe3815626 fix(skill): 修复质量检查发现的引用问题 
- req-workflow: req-dev → req-design (2处)
- req-design: changelog 标注"原名 req-dev"
- marketplace.json 重新生成 (44→46 plugins)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-06 17:47:01 +09:30
qiudlandClaude Opus 4.6 3706d7f32d feat(skill): REQ-20260406-0004 技能三层分离重构（7主线+16插件） 
批次1: req-prd 瘦身 + req-design 重定位 + dev-coding 聚焦
批次2: dev-review 新建 + review-checklist 插件
批次3: dev-integration 新建 + req-compare 拆出
批次4: 插件完善 (req-research/db-migration/dev-scaffold/deploy-rollback)
批次5: 平台拆分 (dev-ios/dev-android/dev-mcp/dev-pda) + dev 分组更新
批次6: marketplace.json 32→44 plugins

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-06 17:44:08 +09:30