88 Commits

Author SHA1 Message Date
Tw93 ba60df6efd chore: release v3.36.1
Ship layout verification, faithful copy restoration, and context boundary refinements through the tagged distribution channels.
2026-09-12 14:20:09 +08:00
Tw93 3f97660ee2 docs: clarify skill context and maintenance boundaries
Preserve the reviewed weekly lessons in their owning guidance and skill sources. Keep unrelated work and product behavior unchanged.
2026-09-12 14:03:15 +08:00
Tw93 6056c879be docs: preserve layout evidence and author voice
Preserve the reviewed weekly lessons in their owning guidance and skill sources. Keep unrelated work and product behavior unchanged.
2026-09-12 14:03:15 +08:00
Tw93 2d1420da16 chore: release v3.36.0
Publish the workflow, writing, and health improvements with synchronized marketplace, npm, and installer versions.
2026-09-06 10:21:42 +08:00
Tw93 18e83c16bc fix: preserve attributed copy and authorized skill handoffs
Fold the weekly review into existing ownership and handoff rules, keeping testimonials intact and avoiding extra approval gates in triage and learning outputs.
2026-09-06 10:21:33 +08:00
Tw93 577debc44c fix: ground health findings in runtime and verifier evidence
Recognize executable npm verification defaults without requiring a Makefile wrapper. Treat MCP estimates and unknown model names as evidence gaps, and preserve intent rules when hooks cover only execution. Cover real and hollow package defaults with regression tests.
2026-09-06 10:04:08 +08:00
Tw93 f223a6361e fix: respect authorized scope and preserve requested content
Remove repeated approval gates and default identity stripping, keep excerpt requests bounded, and correct IME and lockfile guidance so specific recipes do not contradict the requested outcome.
2026-09-06 10:03:55 +08:00
Tw93 9faca0cf70 refactor: reuse skill descriptions within each health report
Collect descriptions once per run so the inventory and both context estimates use the same snapshot without repeated discovery or a persistent cache.
2026-09-06 09:44:04 +08:00
Tw93 a8242199ca refactor: align skill contracts and load conditional guidance on demand
Keep Read routing behind the local-first helper and explicit proxy consent. Resolve planning approval conflicts and retain specialized evaluation, triage, and freeze guidance without loading it for every task.
2026-09-06 09:44:04 +08:00
Tw93 2182692c87 Merge commit '90a5d371a968416b5e02a5e47995d60d2045be85' 2026-09-05 15:47:12 +08:00
Tw93 f23de0ab59 fix: preserve author emotion when polishing prose
Treat feelings and convictions as substantive content, remove mechanical trimming quotas, and keep bilingual repository edits scoped to the requested prose and delivery.
2026-09-05 15:42:30 +08:00
Tw93 90a5d371a9 docs: strengthen multilingual copy review safeguards
Distinguish native voice from factual and structural correctness, track complete reading coverage, and keep review examples inert. Mirror the guidance for plugin installs.
2026-09-05 15:41:06 +08:00
youxi798 cf5cf04bc7 feat: add Simplicity Gate to think before plan approval
Codex high-reasoning runs tend to over-design; this triggered gate
forces minimal-path, defensive-layer, and surface-delta checks before
the user approves a plan.
2026-09-03 20:25:23 +08:00
Klee 5690c94f95 Merge pull request #82 from BiBoyang/check-approach-review
feat: check - question the approach before listing patches
2026-09-03 20:23:43 +08:00
Klee fbbfab8472 Merge pull request #80 from liby/bugfix/avoid-credential-value-output
fix(health): keep credential values out of audit output
2026-09-03 20:23:36 +08:00
youxi798 610b53a4cc chore: release v3.35.0 2026-09-02 23:22:08 +08:00
youxi798 43dfe77ff0 fix: close review findings before v3.35.0
Semicolons were allowed by write's Hard Rule and banned by the Chinese
catalog; the ui direction lock put the author's other products ahead of
the current product's own tokens; check pointed at a rules file direct
installs do not ship and carried its ledger rule three times; health
cited a renamed step; hunt lost the clause that a symptom the reporter
waves off still counts; the write-zh-prose stub had no loader. Also
restores pwd-before-first-write and command-sourced versions inside the
existing anti-pattern rows instead of new ones.
2026-09-02 23:22:08 +08:00
youxi798 0d7ff0bfa7 chore: regenerate plugin mirrors 2026-09-02 22:38:48 +08:00
youxi798 6150c5938a refactor: consolidate the write skill catalogs
write-zh-prose and write-zh-bilingual were hand-synced second copies
of write-zh, SKILL.md carried five encodings of the no-changes-list
rule and verbatim copies of three references, four relative paths and
the punctuation script name were wrong, and pattern numbering skipped
22. Folds the metaphor-scaffolding words and 结果: lead-ins into the
existing patterns. Merged 21, deleted 38.
2026-09-02 22:38:48 +08:00
BiBoyang 7c4baacc5f feat: check - question the approach before listing patches 2026-09-01 23:39:04 +08:00
Bryan Lee a628eaa0b7 fix: keep credential values out of health output
Use presence-only MCP checks and redact namespaced, quoted, and CLI-style
assignments while preserving non-credential telemetry.
2026-08-30 05:39:29 +08:00
Tw93 9fbf0ab2e3 fix: reduce health audit false positives 2026-08-29 10:33:04 +08:00
Tw93 831d9b96d8 chore: release v3.34.1
Synchronize generated distribution metadata and installer defaults with the patch release.
2026-08-23 21:54:06 +08:00
Tw93 2736394297 fix: tighten check delivery receipts
Freeze queue identity across triage and verify the named service account before the first remote write, then refresh generated plugin mirrors.
2026-08-23 21:40:46 +08:00
Tw93 3f135d26da fix: harden dependency review evidence 2026-08-15 21:39:32 +08:00
Tw93 db500d760f fix(health): ground audits in verifier evidence 2026-08-15 13:06:41 +08:00
Tw93 24b8eecf1e fix(write): ground release notes in shipped outcomes
Use the exact candidate artifact as the copy boundary and let distinct user outcomes determine note length. Keep technical vocabulary audience-dependent and lock the contract with focused tests.
2026-08-09 21:48:46 +08:00
Tw93 fb4e1d3118 docs: name internal vocabulary as a release-note smell
The existing rule banned implementation detail and illustrated it with a
code symbol, so it did not catch the other half: a term coined inside the
project's own rules reads as jargon to anyone who has never opened them.
Writing the release note for v3.34.0 hit this twice, once as shell
mechanics and once as a rule name, with the rule already loaded.

Ordering gets the same treatment. Sorting purely by user impact put an
installer fix first because a broken install is the worst outcome, but a
reader came for the skills, so the product's own domain leads and
plumbing trails.
2026-08-08 11:48:30 +08:00
Tw93 422ef46bf8 chore: release v3.34.0
Bumps VERSION and regenerates the marketplace metadata, the Codex plugin
manifest, the package version, and both installer WAZA_REF defaults.
2026-08-08 11:30:54 +08:00
Tw93 03d5cfd7c8 feat: name the speaker and close three ship-time gaps
A week of chat-log retro surfaced four rules the skills were missing.

write: prose that reads smooth but could have been written by anyone has
already failed. Naming the speaker as the target absorbs the old
voice-preservation bullet instead of sitting beside it.

hunt: a guard that refuses has a set of causes, not one, so shipping the
reproduced cause queues the rest up for later releases. Two more rows
cover trusting the user's count over the log, and confirming the run
surface offers a capability before patching it.

check: a standing release authorization does not cover findings the same
run discovered after it was given.

ui: taste-level decisions cost less as two labeled candidates than as one
landed guess.
2026-08-08 11:05:50 +08:00
Tw93 2727a1ed18 docs: capture the installer failure-path rules
check gains two review surfaces it did not cover. Non-atomic replacement:
writing straight to a path the user already has means a failed transfer
leaves them a corrupt file and no original, and staging alone still misses
the signal path. PR triage: a fork PR whose workflows never ran shows zero
check runs and a non-green status, which reads like a failure but means
nothing was verified.

The Waza invariant names setup-rule.sh and setup-statusline.sh as mirrors
so a future change to one does not skip the other.
2026-08-07 22:46:59 +08:00
Tw93 8c1fd38a40 feat: gate write on material count and name the pivot move
The Chinese prose rules caught AI taste sentence by sentence but had no
check on whether a draft had anything to say. Long-form generation could
hit a word count by explaining three ideas from four angles and pass every
existing rule. Add a material gate to Hard Rules: count what you hold
before choosing a length, and resolve a shortfall by researching, asking
up to three questions, or shipping shorter.

The pivot pattern was encoded as a string list ("不是...而是..."), which a
model routes around by changing the wording. Reframe it as 翻案腔, the
rhetorical move of erecting a misunderstanding the reader does not have
and then overturning it, with the disguises listed as examples. This folds
in 专家腔 5, which covered the same ground.

Also fills the Chinese word-order gap (long modifiers stacked before the
noun), adds two measurable model-tone signals (uniform sentence length,
connective density), and generalizes three existing entries rather than
appending new ones. Net 41 added, 32 removed.
2026-08-07 19:34:11 +08:00
Tw93 a1520c290e feat: add the motion decision layer ui was missing
The skill covered how to animate (curves, transform/opacity only, interruptible
transitions, stagger, press scale) but never whether to. Frequency is the test
it lacked: a keyboard-initiated action, or anything triggered hundreds of times
a day, reads motion as lag and should get none. Pair it with a duration table
per element, because the reflex answer is otherwise 300ms for everything.

Turn the blanket bounce ban into a conditional one. Motion a finger or pointer
is still driving reads as physical with a small bounce; the absolute ban made
the rule wrong for drag-to-dismiss and press-and-hold, which is where the
exception actually lives.

Add references/design-native-motion.md, reached from the existing native-app
branch. The judgment transfers to SwiftUI and Compose but the idioms do not,
and the platform defaults pull the wrong way: a symmetric ease-in-out as the
reflex curve and no pressed state at all.
2026-08-02 23:53:14 +08:00
Tw93 663f27eb13 chore: prepare v3.33.0
Advance the lock-step version and installer refs so every marketplace and package surface resolves to the same stable release.
2026-08-01 23:54:34 +08:00
Tw93 2fccfa9d5b fix: close ui behavior contract gaps
Align overlapping UI modes and clarification lifecycles, then validate Markdown fragments across source and packaged surfaces so compatibility links cannot drift silently.
2026-08-01 23:51:55 +08:00
Tw93 b1a8c8f8c0 refactor: make ui direction inference evidence-first
Infer visual direction from the current product and references before asking. Keep the old aesthetic guide as a tested compatibility map so canonical UI rules cannot drift across duplicate files.
2026-08-01 23:20:47 +08:00
Tw93 18633a3de1 refactor: load review patterns on demand 2026-08-01 22:42:09 +08:00
Tw93 7a9a4f5371 fix: harden health audit signals 2026-08-01 22:42:04 +08:00
Tw93 0a66c49fd5 feat: improve health context evidence 2026-08-01 22:42:00 +08:00
Tw93 b6a26fc3af fix: strengthen skill behavior contracts 2026-08-01 20:55:16 +08:00
Tw93 b16c3d3063 fix: continue past invalid Python candidates 2026-08-01 18:41:58 +08:00
Tw93 e9b07d23c5 fix: verify Windows Python interpreter identity 2026-08-01 18:39:22 +08:00
Tw93 dd083de2b9 fix: correct Windows launcher test environment 2026-08-01 18:36:35 +08:00
Tw93 2492ceed41 fix: translate Windows runtime paths for Git Bash 2026-08-01 18:33:13 +08:00
Tw93 8f9608cac4 fix: preserve health runtime across Windows 2026-08-01 18:29:14 +08:00
Tw93 64814e710d fix: close health launcher bypasses 2026-08-01 18:24:26 +08:00
Tw93 0a5623c40d fix: harden report-only audit boundaries 2026-08-01 18:24:22 +08:00
Tw93 95b7d7426d fix: harden health audit safety checks
Redact incomplete secrets and private keys fail-closed, include project Codex skills, avoid basename ownership collisions, and distinguish executable wrappers from ordinary shell arguments.

Regression tests cover the original false positives, wrapper bypasses, redaction leaks, project skill discovery, and ownership collisions.
2026-08-01 10:12:55 +08:00
Tw93 d9d0fe2656 fix(package): close packaged runtime references 2026-08-01 10:00:36 +08:00
Tw93 93305b4edf fix(health): harden agent audits and action boundaries 2026-08-01 10:00:36 +08:00