Skip to content

release: 0.5.0 — stop spending Tier A on Skills that work - #1

Merged
Vieeeeeee merged 1 commit into
mainfrom
release/0.5.0
Aug 26, 2026
Merged

Vieeeeeee merged 1 commit into
mainfrom
release/0.5.0

Conversation

@Vieeeeeee

Copy link
Copy Markdown
Owner

第二轮对抗式审查的结果,这次瞄准体检报告本身。

在一个 213 个 Skill 的真实库上,体检提出 27 项「需要你判断」,其中 11 项讲的是没人加载的文件或别人的路径,而屏幕上唯一的按钮对它们一项都动不了。修完是 16 项。

修了什么

问题 证据
下划线目录名被报 Tier A cc_diary / tao_diary 等在用的 Skill 加载触发都正常,规则的前提不成立
回收站有一个断链就整体显示为空 statSync 跟随软链抛错,catch 把整份清单清零;实测 1 条 → 0 条
别人的绝对路径占用「需要你判断」 随第三方 Skill 装进来,改了下次更新覆盖,降为背景信息
.bak / .orig 副本被扫描 没有 Agent 加载它们;凭据扫描仍然覆盖
标了 fixable: true 却没有任何入口能修 改成 false,建议里直接给命令
prerelease 收不到正式版更新 isNewer("0.4.0-beta.1","0.4.0") 曾为 false
热榜一次限流残废七天 缺 seed 仓库的缓存改为 1 小时过期

行为变更

  • undo 在批量撤销前要求 --yes。 30 分钟内连续的 describe/categorize/note 共用一个备份会话,一次 undo 可能退掉几十条手写介绍;如果那批还创建了 overrides.json,反转会直接删掉文件,没有副本可恢复也没有 redo。原本数量是事后才打印的。
  • 发布包不再包含本地设计工作区。 files 从 web/ 收窄到 web/index.html,解包体积 11.2 MB → 315 kB。

报告界面重做

原本列表和按钮讲的是两件事却挤在一起(标题说 27 项、按钮说 2 条,中间没有分界)。现在拆成「可以一键处理」和「需要你自己处理」两段,并按规则归组——15 条同类折成一行,真正不同的那条才浮出来。

验证

  • npm test 98/98 通过
  • npm pack --dry-run:27 个文件,103.6 kB
  • 每条修复都在真实库上回归验证过(27→16 项、回收站 0→2 条、undo 拦截、版本比较)
  • Windows:CI 三个 Node 版本均绿,create-link + undo 往返测试无平台守卫,确实覆盖到了
  • 并发写:8 进程同时写,8 条全部保留,锁无残留

🤖 Generated with Claude Code

The health report was the loudest part of this tool and the least trustworthy.
On a real library of 213 Skills it raised 27 decisions; 11 of them were about
files nobody loads or paths belonging to other people, and the one button on
the screen could not act on any of them.

- Underscored directory names load and trigger normally. Reporting them as
  broken put the highest severity on Skills that work.
- The trash showed empty whenever one entry was a dangling link, because
  statSync followed the link and the throw emptied the whole listing.
- Somebody else's home path arrives inside a third-party Skill and cannot
  usefully be edited locally, so it belongs in the background notes.
- .bak and .orig copies are not loaded by any Agent; a path found in one is a
  note about a file nobody reads. Credential scanning still covers them.
- Findings nothing can act on no longer claim to be fixable, and now carry the
  command to run instead.

undo asks before reversing a batch. A run of describe/categorize/note inside
30 minutes shares one backup session, so a single undo could take back dozens
of hand-written blurbs — and when that batch created overrides.json, reversing
it removed the file with no copy to restore and no redo. It printed the count
afterwards; it now prints it first and waits for --yes.

The published package drops the local design workspace: files names
web/index.html rather than all of web/, taking the tarball from 11.2 MB
unpacked back to 315 kB.

Also: a prerelease is superseded by its own release, a leaderboard missing its
seed repositories expires in an hour rather than a week, both READMEs list the
mutating commands and how to stop the dashboard, and SKILL.md finally tells an
agent that remove/trash/link/unlink/update/backups/note exist.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@Vieeeeeee
Vieeeeeee merged commit 94934f2 into main Aug 26, 2026
9 checks passed
@Vieeeeeee
Vieeeeeee deleted the release/0.5.0 branch August 26, 2026 15:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant