Skip to content

Superflow v0.5.17

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Oct 01:28
· 28 commits to main since this release
v0.5.17
e7bbf78

Superflow 0.5.17：逐入口执行证据与持久化验收修复

升级内容：0.5.16 → 0.5.17

升级摘要

修复测试报告有文件就通过、不同服务入口替代、零执行成功和历史汇总误判，让完整 SDD 交付可按用例复核。

主要更新

  • 每个 PASS 绑定本地执行凭证、原始输出、服务与路由、命令退出码和实际执行数；空文件、远端链接、SKIP 与入口错配不能交付。
  • 源码、构建产物与运行目标使用同一指纹；原始日志上下文不一致或同构建 ID 成败冲突会拒绝。
  • 持久化字段冻结同业务 ID 调用前后值及预期断言；结构存在、mock 参数与全 NULL 不再替代写入证据。精确 Mapper 与业务语义仍由独立评审核验。
  • 保留 PARTIAL 历史，以最终一致汇总决定完整交付；轻量文档不强加数据库要求。CLI、托管最终检查、Codex/Claude 安装脚本同源，更新记录正确版本并保留自定义状态。

验证结果

  • 98 个测试文件、690 项测试全部通过；Lint、构建、全局与托管设计门禁通过。
  • 严格 Skill 审计 16/16 合同、0 英文镜像缺口；npm 包内容检查通过。
  • 匿名双入口 HTTP + 临时 SQLite 回放：完整写入通过，漏写与入口替代拒绝；临时服务清理完成。
  • 隔离包安装：Codex/Claude × 中英文，4 次重复更新，自定义资产保留；安装版本正式 CLI 与 guard 正反例通过。

升级方式

npm install -g @chenmk/superflow@0.5.17 --registry https://registry.npmjs.org
superflow update --scope global --agent both

旧完整报告缺执行凭证时保留 PARTIAL，按冻结合同补齐受影响证据。更新后重启宿主会话加载新 Skill/Hook/MCP；哈希只证明身份，不保证日志防伪或业务正确性。

Upgrade Summary

Changes since 0.5.16: per-entry replayable evidence and persistence acceptance fixes in 0.5.17.

Highlights

  • Bind each PASS to raw execution, service/route, command exit/count and current source/build/runtime identity. Reject empty files, remote links, skipped or substituted entries.
  • Compare frozen persistence expectations with before/after values for the same business ID. Retain partial history without promoting incomplete delivery.
  • Use current-installation scripts across CLI, managed gates, Codex and Claude. Refresh deployment version metadata while preserving custom state.

Validation

  • 690 tests in 98 files, lint/build/design gates and 16/16 strict Skill contracts passed.
  • Anonymous HTTP/SQLite replay and repeated bilingual dual-host package installation covered successful and failing evidence, custom preservation and installed CLI/guard behavior.

Upgrade

Install @chenmk/superflow@0.5.17 from the official npm registry and run superflow update for the installed hosts. Restart the host to load updated Skills/Hooks/MCP. Legacy receipts remain partial until affected evidence is completed. Independent review still owns code semantics and evidence sufficiency.

Assets 2
Loading