feat: 发布 DevOpsFlow 0.2.16

Author: TrueNine

.agents/plugins/marketplace.json

@@ -1,11 +1,11 @@
 {
-	"name": "devflow-skills",
+	"name": "devopsflow",
 	"interface": {
-		"displayName": "DevFlow Skills"
+		"displayName": "DevOpsFlow"
 	},
 	"plugins": [
 		{
-			"name": "devflow-skills",
+			"name": "devopsflow",
 			"source": {
 				"source": "local",
 				"path": "."

.codex-plugin/marketplace.json

@@ -1,11 +1,11 @@
 {
-	"name": "devflow-skills",
+	"name": "devopsflow",
 	"interface": {
-		"displayName": "DevFlow Skills"
+		"displayName": "DevOpsFlow"
 	},
 	"plugins": [
 		{
-			"name": "devflow-skills",
+			"name": "devopsflow",
 			"source": {
 				"source": "local",
 				"path": "."

.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
-	"name": "devflow-skills",
-	"version": "0.2.15",
-	"description": "DevFlow engineering workflow skills for Codex: routing, DDD, TDD, planning, execution, debugging, review, verification, and branch finishing.",
+	"name": "devopsflow",
+	"version": "0.2.16",
+	"description": "DevOpsFlow engineering workflow skills for Codex: routing, DDD, TDD, planning, execution, debugging, review, verification, and branch finishing.",
 	"composerIcon": "./assets/app-icon-small.svg",
 	"logo": "./assets/app-icon.png",
 	"author": {
@@ -15,9 +15,9 @@
 	"skills": "./skills/",
 	"hooks": "./hooks/hooks.codex.json",
 	"interface": {
-		"displayName": "DevFlow Skills",
+		"displayName": "DevOpsFlow",
 		"shortDescription": "Engineering workflow skills for Codex",
-		"longDescription": "DevFlow Skills provides a composable Codex workflow for routing engineering requests, DDD modeling, TDD handoff, implementation planning, execution, debugging, review, verification, and branch finishing.",
+		"longDescription": "DevOpsFlow provides a composable Codex workflow for routing engineering requests, DDD modeling, TDD handoff, implementation planning, execution, debugging, review, verification, and branch finishing.",
 		"developerName": "LiTeXz",
 		"category": "Developer Tools",
 		"capabilities": ["Interactive", "Read", "Write"],

.github/workflows/version-check.yml

@@ -3,6 +3,7 @@ name: Version Check
 on:
   push:
     branches: [main]
+    tags: ["v*"]
   pull_request:
     branches: [main]
 
@@ -20,10 +21,10 @@ jobs:
           PKG_VERSION=$(bun -e "console.log(require('./package.json').version)")
           PLUGIN_VERSION=$(bun -e "console.log(require('./.codex-plugin/plugin.json').version)")
           if grep -q '^version[[:space:]]*=' agents/df-publisher.toml; then
-            echo "::error::agents/df-publisher.toml must not use top-level version = because Codex agent TOML reserves that field; use # devflow-version = \"...\" instead"
+            echo "::error::agents/df-publisher.toml must not use top-level version = because Codex agent TOML reserves that field; use # devopsflow-version = \"...\" instead"
             exit 1
           fi
-          AGENT_VERSION=$(grep '^#[[:space:]]*devflow-version[[:space:]]*=' agents/df-publisher.toml | head -1 | sed 's/.*"\(.*\)"/\1/')
+          AGENT_VERSION=$(grep '^#[[:space:]]*devopsflow-version[[:space:]]*=' agents/df-publisher.toml | head -1 | sed 's/.*"\(.*\)"/\1/')
 
           echo "package.json:       $PKG_VERSION"
           echo "plugin.json:        $PLUGIN_VERSION"
@@ -37,6 +38,13 @@ jobs:
             echo "::error::package.json ($PKG_VERSION) != agents/df-publisher.toml ($AGENT_VERSION)"
             exit 1
           fi
+          if [ "${GITHUB_REF_TYPE:-}" = "tag" ]; then
+            EXPECTED_TAG="v${PKG_VERSION}"
+            if [ "$GITHUB_REF_NAME" != "$EXPECTED_TAG" ]; then
+              echo "::error::package.json version requires tag ${EXPECTED_TAG}, received ${GITHUB_REF_NAME}"
+              exit 1
+            fi
+          fi
 
           echo "All versions aligned: $PKG_VERSION"
       - name: Check managed Codex asset hash
@@ -56,6 +64,7 @@ jobs:
             exit 1
           fi
       - name: Check managed Codex assets on version tag
+        if: github.ref_type == 'tag'
         run: |
           set -euo pipefail
           VERSION=$(bun -e "console.log(require('./package.json').version)")

.opencode/plugin/devflow-skills.ts .opencode/plugin/devopsflow.ts.opencode/plugin/devflow-skills.ts renamed to .opencode/plugin/devopsflow.ts

@@ -11,11 +11,11 @@ interface OpenCodePluginInput {
 
 function writeBlockMessage(reason: string): void {
 	process.stderr.write(
-		`DevFlow 已阻止 OpenCode 工具调用。\n原因：${reason}。\n`,
+		`DevOpsFlow 已阻止 OpenCode 工具调用。\n原因：${reason}。\n`,
 	);
 }
 
-export default async function devflowSkillsOpenCodePlugin(
+export default async function devopsflowOpenCodePlugin(
 	pluginInput: OpenCodePluginInput = {},
 ) {
 	return {

README.md

@@ -1,17 +1,17 @@
-# DevFlow Skills
+# DevOpsFlow
 
-DevFlow Skills 是一组面向 Codex 的工程工作流 skills，并提供 OpenCode 兼容适配。它把 DDD、Glue Coding、TDD、计划、执行、调试、评审、验证和分支收尾组织成一套可组合的强制工作流。
+DevOpsFlow 是一组面向 Codex 的工程工作流 skills，并提供 OpenCode 兼容适配。它把 DDD、Glue Coding、TDD、计划、执行、调试、评审、验证和分支收尾组织成一套可组合的强制工作流。
 
 插件还包含一个保护分支 hook：在 `main`、`dev`、`develop`、`devlop`
 等常见集成分支上启动会话时提醒切换新分支；在这些分支上拦截写文件、
 修改索引、提交、重置、依赖安装和直接 push 等污染操作，并提示改用新分支
 和 PR 流程。Codex hook 配置位于 `hooks/hooks.codex.json`，并由
-`.codex-plugin/plugin.json` 声明为插件 companion；OpenCode 本地插件入口位于 `.opencode/plugin/devflow-skills.ts`。
+`.codex-plugin/plugin.json` 声明为插件 companion；OpenCode 本地插件入口位于 `.opencode/plugin/devopsflow.ts`。
 另有 main Codex session 禁写 hook：所有分支上 main Codex session 只能协调、审查和验证，代码写入必须交给 Codex worker session 或兼容适配器识别的写入会话。
 
 ## 重要：必须开启 Plan 模式
 
-使用 DevFlow Skills 前，请先在 Codex 中开启 Plan 模式。
+使用 DevOpsFlow 前，请先在 Codex 中开启 Plan 模式。
 
 这些 skills 依赖“先澄清、先建模、先计划、再执行”的工作方式。尤其是 DDD、TDD、实现计划、调试和评审流程，如果没有先进入 Plan 模式，Codex 很容易被用户的数据表、CRUD 页面、零散实现要求带偏，直接进入编码或一次性输出未经确认的设计。
 
@@ -22,7 +22,7 @@ DevFlow Skills 是一组面向 Codex 的工程工作流 skills，并提供 OpenC
 3. 按 skill 要求完成确认、建模或计划。
 4. 用户确认后再进入实现、验证、提交或 PR。
 
-不要把 Plan 模式当成可选步骤；它是 DevFlow 工作流的入口保护。
+不要把 Plan 模式当成可选步骤；它是 DevOpsFlow 工作流的入口保护。
 
 ## 安装为 Codex Plugin
 
@@ -50,8 +50,8 @@ codex-plugin marketplace manifest 保留为兼容副本。两个 marketplace man
 
 ```bash
 codex plugin marketplace add LiTeXz/devflow-skills
-codex plugin marketplace upgrade devflow-skills
-codex plugin add devflow-skills@devflow-skills
+codex plugin marketplace upgrade devopsflow
+codex plugin add devopsflow@devopsflow
 ```
 
 安装完成后，重开 Codex 线程以加载新的 plugin skills 和 hook。
@@ -64,22 +64,22 @@ codex plugin add devflow-skills@devflow-skills
 
 ```bash
 codex plugin marketplace add .
-codex plugin list --marketplace devflow-skills
-codex plugin add devflow-skills@devflow-skills
+codex plugin list --marketplace devopsflow
+codex plugin add devopsflow@devopsflow
 ```
 
 </details>
 
 ## 本地安装为 OpenCode Plugin
 
-OpenCode 当前按本地 checkout 使用。仓库已提供 `.opencode/plugin/devflow-skills.ts`，从仓库根目录启动 OpenCode 时会自动发现该插件；在其他项目中使用时，可在目标项目的 `opencode.json` 中引用本仓库插件并加载 skills：
+OpenCode 当前按本地 checkout 使用。仓库已提供 `.opencode/plugin/devopsflow.ts`，从仓库根目录启动 OpenCode 时会自动发现该插件；在其他项目中使用时，可在目标项目的 `opencode.json` 中引用本仓库插件并加载 skills：
 
 ```json
 {
   "$schema": "https://opencode.ai/config.json",
-  "plugin": ["/absolute/path/to/devflow-skills/.opencode/plugin/devflow-skills.ts"],
+  "plugin": ["/absolute/path/to/devopsflow/.opencode/plugin/devopsflow.ts"],
   "skills": {
-    "paths": ["/absolute/path/to/devflow-skills/skills"]
+    "paths": ["/absolute/path/to/devopsflow/skills"]
   }
 }
 ```
@@ -111,7 +111,7 @@ OpenCode 插件会复用同一套保护规则：main Codex session 禁写、兼
 ```text
 .codex-plugin/plugin.json
 .codex-plugin/assets/
-.opencode/plugin/devflow-skills.ts
+.opencode/plugin/devopsflow.ts
 assets/
 hooks/
 scripts/
@@ -129,18 +129,18 @@ bunfig.toml
 
 ## Project-Owned Style Packs
 
-DevFlow can use project-owned style packs after the business design is clear. A style pack is not a shared DevFlow template; it is repository-owned material that helps agents preserve local implementation style through rules, golden examples, anti-patterns, and review checklists.
+DevOpsFlow can use project-owned style packs after the business design is clear. A style pack is not a shared DevOpsFlow template; it is repository-owned material that helps agents preserve local implementation style through rules, golden examples, anti-patterns, and review checklists.
 
 Project-owned style packs have one default discovery location:
 
 ```text
-.devflow/style-pack/
+.devopsflow/style-pack/
 ```
 
 Recommended shape:
 
 ```text
-.devflow/style-pack/
+.devopsflow/style-pack/
   <style-pack-name>/
     .pack.toml
     rules.md
@@ -151,7 +151,7 @@ Recommended shape:
 
 `.pack.toml` describes metadata such as scope, applicable task types, primary examples, verification commands, review checks, and known exclusions.
 
-Use style packs with `df-glue-coding` after DDD, CQRS, API, security, validation, and persistence constraints are already respected. Keep project-specific examples in the project repository, not in this public DevFlow repository.
+Use style packs with `df-glue-coding` after DDD, CQRS, API, security, validation, and persistence constraints are already respected. Keep project-specific examples in the project repository, not in this public DevOpsFlow repository.
 
 ## 开发
 
@@ -187,6 +187,12 @@ DDD 设计校验回归：
 bun test skills/df-ddd-event-storming-design/scripts/
 ```
 
+IAM 授权标识符校验回归：
+
+```bash
+bun test skills/df-iam-access-control-design/scripts/
+```
+
 Hook 回归：
 
 ```bash

agents/df-publisher.toml

@@ -1,12 +1,12 @@
-# devflow-version = "0.2.15"
+# devopsflow-version = "0.2.16"
 name = "df-publisher"
 description = "唯一被授权执行 git 和 gh 命令的 Codex worker session。负责提交、推送、PR、合并、发布等全部 git/github 操作。遵守保护分支规则。"
 nickname_candidates = ["df-publisher", "publisher"]
 
 developer_instructions = """
 ## 角色定义
 
-你是 df-publisher，DevFlow 插件中唯一被授权执行 git 和 gh 命令的 Codex worker session。
+你是 df-publisher，DevOpsFlow 插件中唯一被授权执行 git 和 gh 命令的 Codex worker session。
 所有其他会话（main Codex session 和普通 Codex worker session）均被禁止执行发布类 git/gh 命令，必须委托给你完成。
 
 ## 职责范围

assets/app-icon-small.svg

@@ -6,7 +6,7 @@
 					{
 						"type": "command",
 						"command": "PLUGIN_ROOT=\"${PLUGIN_ROOT}\" bun \"${PLUGIN_ROOT}/skills/df-codex-assets/scripts/df-codex-assets.ts\" hydrate",
-						"statusMessage": "devflow-skills: ensuring df-publisher agent toml exists"
+						"statusMessage": "devopsflow: ensuring df-publisher agent toml exists"
 					}
 				]
 			}

hooks/hooks.codex.json

@@ -1,13 +1,13 @@
 {
-	"name": "devflow-skills",
-	"version": "0.2.15",
+	"name": "devopsflow",
+	"version": "0.2.16",
 	"type": "module",
 	"private": true,
 	"scripts": {
 		"check:skill-metadata": "bun scripts/check-skill-metadata.ts",
 		"test": "bun test",
 		"test:hooks": "bun test scripts/",
-		"test:validators": "bun test skills/df-tdd-skill/scripts/ skills/df-ddd-event-storming-design/scripts/",
+		"test:validators": "bun test skills/df-tdd-skill/scripts/ skills/df-ddd-event-storming-design/scripts/ skills/df-iam-access-control-design/scripts/",
 		"typecheck": "bunx tsc --noEmit",
 		"lint": "bunx biome check ."
 	},