Merge pull request #68 from olehsvyrydov/chore/release-5.3.0

Cut 5.3.0: the language-skill release

Author: olehsvyrydov

CHANGELOG.md

@@ -4,11 +4,19 @@ This file records all notable changes to the project. Versioning roughly follows
 
 ## [Unreleased]
 
+## [5.3.0] — 2026-08-09
+
+Language expertise becomes a first-class layer. Four knowledge skills — Rust, SQL, Java,
+TypeScript — auto-load from context whenever their language is being written, instead of
+waiting for a role command; the architect gains the deliverables that put failure modes and
+test cases on paper before implementation; and the gates that used to be run by hand now run
+in CI. New capability plus one removal whose replacement ships in the same release, so a
+minor bump per the versioning note below.
+
 ### Added
 - **Language skills: `rust` and `sql`** (`claude/skills/development/languages/`) — a deliberate amendment to "stacks are references". References never auto-load, and language standards must apply whenever that language is being written, with no role command invoked — so language expertise becomes a first-class skill whose frontmatter description triggers from context (a `.rs` file, a migration, an embedded query). No persona and no slash command; `/be`, `/dba`, `/rev` and `/arch` route into the one copy. Rust carries checked-in toolchain/lint/deny policy, ownership-driven architecture (core crate + thin shells, state machines, newtypes), the error doctrine with a failure-table method, tokio task ownership and cancellation, rusqlite embedding, deterministic testing (fixtures that refuse real credentials), boundary security, and a reviewer pass. SQL carries parameterized-only, versioned migrations with expand-migrate-contract, EXPLAIN-before-merge, a scratch-container empirical check, dialect branches for PostgreSQL 18, MySQL 8.4/9.7, Oracle 26ai and SQLite, and a reviewer pass.
 - **Language skills: `java` and `typescript`** — the second pair, targeting JVM and Node/browser work. Java carries record/sealed-type modelling with exhaustive switches, JSpecify `@NullMarked` + NullAway as a build error, immutability doctrine, the JEP-491-corrected virtual-thread guidance, ScopedValue over ThreadLocal, ArchUnit rules as the executable form of approved boundaries, PIT mutation thresholds, Testcontainers-first integration testing, and boundary security — with complete Gradle/Maven wiring in a build-and-quality-gates reference. TypeScript carries the strictest-profile checked-in tsconfig, discriminated unions with exhaustiveness, branded types, parse-don't-validate with Zod at every I/O edge (env read in exactly one module), ESM/package discipline, typescript-eslint with the promise rules as errors, and Vitest/MSW/fast-check testing — with complete checked-in templates. The backend role's `java-expertise.md` splits: the language half moves to the `java` skill, the Spring half stays and gains a Spring Boot 4 standards block; the frontend role's React reference points its language-level TypeScript section at the `typescript` skill.
 - **`/arch` design-for-predictability reference** — the ARCH_APPROVED deliverables that make reviews find decisions instead of surprises, produced before implementation: boundary contract sheets (where the Done rule's named enforcing symbols are born), state tables with no blank cells, lightweight FMEA over a fixed failure-class checklist, a test-case table whose negative rows must at least match its positive rows, blast-radius notes for shared contracts, and declared extension points. Proportional: contract sheet + test-case table on the standard track, all six on full.
-
 - **CI.** The skills here are markdown: nothing compiles and no test suite runs, so a defect stays invisible until someone reads the exact line. Every gate was previously run by hand, which means it was run when someone remembered — and the record of what shipped was reconciled against the tree only after it had drifted nine behind. Three jobs now run on every pull request: `scripts/validate-framework.py`, `claude plugin validate` (which needs no credentials), and `install.sh --dry-run --editors=all`.
 - **`scripts/validate-framework.py`** — seven gates, each covering something that has actually broken in this repository: a `SKILL.md` whose frontmatter does not parse and therefore loads with empty metadata and can never auto-trigger; malformed plugin JSON, or a `version` key reappearing where it is omitted on purpose; a documented count that no longer matches the tree; a relative link pointing at nothing; a credential-shaped file being tracked in a public repository; a reference to a mechanism that was removed; and a backend product named inside a skill rather than in its adapter reference. Every gate was verified to fail on its own defect and pass when clean, because a gate that cannot fail is decoration.
 

CLAUDE.md

@@ -100,8 +100,8 @@ Gates fire **proportionally** (by change-class / trigger / preset) via the `work
 
 ## Version
 
-- **Version**: 5.2.0 (see `CHANGELOG.md`)
-- **Release Date**: 2026-08-03
+- **Version**: 5.3.0 (see `CHANGELOG.md`)
+- **Release Date**: 2026-08-09
 - **Distribution**: Claude Code plugin (preferred; `version` omitted so the commit SHA is the version) or the universal `install.sh` for Cursor / Kiro / VS Code
 - **Skills**: 42 (15-agent core team + optional specialists + auto-loading language skills + cross-cutting process skills; frameworks as references)
 - **Commands**: 50 slash commands

README.md

@@ -516,6 +516,7 @@ See [`CHANGELOG.md`](CHANGELOG.md) for full details.
 
 | Version | Date | Changes |
 |---------|------|---------|
+| 5.3.0 | 2026-08-09 | **Language skills** — Rust, SQL (Postgres/MySQL/Oracle/SQLite), Java, TypeScript as auto-loading knowledge skills with reviewer passes; `/arch` design-for-predictability deliverables (contract sheets, state tables, FMEA, test-case-first); CI runs the framework gates on every PR |
 | 5.2.0 | 2026-08-03 | **Plugin distribution** (`claude/` is the plugin root; SHA is the version); `ai-dev-team` contract skill + `pull-request` skill; `/kai` re-based on human-approved rules from any backend; `/retro` removed; `/sm` re-scope wired to its triggers; root `AGENTS.md` untracked |
 | 5.1.0 | 2026-06-14 | Reference libraries (ai-engineer, architect, data/mlops/dba); /tw + /mlops wired up; roster reconciled to core 15; knowledge-backend naming generalized; DART dashboard + RAG subsystem + migration scripts removed |
 | 5.0.0 | 2026-06-06 | **OSS-first release** — proportional workflow engine, 48→29 roster, universal multi-editor installer, pluggable adapters |