# Clavue v8.10.15 — Website / Marketing Update Pack

**Audience**：clavue.com 的内容维护者 / marketing。
**目标**：把 8.10.15 的三个命令升级（`/permissions` / `/review` / `/retro`）更新到首页、changelog、docs。
**约束**：本仓库不含网站源码（见 `docs/website-content-recommendations.md`）。这份文档把所有"可粘"内容打包好。

---

## 1. 首页改动建议

### 1.1 顶部 banner / hero 副标题

替换或新增：

> **v8.10.15** — `/permissions` 改为 Codex 风格 3 选项（Default / Auto-review / Full Access），选 Full Access 后不再被 `Permission rule Bash(...) requires confirmation` 弹窗打断。`/review` 改为本地 codex-review 6 段 closeout（自定义 provider 用户也能直接用）。`/retro` 加 round 5：把多轮发现 roll up 成 PRODUCT.md / ARCHITECTURE.md 的提议（不自动应用，留人类审过）。

CTA 链接到 changelog 锚点 `#8-10-15`。

### 1.2 "新功能 / 新修复" 卡片

新增 3 张：

**卡 1: `/permissions` 简化为 3 个直接选项**

- 标题：Codex-style permission picker · 3 choices, no more friction
- 副标题：Default / Auto-review / Full Access. 选 Full Access 后弹一次不可逆动作清单确认，确认后整个会话不再被 `Permission rule Bash(...) requires confirmation` 打断。旧的 7 选项搬到 "More options…" 二级菜单。`autonomous` / `trusted-ops` / `setup` 等旧别名全部保留。
- 数据点：用户痛点 — 在 `git push clavue v8.10.14` 时遭遇 `Permission rule Bash(mao delivery gate) requires confirmation` 弹窗 → 8.10.15 后选 Full Access 一次到位。
- 链接：`/docs/changelog#8-10-15`

**卡 2: `/review` 不再依赖远端服务**

- 标题：Local closeout review · works on any provider
- 副标题：之前 `/review` 是单薄的通用 PR 模板，深度 review 路径 `/ultrareview` 只对 Anthropic CCR 用户开放。8.10.15 把 `/review` 重写为 codex-review 风格的 6 段 closeout（Contract / Pick Target / Parallel Closeout / Context Efficiency / Helper / Final Report），4 种 target（uncommitted / branch vs main / single commit / PR#），明确禁止"换模型 chase 更好的 review 文案"，自定义 provider 用户现在也能直接用。
- 链接：`/docs/changelog#8-10-15`

**卡 3: `/retro` 把发现 roll up 成 doc 提议**

- 标题：Retro round 5 — propose PRODUCT.md / ARCHITECTURE.md edits, don't apply silently
- 副标题：参照 Karpathy `autoresearch` 的"人改 program.md，agent 改 train.py"分工，retro 现在明示 PRODUCT.md / ARCHITECTURE.md 是 program.md 等价物。新增 round 5 在至少 3 轮 patrol 后产出提议的文档 diff，但**不自动应用** — 让 loop 产出证据 + 提议，doc-level 变更由人审。
- 链接：`/docs/changelog#8-10-15`

---

## 2. Changelog 页（/changelog 或 /releases）

把以下 markdown 块直接 append 到 changelog 页顶部：

```markdown
## v8.10.15 — 2026-05-15

### Changed
- **`/permissions` 简化为 Codex 风格 3 选项**：Default（Clavue 在工作区读写 + 跑命令；外网/工作区外文件需批准）/ Auto-review（同 Default，eligible on-request 操作通过 auto-review 不再询问）/ Full Access（修改工作区外文件 + 外网 + SSH/部署/发布命令全程不询问）。旧的 4 个 status/rules 入口移到 "More options…" 二级菜单。选 Full Access 弹一次不可逆动作清单确认。所有旧 alias（`autonomous` / `trusted-ops` / `setup` / `zero-config` / `ccjk` / `zc` / 等）继续命中各自的 preset；新增 `default` / `auto-review` / `full-access` 别名。
- **`/review` 改为本地 codex-review 6 段 closeout**：从 32 行通用模板升级为 Contract / Pick Target / Parallel Closeout / Context Efficiency / Helper / Final Report 6 段。4 种 target 模式（uncommitted / branch vs main / single commit / PR#）。明确禁止"为了更好的 review 文案换模型"；权限不够走 `/permissions full-access` 而非换模型；干净退出时打印 `review clean: no accepted/actionable findings reported` 这个 grep-friendly 字面量。`/ultrareview` 远端路径不变。
- **`/retro` 新增 Round 5: Rollup and PRODUCT/ARCHITECTURE update proposal**：在至少 3 轮 patrol 后，产出 `<run_tag>-round-5-rollup.md`，包含 keep/discard rollup（引用 `.clavue/retro/results.tsv` 行）+ 提议的 PRODUCT.md / ARCHITECTURE.md / clavue.md 编辑（具体 diff 或 "no change needed"）+ ≤3 open questions。明确**不自动应用** doc 编辑，保留"人改 program.md、agent 改 train.py"分工。Mission 段明示 PRODUCT.md / ARCHITECTURE.md 是 Karpathy `autoresearch` 里 `program.md` 的等价物。

### Added
- 新测试 `tests/review-command-local-prompt.test.mjs`：锁住 6 段结构、4 种 target 模式、never-switch-model 规则、`/permissions full-access` 引用、clean 退出字面量。
- `src/commands/review/reviewPrompt.ts`：抽出独立 prompt 模板，方便契约测试不用 bundle 整个 commands.ts 图。

### Tests
- 1301 tests / 1298 pass / 3 skipped / 0 fail（`npm run check`，~59s）

### Compatibility
- 所有旧 `/permissions` CLI 别名继续命中（autonomous / trusted-ops / setup / zero-config / ccjk / zc / autonomy / dev-autonomy / operator / deploy / release / init）。
- `/review` 仍是同名命令，CLI 形态不变；模板增厚不改入口。
- `/retro` 仍是同名命令，CLI 形态不变；prompt 增加 round 5，无破坏性变更。
- 直接从 8.10.14 升上来即可。

升级：

\`\`\`bash
npm install -g clavue@8.10.15
\`\`\`

完整发布说明：[docs/clavue-v8.10.15-release-notes.md](https://github.com/mycode699/clavue/blob/v8.10.15/docs/clavue-v8.10.15-release-notes.md)
```

---

## 3. Docs 页改动建议

### 3.1 在 `/docs/permissions` 加一节或新建页

```markdown
# /permissions — Codex-style three-choice picker

Clavue maps the three primary choices to internal presets:

| Picker choice | Internal preset | Default mode | What you get |
|---|---|---|---|
| Default | zero-config | acceptEdits | Read/edit in this workspace, run common commands. Internet & out-of-workspace files still ask. |
| Auto-review | autonomous | bypassPermissions + ask boundaries | Same workspace-write as Default; eligible on-request operations route through auto-review and proceed. Push / publish / rm still ask. |
| Full Access | trusted-operator | trustedOps | Edit out-of-workspace files, hit the internet, run SSH / scp / rsync / git push / npm publish / gh release **without asking**. Use only when explicitly authorized. |

Picking Full Access from the picker triggers a confirmation screen
listing the irreversible actions before installing. CLI form
`/permissions full-access` skips this confirmation (you already typed
the magic words).

Legacy aliases continue to work: `/permissions autonomous` →
Auto-review, `/permissions trusted-ops` → Full Access, `/permissions
setup` / `/permissions zero-config` → Default.

For per-mode coverage status or to edit individual rules, use
`/permissions` and pick "More options…".
```

### 3.2 在 `/docs/review` 加一节或新建页

```markdown
# /review — Local closeout (codex-review 6-section style)

`/review` runs locally and works on any provider — including custom
OpenAI-compatible gateways and self-hosted endpoints. It does not
depend on Anthropic CCR.

The prompt enforces six sections in order:

1. **Contract** — review output is advisory; reject speculative risks;
   never switch the model to chase nicer wording; permission/sandbox
   problems escalate via `/permissions full-access`, not by swapping
   models; never push just to make review easier.
2. **Pick target** — uncommitted (dirty), branch vs main (PR-shaped),
   single commit, or PR number. Don't force dirty mode if the working
   tree is clean.
3. **Parallel closeout** — format if needed, then run focused tests in
   parallel with the review.
4. **Context efficiency** — group findings into Accepted / Rejected
   with one-line reasons.
5. **Helper rules** — clean exit prints the literal `review clean: no
   accepted/actionable findings reported`.
6. **Final report** — fixed-shape block.

For deep ~10–20 minute remote bug hunts on Anthropic CCR, use
`/ultrareview` instead.
```

### 3.3 在 `/docs/retro` 加一节或新建页

```markdown
# /retro — Round 5: Rollup and PRODUCT / ARCHITECTURE proposal

`/retro` runs an autoresearch-style multi-round upgrade loop. After
at least three full patrol cycles (rounds 1–4) write rows to
`.clavue/retro/results.tsv`, round 5 produces
`.clavue/retro/plans/<run_tag>-round-5-rollup.md` with:

- One-paragraph keep/discard rollup (citing the relevant TSV rows).
- Single highest-leverage upgrade still pending.
- **Proposed `PRODUCT.md` edits** — concrete diffs or "no change
  needed".
- **Proposed `ARCHITECTURE.md` edits** — same shape.
- **Proposed `clavue.md` edits** — only if a convention got promoted
  or retired by this run.
- ≤ 3 open questions for the human owner.

`PRODUCT.md` and `ARCHITECTURE.md` are treated as the `program.md`
equivalents in Karpathy's `autoresearch` — human-owned steering
documents the agent reads, validates against, and **proposes** edits
to. Round 5 explicitly does not auto-apply these proposals; the loop
produces evidence and a proposal, the human approves the doc-level
change.
```

### 3.4 更新 `/docs/changelog` 页

把 §2 的 changelog 块直接贴顶部即可。

---

## 4. llms.txt / llms-full.txt

本次发布同时把这两份文件的版本字段同步到 8.10.15。如果网站直接消费这两份文件做发布版本声明，请确认拉取最新仓库内容。

---

## 5. Social / 短文案候选

> Clavue 8.10.15 把 `/permissions` 简化为 Codex 风格 3 选项（Default / Auto-review / Full Access），选 Full Access 后整个会话不再被 `Permission rule Bash(...) requires confirmation` 弹窗打断。同时 `/review` 改为本地 codex-review 6 段 closeout，自定义 provider 用户现在也能直接用。`/retro` 加 round 5 把发现 roll up 成 PRODUCT.md / ARCHITECTURE.md 的提议（不自动应用）。npm i -g clavue@8.10.15

> v8.10.15: `/permissions` becomes a 3-choice Codex-style picker (Default / Auto-review / Full Access) — pick Full Access once and the rest of your session is unblocked. `/review` is now a local codex-review-style 6-section closeout that works on any provider. `/retro` adds round 5: roll up findings into proposed PRODUCT.md / ARCHITECTURE.md edits without auto-applying.

---

## 6. 不要做的事

- **不要重写老 changelog 条目。** v8.10.4 / v8.10.13 / v8.10.14 等保持不动，只 append v8.10.15。
- **不要把 `/permissions` 的简化描述为"减少安全保障"** — 三档对应的内部 preset 不变，只是入口结构清晰。Full Access 多了一层二次确认屏，安全性反而更明确。
- **不要在公开文案里把 `/review` 描述为"取代 `/ultrareview`"** — 两者职责不同，`/review` 是本地 closeout，`/ultrareview` 是远端深度 bug hunt（仍然只在 Anthropic CCR 路径可用）。
- **不要在公开文案里说 `/retro` round 5 会自动更新 PRODUCT.md / ARCHITECTURE.md** — 这是 round 5 的明确反契约，要强调"产出提议、人类审批"。
