release

/release - 发布工作流

以结构化方式准备发布，让交付更有信心。

使用场景

• “准备发布”
• “发布版本 X”
• “发布到生产环境”
• “创建一个发行版本”
• “准备部署”
• 任何生产环境部署之前

工作流概览

┌─────────┐    ┌─────────┐    ┌──────────────┐    ┌──────────┐    ┌─────────┐
│  aegis  │───▶│  atlas  │───▶│ review-agent │───▶│  herald  │───▶│  scribe │
│         │    │         │    │              │    │          │    │         │
└─────────┘    └─────────┘    └──────────────┘    └──────────┘    └─────────┘
  Security       E2E            Final              Version         Release
  audit          tests          review             bump            notes

Agent 执行顺序

#	Agent	职责	输出
1	aegis	安全漏洞扫描	安全报告
2	atlas	运行完整的 E2E 测试套件	测试报告
3	review-agent	最终发布审核	发布批准
4	herald	版本号升级，生成变更日志	更新后的版本文件
5	scribe	发布说明、文档	RELEASE.md、文档

为什么按此顺序？

1. 安全优先：在发布前发现漏洞
2. E2E 测试：验证整个系统端到端正常运行
3. 最终审核：由人工参与并批准
4. 版本号升级：仅在批准后进行
5. 文档：随附完善的发布说明

执行

阶段 1：安全审计

Task(
  subagent_type="aegis",
  prompt="""
  Security audit for release: [VERSION]

  Scan for:
  - Dependency vulnerabilities (npm audit, pip audit)
  - Hardcoded secrets/credentials
  - SQL injection, XSS, CSRF risks
  - Authentication/authorization issues
  - Insecure configurations

  Output: Security report with severity levels
  """
)

阶段 2：E2E 测试

Task(
  subagent_type="atlas",
  prompt="""
  Run E2E tests for release: [VERSION]

  Execute:
  - Full E2E test suite
  - Critical path tests
  - Integration tests
  - Performance benchmarks (if applicable)

  Output: Test report with pass/fail counts
  """
)

阶段 3：最终审核

Task(
  subagent_type="review-agent",
  prompt="""
  Final release review: [VERSION]

  Review:
  - Security audit results
  - E2E test results
  - Changes since last release (git log)
  - Breaking changes
  - Migration requirements

  Output: RELEASE_APPROVED or RELEASE_BLOCKED with reasons
  """
)

阶段 4：版本号升级与变更日志

Task(
  subagent_type="herald",
  prompt="""
  Prepare release: [VERSION]

  Tasks:
  - Bump version in package.json/pyproject.toml
  - Generate CHANGELOG.md entry
  - Update version constants in code
  - Tag commit (don't push yet)

  Follow semantic versioning.
  """
)

阶段 5：发布说明

Task(
  subagent_type="scribe",
  prompt="""
  Write release notes: [VERSION]

  Include:
  - Summary of changes
  - New features
  - Bug fixes
  - Breaking changes
  - Migration guide (if needed)
  - Contributors

  Output: RELEASE.md or update docs
  """
)

发布类型

主要版本（破坏性变更）

/release --major
→ Full workflow with migration guide

次要版本（新功能）

/release --minor
→ Full workflow, lighter security review

补丁版本（错误修复）

/release --patch
→ Security + tests + quick review

热修复

/release --hotfix
→ Expedited: aegis → atlas → herald

示例

User: /release v2.0.0

Claude: Starting /release workflow for v2.0.0...

Phase 1: Security audit...
[Spawns aegis]
✅ No critical vulnerabilities
⚠️ 2 low-severity issues (documented)

Phase 2: E2E tests...
[Spawns atlas]
✅ 156/156 E2E tests passing

Phase 3: Final review...
[Spawns review-agent]
✅ RELEASE_APPROVED
- 47 commits since v1.9.0
- 3 new features
- 12 bug fixes
- No breaking changes

Phase 4: Version bump...
[Spawns herald]
✅ Version bumped to 2.0.0
✅ CHANGELOG.md updated
✅ Git tag created

Phase 5: Release notes...
[Spawns scribe]
✅ RELEASE-v2.0.0.md created

┌─────────────────────────────────────────┐
│ Release v2.0.0 Ready                    │
├─────────────────────────────────────────┤
│ Security: ✅ Passed                     │
│ Tests: ✅ 156/156                       │
│ Review: ✅ Approved                     │
│                                         │
│ Next steps:                             │
│ 1. git push origin v2.0.0              │
│ 2. Create GitHub release               │
│ 3. Deploy to production                │
└─────────────────────────────────────────┘

阻止发布的情况

以下情况会导致工作流停止：

• 发现严重安全漏洞
• E2E 测试失败
• 审核结论为 RELEASE_BLOCKED

Phase 1: Security audit...
❌ CRITICAL: SQL injection in user.py:45

Release blocked. Fix critical issues before proceeding.

标志

• --major/--minor/--patch：语义化版本类型
• --hotfix：加速发布流程
• --skip-security：跳过安全审计（不建议）
• --dry-run：运行检查，但不升级版本