What's New in v2.9.0
Major Features
- PUA Leaderboard — P5-P10 ranking system with ECharts China/World maps, D1 API, player registration
- Owner Consciousness — "谁痛苦谁改变" + 4-question self-check on every task
- 10 Company Methodology Files — Flavor-specific behavioral constraints (Alibaba, ByteDance, Huawei, Tencent, Meituan, Pinduoduo, Baidu, Netflix, Apple, Tesla/SpaceX)
- Agent Team Management Layer — P9/P10-applicable org methods added to each methodology
- Blog — Research article: "Emotion/Persona Prompting Effects on AI Agents" (zh/en bilingual)
- Contribute Page — GitHub OAuth + .jsonl session upload with server-side sanitization
Skill Enhancements
- Task Lifecycle Framework — Reorganized by phase: 接任务→执行→交付→复盘
- Tesla 5-Step Discipline — Question→Delete→Simplify→Speed→Automate (anti-overengineering)
- Huawei Blue Team Self-Check — Challenge your own solution before delivery
- TRF Delivery Principle — Trust/Result/Follow-through from Ali sales army
- Retrospective Protocol — 4-step review after major tasks
- Real User Frustration Triggers — From Reddit/LinuxDo/HN/X: 降智了, stop spinning, you broke it, 你又在原地打转
- Anti-regression — New entries: "修了A破坏了B" + "原地打转微调参数"
Security
- HMAC-Signed Session Cookies — Fixes #95 (session forgery vulnerability)
- GitHub token removed from cookies — Only id/login/avatar stored client-side
- Server-side sanitization — 3-layer: blacklist + K=V + entropy detection
Landing Page
- Full redesign: white theme + brand red (#E8453C), no AI-purple
- Left-aligned Hero with dual install commands (Claude Code + universal Fetch-and-follow)
- ECharts real maps (China provinces + World countries)
- Unified navigation across all 6 pages
- Guide page with 12 command output examples (zh/en/ja)
- Floating community panel (WeChat QR + Telegram/Discord/Twitter)
Infrastructure
- PUA Loop: 30-iteration cap +
<loop-abort>/<loop-pause>escape signals /cancel-pua-loopcommand- Cloudflare Pages Functions properly deployed (was missing before)
- 7 skill design fixes (sub-agent path, flavor fallback, info overload reorg)
PRs Merged
- #102: Hooks consent, loop escape, sanitize, privacy disclosure
- #88: Japanese translation fix
- #56: Vercel Skills installation guide
Full changelog: v1.2.0...v2.9.0
What's Changed
- feat: add VSCode (GitHub Copilot) support — closes #79 by @xxnbyy in #81
- replace "空口完了" with "検証なしの完了宣言" by @donzoru in #86
- fix(ja): fix unnatural Japanese expressions in all pua-ja skill files by @xxnbyy in #87
- feat(codex): add INSTALL.md one-command install and improve Codex docs by @xxnbyy in #85
- fix(security): address issues #97-100 — hooks consent, loop escape, sanitize, privacy disclosure by @xxnbyy in #102
- fix(blog): blog index page nav lang-i CSS and sl() function missing by @xxnbyy in #105
- fix(ja): replace "空手で" with "手ぶらで" by @donzoru in #88
- 添加 Vercel Skills 的安装说明 by @creeveliu in #56
New Contributors
- @xxnbyy made their first contribution in #81
- @creeveliu made their first contribution in #56
Full Changelog: v1.2.0...v2.9.0