@axiomatic-labs/claudeflow 2.14.3 → 2.14.5

package/lib/install.js

@@ -167,9 +167,27 @@ async function run() {
     if (fs.existsSync(srcTemplates)) {
       copyDirSync(srcTemplates, dstTemplates);
     }
+
+    // Copy v2 orchestrator playbook layer (foundation/methodologies/domain/
+    // ui-ux/routing). Required for claudeflow-build / -test / -review skills
+    // to @-mention. Without this, those skills' @.claudeflow/playbooks/...
+    // refs point to non-existent files.
+    const srcPlaybooks = path.join(srcClaudeflow, 'playbooks');
+    const dstPlaybooks = path.join(cwd, '.claudeflow', 'playbooks');
+    if (fs.existsSync(srcPlaybooks)) {
+      copyDirSync(srcPlaybooks, dstPlaybooks);
+    }
+
     materializeSharedAppendPrompt(cwd);
     ensureDefaultClaudeMdRules(cwd);
     propagateTemplateRules(cwd, srcTemplates);
+    // v2: scaffold the 8 system rules (3 always-loaded + 5 path-scoped)
+    // using scaffold-system-rule.js. When setup-context.json exists
+    // (brownfield), it derives framework-aware `paths` frontmatter. When
+    // setup-context.json is absent (greenfield), it falls back to the
+    // template's broad-default paths. No-clobber preserved — existing
+    // user customizations win.
+    propagateSystemRulesViaScaffold(cwd);
     // After CLAUDE.md exists, append the claudeflow addendum (the load-bearing
     // rule "all code changes flow through /claudeflow-build" + mode-aware
     // mandates). Idempotent: runs every install/update; the block lives
@@ -193,6 +211,11 @@ async function run() {
     // Remove previously template-seeded base rules. Project memory now comes
     // from setup-context, generated project rules, and root CLAUDE.md.
     pruneLegacyTemplateRules(cwd);
+    // v2 cleanup: remove v1 build-orchestrator artifacts (phases/, references/,
+    // and v1-only enforcement hooks). These were template-managed in earlier
+    // versions but aren't in the v2 manifest, so install.js's stale-removal
+    // doesn't always identify them. Be explicit.
+    pruneLegacyV1BuildArtifacts(cwd);
 
     // Copy commands
     const srcCommands = path.join(srcClaude, 'commands');
@@ -970,10 +993,10 @@ function collectManagedPathsFromRelease(extractRoot) {
     destPrefix: '.claude/hooks',
   });
 
-  // Claudeflow dirs: runtime, templates, docs in .claudeflow/.
-  // (variants/ removed in v2.13.148. .claudeflow/cli/ removed in v2.13.153
-  // — only held the now-deleted claudeflow-mode.js variant-switcher.)
-  ['runtime', 'templates', 'docs'].forEach((folder) => {
+  // Claudeflow dirs: runtime, templates, docs, playbooks in .claudeflow/.
+  // playbooks/ added in v2 — required for the claudeflow-build orchestrator
+  // and its always-loaded foundation/routing references.
+  ['runtime', 'templates', 'docs', 'playbooks'].forEach((folder) => {
     addFilesFromDir(managed, extractRoot, path.join(srcClaudeflow, folder));
   });
 
@@ -1031,9 +1054,10 @@ function collectLegacyManagedPathsFromDisk(projectRoot) {
   // Claude Code native: hooks stay in .claude/
   addFilesFromDir(managed, projectRoot, path.join(claudeDir, 'hooks'));
 
-  // Claudeflow dirs: runtime, templates, docs in .claudeflow/
+  // Claudeflow dirs: runtime, templates, docs, playbooks in .claudeflow/.
+  // playbooks/ added in v2 — required for the claudeflow-build orchestrator.
   // (variants/ removed in v2.13.148. .claudeflow/cli/ removed in v2.13.153.)
-  ['runtime', 'templates', 'docs'].forEach((folder) => {
+  ['runtime', 'templates', 'docs', 'playbooks'].forEach((folder) => {
     addFilesFromDir(managed, projectRoot, path.join(claudeflowDir, folder));
   });
 
@@ -1159,6 +1183,42 @@ function assertRequiredTemplateRules(rulesDir) {
   }
 }
 
+// v1 build-orchestrator artifacts that v2 replaces. When upgrading from a
+// pre-v2 install, these stay on disk because install.js's stale cleanup
+// can't match files that exist on disk but aren't in the v2 ZIP manifest.
+// Listing them explicitly here makes the v1 → v2 upgrade leave a clean
+// .claude/.
+const LEGACY_V1_BUILD_ARTIFACTS = [
+  // v1 had phases/references inside build/test/review skills; v2 doesn't.
+  '.claude/skills/claudeflow-build/phases',
+  '.claude/skills/claudeflow-build/references',
+  '.claude/skills/claudeflow-test/phases',
+  '.claude/skills/claudeflow-test/references',
+  '.claude/skills/claudeflow-review/phases',
+  '.claude/skills/claudeflow-review/references',
+  // v1 enforcement hooks; v2 uses guard-sensitive-files + validate-closure +
+  // session-env + filter-command-output instead.
+  '.claude/hooks/PreToolUse/enforce-task-creation.js',
+  '.claude/hooks/PreToolUse/enforce-ecosystem-artifacts.js',
+  '.claude/hooks/PreToolUse/freeze-step-contract.js',
+  '.claude/hooks/PreToolUse/freeze-workflow-state.js',
+  '.claude/hooks/PreToolUse/route-exit-plan-mode.js',
+  '.claude/hooks/PreToolUse/stack-debt-guard.js',
+];
+
+function pruneLegacyV1BuildArtifacts(projectRoot) {
+  for (const relPath of LEGACY_V1_BUILD_ARTIFACTS) {
+    const absPath = path.join(projectRoot, relPath);
+    if (!fs.existsSync(absPath)) continue;
+    try {
+      fs.rmSync(absPath, { recursive: true, force: true });
+    } catch {
+      // Best-effort. If the file is locked or permissions issue, skip;
+      // the user can clean up manually. Don't abort the install.
+    }
+  }
+}
+
 function pruneLegacyTemplateRules(projectRoot) {
   const rulesDir = path.join(projectRoot, '.claude', 'rules');
   for (const filename of LEGACY_TEMPLATE_RULES) {
@@ -1176,12 +1236,74 @@ function propagateTemplateRules(projectRoot, srcTemplates) {
   fs.mkdirSync(dstRulesDir, { recursive: true });
   for (const filename of fs.readdirSync(srcRulesDir)) {
     if (!filename.endsWith('.md')) continue;
+    // Skip the 8 v2 system rules — they're handled by
+    // propagateSystemRulesViaScaffold, which derives framework-aware
+    // `paths` from setup-context.json when available.
+    if (V2_SYSTEM_RULES.has(filename)) continue;
     const dstPath = path.join(dstRulesDir, filename);
     if (fs.existsSync(dstPath)) continue; // no-clobber: preserve project-specific or user rules
     fs.copyFileSync(path.join(srcRulesDir, filename), dstPath);
   }
 }
 
+// The 8 v2 system rules that ship with claudeflow. propagateTemplateRules
+// skips these because they need scaffold-system-rule.js to derive
+// framework-aware `paths` frontmatter (e.g., a Next.js+Prisma project
+// gets `**/*.prisma` and `**/app/api/**` instead of broad defaults).
+const V2_SYSTEM_RULES = new Set([
+  'claudeflow-context-engineering.md',
+  'claudeflow-engineering-quality.md',
+  'claudeflow-testing.md',
+  'claudeflow-security.md',
+  'claudeflow-api.md',
+  'claudeflow-database.md',
+  'claudeflow-ui-ux.md',
+  'claudeflow-evidence.md',
+]);
+
+// Map of v2 rule filenames → rule slug used by scaffold-system-rule.js
+function ruleSlugFromFilename(filename) {
+  // Strip "claudeflow-" prefix and ".md" suffix. e.g.,
+  // "claudeflow-ui-ux.md" → "ui-ux".
+  return filename.replace(/^claudeflow-/, '').replace(/\.md$/, '');
+}
+
+function propagateSystemRulesViaScaffold(projectRoot) {
+  const scaffoldScript = path.join(
+    projectRoot, '.claudeflow', 'runtime', 'scaffold-system-rule.js',
+  );
+  if (!fs.existsSync(scaffoldScript)) {
+    // scaffold-system-rule.js is part of v2 — if missing, the project
+    // was bootstrapped with a pre-v2 ZIP. Skip silently; user can run
+    // /claudeflow-update later to refresh.
+    return;
+  }
+
+  for (const filename of V2_SYSTEM_RULES) {
+    const slug = ruleSlugFromFilename(filename);
+    try {
+      execFileSync('node', [
+        scaffoldScript,
+        '--rule', slug,
+        '--project-root', projectRoot,
+        '--mode', 'init',
+        // No --force: respect no-clobber. User edits win.
+      ], { stdio: ['ignore', 'ignore', 'pipe'] });
+    } catch (err) {
+      // scaffold-system-rule.js exits 1 when target exists (no-clobber).
+      // That's expected on re-install; don't warn. Other exit codes are
+      // real errors; log to stderr but don't abort the install.
+      const exitCode = err && err.status;
+      if (exitCode !== 1) {
+        process.stderr.write(
+          `Warning: failed to scaffold system rule "${slug}" (exit ${exitCode}). ` +
+            `You can re-run with /claudeflow-update later.\n`,
+        );
+      }
+    }
+  }
+}
+
 function materializeSharedAppendPrompt(projectRoot) {
   const templatePath = path.join(projectRoot, SHARED_APPEND_PROMPT_TEMPLATE);
   if (!fs.existsSync(templatePath)) {
@@ -1308,7 +1430,7 @@ function syncBoostAddendumOnInstall(cwd) {
   // mandates inside the addendum body explicitly say "fast-only" or
   // "normal-only" so the LLM applies them conditionally.
   const claudeMdPath = path.join(cwd, 'CLAUDE.md');
-  const addendumPath = path.join(cwd, '.claudeflow', 'templates', 'CLAUDE_BOOST_ADDENDUM.md');
+  const addendumPath = path.join(cwd, '.claudeflow', 'templates', 'claudeflow-append-claude-md.md');
   if (!fs.existsSync(claudeMdPath) || !fs.existsSync(addendumPath)) return;
 
   const ADDENDUM_BEGIN = '<!-- claudeflow:boost-mode:BEGIN -->';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axiomatic-labs/claudeflow",
-  "version": "2.14.3",
+  "version": "2.14.5",
   "description": "Claudeflow — AI-powered development toolkit for Claude Code. Skills, agents, hooks, and quality gates that ship production apps.",
   "bin": {
     "claudeflow": "./bin/cli.js"