@axiomatic-labs/claudeflow 2.14.43 → 2.14.45

package/lib/install.js

@@ -319,23 +319,6 @@ async function run() {
       ui.info(`Note: .claudeflow/config/setup-context.json is missing. Builds will fall back to inferring stack from CLAUDE.md + package.json. To regenerate the canonical setup-context, run /claudeflow-init or /claudeflow-update inside Claude Code.`);
     }
 
-    // v2.14.43 Gap #7: warn loudly if enforcement is disabled. A toggle in
-    // `claudeflow panel` (or a manual edit) can persist enforcementDisabled:
-    // true across installs/updates, silently disabling all PreToolUse strict
-    // gates. Without this warning the user is unaware their build discipline
-    // hooks are off. (Found via Impekble: ct09 + ct05 skipped TaskCreate
-    // because every enforcement hook was silenced by an old panel toggle.)
-    try {
-      const overridesPath = path.join(cwd, '.claudeflow', 'config', 'user-hook-overrides.json');
-      if (fs.existsSync(overridesPath)) {
-        const overrides = JSON.parse(fs.readFileSync(overridesPath, 'utf8'));
-        if (overrides && overrides.enforcementDisabled === true) {
-          ui.info(`⚠️  ENFORCEMENT IS DISABLED — your .claudeflow/config/user-hook-overrides.json has "enforcementDisabled": true. All Claudeflow PreToolUse strict gates (phase tasks, plan agents, methodology, marker) are silenced. To re-enable: run \`claudeflow panel\` and toggle enforcement on, or edit user-hook-overrides.json to set "enforcementDisabled": false.`);
-        }
-      }
-    } catch {
-      // Best-effort: malformed JSON should not block install.
-    }
   } else {
     ui.success(`${skillCount} skills installed`);
     ui.success(`${hookCount} hooks installed`);
@@ -349,6 +332,23 @@ async function run() {
     ui.done(`Claudeflow ${version} installed.`);
   }
 
+  // v2.14.43 Gap #7: warn if enforcement is disabled. Lives outside the
+  // update/fresh-install branches so it fires in both flows (a user can
+  // start with enforcement on, then later toggle it off via panel, and
+  // a subsequent fresh install in the same dir would miss the warning if
+  // the check sat inside the update branch only).
+  try {
+    const overridesPath = path.join(cwd, '.claudeflow', 'config', 'user-hook-overrides.json');
+    if (fs.existsSync(overridesPath)) {
+      const overrides = JSON.parse(fs.readFileSync(overridesPath, 'utf8'));
+      if (overrides && overrides.enforcementDisabled === true) {
+        ui.info(`⚠️  ENFORCEMENT IS DISABLED — your .claudeflow/config/user-hook-overrides.json has "enforcementDisabled": true. All Claudeflow PreToolUse strict gates (phase tasks, plan agents, methodology, marker) are silenced. To re-enable: run \`claudeflow panel\` and toggle enforcement on, or edit user-hook-overrides.json to set "enforcementDisabled": false.`);
+      }
+    }
+  } catch {
+    // Best-effort: malformed JSON should not block install.
+  }
+
   // Ensure the `claudeflow` shell command is available and matches the
   // just-installed template version. Runs for both fresh installs and
   // updates — the shell command is independent of the project template

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axiomatic-labs/claudeflow",
-  "version": "2.14.43",
+  "version": "2.14.45",
   "description": "Claudeflow — AI-powered development toolkit for Claude Code. Skills, agents, hooks, and quality gates that ship production apps.",
   "bin": {
     "claudeflow": "./bin/cli.js"