@axiomatic-labs/claudeflow 2.50.5 → 2.51.0

package/lib/install.js

@@ -439,11 +439,13 @@ function pathHash(p) {
 }
 
 function syncManagedGlobalDir(srcDir, dstDir, backupRoot, filter, label) {
-  const out = { synced: 0, changed: 0, backups: 0, failed: 0, failures: [] };
+  const out = { synced: 0, changed: 0, removed: 0, backups: 0, failed: 0, failures: [] };
   if (!fs.existsSync(srcDir)) return out;
   fs.mkdirSync(dstDir, { recursive: true });
+  const shipped = new Set();
   for (const e of fs.readdirSync(srcDir, { withFileTypes: true })) {
     if (!filter(e)) continue;
+    shipped.add(e.name);
     const s = path.join(srcDir, e.name);
     const d = path.join(dstDir, e.name);
     try {
@@ -461,6 +463,26 @@ function syncManagedGlobalDir(srcDir, dstDir, backupRoot, filter, label) {
       out.failures.push(`${label}:${e.name}:${err && err.code ? err.code : 'ERROR'}`);
     }
   }
+  // Prune orphans: a global claudeflow-* that is NO LONGER shipped (a removed or renamed skill/agent, e.g.
+  // claudeflow-method-bdd-lite after its merge into atdd-lite) must be DELETED, not left behind. Claude
+  // prioritizes ~/.claude over the project copy, so a stale global artifact silently shadows the current set —
+  // the exact redundancy where a deleted skill keeps loading. Overwriting the shipped ones is not enough; the
+  // set must MIRROR what ships. Only the managed claudeflow-* namespace is pruned (filter gates it); the user's
+  // own skills/agents never match the filter and are untouched. Backed up first, like every managed change.
+  for (const e of fs.readdirSync(dstDir, { withFileTypes: true })) {
+    if (!filter(e) || shipped.has(e.name)) continue;
+    const d = path.join(dstDir, e.name);
+    try {
+      copyPath(d, path.join(backupRoot, path.basename(dstDir), e.name));
+      out.backups++;
+      fs.rmSync(d, { recursive: true, force: true });
+      out.removed++;
+      out.changed++;
+    } catch (err) {
+      out.failed++;
+      out.failures.push(`${label}:prune:${e.name}:${err && err.code ? err.code : 'ERROR'}`);
+    }
+  }
   return out;
 }
 
@@ -506,6 +528,31 @@ function countFiles(dir) {
   return n;
 }
 
+// Remove managed (claudeflow-*) artifacts present in dst but NO LONGER shipped in src — a removed or renamed
+// skill/agent must disappear, not linger. Overwriting the shipped set is not enough: a leftover copy (project OR
+// global) keeps being discovered and loaded, the redundancy that let a deleted skill keep running. The filter
+// gates the managed namespace, so the user's OWN skills/agents never match and are untouched. Backs up first.
+function pruneManagedOrphans(srcDir, dstDir, filter, backupRoot, label) {
+  const out = { removed: 0, backups: 0, failed: 0, failures: [] };
+  if (!fs.existsSync(srcDir) || !fs.existsSync(dstDir)) return out;
+  const shipped = new Set();
+  for (const e of fs.readdirSync(srcDir, { withFileTypes: true })) if (filter(e)) shipped.add(e.name);
+  for (const e of fs.readdirSync(dstDir, { withFileTypes: true })) {
+    if (!filter(e) || shipped.has(e.name)) continue;
+    const d = path.join(dstDir, e.name);
+    try {
+      copyPath(d, path.join(backupRoot, path.basename(dstDir), e.name));
+      out.backups++;
+      fs.rmSync(d, { recursive: true, force: true });
+      out.removed++;
+    } catch (err) {
+      out.failed++;
+      out.failures.push(`${label}:prune:${e.name}:${err && err.code ? err.code : 'ERROR'}`);
+    }
+  }
+  return out;
+}
+
 function mergeSettings(cwd, payloadSettings) {
   const sp = path.join(cwd, '.claude', 'settings.json');
   let data = {};
@@ -908,6 +955,8 @@ function installFromPayload(src, cwd, options = {}) {
         const d = path.join(dst, e.name);
         if (replace(path.join(srcSkills, e.name), d, cwd, `skills:${e.name}`)) out.skills++;
       }
+      out.obsoleteRemoved += pruneManagedOrphans(srcSkills, dst,
+        e => e.isDirectory() && e.name.startsWith('claudeflow-'), backupRoot, 'skills').removed;
     }
   });
 
@@ -921,6 +970,8 @@ function installFromPayload(src, cwd, options = {}) {
         if (!e.isFile() || !e.name.startsWith('claudeflow-') || !e.name.endsWith('.md')) continue;
         if (replace(path.join(srcAgents, e.name), path.join(dst, e.name), cwd, `agents:${e.name}`)) out.agents++;
       }
+      out.obsoleteRemoved += pruneManagedOrphans(srcAgents, dst,
+        e => e.isFile() && e.name.startsWith('claudeflow-') && e.name.endsWith('.md'), backupRoot, 'agents').removed;
     }
   });
 
@@ -952,6 +1003,8 @@ function installFromPayload(src, cwd, options = {}) {
         const d = path.join(dst, e.name);
         if (replace(path.join(srcSkills, e.name), d, cwd, `codex-skills:${e.name}`)) out.codexSkills++;
       }
+      out.obsoleteRemoved += pruneManagedOrphans(srcSkills, dst,
+        e => e.isDirectory() && e.name.startsWith('claudeflow-'), backupRoot, 'codex-skills').removed;
     }
   });
 
@@ -965,6 +1018,8 @@ function installFromPayload(src, cwd, options = {}) {
         if (!e.isFile() || !e.name.startsWith('claudeflow-') || !e.name.endsWith('.toml')) continue;
         if (replace(path.join(srcAgents, e.name), path.join(dst, e.name), cwd, `codex-agents:${e.name}`)) out.codexAgents++;
       }
+      out.obsoleteRemoved += pruneManagedOrphans(srcAgents, dst,
+        e => e.isFile() && e.name.startsWith('claudeflow-') && e.name.endsWith('.toml'), backupRoot, 'codex-agents').removed;
     }
   });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axiomatic-labs/claudeflow",
-  "version": "2.50.5",
+  "version": "2.51.0",
   "description": "Claudeflow — AI-powered development toolkit for Claude Code and Codex. Skills, agents, hooks, and quality gates that ship production apps.",
   "bin": {
     "claudeflow": "./bin/cli.js"