@curdx/flow 2.0.0-beta.17 → 2.0.0-beta.19

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Claude Code Discipline Layer — spec-driven workflow + goal-backward verification + Karpathy 4 principles enforced via gates. Stops Claude from faking \"done\" on non-trivial features.",
-    "version": "2.0.0-beta.17"
+    "version": "2.0.0-beta.18"
   },
   "plugins": [
     {

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "curdx-flow",
-  "version": "2.0.0-beta.17",
+  "version": "2.0.0-beta.18",
   "description": "Claude Code Discipline Layer — spec-driven workflow + goal-backward verification + Karpathy 4 principles enforced via gates. Stops Claude from faking \"done\" on non-trivial features.",
   "author": {
     "name": "wdx",

package/README.md

@@ -30,6 +30,8 @@ npx @curdx/flow install --all
 
 This installs the Claude Code plugin (fully offline from the npm package — no GitHub fetch), the official Context7 plugin, the required sequential-thinking MCP server, and four recommended companion plugins (pua, claude-mem, frontend-design, chrome-devtools-mcp).
 
+**Note:** If you're running this command inside the `curdx-flow` project directory itself, use `npx --ignore-existing @curdx/flow install --all` to avoid npx trying to use the local package without dependencies installed.
+
 ## 9 slash commands, that's it
 
 ```

package/README.zh.md

@@ -47,6 +47,8 @@ npx @curdx/flow install --all
 
 这会用 `claude plugin ...` 非交互 CLI 安装 CurDX-Flow 插件、Context7 官方插件、必需 MCP，并安装推荐插件。
 
+**注意：** 如果你在 `curdx-flow` 项目目录内运行此命令，请使用 `npx --ignore-existing @curdx/flow install --all` 避免 npx 尝试使用本地未安装依赖的包。
+
 ### 本地 dev
 ```bash
 git clone https://github.com/curdx/curdx-flow

package/cli/protocols-body.md

@@ -0,0 +1,21 @@
+## Global Protocols (curdx-flow)
+
+All operations MUST strictly follow these system constraints:
+
+### Language separation
+- **Tool / persistence layer = English**: commit messages, code, comments, file names, function names, PR descriptions, CLI log output, error messages thrown by code, and any artifact persisted to the repository or shown in a developer terminal.
+- **Conversational layer = Simplified Chinese**: chat replies, explanations and reasoning shown directly to the human in a conversation interface (e.g. Claude Code chat).
+
+Rationale: English in the persistence/tool layer aligns with developer-tool industry norms (npm/git/cargo are all English) and keeps the codebase internationally collaborable. Chinese in the conversational layer matches the user's language preference. Mixing the two (e.g. Chinese commit messages, Chinese CLI log output) is a violation.
+
+### Discovery & reasoning
+- **Library / framework / API questions**: query `context7` MCP first. Do not rely on training memory.
+- **Planning / design / architecture review / epic decomposition**: use `sequential-thinking` MCP with at least 5 thoughts.
+- **Cross-session memory**: query `claude-mem` MCP at task start when available.
+
+### Three red lines (inherited from pua)
+1. **Closed loop**: claiming "done"? Provide evidence (build output / passing tests / curl result).
+2. **Fact-driven**: before saying "probably an env issue", verify it. Unverified attribution = blame-shifting.
+3. **Exhaust everything**: before saying "I cannot", complete the systematic 4-stage debugging.
+
+> Source: curdx-flow CLI installer (`curdx-flow install`). Remove with: `curdx-flow uninstall --purge`.

package/cli/protocols.js

@@ -15,6 +15,7 @@ import {
 } from "node:fs";
 import { join, dirname } from "node:path";
 import { homedir } from "node:os";
+import { fileURLToPath } from "node:url";
 
 // Use os.homedir() instead of process.env.HOME — HOME can be empty inside
 // non-login shells (CI containers, some spawned child envs), which would
@@ -28,33 +29,17 @@ const SENTINEL_BEGIN =
   "<!-- BEGIN curdx-flow protocols (auto-managed; do not edit between sentinels) -->";
 const SENTINEL_END = "<!-- END curdx-flow protocols -->";
 
-// Protocol block is itself in English — it's instructions for the model,
-// not user-facing prose. User chat output is still Chinese per the rule below.
-const PROTOCOL_BODY = `
-## Global Protocols (curdx-flow)
-
-All operations MUST strictly follow these system constraints:
-
-### Language separation
-- **Tool / persistence layer = English**: commit messages, code, comments, file names, function names, PR descriptions, CLI log output, error messages thrown by code, and any artifact persisted to the repository or shown in a developer terminal.
-- **Conversational layer = Simplified Chinese**: chat replies, explanations and reasoning shown directly to the human in a conversation interface (e.g. Claude Code chat).
-
-Rationale: English in the persistence/tool layer aligns with developer-tool industry norms (npm/git/cargo are all English) and keeps the codebase internationally collaborable. Chinese in the conversational layer matches the user's language preference. Mixing the two (e.g. Chinese commit messages, Chinese CLI log output) is a violation.
-
-### Discovery & reasoning
-- **Library / framework / API questions**: query \`context7\` MCP first. Do not rely on training memory.
-- **Planning / design / architecture review / epic decomposition**: use \`sequential-thinking\` MCP with at least 5 thoughts.
-- **Cross-session memory**: query \`claude-mem\` MCP at task start when available.
-
-### Three red lines (inherited from pua)
-1. **Closed loop**: claiming "done"? Provide evidence (build output / passing tests / curl result).
-2. **Fact-driven**: before saying "probably an env issue", verify it. Unverified attribution = blame-shifting.
-3. **Exhaust everything**: before saying "I cannot", complete the systematic 4-stage debugging.
-
-> Source: curdx-flow CLI installer (\`curdx-flow install\`). Remove with: \`curdx-flow uninstall --purge\`.
-`;
-
-const FULL_BLOCK = `${SENTINEL_BEGIN}\n${PROTOCOL_BODY.trim()}\n${SENTINEL_END}`;
+// Protocol body lives in a sibling markdown file so it keeps markdown tooling
+// (preview, lint, prettier) and avoids backtick-escaping noise inside a JS
+// template literal. The body itself is English — it's instructions for the
+// model, not user-facing prose.
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const PROTOCOL_BODY = readFileSync(
+  join(__dirname, "protocols-body.md"),
+  "utf-8"
+).trim();
+
+const FULL_BLOCK = `${SENTINEL_BEGIN}\n${PROTOCOL_BODY}\n${SENTINEL_END}`;
 
 /**
  * Read existing CLAUDE.md content; return "" if missing.

package/cli/registry.js

@@ -42,9 +42,8 @@ export const RECOMMENDED_PLUGINS = [
   },
   {
     name: "frontend-design",
-    // Already in default marketplace claude-plugins-official, no add needed
     id: "frontend-design@claude-plugins-official",
-    marketplaceSource: null,
+    marketplaceSource: "anthropics/claude-plugins-official",
     marketplaceId: "claude-plugins-official",
     installSpec: "frontend-design@claude-plugins-official",
     uninstallSpec: "frontend-design@claude-plugins-official",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@curdx/flow",
-  "version": "2.0.0-beta.17",
+  "version": "2.0.0-beta.19",
   "description": "CLI installer for CurDX-Flow — AI engineering workflow meta-framework for Claude Code",
   "type": "module",
   "bin": {