@curdx/flow 2.0.18 → 2.0.19

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Claude Code Discipline Layer — spec-driven workflow + goal-backward verification + Karpathy 4 principles enforced via gates. Stops Claude from faking \"done\" on non-trivial features.",
-    "version": "2.0.18"
+    "version": "2.0.19"
   },
   "plugins": [
     {

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "curdx-flow",
-  "version": "2.0.18",
+  "version": "2.0.19",
   "description": "Claude Code Discipline Layer — spec-driven workflow + goal-backward verification + Karpathy 4 principles enforced via gates. Stops Claude from faking \"done\" on non-trivial features.",
   "author": {
     "name": "wdx",

package/README.zh.md

@@ -19,11 +19,11 @@ CurdX-Flow 是一个 Claude Code 插件，把 6 个验证过的 AI 工程工作
 ## 一览（v2）
 
 - **9 个命令** — 初始化 / 启动规格 / 规格 / 执行 / 验证 / 审查 / 调试 / fast / 帮助
-- **15 个内部代理** — 由命令调度，不再暴露 v1 的人格角色
+- **15 个内部代理** — 由命令调度，按职能分工执行
 - **8 个可组合 Gate** — Karpathy / Verification / TDD / Coverage / Adversarial / Edge-Case / Security / DevEx
 - **4 种执行策略** — linear / subagent / stop-hook / wave（自动路由）
 - **10 个知识文档** — 规格驱动 / POC-First / 原子提交 / 执行策略 / ...
-- **5 个 hook 事件** — SessionStart / InstructionsLoaded / PostToolUseFailure / Stop / PreToolUse
+- **4 个 hook 事件** — SessionStart / SessionStart(startup|clear|compact) / Stop / PreToolUse
 - **必需文档/推理工具 + 4 个推荐插件** — Context7 官方插件 / sequential-thinking MCP + pua / claude-mem / frontend-design / chrome-devtools-mcp
 - **优雅降级** — 依赖缺失时进入 fallback 模式并清晰告知
 
@@ -37,7 +37,7 @@ CurdX-Flow 是一个 Claude Code 插件，把 6 个验证过的 AI 工程工作
 | 无工程纪律（AI 跳步、幻觉） | Karpathy L1 + verification-gate + TDD-gate |
 | 最佳实践分散 | 6 个工作流蒸馏到一个元框架 |
 | 验证薄弱（无证据声称"完成"） | 目标反向验证 + 禁用词检测 |
-| 单视角决策 | Party Mode（真正多代理，非角色扮演）+ 对抗审查 |
+| 单视角决策 | 多代理协作 + 对抗审查 |
 
 ## 安装
 
@@ -91,7 +91,7 @@ claude --plugin-dir ./curdx-flow
 
 1. **Mind（L1 基线）** — Karpathy 4 原则 + 必用工具规则 + 三条红线
 2. **Spec（规格）** — 研究 → 需求 → 设计 → 任务（可伸缩，4 文件 lite 到 12 文件 enterprise）
-3. **Agents（代理）** — 15 职能 + 9 人格（Mary / John / Winston / ...）
+3. **Agents（代理）** — 15 个内部代理，按命令和流程调度
 4. **Flow（流程）** — 4 种执行策略，自动路由
 5. **Memory（记忆）** — claude-mem（隐式）+ `.flow/STATE.md`（显式决策 D-NN）
 
@@ -126,7 +126,7 @@ CurdX-Flow 是蒸馏，不是原创。深深致谢：
 - [**andrej-karpathy-skills**](https://github.com/forrestchang/andrej-karpathy-skills) — 4 原则
 - [**smart-ralph**](https://github.com/Nibzard/smart-ralph) — 规格引擎 + stop-hook 循环
 - [**superpowers**](https://github.com/obra/superpowers) — Subagent 纪律 + TDD + 两阶段审查
-- [**BMAD-METHOD**](https://github.com/bmad-code-org/BMAD-METHOD) — 人格 + Party Mode + 对抗审查
+- [**BMAD-METHOD**](https://github.com/bmad-code-org/BMAD-METHOD) — 协作流程 + 对抗审查
 - [**get-shit-done**](https://github.com/ryangentry/get-shit-done) — 波形执行 + 决策锁定 + 多源审计
 - [**gstack**](https://github.com/garrytan/gstack)（Garry Tan） — 规划审查 + DX 哲学
 - [**pua**](https://github.com/tanweai/pua) — 持续性 + 三条红线

package/hooks/scripts/common.sh

@@ -0,0 +1,35 @@
+#!/usr/bin/env bash
+
+has_python3() {
+  command -v python3 >/dev/null 2>&1
+}
+
+json_escape() {
+  local value="${1:-}"
+
+  if has_python3; then
+    printf '%s' "$value" | python3 -c 'import json,sys; print(json.dumps(sys.stdin.read()))'
+    return
+  fi
+
+  printf '%s' "$value" \
+    | sed 's/\\/\\\\/g; s/"/\\"/g' \
+    | awk 'BEGIN{printf "\""} {printf "%s\\n", $0} END{printf "\""}'
+}
+
+emit_session_start_context() {
+  local context="${1:-}"
+  printf '{"hookSpecificOutput":{"hookEventName":"SessionStart","additionalContext":%s}}\n' \
+    "$(json_escape "$context")"
+}
+
+emit_pretooluse_deny() {
+  local reason="${1:-}"
+  printf '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":%s}}\n' \
+    "$(json_escape "$reason")"
+}
+
+emit_stop_block() {
+  local reason="${1:-}"
+  printf '{"decision":"block","reason":%s}\n' "$(json_escape "$reason")"
+}

package/hooks/scripts/inject-karpathy.sh

@@ -3,14 +3,14 @@
 # Injects the L1 baseline (Karpathy 4 principles + mandatory tool rules + 3 red lines)
 # as additionalContext at every session boot (startup, /clear, post-compact).
 #
-# Wired under SessionStart rather than InstructionsLoaded because Claude Code's
-# InstructionsLoaded event is observability-only — its hook schema rejects
-# hookSpecificOutput / additionalContext. SessionStart with matcher
-# "startup|clear|compact" gives the same "baseline is always on, even after
-# compaction" property while staying within the supported schema.
+# Wired under SessionStart with matcher "startup|clear|compact" so the
+# baseline survives startup, /clear, and post-compact resume.
 
 set -u
 
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+. "$SCRIPT_DIR/common.sh"
+
 CONTEXT='## CurDX-Flow Mind Baseline (L1 — always on)
 
 ### 1. Think Before Coding
@@ -46,10 +46,8 @@ CONTEXT='## CurDX-Flow Mind Baseline (L1 — always on)
 2. **Fact-driven**: verify before saying "probably". An unverified attribution is blame-shifting
 3. **Exhaust everything**: before saying "I cannot", complete the systematic 4-stage debugging'
 
-# Emit JSON with safe encoding
-if command -v python3 >/dev/null 2>&1; then
-  ESCAPED="$(printf '%s' "$CONTEXT" | python3 -c 'import json,sys; print(json.dumps(sys.stdin.read()))')"
-  printf '{"hookSpecificOutput":{"hookEventName":"SessionStart","additionalContext":%s}}\n' "$ESCAPED"
+if has_python3; then
+  emit_session_start_context "$CONTEXT"
 fi
 
 exit 0

package/hooks/scripts/quick-mode-guard.sh

@@ -8,6 +8,9 @@
 
 set -u
 
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+. "$SCRIPT_DIR/common.sh"
+
 # Read input (Claude sends JSON on stdin for PreToolUse)
 INPUT=$(cat 2>/dev/null || echo "{}")
 
@@ -58,8 +61,7 @@ except Exception:
 if [ "$QUICK_MODE" = "true" ]; then
   # Block and inject guidance
   MSG="[CurDX-Flow quick-mode-guard] Active spec '$ACTIVE' is in quick mode or autonomous mode — AskUserQuestion is forbidden. Decide autonomously based on user preferences in .flow/CONTEXT.md plus the most reasonable assumption, and record your assumption in .progress.md."
-  ESCAPED=$(printf '%s' "$MSG" | python3 -c 'import json,sys; print(json.dumps(sys.stdin.read()))')
-  printf '{"decision":"block","reason":%s}\n' "$ESCAPED"
+  emit_pretooluse_deny "$MSG"
   exit 0
 fi
 

package/hooks/scripts/session-start.sh

@@ -11,6 +11,9 @@
 
 set -u
 
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+. "$SCRIPT_DIR/common.sh"
+
 DATA_DIR="${CLAUDE_PLUGIN_DATA:-$HOME/.claude/plugins/data/curdx-flow}"
 MARKER="$DATA_DIR/.deps-checked"
 TODAY="$(date +%Y-%m-%d)"
@@ -63,14 +66,7 @@ fi
 
 # ---------- 3. Emit hook output ----------
 if [ -n "$ADDITIONAL_CONTEXT" ]; then
-  # Use python3 for safe JSON encoding (handles newlines, quotes)
-  if command -v python3 >/dev/null 2>&1; then
-    ESCAPED="$(printf '%s' "$ADDITIONAL_CONTEXT" | python3 -c 'import json,sys; print(json.dumps(sys.stdin.read()))')"
-  else
-    # Fallback: naive escape (only newlines and quotes)
-    ESCAPED="$(printf '%s' "$ADDITIONAL_CONTEXT" | sed 's/\\/\\\\/g; s/"/\\"/g' | awk 'BEGIN{printf "\""} {printf "%s\\n", $0} END{printf "\""}')"
-  fi
-  printf '{"hookSpecificOutput":{"hookEventName":"SessionStart","additionalContext":%s}}\n' "$ESCAPED"
+  emit_session_start_context "$ADDITIONAL_CONTEXT"
 fi
 
 exit 0

package/hooks/scripts/stop-watcher.sh

@@ -15,6 +15,9 @@
 
 set -u
 
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+. "$SCRIPT_DIR/common.sh"
+
 DATA_DIR="${CLAUDE_PLUGIN_DATA:-$HOME/.claude/plugins/data/curdx-flow}"
 
 # ---------- helper: exit with "allow stop" ----------
@@ -26,15 +29,7 @@ allow_stop() {
 # ---------- helper: block and inject continuation ----------
 block_continue() {
   local reason="$1"
-  # Safely JSON-encode via python3 if available
-  if command -v python3 >/dev/null 2>&1; then
-    printf '{"decision":"block","reason":%s}\n' \
-      "$(printf '%s' "$reason" | python3 -c 'import json,sys; print(json.dumps(sys.stdin.read()))')"
-  else
-    # Fallback: escape quotes and newlines naively
-    local escaped=$(printf '%s' "$reason" | sed 's/\\/\\\\/g; s/"/\\"/g' | tr '\n' ' ')
-    printf '{"decision":"block","reason":"%s"}\n' "$escaped"
-  fi
+  emit_stop_block "$reason"
   exit 0
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@curdx/flow",
-  "version": "2.0.18",
+  "version": "2.0.19",
   "description": "CLI installer for CurdX-Flow — AI engineering workflow meta-framework for Claude Code",
   "type": "module",
   "bin": {