@curdx/flow 2.3.11 → 3.1.0

package/cli/lib/semver.js

@@ -1,109 +0,0 @@
-function normalizeVersionToken(token) {
-  return /^\d+$/.test(token) ? Number(token) : token;
-}
-
-function parseVersion(version) {
-  const normalized = String(version || "").trim().replace(/^v/i, "");
-  const [coreRaw = "0", prereleaseRaw] = normalized.split("-", 2);
-  const core = coreRaw.split(".").map((part) => Number.parseInt(part, 10) || 0);
-  const prerelease = prereleaseRaw
-    ? prereleaseRaw.split(/[.-]/).filter(Boolean).map(normalizeVersionToken)
-    : [];
-
-  return { core, prerelease };
-}
-
-function compareIdentifier(left, right) {
-  if (left === right) {
-    return 0;
-  }
-
-  const leftIsNumber = typeof left === "number";
-  const rightIsNumber = typeof right === "number";
-
-  if (leftIsNumber && rightIsNumber) {
-    return left > right ? 1 : -1;
-  }
-
-  if (leftIsNumber) {
-    return -1;
-  }
-
-  if (rightIsNumber) {
-    return 1;
-  }
-
-  return left > right ? 1 : -1;
-}
-
-export function compareVersions(leftVersion, rightVersion) {
-  const left = parseVersion(leftVersion);
-  const right = parseVersion(rightVersion);
-  const coreLength = Math.max(left.core.length, right.core.length);
-
-  for (let index = 0; index < coreLength; index += 1) {
-    const leftPart = left.core[index] ?? 0;
-    const rightPart = right.core[index] ?? 0;
-    if (leftPart !== rightPart) {
-      return leftPart > rightPart ? 1 : -1;
-    }
-  }
-
-  const leftHasPrerelease = left.prerelease.length > 0;
-  const rightHasPrerelease = right.prerelease.length > 0;
-
-  if (!leftHasPrerelease && !rightHasPrerelease) {
-    return 0;
-  }
-
-  if (!leftHasPrerelease) {
-    return 1;
-  }
-
-  if (!rightHasPrerelease) {
-    return -1;
-  }
-
-  const prereleaseLength = Math.max(left.prerelease.length, right.prerelease.length);
-  for (let index = 0; index < prereleaseLength; index += 1) {
-    const leftPart = left.prerelease[index];
-    const rightPart = right.prerelease[index];
-
-    if (leftPart === undefined) {
-      return -1;
-    }
-
-    if (rightPart === undefined) {
-      return 1;
-    }
-
-    const comparison = compareIdentifier(leftPart, rightPart);
-    if (comparison !== 0) {
-      return comparison;
-    }
-  }
-
-  return 0;
-}
-
-export function isVersionNewer(latestVersion, currentVersion) {
-  return compareVersions(latestVersion, currentVersion) > 0;
-}
-
-export function isVersionAtLeast(version, minimumVersion) {
-  return compareVersions(version, minimumVersion) >= 0;
-}
-
-export function deriveNpmDistTag(version) {
-  const { prerelease } = parseVersion(version);
-
-  if (prerelease.length === 0) {
-    return "latest";
-  }
-
-  const namedChannel = prerelease.find(
-    (token) => typeof token === "string" && token.length > 0
-  );
-
-  return namedChannel || "prerelease";
-}

package/cli/lib/version.js

@@ -1,12 +0,0 @@
-import { readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-
-// Read version dynamically from package.json so `curdx-flow --version` always
-// reflects the installed package version.
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const pkgJson = JSON.parse(
-  readFileSync(join(__dirname, "..", "..", "package.json"), "utf-8")
-);
-
-export const VERSION = pkgJson.version;

package/cli/protocols-body.md

@@ -1,22 +0,0 @@
-## Global Protocols (curdx-flow)
-
-All operations MUST strictly follow these system constraints:
-
-### Language separation
-- **Tool / persistence layer = English**: commit messages, code, comments, file names, function names, PR descriptions, error messages thrown by code, and any artifact persisted to the repository or consumed by agents / skills / hooks at runtime.
-- **Conversational layer = Simplified Chinese**: chat replies, explanations and reasoning shown directly to the human in a conversation interface (e.g. Claude Code chat).
-- **Installer UX (`cli/` only, narrow carve-out)**: interactive menus printed by the npm-published installer under `cli/**` may present localized Chinese options because they serve a human operator at install time. This carve-out does NOT apply to `agents/`, `skills/`, `commands/`, `gates/`, `hooks/`, `knowledge/`, documentation, or any prose consumed by agents at runtime — those stay English.
-
-Rationale: English in the persistence / tool / agent-input layer aligns with developer-tool industry norms (npm/git/cargo are all English) and keeps AI / agent adaptation reliable. Chinese in the conversational layer matches the user's language preference. The installer carve-out reflects the fact that installer menus are a human-to-human interaction surface, not agent input. Mixing the two (e.g. Chinese commit messages, Chinese strings inside agent prompts) is a violation.
-
-### Discovery & reasoning
-- **Library / framework / API questions**: query `context7` MCP first. Do not rely on training memory.
-- **Planning / design / architecture review / epic decomposition**: use `sequential-thinking` MCP with at least 5 thoughts.
-- **Cross-session memory**: query `claude-mem` MCP at task start when available.
-
-### Three red lines (inherited from pua)
-1. **Closed loop**: claiming "done"? Provide evidence (build output / passing tests / curl result).
-2. **Fact-driven**: before saying "probably an env issue", verify it. Unverified attribution = blame-shifting.
-3. **Exhaust everything**: before saying "I cannot", complete the systematic 4-stage debugging.
-
-> Source: curdx-flow CLI installer (`curdx-flow install`). Remove with: `curdx-flow uninstall --purge`.

package/cli/protocols.js

@@ -1,162 +0,0 @@
-/**
- * Global protocol injection — manage a curdx-flow-owned block in ~/.claude/CLAUDE.md.
- *
- * Uses sentinel markers so the block is idempotent (re-install upgrades it)
- * and reversible (uninstall removes it cleanly without touching user content).
- */
-
-import {
-  readFileSync,
-  writeFileSync,
-  existsSync,
-  mkdirSync,
-  renameSync,
-  unlinkSync,
-} from "node:fs";
-import { join, dirname } from "node:path";
-import { homedir } from "node:os";
-import { fileURLToPath } from "node:url";
-
-// Use os.homedir() instead of process.env.HOME — HOME can be empty inside
-// non-login shells (CI containers, some spawned child envs), which would
-// resolve GLOBAL_CLAUDE_MD to "/.claude/CLAUDE.md" (filesystem root) and
-// cause mkdir/writeFileSync to fail with EACCES. homedir() falls back to
-// the effective user's passwd entry on POSIX and USERPROFILE on Windows.
-const HOME = homedir();
-export const GLOBAL_CLAUDE_MD = join(HOME, ".claude", "CLAUDE.md");
-
-const SENTINEL_BEGIN =
-  "<!-- BEGIN curdx-flow protocols (auto-managed; do not edit between sentinels) -->";
-const SENTINEL_END = "<!-- END curdx-flow protocols -->";
-
-// Protocol body lives in a sibling markdown file so it keeps markdown tooling
-// (preview, lint, prettier) and avoids backtick-escaping noise inside a JS
-// template literal. The body itself is English — it's instructions for the
-// model, not user-facing prose.
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const PROTOCOL_BODY = readFileSync(
-  join(__dirname, "protocols-body.md"),
-  "utf-8"
-).trim();
-
-const FULL_BLOCK = `${SENTINEL_BEGIN}\n${PROTOCOL_BODY}\n${SENTINEL_END}`;
-
-/**
- * Read existing CLAUDE.md content; return "" if missing.
- */
-function readGlobalMd() {
-  if (!existsSync(GLOBAL_CLAUDE_MD)) return "";
-  return readFileSync(GLOBAL_CLAUDE_MD, "utf-8");
-}
-
-/**
- * Locate the sentinel block in the content.
- * Returns { start, end } indices into content, `null` if neither sentinel is
- * present, or throws if the block is corrupted (begin without matching end).
- * The throw is intentional — previously the corrupted case silently returned
- * null, so the next run would append a SECOND block, producing drift.
- */
-function findBlock(content) {
-  const start = content.indexOf(SENTINEL_BEGIN);
-  if (start === -1) {
-    // Also check for a dangling END without BEGIN — that is also corrupted.
-    if (content.indexOf(SENTINEL_END) !== -1) {
-      throw new Error(
-        `Corrupted protocol block in ${GLOBAL_CLAUDE_MD}: END sentinel found without BEGIN. ` +
-          `Manually inspect the file and remove the dangling END line, then re-run.`
-      );
-    }
-    return null;
-  }
-  const endIdx = content.indexOf(SENTINEL_END, start);
-  if (endIdx === -1) {
-    throw new Error(
-      `Corrupted protocol block in ${GLOBAL_CLAUDE_MD}: BEGIN sentinel found without END. ` +
-        `Manually remove the orphan BEGIN line (or restore the END), then re-run.`
-    );
-  }
-  return { start, end: endIdx + SENTINEL_END.length };
-}
-
-/**
- * Write `content` to `path` atomically: write to a sibling temp file first,
- * then rename. This prevents a half-written CLAUDE.md if the process is
- * interrupted mid-write, and avoids races between concurrent install /
- * uninstall invocations.
- */
-function atomicWrite(path, content) {
-  const tmp = `${path}.curdx-flow.tmp.${process.pid}`;
-  try {
-    writeFileSync(tmp, content, "utf-8");
-    renameSync(tmp, path);
-  } catch (err) {
-    // Best-effort cleanup of the temp file; swallow errors here since we
-    // are already re-throwing the real failure.
-    try {
-      if (existsSync(tmp)) unlinkSync(tmp);
-    } catch {
-      // ignore
-    }
-    throw err;
-  }
-}
-
-/**
- * Inject (or upgrade) the protocol block in ~/.claude/CLAUDE.md.
- * @returns {{action:"created"|"upgraded"|"unchanged", path:string}}
- */
-export function injectGlobalProtocols() {
-  const path = GLOBAL_CLAUDE_MD;
-  const dir = dirname(path);
-  if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
-
-  const existing = readGlobalMd();
-  const block = findBlock(existing);
-
-  if (!block) {
-    // Append — preserve all user content, add a separator if file had content
-    const sep = existing.length > 0 && !existing.endsWith("\n\n")
-      ? (existing.endsWith("\n") ? "\n" : "\n\n")
-      : "";
-    const next = existing + sep + FULL_BLOCK + "\n";
-    atomicWrite(path, next);
-    return { action: existing.length === 0 ? "created" : "appended", path };
-  }
-
-  // Replace existing block (handle upgrade-in-place)
-  const currentBlock = existing.slice(block.start, block.end);
-  if (currentBlock === FULL_BLOCK) {
-    return { action: "unchanged", path };
-  }
-  const next =
-    existing.slice(0, block.start) + FULL_BLOCK + existing.slice(block.end);
-  atomicWrite(path, next);
-  return { action: "upgraded", path };
-}
-
-/**
- * Remove the protocol block from ~/.claude/CLAUDE.md.
- * @returns {{action:"removed"|"not-present"|"no-file", path:string}}
- */
-export function removeGlobalProtocols() {
-  const path = GLOBAL_CLAUDE_MD;
-  if (!existsSync(path)) return { action: "no-file", path };
-
-  const existing = readGlobalMd();
-  const block = findBlock(existing);
-  if (!block) return { action: "not-present", path };
-
-  // Trim leading/trailing whitespace adjacent to the block
-  let start = block.start;
-  let end = block.end;
-  // Eat one trailing newline if present
-  if (existing[end] === "\n") end++;
-  // Eat one leading newline if previous char is also newline (collapse blank lines)
-  if (start > 0 && existing[start - 1] === "\n" && existing[start - 2] === "\n") {
-    start--;
-  }
-
-  const next = existing.slice(0, start) + existing.slice(end);
-  atomicWrite(path, next);
-  return { action: "removed", path };
-}

package/cli/registry.js

@@ -1,123 +0,0 @@
-/**
- * Single source of truth for recommended companion plugins.
- *
- * Background: before this file existed, the list of recommended plugins lived
- * in FOUR independent places (install.js, uninstall.js, upgrade.js,
- * doctor.js). They drifted — chrome-devtools-mcp was added to install.js
- * during the beta.8 MCP decoupling but forgotten in the other three,
- * making it installable but uninstallable. This registry exists so adding
- * or removing a plugin is a one-file change.
- *
- * Every consumer pulls what it needs via property access:
- *   - install.js     → marketplaceSource + installSpec + hint (+ optional postInstall)
- *   - uninstall.js   → uninstallSpec + uninstallArgs + marketplaceId
- *   - upgrade.js     → updateSpec + marketplaceId
- *   - doctor.js      → id + installSpec (for health checks and recovery hints)
- */
-
-export const RECOMMENDED_PLUGINS = [
-  {
-    name: "pua",
-    id: "pua@pua-skills",
-    marketplaceSource: "tanweai/pua",
-    marketplaceId: "pua-skills",
-    installSpec: "pua@pua-skills",
-    uninstallSpec: "pua@pua-skills",
-    updateSpec: "pua@pua-skills",
-    scope: "user",
-    hint: "no-give-up + three red lines",
-  },
-  {
-    name: "claude-mem",
-    id: "claude-mem@thedotmack",
-    marketplaceSource: "thedotmack/claude-mem",
-    marketplaceId: "thedotmack",
-    installSpec: "claude-mem@thedotmack",
-    uninstallSpec: "claude-mem@thedotmack",
-    updateSpec: "claude-mem@thedotmack",
-    uninstallArgs: ["--keep-data"],
-    scope: "user",
-    hint: "automatic cross-session memory",
-    postInstall: "claude-mem-runtimes",
-  },
-  {
-    name: "frontend-design",
-    id: "frontend-design@claude-plugins-official",
-    marketplaceSource: "anthropics/claude-plugins-official",
-    marketplaceId: "claude-plugins-official",
-    installSpec: "frontend-design@claude-plugins-official",
-    uninstallSpec: "frontend-design@claude-plugins-official",
-    updateSpec: "frontend-design@claude-plugins-official",
-    scope: "user",
-    hint: "Anthropic official UI skill",
-  },
-  {
-    name: "chrome-devtools-mcp",
-    id: "chrome-devtools-mcp@chrome-devtools-plugins",
-    marketplaceSource: "ChromeDevTools/chrome-devtools-mcp",
-    marketplaceId: "chrome-devtools-plugins",
-    installSpec: "chrome-devtools-mcp@chrome-devtools-plugins",
-    uninstallSpec: "chrome-devtools-mcp@chrome-devtools-plugins",
-    updateSpec: "chrome-devtools-mcp@chrome-devtools-plugins",
-    scope: "user",
-    hint: "Chrome DevTools + Puppeteer (Google official)",
-  },
-];
-
-export const REQUIRED_PLUGINS = [
-  {
-    name: "context7-plugin",
-    id: "context7-plugin@context7-marketplace",
-    marketplaceSource: "upstash/context7",
-    marketplaceId: "context7-marketplace",
-    installSpec: "context7-plugin@context7-marketplace",
-    uninstallSpec: "context7-plugin@context7-marketplace",
-    updateSpec: "context7-plugin@context7-marketplace",
-    scope: "user",
-    hint: "official Context7 plugin (MCP + skill + docs-researcher agent + /context7:docs)",
-    requiresConfig: true,
-    configType: "apiKey",
-  },
-];
-
-/**
- * MCP servers that curdx-flow depends on for its core discipline rules and
- * still registers directly. Starting beta.12 these are registered at
- * USER-LEVEL via `claude mcp add` instead of plugin.json bundling, so:
- *
- *   - Tool names stay standard (mcp__sequential-thinking__*)
- *     — matching every agent's and knowledge doc's hardcoded references.
- *
- * Context7 is installed via Upstash's official Claude Code plugin instead
- * of direct `claude mcp add`: context7-plugin@context7-marketplace includes
- * the MCP server, skill, docs-researcher agent, and /context7:docs command.
- */
-export const BUNDLED_MCPS = [
-  {
-    name: "sequential-thinking",
-    command: "npx",
-    args: ["-y", "@modelcontextprotocol/server-sequential-thinking"],
-    purpose: "structured reasoning for design / review (L2 Mandatory Tool)",
-    preserveExisting: true,
-  },
-];
-
-/**
- * Marketplaces to refresh during `upgrade`. Derived from RECOMMENDED_PLUGINS
- * plus the curdx-flow marketplace itself.
- */
-export const MARKETPLACES_TO_REFRESH = [
-  "curdx-flow-marketplace",
-  ...REQUIRED_PLUGINS.map((p) => p.marketplaceId),
-  ...RECOMMENDED_PLUGINS.map((p) => p.marketplaceId),
-];
-
-/**
- * Plugin install specs to update during `upgrade` — includes curdx-flow
- * itself plus every recommended plugin.
- */
-export const PLUGINS_TO_UPDATE = [
-  "curdx-flow@curdx-flow-marketplace",
-  ...REQUIRED_PLUGINS.map((p) => p.updateSpec),
-  ...RECOMMENDED_PLUGINS.map((p) => p.updateSpec),
-];

package/cli/router.js

@@ -1,49 +0,0 @@
-import { doctor } from "./doctor.js";
-import { install } from "./install.js";
-import { uninstall } from "./uninstall.js";
-import { upgrade } from "./upgrade.js";
-import { printHelp } from "./help.js";
-import { VERSION, color } from "./utils.js";
-
-export async function runCli(args = process.argv.slice(2)) {
-  const cmd = args[0];
-  const rest = args.slice(1);
-
-  if (cmd === "--version" || cmd === "-v") {
-    console.log(VERSION);
-    return;
-  }
-
-  if (!cmd || cmd === "--help" || cmd === "-h") {
-    printHelp();
-    return;
-  }
-
-  try {
-    switch (cmd) {
-      case "install":
-        await install(rest);
-        break;
-      case "doctor":
-        await doctor(rest);
-        break;
-      case "upgrade":
-        await upgrade(rest);
-        break;
-      case "uninstall":
-      case "remove":
-        await uninstall(rest);
-        break;
-      default:
-        console.error(color.red(`Unknown command: ${cmd}`));
-        console.error(`Run ${color.cyan("npx @curdx/flow --help")} for CLI usage.`);
-        process.exit(1);
-    }
-  } catch (err) {
-    console.error(color.red(`\n✗ ${err.message || err}`));
-    if (process.env.CURDX_DEBUG) {
-      console.error(err.stack || "");
-    }
-    process.exit(1);
-  }
-}