@curdx/flow 2.3.6 → 2.3.8

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Claude Code Discipline Layer — spec-driven workflow + goal-backward verification + Karpathy 4 principles enforced via gates. Stops Claude from faking \"done\" on non-trivial features.",
-    "version": "2.3.6"
+    "version": "2.3.8"
   },
   "allowCrossMarketplaceDependenciesOn": [
     "context7-marketplace"
@@ -16,7 +16,7 @@
       "name": "curdx-flow",
       "source": "./",
       "description": "Claude Code Discipline Layer — spec-driven workflow + goal-backward verification + Karpathy 4 principles enforced via gates. Stops Claude from faking \"done\" on non-trivial features.",
-      "version": "2.3.6",
+      "version": "2.3.8",
       "author": {
         "name": "wdx",
         "email": "bydongxin@gmail.com"

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "curdx-flow",
-  "version": "2.3.6",
+  "version": "2.3.8",
   "description": "Claude Code Discipline Layer — spec-driven workflow + goal-backward verification + Karpathy 4 principles enforced via gates. Stops Claude from faking \"done\" on non-trivial features.",
   "author": {
     "name": "wdx",

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 2.3.8
+
+- taught `doctor` to detect dirty CurDX-Flow source checkouts, so plugin developers immediately see when Claude cannot possibly be running their latest local edits yet
+- surfaced bundled source repo metadata (`branch`, `shortSha`, `exactTag`, `dirty`) alongside bundled plugin body version in diagnostics and JSON output
+- documented the reinstall workflow for “same version, but local source changed” plugin-development scenarios
+
+## 2.3.7
+
+- taught `doctor` to detect source/package-vs-installed plugin version drift so local plugin development and release validation no longer silently run against stale Claude plugin cache state
+- exposed bundled plugin body version in the runtime report and machine-readable doctor payload for automation consumers
+- documented the reinstall/restart recovery path when Claude is still loading an older CurDX-Flow build
+
 ## 2.3.6
 
 - taught `doctor` to inspect file-based Claude Code managed settings and apply them at the correct highest-precedence layer for CurDX-Flow plugin options

package/cli/README.md

@@ -44,6 +44,10 @@ External diagnostics: claude CLI / curdx-flow / required MCPs / recommended plug
 
 `--json` emits the full health result as machine-readable JSON for CI, wrappers, or external diagnostics. It includes `contractVersion`, `metadata.appliedFixes`, settings inspection scope metadata, the rendered report structure, and raw `doctorData`, including CurDX-Flow plugin option precedence, file-based managed settings, and runtime env projection.
 
+`doctor` also compares the plugin body shipped with the current CLI/package against the `curdx-flow` version Claude actually has installed, so local development and release validation do not silently run against stale plugin cache state.
+
+When the CLI is running from a git checkout, `doctor` also reports whether that source repo is dirty. This catches the common plugin-development trap where Claude is still running the previously installed cache while your local checkout has uninstalled edits.
+
 ### Project initialization (not a CLI command)
 
 Project initialization is a Claude Code slash command, not a CLI one. After `install`, open your project in Claude Code and run:

package/cli/doctor-workflow.js

@@ -163,9 +163,19 @@ export async function readBundledPluginRuntimeDefaults(packageRoot = PACKAGE_ROO
   const pluginSettingsPath = path.join(packageRoot, "settings.json");
   const pluginManifestPath = path.join(packageRoot, ".claude-plugin", "plugin.json");
   const monitorsPath = path.join(packageRoot, "monitors", "monitors.json");
+  const packageJsonPath = path.join(packageRoot, "package.json");
 
   const state = {
     exists: false,
+    packageVersion: null,
+    pluginVersion: null,
+    sourceRepo: {
+      isGitRepo: false,
+      branch: null,
+      shortSha: null,
+      exactTag: null,
+      dirty: false,
+    },
     defaultAgent: null,
     subagentStatusLineCommand: null,
     monitorCount: 0,
@@ -189,6 +199,38 @@ export async function readBundledPluginRuntimeDefaults(packageRoot = PACKAGE_ROO
     pluginManifest = null;
   }
 
+  try {
+    const pkg = JSON.parse(await fs.readFile(packageJsonPath, "utf-8"));
+    state.packageVersion = typeof pkg?.version === "string" ? pkg.version : null;
+  } catch {
+    state.packageVersion = null;
+  }
+
+  const gitRepoCheck = runSync("git", ["rev-parse", "--is-inside-work-tree"], { cwd: packageRoot });
+  if (gitRepoCheck.code === 0 && gitRepoCheck.stdout.trim() === "true") {
+    state.sourceRepo.isGitRepo = true;
+
+    const branch = runSync("git", ["rev-parse", "--abbrev-ref", "HEAD"], { cwd: packageRoot });
+    if (branch.code === 0) {
+      state.sourceRepo.branch = branch.stdout.trim() || null;
+    }
+
+    const shortSha = runSync("git", ["rev-parse", "--short", "HEAD"], { cwd: packageRoot });
+    if (shortSha.code === 0) {
+      state.sourceRepo.shortSha = shortSha.stdout.trim() || null;
+    }
+
+    const exactTag = runSync("git", ["describe", "--tags", "--exact-match", "HEAD"], { cwd: packageRoot });
+    if (exactTag.code === 0) {
+      state.sourceRepo.exactTag = exactTag.stdout.trim() || null;
+    }
+
+    const status = runSync("git", ["status", "--short"], { cwd: packageRoot });
+    if (status.code === 0) {
+      state.sourceRepo.dirty = status.stdout.trim().length > 0;
+    }
+  }
+
   try {
     monitors = JSON.parse(await fs.readFile(monitorsPath, "utf-8"));
   } catch {
@@ -200,6 +242,7 @@ export async function readBundledPluginRuntimeDefaults(packageRoot = PACKAGE_ROO
   }
 
   state.exists = true;
+  state.pluginVersion = typeof pluginManifest?.version === "string" ? pluginManifest.version : null;
   state.defaultAgent = typeof pluginSettings?.agent === "string" ? pluginSettings.agent : null;
   state.subagentStatusLineCommand =
     typeof pluginSettings?.subagentStatusLine?.command === "string"

package/cli/lib/doctor-report.js

@@ -263,9 +263,36 @@ export function buildDoctorReport({
   pushLine(lines, "ok", `Node                  ${nodeVersion}`);
 
   const curdx = plugins.find((plugin) => plugin.name === "curdx-flow");
+  const bundledVersion =
+    bundledPluginRuntimeDefaults?.pluginVersion || bundledPluginRuntimeDefaults?.packageVersion || null;
+  const bundledSourceRepo = bundledPluginRuntimeDefaults?.sourceRepo || {};
   if (curdx) {
     if (curdx.status === "enabled") {
       pushLine(lines, "ok", `curdx-flow            v${curdx.version} (enabled)`);
+      if (bundledVersion && curdx.version && curdx.version !== bundledVersion) {
+        pushLine(
+          lines,
+          "warn",
+          `curdx-flow source/body  v${bundledVersion} differs from installed v${curdx.version}`,
+          [
+            "you are not validating the same CurDX-Flow build that Claude currently loads",
+            "reinstall the plugin from the current source/package, then restart Claude Code",
+            "run: npx @curdx/flow install --all",
+          ]
+        );
+      }
+      if (bundledSourceRepo.isGitRepo && bundledSourceRepo.dirty) {
+        pushLine(
+          lines,
+          "warn",
+          "curdx-flow source repo has uninstalled local changes",
+          [
+            "the current CLI/source checkout has git modifications that Claude's installed plugin cannot see until you reinstall it",
+            "re-run: npx @curdx/flow install --all",
+            "then fully restart Claude Code before validating plugin behavior",
+          ]
+        );
+      }
     } else {
       pushLine(
         lines,
@@ -442,6 +469,36 @@ export function buildDoctorReport({
   if (bundledPluginRuntimeDefaults?.exists) {
     const bundledRuntimeSection = createSection("CurDX-Flow bundled runtime:");
 
+    if (bundledVersion) {
+      pushSectionLine(
+        bundledRuntimeSection,
+        "info",
+        `Bundled plugin body    v${bundledVersion}`
+      );
+    }
+
+    if (bundledSourceRepo.isGitRepo) {
+      const sourceSummary = [
+        bundledSourceRepo.branch,
+        bundledSourceRepo.shortSha,
+      ].filter(Boolean).join(" @ ");
+      const sourceDetails = [];
+      if (bundledSourceRepo.exactTag) {
+        sourceDetails.push(`exact tag: ${bundledSourceRepo.exactTag}`);
+      }
+      sourceDetails.push(
+        bundledSourceRepo.dirty
+          ? "git worktree dirty: local source changes are not reflected in Claude until reinstall"
+          : "git worktree clean"
+      );
+      pushSectionLine(
+        bundledRuntimeSection,
+        bundledSourceRepo.dirty ? "warn" : "info",
+        `Bundled source repo    ${sourceSummary || "git checkout detected"}`,
+        sourceDetails
+      );
+    }
+
     if (bundledPluginRuntimeDefaults.defaultAgent) {
       pushSectionLine(
         bundledRuntimeSection,

package/cli/lib/process.js

@@ -29,8 +29,13 @@ export function run(cmd, args = [], opts = {}) {
 /**
  * Sync run — for quick checks (e.g. "which claude").
  */
-export function runSync(cmd, args = []) {
-  const res = spawnSync(cmd, args, { encoding: "utf-8", shell: false });
+export function runSync(cmd, args = [], opts = {}) {
+  const res = spawnSync(cmd, args, {
+    encoding: "utf-8",
+    shell: false,
+    cwd: opts.cwd,
+    env: opts.env ? { ...process.env, ...opts.env } : process.env,
+  });
   return {
     code: res.status ?? -1,
     stdout: res.stdout ?? "",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@curdx/flow",
-  "version": "2.3.6",
+  "version": "2.3.8",
   "description": "Skill-first discipline layer and CLI installer for Claude Code",
   "type": "module",
   "bin": {