@curdx/flow 3.5.0 → 4.0.1

package/CHANGELOG.md

@@ -2,6 +2,31 @@
 
 All notable changes to `@curdx/flow` are documented here. Format follows [Keep a Changelog](https://keepachangelog.com/) and the project follows [Semantic Versioning](https://semver.org/).
 
+## 4.0.1 — 2026-04-27
+
+### Fixed
+
+- **Migration cleanup is now exhaustive.** v4.0.0's auto-migration for the `ralph-specum` → `curdx-flow` rename only invoked `claude plugin uninstall`, which leaves substantial residue when the marketplace's plugin id has been renamed (the CLI can't resolve the legacy id and bails). The installer now manually purges every leftover artifact for legacy slugs (`ralph-specum@curdx-flow`, `ralph-specum@smart-ralph`):
+  - `~/.claude/settings.json` → removes `enabledPlugins[<legacyId>]`
+  - `~/.claude/plugins/installed_plugins.json` → removes `plugins[<legacyId>]`
+  - `~/.claude/plugins/cache/<marketplace>/<name>/` → recursive remove
+  - `~/.claude/plugins/data/<name>-<marketplace>/` → recursive remove
+  - Marketplace registrations (`known_marketplaces.json`, `extraKnownMarketplaces`) are deliberately left alone — those are user-managed.
+- Implementation lives in `src/runner/legacy-cleanup.ts::purgeLegacyPluginArtifacts`. Idempotent and safe: every step swallows ENOENT silently and reports JSON / IO errors via the install task log without failing the flow.
+
+## 4.0.0 — 2026-04-27
+
+### Breaking
+
+- **Plugin renamed `ralph-specum` → `curdx-flow`.** The bundled spec-driven workflow plugin now lives under the `curdx-flow` brand, slash namespace `/curdx-flow:*`, full slug `curdx-flow@curdx`. The marketplace identifier was simultaneously shortened from `curdx-flow` to `curdx` (the GitHub repo source `curdx/curdx-flow` is unchanged). All in-plugin slash references, env vars (`RALPH_SPECUM_*` → `CURDX_FLOW_*`), and labels were updated accordingly.
+- **Auto-migration:** the installer now detects legacy `ralph-specum@curdx-flow` and `ralph-specum@smart-ralph` installs and uninstalls them automatically before installing the new slug, so users on v3.4 / v3.5 transparently transition. Your `specs/` directory and any in-progress spec state files are not touched — the rename is purely a plugin-identity change.
+- **Manual fallback:** if you'd rather run the migration yourself, execute `claude plugin uninstall ralph-specum@curdx-flow` (or `@smart-ralph`) before re-running `npx @curdx/flow install`. The old marketplace `curdx-flow` may remain registered alongside the new `curdx` marketplace; this is harmless and you can `claude plugin marketplace remove curdx-flow` if you want to clean up.
+
+### Notes
+
+- The plugin's authorship and license lineage (smart-ralph by tzachbon → ralph-specum fork → curdx-flow) is recorded in `plugins/curdx-flow/NOTICE.md`. MIT License preserved.
+- `.claude-plugin/marketplace.json` now declares one plugin: `curdx-flow` v4.9.1 sourced from `./plugins/curdx-flow`.
+
 ## 3.5.0 — 2026-04-27
 
 ### Changed

package/README.md

@@ -31,11 +31,13 @@ npx @curdx/flow --lang en    # override language
 | `claude-mem` | plugin | `thedotmack/claude-mem` |
 | `chrome-devtools-mcp` | plugin | `ChromeDevTools/chrome-devtools-mcp` |
 | `frontend-design` | plugin | `claude-plugins-official` (built-in) |
-| `ralph-specum` | plugin | bundled in this repo — spec-driven dev with autonomous task execution (originally [tzachbon/smart-ralph](https://github.com/tzachbon/smart-ralph), MIT) |
+| `curdx-flow` | plugin | bundled in this repo (always installed) — spec-driven dev with autonomous task execution (originally [tzachbon/smart-ralph](https://github.com/tzachbon/smart-ralph), MIT, intermediate fork: ralph-specum) |
 | `sequential-thinking` | mcp | `@modelcontextprotocol/server-sequential-thinking` |
 | `context7` | mcp | HTTP — `https://mcp.context7.com/mcp` (optional API key) |
 
-> If you previously installed ralph-specum from `tzachbon/smart-ralph`, run `claude plugin uninstall ralph-specum@smart-ralph` before installing this version. Only the `ralph-specum@curdx-flow` build is maintained going forward.
+> Migration notes:
+> - If you installed the upstream `ralph-specum@smart-ralph` build, run `claude plugin uninstall ralph-specum@smart-ralph` before upgrading.
+> - If you installed `ralph-specum@curdx-flow` (curdx-flow v3.4.0 / v3.5.0), run `claude plugin uninstall ralph-specum@curdx-flow` and re-run `npx @curdx/flow install`. The plugin is now `curdx-flow@curdx` with slash namespace `/curdx-flow:*`.
 
 ## What it writes to your filesystem
 

package/dist/index.mjs

@@ -520,18 +520,101 @@ var frontendDesign = {
 };
 var frontend_design_default = frontendDesign;
 
-// src/registry/plugins/ralph-specum.ts
-var PLUGIN_ID5 = "ralph-specum@curdx-flow";
-var PLUGIN_NAME3 = "ralph-specum";
-var MARKETPLACE_NAME4 = "curdx-flow";
+// src/runner/legacy-cleanup.ts
+import { promises as fs2 } from "fs";
+import path2 from "path";
+import os2 from "os";
+async function purgeLegacyPluginArtifacts(legacyId, ctx) {
+  const at = legacyId.indexOf("@");
+  if (at <= 0 || at === legacyId.length - 1) return;
+  const name = legacyId.slice(0, at);
+  const marketplace = legacyId.slice(at + 1);
+  const home = os2.homedir();
+  const settingsPath = path2.join(home, ".claude", "settings.json");
+  const installedPath = path2.join(home, ".claude", "plugins", "installed_plugins.json");
+  const cacheDir = path2.join(home, ".claude", "plugins", "cache", marketplace, name);
+  const dataDir = path2.join(home, ".claude", "plugins", "data", `${name}-${marketplace}`);
+  let removedAny = false;
+  removedAny = await deleteJsonKey(settingsPath, ["enabledPlugins", legacyId], ctx) || removedAny;
+  removedAny = await deleteJsonKey(installedPath, ["plugins", legacyId], ctx) || removedAny;
+  removedAny = await rmDir(cacheDir, ctx) || removedAny;
+  removedAny = await rmDir(dataDir, ctx) || removedAny;
+  if (removedAny) {
+    ctx.log.message(`Purged legacy artifacts for ${legacyId}.`);
+    clearStateCache();
+  }
+}
+async function deleteJsonKey(filePath, keyPath, ctx) {
+  let raw;
+  try {
+    raw = await fs2.readFile(filePath, "utf8");
+  } catch (err) {
+    if (err.code === "ENOENT") return false;
+    ctx.log.message(`Skip purge of ${filePath}: ${err.message}`);
+    return false;
+  }
+  let json;
+  try {
+    json = JSON.parse(raw);
+  } catch (err) {
+    ctx.log.message(`Skip purge of ${filePath}: invalid JSON (${err.message})`);
+    return false;
+  }
+  let cursor = json;
+  for (let i = 0; i < keyPath.length - 1; i++) {
+    const next = cursor?.[keyPath[i]];
+    if (!next || typeof next !== "object") return false;
+    cursor = next;
+  }
+  const finalKey = keyPath[keyPath.length - 1];
+  if (!cursor || !(finalKey in cursor)) return false;
+  delete cursor[finalKey];
+  try {
+    await fs2.writeFile(filePath, JSON.stringify(json, null, 2) + "\n", "utf8");
+    return true;
+  } catch (err) {
+    ctx.log.message(`Failed to rewrite ${filePath}: ${err.message}`);
+    return false;
+  }
+}
+async function rmDir(dirPath, ctx) {
+  try {
+    await fs2.access(dirPath);
+  } catch {
+    return false;
+  }
+  try {
+    await fs2.rm(dirPath, { recursive: true, force: true });
+    return true;
+  } catch (err) {
+    ctx.log.message(`Failed to remove ${dirPath}: ${err.message}`);
+    return false;
+  }
+}
+
+// src/registry/plugins/curdx-flow.ts
+var PLUGIN_ID5 = "curdx-flow@curdx";
+var PLUGIN_NAME3 = "curdx-flow";
+var MARKETPLACE_NAME4 = "curdx";
 var MARKETPLACE_SOURCE4 = "curdx/curdx-flow";
-var ralphSpecum = {
-  id: "ralph-specum",
-  name: "ralph-specum",
+var LEGACY_PLUGIN_IDS = ["ralph-specum@curdx-flow", "ralph-specum@smart-ralph"];
+async function uninstallLegacyIfPresent(ctx) {
+  for (const legacyId of LEGACY_PLUGIN_IDS) {
+    const installed = await isPluginInstalled(legacyId);
+    if (installed) {
+      ctx.log.message(`Removing legacy plugin ${legacyId} (renamed to ${PLUGIN_ID5})\u2026`);
+      await uninstallPluginById(legacyId, ctx);
+    }
+    await purgeLegacyPluginArtifacts(legacyId, ctx);
+  }
+}
+var curdxFlow = {
+  id: "curdx-flow",
+  name: "curdx-flow",
   description: "curdx-flow (originally tzachbon/smart-ralph) \u2014 spec-driven dev with autonomous task execution",
   type: "plugin",
   required: true,
-  slashNamespace: "/ralph-specum:*",
+  slashNamespace: "/curdx-flow:*",
   whenToUse: "for spec-driven multi-task work \u2014 research \u2192 requirements \u2192 design \u2192 tasks \u2192 autonomous execution per task. Use when starting a feature that benefits from upfront spec; skip for one-shot fixes or simple edits.",
   marketplaces: () => [MARKETPLACE_NAME4],
   isInstalled: () => isPluginInstalled(PLUGIN_ID5),
@@ -542,13 +625,17 @@ var ralphSpecum = {
   },
   latestVersion: () => getMarketplacePluginVersion(MARKETPLACE_NAME4, PLUGIN_NAME3),
   install: async (ctx) => {
+    await uninstallLegacyIfPresent(ctx);
     await ensureMarketplace(MARKETPLACE_NAME4, MARKETPLACE_SOURCE4, ctx);
     await installPluginById(PLUGIN_ID5, ctx);
   },
   uninstall: (ctx) => uninstallPluginById(PLUGIN_ID5, ctx),
-  update: (ctx) => updatePluginById(PLUGIN_ID5, ctx)
+  update: async (ctx) => {
+    await uninstallLegacyIfPresent(ctx);
+    await updatePluginById(PLUGIN_ID5, ctx);
+  }
 };
-var ralph_specum_default = ralphSpecum;
+var curdx_flow_default = curdxFlow;
 
 // src/registry/mcps/sequential-thinking.ts
 var MCP_NAME = "sequential-thinking";
@@ -647,7 +734,7 @@ var PKGS = [
   claude_mem_default,
   chrome_devtools_mcp_default,
   frontend_design_default,
-  ralph_specum_default,
+  curdx_flow_default,
   sequential_thinking_default,
   context7_default
 ];
@@ -656,15 +743,15 @@ function findPkg(id) {
 }
 
 // src/runner/claudeMd.ts
-import { promises as fs2 } from "fs";
-import path2 from "path";
-import os2 from "os";
+import { promises as fs3 } from "fs";
+import path3 from "path";
+import os3 from "os";
 import * as p3 from "@clack/prompts";
 var BEGIN_MARKER = "<!-- BEGIN @curdx/flow v1 -->";
 var END_MARKER = "<!-- END @curdx/flow v1 -->";
 var BLOCK_RE = /<!-- BEGIN @curdx\/flow v\d+[^>]*-->[\s\S]*?<!-- END @curdx\/flow v\d+ -->/;
 function claudeMdPath() {
-  return path2.join(os2.homedir(), ".claude", "CLAUDE.md");
+  return path3.join(os3.homedir(), ".claude", "CLAUDE.md");
 }
 function renderItemLine(item) {
   let line = `- ${item.name}`;
@@ -773,7 +860,7 @@ async function syncClaudeMd(opts) {
     let existing = "";
     let existed = true;
     try {
-      existing = await fs2.readFile(file, "utf8");
+      existing = await fs3.readFile(file, "utf8");
     } catch (err) {
       if (err.code === "ENOENT") {
         existed = false;
@@ -795,10 +882,10 @@ async function syncClaudeMd(opts) {
     if (next === existing) {
       return { status: "unchanged", path: file };
     }
-    await fs2.mkdir(path2.dirname(file), { recursive: true });
+    await fs3.mkdir(path3.dirname(file), { recursive: true });
     const tmp = `${file}.tmp.${process.pid}`;
-    await fs2.writeFile(tmp, next, "utf8");
-    await fs2.rename(tmp, file);
+    await fs3.writeFile(tmp, next, "utf8");
+    await fs3.rename(tmp, file);
     if (!existed) return { status: "created", path: file };
     if (hadBlock && items.length === 0) return { status: "removed", path: file };
     return { status: "updated", path: file };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@curdx/flow",
-  "version": "3.5.0",
+  "version": "4.0.1",
   "description": "Interactive installer for Claude Code plugins and MCP servers",
   "type": "module",
   "bin": "./dist/index.mjs",