@curdx/flow 6.0.5 → 6.0.6

package/CHANGELOG.md

@@ -2,11 +2,19 @@
 
 All notable changes to `@curdx/flow` are documented here. Format follows [Keep a Changelog](https://keepachangelog.com/) and the project follows [Semantic Versioning](https://semver.org/).
 
+## 6.0.6 — 2026-04-29
+
+### Removed
+
+- **Legacy plugin migration code path.** `LEGACY_PLUGIN_IDS`, `uninstallLegacyIfPresent`, and the entire `src/runner/legacy-cleanup.ts` file removed. Users still on v3.x slugs will need to manually `claude plugin uninstall` the old slug before upgrading — the auto-cleanup is gone.
+- **Historical CHANGELOG entries for the v3.x rename releases** (3.4.0, 3.5.0, 4.0.0, 4.0.1) deleted. Keep-a-Changelog convention deliberately violated at the user's request.
+- LICENSE copyright line and NOTICE.md attribution intentionally untouched (MIT licensing requires these).
+
 ## 6.0.5 — 2026-04-29
 
 ### Changed
 
-- **Drop legacy upstream-attribution chrome from user-facing surfaces.** `src/registry/plugins/curdx-flow.ts` install description no longer carries the `(originally tzachbon/smart-ralph)` suffix; `README.md`'s tools table and the v3.x → v4 / v5 migration notes block (`ralph-specum@smart-ralph`, `ralph-specum@curdx-flow` uninstall instructions) removed — those upgrades are 2+ majors back, the auto-migration in `purgeLegacyPluginArtifacts` still handles any stragglers transparently. Authorship and legal attribution preserved verbatim in `plugins/curdx-flow/LICENSE` (MIT copyright line) and `plugins/curdx-flow/NOTICE.md`; CHANGELOG history kept untouched per Keep-a-Changelog convention; `LEGACY_PLUGIN_IDS` constant kept (still drives runtime migration cleanup).
+- **Drop legacy upstream-attribution chrome from user-facing surfaces.** Install description and README tools table / migration notes block scrubbed. MIT `LICENSE` copyright line and `NOTICE.md` attribution preserved verbatim (legal requirement).
 
 ## 6.0.4 — 2026-04-29
 
@@ -31,50 +39,6 @@ All notable changes to `@curdx/flow` are documented here. Format follows [Keep a
 
 - Both additions are repo-internal — neither file ships in the npm tarball (`files: ["dist", "CHANGELOG.md"]` is unchanged), so the published artifact is byte-identical to 6.0.1 modulo version metadata. This release exists to dogfood the new `bump-version` flow end-to-end.
 
-## 4.0.1 — 2026-04-27
-
-### Fixed
-
-- **Migration cleanup is now exhaustive.** v4.0.0's auto-migration for the `ralph-specum` → `curdx-flow` rename only invoked `claude plugin uninstall`, which leaves substantial residue when the marketplace's plugin id has been renamed (the CLI can't resolve the legacy id and bails). The installer now manually purges every leftover artifact for legacy slugs (`ralph-specum@curdx-flow`, `ralph-specum@smart-ralph`):
-  - `~/.claude/settings.json` → removes `enabledPlugins[<legacyId>]`
-  - `~/.claude/plugins/installed_plugins.json` → removes `plugins[<legacyId>]`
-  - `~/.claude/plugins/cache/<marketplace>/<name>/` → recursive remove
-  - `~/.claude/plugins/data/<name>-<marketplace>/` → recursive remove
-  - Marketplace registrations (`known_marketplaces.json`, `extraKnownMarketplaces`) are deliberately left alone — those are user-managed.
-- Implementation lives in `src/runner/legacy-cleanup.ts::purgeLegacyPluginArtifacts`. Idempotent and safe: every step swallows ENOENT silently and reports JSON / IO errors via the install task log without failing the flow.
-
-## 4.0.0 — 2026-04-27
-
-### Breaking
-
-- **Plugin renamed `ralph-specum` → `curdx-flow`.** The bundled spec-driven workflow plugin now lives under the `curdx-flow` brand, slash namespace `/curdx-flow:*`, full slug `curdx-flow@curdx`. The marketplace identifier was simultaneously shortened from `curdx-flow` to `curdx` (the GitHub repo source `curdx/curdx-flow` is unchanged). All in-plugin slash references, env vars (`RALPH_SPECUM_*` → `CURDX_FLOW_*`), and labels were updated accordingly.
-- **Auto-migration:** the installer now detects legacy `ralph-specum@curdx-flow` and `ralph-specum@smart-ralph` installs and uninstalls them automatically before installing the new slug, so users on v3.4 / v3.5 transparently transition. Your `specs/` directory and any in-progress spec state files are not touched — the rename is purely a plugin-identity change.
-- **Manual fallback:** if you'd rather run the migration yourself, execute `claude plugin uninstall ralph-specum@curdx-flow` (or `@smart-ralph`) before re-running `npx @curdx/flow install`. The old marketplace `curdx-flow` may remain registered alongside the new `curdx` marketplace; this is harmless and you can `claude plugin marketplace remove curdx-flow` if you want to clean up.
-
-### Notes
-
-- The plugin's authorship and license lineage (smart-ralph by tzachbon → ralph-specum fork → curdx-flow) is recorded in `plugins/curdx-flow/NOTICE.md`. MIT License preserved.
-- `.claude-plugin/marketplace.json` now declares one plugin: `curdx-flow` v4.9.1 sourced from `./plugins/curdx-flow`.
-
-## 3.5.0 — 2026-04-27
-
-### Changed
-
-- **`ralph-specum` is now a required bundled plugin** — it no longer appears as an optional checkbox in the install multiselect. Instead, it's listed in a dedicated "always installed" header above the prompt, alongside its current state (not installed / up-to-date / update available). When the flow runs, ralph-specum is auto-installed or auto-updated whenever it needs action; up-to-date installs are silently skipped. The other six items (pua, claude-mem, chrome-devtools-mcp, frontend-design, sequential-thinking, context7) remain optional. `--ids X` now also auto-includes required plugins that need action; users can still explicitly run `--ids ralph-specum` to force a reinstall confirmation. Uninstall flow is unchanged — users may still uninstall ralph-specum, and the next install will re-add it.
-- **Internal:** `Pkg` type gains a `required?: boolean` field so future bundled plugins can opt into the same "always installed" semantics without touching install-flow code.
-
-## 3.4.0 — 2026-04-27
-
-### Added
-
-- **`ralph-specum` is now a bundled plugin** — spec-driven development with autonomous task-by-task execution (research → requirements → design → tasks → implement, plus epic triage). Originally authored by [tzachbon](https://github.com/tzachbon/smart-ralph); ralph-specum v4.9.1 has been migrated into this repository as the canonical home and is no longer tracked against upstream. MIT license and authorship are preserved at `plugins/ralph-specum/LICENSE` and `plugins/ralph-specum/NOTICE.md`.
-- **curdx-flow itself is now a Claude Code marketplace** — the repo ships `.claude-plugin/marketplace.json` so Claude CLI can install bundled plugins via `claude plugin marketplace add curdx/curdx-flow` + `claude plugin install ralph-specum@curdx-flow`. The flow installer wires this up automatically; users just run `npx @curdx/flow install` and ralph-specum is pre-checked in the multiselect along with the other not-installed items.
-
-### Notes
-
-- If you previously installed ralph-specum from the upstream `tzachbon/smart-ralph` marketplace, run `claude plugin uninstall ralph-specum@smart-ralph` before installing this version to avoid a name collision. Going forward, only the `ralph-specum@curdx-flow` build is maintained.
-- Plugin files are not shipped in the npm tarball (`package.json` `files` is unchanged: `["dist", "CHANGELOG.md"]`). They live in the GitHub repo and are pulled by Claude CLI when the marketplace is added — so a `git push` of this repo must precede `npm publish` for a new release to be installable.
-
 ## 3.3.2 — 2026-04-27
 
 ### Fixed

package/dist/index.mjs

@@ -576,94 +576,11 @@ var frontendDesign = {
 };
 var frontend_design_default = frontendDesign;
 
-// src/runner/legacy-cleanup.ts
-import { promises as fs2 } from "fs";
-import path2 from "path";
-import os2 from "os";
-async function purgeLegacyPluginArtifacts(legacyId, ctx) {
-  const at = legacyId.indexOf("@");
-  if (at <= 0 || at === legacyId.length - 1) return;
-  const name = legacyId.slice(0, at);
-  const marketplace = legacyId.slice(at + 1);
-  const home = os2.homedir();
-  const settingsPath = path2.join(home, ".claude", "settings.json");
-  const installedPath = path2.join(home, ".claude", "plugins", "installed_plugins.json");
-  const cacheDir = path2.join(home, ".claude", "plugins", "cache", marketplace, name);
-  const dataDir = path2.join(home, ".claude", "plugins", "data", `${name}-${marketplace}`);
-  let removedAny = false;
-  removedAny = await deleteJsonKey(settingsPath, ["enabledPlugins", legacyId], ctx) || removedAny;
-  removedAny = await deleteJsonKey(installedPath, ["plugins", legacyId], ctx) || removedAny;
-  removedAny = await rmDir(cacheDir, ctx) || removedAny;
-  removedAny = await rmDir(dataDir, ctx) || removedAny;
-  if (removedAny) {
-    ctx.log.message(`Purged legacy artifacts for ${legacyId}.`);
-    clearStateCache();
-  }
-}
-async function deleteJsonKey(filePath, keyPath, ctx) {
-  let raw;
-  try {
-    raw = await fs2.readFile(filePath, "utf8");
-  } catch (err) {
-    if (err.code === "ENOENT") return false;
-    ctx.log.message(`Skip purge of ${filePath}: ${err.message}`);
-    return false;
-  }
-  let json;
-  try {
-    json = JSON.parse(raw);
-  } catch (err) {
-    ctx.log.message(`Skip purge of ${filePath}: invalid JSON (${err.message})`);
-    return false;
-  }
-  let cursor = json;
-  for (let i = 0; i < keyPath.length - 1; i++) {
-    const next = cursor?.[keyPath[i]];
-    if (!next || typeof next !== "object") return false;
-    cursor = next;
-  }
-  const finalKey = keyPath[keyPath.length - 1];
-  if (!cursor || !(finalKey in cursor)) return false;
-  delete cursor[finalKey];
-  try {
-    await fs2.writeFile(filePath, JSON.stringify(json, null, 2) + "\n", "utf8");
-    return true;
-  } catch (err) {
-    ctx.log.message(`Failed to rewrite ${filePath}: ${err.message}`);
-    return false;
-  }
-}
-async function rmDir(dirPath, ctx) {
-  try {
-    await fs2.access(dirPath);
-  } catch {
-    return false;
-  }
-  try {
-    await fs2.rm(dirPath, { recursive: true, force: true });
-    return true;
-  } catch (err) {
-    ctx.log.message(`Failed to remove ${dirPath}: ${err.message}`);
-    return false;
-  }
-}
-
 // src/registry/plugins/curdx-flow.ts
 var PLUGIN_ID5 = "curdx-flow@curdx";
 var PLUGIN_NAME3 = "curdx-flow";
 var MARKETPLACE_NAME4 = "curdx";
 var MARKETPLACE_SOURCE4 = "curdx/curdx-flow";
-var LEGACY_PLUGIN_IDS = ["ralph-specum@curdx-flow", "ralph-specum@smart-ralph"];
-async function uninstallLegacyIfPresent(ctx) {
-  for (const legacyId of LEGACY_PLUGIN_IDS) {
-    const installed = await isPluginInstalled(legacyId);
-    if (installed) {
-      ctx.log.message(`Removing legacy plugin ${legacyId} (renamed to ${PLUGIN_ID5})\u2026`);
-      await uninstallPluginById(legacyId, ctx);
-    }
-    await purgeLegacyPluginArtifacts(legacyId, ctx);
-  }
-}
 var curdxFlow = {
   id: "curdx-flow",
   name: "curdx-flow",
@@ -681,15 +598,11 @@ var curdxFlow = {
   },
   latestVersion: () => getMarketplacePluginVersion(MARKETPLACE_NAME4, PLUGIN_NAME3),
   install: async (ctx) => {
-    await uninstallLegacyIfPresent(ctx);
     await ensureMarketplace(MARKETPLACE_NAME4, MARKETPLACE_SOURCE4, ctx);
     await installPluginById(PLUGIN_ID5, ctx);
   },
   uninstall: (ctx) => uninstallPluginById(PLUGIN_ID5, ctx),
-  update: async (ctx) => {
-    await uninstallLegacyIfPresent(ctx);
-    await updatePluginById(PLUGIN_ID5, ctx);
-  }
+  update: (ctx) => updatePluginById(PLUGIN_ID5, ctx)
 };
 var curdx_flow_default = curdxFlow;
 
@@ -799,15 +712,15 @@ function findPkg(id) {
 }
 
 // src/runner/claudeMd.ts
-import { promises as fs3 } from "fs";
-import path3 from "path";
-import os3 from "os";
+import { promises as fs2 } from "fs";
+import path2 from "path";
+import os2 from "os";
 import * as p3 from "@clack/prompts";
 var BEGIN_MARKER = "<!-- BEGIN @curdx/flow v1 -->";
 var END_MARKER = "<!-- END @curdx/flow v1 -->";
 var BLOCK_RE = /<!-- BEGIN @curdx\/flow v\d+[^>]*-->[\s\S]*?<!-- END @curdx\/flow v\d+ -->/;
 function claudeMdPath() {
-  return path3.join(os3.homedir(), ".claude", "CLAUDE.md");
+  return path2.join(os2.homedir(), ".claude", "CLAUDE.md");
 }
 function buildCombinationPatterns(ids) {
   const has = (k) => ids.has(k);
@@ -961,7 +874,7 @@ async function syncClaudeMd(opts) {
     let existing = "";
     let existed = true;
     try {
-      existing = await fs3.readFile(file, "utf8");
+      existing = await fs2.readFile(file, "utf8");
     } catch (err) {
       if (err.code === "ENOENT") {
         existed = false;
@@ -983,10 +896,10 @@ async function syncClaudeMd(opts) {
     if (next === existing) {
       return { status: "unchanged", path: file };
     }
-    await fs3.mkdir(path3.dirname(file), { recursive: true });
+    await fs2.mkdir(path2.dirname(file), { recursive: true });
     const tmp = `${file}.tmp.${process.pid}`;
-    await fs3.writeFile(tmp, next, "utf8");
-    await fs3.rename(tmp, file);
+    await fs2.writeFile(tmp, next, "utf8");
+    await fs2.rename(tmp, file);
     if (!existed) return { status: "created", path: file };
     if (hadBlock && items.length === 0) return { status: "removed", path: file };
     return { status: "updated", path: file };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@curdx/flow",
-  "version": "6.0.5",
+  "version": "6.0.6",
   "description": "Interactive installer for Claude Code plugins and MCP servers",
   "type": "module",
   "bin": "./dist/index.mjs",