@curdx/flow 7.1.5 → 7.1.7

package/dist/check-TJPGCG3Z.mjs

@@ -0,0 +1,222 @@
+#!/usr/bin/env node
+
+// src/hooks/lib/check-verification-blocks.ts
+import { readFileSync, readdirSync, statSync, existsSync } from "fs";
+import path from "path";
+var VERIFICATION_PHASES = [
+  "research",
+  "requirements",
+  "design",
+  "tasks",
+  "execution"
+];
+async function runVerificationCheck(opts = {}) {
+  const repoRoot = opts.repoRoot ?? process.cwd();
+  const env = opts.env ?? process.env;
+  const specsDir = path.join(repoRoot, "specs");
+  const specDir = resolveActiveSpecDir(specsDir);
+  if (!specDir) {
+    return {
+      ok: true,
+      code: 0,
+      skipped: true,
+      message: "check-verification-blocks: no active spec found, skipping.\n"
+    };
+  }
+  if (env.CURDX_VERIFY_SKIP_BLOCKS === "1") {
+    return {
+      ok: true,
+      code: 0,
+      skipped: true,
+      specDir,
+      message: "[check-verification-blocks] CURDX_VERIFY_SKIP_BLOCKS=1 \u2014 skipping gate.\n"
+    };
+  }
+  const stateFile = path.join(specDir, ".curdx-state.json");
+  let state;
+  try {
+    state = JSON.parse(readFileSync(stateFile, "utf8"));
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return {
+      ok: false,
+      code: 2,
+      specDir,
+      message: `\u2717 failed to read ${path.relative(repoRoot, stateFile)}: ${msg}
+`
+    };
+  }
+  if (typeof state !== "object" || state === null || !("verificationBlocks" in state)) {
+    const rel2 = path.relative(repoRoot, specDir);
+    return {
+      ok: true,
+      code: 0,
+      skipped: true,
+      specDir,
+      message: `[check-verification-blocks] No verificationBlocks defined \u2014 skipping (treat as initial state)
+  Active spec: ${rel2}
+`
+    };
+  }
+  const blocks = state.verificationBlocks;
+  const blocksObj = blocks && typeof blocks === "object" && !Array.isArray(blocks) ? blocks : null;
+  const presentPhases = blocksObj ? Object.keys(blocksObj).filter(
+    (p) => blocksObj[p] !== void 0 && blocksObj[p] !== null
+  ) : [];
+  if (!blocksObj || presentPhases.length === 0) {
+    const rel2 = path.relative(repoRoot, specDir);
+    return {
+      ok: false,
+      code: 2,
+      specDir,
+      message: `\u2717 No verificationBlocks found. Run the appropriate phase verification command.
+  Active spec: ${rel2}
+  Hint: each phase must record an entry in .curdx-state.json::verificationBlocks
+        (see plugins/curdx-flow/references/iron-law-verification.md).
+`
+    };
+  }
+  const failures = [];
+  for (const phase of presentPhases) {
+    if (!VERIFICATION_PHASES.includes(phase)) {
+      failures.push({
+        phase,
+        reason: `unknown phase key "${phase}"`,
+        command: "(remove from state)"
+      });
+      continue;
+    }
+    const raw = blocksObj[phase];
+    if (typeof raw !== "object" || raw === null) {
+      failures.push({
+        phase,
+        reason: "block is not an object",
+        command: "(rewrite block)"
+      });
+      continue;
+    }
+    const block = raw;
+    const command = typeof block.command === "string" ? block.command : "(unknown command)";
+    const exitCode = block.exitCode;
+    const timestamp = block.timestamp;
+    const srcMtime = block.srcMtime;
+    const failedReason = block.failedReason;
+    if (exitCode !== 0) {
+      failures.push({
+        phase,
+        reason: typeof failedReason === "string" && failedReason.length > 0 ? `verification failed: ${failedReason} (exitCode=${String(exitCode)})` : `verification failed (exitCode=${String(exitCode)})`,
+        command
+      });
+      continue;
+    }
+    const ts = typeof timestamp === "string" ? Date.parse(timestamp) : NaN;
+    if (Number.isNaN(ts)) {
+      failures.push({
+        phase,
+        reason: `invalid timestamp "${String(timestamp)}"`,
+        command
+      });
+      continue;
+    }
+    if (typeof srcMtime !== "number" || !Number.isFinite(srcMtime) || srcMtime < 0) {
+      failures.push({
+        phase,
+        reason: `invalid srcMtime ${String(srcMtime)}`,
+        command
+      });
+      continue;
+    }
+    if (ts < srcMtime) {
+      const srcIso = new Date(srcMtime).toISOString();
+      failures.push({
+        phase,
+        reason: `stale evidence: src changed at ${srcIso}, last verified at ${String(timestamp)}`,
+        command
+      });
+    }
+  }
+  if (failures.length > 0) {
+    const rel2 = path.relative(repoRoot, specDir);
+    let message = "\u2717 verificationBlocks gate failed:\n";
+    message += `  Active spec: ${rel2}
+`;
+    for (const f of failures) {
+      message += `  - phase "${f.phase}": ${f.reason}
+`;
+      message += `      Re-run: ${f.command}
+`;
+    }
+    message += "\n";
+    message += "See plugins/curdx-flow/references/iron-law-verification.md for the full checklist.\n";
+    return { ok: false, code: 2, specDir, message };
+  }
+  const rel = path.relative(repoRoot, specDir);
+  return {
+    ok: true,
+    code: 0,
+    specDir,
+    message: `All verificationBlocks valid.
+  Active spec: ${rel}
+  Phases verified: ${presentPhases.join(", ")}
+`
+  };
+}
+function resolveActiveSpecDir(specsDir) {
+  const pointer = path.join(specsDir, ".current-spec");
+  if (existsSync(pointer)) {
+    try {
+      const name = readFileSync(pointer, "utf8").trim();
+      if (name) {
+        const dir = path.join(specsDir, name);
+        if (existsSync(path.join(dir, ".curdx-state.json"))) return dir;
+      }
+    } catch {
+    }
+  }
+  if (!existsSync(specsDir)) return null;
+  let entries;
+  try {
+    entries = readdirSync(specsDir, { withFileTypes: true });
+  } catch {
+    return null;
+  }
+  let latest = null;
+  let latestMtime = 0;
+  for (const e of entries) {
+    if (!e.isDirectory()) continue;
+    if (e.name.startsWith(".") || e.name.startsWith("_")) continue;
+    const stateFile = path.join(specsDir, e.name, ".curdx-state.json");
+    if (!existsSync(stateFile)) continue;
+    try {
+      const st = statSync(stateFile);
+      if (st.mtimeMs > latestMtime) {
+        latestMtime = st.mtimeMs;
+        latest = path.join(specsDir, e.name);
+      }
+    } catch {
+    }
+  }
+  return latest;
+}
+
+// src/cli/commands/check.ts
+async function runCheckCommand(args) {
+  void args;
+  const result = await runVerificationCheck();
+  if (result.ok) {
+    process.stdout.write("All verificationBlocks valid.\n");
+    if (result.specDir !== void 0) {
+      const rest = result.message.replace(
+        /^All verificationBlocks valid\.\n/,
+        ""
+      );
+      if (rest.length > 0) process.stderr.write(rest);
+    }
+    process.exit(0);
+  }
+  process.stderr.write(result.message);
+  process.exit(2);
+}
+export {
+  runCheckCommand
+};

package/dist/index.mjs

@@ -851,110 +851,61 @@ var BLOCK_RE = /<!-- BEGIN @curdx\/flow v\d+[^>]*-->[\s\S]*?<!-- END @curdx\/flo
 function claudeMdPath() {
   return path4.join(os2.homedir(), ".claude", "CLAUDE.md");
 }
-function isZh() {
-  return getLang() === "zh";
-}
 function buildCombinationPatterns(ids) {
   const has = (k) => ids.has(k);
   const out = [
-    isZh() ? "\u6309\u573A\u666F\u4E32\u8054\uFF0C\u4F18\u5148\u6309\u80FD\u529B\u8FB9\u754C\u8C03\u7528\uFF1Aslash command\u3001MCP\u3001\u63D2\u4EF6 skill \u4E0D\u8981\u6DF7\u5199\u3002" : "Combine tools by capability. Keep slash commands, MCP tools, and plugin skills distinct.",
+    "Combine tools by capability. Keep slash commands, MCP tools, and plugin skills distinct.",
     ""
   ];
-  if (has("claude-mem") || has("context7") || has("curdx-flow")) {
-    out.push(isZh() ? "- **\u63A5\u5230\u65B0\u9700\u6C42 / \u65B0 feature**" : "- **Starting a new feature**");
+  if (has("context7") || has("curdx-flow") || has("claude-mem")) {
+    out.push("- **Starting a new feature**");
     let step = 1;
-    if (has("claude-mem")) {
-      out.push(
-        isZh() ? `  ${step++}. \u5148\u7528 \`/claude-mem:mem-search\` \u67E5\u5386\u53F2\uFF0C\u786E\u8BA4\u4E4B\u524D\u6709\u6CA1\u6709\u7C7B\u4F3C\u5B9E\u73B0\u3001\u8E29\u5751\u6216\u51B3\u7B56\u3002` : `  ${step++}. Start with \`/claude-mem:mem-search\` to check whether this work, decision, or pitfall already exists in memory.`
-      );
-    }
     if (has("context7")) {
-      out.push(
-        isZh() ? `  ${step++}. \u6D89\u53CA\u5916\u90E8\u5E93\u3001SDK\u3001\u6846\u67B6\u6216 API \u65F6\uFF0C\u4F7F\u7528 Context7 MCP \u62C9\u5B98\u65B9\u6700\u65B0\u6587\u6863\u3002` : `  ${step++}. If external libraries, SDKs, frameworks, or APIs are involved, use the Context7 MCP to pull current official docs.`
-      );
+      out.push(`  ${step++}. If external libraries, SDKs, frameworks, or APIs are involved, use the Context7 MCP to pull current official docs.`);
     }
     const planners = [];
-    if (has("claude-mem")) {
-      planners.push(
-        isZh() ? "`/claude-mem:make-plan` \u4EA7\u51FA\u5206\u9636\u6BB5\u8BA1\u5212" : "`/claude-mem:make-plan` for a phased plan"
-      );
-    }
-    if (has("curdx-flow")) {
-      planners.push(
-        isZh() ? "`/curdx-flow:new` \u6216\u76F8\u5173 spec flow \u8D77\u5B8C\u6574\u89C4\u683C" : "`/curdx-flow:new` or the spec flow for a full specification"
-      );
-    }
+    if (has("claude-mem")) planners.push("`/claude-mem:make-plan` for a phased plan");
+    if (has("curdx-flow")) planners.push("`/curdx-flow:new` or the spec flow for a full specification");
     if (planners.length > 0) {
-      out.push(
-        isZh() ? `  ${step++}. \u591A\u6B65\u9AA4\u3001\u9AD8\u4E0D\u786E\u5B9A\u6027\u3001\u8DE8\u6A21\u5757\u65F6\uFF0C\u518D\u8FDB\u5165 ${planners.join("\uFF0C\u6216 ")}\u3002` : `  ${step++}. Only move into ${planners.join(" or ")} when the work is multi-step, cross-cutting, or uncertain.`
-      );
+      out.push(`  ${step++}. Only move into ${planners.join(" or ")} when the work is multi-step, cross-cutting, or uncertain.`);
     }
-    out.push(
-      isZh() ? `  ${step++}. \u7B80\u5355\u3001\u8303\u56F4\u660E\u786E\u7684\u4E00\u6B21\u6027\u6539\u52A8\uFF0C\u76F4\u63A5\u505A\uFF0C\u4E0D\u8981\u5148\u628A\u6D41\u7A0B\u62C9\u6EE1\u3002` : `  ${step++}. For small, clear one-shot changes, implement directly instead of forcing the full workflow.`
-    );
+    out.push(`  ${step++}. For small, clear one-shot changes, implement directly instead of forcing the full workflow.`);
     out.push("");
   }
   const stuckLines = [];
   let s = 1;
-  if (has("claude-mem")) {
-    stuckLines.push(
-      isZh() ? `  ${s++}. \u5148\u7528 \`/claude-mem:mem-search\` \u67E5\u8BB0\u5FC6\uFF0C\u786E\u8BA4\u662F\u4E0D\u662F\u4EE5\u524D\u89E3\u8FC7\u540C\u7C7B bug\u3002` : `  ${s++}. Check \`/claude-mem:mem-search\` first to see whether the same bug was solved before.`
-    );
-  }
   if (has("chrome-devtools-mcp")) {
-    stuckLines.push(
-      isZh() ? `  ${s++}. \u6D4F\u89C8\u5668\u4FA7\u95EE\u9898\u4F7F\u7528 Chrome DevTools MCP\uFF1A\u770B network\u3001console\u3001performance\u3001DOM snapshot\u3002` : `  ${s++}. For browser-side issues, use the Chrome DevTools MCP for network, console, performance, and DOM snapshots.`
-    );
+    stuckLines.push(`  ${s++}. For browser-side issues, use the Chrome DevTools MCP for network, console, performance, and DOM snapshots.`);
   }
   if (has("context7")) {
-    stuckLines.push(
-      isZh() ? `  ${s++}. \u5982\u679C\u6000\u7591\u662F\u5E93 / API \u884C\u4E3A\u53D8\u5316\uFF0C\u4F7F\u7528 Context7 MCP \u67E5\u5B98\u65B9\u6587\u6863\uFF0C\u4E0D\u8981\u51ED\u8BB0\u5FC6\u3002` : `  ${s++}. If the issue may come from library or API behavior, use the Context7 MCP instead of relying on memory.`
-    );
+    stuckLines.push(`  ${s++}. If the issue may come from library or API behavior, use the Context7 MCP instead of relying on memory.`);
   }
   const stillStuck = [];
-  if (has("sequential-thinking")) {
-    stillStuck.push(
-      isZh() ? "\u4F7F\u7528 sequential-thinking MCP \u62C6\u5047\u8BBE" : "use the sequential-thinking MCP to break down hypotheses"
-    );
-  }
-  if (has("pua")) {
-    stillStuck.push(
-      isZh() ? "\u518D\u8FDB\u5165 `/pua:pua-loop` \u8FED\u4EE3" : "then enter `/pua:pua-loop` for structured retries"
-    );
-  }
+  if (has("sequential-thinking")) stillStuck.push("switch to the sequential-thinking MCP to break down hypotheses");
+  if (has("pua")) stillStuck.push("enter `/pua:pua-loop` for structured retries");
   if (stillStuck.length > 0) {
-    stuckLines.push(
-      isZh() ? `  ${s++}. \u4E24\u8F6E\u4EE5\u4E0A\u4ECD\u5361\u4F4F\uFF0C\u518D ${stillStuck.join("\uFF0C\u6216 ")}\u3002` : `  ${s++}. If you are still stuck after multiple attempts, ${stillStuck.join(" or ")}.`
-    );
+    stuckLines.push(`  ${s++}. If you are still stuck after multiple attempts, ${stillStuck.join(" or ")}.`);
   }
   if (stuckLines.length > 0) {
-    out.push(isZh() ? "- **\u9047\u5230 bug / \u8FDE\u7EED\u5361\u4F4F**" : "- **Debugging and repeated failures**", ...stuckLines, "");
+    out.push("- **Debugging and repeated failures**", ...stuckLines, "");
   }
   if (has("frontend-design") || has("chrome-devtools-mcp")) {
-    out.push(isZh() ? "- **\u505A UI / \u524D\u7AEF\u9875\u9762**" : "- **UI and frontend work**");
+    out.push("- **UI and frontend work**");
     if (has("frontend-design")) {
-      out.push(
-        isZh() ? "  - \u4F18\u5148\u4F7F\u7528 `frontend-design` \u63D2\u4EF6\u7684 UI skills\uFF1B\u82E5\u672A\u81EA\u52A8\u89E6\u53D1\uFF0C\u518D\u663E\u5F0F\u8C03\u7528\u5BF9\u5E94 skill\u3002" : "  - Prioritize the `frontend-design` plugin skills for UI work; if they do not trigger automatically, invoke the relevant skill explicitly."
-      );
+      out.push("  - Prioritize the `frontend-design` plugin skills for UI work; if they do not trigger automatically, invoke the relevant skill explicitly.");
     }
     if (has("chrome-devtools-mcp")) {
-      out.push(
-        isZh() ? "  - \u6E32\u67D3\u5F02\u5E38\u3001\u4EA4\u4E92\u95EE\u9898\u6216\u89C6\u89C9\u56DE\u5F52\uFF0C\u4F7F\u7528 Chrome DevTools MCP \u9A8C\u8BC1\uFF0C\u4E0D\u8981\u53EA\u9760\u8089\u773C\u731C\u3002" : "  - For rendering issues, interaction bugs, or visual regressions, verify with the Chrome DevTools MCP instead of relying on visual guesswork alone."
-      );
+      out.push("  - For rendering issues, interaction bugs, or visual regressions, verify with the Chrome DevTools MCP instead of relying on visual guesswork alone.");
     }
     out.push("");
   }
   if (has("pua") || has("curdx-flow")) {
-    out.push(isZh() ? "- **\u5927\u578B / \u8DE8\u6A21\u5757 / \u591A agent \u534F\u4F5C**" : "- **Large, cross-cutting, or multi-agent work**");
+    out.push("- **Large, cross-cutting, or multi-agent work**");
     if (has("pua")) {
-      out.push(
-        isZh() ? "  - \u9700\u8981\u5E76\u884C\u62C6\u89E3\u4E0E\u56E2\u961F\u534F\u4F5C\u65F6\uFF0C\u7528 `/pua:p9`\uFF1B\u66F4\u9AD8\u5C42\u6218\u7565\u89C4\u5212\u518D\u8003\u8651 `/pua:p10`\u3002" : "  - Use `/pua:p9` for parallel task decomposition and team coordination; reserve `/pua:p10` for higher-level strategy work."
-      );
+      out.push("  - Use `/pua:p9` for parallel task decomposition and team coordination; reserve `/pua:p10` for higher-level strategy work.");
     }
     if (has("curdx-flow")) {
-      out.push(
-        isZh() ? "  - \u4E00\u4E2A\u5927\u529F\u80FD\u9700\u8981\u62C6\u6210\u591A\u4E2A\u76F8\u4E92\u4F9D\u8D56\u7684\u89C4\u683C\u65F6\uFF0C\u4F7F\u7528 `/curdx-flow:triage`\u3002" : "  - Use `/curdx-flow:triage` when one large feature needs to be split into multiple dependent specs."
-      );
+      out.push("  - Use `/curdx-flow:triage` when one large feature needs to be split into multiple dependent specs.");
     }
   }
   while (out.length > 0 && out[out.length - 1] === "") out.pop();
@@ -963,46 +914,32 @@ function buildCombinationPatterns(ids) {
 function buildSkipRules(ids) {
   const has = (k) => ids.has(k);
   const out = [];
-  out.push(
-    isZh() ? "- \u4E00\u884C\u6539\u52A8\u3001typo\u3001\u7EAF\u91CD\u547D\u540D\u53D8\u91CF\uFF1A\u4E0D\u8981\u5148 plan\uFF0C\u4E0D\u8981\u5148\u5F00 spec\uFF0C\u76F4\u63A5\u6539\u3002" : "- For one-line changes, typos, or pure renames, skip planning and spec flow. Just make the edit."
-  );
+  out.push("- For one-line changes, typos, or pure renames, skip planning and spec flow. Just make the edit.");
   const skips = [];
-  if (has("pua")) skips.push("`/pua:pua`");
+  if (has("pua")) skips.push("`/pua:pua-loop`");
   if (has("sequential-thinking")) skips.push("`sequential-thinking`");
   if (skips.length > 0) {
-    out.push(
-      isZh() ? `- \u5DF2\u77E5\u786E\u5B9A\u7684 fix\uFF1A\u4E0D\u8981\u5148\u4E0A ${skips.join("\u3001")}\u3002` : `- For a known, deterministic fix, do not reach for ${skips.join(" or ")} first.`
-    );
+    out.push(`- For a known, deterministic fix, do not reach for ${skips.join(" or ")} first.`);
   }
-  out.push(
-    isZh() ? "- \u7EAF\u6982\u5FF5\u89E3\u91CA\u9898\u53EF\u4EE5\u76F4\u63A5\u7B54\uFF1B\u5982\u679C\u662F\u5728\u95EE\u5F53\u524D\u4ED3\u5E93\u91CC\u7684\u4EE3\u7801\u542B\u4E49\uFF0C\u5148\u8BFB\u76F8\u5173\u6587\u4EF6\u518D\u89E3\u91CA\u3002" : "- Answer pure conceptual explanation questions directly. If the question is about code in this repository, read the relevant files first."
-  );
+  out.push("- Answer pure conceptual explanation questions directly. If the question is about code in this repository, read the relevant files first.");
   if (has("curdx-flow")) {
-    out.push(
-      isZh() ? "- \u5355\u6587\u4EF6\u5C40\u90E8\u91CD\u6784\u6216\u5F88\u5C0F\u8303\u56F4\u7684\u6574\u7406\uFF1A\u901A\u5E38\u4E0D\u8981\u8FDB\u5165 curdx-flow spec \u6D41\u3002" : "- For a single-file refactor or a very local cleanup, usually do not enter the curdx-flow spec workflow."
-    );
+    out.push("- For a single-file refactor or a very local cleanup, usually do not enter the curdx-flow spec workflow.");
   }
   return out;
 }
 function buildDecisionTree(ids) {
   const has = (k) => ids.has(k);
   const out = [];
-  out.push(isZh() ? "1. \u80FD 1\u20132 \u6B65\u641E\u5B9A\uFF1F\u2192 \u76F4\u63A5\u505A\u3002" : "1. Can it be finished in 1-2 steps? -> Do it directly.");
-  out.push(
-    isZh() ? "2. \u591A\u6B65\u9AA4\u4F46\u8DEF\u5F84\u6E05\u6670\uFF1F\u2192 \u62C6\u6210\u7B80\u77ED\u4EFB\u52A1\u5217\u8868\u9010\u4E2A\u63A8\u8FDB\uFF0C\u4E0D\u8981\u9ED8\u8BA4\u8FDB\u5165\u5B8C\u6574 spec \u6D41\u3002" : "2. Is it multi-step but still clear? -> Break it into a short task list and execute without defaulting to the full spec flow."
-  );
+  out.push("1. Can it be finished in 1-2 steps? -> Do it directly.");
+  out.push("2. Is it multi-step but still clear? -> Break it into a short task list and execute without defaulting to the full spec flow.");
   const planners = [];
   if (has("curdx-flow")) planners.push("`/curdx-flow:new`");
   if (has("claude-mem")) planners.push("`/claude-mem:make-plan`");
   if (planners.length > 0) {
-    out.push(
-      isZh() ? `3. \u9700\u6C42\u6A21\u7CCA\u3001\u8DE8\u6A21\u5757\u3001\u9700\u8981\u5206\u9636\u6BB5\u4EA4\u4ED8\uFF1F\u2192 ${planners.join(" \u6216 ")}\u3002` : `3. Is the request ambiguous, cross-cutting, or phase-based? -> ${planners.join(" or ")}.`
-    );
+    out.push(`3. Is the request ambiguous, cross-cutting, or phase-based? -> ${planners.join(" or ")}.`);
   }
   if (has("claude-mem")) {
-    out.push(
-      isZh() ? "4. \u8FD9\u7C7B\u6D3B\u4EE5\u524D\u53EF\u80FD\u505A\u8FC7\uFF1F\u2192 \u5148 `/claude-mem:mem-search`\u3002" : "4. Might this work have been done before? -> Start with `/claude-mem:mem-search`."
-    );
+    out.push("4. Might this work have been done before? -> Start with `/claude-mem:mem-search`.");
   }
   return out;
 }
@@ -1016,23 +953,17 @@ function buildLanguagePolicy() {
 function renderBlock(items) {
   const installedIds = new Set(items.map((i) => i.id));
   const sections = [
-    ["## Language Policy\uFF08\u8BED\u8A00\u89C4\u5219\uFF09", buildLanguagePolicy()],
-    [
-      isZh() ? "## Tool Combination Patterns\uFF08\u7EC4\u5408\u5DE5\u4F5C\u6D41\uFF09" : "## Tool Combination Patterns",
-      buildCombinationPatterns(installedIds)
-    ],
-    [isZh() ? "## Skip Rules\uFF08\u9632\u8FC7\u5EA6\u5DE5\u5177\u5316\uFF09" : "## Skip Rules", buildSkipRules(installedIds)],
-    [isZh() ? "## Decision Tree\uFF08\u9047\u5230\u6A21\u7CCA\u8BF7\u6C42\u65F6\uFF09" : "## Decision Tree", buildDecisionTree(installedIds)]
+    ["## Language Policy", buildLanguagePolicy()],
+    ["## Tool Combination Patterns", buildCombinationPatterns(installedIds)],
+    ["## Skip Rules", buildSkipRules(installedIds)],
+    ["## Decision Tree", buildDecisionTree(installedIds)]
   ];
   const lines = [BEGIN_MARKER];
   for (const [heading, body] of sections) {
     if (body.length === 0) continue;
     lines.push(heading, "", ...body, "");
   }
-  lines.push(
-    isZh() ? "\u8FD0\u884C `npx @curdx/flow` \u4EE5 install / update / uninstall\u3002" : "Run `npx @curdx/flow` to install / update / uninstall.",
-    END_MARKER
-  );
+  lines.push(END_MARKER);
   return lines.join("\n");
 }
 function withEol(s, eol) {
@@ -1695,17 +1626,49 @@ var analyzeCmd = defineCommand({
     "include-prompts": {
       type: "boolean",
       description: "Skip prompt redaction (D-9 white-list passthrough disabled \u2014 local debugging only)"
+    },
+    session: {
+      type: "string",
+      description: "Filter to single session UUID (matches <uuid>.jsonl in encoded project dir)"
+    },
+    "cost-summary": {
+      type: "boolean",
+      description: "Emit OB-3 cost analytics: totalCost.usd top-level + ## Cost Summary markdown (opt-in, default false)"
+    },
+    "by-spec": {
+      type: "boolean",
+      description: "OB-3 R1: aggregate cost by spec dimension (opt-in, default false; with --cost-summary alone all 3 dims emit)"
+    },
+    "by-phase": {
+      type: "boolean",
+      description: "OB-3 R2: aggregate cost by phase dimension (opt-in, default false; with --cost-summary alone all 3 dims emit)"
+    },
+    "by-task": {
+      type: "boolean",
+      description: "OB-3 R7: aggregate cost by task (correlationId) dimension, top-N truncated by --top (opt-in, default false)"
+    },
+    top: {
+      type: "string",
+      description: "OB-3 R7 top-N truncation for --by-task buckets (default: 10)"
     }
   },
   async run({ args }) {
     const limitRaw = args.limit;
     const limit = typeof limitRaw === "string" && limitRaw.length > 0 ? Number(limitRaw) : void 0;
-    const { runAnalyze } = await import("./analyze-4DE3HVCA.mjs");
+    const topRaw = args.top;
+    const top = typeof topRaw === "string" && topRaw.length > 0 ? Number(topRaw) : void 0;
+    const { runAnalyze } = await import("./analyze-FX2PCSL6.mjs");
     await runAnalyze({
       out: typeof args.out === "string" ? args.out : void 0,
       json: Boolean(args.json),
       limit: Number.isFinite(limit) ? limit : void 0,
-      includePrompts: Boolean(args["include-prompts"])
+      includePrompts: Boolean(args["include-prompts"]),
+      session: typeof args.session === "string" && args.session.length > 0 ? args.session : void 0,
+      costSummary: Boolean(args["cost-summary"]),
+      bySpec: Boolean(args["by-spec"]),
+      byPhase: Boolean(args["by-phase"]),
+      byTask: Boolean(args["by-task"]),
+      top: Number.isFinite(top) ? top : void 0
     });
   }
 });
@@ -1839,6 +1802,17 @@ var updateCmd = defineCommand2({
     p10.outro(t("app.outro"));
   }
 });
+var checkCmd = defineCommand2({
+  meta: {
+    name: "check",
+    description: "Verify active spec verificationBlocks (iron-law gate)"
+  },
+  args: {},
+  async run() {
+    const { runCheckCommand } = await import("./check-TJPGCG3Z.mjs");
+    await runCheckCommand([]);
+  }
+});
 var statusCmd = defineCommand2({
   meta: { name: "status", description: "Show install status" },
   args: {
@@ -1852,7 +1826,27 @@ var statusCmd = defineCommand2({
     if (!args.json) p10.outro(t("app.outro"));
   }
 });
-var SUBCOMMANDS = /* @__PURE__ */ new Set(["install", "uninstall", "update", "status", "analyze"]);
+var SUBCOMMANDS = /* @__PURE__ */ new Set(["install", "uninstall", "update", "status", "analyze", "check"]);
+var CHECK_HELP = `USAGE \`@curdx/flow check\`
+
+DESCRIPTION
+  Verify the active spec's verificationBlocks (iron-law gate) \u2014 the same
+  check enforced by the Stop hook and \`npm run verify\` release gate.
+
+OPTIONS
+  --help, -h    Show this help message and exit.
+
+EXIT CODES
+   0  All verificationBlocks valid (or no spec is active \u2014 graceful no-op).
+   2  At least one phase block is missing, stale, or failed.
+
+ENV
+  CURDX_VERIFY_SKIP_BLOCKS=1   Skip the gate (human escape hatch; never set
+                               in CI / release).
+
+SEE ALSO
+  plugins/curdx-flow/references/iron-law-verification.md
+`;
 var root = defineCommand2({
   meta: {
     name: "@curdx/flow",
@@ -1865,7 +1859,8 @@ var root = defineCommand2({
     uninstall: uninstallCmd,
     update: updateCmd,
     status: statusCmd,
-    analyze: analyze_default
+    analyze: analyze_default,
+    check: checkCmd
   }
   // No root run() — citty 0.1.6 calls parent.run AFTER a matching subcommand,
   // which would render the menu after a subcommand finishes. We dispatch the
@@ -1899,6 +1894,16 @@ async function runInteractive(argv2) {
 var argv = process.argv.slice(2);
 var first = firstNonFlag(argv);
 assertFreshLocalBuild();
+if (process.argv[2] === "check") {
+  const rest = process.argv.slice(3);
+  if (rest.includes("--help") || rest.includes("-h")) {
+    process.stdout.write(CHECK_HELP);
+    process.exit(0);
+  }
+  const { runCheckCommand } = await import("./check-TJPGCG3Z.mjs");
+  await runCheckCommand(rest);
+  process.exit(0);
+}
 if (first === void 0 || first !== void 0 && !SUBCOMMANDS.has(first) && first !== "--help" && first !== "-h") {
   if (first === void 0) {
     runInteractive(argv).catch((err) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@curdx/flow",
-  "version": "7.1.5",
+  "version": "7.1.7",
   "description": "Interactive installer for Claude Code plugins and MCP servers",
   "type": "module",
   "bin": "./dist/index.mjs",
@@ -21,7 +21,7 @@
     "test:analyze": "vitest run tests/analyze",
     "start": "node ./dist/index.mjs",
     "typecheck": "tsc --noEmit",
-    "verify": "npm run typecheck && npm run check-versions && npm run check:hooks-fresh && npm run build && npm run check:bundle && npm run test:hooks && npm run test:analyze",
+    "verify": "npm run typecheck && npm run check-versions && npm run check:hooks-fresh && npm run build && npm run check:bundle && npm run test:hooks && npm run test:analyze && node scripts/check-verification-blocks.mjs",
     "check-versions": "node scripts/check-versions.mjs",
     "bump-version": "node scripts/bump-version.mjs",
     "prepublishOnly": "node scripts/check-versions.mjs && npm run typecheck && npm run check:hooks-fresh && npm run build"