@devflow-tools/claude-code-plugin 0.18.36 → 0.18.38

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "devflow",
   "description": "DevFlow — Developer Intelligence Platform: project context, code graph, knowledge base, memory engine, and workflow automation with 14 domain plugins",
-  "version": "0.18.36",
+  "version": "0.18.38",
   "author": {
     "name": "DevFlow"
   },

package/.mcp.json

@@ -1,9 +1,12 @@
 {
   "mcpServers": {
     "devflow": {
-      "command": "node",
+      "command": "npx",
       "args": [
-        "${CLAUDE_PLUGIN_ROOT}/node_modules/@devflow-tools/mcp-server/bin/devflow-mcp.cjs",
+        "--yes",
+        "--package",
+        "@devflow-tools/mcp-server@0.18.38",
+        "devflow-mcp",
         "--mode",
         "stdio"
       ]

package/dist/command-registry.json

@@ -8,7 +8,7 @@
       ],
       "blockedNative": [],
       "source": "core",
-      "sourceVersion": "0.18.36",
+      "sourceVersion": "0.18.38",
       "requiresContext": false,
       "evidenceMode": "runtime",
       "skillPath": "skills/devflow:doctor/SKILL.md",
@@ -35,7 +35,7 @@
         "WebFetch"
       ],
       "source": "core",
-      "sourceVersion": "0.18.36",
+      "sourceVersion": "0.18.38",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:context/SKILL.md",
@@ -60,7 +60,7 @@
         "Explore"
       ],
       "source": "core",
-      "sourceVersion": "0.18.36",
+      "sourceVersion": "0.18.38",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:graph/SKILL.md",
@@ -79,7 +79,7 @@
         "WebFetch"
       ],
       "source": "core",
-      "sourceVersion": "0.18.36",
+      "sourceVersion": "0.18.38",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:knowledge/SKILL.md",
@@ -103,7 +103,7 @@
         "Explore"
       ],
       "source": "core",
-      "sourceVersion": "0.18.36",
+      "sourceVersion": "0.18.38",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:memory/SKILL.md",
@@ -119,7 +119,7 @@
       ],
       "blockedNative": [],
       "source": "core",
-      "sourceVersion": "0.18.36",
+      "sourceVersion": "0.18.38",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:workflow/SKILL.md",
@@ -152,7 +152,7 @@
       ],
       "blockedNative": [],
       "source": "core",
-      "sourceVersion": "0.18.36",
+      "sourceVersion": "0.18.38",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:delivery/SKILL.md",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devflow-tools/claude-code-plugin",
-  "version": "0.18.36",
+  "version": "0.18.38",
   "description": "Claude Code hooks and skills for the DevFlow development intelligence runtime.",
   "type": "module",
   "scripts": {
@@ -12,20 +12,20 @@
     "verify:runtime-dependencies": "node --import tsx scripts/verify-runtime-dependencies.ts"
   },
   "dependencies": {
-    "@devflow-tools/benchmark": "0.18.36",
-    "@devflow-tools/context-engine": "0.18.36",
-    "@devflow-tools/database": "0.18.36",
-    "@devflow-tools/mcp-server": "0.18.36",
-    "@devflow-tools/memory-engine": "0.18.36",
-    "@devflow-tools/sdk": "0.18.36",
-    "@devflow-tools/semantic-engine": "0.18.36",
-    "@devflow-tools/server": "0.18.36",
-    "@devflow-tools/task-runtime": "0.18.36",
-    "@devflow-tools/telemetry": "0.18.36",
-    "@devflow-tools/workflow-engine": "0.18.36"
+    "@devflow-tools/benchmark": "0.18.38",
+    "@devflow-tools/context-engine": "0.18.38",
+    "@devflow-tools/database": "0.18.38",
+    "@devflow-tools/mcp-server": "0.18.38",
+    "@devflow-tools/memory-engine": "0.18.38",
+    "@devflow-tools/sdk": "0.18.38",
+    "@devflow-tools/semantic-engine": "0.18.38",
+    "@devflow-tools/server": "0.18.38",
+    "@devflow-tools/task-runtime": "0.18.38",
+    "@devflow-tools/telemetry": "0.18.38",
+    "@devflow-tools/workflow-engine": "0.18.38"
   },
   "devDependencies": {
-    "@devflow-tools/devflow": "0.18.36"
+    "@devflow-tools/devflow": "0.18.38"
   },
   "allowScripts": {
     "better-sqlite3@12.11.1": true,

package/skills/devflow:delivery/SKILL.md

@@ -51,6 +51,7 @@ description: 通过可审计 Delivery Line 将需求推进到验证完成的 int
 - 计划必须能由不了解对话的工程师执行：`allowedFiles` 只列实际允许修改的文件，不得把只读参考文件
   放进去；每个行为变更先写失败测试再实现，`implementationSteps` 写明 RED/GREEN 顺序；每条验收标准
   对应具体测试或验证命令。`testFirst=false` 只有在计划内携带明确 waiver 时才允许。
+- `verificationCommands` 只填不会安装依赖或改写源码的命令；不要把裸 `npm`/`pnpm`、`install` 或带 `--write` 的检查命令当作验证。需要依赖安装时，在计划中单列前置条件。
 - 澄清与设计交互使用当前 turn；后续写操作携带案件当前 context receipt。
 - `delivery_answer` 的用户决定必须来自可信用户通道；不得让 agent 自己调用它消费 pending decision。
 - 如果 pending decision 返回了至少两个结构化 `options`，必须把它们原样展示给用户，不得自行增加、改写或排序后再提交。使用 Claude 原生 `AskUserQuestion` 展示单选题，并在唯一问题的 `header` 中保留精确标记 `DevFlow decision <decisionId>`；选项的 `label` 和 `description` 必须与返回值完全一致。宿主 PostToolUse hook 会校验问题、选项、session、版本和 hash，并自动签名/消费用户选择；随后重新调用 `delivery_status`。
@@ -83,6 +84,7 @@ description: 通过可审计 Delivery Line 将需求推进到验证完成的 int
 - MCP 返回 `ok: false` 时，该操作已经失败。向用户呈现 `error.code` 和 `error.message`，不得把 transport 成功误报为交付成功。
 - `error.retryable=false` 时不得自动重试；`error.recoveryAction` 是下一步建议，不是已完成的动作。
 - 遇到 `HELD`、`WORKER_UNAVAILABLE`、`REQUIRED_CONTEXT_MISSING` 或 producer/stale 警告时，先刷新 `delivery_status` 并保留阻塞状态；不得通过普通 Write/Edit/Bash/git commit 绕过 Delivery authority。
+- `REQUIRED_CONTEXT_MISSING` 且返回 `retrieval returned unrelated context evidence` 时，核对检索结果是否包含案件已确认的现有实现路径；同一案件、同一查询下不要换幂等键反复调用 `delivery_prepare_plan`。记录无关证据路径和缺失的目标路径，待检索证据修复后再继续。
 - 遇到 `STALE_INTERACTION_TURN`、`MISSING_PREREQUISITE` 或 `INVALID_TRANSITION` 时，先调用 `mcp__plugin_devflow_devflow__delivery_status` 刷新案件状态；只有新的 `nextActions` 明确允许时才继续。
 - Delivery 工具失败后不得为了绕过写入限制调用 `delivery_cancel`；只有用户明确要求取消时才可取消。取消或拒绝后的同一会话仍禁止直接 Write/Edit/Bash，必须新建 Delivery 案件或开启新会话。
 - 用户拒绝审批，或遇到 `UNAUTHORIZED_ROLE`、权限失败、`PROJECT_ROOT_MISMATCH` 时不得自动重试；保留案件当前状态并请求用户处理。