@devflow-tools/claude-code-plugin 0.18.43 → 0.18.45

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "devflow",
   "description": "DevFlow — Developer Intelligence Platform: project context, code graph, knowledge base, memory engine, and workflow automation with 14 domain plugins",
-  "version": "0.18.43",
+  "version": "0.18.45",
   "author": {
     "name": "DevFlow"
   },

package/dist/command-registry.json

@@ -8,7 +8,7 @@
       ],
       "blockedNative": [],
       "source": "core",
-      "sourceVersion": "0.18.43",
+      "sourceVersion": "0.18.44",
       "requiresContext": false,
       "evidenceMode": "runtime",
       "skillPath": "skills/devflow:doctor/SKILL.md",
@@ -35,7 +35,7 @@
         "WebFetch"
       ],
       "source": "core",
-      "sourceVersion": "0.18.43",
+      "sourceVersion": "0.18.44",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:context/SKILL.md",
@@ -60,7 +60,7 @@
         "Explore"
       ],
       "source": "core",
-      "sourceVersion": "0.18.43",
+      "sourceVersion": "0.18.44",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:graph/SKILL.md",
@@ -79,7 +79,7 @@
         "WebFetch"
       ],
       "source": "core",
-      "sourceVersion": "0.18.43",
+      "sourceVersion": "0.18.44",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:knowledge/SKILL.md",
@@ -103,7 +103,7 @@
         "Explore"
       ],
       "source": "core",
-      "sourceVersion": "0.18.43",
+      "sourceVersion": "0.18.44",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:memory/SKILL.md",
@@ -119,7 +119,7 @@
       ],
       "blockedNative": [],
       "source": "core",
-      "sourceVersion": "0.18.43",
+      "sourceVersion": "0.18.44",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:workflow/SKILL.md",
@@ -152,7 +152,7 @@
       ],
       "blockedNative": [],
       "source": "core",
-      "sourceVersion": "0.18.43",
+      "sourceVersion": "0.18.44",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:delivery/SKILL.md",

package/hooks/hooks.json

@@ -86,7 +86,7 @@
           {
             "type": "command",
             "command": "bash \"${CLAUDE_PLUGIN_ROOT}/hooks/session-end\"",
-            "timeout": 5
+            "timeout": 15
           }
         ]
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devflow-tools/claude-code-plugin",
-  "version": "0.18.43",
+  "version": "0.18.45",
   "description": "Claude Code hooks and skills for the DevFlow development intelligence runtime.",
   "type": "module",
   "scripts": {
@@ -12,20 +12,20 @@
     "verify:runtime-dependencies": "node --import tsx scripts/verify-runtime-dependencies.ts"
   },
   "dependencies": {
-    "@devflow-tools/benchmark": "0.18.43",
-    "@devflow-tools/context-engine": "0.18.43",
-    "@devflow-tools/database": "0.18.43",
-    "@devflow-tools/mcp-server": "0.18.43",
-    "@devflow-tools/memory-engine": "0.18.43",
-    "@devflow-tools/sdk": "0.18.43",
-    "@devflow-tools/semantic-engine": "0.18.43",
-    "@devflow-tools/server": "0.18.43",
-    "@devflow-tools/task-runtime": "0.18.43",
-    "@devflow-tools/telemetry": "0.18.43",
-    "@devflow-tools/workflow-engine": "0.18.43"
+    "@devflow-tools/benchmark": "0.18.45",
+    "@devflow-tools/context-engine": "0.18.45",
+    "@devflow-tools/database": "0.18.45",
+    "@devflow-tools/mcp-server": "0.18.45",
+    "@devflow-tools/memory-engine": "0.18.45",
+    "@devflow-tools/sdk": "0.18.45",
+    "@devflow-tools/semantic-engine": "0.18.45",
+    "@devflow-tools/server": "0.18.45",
+    "@devflow-tools/task-runtime": "0.18.45",
+    "@devflow-tools/telemetry": "0.18.45",
+    "@devflow-tools/workflow-engine": "0.18.45"
   },
   "devDependencies": {
-    "@devflow-tools/devflow": "0.18.43"
+    "@devflow-tools/devflow": "0.18.45"
   },
   "allowScripts": {
     "better-sqlite3@12.11.1": true,
@@ -50,7 +50,7 @@
     "hooks",
     "skills"
   ],
-  "gitHead": "4bef753de830e4e881bd150c9b090ab0953139c1",
+  "gitHead": "9c00008da136a4e5d1faceff7c3f9c664fcaca33",
   "license": "MIT",
   "repository": {
     "type": "git",

package/skills/devflow:delivery/SKILL.md

@@ -54,12 +54,12 @@ description: 通过可审计 Delivery Line 将需求推进到验证完成的 int
 - `verificationCommands` 只填不会安装依赖或改写源码的命令；不要把裸 `npm`/`pnpm`、`install` 或带 `--write` 的检查命令当作验证。需要依赖安装时，在计划中单列前置条件。
 - 澄清与设计交互使用当前 turn；后续写操作携带案件当前 context receipt。
 - `delivery_answer` 的用户决定必须来自可信用户通道；不得让 agent 自己调用它消费 pending decision。
-- 如果 pending decision 返回了至少两个结构化 `options`，必须把它们原样展示给用户，不得自行增加、改写或排序后再提交。使用 Claude 原生 `AskUserQuestion` 展示单选题，并在唯一问题的 `header` 中保留精确标记 `DevFlow decision <decisionId>`；选项的 `label` 和 `description` 必须与返回值完全一致。宿主 PostToolUse hook 会校验问题、选项、session、版本和 hash，并自动签名/消费用户选择；随后重新调用 `delivery_status`。
+- 如果 pending decision 返回了结构化 `options`，必须把它们原样展示给用户，不得自行增加、改写或排序后再提交。使用 Claude 原生 `AskUserQuestion` 展示单选题，并在唯一问题的 `header` 中保留精确标记 `DevFlow decision <decisionId>`；选项的 `label` 和 `description` 必须与返回值完全一致。宿主 PostToolUse hook 会校验问题、选项、session、版本和 hash，并自动签名/消费用户选择；随后重新调用 `delivery_status`。审批、拒绝、继续执行等操作也必须优先使用这个选项选择流程，不要把 `/devflow:approve` 或 `/devflow:reject` 作为默认提示让用户手动输入。
 - 如果 pending decision 的 `options` 为空，这是自由文本澄清，不要伪造选择项。要求用户在同一 Claude 会话提交规范命令：`/devflow:decide <decisionId> -- <answer>`；host hook 会签名该 `UserPromptSubmit` 并消费 pending decision。
 - 如果一个澄清问题本身适合有限选项但当前 `options` 为空，先调用 `delivery_propose_options` 提交至少两个带稳定 `id`/`label` 的候选，再使用上述 `AskUserQuestion` 流程。
 - 无论哪种可信用户通道，命令或交互处理成功后都必须重新调用 `delivery_status`，以返回的 `currentTurn` 和 `nextActions` 继续。
 - artifact 审批使用 `pendingDecisions` 返回的原生批准/退回选项；展示前用 Read 打开
-  `<projectRoot>/.devflow/delivery-line/artifacts/<caseId>/<artifact.path>`，只给出不重复的关键摘要和风险。
+  `<projectRoot>/.devflow/delivery-line/artifacts/<caseId>/<artifact.path>`，只给出不重复的关键摘要和风险。必须调用 `AskUserQuestion` 让用户选择批准或退回；不要要求用户复制命令。
   宿主会将选择映射为精确审批事件。Slash command 仅是宿主原生交互不可用时的 fallback，不得把命令
   作为默认交互，也不得由 agent 调用 MCP mutation 模拟用户批准或拒绝。
 - `/devflow:revise`、`/devflow:cancel` 和 `/devflow:exit` 尚未注册为可信命令；仅使用当前 `nextActions` 已实现的路径，不得向用户展示不存在的命令。