@devflow-tools/claude-code-plugin 0.19.14 → 0.19.15

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "devflow",
   "description": "DevFlow — Developer Intelligence Platform: project context, code graph, knowledge base, memory engine, and workflow automation with 14 domain plugins",
-  "version": "0.19.14",
+  "version": "0.19.15",
   "author": {
     "name": "DevFlow"
   },

package/dist/command-registry.json

@@ -8,7 +8,7 @@
       ],
       "blockedNative": [],
       "source": "core",
-      "sourceVersion": "0.19.14",
+      "sourceVersion": "0.19.15",
       "requiresContext": false,
       "evidenceMode": "runtime",
       "skillPath": "skills/devflow:doctor/SKILL.md",
@@ -35,7 +35,7 @@
         "WebFetch"
       ],
       "source": "core",
-      "sourceVersion": "0.19.14",
+      "sourceVersion": "0.19.15",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:context/SKILL.md",
@@ -60,7 +60,7 @@
         "Explore"
       ],
       "source": "core",
-      "sourceVersion": "0.19.14",
+      "sourceVersion": "0.19.15",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:graph/SKILL.md",
@@ -79,7 +79,7 @@
         "WebFetch"
       ],
       "source": "core",
-      "sourceVersion": "0.19.14",
+      "sourceVersion": "0.19.15",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:knowledge/SKILL.md",
@@ -103,7 +103,7 @@
         "Explore"
       ],
       "source": "core",
-      "sourceVersion": "0.19.14",
+      "sourceVersion": "0.19.15",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:memory/SKILL.md",
@@ -119,7 +119,7 @@
       ],
       "blockedNative": [],
       "source": "core",
-      "sourceVersion": "0.19.14",
+      "sourceVersion": "0.19.15",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:workflow/SKILL.md",
@@ -154,7 +154,7 @@
       ],
       "blockedNative": [],
       "source": "core",
-      "sourceVersion": "0.19.14",
+      "sourceVersion": "0.19.15",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:delivery/SKILL.md",

package/dist/runtime-manifest.json

@@ -1,14 +1,14 @@
 {
   "manifestVersion": "devflow-runtime.v1",
-  "packageVersion": "0.19.14",
-  "sourceCommit": "2120981fcd1d3e906c8c4663ecc56506ed66ce1a",
+  "packageVersion": "0.19.15",
+  "sourceCommit": "1bf7dfe631751d5d856c9e363cdfef9d0ffee620",
   "bundleHashes": {
     "hooks": "858e24cc2bc01cdc69e47010e9e51eafc9d9230c9799a421821c3aa917f9c062",
-    "mcp": "426258c76db3c4032baafd4b3926795e053b2a3df1ae72f0f2425f2e3f1e3c99",
+    "mcp": "4b1b4152fca04afcbc8466ed46799b60a35c6c4c5b5f7c7ed8252387d5c359df",
     "cli": "6205081f819ee3651962df36edd626b993a917fb8691f20c84e6b6e04af81d16"
   },
-  "registryHash": "dc90b308b7fa01ffb9a2609656f812da675067822856b2e599585a16ddb3a5e8",
+  "registryHash": "d779cbeb63b003f41ab5a0e1d7511824423800141f07e17863699a386eb0e31a",
   "stateDbPath": "<projectRoot>/.devflow/delivery-line/state.db",
-  "builtAt": 1793950586617,
-  "manifestHash": "92f95224c931a25f9a7b612c46fb472aa25402a347d72b02e1879d5e88147292"
+  "builtAt": 1794192809406,
+  "manifestHash": "b0a2617ae0151daeb104a25707cf91cf0ec3f066f15751a328aae014dc09ba0f"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devflow-tools/claude-code-plugin",
-  "version": "0.19.14",
+  "version": "0.19.15",
   "description": "Claude Code hooks and skills for the DevFlow development intelligence runtime.",
   "type": "module",
   "scripts": {
@@ -12,20 +12,20 @@
     "verify:runtime-dependencies": "node --import tsx scripts/verify-runtime-dependencies.ts"
   },
   "dependencies": {
-    "@devflow-tools/benchmark": "0.19.14",
-    "@devflow-tools/context-engine": "0.19.14",
-    "@devflow-tools/database": "0.19.14",
-    "@devflow-tools/mcp-server": "0.19.14",
-    "@devflow-tools/memory-engine": "0.19.14",
-    "@devflow-tools/sdk": "0.19.14",
-    "@devflow-tools/semantic-engine": "0.19.14",
-    "@devflow-tools/server": "0.19.14",
-    "@devflow-tools/task-runtime": "0.19.14",
-    "@devflow-tools/telemetry": "0.19.14",
-    "@devflow-tools/workflow-engine": "0.19.14"
+    "@devflow-tools/benchmark": "0.19.15",
+    "@devflow-tools/context-engine": "0.19.15",
+    "@devflow-tools/database": "0.19.15",
+    "@devflow-tools/mcp-server": "0.19.15",
+    "@devflow-tools/memory-engine": "0.19.15",
+    "@devflow-tools/sdk": "0.19.15",
+    "@devflow-tools/semantic-engine": "0.19.15",
+    "@devflow-tools/server": "0.19.15",
+    "@devflow-tools/task-runtime": "0.19.15",
+    "@devflow-tools/telemetry": "0.19.15",
+    "@devflow-tools/workflow-engine": "0.19.15"
   },
   "devDependencies": {
-    "@devflow-tools/devflow": "0.19.14"
+    "@devflow-tools/devflow": "0.19.15"
   },
   "allowScripts": {
     "better-sqlite3@12.11.1": true,
@@ -50,7 +50,7 @@
     "hooks",
     "skills"
   ],
-  "gitHead": "2120981fcd1d3e906c8c4663ecc56506ed66ce1a",
+  "gitHead": "1086fb1f45a3caa1fb1008a5b3a51520afe5aa28",
   "license": "MIT",
   "repository": {
     "type": "git",

package/skills/devflow:delivery/SKILL.md

@@ -107,16 +107,20 @@ integration ref）完整保留。执行车辆是会话本身，交付线只做
 
 流程（对每个 pending 任务重复 2-6）：
 
-1. `plan_approved` 阶段且 `nextActions` 含 `begin_foreground_execution` 时，必须先用 `AskUserQuestion`
-   询问执行方式（前台执行 / 后台 worker）——这是机器语义 gate，不得跳过询问直接 resume。
-   选前台后调用 `mcp__plugin_devflow_devflow__delivery_begin_foreground_execution` 获取任务租约
-   （此后宿主会话的 Write/Edit/Bash 对本案件放行——你就是在受审计地扮演 worker）。
+1. `plan_approved` 阶段且 `nextActions` 含 `begin_foreground_execution` 时，调用
+   `delivery_propose_trusted_action(action=begin_foreground_execution)` 并把生成的 pending decision
+   用 `AskUserQuestion` **一次性**渲染（选项即 前台执行/放弃；放弃后可走 `delivery_resume` 后台）。
+   不得先问一遍执行方式再弹一次确认——一次决策完成选择与授权。确认后宿主会话即持有任务租约
+   （你就是在受审计地扮演 worker）。
 2. 从 `delivery_status` 的任务列表取第一个 `pending` 任务，向用户展示任务卡：目标、`allowedFiles`、
-   `implementationSteps`（RED/GREEN 顺序）、验收标准、验证命令。明确声明 allowedFiles 之外不做任何修改。
+   `implementationSteps`、验收标准、验证命令。明确声明 allowedFiles 之外不做任何修改。
 3. 基于任务的 base revision 建独立 worktree（候选必须是 base 后代，否则 import 会被权威校验拒绝）：
    `git worktree add <临时目录> -b devflow-fg/<caseId>/<taskId> <baseRevision>`，在该目录中工作。
 4. 前台实现：按 `implementationSteps` 先写失败测试再实现（原生 Read/Write/Edit/Bash，输出对用户可见，
    可用原生 Task/Agent 工具拆子任务）。验证命令在前台逐条运行并向用户展示结果。
+   **纯 UI 组件且项目无 DOM 测试设施时，不要编写"读源码断言字符串"的伪测试**——用计划里的
+   `testFirstWaiver`（verificationAlternative 填 build + typecheck + 既有测试套件），build/类型检查
+   就是该场景下的诚实验证。伪测试不产生行为覆盖，只是为了让 gate 通过的仪式。
 5. 在 worktree 中以规范 commit message 提交，得到 candidateRevision。
 6. 调用 `delivery_import_external_change(caseId, taskId, candidateRevision, reason)`——系统自动完成
    authority 校验（base 后代 + allowedFiles 边界）、独立验证与 integration ref 写入。导入被拒时按
@@ -124,7 +128,7 @@ integration ref）完整保留。执行车辆是会话本身，交付线只做
    全部任务 integrated 后按 `nextActions` 进入 review/export gate。
 
 边界：前台模式不改变 Delivery authority——不碰 target ref、不跳过验证、不伪造证据；import 失败照常
-按错误处理规则恢复。
+按错误处理规则恢复。worktree 用完即清（`git worktree remove --force`）。
 
 ## 人工 Review Gate（REVIEW_AWAITING_HUMAN）
 
@@ -134,7 +138,8 @@ integration ref）完整保留。执行车辆是会话本身，交付线只做
 流程：
 1. 收到 `REVIEW_AWAITING_HUMAN` 后，先向用户展示审查材料：集成 diff（`git diff <parentRevision>..<integrationRevision>`）、
    验证证据摘要（verification 命令与结果）、任务验收标准。
-2. 用 `AskUserQuestion` 一次收集三类裁决（bugs / security / compliance），每类选项：通过 / 退回（附 finding）。
+2. 用 `AskUserQuestion` **单次调用**收集三类裁决——一次调用带 3 个 question（bugs / security / compliance），
+   每类选项：通过 / 退回（附 finding）。不要分三次弹窗。
    用户的裁决必须原样提交，不得代答或合并。
 3. 调用 `delivery_submit_review(caseId, verdicts)` 提交三类 verdict（每项 `{ kind, passed, findings? }`，
    findings 的 severity 用 blocker/major/minor/informational）。宿主可信通道会签名该决策。
@@ -143,6 +148,19 @@ integration ref）完整保留。执行车辆是会话本身，交付线只做
 
 禁止：agent 不得代替用户生成 verdict；不得在未展示 diff 与验证证据的情况下请求裁决；三类缺一不可。
 
+## 交付收尾（delivered 之后）
+
+export 产出交付包后，闭环还差两步，按 `nextActions` 继续：
+
+1. **合入目标分支**：`nextActions` 含 `merge_to_target` 时，调用
+   `delivery_propose_trusted_action(action=merge_to_target)` 并渲染确认决策。确认后系统执行
+   fast-forward-only 合入（target 分叉时报 `TARGET_DIVERGED`，由用户手工解决，绝不强制合并）。
+   合入成功后本轮交付的代码才真正落到 targetRef。
+2. **记忆沉淀（闭环第⑨步）**：合入完成后，调用 `mcp__plugin_devflow_devflow__memory_save_distilled`
+   提炼本案的持久知识，至少包含：新增/变更的组件与位置（observation：decision_made/config_discovery）、
+   设计决策与被否方案及理由（decision_made）、验证约定（config_discovery，如"本地工具链形式命令已验证可用"）。
+   没有这一步，下一个同类需求无法从本轮受益——闭环"每圈更便宜"依赖它。
+
 ## 可用操作
 
 - 澄清和设计：`delivery_propose_options`、`delivery_answer`、`delivery_revise`、`delivery_compare_options`、`delivery_prepare_plan`