@devflow-tools/claude-code-plugin 0.19.7 → 0.19.9

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "devflow",
   "description": "DevFlow — Developer Intelligence Platform: project context, code graph, knowledge base, memory engine, and workflow automation with 14 domain plugins",
-  "version": "0.19.7",
+  "version": "0.19.9",
   "author": {
     "name": "DevFlow"
   },

package/dist/command-registry.json

@@ -8,7 +8,7 @@
       ],
       "blockedNative": [],
       "source": "core",
-      "sourceVersion": "0.19.7",
+      "sourceVersion": "0.19.9",
       "requiresContext": false,
       "evidenceMode": "runtime",
       "skillPath": "skills/devflow:doctor/SKILL.md",
@@ -35,7 +35,7 @@
         "WebFetch"
       ],
       "source": "core",
-      "sourceVersion": "0.19.7",
+      "sourceVersion": "0.19.9",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:context/SKILL.md",
@@ -60,7 +60,7 @@
         "Explore"
       ],
       "source": "core",
-      "sourceVersion": "0.19.7",
+      "sourceVersion": "0.19.9",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:graph/SKILL.md",
@@ -79,7 +79,7 @@
         "WebFetch"
       ],
       "source": "core",
-      "sourceVersion": "0.19.7",
+      "sourceVersion": "0.19.9",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:knowledge/SKILL.md",
@@ -103,7 +103,7 @@
         "Explore"
       ],
       "source": "core",
-      "sourceVersion": "0.19.7",
+      "sourceVersion": "0.19.9",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:memory/SKILL.md",
@@ -119,7 +119,7 @@
       ],
       "blockedNative": [],
       "source": "core",
-      "sourceVersion": "0.19.7",
+      "sourceVersion": "0.19.9",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:workflow/SKILL.md",
@@ -154,7 +154,7 @@
       ],
       "blockedNative": [],
       "source": "core",
-      "sourceVersion": "0.19.7",
+      "sourceVersion": "0.19.9",
       "requiresContext": true,
       "evidenceMode": "mixed",
       "skillPath": "skills/devflow:delivery/SKILL.md",

package/dist/runtime-manifest.json

@@ -1,14 +1,14 @@
 {
   "manifestVersion": "devflow-runtime.v1",
-  "packageVersion": "0.19.7",
-  "sourceCommit": "3efc3469da75138928b17686554cfd482f20dbb4",
+  "packageVersion": "0.19.9",
+  "sourceCommit": "92303353e67f4cf7c0ba8fc92699a9ab632e9b1b",
   "bundleHashes": {
     "hooks": "40df4bca4427aee4f71c5ca021b96ba5d22951b1677162cd4d1e15625b343563",
     "mcp": "ae638ba33e7807efad1554deadd8517002e7e6a263a4f4745ff7cb2081671997",
     "cli": "6205081f819ee3651962df36edd626b993a917fb8691f20c84e6b6e04af81d16"
   },
-  "registryHash": "a5c9b2d6f9c174856e97186979334d57dacf639ae751276385495ac75fd7cda6",
+  "registryHash": "a271138ceaabef78c4c933090e388e5bb2f4101c956ea1971fb9c358b65d0377",
   "stateDbPath": "<projectRoot>/.devflow/delivery-line/state.db",
-  "builtAt": 1793847696798,
-  "manifestHash": "8731b9d8e40d58d89c34a5d07a68c2bf2b6b3f6927c9933847d2e17a99138c54"
+  "builtAt": 1793861503602,
+  "manifestHash": "0e9c447b6757b46b159b4459cfc059f05878b3620a00ff4b55b85db49041b48f"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devflow-tools/claude-code-plugin",
-  "version": "0.19.7",
+  "version": "0.19.9",
   "description": "Claude Code hooks and skills for the DevFlow development intelligence runtime.",
   "type": "module",
   "scripts": {
@@ -12,20 +12,20 @@
     "verify:runtime-dependencies": "node --import tsx scripts/verify-runtime-dependencies.ts"
   },
   "dependencies": {
-    "@devflow-tools/benchmark": "0.19.7",
-    "@devflow-tools/context-engine": "0.19.7",
-    "@devflow-tools/database": "0.19.7",
-    "@devflow-tools/mcp-server": "0.19.7",
-    "@devflow-tools/memory-engine": "0.19.7",
-    "@devflow-tools/sdk": "0.19.7",
-    "@devflow-tools/semantic-engine": "0.19.7",
-    "@devflow-tools/server": "0.19.7",
-    "@devflow-tools/task-runtime": "0.19.7",
-    "@devflow-tools/telemetry": "0.19.7",
-    "@devflow-tools/workflow-engine": "0.19.7"
+    "@devflow-tools/benchmark": "0.19.9",
+    "@devflow-tools/context-engine": "0.19.9",
+    "@devflow-tools/database": "0.19.9",
+    "@devflow-tools/mcp-server": "0.19.9",
+    "@devflow-tools/memory-engine": "0.19.9",
+    "@devflow-tools/sdk": "0.19.9",
+    "@devflow-tools/semantic-engine": "0.19.9",
+    "@devflow-tools/server": "0.19.9",
+    "@devflow-tools/task-runtime": "0.19.9",
+    "@devflow-tools/telemetry": "0.19.9",
+    "@devflow-tools/workflow-engine": "0.19.9"
   },
   "devDependencies": {
-    "@devflow-tools/devflow": "0.19.7"
+    "@devflow-tools/devflow": "0.19.9"
   },
   "allowScripts": {
     "better-sqlite3@12.11.1": true,
@@ -50,7 +50,7 @@
     "hooks",
     "skills"
   ],
-  "gitHead": "bbd5b07bb6b72bd20a9f73f3cfd2a17addeca17d",
+  "gitHead": "f1ef0359a6d70432e4d5a6f06b0db4666ca46ff3",
   "license": "MIT",
   "repository": {
     "type": "git",

package/skills/devflow:delivery/SKILL.md

@@ -70,14 +70,38 @@ description: 通过可审计 Delivery Line 将需求推进到验证完成的 int
 - `/devflow:revise`、`/devflow:cancel` 和 `/devflow:exit` 尚未注册为可信命令；仅使用当前 `nextActions` 已实现的路径，不得向用户展示不存在的命令。
 - 审批返回后不要结束会话：立即调用 `delivery_status`，按返回的 `nextActions` 连续推进；只有出现新的
   人工 gate、明确 blocker、终态或用户明确暂停时才结束。
-- plan 审批后若状态是 `plan_approved` 且 `nextActions` 包含 `resume`，立即调用 `delivery_resume`。
-  不要先调用只改变阶段但不启动 worker 的 `delivery_advance`。`delivery_resume` 应连续运行执行、验证与
-  review，直到下一个真实 gate 或 blocker。
+- plan 审批后若 `nextActions` 包含 `resume`，先用 `AskUserQuestion` 询问执行方式（前台执行 / 后台 worker，
+  见「前台执行模式」），除非用户已明确选择。默认推荐前台执行。
+- 后台 worker 模式：不要先调用只改变阶段但不启动 worker 的 `delivery_advance`；`delivery_resume` 应连续
+  运行执行、验证与 review，直到下一个真实 gate 或 blocker。
 - 失败任务只通过 `mcp__plugin_devflow_devflow__delivery_retry_task` 重试；取消和导出分别使用 `mcp__plugin_devflow_devflow__delivery_cancel` 与 `mcp__plugin_devflow_devflow__delivery_export`。
 - `REQUIRED_CONTEXT_MISSING` 会将案件持久化为 `held` 并返回 `repair_context`；先调用 `mcp__plugin_devflow_devflow__delivery_repair_context`，成功后重新读取状态并再次准备计划。不得用新的幂等键重复提交同一个失败计划。
 - `HOST_MODEL_UNAVAILABLE` 或 `HOST_AUTHENTICATION_REQUIRED` 返回 `refresh_activation` 时，先修复宿主配置，再调用 `mcp__plugin_devflow_devflow__delivery_refresh_activation`。该操作会失效旧执行产物并要求重新审批计划，不能直接重试旧 task。
 - Claude 在当前工作区产生的修改不是 Delivery 输出；只能先调用 `mcp__plugin_devflow_devflow__delivery_import_external_change`，由系统校验 base/candidate、允许文件、context receipt 和验证证据后再进入 integration。
 
+## 前台执行模式（默认推荐）
+
+前台模式把执行放回当前会话：用户全程可见、可中断、可追问，审计链（authority 校验、独立验证、
+integration ref）完整保留。执行车辆是会话本身，交付线只做审计。
+
+流程（对每个 pending 任务重复 2-6）：
+
+1. 用 `AskUserQuestion` 确认执行方式（默认前台）；后台 worker 仅在用户明确选择或 headless 场景使用。
+2. 从 `delivery_status` 的任务列表取第一个 `pending` 任务，向用户展示任务卡：目标、`allowedFiles`、
+   `implementationSteps`（RED/GREEN 顺序）、验收标准、验证命令。明确声明 allowedFiles 之外不做任何修改。
+3. 基于任务的 base revision 建独立 worktree（候选必须是 base 后代，否则 import 会被权威校验拒绝）：
+   `git worktree add <临时目录> -b devflow-fg/<caseId>/<taskId> <baseRevision>`，在该目录中工作。
+4. 前台实现：按 `implementationSteps` 先写失败测试再实现（原生 Read/Write/Edit/Bash，输出对用户可见，
+   可用原生 Task/Agent 工具拆子任务）。验证命令在前台逐条运行并向用户展示结果。
+5. 在 worktree 中以规范 commit message 提交，得到 candidateRevision。
+6. 调用 `delivery_import_external_change(caseId, taskId, candidateRevision, reason)`——系统自动完成
+   authority 校验（base 后代 + allowedFiles 边界）、独立验证与 integration ref 写入。导入被拒时按
+   `error.code` 修正（如 `CHANGE_OUTSIDE_AUTHORITY` 表示改了授权外文件）后重新提交，不得绕过。
+   全部任务 integrated 后按 `nextActions` 进入 review/export gate。
+
+边界：前台模式不改变 Delivery authority——不碰 target ref、不跳过验证、不伪造证据；import 失败照常
+按错误处理规则恢复。
+
 ## 可用操作
 
 - 澄清和设计：`delivery_propose_options`、`delivery_answer`、`delivery_revise`、`delivery_compare_options`、`delivery_prepare_plan`