@devflow-tools/cli 0.12.6 → 0.13.1

package/dist/plugin-files/dist/skills/devflow:workflow/SKILL.md

@@ -0,0 +1,80 @@
+---
+name: devflow:workflow
+description: 执行标准化开发工作流 — Bug 修复、功能开发、代码审查
+required_mcp_tools:
+  - run_workflow
+---
+
+<HARD-GATE>
+收到 devflow:workflow 时，必须先调用以下 MCP 工具之一：
+run_workflow
+</HARD-GATE>
+
+## MANDATORY FIRST STEP - Skill Registration
+
+> **IMPORTANT: Before ANY other action, execute the registration command below. This is NON-NEGOTIABLE.**
+
+```bash
+mkdir -p ~/.devflow && echo '{"name":"devflow:workflow","required_mcp_tools":["run_workflow"],"description":"devflow:workflow skill","registeredAt":'"$(date +%s)000"'}' > ~/.devflow/current-skill.json
+```
+
+After registration, you **MUST** use ONLY these MCP tools for all work in this skill:
+- `mcp__devflow__run_workflow`
+
+**Never use direct tools** (Read, Write, Edit, Bash, Grep, etc.) for tasks that can be handled by the MCP tools above.
+
+When the skill execution is complete, clean up:
+```bash
+rm -f ~/.devflow/current-skill.json ~/.devflow/current-execution-id
+```
+
+## 工作流（必须按顺序执行）
+
+### Step 1: 获取精确上下文
+调用 `mcp__devflow__get_project_context` 获取与用户问题相关的代码、记忆和知识库信息。
+这一步确保你拿到的是项目真实状态，而非凭空猜测。
+
+### Step 2: 分析
+基于 Step 1 返回的上下文，分析问题根因或设计方案。
+此时可以自由使用 Read 查看具体文件。
+
+### Step 3: 执行
+根据分析结果修改代码，逐文件编辑。
+
+### Step 4: 验证
+运行类型检查和测试，确保改动正确。
+
+## 可用工具
+
+| 工具 | 何时调用 |
+|------|----------|
+| `mcp__devflow__get_project_context` | 每次任务第一步（必须） |
+| `mcp__devflow__run_workflow` | 按需调用 |
+
+## 规则
+- 永远从 `mcp__devflow__get_project_context` 开始——你不知道项目里有什么
+- 上下文返回后，用 Read 确认关键文件
+- 改完代码后跑类型检查
+
+## 规则
+- 永远从 `get_project_context` 开始——你不知道项目里有什么
+- 上下文返回后，用 Read 确认关键文件
+- 改完代码后跑类型检查
+
+## 规则
+- 永远从 `run_workflow` 开始——你不知道项目里有什么
+- 上下文返回后，用 Read 确认关键文件
+- 改完代码后跑类型检查
+
+# /devflow:workflow
+
+## 执行
+
+调用 `mcp__devflow__run_workflow` MCP 工具：
+
+```
+type = "bugfix" | "feature" | "review"
+input = 用户的查询内容
+```
+
+MCP 工具提供标准化的 DAG 步骤编排、人工确认节点、执行追踪和遥测记录。工作流执行过程中，MCP 工具会返回需要你介入的步骤，此时才根据步骤指引执行具体操作。

package/dist/plugin-files/hooks/constitution.md

@@ -0,0 +1,20 @@
+<EXTREMELY_IMPORTANT>
+你正在使用 DevFlow MCP Gateway。
+
+## MCP 优先原则
+
+收到 /devflow:* 命令时，必须先调用 SKILL.md 中列出的 MCP 工具。
+Hook 会自动拦截不符合规范的原生工具调用，并按提示引导你使用正确的 MCP 工具。
+
+正确流程：
+1. 调用 Skill 加载命令
+2. 立即调用 MCP 工具
+3. 基于 MCP 结果回答
+4. 如需补充信息，使用 Read 工具读取 MCP 未包含的关联文件
+
+绝对不要：
+- 在调用 MCP 之前用 grep/find/Glob/Explore 搜索代码
+- 用 WebSearch/WebFetch 替代 get_knowledge
+- 用 Agent(Explore) 替代 MCP 工具
+- 尝试绕过 Hook 拦截
+</EXTREMELY_IMPORTANT>

package/dist/plugin-files/hooks/post-tool-use

@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# DevFlow PostToolUse Hook — talks to hook-daemon via hook-client
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PLUGIN_ROOT="${CLAUDE_PLUGIN_ROOT:-$SCRIPT_DIR/..}"
+CLIENT_JS="$PLUGIN_ROOT/dist/hooks/hook-client.js"
+FALLBACK_JS="$PLUGIN_ROOT/dist/hooks/post-tool-use.js"
+
+INPUT="$(cat)"
+
+if [ -f "$CLIENT_JS" ]; then
+  node "$CLIENT_JS" post-tool-use "$INPUT" 2>/dev/null || {
+    echo "$INPUT" | node "$FALLBACK_JS" 2>/dev/null || true
+  }
+elif [ -f "$FALLBACK_JS" ]; then
+  echo "$INPUT" | node "$FALLBACK_JS" 2>/dev/null || true
+fi
+
+exit 0

package/dist/plugin-files/hooks/pre-tool-use

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# DevFlow PreToolUse Hook — talks to hook-daemon via hook-client
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PLUGIN_ROOT="${CLAUDE_PLUGIN_ROOT:-$SCRIPT_DIR/..}"
+CLIENT_JS="$PLUGIN_ROOT/dist/hooks/hook-client.js"
+FALLBACK_JS="$PLUGIN_ROOT/dist/hooks/pre-tool-use.js"
+
+if [ -f "$CLIENT_JS" ]; then
+  node "$CLIENT_JS" pre-tool-use || {
+    echo '[devflow] hook-client failed, trying fallback' >&2
+    if [ -f "$FALLBACK_JS" ]; then
+      node "$FALLBACK_JS" || echo '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow"}}'
+    else
+      echo '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow"}}'
+    fi
+  }
+elif [ -f "$FALLBACK_JS" ]; then
+  node "$FALLBACK_JS" || echo '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow"}}'
+else
+  echo '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow"}}'
+fi

package/dist/plugin-files/hooks/session-start

@@ -0,0 +1,176 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Try to get project summary from devflow doctor
+SUMMARY=""
+DOCTOR_OUTPUT=""
+
+# Try global devflow first, then npx fallback
+if command -v devflow &>/dev/null; then
+  DOCTOR_OUTPUT=$(devflow doctor --json 2>/dev/null || echo "")
+elif command -v npx &>/dev/null; then
+  DOCTOR_OUTPUT=$(npx --yes @devflow-tools/cli doctor --json 2>/dev/null || echo "")
+fi
+
+if [ -n "$DOCTOR_OUTPUT" ] && echo "$DOCTOR_OUTPUT" | python3 -c "import sys,json; json.load(sys.stdin)" 2>/dev/null; then
+  PROJECT_NAME=$(echo "$DOCTOR_OUTPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('project',{}).get('name','') or d.get('projectName',''))" 2>/dev/null || echo "")
+  FILES=$(echo "$DOCTOR_OUTPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('project',{}).get('files', d.get('indexedFiles','?')))" 2>/dev/null || echo "?")
+  TECH=$(echo "$DOCTOR_OUTPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); s=d.get('project',{}).get('techStack',[]); print(', '.join(s) if s else 'unknown')" 2>/dev/null || echo "unknown")
+  ENGINES=$(echo "$DOCTOR_OUTPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); e=d.get('engines',{}); print(' '.join([f'{k} {\"✓\" if v else \"✗\"}' for k,v in e.items()]))" 2>/dev/null || echo "")
+  PLUGINS=$(echo "$DOCTOR_OUTPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); p=d.get('plugins',[]); print(', '.join(p))" 2>/dev/null || echo "")
+
+  SUMMARY="DevFlow 已就绪。项目 ${PROJECT_NAME:-unknown} (${TECH})。${FILES} 个文件已索引。引擎：${ENGINES}。已装插件：${PLUGINS}。使用 /devflow:context 查代码，/devflow:react 获取 React 专家能力。"
+else
+  SUMMARY="DevFlow 插件已加载。如尚未初始化项目，请运行 devflow init。使用 /devflow 查看可用命令。"
+fi
+
+# Generate session token for MCP Gateway authentication
+# Clean up stale receipt from previous session
+PROJECT_ROOT="${CLAUDE_PROJECT_DIR:-$(pwd)}"
+RECEIPT_DIR="${TMPDIR:-/tmp}/.devflow-receipts"
+mkdir -p "$RECEIPT_DIR" 2>/dev/null || true
+SESSION_ID=$(echo -n "$PROJECT_ROOT" | shasum -a 256 2>/dev/null | cut -c1-16 || echo "default")
+RECEIPT_FILE="$RECEIPT_DIR/${SESSION_ID}.json"
+OVERRIDE_FILE="$RECEIPT_DIR/${SESSION_ID}.override"
+rm -f "$RECEIPT_FILE" "$OVERRIDE_FILE" 2>/dev/null || true
+
+# ── Clean up stale execution from previous session (if stop hook didn't fire) ──
+EXEC_FILE="${HOME}/.devflow/current-execution-id"
+SKILL_FILE="${HOME}/.devflow/current-skill.json"
+if [ -f "$EXEC_FILE" ]; then
+  EXEC_ID=$(cat "$EXEC_FILE" 2>/dev/null || echo "")
+  if [ -n "$EXEC_ID" ]; then
+    NOW_MS="$(date +%s)000"
+    python3 -c "
+import urllib.request, json
+try:
+    payload = json.dumps({
+        'executionId': '${EXEC_ID}',
+        'finishedAt': ${NOW_MS},
+        'status': 'completed',
+        'summary': {
+            'totalToolCalls': 0,
+            'mcpToolCalls': 0,
+            'directToolCalls': 0,
+            'subagentCount': 0,
+            'totalTokens': 0,
+            'totalDuration': 0,
+            'mcpComplianceRate': 0
+        }
+    }).encode()
+    req = urllib.request.Request(
+        'http://127.0.0.1:13337/api/telemetry/skill-execution/complete',
+        data=payload,
+        headers={'Content-Type': 'application/json', 'X-API-Key': 'dev-key-000000'},
+        method='POST'
+    )
+    urllib.request.urlopen(req, timeout=5)
+except:
+    pass
+" 2>/dev/null || true
+  fi
+  rm -f "$EXEC_FILE" "$SKILL_FILE" 2>/dev/null || true
+fi
+
+# Determine plugin root directory (same way as superpowers)
+if [ -z "${CLAUDE_PLUGIN_ROOT:-}" ]; then
+  SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+  PLUGIN_ROOT="$(cd "${SCRIPT_DIR}/../.." && pwd)"
+else
+  PLUGIN_ROOT="$CLAUDE_PLUGIN_ROOT"
+fi
+
+# Read DevFlow Constitution from file (avoids shell escaping issues)
+CONSTITUTION_FILE="${PLUGIN_ROOT}/skills/devflow/SKILL.md"
+if [ -f "${PLUGIN_ROOT}/hooks/constitution.md" ]; then
+  CONSTITUTION_FILE="${PLUGIN_ROOT}/hooks/constitution.md"
+fi
+
+if [ -f "$CONSTITUTION_FILE" ]; then
+  GLOBAL_CONSTRAINT=$(cat "$CONSTITUTION_FILE" 2>/dev/null || echo "DevFlow Constitution 加载失败")
+else
+  GLOBAL_CONSTRAINT="DevFlow Constitution 文件未找到。使用 /devflow: 命令时请优先调用 MCP 工具。"
+fi
+
+# Append Gateway status to summary
+GATEWAY_STATUS="\n\n━━━━━━ DevFlow Gateway ━━━━━━\n"
+# Check if devflow MCP server is configured (token will be auto-generated by ensureSessionToken)
+if [ -f ~/.claude/.mcp.json ] && grep -q '"devflow"' ~/.claude/.mcp.json 2>/dev/null; then
+  GATEWAY_STATUS="${GATEWAY_STATUS}Status: 🟢 DevFlow MCP 已配置\nGate 层数: 4 (宪法 → 派发 → 拦截 → 纠正)\n"
+elif [ -f .mcp.json ] && grep -q '"devflow"' .mcp.json 2>/dev/null; then
+  GATEWAY_STATUS="${GATEWAY_STATUS}Status: 🟢 DevFlow MCP 已配置（项目级）\nGate 层数: 4 (宪法 → 派发 → 拦截 → 纠正)\n"
+else
+  GATEWAY_STATUS="${GATEWAY_STATUS}Status: 🔴 未配置 DevFlow MCP Server\n请将 devflow MCP 配置加入 .mcp.json\n"
+fi
+GATEWAY_STATUS="${GATEWAY_STATUS}━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+
+# ── MCP Tool Usage Protocol (injected into every session) ──
+MCP_PROTOCOL="
+
+## DevFlow MCP 工具使用协议（必须遵守）
+
+当用户使用 /devflow: 开头的技能时（如 /devflow:react、/devflow:vue、/devflow:context 等），你必须按以下流程操作：
+
+### Step 1: 获取上下文（必须先执行）
+调用 mcp__devflow__get_project_context，参数格式：{\"query\": \"用户的问题描述\"}
+这个工具返回项目中的相关文件、符号、风险提示和下一步建议。
+不要跳过这一步。不要用 Explore、Agent、Grep 或 Bash 代替。
+
+### Step 2: 按需调用领域工具
+根据技能类型调用对应的 MCP 工具：
+- React 性能问题 → mcp__devflow__react_audit_performance（无需参数）
+- React Bug → mcp__devflow__react_diagnose_bug
+- React Hooks 审查 → mcp__devflow__react_review_hooks
+- Vue 问题 → mcp__devflow__vue_diagnose_bug
+- NestJS 问题 → mcp__devflow__nest_diagnose_bug
+- 代码搜索 → mcp__devflow__search_symbol
+- 知识查询 → mcp__devflow__get_knowledge
+
+### Step 3: 基于工具返回结果进行分析
+用 Read 确认工具返回的关键文件，然后给出分析结论。
+
+### 铁律
+- 永远不要用 Explore、Agent、Grep 或 Glob 替代 MCP 工具的第一步上下文获取
+- 所有 mcp__devflow__ 工具的 projectRoot 参数都是可选的，无需传
+- 如果 MCP 工具返回错误，重试一次；再失败则回退到直接读文件"
+
+SUMMARY="${SUMMARY}${MCP_PROTOCOL}${GLOBAL_CONSTRAINT}${GATEWAY_STATUS}"
+
+# Escape for JSON
+ESCAPED=$(echo "$SUMMARY" | python3 -c "import sys,json; print(json.dumps(sys.stdin.read()))")
+
+# Output context injection in Claude Code format (always output, even without CLAUDE_PLUGIN_ROOT)
+printf '{\n  "hookSpecificOutput": {\n    "hookEventName": "SessionStart",\n    "additionalContext": %s\n  }\n}\n' "$ESCAPED"
+
+# ── Start hook daemon (background, Unix socket) ──
+DAEMON_JS="${PLUGIN_ROOT}/dist/hooks/hook-daemon.js"
+if [ -f "$DAEMON_JS" ]; then
+  # Kill any stale daemon from previous session
+  STALE_PID=$(pgrep -f "hook-daemon.js" 2>/dev/null || true)
+  if [ -n "$STALE_PID" ]; then
+    kill "$STALE_PID" 2>/dev/null || true
+    sleep 0.5
+  fi
+  node "$DAEMON_JS" "${CLAUDE_PROJECT_DIR:-$(pwd)}" &
+  echo "[devflow] Hook daemon started (PID $!)" >&2
+fi
+
+# ── Trigger memory extraction for previous session events (best-effort, async) ──
+(python3 -c "
+import urllib.request, json, sys
+try:
+    req = urllib.request.Request(
+        'http://127.0.0.1:13337/api/memory/process?rootPath=${CLAUDE_PROJECT_DIR:-$(pwd)}',
+        data=b'{}',
+        headers={'Content-Type': 'application/json', 'X-API-Key': 'dev-key-000000'},
+        method='POST',
+    )
+    resp = urllib.request.urlopen(req, timeout=30)
+    result = json.loads(resp.read())
+    print('DevFlow memory: {} extracted, {} approved, {} pending'.format(
+        result.get('extracted', 0), result.get('approved', 0), result.get('pending', 0)), file=sys.stderr)
+except Exception as e:
+    print('DevFlow memory extraction skipped: {}'.format(e), file=sys.stderr)
+" 2>/dev/null || true) &
+
+exit 0

package/dist/plugin-files/hooks/stop

@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# DevFlow Stop Hook — graceful daemon shutdown + cleanup
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PLUGIN_ROOT="${CLAUDE_PLUGIN_ROOT:-$SCRIPT_DIR/..}"
+
+# 1. Tell daemon to stop via hook-client
+CLIENT_JS="$PLUGIN_ROOT/dist/hooks/hook-client.js"
+if [ -f "$CLIENT_JS" ]; then
+  node "$CLIENT_JS" stop </dev/null 2>/dev/null || true
+fi
+
+# 2. Fallback: kill any remaining daemon process
+DAEMON_PID=$(pgrep -f "hook-daemon.js" 2>/dev/null || true)
+if [ -n "$DAEMON_PID" ]; then
+  kill "$DAEMON_PID" 2>/dev/null || true
+fi
+
+# 3. Run existing stop.js cleanup (session close, memory extraction)
+STOP_JS="$PLUGIN_ROOT/dist/hooks/stop.js"
+if [ -f "$STOP_JS" ]; then
+  node "$STOP_JS" 2>/dev/null || true
+fi
+
+# 4. Clean up stale receipt files for this project
+PROJECT_ROOT="${CLAUDE_PROJECT_DIR:-$(pwd)}"
+SESSION_ID=$(echo -n "$PROJECT_ROOT" | shasum -a 256 2>/dev/null | cut -c1-16 || echo "")
+RECEIPT_FILE="${TMPDIR:-/tmp}/.devflow-receipts/${SESSION_ID}.json"
+rm -f "$RECEIPT_FILE" 2>/dev/null || true
+
+exit 0

package/dist/plugin-files/hooks.json

@@ -0,0 +1,52 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash \"${CLAUDE_PLUGIN_ROOT}/hooks/session-start\"",
+            "async": false
+          }
+        ]
+      }
+    ],
+    "PreToolUse": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash \"${CLAUDE_PLUGIN_ROOT}/hooks/pre-tool-use\"",
+            "async": false
+          }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash \"${CLAUDE_PLUGIN_ROOT}/hooks/post-tool-use\"",
+            "async": false
+          }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash \"${CLAUDE_PLUGIN_ROOT}/hooks/stop\"",
+            "async": false
+          }
+        ]
+      }
+    ]
+  }
+}

package/dist/plugin-files/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@devflow-tools/claude-code-plugin",
+  "version": "0.13.0",
+  "description": "DevFlow — Developer Intelligence Platform for Claude Code",
+  "type": "module",
+  "scripts": {
+    "build": "npx tsx scripts/inject-gates.ts",
+    "deploy": "npx tsx scripts/inject-gates.ts --deploy"
+  },
+  "devDependencies": {
+    "@devflow-tools/mcp-server": "^0.13.0"
+  },
+  "keywords": [
+    "pi-package",
+    "skills",
+    "development",
+    "context",
+    "knowledge-base"
+  ],
+  "pi": {
+    "skills": [
+      "./skills"
+    ]
+  },
+  "files": [
+    "dist",
+    "hooks",
+    "hooks.json",
+    "skills"
+  ]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devflow-tools/cli",
-  "version": "0.12.6",
+  "version": "0.13.1",
   "type": "module",
   "main": "./dist/index.js",
   "scripts": {
@@ -12,31 +12,31 @@
   },
   "dependencies": {
     "@colbymchenry/codegraph": "^1.1.1",
-    "@devflow-tools/adapters": "^0.12.5",
-    "@devflow-tools/benchmark": "^0.12.5",
-    "@devflow-tools/context-engine": "^0.12.5",
-    "@devflow-tools/database": "^0.12.5",
-    "@devflow-tools/knowledge-engine": "^0.12.5",
-    "@devflow-tools/mcp-server": "^0.12.5",
-    "@devflow-tools/memory-engine": "^0.12.5",
-    "@devflow-tools/plugin-animation": "^0.12.0",
-    "@devflow-tools/plugin-css": "^0.12.0",
-    "@devflow-tools/plugin-docker": "^0.12.0",
-    "@devflow-tools/plugin-electron": "^0.12.0",
-    "@devflow-tools/plugin-git": "^0.12.0",
-    "@devflow-tools/plugin-graphql": "^0.12.0",
-    "@devflow-tools/plugin-nest": "^0.12.0",
-    "@devflow-tools/plugin-nextjs": "^0.12.0",
-    "@devflow-tools/plugin-performance": "^0.12.0",
-    "@devflow-tools/plugin-react": "^0.12.0",
-    "@devflow-tools/plugin-tailwind": "^0.12.0",
-    "@devflow-tools/plugin-taro": "^0.12.0",
-    "@devflow-tools/plugin-ui-layout": "^0.12.0",
-    "@devflow-tools/plugin-vue": "^0.12.0",
-    "@devflow-tools/sdk": "^0.12.5",
-    "@devflow-tools/server": "^0.12.5",
-    "@devflow-tools/telemetry": "^0.12.5",
-    "@devflow-tools/workflow-engine": "^0.12.5",
+    "@devflow-tools/adapters": "^0.13.1",
+    "@devflow-tools/benchmark": "^0.13.1",
+    "@devflow-tools/context-engine": "^0.13.1",
+    "@devflow-tools/database": "^0.13.1",
+    "@devflow-tools/knowledge-engine": "^0.13.1",
+    "@devflow-tools/mcp-server": "^0.13.1",
+    "@devflow-tools/memory-engine": "^0.13.1",
+    "@devflow-tools/plugin-animation": "^0.13.1",
+    "@devflow-tools/plugin-css": "^0.13.1",
+    "@devflow-tools/plugin-docker": "^0.13.1",
+    "@devflow-tools/plugin-electron": "^0.13.1",
+    "@devflow-tools/plugin-git": "^0.13.1",
+    "@devflow-tools/plugin-graphql": "^0.13.1",
+    "@devflow-tools/plugin-nest": "^0.13.1",
+    "@devflow-tools/plugin-nextjs": "^0.13.1",
+    "@devflow-tools/plugin-performance": "^0.13.1",
+    "@devflow-tools/plugin-react": "^0.13.1",
+    "@devflow-tools/plugin-tailwind": "^0.13.1",
+    "@devflow-tools/plugin-taro": "^0.13.1",
+    "@devflow-tools/plugin-ui-layout": "^0.13.1",
+    "@devflow-tools/plugin-vue": "^0.13.1",
+    "@devflow-tools/sdk": "^0.13.1",
+    "@devflow-tools/server": "^0.13.1",
+    "@devflow-tools/telemetry": "^0.13.1",
+    "@devflow-tools/workflow-engine": "^0.13.1",
     "@inquirer/prompts": "^7.10.1",
     "chalk": "^5.3.0",
     "commander": "^12.0.0"
@@ -49,5 +49,5 @@
     "dist",
     "bin"
   ],
-  "gitHead": "d544427472016eb332c6c2107f0fc98d8ae59c14"
+  "gitHead": "28618c4d84bea33bdd4f433bfc740c1ce2591d51"
 }