@devflow-tools/cli 0.16.10 → 0.16.12

package/dist/plugin-files/hooks/session-start

@@ -4,58 +4,10 @@ set -euo pipefail
 PROJECT_ROOT="${CLAUDE_PROJECT_DIR:-$(pwd)}"
 SESSION_START_INPUT="$(cat)"
 
-# Try to get project summary from devflow doctor
-SUMMARY=""
-DOCTOR_OUTPUT=""
-
-# Try global devflow first, then npx fallback
-if command -v devflow &>/dev/null; then
-  DOCTOR_OUTPUT=$(devflow doctor --json 2>/dev/null || echo "")
-elif command -v npx &>/dev/null; then
-  DOCTOR_OUTPUT=$(npx --yes @devflow-tools/cli doctor --json 2>/dev/null || echo "")
-fi
-
-if [ -n "$DOCTOR_OUTPUT" ] && echo "$DOCTOR_OUTPUT" | python3 -c "import sys,json; json.load(sys.stdin)" 2>/dev/null; then
-  SUMMARY=$(
-    DEVFLOW_DOCTOR_OUTPUT="$DOCTOR_OUTPUT" python3 - 2>/dev/null <<'PY'
-import json, os
-from pathlib import Path
-
-d = json.loads(os.environ.get('DEVFLOW_DOCTOR_OUTPUT', '{}'))
-metrics = {}
-red_sections = []
-for section in d.get('sections', []):
-    if section.get('status') == 'red':
-        red_sections.append(str(section.get('name', '')).strip())
-    for metric in section.get('metrics', []):
-        key = metric.get('key')
-        if key:
-            metrics[key] = metric.get('value')
-
-# One-release compatibility with the previous top-level doctor schema.
-legacy_project = d.get('project', {}) if isinstance(d.get('project'), dict) else {}
-project_root = metrics.get('canonical_project') or legacy_project.get('rootPath') or ''
-project_name = legacy_project.get('name') or d.get('projectName') or (Path(project_root).name if project_root else '')
-parts = ['DevFlow 已就绪']
-if project_name:
-    parts.append(f'项目 {project_name}')
-nodes = metrics.get('codegraph_nodes')
-if isinstance(nodes, (int, float)):
-    parts.append(f'代码图 {int(nodes)} 个节点')
-plugin_source = metrics.get('active_skill_source')
-if isinstance(plugin_source, str) and plugin_source:
-    parts.append(f'技能来源 {plugin_source}')
-if red_sections:
-    parts.append('需处理 ' + ', '.join(x for x in red_sections if x))
-print('。'.join(parts) + '。使用 /devflow:context 查代码，/devflow:react 获取 React 专家能力。')
-PY
-  ) || SUMMARY=""
-  if [ -z "$SUMMARY" ]; then
-    SUMMARY="DevFlow 插件已加载。Doctor 状态暂不可用，运行 devflow doctor 查看详情。"
-  fi
-else
-  SUMMARY="DevFlow 插件已加载。如尚未初始化项目，请运行 devflow init。使用 /devflow 查看可用命令。"
-fi
+# SessionStart must not synchronously run Doctor. Full diagnostics can touch
+# several databases and exceed the lifecycle acknowledgement budget.
+PROJECT_NAME="$(basename "$PROJECT_ROOT")"
+SUMMARY="DevFlow 已就绪。项目 ${PROJECT_NAME}。使用 /devflow 查看全部已安装能力，并按项目技术栈选择对应的 /devflow:* 领域 Skill；运行 devflow doctor 查看完整健康状态。"
 
 # Generate session token for MCP Gateway authentication
 # Clean up stale receipt from previous session
@@ -130,7 +82,7 @@ MCP_PROTOCOL="
 不要跳过这一步。不要用 Explore、Agent、Grep 或 Bash 代替。
 
 ### Step 2: 按需调用领域工具
-根据技能类型调用对应的 MCP 工具：
+根据已加载 Skill 和 command registry 调用对应的 MCP 工具。以下仅为高频示例，完整能力以 /devflow 列表和 command registry 为准：
 - React 性能问题 → mcp__devflow__react_audit_performance（参数：{\"projectRoot\": \"\${CLAUDE_PROJECT_DIR}\"}）
 - React Bug → mcp__devflow__react_diagnose_bug
 - React Hooks 审查 → mcp__devflow__react_review_hooks
@@ -148,6 +100,9 @@ MCP_PROTOCOL="
 - 如果 MCP 工具返回错误，重试一次；再失败则回退到直接读文件"
 
 DEVFLOW_DAEMON_REACHABLE=0
+DEVFLOW_DAEMON_LAUNCHING=0
+DEVFLOW_SESSION_DURABLE=0
+DEVFLOW_SESSION_RECEIPT=""
 DAEMON_SESSION_RESPONSE=""
 run_lifecycle() {
   local PROJECT_HASH=""
@@ -179,36 +134,53 @@ run_lifecycle() {
     [ -n "$SESSION_START_INPUT" ] || return 0
     [ -f "$CLIENT_JS" ] || return 1
     if response=$(DEVFLOW_HOOK_CLIENT_TIMEOUT_MS=250 \
-      DEVFLOW_HOOK_CLIENT_RETRY_DELAY_MS=50 \
+      DEVFLOW_HOOK_CLIENT_RETRY_DELAY_MS=0 \
       DEVFLOW_HOOK_CLIENT_SUPPRESS_FALLBACK_LOG="$suppress_fallback" \
       node "$CLIENT_JS" session-start "$SESSION_START_INPUT" 2>> "$DAEMON_LOG"); then
       DEVFLOW_DAEMON_REACHABLE=1
+      DEVFLOW_SESSION_DURABLE=1
       DAEMON_SESSION_RESPONSE="$response"
       return 0
     fi
     return 1
   }
 
+  queue_session_start() {
+    [ -n "$SESSION_START_INPUT" ] || return 1
+    [ -n "$PROJECT_HASH" ] || return 1
+    local queue_dir="${HOME}/.devflow/state/${PROJECT_HASH}/session-start-pending"
+    local receipt_id="session-start-spool-${PROJECT_HASH}-$(date +%s)-$$"
+    local temp_file="${queue_dir}/.${receipt_id}.tmp"
+    local target_file="${queue_dir}/${receipt_id}.json"
+    mkdir -p "$queue_dir" 2>/dev/null || return 1
+    if (umask 077 && printf '%s' "$SESSION_START_INPUT" > "$temp_file") 2>/dev/null \
+      && mv "$temp_file" "$target_file" 2>/dev/null; then
+      DEVFLOW_SESSION_DURABLE=1
+      DEVFLOW_SESSION_RECEIPT="$receipt_id"
+      return 0
+    fi
+    rm -f "$temp_file" 2>/dev/null || true
+    return 1
+  }
+
   if [ -n "$SESSION_START_INPUT" ] && register_session 1; then
     :
   elif [ -f "$DAEMON_JS" ] && command -v nohup >/dev/null 2>&1 && command -v node >/dev/null 2>&1; then
-    if [ -n "$SESSION_START_INPUT" ]; then
+    if [ -n "$SESSION_START_INPUT" ] && queue_session_start; then
+      nohup node "$DAEMON_JS" "$PROJECT_ROOT" </dev/null >> "$DAEMON_LOG" 2>&1 &
+    elif [ -n "$SESSION_START_INPUT" ]; then
       nohup node "$DAEMON_JS" "$PROJECT_ROOT" "$SESSION_START_INPUT" </dev/null >> "$DAEMON_LOG" 2>&1 &
     else
       nohup node "$DAEMON_JS" "$PROJECT_ROOT" </dev/null >> "$DAEMON_LOG" 2>&1 &
     fi
     DAEMON_PID=$!
+    DEVFLOW_DAEMON_LAUNCHING=1
     echo "[devflow] Hook daemon started for ${PROJECT_ROOT} (PID ${DAEMON_PID})" >&2 || true
-
-    if [ -n "$SESSION_START_INPUT" ]; then
-      for _ in 1 2 3 4 5 6 7 8; do
-        register_session 1 && break
-        sleep 0.05
-      done
-    fi
   fi
 
-  if [ -n "$SESSION_START_INPUT" ] && [ "$DEVFLOW_DAEMON_REACHABLE" != "1" ]; then
+  if [ -n "$SESSION_START_INPUT" ] \
+    && [ "$DEVFLOW_DAEMON_REACHABLE" != "1" ] \
+    && [ "$DEVFLOW_DAEMON_LAUNCHING" != "1" ]; then
     register_session 0 || true
   fi
 
@@ -221,30 +193,38 @@ run_lifecycle() {
 run_lifecycle || true
 
 DEGRADED_CONTEXT=""
-if [ "$DEVFLOW_DAEMON_REACHABLE" != "1" ]; then
+if [ "$DEVFLOW_DAEMON_LAUNCHING" = "1" ]; then
+  if [ "$DEVFLOW_SESSION_DURABLE" = "1" ]; then
+    DEGRADED_CONTEXT="
+
+DevFlow SessionStart status=accepted; durable=true; receiptId=${DEVFLOW_SESSION_RECEIPT:-daemon-receipt}; daemon registration is pending while the runtime warms."
+  else
+    DEGRADED_CONTEXT="
+
+WARNING: DevFlow daemon launch was requested, but SessionStart persistence was not confirmed. Continue in degraded mode and do not treat lifecycle registration as completed."
+  fi
+elif [ "$DEVFLOW_DAEMON_REACHABLE" != "1" ]; then
   DEGRADED_CONTEXT="
 
 WARNING: DevFlow is in degraded mode (daemon unreachable): 4-Gate enforcement is unavailable, memory prefetch cache is unavailable, and daemon-shared Hook state is unavailable. Run devflow doctor for details."
 fi
 
-MEMORY_SNAPSHOT=$'## Project memory\n本项目暂无记忆'
+MEMORY_SNAPSHOT=$'## Project memory\nDevFlow memory snapshot=pending; source=none; reason=runtime_warming. Memory availability is not yet known; do not conclude that the project has no memories.'
 CONFIG_FILE="${PROJECT_ROOT}/.devflow/config.json"
 MEMORY_RESPONSE=""
-if [ -f "${CLIENT_JS:-}" ] && command -v node >/dev/null 2>&1; then
-  MEMORY_RESPONSE=$(DEVFLOW_HOOK_CLIENT_TIMEOUT_MS=1000 node "$CLIENT_JS" memory-snapshot </dev/null 2>/dev/null || echo "")
+if { [ "$DEVFLOW_DAEMON_REACHABLE" = "1" ] || [ -z "$SESSION_START_INPUT" ]; } \
+  && [ -f "${CLIENT_JS:-}" ] \
+  && command -v node >/dev/null 2>&1; then
+  MEMORY_RESPONSE=$(DEVFLOW_HOOK_CLIENT_TIMEOUT_MS=75 \
+    DEVFLOW_HOOK_CLIENT_RETRY_DELAY_MS=0 \
+    node "$CLIENT_JS" memory-snapshot </dev/null 2>/dev/null || echo "")
 fi
-if command -v python3 >/dev/null 2>&1; then
-  MEMORY_SNAPSHOT=$(DEVFLOW_MEMORY_RESPONSE="$MEMORY_RESPONSE" python3 - "$CONFIG_FILE" 2>/dev/null <<'PY'
-import json,os,sys
-try: cfg=json.load(open(sys.argv[1])).get('sessionStart',{}).get('injectMemories',True)
-except Exception: cfg=True
-if cfg is False: print(''); raise SystemExit
-try: response=json.loads(os.environ.get('DEVFLOW_MEMORY_RESPONSE',''))
-except Exception: response={}
-markdown = response.get('markdown')
-print(markdown or '## Project memory\n本项目暂无记忆')
-PY
-  ) || MEMORY_SNAPSHOT=$'## Project memory\n本项目暂无记忆'
+MEMORY_CACHE_JS="${PLUGIN_ROOT}/dist/hooks/memory-snapshot-cache.js"
+if [ -f "$MEMORY_CACHE_JS" ] && command -v node >/dev/null 2>&1; then
+  MEMORY_SNAPSHOT=$(DEVFLOW_MEMORY_SNAPSHOT_CLI=1 \
+    DEVFLOW_MEMORY_RESPONSE="$MEMORY_RESPONSE" \
+    node "$MEMORY_CACHE_JS" session-start "$PROJECT_ROOT" "$CONFIG_FILE" 2>/dev/null) \
+    || MEMORY_SNAPSHOT=$'## Project memory\nDevFlow memory snapshot=degraded; source=none; reason=cache_reader_failed. Memory availability is not yet known; do not conclude that the project has no memories.'
 fi
 
 ONBOARDING_SNAPSHOT=""
@@ -267,16 +247,20 @@ fi
 
 DAEMON_CONTEXT=""
 if [ -n "$DAEMON_SESSION_RESPONSE" ] && command -v python3 >/dev/null 2>&1; then
-  DAEMON_CONTEXT=$(DEVFLOW_DAEMON_RESPONSE="$DAEMON_SESSION_RESPONSE" python3 -c "import json,os; print(json.loads(os.environ.get('DEVFLOW_DAEMON_RESPONSE','{}')).get('additionalContext',''))" 2>/dev/null || echo "")
+  DAEMON_CONTEXT=$(DEVFLOW_DAEMON_RESPONSE="$DAEMON_SESSION_RESPONSE" python3 -c "import json,os; d=json.loads(os.environ.get('DEVFLOW_DAEMON_RESPONSE','{}')); status=d.get('status'); receipt=d.get('receiptId'); work=d.get('workState'); parts=[]; parts.append(f'DevFlow SessionStart status={status}; durable=true; receiptId={receipt}; workState={work}.' if status in ('accepted','completed') and receipt else ''); parts.append(str(d.get('additionalContext',''))); print('\\n'.join(x for x in parts if x))" 2>/dev/null || echo "")
+  [ -z "$DAEMON_CONTEXT" ] || DAEMON_CONTEXT=$'\n\n'"${DAEMON_CONTEXT}"
 fi
 
 SUMMARY="${SUMMARY}${DEGRADED_CONTEXT}${DAEMON_CONTEXT}"$'\n\n'"${ONBOARDING_SNAPSHOT}"$'\n\n'"${MEMORY_SNAPSHOT}${MCP_PROTOCOL}"$'\n\n'"${GLOBAL_CONSTRAINT}${GATEWAY_STATUS}"
 
-if command -v python3 >/dev/null 2>&1 \
+if command -v node >/dev/null 2>&1 \
+  && ESCAPED=$(printf '%s\n' "$SUMMARY" | node -e "let s=''; process.stdin.setEncoding('utf8'); process.stdin.on('data',c=>s+=c); process.stdin.on('end',()=>process.stdout.write(JSON.stringify(s)))" 2>/dev/null); then
+  :
+elif command -v python3 >/dev/null 2>&1 \
   && ESCAPED=$(printf '%s\n' "$SUMMARY" | python3 -c "import sys,json; print(json.dumps(sys.stdin.read()))" 2>/dev/null); then
   :
 else
-  ESCAPED='"DevFlow SessionStart 已完成。"'
+  ESCAPED='"DevFlow SessionStart status=degraded; memory snapshot=pending; runtime helpers unavailable. Memory availability is not yet known."'
 fi
 
 printf '{\n  "hookSpecificOutput": {\n    "hookEventName": "SessionStart",\n    "additionalContext": %s\n  }\n}\n' "$ESCAPED"

package/dist/plugin-files/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devflow-tools/claude-code-plugin",
-  "version": "0.16.10",
+  "version": "0.16.11",
   "description": "DevFlow — Developer Intelligence Platform for Claude Code",
   "type": "module",
   "scripts": {
@@ -8,18 +8,18 @@
     "deploy": "npx tsx scripts/inject-gates.ts --deploy"
   },
   "dependencies": {
-    "@devflow-tools/database": "0.16.10",
-    "@devflow-tools/memory-engine": "0.16.10",
-    "@devflow-tools/sdk": "0.16.10",
-    "@devflow-tools/telemetry": "0.16.10",
-    "@devflow-tools/workflow-engine": "0.16.10"
+    "@devflow-tools/database": "0.16.11",
+    "@devflow-tools/memory-engine": "0.16.11",
+    "@devflow-tools/sdk": "0.16.11",
+    "@devflow-tools/telemetry": "0.16.11",
+    "@devflow-tools/workflow-engine": "0.16.11"
   },
   "allowScripts": {
     "better-sqlite3@12.11.1": true,
     "sharp@0.32.6": true
   },
   "devDependencies": {
-    "@devflow-tools/mcp-server": "0.16.10"
+    "@devflow-tools/mcp-server": "0.16.11"
   },
   "keywords": [
     "pi-package",

package/dist/plugin-files/skills/animation/SKILL.md

@@ -25,7 +25,9 @@ description: Animation 动画专家 — CSS 动画、Framer Motion、GSAP、Lott
 - 使用 AnimatePresence 处理 React 组件退出动画
 - Lottie 动画控制文件大小 < 50KB
 
-## 当前版本
+## 知识来源
+
+以下版本描述知识源，不代表目标项目版本；目标项目的 package.json 与 lockfile 证据始终优先。
 
 - animation-docs: 2024 — https://developer.mozilla.org/en-US/docs/Web/CSS/CSS_animations
 

package/dist/plugin-files/skills/css/SKILL.md

@@ -25,7 +25,9 @@ description: CSS 专家 — 布局调试、响应式审查、BEM 规范、性能
 - 使用 rem/em 做相对单位
 - 不确定属性行为时先查 MDN 文档确认
 
-## 当前版本
+## 知识来源
+
+以下版本描述知识源，不代表目标项目版本；目标项目的 package.json 与 lockfile 证据始终优先。
 
 - mdn-css: 2024 — https://developer.mozilla.org/en-US/docs/Web/CSS
 

package/dist/plugin-files/skills/docker/SKILL.md

@@ -28,7 +28,9 @@ description: Docker 专家 — 镜像优化、Compose 编排、安全扫描、
 - 不在镜像层中写入敏感信息
 - 修复安全问题时先查 Docker 官方文档确认方案
 
-## 当前版本
+## 知识来源
+
+以下版本描述知识源，不代表目标项目版本；目标项目的 package.json 与 lockfile 证据始终优先。
 
 - docker-docs: 26.0.0 — https://docs.docker.com/reference/
 

package/dist/plugin-files/skills/doctor/SKILL.md

@@ -14,4 +14,4 @@ required_mcp_tools: []
 - Context/Graph/Memory/Knowledge/Workflow 引擎是否就绪
 - 已安装哪些领域插件
 - 是否有已知配置问题
-**MCP Gateway 策略**: 调用前会校验 Session Token 和调用合法性。无有效收据的情况下直接使用原生工具（grep/Glob/WebSearch）将被 PreToolUse Hook 拦截。收据有效期 30 秒，过期后需重新通过 MCP 工具获取。
+**MCP Gateway 策略**: 调用前会校验 Session Token 和调用合法性。在支持 PreToolUse Hook 的 Claude Code 等宿主中，无有效收据的原生工具调用会被拦截；不提供生命周期 Hook 的宿主不会声称已执行原生拦截，而是依赖 canonical MCP receipts 和显式 capability degradation。收据有效期 30 秒，过期后需重新通过 MCP 工具获取。

package/dist/plugin-files/skills/electron/SKILL.md

@@ -28,7 +28,9 @@ description: Electron 专家 — IPC 通信、窗口管理、原生模块、自
 - 避免使用 remote 模块（已废弃）
 - 构建使用 electron-builder 并配置代码签名
 
-## 当前版本
+## 知识来源
+
+以下版本描述知识源，不代表目标项目版本；目标项目的 package.json 与 lockfile 证据始终优先。
 
 - electron-docs: 30.0.0 — https://www.electronjs.org/docs/latest/
 

package/dist/plugin-files/skills/git/SKILL.md

@@ -27,7 +27,9 @@ description: Git 专家 — 提交规范、分支审查、Changelog 生成、冲
 - PR 必须关联 Issue
 - 解决冲突前先理解两边变更的意图
 
-## 当前版本
+## 知识来源
+
+以下版本描述知识源，不代表目标项目版本；目标项目的 package.json 与 lockfile 证据始终优先。
 
 - conventional-commits: 1.0.0 — https://www.conventionalcommits.org/en/v1.0.0/
 - git-scm-docs: 2.45.0 — https://git-scm.com/docs

package/dist/plugin-files/skills/graphql/SKILL.md

@@ -27,7 +27,9 @@ description: GraphQL 专家 — Schema 设计、N+1 检测、Resolver 优化、
 - 限制查询深度和复杂度防止滥用
 - 遇到不确定的 Schema 设计时先查 GraphQL 官方规范
 
-## 当前版本
+## 知识来源
+
+以下版本描述知识源，不代表目标项目版本；目标项目的 package.json 与 lockfile 证据始终优先。
 
 - graphql-docs: 2024 — https://graphql.org/learn/
 

package/dist/plugin-files/skills/nest/SKILL.md

@@ -27,7 +27,9 @@ description: NestJS 专家 — 模块架构、守卫调试、微服务配置、S
 - 修复 Bug 前先追踪 DI 链和 Module 注册
 - 使用 Prisma 作为 ORM，事务使用 $transaction
 
-## 当前版本
+## 知识来源
+
+以下版本描述知识源，不代表目标项目版本；目标项目的 package.json 与 lockfile 证据始终优先。
 
 - nestjs-docs: 10.3.0 — https://docs.nestjs.com/
 

package/dist/plugin-files/skills/nextjs/SKILL.md

@@ -25,7 +25,9 @@ description: Next.js 专家 — App Router、SSR/SSG/ISR、Server Components、M
 - 中间件在 Edge Runtime 执行，不能直接访问数据库
 - 使用 generateStaticParams + ISR 优化静态页面
 
-## 当前版本
+## 知识来源
+
+以下版本描述知识源，不代表目标项目版本；目标项目的 package.json 与 lockfile 证据始终优先。
 
 - nextjs-docs: 14.2.0 — https://nextjs.org/docs
 

package/dist/plugin-files/skills/performance/SKILL.md

@@ -28,7 +28,9 @@ description: Web 性能专家 — Core Web Vitals、Bundle 优化、加载策略
 - 所有优化建议必须有 Lighthouse/Performance 数据支持
 - 不使用 setTimeout 做动画，使用 requestAnimationFrame
 
-## 当前版本
+## 知识来源
+
+以下版本描述知识源，不代表目标项目版本；目标项目的 package.json 与 lockfile 证据始终优先。
 
 - web-vitals-docs: 2024 — https://web.dev/vitals/
 

package/dist/plugin-files/skills/react/SKILL.md

@@ -1,11 +1,11 @@
 ---
 name: devflow:react
-description: React 18 专家能力 — Bug 诊断、组件重构、性能优化、Hooks 审查
+description: React 专家能力 — Bug 诊断、组件重构、性能优化、Hooks 审查
 ---
 
 # ⚛️ REACT
 
-你是一个 React 18 专家。使用函数组件、Hooks 和 TypeScript。遇到问题先查文档再给方案，不凭空猜测 API 行为。
+你是一个 React 专家。项目 package.json 与 lockfile 检测到的版本是唯一权威。使用函数组件、Hooks 和 TypeScript；遇到问题先查对应版本文档再给方案。
 
 ## 适用场景
 
@@ -37,9 +37,19 @@ description: React 18 专家能力 — Bug 诊断、组件重构、性能优化
 - 生成代码后必须通过 TypeScript 类型检查
 - 不能凭记忆猜测 API 行为，必须基于当前项目版本
 
-## 当前版本
+## 性能证据契约
 
-- react-docs: 18.3.1 — https://react.dev/reference/react
+- `react_audit_performance` 返回的 `evidenceContract` 是机器强制约束，不是可选提示。
+- 最终性能回答必须包含“工具发现”“模型假设”“需要运行时验证”三个标题；优先直接使用工具返回的 `canonicalReport`。
+- `runtimeProfilingOccurred=false` 时，不得把静态候选升级为 P0、高风险、确认瓶颈、已观察卡顿/掉帧/CPU 热点，也不得给出未经测量的性能数字或收益比例。
+- 没有明确采样周期、丢弃规则和前后基准时，不得把 requestAnimationFrame/RAF 推荐为通用节流方案。
+- Stop 首次发现违规会要求纠正一次；重复违规会 fail-open 并记录 `evidence_contract_unresolved`，不得通过改写措辞规避证据边界。
+
+## 知识来源
+
+以下版本描述知识源，不代表目标项目版本；目标项目的 package.json 与 lockfile 证据始终优先。
+
+- react-docs: current — https://react.dev/reference/react
 
 ## 工作流
 

package/dist/plugin-files/skills/tailwind/SKILL.md

@@ -25,7 +25,9 @@ description: Tailwind 专家 — 响应式设计、主题定制、Purge 检查
 - 避免内联 style 和自定义 CSS
 - 不确定 class 名称时先查 Tailwind 官方文档
 
-## 当前版本
+## 知识来源
+
+以下版本描述知识源，不代表目标项目版本；目标项目的 package.json 与 lockfile 证据始终优先。
 
 - tailwind-docs: 3.4.0 — https://tailwindcss.com/docs
 

package/dist/plugin-files/skills/taro/SKILL.md

@@ -27,7 +27,9 @@ description: Taro 跨端专家 — 多端适配、小程序调试、性能优化
 - 合理使用分包加载减少首屏体积
 - 不确定跨端兼容性时先查 Taro 文档确认
 
-## 当前版本
+## 知识来源
+
+以下版本描述知识源，不代表目标项目版本；目标项目的 package.json 与 lockfile 证据始终优先。
 
 - taro-docs: 3.6.0 — https://docs.taro.zone/docs/
 

package/dist/plugin-files/skills/ui-layout/SKILL.md

@@ -25,7 +25,9 @@ description: UI Layout 专家 — 布局模式、组件组合、响应式架构
 - 使用 CSS 变量管理 Design Token
 - 确保触控目标 ≥ 44×44px，对比度 ≥ 4.5:1
 
-## 当前版本
+## 知识来源
+
+以下版本描述知识源，不代表目标项目版本；目标项目的 package.json 与 lockfile 证据始终优先。
 
 - web-dev-layout: 2024 — https://web.dev/learn/design/
 

package/dist/plugin-files/skills/vue/SKILL.md

@@ -30,7 +30,9 @@ description: Vue 3 专家 — Bug 诊断、Composition API、响应式调试、
 - 生成代码后必须通过 vue-tsc 类型检查
 - 不能凭记忆猜测 API 行为，必须基于当前项目版本
 
-## 当前版本
+## 知识来源
+
+以下版本描述知识源，不代表目标项目版本；目标项目的 package.json 与 lockfile 证据始终优先。
 
 - vue-docs: 3.4.0 — https://vuejs.org/guide/introduction.html
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devflow-tools/cli",
-  "version": "0.16.10",
+  "version": "0.16.12",
   "type": "module",
   "main": "./dist/index.js",
   "scripts": {
@@ -12,31 +12,31 @@
   },
   "dependencies": {
     "@colbymchenry/codegraph": "^1.1.1",
-    "@devflow-tools/adapters": "0.16.10",
-    "@devflow-tools/benchmark": "0.16.10",
-    "@devflow-tools/context-engine": "0.16.10",
-    "@devflow-tools/database": "0.16.10",
-    "@devflow-tools/knowledge-engine": "0.16.10",
-    "@devflow-tools/mcp-server": "0.16.10",
-    "@devflow-tools/memory-engine": "0.16.10",
-    "@devflow-tools/plugin-animation": "0.16.10",
-    "@devflow-tools/plugin-css": "0.16.10",
-    "@devflow-tools/plugin-docker": "0.16.10",
-    "@devflow-tools/plugin-electron": "0.16.10",
-    "@devflow-tools/plugin-git": "0.16.10",
-    "@devflow-tools/plugin-graphql": "0.16.10",
-    "@devflow-tools/plugin-nest": "0.16.10",
-    "@devflow-tools/plugin-nextjs": "0.16.10",
-    "@devflow-tools/plugin-performance": "0.16.10",
-    "@devflow-tools/plugin-react": "0.16.10",
-    "@devflow-tools/plugin-tailwind": "0.16.10",
-    "@devflow-tools/plugin-taro": "0.16.10",
-    "@devflow-tools/plugin-ui-layout": "0.16.10",
-    "@devflow-tools/plugin-vue": "0.16.10",
-    "@devflow-tools/sdk": "0.16.10",
-    "@devflow-tools/server": "0.16.10",
-    "@devflow-tools/telemetry": "0.16.10",
-    "@devflow-tools/workflow-engine": "0.16.10",
+    "@devflow-tools/adapters": "0.16.12",
+    "@devflow-tools/benchmark": "0.16.12",
+    "@devflow-tools/context-engine": "0.16.12",
+    "@devflow-tools/database": "0.16.12",
+    "@devflow-tools/knowledge-engine": "0.16.12",
+    "@devflow-tools/mcp-server": "0.16.12",
+    "@devflow-tools/memory-engine": "0.16.12",
+    "@devflow-tools/plugin-animation": "0.16.12",
+    "@devflow-tools/plugin-css": "0.16.12",
+    "@devflow-tools/plugin-docker": "0.16.12",
+    "@devflow-tools/plugin-electron": "0.16.12",
+    "@devflow-tools/plugin-git": "0.16.12",
+    "@devflow-tools/plugin-graphql": "0.16.12",
+    "@devflow-tools/plugin-nest": "0.16.12",
+    "@devflow-tools/plugin-nextjs": "0.16.12",
+    "@devflow-tools/plugin-performance": "0.16.12",
+    "@devflow-tools/plugin-react": "0.16.12",
+    "@devflow-tools/plugin-tailwind": "0.16.12",
+    "@devflow-tools/plugin-taro": "0.16.12",
+    "@devflow-tools/plugin-ui-layout": "0.16.12",
+    "@devflow-tools/plugin-vue": "0.16.12",
+    "@devflow-tools/sdk": "0.16.12",
+    "@devflow-tools/server": "0.16.12",
+    "@devflow-tools/telemetry": "0.16.12",
+    "@devflow-tools/workflow-engine": "0.16.12",
     "@inquirer/prompts": "^7.10.1",
     "chalk": "^5.3.0",
     "commander": "^12.0.0"
@@ -49,5 +49,5 @@
     "dist",
     "bin"
   ],
-  "gitHead": "964af33767bf232606e63d973b3a29d7d53c8119"
+  "gitHead": "d4a018f3031a3570c794c253f8edeff405956133"
 }