@devshop/crew 0.4.1 → 0.5.0

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+# [0.5.0](https://github.com/devshop-software/crew/compare/v0.4.2...v0.5.0) (2026-04-30)
+
+
+### Features
+
+* crew update auto-bumps the local package via the project's PM ([9e39abd](https://github.com/devshop-software/crew/commit/9e39abdb7c51fba87c38802a07718af9725dccd2))
+
+## [0.4.2](https://github.com/devshop-software/crew/compare/v0.4.1...v0.4.2) (2026-04-30)
+
+
+### Bug Fixes
+
+* publish to npm in prepare phase so failed publish can't orphan tags ([6ee8e5a](https://github.com/devshop-software/crew/commit/6ee8e5aacc4ed698e0e51c17891bd8b699faafb7))
+
 # [0.4.0](https://github.com/devshop-software/crew/compare/v0.3.0...v0.4.0) (2026-04-30)
 
 

package/README.md

@@ -17,6 +17,8 @@ pnpm add -D @devshop/crew
 pnpm exec crew init
 ```
 
+To pull newer skill content later, just run `pnpm exec crew update` — it auto-detects the package manager (pnpm/npm/yarn/bun) from your lockfile, runs `<pm> update @devshop/crew` to refresh the local install, then re-execs the freshly-installed CLI to apply the new skills. Pass `--no-self-update` to skip the package bump and only re-apply what's already on disk.
+
 This copies the skills into `./.claude/skills/`, writes a manifest, and appends a `## Workflow Config` block to `CLAUDE.md` (creating it if absent).
 
 ## Commands

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devshop/crew",
-  "version": "0.4.1",
+  "version": "0.5.0",
   "description": "Project-agnostic Claude Code skills for spec → implement → qa → review → ship",
   "bin": {
     "crew": "scripts/cli.js"
@@ -37,6 +37,10 @@
   },
   "license": "MIT",
   "devDependencies": {
-    "semantic-release": "^24.2.0"
+    "@devshop/crew": "^0.4.1",
+    "semantic-release": "^24.2.0",
+    "@semantic-release/changelog": "^6.0.3",
+    "@semantic-release/exec": "^7.0.3",
+    "@semantic-release/git": "^10.0.1"
   }
 }

package/scripts/cli.js

@@ -19,12 +19,13 @@ function usage() {
     '  --force          Override prompts and refusals.',
     '  --yes            Non-interactive (CI-safe defaults).',
     '  --dry-run        Print actions, write nothing.',
-    '  --no-claude-md   On init only: skip CLAUDE.md append.'
+    '  --no-claude-md   On init only: skip CLAUDE.md append.',
+    '  --no-self-update On update only: skip pulling a newer package via the local PM.'
   ].join('\n');
 }
 
 function parseArgs(argv) {
-  const flags = { global: false, force: false, yes: false, dryRun: false, noClaudeMd: false };
+  const flags = { global: false, force: false, yes: false, dryRun: false, noClaudeMd: false, noSelfUpdate: false };
   let command = null;
   for (const a of argv) {
     if (a.startsWith('--')) {
@@ -34,6 +35,7 @@ function parseArgs(argv) {
         case '--yes': flags.yes = true; break;
         case '--dry-run': flags.dryRun = true; break;
         case '--no-claude-md': flags.noClaudeMd = true; break;
+        case '--no-self-update': flags.noSelfUpdate = true; break;
         case '--help': process.stdout.write(usage() + '\n'); process.exit(0);
         default:
           process.stderr.write(`Unknown flag: ${a}\n\n${usage()}\n`);

package/scripts/commands/update.js

@@ -3,6 +3,7 @@ const { resolveTarget } = require('../lib/paths');
 const { readManifest, writeManifest, diffSkills, PACKAGE_NAME, SCHEMA_VERSION } = require('../lib/manifest');
 const { copyFolder, backupFolder, backupRoot } = require('../lib/fsx');
 const { chooseEditAction } = require('../lib/prompt');
+const { runSelfUpdate } = require('../lib/self-update');
 const log = require('../lib/log');
 
 const PKG_ROOT = path.resolve(__dirname, '..', '..');
@@ -10,6 +11,13 @@ const PKG_VERSION = require(path.join(PKG_ROOT, 'package.json')).version;
 const PKG_SKILLS = path.join(PKG_ROOT, 'skills');
 
 module.exports = async function update(flags) {
+  // If installed as a local dep, bump the package via the project's package
+  // manager first, then re-exec the freshly-installed CLI to do the actual
+  // skill update. Skipped for global/dlx invocations (no project lockfile).
+  const self = runSelfUpdate(flags, log);
+  if (self.error) { log.error(self.message); return self.exitCode; }
+  if (self.reExec) return self.exitCode;
+
   let target;
   try { target = resolveTarget(flags); }
   catch (e) { log.error(e.message); return e.exitCode || 2; }

package/scripts/lib/self-update.js

@@ -0,0 +1,83 @@
+const fs = require('fs');
+const path = require('path');
+const { spawnSync } = require('child_process');
+const { PACKAGE_NAME } = require('./manifest');
+
+function findProjectRoot(start = process.cwd()) {
+  let dir = path.resolve(start);
+  while (true) {
+    if (fs.existsSync(path.join(dir, 'package.json'))) return dir;
+    const parent = path.dirname(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+}
+
+const LOCKFILES = [
+  ['pnpm-lock.yaml', 'pnpm'],
+  ['yarn.lock', 'yarn'],
+  ['package-lock.json', 'npm'],
+  ['bun.lock', 'bun'],
+  ['bun.lockb', 'bun']
+];
+
+function detectPm(projectRoot) {
+  for (const [file, pm] of LOCKFILES) {
+    if (fs.existsSync(path.join(projectRoot, file))) return pm;
+  }
+  return null;
+}
+
+function isLocalDep(projectRoot) {
+  try {
+    const pkg = JSON.parse(fs.readFileSync(path.join(projectRoot, 'package.json'), 'utf8'));
+    return Boolean(
+      (pkg.dependencies && pkg.dependencies[PACKAGE_NAME]) ||
+      (pkg.devDependencies && pkg.devDependencies[PACKAGE_NAME])
+    );
+  } catch { return false; }
+}
+
+const UPDATE_ARGS = {
+  pnpm: ['update', PACKAGE_NAME],
+  npm: ['update', PACKAGE_NAME],
+  yarn: ['upgrade', PACKAGE_NAME],
+  bun: ['update', PACKAGE_NAME]
+};
+
+// Returns one of:
+//   { skipped: true, reason }                          — caller should fall through to in-process work
+//   { reExec: true, exitCode }                         — caller should return this exit code
+//   { error: true, message, exitCode }                 — caller should error and return
+function runSelfUpdate(flags, log) {
+  if (flags.noSelfUpdate) return { skipped: true, reason: 'flag' };
+  if (flags.dryRun) return { skipped: true, reason: 'dry-run' };
+
+  const projectRoot = findProjectRoot();
+  if (!projectRoot) return { skipped: true, reason: 'no project root' };
+  if (!isLocalDep(projectRoot)) return { skipped: true, reason: 'not a local dep' };
+  const pm = detectPm(projectRoot);
+  if (!pm) return { skipped: true, reason: 'no lockfile' };
+
+  const localCli = path.join(projectRoot, 'node_modules', '@devshop', 'crew', 'scripts', 'cli.js');
+  if (!fs.existsSync(localCli)) return { skipped: true, reason: 'local CLI not present' };
+
+  log.action('self', `${pm} ${UPDATE_ARGS[pm].join(' ')}`);
+  const updateResult = spawnSync(pm, UPDATE_ARGS[pm], { cwd: projectRoot, stdio: 'inherit' });
+  if (updateResult.status !== 0) {
+    return { error: true, message: `${pm} update failed`, exitCode: 3 };
+  }
+
+  const passthrough = ['update', '--no-self-update'];
+  if (flags.global) passthrough.push('--global');
+  if (flags.force) passthrough.push('--force');
+  if (flags.yes) passthrough.push('--yes');
+
+  const child = spawnSync(process.execPath, [localCli, ...passthrough], {
+    cwd: process.cwd(),
+    stdio: 'inherit'
+  });
+  return { reExec: true, exitCode: child.status || 0 };
+}
+
+module.exports = { runSelfUpdate, findProjectRoot, detectPm, isLocalDep };