@shenlee/devcrew 0.1.0 → 0.1.1

package/README.md

@@ -34,7 +34,7 @@ Restart Codex, open the plugin directory, choose the DevCrew marketplace, and in
 The plugin starts the DevCrew MCP server with:
 
 ```bash
-npx -y @shenlee/devcrew@0.1.0 serve --stdio
+npm exec --silent --yes --package=@shenlee/devcrew@0.1.1 -- node -e "<DevCrew CLI wrapper>" -- serve --stdio
 ```
 
 The plugin locks the MCP server to the published npm package version, so users do not need to clone the source or build TypeScript at install time. You only need Node.js and network access the first time Codex starts the MCP server.
@@ -43,7 +43,6 @@ The plugin locks the MCP server to the published npm package version, so users d
 
 ```bash
 npm install -g @shenlee/devcrew
-devcrew --version
 devcrew doctor /path/to/repo
 ```
 
@@ -116,7 +115,7 @@ npm pack --dry-run
 
 The SDK adapters use deterministic local fallback output when Codex or Claude SDK packages are not installed. This keeps local tests reliable while preserving the adapter boundary for real host integration. In `apply` mode, DevCrew still inherits the host sandbox and approval boundaries.
 
-For published installs, the host SDK packages are pinned optional dependencies so `npx -y @shenlee/devcrew@<version>` can resolve them from the DevCrew package itself. Plan mode can still fall back to deterministic artifacts, but apply mode fails with a clear SDK resolution error if the selected host SDK is unavailable.
+For published installs, the host SDK packages are pinned optional dependencies so the version-locked `npm exec --package=@shenlee/devcrew@<version>` wrapper can resolve them from the DevCrew package itself. Plan mode can still fall back to deterministic artifacts, but apply mode fails with a clear SDK resolution error if the selected host SDK is unavailable.
 
 Public npm publishing is handled by the `npm publish` GitHub Actions workflow. It runs validation, checks the package with `npm pack --dry-run`, and publishes with npm provenance when a GitHub Release is published or the workflow is manually dispatched with `NPM_TOKEN` configured.
 

package/README.zh-CN.md

@@ -34,7 +34,7 @@ codex plugin marketplace add lishen802/devcrew
 插件会用下面的命令启动 DevCrew MCP 服务：
 
 ```bash
-npx -y @shenlee/devcrew@0.1.0 serve --stdio
+npm exec --silent --yes --package=@shenlee/devcrew@0.1.1 -- node -e "<DevCrew CLI wrapper>" -- serve --stdio
 ```
 
 插件会锁定到已发布的 npm 包版本，因此用户不需要克隆源码，也不需要在安装时编译 TypeScript；只需要本机有 Node.js，并且 Codex 第一次启动 MCP 服务时可以访问网络。
@@ -43,7 +43,6 @@ npx -y @shenlee/devcrew@0.1.0 serve --stdio
 
 ```bash
 npm install -g @shenlee/devcrew
-devcrew --version
 devcrew doctor /path/to/repo
 ```
 
@@ -130,7 +129,7 @@ npm pack --dry-run
 
 当前适配器在未安装 Codex SDK 或 Claude SDK 时会使用确定性的本地 fallback 输出。这样可以保证测试和演示稳定，同时保留接入真实宿主 SDK 的边界。即使在 `apply` 模式下，DevCrew 仍然继承宿主的 sandbox、审批和工具权限。
 
-对于发布安装，宿主 SDK 包会作为精确锁定的 optional dependencies 随 DevCrew 一起安装，因此 `npx -y @shenlee/devcrew@<version>` 可以从 DevCrew 包自身解析这些 SDK。plan 模式仍允许 deterministic fallback；但 apply 模式在选定宿主 SDK 不可用时会直接失败，并给出明确的 SDK 解析错误。
+对于发布安装，宿主 SDK 包会作为精确锁定的 optional dependencies 随 DevCrew 一起安装，因此锁定版本的 `npm exec --package=@shenlee/devcrew@<version>` wrapper 可以从 DevCrew 包自身解析这些 SDK。plan 模式仍允许 deterministic fallback；但 apply 模式在选定宿主 SDK 不可用时会直接失败，并给出明确的 SDK 解析错误。
 
 公开 npm 发布由 `npm publish` GitHub Actions 工作流处理。发布 GitHub Release 或手动触发 workflow 时，它会先运行验证，再执行 `npm pack --dry-run` 检查包内容，最后在配置 `NPM_TOKEN` 后使用 npm provenance 发布公开包。
 

package/dist/packages/core/src/version.js

@@ -1,2 +1,2 @@
-export const DEVCREW_VERSION = "0.1.0";
+export const DEVCREW_VERSION = "0.1.1";
 export const DEVCREW_NPM_PACKAGE = "@shenlee/devcrew";

package/dist/packages/plugins/src/index.js

@@ -63,6 +63,36 @@ function entrySkill() {
 function npmPackageSpecifier() {
     return `${DEVCREW_NPM_PACKAGE}@${DEVCREW_VERSION}`;
 }
+function npmExecCliWrapper() {
+    const [scope, name] = DEVCREW_NPM_PACKAGE.split("/");
+    return [
+        "const path = require('node:path');",
+        "const { pathToFileURL } = require('node:url');",
+        "const binDir = process.env.PATH.split(path.delimiter)[0];",
+        `const packageRoot = path.join(binDir.replace(/[\\\\/]\\.bin$/u, ''), ${JSON.stringify(scope)}, ${JSON.stringify(name)});`,
+        "process.argv = ['node', 'devcrew', ...process.argv.slice(1)];",
+        "import(pathToFileURL(path.join(packageRoot, 'dist/packages/cli/src/index.js')).href);",
+    ].join(" ");
+}
+function mcpServerConfig(host) {
+    return {
+        command: "npm",
+        args: [
+            "exec",
+            "--silent",
+            "--yes",
+            `--package=${npmPackageSpecifier()}`,
+            "--",
+            "node",
+            "-e",
+            npmExecCliWrapper(),
+            "--",
+            "serve",
+            "--stdio",
+        ],
+        env: { DEVCREW_HOST: host },
+    };
+}
 export async function generateCodexPlugin(root) {
     const pluginRoot = join(root, "plugins", "devcrew-codex");
     await mkdir(join(pluginRoot, ".codex-plugin"), { recursive: true });
@@ -103,11 +133,7 @@ export async function generateCodexPlugin(root) {
     await writeFile(join(pluginRoot, "skills", "devcrew", "SKILL.md"), entrySkill(), "utf8");
     await writeJson(join(pluginRoot, ".mcp.json"), {
         mcpServers: {
-            devcrew: {
-                command: "npx",
-                args: ["-y", npmPackageSpecifier(), "serve", "--stdio"],
-                env: { DEVCREW_HOST: "codex" },
-            },
+            devcrew: mcpServerConfig("codex"),
         },
     });
     await writeRoleAgents(pluginRoot, "codex");
@@ -151,11 +177,7 @@ export async function generateClaudePlugin(root) {
     await writeFile(join(pluginRoot, "skills", "devcrew", "SKILL.md"), entrySkill(), "utf8");
     await writeJson(join(pluginRoot, ".mcp.json"), {
         mcpServers: {
-            devcrew: {
-                command: "npx",
-                args: ["-y", npmPackageSpecifier(), "serve", "--stdio"],
-                env: { DEVCREW_HOST: "claude" },
-            },
+            devcrew: mcpServerConfig("claude"),
         },
     });
     await writeRoleAgents(pluginRoot, "claude");

package/docs/claude-code.md

@@ -26,7 +26,7 @@ For local plugin testing:
 claude --plugin-dir plugins/devcrew-claude
 ```
 
-Then ask Claude Code to use DevCrew for a feature or product workflow. The generated `.mcp.json` starts the version-locked npm package with `npx -y @shenlee/devcrew@0.1.0 serve --stdio`.
+Then ask Claude Code to use DevCrew for a feature or product workflow. The generated `.mcp.json` starts the version-locked npm package with an `npm exec --package=@shenlee/devcrew@0.1.1` wrapper.
 
 Claude Code permissions, hooks, and approval settings remain authoritative. DevCrew inherits the host boundary.
 

package/docs/codex.md

@@ -13,7 +13,7 @@ Restart Codex, open the plugin directory, select the DevCrew marketplace, and in
 The plugin launches the MCP server with:
 
 ```bash
-npx -y @shenlee/devcrew@0.1.0 serve --stdio
+npm exec --silent --yes --package=@shenlee/devcrew@0.1.1 -- node -e "<DevCrew CLI wrapper>" -- serve --stdio
 ```
 
 Use this path when you want to use DevCrew without cloning the repository first. The version is locked to the published npm package that matches the plugin manifest.

package/docs/quickstart.md

@@ -37,7 +37,7 @@ devcrew serve --stdio
 ```
 
 Normally the generated plugin starts this command for the host agent.
-Codex and Claude plugin bundles use `npx -y @shenlee/devcrew@0.1.0 serve --stdio` so the MCP service is locked to the published package version.
+Codex and Claude plugin bundles use a version-locked `npm exec --package=@shenlee/devcrew@0.1.1` wrapper so the MCP service is locked to the published package version.
 
 ## 4. Run A Workflow
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shenlee/devcrew",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Multi-host agent workflow service for Codex and Claude Code.",
   "type": "module",
   "license": "Apache-2.0",

package/packages/core/src/version.ts

@@ -1,2 +1,2 @@
-export const DEVCREW_VERSION = "0.1.0";
+export const DEVCREW_VERSION = "0.1.1";
 export const DEVCREW_NPM_PACKAGE = "@shenlee/devcrew";

package/packages/plugins/src/index.ts

@@ -93,6 +93,38 @@ function npmPackageSpecifier(): string {
   return `${DEVCREW_NPM_PACKAGE}@${DEVCREW_VERSION}`;
 }
 
+function npmExecCliWrapper(): string {
+  const [scope, name] = DEVCREW_NPM_PACKAGE.split("/");
+  return [
+    "const path = require('node:path');",
+    "const { pathToFileURL } = require('node:url');",
+    "const binDir = process.env.PATH.split(path.delimiter)[0];",
+    `const packageRoot = path.join(binDir.replace(/[\\\\/]\\.bin$/u, ''), ${JSON.stringify(scope)}, ${JSON.stringify(name)});`,
+    "process.argv = ['node', 'devcrew', ...process.argv.slice(1)];",
+    "import(pathToFileURL(path.join(packageRoot, 'dist/packages/cli/src/index.js')).href);",
+  ].join(" ");
+}
+
+function mcpServerConfig(host: "codex" | "claude"): unknown {
+  return {
+    command: "npm",
+    args: [
+      "exec",
+      "--silent",
+      "--yes",
+      `--package=${npmPackageSpecifier()}`,
+      "--",
+      "node",
+      "-e",
+      npmExecCliWrapper(),
+      "--",
+      "serve",
+      "--stdio",
+    ],
+    env: { DEVCREW_HOST: host },
+  };
+}
+
 export async function generateCodexPlugin(root: string): Promise<GeneratedPlugin> {
   const pluginRoot = join(root, "plugins", "devcrew-codex");
   await mkdir(join(pluginRoot, ".codex-plugin"), { recursive: true });
@@ -134,11 +166,7 @@ export async function generateCodexPlugin(root: string): Promise<GeneratedPlugin
   await writeFile(join(pluginRoot, "skills", "devcrew", "SKILL.md"), entrySkill(), "utf8");
   await writeJson(join(pluginRoot, ".mcp.json"), {
     mcpServers: {
-      devcrew: {
-        command: "npx",
-        args: ["-y", npmPackageSpecifier(), "serve", "--stdio"],
-        env: { DEVCREW_HOST: "codex" },
-      },
+      devcrew: mcpServerConfig("codex"),
     },
   });
   await writeRoleAgents(pluginRoot, "codex");
@@ -184,11 +212,7 @@ export async function generateClaudePlugin(root: string): Promise<GeneratedPlugi
   await writeFile(join(pluginRoot, "skills", "devcrew", "SKILL.md"), entrySkill(), "utf8");
   await writeJson(join(pluginRoot, ".mcp.json"), {
     mcpServers: {
-      devcrew: {
-        command: "npx",
-        args: ["-y", npmPackageSpecifier(), "serve", "--stdio"],
-        env: { DEVCREW_HOST: "claude" },
-      },
+      devcrew: mcpServerConfig("claude"),
     },
   });
   await writeRoleAgents(pluginRoot, "claude");

package/plugins/devcrew-codex/.mcp.json

@@ -1,10 +1,17 @@
 {
   "mcpServers": {
     "devcrew": {
-      "command": "npx",
+      "command": "npm",
       "args": [
-        "-y",
-        "@shenlee/devcrew@0.1.0",
+        "exec",
+        "--silent",
+        "--yes",
+        "--package=@shenlee/devcrew@0.1.1",
+        "--",
+        "node",
+        "-e",
+        "const path = require('node:path'); const { pathToFileURL } = require('node:url'); const binDir = process.env.PATH.split(path.delimiter)[0]; const packageRoot = path.join(binDir.replace(/[\\\\/]\\.bin$/u, ''), \"@shenlee\", \"devcrew\"); process.argv = ['node', 'devcrew', ...process.argv.slice(1)]; import(pathToFileURL(path.join(packageRoot, 'dist/packages/cli/src/index.js')).href);",
+        "--",
         "serve",
         "--stdio"
       ],

package/scripts/smoke-codex-plugin.mjs

@@ -298,7 +298,7 @@ async function main() {
       await client.request("initialize", {
         protocolVersion: "2025-03-26",
         capabilities: {},
-        clientInfo: { name: "devcrew-codex-plugin-smoke", version: "0.1.0" },
+        clientInfo: { name: "devcrew-codex-plugin-smoke", version: "0.1.1" },
       });
       client.notify("notifications/initialized", {});
       const tools = await client.request("tools/list", {});