@sylphx/flow 2.12.0 → 2.14.0

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @sylphx/flow
 
+## 2.14.0 (2025-12-17)
+
+### ✨ Features
+
+- **claude-code:** add default settings for optimal experience ([9b097bd](https://github.com/SylphxAI/flow/commit/9b097bdbe1db9770a7afd92aff9533259983a697))
+
+### 🔧 Chores
+
+- add bump file for v2.14.0 release ([8246ac2](https://github.com/SylphxAI/flow/commit/8246ac21da6398dcdb7e88e7d82949a4688a8b1b))
+
+## 2.13.0 (2025-12-17)
+
+### ✨ Features
+
+- **commands:** add trust-safety and fill SSOT gaps ([fe67913](https://github.com/SylphxAI/flow/commit/fe67913db8183ae6c16070825f61744cf44acafa))
+
+### ♻️ Refactoring
+
+- **commands:** restructure all 25 review commands for open exploration ([822da5a](https://github.com/SylphxAI/flow/commit/822da5a13f7b8e3d9d448e900c8ad8615c46a918))
+
 ## 2.12.0 (2025-12-17)
 
 ### ✨ Features

package/assets/slash-commands/review-account-security.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of account security in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify threats users can't protect themselves from.
 
 ## Tech Stack

package/assets/slash-commands/review-admin.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of the admin platform in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify operational gaps and safety improvements.
 
 ## Tech Stack

package/assets/slash-commands/review-auth.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of authentication in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify security gaps and UX friction in auth flows.
 
 ## Tech Stack

package/assets/slash-commands/review-billing.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of billing and payments in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify revenue leakage and reliability improvements.
 
 ## Tech Stack

package/assets/slash-commands/review-code-quality.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of code quality in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify code that works but shouldn't exist in its current form.
 
 ## Tech Stack

package/assets/slash-commands/review-data-architecture.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of data architecture in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify architectural weaknesses that will cause problems at scale.
 
 ## Tech Stack

package/assets/slash-commands/review-database.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of the database in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify schema problems that will hurt at scale.
 
 ## Tech Stack

package/assets/slash-commands/review-delivery.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of delivery gates in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify what could go wrong in production that we're not catching.
 
 ## Tech Stack

package/assets/slash-commands/review-discovery.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** to discover opportunities for this product.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify opportunities, then **implement improvements directly**. Don't just report — build.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **This review IS exploration** — think broadly and creatively about what could be.
 
 ## Tech Stack

package/assets/slash-commands/review-growth.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of growth systems in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify growth opportunities that don't yet exist.
 
 ## Tech Stack

package/assets/slash-commands/review-i18n.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of internationalization in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify what would make the product feel native to each locale.
 
 ## Tech Stack

package/assets/slash-commands/review-ledger.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of any balance/credits/wallet system in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify financial integrity risks before they become real problems.
 
 ## Tech Stack

package/assets/slash-commands/review-observability.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of observability in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify the production issues we can't debug today.
 
 ## Tech Stack

package/assets/slash-commands/review-operability.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of operability in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify what will break at 3am and how we'd fix it.
 
 ## Tech Stack

package/assets/slash-commands/review-performance.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of performance in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify what's making the product feel slow.
 
 ## Tech Stack

package/assets/slash-commands/review-pricing.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of pricing in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify monetization opportunities and pricing friction.
 
 ## Tech Stack

package/assets/slash-commands/review-privacy.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of privacy controls in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify compliance gaps and privacy improvements.
 
 ## Tech Stack

package/assets/slash-commands/review-pwa.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of PWA implementation in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify what would make the web experience feel native.
 
 ## Tech Stack

package/assets/slash-commands/review-referral.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of the referral system in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify growth opportunities and fraud vectors.
 
 ## Tech Stack

package/assets/slash-commands/review-security.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of security in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify vulnerabilities and hardening opportunities not listed here.
 
 ## Tech Stack

package/assets/slash-commands/review-seo.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of SEO in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify what would make this product dominate search results.
 
 ## Tech Stack

package/assets/slash-commands/review-storage.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of file storage and uploads in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify security risks and cost optimization opportunities.
 
 ## Tech Stack

package/assets/slash-commands/review-support.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of support and communications in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify what would make users feel genuinely supported.
 
 ## Tech Stack

package/assets/slash-commands/review-trust-safety.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of trust and safety in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: identify abuse vectors before bad actors find them.
 
 ## Tech Stack

package/assets/slash-commands/review-uiux.md

@@ -10,8 +10,8 @@ agent: coder
 
 * Perform a **deep, thorough review** of UI/UX in this codebase.
 * **Delegate to multiple workers** to research different aspects in parallel; you act as the **final gate** to synthesize and verify quality.
-* Deliverables must be stated as **findings, gaps, and actionable recommendations**.
-* **Single-pass delivery**: no deferrals; deliver a complete assessment.
+* **Review then Act**: identify issues, then **implement fixes directly**. Don't just report — fix.
+* **Single-pass delivery**: no deferrals; deliver complete implementation.
 * **Explore beyond the spec**: if the current design needs fundamental rethinking, propose it.
 
 ## Tech Stack

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sylphx/flow",
-	"version": "2.12.0",
+	"version": "2.14.0",
 	"description": "One CLI to rule them all. Unified orchestration layer for Claude Code, OpenCode, Cursor and all AI development tools. Auto-detection, auto-installation, auto-upgrade.",
 	"type": "module",
 	"bin": {

package/src/targets/functional/claude-code-logic.ts

@@ -18,9 +18,23 @@ import { failure, success, tryCatch } from '../../core/functional/result.js';
  * Claude Code settings structure
  */
 export interface ClaudeCodeSettings {
+  /** Environment variables for Claude Code */
+  env?: {
+    CLAUDE_CODE_MAX_OUTPUT_TOKENS?: string;
+    [key: string]: string | undefined;
+  };
+  /** Attribution settings (empty strings to hide) */
+  attribution?: {
+    commit?: string;
+    pr?: string;
+  };
+  /** Enable extended thinking mode */
+  alwaysThinkingEnabled?: boolean;
+  /** Hook configurations */
   hooks?: Record<
     string,
     Array<{
+      matcher?: string;
       hooks: Array<{
         type: string;
         command: string;
@@ -30,6 +44,20 @@ export interface ClaudeCodeSettings {
   [key: string]: unknown;
 }
 
+/**
+ * Default Claude Code settings for optimal experience
+ */
+export const DEFAULT_CLAUDE_CODE_SETTINGS: Partial<ClaudeCodeSettings> = {
+  env: {
+    CLAUDE_CODE_MAX_OUTPUT_TOKENS: '128000',
+  },
+  attribution: {
+    commit: '',
+    pr: '',
+  },
+  alwaysThinkingEnabled: true,
+};
+
 export interface HookConfig {
   notificationCommand?: string;
 }
@@ -89,7 +117,8 @@ export const buildHookConfiguration = (
 };
 
 /**
- * Merge settings with new hooks (pure)
+ * Merge settings with defaults and new hooks (pure)
+ * Preserves existing values while adding missing defaults
  */
 export const mergeSettings = (
   existingSettings: ClaudeCodeSettings,
@@ -98,7 +127,20 @@ export const mergeSettings = (
   const newHooks = buildHookConfiguration(hookConfig);
 
   return {
+    // Apply defaults first, then existing settings override
+    ...DEFAULT_CLAUDE_CODE_SETTINGS,
     ...existingSettings,
+    // Deep merge env variables
+    env: {
+      ...DEFAULT_CLAUDE_CODE_SETTINGS.env,
+      ...(existingSettings.env || {}),
+    },
+    // Deep merge attribution
+    attribution: {
+      ...DEFAULT_CLAUDE_CODE_SETTINGS.attribution,
+      ...(existingSettings.attribution || {}),
+    },
+    // Merge hooks
     hooks: {
       ...(existingSettings.hooks || {}),
       ...newHooks,
@@ -107,10 +149,12 @@ export const mergeSettings = (
 };
 
 /**
- * Create settings with hooks (pure)
+ * Create settings with defaults and hooks (pure)
+ * Includes optimal Claude Code settings for extended output, thinking mode, and clean attribution
  */
 export const createSettings = (hookConfig: HookConfig = DEFAULT_HOOKS): ClaudeCodeSettings => {
   return {
+    ...DEFAULT_CLAUDE_CODE_SETTINGS,
     hooks: buildHookConfiguration(hookConfig),
   };
 };