@xulthekl/team-flow 0.32.1 → 0.32.2

package/.claude/always/phase-guard.md

@@ -1,3 +1,3 @@
-# team-flow v0.32.1 | 阶段: {{state}} | 工作流: {{workflow}}
+# team-flow v0.32.2 | 阶段: {{state}} | 工作流: {{workflow}}
 当前阶段允许的操作由 workflow-start 路由规则定义。
 禁止跨越 DP gate 进入下一阶段。变更范围以 execution-contract.md 的 Intent Lock 为准。

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
     {
       "name": "team-flow",
       "description": "8-state spec workflow + compound global compounding + architecture-design (4A/DDD) + local HTML prototype + product-level orchestration + bootstrap + e2e + session handoff + workflow feedback. 24 skills + 15 agents with embedded TDD, SDD, code review, debugging, delta spec sync, and design-system-driven prototyping.",
-      "version": "0.32.1",
+      "version": "0.32.2",
       "source": "./",
       "author": {
         "name": "LT",

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "team-flow",
-  "version": "0.32.1",
+  "version": "0.32.2",
   "description": "Unified workflow plugin: team-flow (spec-driven dev: TDD/SDD/code-review/debugging) + compound-engineering core subset (brainstorm/plan/compound/strategy/ideate/proof, global compounding) + architecture-design (4A+DDD incremental design & global compounding) + prototype (local HTML prototype, zero external deps) + e2e (Playwright E2E, AC-driven) + workflow-orchestrator (product-level workflow orchestration) + workflow-bootstrap (existing project onboarding) + session-handoff (context transfer) + workflow-feedback (issue tracking). 24 skills + 15 agents, one install.",
   "source": "./",
   "author": {

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "team-flow",
-  "version": "0.32.1",
+  "version": "0.32.2",
   "description": "Spec-first workflow that bridges OpenSpec-style planning and Superpowers-style execution discipline.",
   "author": {
     "name": "MageByte",

package/.cursor-plugin/marketplace.json

@@ -5,7 +5,7 @@
   },
   "metadata": {
     "description": "Unified workflow plugin marketplace for Cursor (team-flow: team-flow + compound + architecture-design + prototype).",
-    "version": "0.32.1"
+    "version": "0.32.2"
   },
   "plugins": [
     {

package/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "team-flow",
   "displayName": "team-flow",
   "description": "Unified workflow plugin: team-flow (spec-driven dev: TDD/SDD/code-review/debugging) + compound-engineering core subset (brainstorm/plan/compound/strategy/ideate/proof, global compounding) + architecture-design (4A+DDD incremental design & global compounding) + prototype (local HTML prototype, zero external deps) + e2e (Playwright E2E, AC-driven) + workflow-orchestrator (product-level workflow orchestration) + workflow-bootstrap (existing project onboarding) + session-handoff (context transfer) + workflow-feedback (issue tracking). 24 skills + 15 agents, one install.",
-  "version": "0.32.1",
+  "version": "0.32.2",
   "author": {
     "name": "LT",
     "url": "https://github.com/LT"

package/.github/plugin/marketplace.json

@@ -6,13 +6,13 @@
   },
   "metadata": {
     "description": "Unified workflow plugins and skills for AI coding agents (team-flow: team-flow + compound + architecture-design + prototype).",
-    "version": "0.32.1"
+    "version": "0.32.2"
   },
   "plugins": [
     {
       "name": "team-flow",
       "description": "Unified workflow with planning artifacts, execution contracts, TDD, review gates, systematic debugging, delta spec sync, architecture-design, and local HTML prototyping.",
-      "version": "0.32.1",
+      "version": "0.32.2",
       "source": ".",
       "author": {
         "name": "LT",

package/CHANGELOG.md

@@ -6,6 +6,28 @@ The format loosely follows Keep a Changelog.
 
 ## [Unreleased]
 
+## [0.32.2] - 2026-08-03
+
+### Fixed（C1 死锁链修复三件套，设计见工作区级文档 team-flow-workspace/docs/plan/v0.32.2-hook-and-gate-fix.md）
+
+#### pre-tool-use-guard 路径化（P1-44，死锁环1）
+- **hooks/pre-tool-use-guard**：新增产物区豁免——Write/Edit/MultiEdit 目标在活动 change 目录内（architecture/、specs/、proposal/design/tasks、contract、test-matrix、reviews 等工作流产物）→ 全状态放行；change 目录外（实现代码）→ 维持状态门禁（仅 approved-for-build/executing/debugging）。修复 exploring/specifying/bridging 阶段产物写入被一刀切拦截、LLM 被迫 Bash 绕过（写入彻底脱管）的死锁
+- `.team-flow.yaml` 本身恒受状态门禁（state 禁写红线保留）
+- macOS symlink 归一化（/private/var ↔ /var 双侧对齐），防物理/逻辑路径前缀失配
+
+#### exploring→specifying 门禁时序（P3-10，死锁环2）
+- **scripts/guard/guard.mjs**：`exploring:specifying` 移除 `artifacts-exist` 维度（四件规划产物由 spec-writer 在 specifying 阶段生成，转换前要求属鸡生蛋死锁）；产物齐全性由 `specifying:bridging` 独家负责（该维度本就挂着，单一责任人）
+
+#### hooks 版本同步（P2-40，发版中断根治）
+- **scripts/lib/cmd-version.mjs**：hooks/session-start 纳入自动同步——头部注释行 pattern 后缀改通配（根因：旧 pattern 写死 `: conditional injection` 措辞，hook 注释演进后失配，v0.27.2~v0.32.1 四次发版中断）+ PLUGIN_VERSION 变量首次纳入同步
+- 顺带修复：major 版本号硬编码为 0 的缺陷（v1.0.0 里程碑会静默写成 0.x.y）——解构补 major + 全部 replacement 改 %MAJOR% 占位 + 全部 pattern 首段泛化（`0\.` → `\d+`，支持 1.x 匹配）
+
+### Tests
+- tests/lib/hook-pre-tool-use.test.mjs：路径化判定 9 场景矩阵（产物区放行/代码区拦截/构建态/禁写红线/无 change/非 Write 工具/相对路径）
+- tests/lib/cmd-version-hooks.test.mjs：hooks 双位置同步 + 幂等 + pattern 防腐化 3 例
+- guard.test.mjs / guard-dimensions.test.mjs：artifacts-exist 断言迁移至 specifying→bridging + exploring→specifying 新语义断言
+- 全量回归：lib 498/498 + Tier1 e2e 68/68 + check-versions ✅
+
 ## [0.32.1] - 2026-08-03
 
 > 版本号说明：0.32.0 因 `.npmignore` 缺失 `/tests/` 排除项，误将 61.8M e2e 基线归档打入 tarball（72MB），发布后 30 分钟内撤回；npm 版本号一经发布不可复用，故以 **0.32.1** 重发（内容完全一致 + 打包修复）。

package/GEMINI.md

@@ -8,7 +8,7 @@ The workflow is self-contained and does not require OpenSpec or Superpowers at r
 
 
 <!-- team-flow-phase-guard-start -->
-# team-flow v0.32.1 | 阶段: {{state}} | 工作流: {{workflow}}
+# team-flow v0.32.2 | 阶段: {{state}} | 工作流: {{workflow}}
 当前阶段允许的操作由 workflow-start 路由规则定义。
 禁止跨越 DP gate 进入下一阶段。变更范围以 execution-contract.md 的 Intent Lock 为准。
 <!-- team-flow-phase-guard-end -->

package/INSTALL.md

@@ -7,7 +7,7 @@
 - [Fission-AI/OpenSpec](https://github.com/Fission-AI/OpenSpec) — 规划引擎（Schema 验证、Delta Spec、工件解析）
 - [obra/superpowers](https://github.com/obra/superpowers) — 执行纪律（TDD 铁律、SDD、系统化调试、代码审查）
 
-当前发布版本：**v0.32.1**。
+当前发布版本：**v0.32.2**。
 
 ---
 

package/README.md

@@ -1,6 +1,6 @@
 # team-flow
 
-> 当前版本：`v0.32.1`
+> 当前版本：`v0.32.2`
 
 > 统一插件：**team-flow**（spec 驱动开发）+ **compound-engineering 核心子集**（全局复利）+ **architecture-design**（4A+DDD 增量设计）+ **prototype**（本地 HTML 原型）+ **e2e**（AC 驱动 E2E）+ **workflow-orchestrator**（产品级编排）+ **workflow-bootstrap**（既有项目接入）。一次安装，七套能力协同。
 

package/docs/README_en.md

@@ -126,7 +126,7 @@ npm install -g team-flow
 
 ### Version
 
-- Current: `v0.32.1`
+- Current: `v0.32.2`
 - v0.9.1 highlights: DP-4 execution-mode recommendations, a portable runtime across 17 platforms, and a raw-package smoke with no plugin-root variable.
 - Self-contained — no OpenSpec or Superpowers runtime required
 - Upstream: [Fission-AI/OpenSpec](https://github.com/Fission-AI/OpenSpec), [obra/superpowers](https://github.com/obra/superpowers)

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "team-flow",
   "description": "Unified workflow plugin: team-flow (spec-driven dev) + compound-engineering core subset + architecture-design (4A/DDD) + prototype (local HTML). 24 skills, one install.",
-  "version": "0.32.1",
+  "version": "0.32.2",
   "contextFileName": "GEMINI.md"
 }

package/hooks/pre-tool-use-guard

@@ -5,12 +5,21 @@
 # ----------------------------------------------------------------------------
 # Purpose
 # ----------------------------------------------------------------------------
-# Blocks Write/Edit/MultiEdit implementation edits unless the active
+# Blocks Write/Edit/MultiEdit IMPLEMENTATION edits unless the active
 # team-flow change is in a state that permits building. This enforces the
 # state-machine rule that "no implementation is allowed" outside the
 # build-permitted states (exploring / specifying / bridging must finish and be
 # approved before any code is written).
 #
+# v0.32.2 (P1-44): path-based artifact-zone exemption. The workflow itself
+# REQUIRES artifact writes during non-build states (architecture/*.md while
+# exploring, proposal/specs/design/tasks while specifying, contract/matrix
+# while bridging). The original state-only gate blocked those too, forcing
+# LLMs to bypass via Bash writes (which are not gated at all). Now writes
+# INSIDE the active change directory (artifact zone) are allowed; only writes
+# OUTSIDE it (implementation code) remain state-gated. `.team-flow.yaml`
+# itself stays state-gated even inside the change dir (state 禁写红线).
+#
 # ----------------------------------------------------------------------------
 # Guard logic
 # ----------------------------------------------------------------------------
@@ -19,6 +28,9 @@
 #        - Not found  -> ALLOW (no active team-flow change in scope).
 #   2. Read the current workflow state from the `state:` line of the yaml.
 #   3. For Write/Edit/MultiEdit only:
+#      3a. Target path inside the change directory (artifact zone) AND not
+#          `.team-flow.yaml` -> ALLOW (workflow artifacts are state-agnostic).
+#      3b. Otherwise by state:
 #        - state in {approved-for-build, executing, debugging} -> ALLOW
 #        - any other state (exploring/specifying/bridging/closing/abandoned/
 #          unknown) -> BLOCK with an explanatory reason.
@@ -101,13 +113,42 @@ state="$(grep -E '^[[:space:]]*state:[[:space:]]*' "$yaml" 2>/dev/null \
 # Could not determine state -> defensive allow (never block on parse failure).
 [ -n "$state" ] || allow
 
+# --- v0.32.2 (P1-44): artifact-zone exemption ------------------------------
+# Writes targeting the active change directory itself are workflow artifacts
+# (architecture/, specs/, proposal/design/tasks, contract, test-matrix,
+# reviews, learnings...) — required by the workflow in EVERY state, so they
+# are exempt from the build-state gate. Only writes outside the change dir
+# (implementation code) are gated. `.team-flow.yaml` remains gated (state 禁写).
+file_path="$(printf '%s' "$INPUT" \
+  | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' \
+  | head -1 \
+  | sed 's/.*:"//; s/"$//')"
+# Relative target -> absolutize against $PWD for a stable prefix comparison.
+case "$file_path" in
+  ''|/*) : ;;
+  *) file_path="$PWD/$file_path" ;;
+esac
+if [ -n "$file_path" ] && [ "${file_path##*/}" != ".team-flow.yaml" ]; then
+  case "$file_path" in
+    "$dir"/*) allow ;;   # artifact zone: inside the change directory
+  esac
+  # macOS symlink normalization: /var,/tmp are symlinks to /private/var,/private/tmp.
+  # $PWD may be physical (child-process chdir) while file_path is logical, or vice
+  # versa — strip the /private prefix on both sides before comparing.
+  norm_dir="${dir#/private}"
+  norm_fp="${file_path#/private}"
+  case "$norm_fp" in
+    "$norm_dir"/*) allow ;;
+  esac
+fi
+
 # --- decision --------------------------------------------------------------
 case "$state" in
   approved-for-build|executing|debugging)
     allow
     ;;
   *)
-    reason="team-flow guard: implementation edits (Write/Edit/MultiEdit) are blocked while the change is in state '$state'. Edits are only allowed in states: approved-for-build, executing, debugging. Advance the workflow to an approved build state first (see docs/state-machine.md or /team-flow:workflow-start). If no change is actually active, remove or fix the stray .team-flow.yaml."
+    reason="team-flow guard: implementation edits (Write/Edit/MultiEdit) OUTSIDE the change directory are blocked while the change is in state '$state'. Code edits are only allowed in states: approved-for-build, executing, debugging. Artifact writes inside the change directory are always permitted (v0.32.2). Advance the workflow to an approved build state first (see docs/state-machine.md or /team-flow:workflow-start). If no change is actually active, remove or fix the stray .team-flow.yaml."
     # Escape backslashes and double quotes for safe JSON string embedding.
     reason_esc="$(printf '%s' "$reason" | sed 's/\\/\\\\/g; s/"/\\"/g')"
     printf '{"decision":"block","reason":"%s"}\n' "$reason_esc"

package/hooks/session-start

@@ -1,11 +1,11 @@
 #!/usr/bin/env bash
-# v0.32.1: auto-sync CLI version with plugin version
+# v0.32.2: auto-sync CLI version with plugin version
 set -e
 
 # ═══════════════════════════════════════════════════════════════
 # Plugin version (update this when releasing new versions)
 # ═══════════════════════════════════════════════════════════════
-PLUGIN_VERSION="0.32.1"
+PLUGIN_VERSION="0.32.2"
 
 # ═══════════════════════════════════════════════════════════════
 # Step 1: Auto-sync CLI version with plugin version

package/llms.txt

@@ -3,7 +3,7 @@
 ## Overview
 spec-superflow is a self-contained workflow integration plugin for Claude Code, Cursor, OpenAI Codex CLI/App, GitHub Copilot CLI, Gemini CLI, OpenCode, WorkBuddy, and Trae. It merges spec-driven planning artifacts (proposal, specs, design, tasks) with disciplined execution guardrails (TDD, review gates, controlled handoff) into one unified workflow.
 
-Current version: v0.32.1.
+Current version: v0.32.2.
 
 ## Key Documents
 - README.md: Chinese homepage with full usage guide and FAQ

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xulthekl/team-flow",
-  "version": "0.32.1",
+  "version": "0.32.2",
   "description": "Unified plugin (24 skills + 15 agents) integrating team-flow, compound-engineering, architecture-design, prototype, design-system, workflow-orchestrator, workflow-bootstrap, e2e, session-handoff, workflow-feedback for multi-agent coding tools.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "team-flow",
-  "version": "0.32.1",
+  "version": "0.32.2",
   "description": "Unified workflow plugin: team-flow (spec-driven dev: TDD/SDD/code-review/debugging) + compound-engineering core subset (brainstorm/plan/compound/strategy/ideate/proof, global compounding) + architecture-design (4A+DDD incremental design & global compounding) + prototype (local HTML prototype, zero external deps) + e2e (Playwright E2E, AC-driven) + workflow-orchestrator (product-level workflow orchestration) + workflow-bootstrap (existing project onboarding) + session-handoff (context transfer) + workflow-feedback (issue tracking). 24 skills + 15 agents, one install.",
   "author": {
     "name": "LT"

package/scripts/guard/guard.mjs

@@ -20,7 +20,12 @@ import { checkTestMatrixReady } from './checks/test-matrix-ready.mjs';
 // Transition matrix: <from>:<to> → required check dimensions
 const TRANSITION_CHECKS = {
   // Forward transitions
-  'exploring:specifying':           ['artifacts-exist', 'arch-design'],
+  // v0.32.2 (P3-10): artifacts-exist removed from exploring:specifying —
+  // the four planning artifacts are PRODUCED by spec-writer during specifying,
+  // so requiring them before the transition was a chicken-and-egg deadlock
+  // (C1 事件：主代理被此门禁逼出绕行行为)。Artifact completeness is enforced
+  // by specifying:bridging (artifacts-exist remains there, single owner).
+  'exploring:specifying':           ['arch-design'],
   'specifying:bridging':            ['artifacts-exist', 'schema-valid'],
   'bridging:approved-for-build':    ['artifacts-exist', 'schema-valid', 'contract-fresh', 'dp-gate-passed'],
   // v0.13 §49：test-matrix-ready 门禁前移——full 模式进入 executing 前强制测试准备度

package/scripts/lib/cmd-version.mjs

@@ -19,25 +19,30 @@ const MANIFESTS = [
 // ── Text files with regex patterns (first capture group = version to replace) ──
 // Note: CLAUDE.md is intentionally gitignored (project-local AI instructions).
 const TEXT_FILES = [
-  { file: 'README.md',              pattern: /(当前版本：`v?)0\.\d+\.\d+(`?)/g,                   replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: 'INSTALL.md',             pattern: /(当前发布版本：\*\*v)0\.\d+\.\d+(\*\*)/g,            replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: 'docs/README_en.md',      pattern: /(Current: `v)0\.\d+\.\d+(`)/g,                     replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: 'hooks/session-start',    pattern: /(# v)0\.\d+\.\d+(: conditional injection)/g,       replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: 'llms.txt',               pattern: /(Current version: v)0\.\d+\.\d+(\.)/g,             replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: '.claude/always/phase-guard.md', pattern: /(# team-flow v)0\.\d+\.\d+( \|)/g,      replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: 'GEMINI.md',              pattern: /(# team-flow v)0\.\d+\.\d+( \|)/g,              replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: 'skills/workflow-start/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)0\.\d+\.\d+( tf)/g, replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: 'skills/need-explorer/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)0\.\d+\.\d+( tf)/g, replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: 'skills/spec-writer/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)0\.\d+\.\d+( tf)/g, replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: 'skills/contract-builder/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)0\.\d+\.\d+( tf)/g, replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: 'skills/build-executor/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)0\.\d+\.\d+( tf)/g, replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: 'skills/build-executor/implementer-prompt.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)0\.\d+\.\d+( tf)/g, replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: 'skills/build-executor/task-reviewer-prompt.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)0\.\d+\.\d+( tf)/g, replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: 'skills/code-reviewer/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)0\.\d+\.\d+( tf)/g, replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: 'skills/code-reviewer/code-reviewer-prompt.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)0\.\d+\.\d+( tf)/g, replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: 'skills/bug-investigator/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)0\.\d+\.\d+( tf)/g, replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: 'skills/release-archivist/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)0\.\d+\.\d+( tf)/g, replacement: '$10.%MINOR%.%PATCH%$2' },
-  { file: 'skills/spec-merger/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)0\.\d+\.\d+( tf)/g, replacement: '$10.%MINOR%.%PATCH%$2' },
+  { file: 'README.md',              pattern: /(当前版本：`v?)\d+\.\d+\.\d+(`?)/g,                   replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: 'INSTALL.md',             pattern: /(当前发布版本：\*\*v)\d+\.\d+\.\d+(\*\*)/g,            replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: 'docs/README_en.md',      pattern: /(Current: `v)\d+\.\d+\.\d+(`)/g,                     replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  // v0.32.2（P2-40）：hooks/session-start 两处版本号都纳入同步——
+  // ① 头部注释行（后缀用通配 `:.*`，防止注释措辞变更导致 pattern 腐化失配，
+  //    v0.27.2~v0.32.1 四次发版中断的根因即旧 pattern 写死了后缀措辞）；
+  // ② PLUGIN_VERSION 变量（check-version-consistency 的门禁判据）。
+  { file: 'hooks/session-start',    pattern: /(# v)\d+\.\d+\.\d+(:.*)/g,                            replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: 'hooks/session-start',    pattern: /(PLUGIN_VERSION=")\d+\.\d+\.\d+(")/g,                 replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: 'llms.txt',               pattern: /(Current version: v)\d+\.\d+\.\d+(\.)/g,             replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: '.claude/always/phase-guard.md', pattern: /(# team-flow v)\d+\.\d+\.\d+( \|)/g,      replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: 'GEMINI.md',              pattern: /(# team-flow v)\d+\.\d+\.\d+( \|)/g,              replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: 'skills/workflow-start/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)\d+\.\d+\.\d+( tf)/g, replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: 'skills/need-explorer/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)\d+\.\d+\.\d+( tf)/g, replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: 'skills/spec-writer/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)\d+\.\d+\.\d+( tf)/g, replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: 'skills/contract-builder/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)\d+\.\d+\.\d+( tf)/g, replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: 'skills/build-executor/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)\d+\.\d+\.\d+( tf)/g, replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: 'skills/build-executor/implementer-prompt.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)\d+\.\d+\.\d+( tf)/g, replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: 'skills/build-executor/task-reviewer-prompt.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)\d+\.\d+\.\d+( tf)/g, replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: 'skills/code-reviewer/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)\d+\.\d+\.\d+( tf)/g, replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: 'skills/code-reviewer/code-reviewer-prompt.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)\d+\.\d+\.\d+( tf)/g, replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: 'skills/bug-investigator/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)\d+\.\d+\.\d+( tf)/g, replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: 'skills/release-archivist/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)\d+\.\d+\.\d+( tf)/g, replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
+  { file: 'skills/spec-merger/SKILL.md', pattern: /(npx --yes --package @xulthekl\/team-flow@)\d+\.\d+\.\d+( tf)/g, replacement: '$1%MAJOR%.%MINOR%.%PATCH%$2' },
 ];
 
 function getNestedValue(obj, pathParts) {
@@ -72,7 +77,7 @@ export async function run(args) {
     console.error(`Invalid semver: ${newVersion}`);
     process.exit(2);
   }
-  const [, , minor, patch] = match;
+  const [, major, minor, patch] = match;
 
   console.log(`Version sync → ${newVersion}${dryRun ? ' (dry run)' : ''}\n`);
   let changed = 0;
@@ -122,7 +127,7 @@ export async function run(args) {
 
     const content = readFileSync(filePath, 'utf-8');
     const replacement = entry.replacement
-      .replace('%MINOR%', minor)
+      .replace('%MAJOR%', major).replace('%MINOR%', minor)
       .replace('%PATCH%', patch);
 
     const newContent = content.replace(entry.pattern, replacement);