chati-dev 4.5.11 → 4.5.13

package/framework/workflows/quick-flow.yaml

@@ -1,127 +1,36 @@
-# Quick Flow Workflow
-# Fast-track pipeline for simple tasks: bug fixes, small features, config changes
-# Skips full DISCOVER/PLAN phases when complexity is low
-
 workflow:
   id: quick-flow
-  name: Quick Flow — Fast Track Development
-  version: "1.0.0"
+  name: Quick Flow
+  version: "2.0.0"
   type: any
   project_types: [bug-fix, small-feature, config-change, hotfix, refactor]
-  description: >
-    Condensed pipeline for tasks that don't need full discovery/planning.
-    Used when the orchestrator detects low complexity: clear requirements,
-    known codebase, small scope. Skips Detail, Architect, UX, Phases, Tasks,
-    and QA-Planning. Goes straight from Brief (quick) to Dev.
+  execution_authority: rail
+  description: Condensed planning with the same sealed RAIL and Release contracts as the full workflow.
 
 detection:
-  # Orchestrator uses these signals to auto-detect quick-flow eligibility
-  triggers:
-    - "User explicitly requests quick fix or hotfix"
-    - "Single, well-defined requirement (can be stated in one sentence)"
-    - "Bug report with reproduction steps"
-    - "Configuration or environment change"
-    - "Small refactoring with clear scope"
-    - "User says 'just do it' or 'quick fix' or similar urgency signals"
-    - "Simple, fun, or experimental project (single-purpose tool, game, prototype)"
-    - "Single-page utility or learning project with no production requirements"
-  disqualifiers:
-    - "New feature requiring architecture decisions (multiple services, database design, auth system)"
-    - "Multiple interconnected requirements (>3 distinct features)"
-    - "Complex greenfield project (enterprise, multi-service, compliance requirements)"
-    - "Enterprise or compliance context"
-    - "User explicitly requests full pipeline"
-    - "Scope involves more than 5 files"
-    - "Requires database schema changes"
-    - "Requires new API endpoints (>2)"
-
   confidence_threshold: 0.8
   user_confirmation: true
+  disqualifiers:
+    - architecture decision required
+    - more than five files expected
+    - database schema change
+    - more than two new API endpoints
 
 phases:
   - phase: 0
-    name: Quick Brief
-    category: DISCOVER
-    sequence:
-      - agent: brief
-        action: quick-extraction
-        creates: [artifacts/1-Brief/quick-brief.md]
-        notes: >
-          Condensed extraction: single-pass, no 5-phase process.
-          Capture: what, why, constraints, acceptance criteria.
-          Duration: 2-5 min max.
-        template: quick-brief-tmpl.yaml
-        config:
-          max_rounds: 2
-          require_approval: true
-
-  - phase: 1
-    name: Implementation
-    category: BUILD
-    sequence:
-      - agent: dev
-        action: implement-tasks
-        notes: >
-          Dev works directly from Quick Brief (no PRD, no architecture doc).
-          Scope is tight: fix the bug, add the small feature, make the change.
-          Self-critique checklist still applies.
-
-  - phase: 2
-    name: Validation
-    category: BUILD
-    sequence:
-      - agent: qa-implementation
-        action: validate-code
-        creates: [artifacts/9-QA-Implementation/qa-implementation-report.md]
-        notes: >
-          Full QA-Implementation validation still applies (no shortcuts on quality).
-          Adversarial review still mandatory.
-          Tests must pass, SAST must be clean.
-        config:
-          adversarial_review: true
-          minimum_findings: 3
-
-  - phase: 3
-    name: Deployment
-    category: DEPLOY
+    name: Compact Planning
+    category: PLAN
     sequence:
-      - agent: devops
-        action: deploy
-        creates: [artifacts/10-Deploy/deploy-report.md]
-        notes: "Standard deployment process"
+      - { agent: brief, action: quick-extraction, creates: [artifacts/1-Brief/quick-brief.md] }
+      - { agent: tasks, action: compact-sealed-task-graph, creates: [artifacts/6-Tasks/tasks.md] }
+      - { agent: qa-planning, action: validate-compact-plan, creates: [artifacts/7-QA-Planning/qa-planning-report.md] }
+  - { phase: 1, name: RAIL Execution, category: RAIL, runtime: project-local-rail }
+  - { phase: 2, name: Release Lane, category: RELEASE, requires: [rail_complete, independent_review_approved, explicit_human_authorization] }
 
 transitions:
-  quick_brief_to_build:
-    trigger: "brief.status == completed"
-    type: automatic
-    action: "Skip full PLAN phase, go directly to BUILD"
-    notes: "No Detail, Architect, UX, Phases, Tasks, or QA-Planning"
-  build_to_validate:
-    trigger: "dev.status == completed"
-    type: automatic
-    action: "Update project.state = validate"
-  validate_to_deploy:
-    trigger: "qa-implementation.status == approved"
-    type: automatic
-    action: "Update project.state = deploy"
-    notes: "User preview skipped for quick-flow (scope too small)"
-  deploy_to_completed:
-    trigger: "devops.status == completed"
-    type: automatic
-    action: "Update project.state = completed"
+  plan_to_rail: { trigger: "qa-planning.score >= 95 && tasks.handoff == sealed", target: rail }
+  rail_to_release: { trigger: "rail.all_tasks_approved == true", target: release }
 
 escalation:
-  # If at any point the quick-flow feels insufficient, escalate to full pipeline
-  triggers:
-    - "Dev discovers the change is more complex than expected"
-    - "QA-Implementation finds architectural issues"
-    - "Scope creep detected (>5 files, new APIs, schema changes)"
-    - "Dev agent requests escalation"
-  action: >
-    Pause quick-flow, notify user:
-    "This task is more complex than initially estimated.
-    Recommend switching to full pipeline for proper planning.
-    Options:
-    1. Switch to full pipeline (Recommended)
-    2. Continue with quick-flow (document risk)
-    3. Abort and reassess"
+  triggers: [scope-expansion, architecture-decision, planning-gate-failure]
+  action: restart with the appropriate full planning workflow

package/framework/workflows/standard-flow.yaml

@@ -1,174 +1,30 @@
-# Standard Flow Workflow
-# Mid-tier pipeline for moderate tasks: new features, integrations, brownfield enhancements
-# Uses 8 agents — between Quick Flow (4) and Full Flow (12)
-
 workflow:
   id: standard-flow
-  name: Standard Flow — Balanced Development
-  version: "1.0.0"
+  name: Standard Flow
+  version: "2.0.0"
   type: any
   project_types: [feature, integration, enhancement, module, component, brownfield-moderate]
-  description: >
-    Balanced pipeline for moderate complexity tasks that need proper planning
-    but not the full 12-agent pipeline. Skips WU (assumes existing codebase
-    context), UX (no design-heavy work), and Phases (tasks agent handles
-    scope directly). Ideal for 2-5 requirements in brownfield projects.
-
-detection:
-  triggers:
-    - "Moderate complexity feature with 2-5 requirements"
-    - "Brownfield project enhancement or integration"
-    - "New module or component within existing architecture"
-    - "User explicitly requests standard flow"
-    - "Feature that needs architecture review but not full UX design"
-    - "API integration or service connection"
-    - "Database-backed feature with clear data model"
-  disqualifiers:
-    - "Quick fix, hotfix, or single-line change (use Quick Flow)"
-    - "Enterprise-scale project with compliance requirements (use Full Flow)"
-    - "Greenfield project requiring full discovery (use Full Flow)"
-    - "UX-heavy feature requiring design system work (use Full Flow)"
-    - "Multi-service architecture changes (use Full Flow)"
-    - "User explicitly requests full pipeline"
-
-  confidence_threshold: 0.8
-  user_confirmation: true
-
-agents:
-  included:
-    - brief
-    - detail
-    - architect
-    - tasks
-    - qa-planning # runs inside Planning Team; score synced via team dissolution
-    - dev
-    - qa-implementation
-    - devops
-  excluded:
-    - greenfield-wu
-    - brownfield-wu
-    - ux
-    - phases
+  execution_authority: rail
+  description: Balanced planning followed by the canonical RAIL and Release contracts.
 
 phases:
   - phase: 0
     name: Discovery
     category: DISCOVER
     sequence:
-      - agent: brief
-        action: extract-requirements
-        creates: [artifacts/1-Brief/brief.md]
-        notes: >
-          Full brief extraction (5 phases). Since no WU precedes it,
-          Brief must also capture codebase context from user input.
-        config:
-          max_rounds: 5
-          require_approval: true
-
+      - { agent: brief, action: problem-extraction, creates: [artifacts/1-Brief/brief-report.md] }
   - phase: 1
     name: Planning
     category: PLAN
     sequence:
-      - agent: detail
-        action: expand-requirements
-        creates: [artifacts/2-Detail/prd.md]
-        notes: "Full PRD from brief output"
-        parallel_with: [architect]
-
-      - agent: architect
-        action: design-architecture
-        creates: [artifacts/3-Architecture/architecture.md]
-        notes: "Architecture decisions, no UX constraints needed"
-        parallel_with: [detail]
-
-      - agent: tasks
-        action: create-tasks
-        creates: [artifacts/5-Tasks/tasks.md]
-        notes: >
-          Tasks agent works directly from PRD + Architecture.
-          No phases agent — tasks agent determines task breakdown directly.
-
-      - agent: qa-planning
-        action: validate-plan
-        creates: [artifacts/6-QA-Planning/qa-planning-report.md]
-        notes: >
-          Runs inside Planning Team (Article XXI), not as a standalone step.
-          Activates after Detail, Architect complete. Score >= 95% required to advance.
-          Score synced to session.yaml by orchestrator on team dissolution.
-        config:
-          minimum_score: 95
-
-  - phase: 2
-    name: Implementation
-    category: BUILD
-    sequence:
-      - agent: dev
-        action: implement-tasks
-        notes: "Dev works from full PRD + architecture + tasks"
-
-      - agent: qa-implementation
-        action: validate-code
-        creates: [artifacts/9-QA-Implementation/qa-implementation-report.md]
-        notes: >
-          Full QA-Implementation validation. Score >= 95% required.
-          Adversarial review mandatory.
-        config:
-          adversarial_review: true
-          minimum_findings: 5
-          minimum_score: 95
-
-  - phase: 3
-    name: Deployment
-    category: DEPLOY
-    sequence:
-      - agent: devops
-        action: deploy
-        creates: [artifacts/10-Deploy/deploy-report.md]
-        notes: "Standard deployment process"
+      - { agent: detail, action: create-prd, creates: [artifacts/2-PRD/prd.md] }
+      - { agent: architect, action: focused-architecture, creates: [artifacts/3-Architecture/architecture.md] }
+      - { agent: tasks, action: seal-task-graph, creates: [artifacts/6-Tasks/tasks.md] }
+      - { agent: qa-planning, action: validate-planning, creates: [artifacts/7-QA-Planning/qa-planning-report.md] }
+  - { phase: 2, name: RAIL Execution, category: RAIL, runtime: project-local-rail }
+  - { phase: 3, name: Release Lane, category: RELEASE, requires: [rail_complete, independent_review_approved, explicit_human_authorization] }
 
 transitions:
-  discover_to_plan:
-    trigger: "brief.status == completed"
-    type: automatic
-    action: "Advance to PLAN phase"
-  plan_to_build:
-    trigger: "qa-planning.score >= 95"
-    type: automatic
-    action: "Advance to BUILD phase"
-  build_to_validate:
-    trigger: "dev.status == completed"
-    type: automatic
-    action: "Run QA-Implementation"
-  validate_to_deploy:
-    trigger: "qa-implementation.score >= 95"
-    type: user_preview
-    action: "User preview gate, then advance to DEPLOY"
-  deploy_to_completed:
-    trigger: "devops.status == completed"
-    type: automatic
-    action: "Pipeline complete"
-
-escalation:
-  to_full_flow:
-    triggers:
-      - "Architect discovers multi-service complexity"
-      - "QA-Planning finds UX requirements not addressed"
-      - "Scope creep: more than 5 distinct requirements discovered"
-      - "User requests full pipeline"
-    action: >
-      Pause standard-flow, notify user:
-      "This task is more complex than the standard flow can handle.
-      Options:
-      1. Switch to full pipeline (Recommended)
-      2. Continue with standard flow (document gaps)
-      3. Reduce scope and continue"
-  to_quick_flow:
-    triggers:
-      - "Detail agent finds only 1 simple requirement"
-      - "Architect confirms no architecture changes needed"
-    action: >
-      Suggest downgrade:
-      "This task might be simpler than expected.
-      Options:
-      1. Switch to quick flow (faster)
-      2. Continue with standard flow"
+  discover_to_plan: { trigger: "brief.status == completed", target: plan }
+  plan_to_rail: { trigger: "qa-planning.score >= 95 && tasks.handoff == sealed", target: rail }
+  rail_to_release: { trigger: "rail.all_tasks_approved == true", target: release }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chati-dev",
-  "version": "4.5.11",
+  "version": "4.5.13",
   "description": "AI-Powered Multi-Agent Orchestration System - Structured vibe coding for Full Stack Development",
   "type": "module",
   "bin": {

package/src/config/claude-settings-generator.js

@@ -176,10 +176,11 @@ const PERMISSIONS_DENY = [
  * Group HOOK_REGISTRY entries by event, then by matcher within each event.
  * Returns the shape Claude Code expects under the top-level "hooks" key.
  */
-function buildHooksObject() {
+function buildHooksObject(options = {}) {
   const events = {};
 
   for (const entry of HOOK_REGISTRY) {
+    if (options.runtimeVersion === 2 && entry.name === 'post-dev') continue;
     if (!events[entry.event]) events[entry.event] = new Map();
     const matcherGroups = events[entry.event];
     if (!matcherGroups.has(entry.matcher)) {
@@ -208,7 +209,7 @@ function buildHooksObject() {
  *
  * @returns {string} JSON string with trailing newline, ready to write to disk.
  */
-export function generateClaudeSettings() {
+export function generateClaudeSettings(options = {}) {
   const settings = {
     $schema: 'https://json.schemastore.org/claude-code-settings.json',
     permissions: {
@@ -216,7 +217,7 @@ export function generateClaudeSettings() {
       deny: PERMISSIONS_DENY,
       defaultMode: 'default',
     },
-    hooks: buildHooksObject(),
+    hooks: buildHooksObject(options),
   };
 
   return JSON.stringify(settings, null, 2) + '\n';

package/src/config/context-file-generator.js

@@ -68,10 +68,17 @@ function buildCodexReplacements(frameworkDir = 'chati.dev') {
     ['claude --print', 'codex exec'],
     ['claude -p', 'codex exec'],
     ['CLAUDE.local.md', 'AGENTS.override.md'],
-    ['/chati', '$chati'],
   ];
 }
 
+/**
+ * Convert the interactive slash command without touching filesystem paths such
+ * as `.chati.dev/orchestrator/chati.md`.
+ */
+function adaptCodexInvocation(content) {
+  return content.replace(/(?<![\w/])\/chati(?=\s|$|[`'".,;:!?)]|\b)/gm, '$chati');
+}
+
 // ---------------------------------------------------------------------------
 // Generators
 // ---------------------------------------------------------------------------
@@ -144,6 +151,7 @@ export function generateAgentsMd(content, contextFiles = null, frameworkDir = 'c
   for (const [search, replace] of replacements) {
     result = result.replaceAll(search, replace);
   }
+  result = adaptCodexInvocation(result);
 
   // Clean up any double blank lines left by stripping
   result = result.replace(/\n{3,}/g, '\n\n');
@@ -166,6 +174,7 @@ export function generateAgentsMd(content, contextFiles = null, frameworkDir = 'c
         for (const [search, replace] of replacements) {
           adapted = adapted.replaceAll(search, replace);
         }
+        adapted = adaptCodexInvocation(adapted);
         sections.push(adapted.trim());
       }
     }

package/src/config/framework-adapter.js

@@ -65,6 +65,30 @@ const PROVIDER_META = {
   },
 };
 
+const CODEX_CREDENTIAL_BOUNDARY = `
+## Codex external provider credential boundary
+
+Commands returned in any \`spawn_command\`, \`parallel_spawn_command\` or
+\`parallel_spawn_commands\` start another provider CLI. Codex MUST execute each
+of these commands with native escalated execution so the child CLI can access
+its existing local credentials:
+
+- Set \`sandbox_permissions\` to \`require_escalated\`.
+- Explain that Chati needs to run the selected provider CLI using its existing
+  local authentication.
+- Offer the narrow reusable prefix made from the first two command arguments:
+  \`["node", "<absolute path from the command to run-agent.js>"]\`.
+- Keep the project working directory and the router-provided command unchanged.
+
+Never test a routed provider command inside the workspace sandbox first. A
+\`PROVIDER_NOT_READY\` or \`PROVIDER_NOT_AUTHENTICATED\` result obtained inside
+that sandbox is inconclusive because the sandbox can hide OS credentials. If a
+sandboxed attempt already failed, rerun it once with native escalated execution.
+Only a failure from that escalated attempt may be reported as an authentication
+failure. Do not repeat the same sandboxed command and do not offer to skip a
+required v2 pipeline stage.
+`;
+
 // ---------------------------------------------------------------------------
 // Replacement Configuration Builder
 // ---------------------------------------------------------------------------
@@ -225,5 +249,12 @@ export function adaptFrameworkFile(content, filePath, provider) {
     result = result.replace(pattern, replacement);
   }
 
+  if (provider === 'codex' && filePath === 'orchestrator/chati.md') {
+    const routedAction = '## Action: Routed Interactive Agent';
+    result = result.includes(routedAction)
+      ? result.replace(routedAction, `${CODEX_CREDENTIAL_BOUNDARY}\n${routedAction}`)
+      : `${result.trimEnd()}\n\n${CODEX_CREDENTIAL_BOUNDARY.trimStart()}`;
+  }
+
   return result;
 }

package/src/installer/core.js

@@ -1,4 +1,4 @@
-import { mkdirSync, writeFileSync, copyFileSync, existsSync, readFileSync, readdirSync, statSync } from 'fs';
+import { mkdirSync, writeFileSync, copyFileSync, existsSync, readFileSync, readdirSync, statSync, rmSync } from 'fs';
 import { execFileSync } from 'child_process';
 import { join, dirname } from 'path';
 import { fileURLToPath } from 'url';
@@ -12,6 +12,7 @@ import { generateClaudeSettings } from '../config/claude-settings-generator.js';
 import { generateProviderOverlays } from './provider-overlay.js';
 import { applyInstalledPathReplacement } from './path-replacement.js';
 import { verifyManifest } from './manifest.js';
+import * as yaml from 'js-yaml';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 
@@ -70,7 +71,13 @@ export async function installFramework(config) {
 
   // 2b. Create artifacts/ at PROJECT ROOT (visible to user — this is their output)
   const artifactsDir = join(targetDir, 'artifacts');
-  const artifactDirs = [
+  const isRuntimeV2 = config.runtimeVersion === 2;
+  const artifactDirs = isRuntimeV2 ? [
+    '0-WU', '1-Brief', '2-PRD',
+    '3-Architecture', '4-UX', '5-Phases',
+    '6-Tasks', '7-QA-Planning', '8-RAIL', '9-Release',
+    'handoffs', 'decisions',
+  ] : [
     '0-WU', '1-Brief', '2-PRD',
     '3-Architecture', '4-UX', '5-Phases',
     '6-Tasks', '7-QA-Planning', '8-QA-Visual', '9-QA-Implementation', '10-Deploy',
@@ -96,7 +103,7 @@ export async function installFramework(config) {
 
   // Create .chati/memories/ directory tree for Memory Layer
   const memoriesBase = join(targetDir, '.chati', 'memories');
-  const memoryDirs = [
+  const planningMemoryDirs = [
     'shared/durable', 'shared/daily', 'shared/session',
     'greenfield-wu/durable', 'greenfield-wu/daily',
     'brownfield-wu/durable', 'brownfield-wu/daily',
@@ -107,11 +114,16 @@ export async function installFramework(config) {
     'phases/durable', 'phases/daily',
     'tasks/durable', 'tasks/daily',
     'qa-planning/durable', 'qa-planning/daily',
+  ];
+  const legacyExecutionMemoryDirs = [
     'qa-implementation/durable', 'qa-implementation/daily',
     'qa-visual/durable', 'qa-visual/daily',
     'dev/durable', 'dev/daily',
     'devops/durable', 'devops/daily',
   ];
+  const memoryDirs = isRuntimeV2
+    ? [...planningMemoryDirs, 'rail/durable', 'rail/daily', 'release/durable', 'release/daily']
+    : [...planningMemoryDirs, ...legacyExecutionMemoryDirs];
   for (const dir of memoryDirs) {
     createDir(join(memoriesBase, dir));
   }
@@ -125,6 +137,11 @@ export async function installFramework(config) {
     generateProviderOverlays(targetDir, FRAMEWORK_SOURCE, allProviders);
   }
 
+  if (isRuntimeV2) {
+    pruneLegacyExecutionSurface(frameworkDir, allProviders || []);
+    pruneLegacyRegistryEntities(frameworkDir);
+  }
+
   // Bundle the CLI source into the framework dir so chati-router.js can run
   // commands locally without depending on `npx chati-dev` (which fetches from
   // the npm registry — version drift causes inconsistent behavior).
@@ -162,7 +179,7 @@ export async function installFramework(config) {
   // Write config.yaml
   writeFileSync(
     join(frameworkDir, 'config.yaml'),
-    generateConfigYaml({ version, projectType, language, selectedIDEs, allProviders }),
+    generateConfigYaml({ version, projectType, language, selectedIDEs, allProviders, runtimeVersion: config.runtimeVersion }),
     'utf-8'
   );
 
@@ -174,7 +191,12 @@ export async function installFramework(config) {
     const orchestratorPath = hasProviderOverlay
       ? `.chati.dev/.adapted/${ideProvider}/orchestrator/chati.md`
       : '.chati.dev/orchestrator/chati.md';
-    await configureIDE(targetDir, ideKey, selectedMCPs, { orchestratorPath, isSecondary: false, providerName: ideProvider });
+    await configureIDE(targetDir, ideKey, selectedMCPs, {
+      orchestratorPath,
+      isSecondary: false,
+      providerName: ideProvider,
+      runtimeVersion: config.runtimeVersion,
+    });
   }
 
   const hasClaude = selectedIDEs.includes('claude-code');
@@ -224,6 +246,55 @@ export async function installFramework(config) {
   ensureGitRepository(targetDir);
 }
 
+function pruneLegacyRegistryEntities(frameworkDir) {
+  const registryPath = join(frameworkDir, 'data', 'entity-registry.yaml');
+  if (!existsSync(registryPath)) return;
+  const registry = yaml.load(readFileSync(registryPath, 'utf-8'));
+  if (!registry?.entities) return;
+  const legacyPath = /\/(?:agents\/(?:build|deploy)\/|agents\/quality\/qa-(?:implementation|visual)\.md$|hooks\/post-dev\.js$|templates\/team-build-tasks\.yaml$|quality-gates\/implementation-gate\.md$|domains\/agents\/(?:dev|devops|qa-implementation|qa-visual)\.yaml$|tasks\/(?:dev-|devops-|qa-impl-))/;
+  let count = 0;
+  for (const entities of Object.values(registry.entities)) {
+    if (!entities || typeof entities !== 'object') continue;
+    for (const [name, entity] of Object.entries(entities)) {
+      if (legacyPath.test(entity?.path || '')) delete entities[name];
+      else if (entity?.path) count += 1;
+    }
+  }
+  registry.metadata = { ...(registry.metadata || {}), entity_count: count };
+  writeFileSync(registryPath, yaml.dump(registry, { lineWidth: -1 }), 'utf-8');
+}
+
+const V2_LEGACY_EXECUTION_PATHS = [
+  'agents/build',
+  'agents/deploy',
+  'agents/quality/qa-implementation.md',
+  'agents/quality/qa-visual.md',
+  'quality-gates/implementation-gate.md',
+  'templates/team-build-tasks.yaml',
+  'hooks/post-dev.js',
+  'domains/agents/dev.yaml',
+  'domains/agents/devops.yaml',
+  'domains/agents/qa-implementation.yaml',
+  'domains/agents/qa-visual.yaml',
+];
+
+function pruneLegacyExecutionSurface(frameworkDir, providers) {
+  const roots = [frameworkDir, ...providers.map(provider => join(frameworkDir, '.adapted', provider))];
+  for (const root of roots) {
+    for (const relativePath of V2_LEGACY_EXECUTION_PATHS) {
+      rmSync(join(root, relativePath), { recursive: true, force: true });
+    }
+    const tasksDir = join(root, 'tasks');
+    if (existsSync(tasksDir)) {
+      for (const entry of readdirSync(tasksDir)) {
+        if (/^(?:dev-|devops-|qa-impl-)/.test(entry)) {
+          rmSync(join(tasksDir, entry), { force: true });
+        }
+      }
+    }
+  }
+}
+
 export function ensureGitRepository(targetDir) {
   try {
     execFileSync('git', ['-C', targetDir, 'rev-parse', '--show-toplevel'], { stdio: 'ignore' });
@@ -415,7 +486,7 @@ Parse the JSON output. This single command already handled: license validation,
     // hook system and applies a baseline permission policy. THIS IS THE FILE
     // CLAUDE CODE READS — without it, every hook in chati.dev/hooks/ is dormant.
     // (Pre-v4.2.2 bug: this file was never written, hooks never ran.)
-    writeClaudeSettingsWithMerge(join(targetDir, '.claude', 'settings.json'));
+    writeClaudeSettingsWithMerge(join(targetDir, '.claude', 'settings.json'), { runtimeVersion: options.runtimeVersion });
 
     // Claude project-scope MCP config lives at the project root. Preserve
     // unknown user-managed servers while replacing CHATI's known entries.
@@ -883,9 +954,9 @@ export function copyCliDependencies(pkgDir, destNodeModules) {
  * If the file exists but is malformed: leave it alone, log a warning. We will
  * not silently destroy user data.
  */
-export function writeClaudeSettingsWithMerge(settingsPath) {
+export function writeClaudeSettingsWithMerge(settingsPath, options = {}) {
   createDir(dirname(settingsPath));
-  const fresh = JSON.parse(generateClaudeSettings());
+  const fresh = JSON.parse(generateClaudeSettings(options));
 
   if (!existsSync(settingsPath)) {
     writeFileSync(settingsPath, JSON.stringify(fresh, null, 2) + '\n', 'utf-8');
@@ -900,6 +971,16 @@ export function writeClaudeSettingsWithMerge(settingsPath) {
     return;
   }
 
+  if (options.runtimeVersion === 2 && existing.hooks) {
+    for (const groups of Object.values(existing.hooks)) {
+      if (!Array.isArray(groups)) continue;
+      for (const group of groups) {
+        if (Array.isArray(group.hooks)) {
+          group.hooks = group.hooks.filter(hook => !/\.chati\.dev\/hooks\/post-dev\.js$/.test(hook.command || ''));
+        }
+      }
+    }
+  }
   const merged = mergeClaudeSettings(existing, fresh);
   writeFileSync(settingsPath, JSON.stringify(merged, null, 2) + '\n', 'utf-8');
 }