compound-workflow 1.4.7 → 1.6.0

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "compound-workflow",
-  "version": "1.4.6",
+  "version": "1.6.0",
   "description": "Clarify -> plan -> execute -> verify -> capture workflow: commands, skills, and agents for Claude Code",
   "author": {
     "name": "Compound Workflow"

package/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "compound-workflow",
-  "version": "1.4.6",
+  "version": "1.6.0",
   "description": "Clarify -> plan -> execute -> verify -> capture workflow for Cursor",
   "author": {
     "name": "Compound Workflow"
@@ -14,7 +14,7 @@
   ],
   "license": "MIT",
   "repository": "https://github.com/cjerochim/compound-workflow",
-  "commands": "src/.agents/commands",
-  "agents": "src/.agents/agents",
-  "skills": "src/.agents/skills"
+  "commands": "./src/.agents/commands",
+  "agents": "./src/.agents/agents",
+  "skills": "./src/.agents/skills"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "compound-workflow",
-  "version": "1.4.7",
+  "version": "1.6.0",
   "description": "Clarify → plan → execute → verify → capture. One Install action for Cursor, Claude, and OpenCode.",
   "license": "MIT",
   "repository": {
@@ -20,6 +20,7 @@
     "postinstall": "node scripts/postinstall.mjs",
     "generate:artifacts": "node scripts/generate-platform-artifacts.mjs",
     "check:artifacts": "node scripts/generate-platform-artifacts.mjs --check",
+    "check:version-parity": "node scripts/check-version-parity.mjs",
     "check:pack-readme": "node scripts/check-pack-readme.mjs",
     "test:install": "node --test tests/install-cli.test.mjs"
   },
@@ -27,6 +28,7 @@
     "node": ">=18"
   },
   "devDependencies": {
+    "@semantic-release/exec": "^6.0.0",
     "@semantic-release/git": "^10.0.1",
     "@semantic-release/npm": "^13.1.4",
     "semantic-release": "^25.0.3"

package/scripts/check-pack-readme.mjs

@@ -31,6 +31,9 @@ try {
 
 const files = Array.isArray(report) && report[0]?.files ? report[0].files : [];
 const hasRootReadme = files.some((file) => /^readme(?:\.[^/]+)?$/i.test(file.path));
+const hasGeneratedManifest = files.some((file) => file.path === "src/generated/opencode.managed.json");
+const hasCursorPlugin = files.some((file) => file.path === ".cursor-plugin/plugin.json");
+const hasClaudePlugin = files.some((file) => file.path === ".claude-plugin/plugin.json");
 
 if (!hasRootReadme) {
   console.error("Package guard failed: root README is missing from the packed tarball.");
@@ -38,4 +41,16 @@ if (!hasRootReadme) {
   process.exit(1);
 }
 
-console.log("Package guard passed: root README is present in npm pack output.");
+if (!hasGeneratedManifest) {
+  console.error("Package guard failed: src/generated/opencode.managed.json is missing from the packed tarball.");
+  console.error("Ensure 'src' is in package.json 'files' and the file is committed or generated before publish.");
+  process.exit(1);
+}
+
+if (!hasCursorPlugin || !hasClaudePlugin) {
+  console.error("Package guard failed: .cursor-plugin/plugin.json and .claude-plugin/plugin.json must be in the packed tarball.");
+  console.error("Ensure '.cursor-plugin' and '.claude-plugin' are in package.json 'files'.");
+  process.exit(1);
+}
+
+console.log("Package guard passed: root README, opencode.managed.json, and plugin manifests are present in npm pack output.");

package/scripts/check-version-parity.mjs

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+/**
+ * Exit 0 if package.json version matches .cursor-plugin/plugin.json and .claude-plugin/plugin.json.
+ * Used in CI to validate release artifact sync.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const root = path.resolve(__dirname, "..");
+
+const pkg = JSON.parse(fs.readFileSync(path.join(root, "package.json"), "utf8"));
+const cursorPlugin = JSON.parse(
+  fs.readFileSync(path.join(root, ".cursor-plugin", "plugin.json"), "utf8")
+);
+const claudePlugin = JSON.parse(
+  fs.readFileSync(path.join(root, ".claude-plugin", "plugin.json"), "utf8")
+);
+
+const expected = pkg.version;
+if (cursorPlugin.version !== expected || claudePlugin.version !== expected) {
+  console.error(
+    "Version mismatch: package.json=%s, .cursor-plugin/plugin.json=%s, .claude-plugin/plugin.json=%s",
+    expected,
+    cursorPlugin.version,
+    claudePlugin.version
+  );
+  process.exit(1);
+}

package/scripts/generate-platform-artifacts.mjs

@@ -133,9 +133,9 @@ function main() {
     keywords: ["workflow", "cursor", "agents", "commands", "skills"],
     license: pkg.license,
     repository: repositoryUrl,
-    commands: "src/.agents/commands",
-    agents: "src/.agents/agents",
-    skills: "src/.agents/skills",
+    commands: "./src/.agents/commands",
+    agents: "./src/.agents/agents",
+    skills: "./src/.agents/skills",
   };
 
   const openCodeManaged = {

package/scripts/install-cli.mjs

@@ -137,19 +137,17 @@ function readGeneratedManifest() {
   return manifest;
 }
 
-const GENERATED_MANIFEST = readGeneratedManifest();
-const PACKAGE_COMMAND_ROOT = GENERATED_MANIFEST.commandRoot;
-const PACKAGE_AGENT_ROOT = GENERATED_MANIFEST.agentRoot;
-const PACKAGE_SKILL_ROOT = GENERATED_MANIFEST.skillsPath;
-
-const LEGACY_MANAGED_COMMAND_ROOTS = [
-  ".agents/compound-workflow/commands",
-  PACKAGE_COMMAND_ROOT,
-];
-const LEGACY_MANAGED_AGENT_ROOTS = [
-  ".agents/compound-workflow/agents",
-  PACKAGE_AGENT_ROOT,
-];
+let GENERATED_MANIFEST;
+let PACKAGE_COMMAND_ROOT;
+let PACKAGE_AGENT_ROOT;
+let PACKAGE_SKILL_ROOT;
+
+function getLegacyCommandRoots() {
+  return [".agents/compound-workflow/commands", PACKAGE_COMMAND_ROOT, "src/.agents/commands"];
+}
+function getLegacyAgentRoots() {
+  return [".agents/compound-workflow/agents", PACKAGE_AGENT_ROOT, "src/.agents/agents"];
+}
 
 function managedCommandPath(entry) {
   const template = entry?.template;
@@ -167,14 +165,18 @@ function managedAgentPath(entry) {
 }
 
 function isManagedCommandPath(commandPath) {
-  return LEGACY_MANAGED_COMMAND_ROOTS.some((root) => commandPath.startsWith(`${root}/`));
+  return getLegacyCommandRoots().some((root) => commandPath.startsWith(`${root}/`));
 }
 
 function isManagedAgentPath(agentPath) {
-  return LEGACY_MANAGED_AGENT_ROOTS.some((root) => agentPath.startsWith(`${root}/`));
+  return getLegacyAgentRoots().some((root) => agentPath.startsWith(`${root}/`));
 }
 
-function writeOpenCodeJson(targetRoot, dryRun) {
+function writeOpenCodeJson(targetRoot, dryRun, isSelfInstall) {
+  const commandRoot = isSelfInstall ? "src/.agents/commands" : PACKAGE_COMMAND_ROOT;
+  const agentRoot = isSelfInstall ? "src/.agents/agents" : PACKAGE_AGENT_ROOT;
+  const skillRoot = isSelfInstall ? "src/.agents/skills" : PACKAGE_SKILL_ROOT;
+
   const opencodeAbs = path.join(targetRoot, "opencode.json");
   const existing = readJsonMaybe(opencodeAbs) ?? {};
   const next = structuredClone(existing);
@@ -183,10 +185,9 @@ function writeOpenCodeJson(targetRoot, dryRun) {
   next.skills = ensureObject(next.skills);
   next.skills.paths = Array.isArray(next.skills.paths) ? next.skills.paths : [];
 
-  // Full cutover: remove old symlink-based managed path and use direct package skills path.
   next.skills.paths = next.skills.paths.filter((p) => p !== ".agents/compound-workflow-skills");
-  if (!next.skills.paths.includes(PACKAGE_SKILL_ROOT)) {
-    next.skills.paths.unshift(PACKAGE_SKILL_ROOT);
+  if (!next.skills.paths.includes(skillRoot)) {
+    next.skills.paths.unshift(skillRoot);
   }
 
   next.command = ensureObject(next.command);
@@ -195,19 +196,17 @@ function writeOpenCodeJson(targetRoot, dryRun) {
   const commands = GENERATED_MANIFEST.commands;
   const agents = GENERATED_MANIFEST.agents;
 
-  // Upsert managed commands.
   for (const command of commands) {
     next.command[command.id] = {
       ...ensureObject(next.command[command.id]),
       description: command.description,
       agent: "build",
-      template: `@AGENTS.md\n@${PACKAGE_COMMAND_ROOT}/${command.rel}\nArguments: $ARGUMENTS\n`,
+      template: `@AGENTS.md\n@${commandRoot}/${command.rel}\nArguments: $ARGUMENTS\n`,
     };
   }
 
-  // Remove stale managed commands.
   const managedCommandTargets = new Set(
-    commands.map((command) => `${PACKAGE_COMMAND_ROOT}/${command.rel}`)
+    commands.map((command) => `${commandRoot}/${command.rel}`)
   );
   for (const [id, entry] of Object.entries(next.command)) {
     const commandPath = managedCommandPath(entry);
@@ -215,20 +214,18 @@ function writeOpenCodeJson(targetRoot, dryRun) {
     if (!managedCommandTargets.has(commandPath)) delete next.command[id];
   }
 
-  // Upsert managed agents.
   for (const agent of agents) {
     next.agent[agent.id] = {
       ...ensureObject(next.agent[agent.id]),
       description: agent.description,
       mode: "subagent",
-      prompt: `{file:${PACKAGE_AGENT_ROOT}/${agent.rel}}`,
+      prompt: `{file:${agentRoot}/${agent.rel}}`,
       permission: { ...ensureObject(next.agent[agent.id]?.permission), edit: "deny" },
     };
   }
 
-  // Remove stale managed agents.
   const managedAgentTargets = new Set(
-    agents.map((agent) => `${PACKAGE_AGENT_ROOT}/${agent.rel}`)
+    agents.map((agent) => `${agentRoot}/${agent.rel}`)
   );
   for (const [id, entry] of Object.entries(next.agent)) {
     const agentPath = managedAgentPath(entry);
@@ -316,16 +313,45 @@ function ensureDirs(targetRoot, dryRun) {
   }
 }
 
+function writePluginManifests(targetRoot, dryRun, isSelfInstall) {
+  const pathsBase = isSelfInstall ? "src/.agents" : "node_modules/compound-workflow/src/.agents";
+  const pathOverrides = {
+    commands: `${pathsBase}/commands`,
+    agents: `${pathsBase}/agents`,
+    skills: `${pathsBase}/skills`,
+  };
+  const cursorSrc = path.join(PACKAGE_ROOT, ".cursor-plugin", "plugin.json");
+  const claudeSrc = path.join(PACKAGE_ROOT, ".claude-plugin", "plugin.json");
+  const cursorManifest = readJsonMaybe(cursorSrc);
+  const claudeManifest = readJsonMaybe(claudeSrc);
+  if (!cursorManifest || !claudeManifest) return;
+
+  const cursorOut = { ...cursorManifest, ...pathOverrides };
+  const claudeOut = { ...claudeManifest, ...pathOverrides };
+  const cursorDir = path.join(targetRoot, ".cursor-plugin");
+  const claudeDir = path.join(targetRoot, ".claude-plugin");
+
+  if (dryRun) {
+    console.log("[dry-run] Would write .cursor-plugin/plugin.json and .claude-plugin/plugin.json");
+    return;
+  }
+  fs.mkdirSync(cursorDir, { recursive: true });
+  fs.mkdirSync(claudeDir, { recursive: true });
+  fs.writeFileSync(path.join(cursorDir, "plugin.json"), JSON.stringify(cursorOut, null, 2) + "\n", "utf8");
+  fs.writeFileSync(path.join(claudeDir, "plugin.json"), JSON.stringify(claudeOut, null, 2) + "\n", "utf8");
+  console.log("Wrote: .cursor-plugin/plugin.json, .claude-plugin/plugin.json");
+}
+
 function reportOpenCodeIntegration(targetRoot, dryRun) {
   if (dryRun) {
-    console.log("[dry-run] OpenCode integration check skipped.");
+    console.log("[dry-run] OpenCode integration check skipped (state would be updated by install).");
     return;
   }
 
   const opencodeAbs = path.join(targetRoot, "opencode.json");
   const opencode = readJsonMaybe(opencodeAbs) ?? {};
   const skillPaths = Array.isArray(opencode?.skills?.paths) ? opencode.skills.paths : [];
-  const hasSkillPath = skillPaths.includes(PACKAGE_SKILL_ROOT);
+  const hasSkillPath = skillPaths.includes(PACKAGE_SKILL_ROOT) || skillPaths.includes("src/.agents/skills");
 
   console.log(
     "OpenCode integration:",
@@ -338,13 +364,24 @@ function main() {
   const args = parseArgs(process.argv);
   const targetRoot = realpathSafe(args.root);
 
+  try {
+    GENERATED_MANIFEST = readGeneratedManifest();
+    PACKAGE_COMMAND_ROOT = GENERATED_MANIFEST.commandRoot;
+    PACKAGE_AGENT_ROOT = GENERATED_MANIFEST.agentRoot;
+    PACKAGE_SKILL_ROOT = GENERATED_MANIFEST.skillsPath;
+  } catch (err) {
+    console.error("Error: OpenCode manifest not found. Run 'npm run generate:artifacts' in the package or reinstall compound-workflow.");
+    process.exit(2);
+  }
+
   if (!fs.existsSync(PACKAGE_AGENTS_ROOT)) {
     console.error("Error: package agents dir not found:", PACKAGE_AGENTS_ROOT);
     process.exit(2);
   }
 
+  const isSelfInstall = realpathSafe(targetRoot) === realpathSafe(PACKAGE_ROOT);
   const pkgInTarget = path.join(targetRoot, "node_modules", "compound-workflow");
-  if (!fs.existsSync(pkgInTarget) && !args.dryRun) {
+  if (!isSelfInstall && !fs.existsSync(pkgInTarget) && !args.dryRun) {
     console.error("Error: compound-workflow not found in project. Run: npm install compound-workflow");
     process.exit(2);
   }
@@ -353,7 +390,8 @@ function main() {
   console.log("Package root:", PACKAGE_ROOT);
   console.log("OpenCode CLI detected:", hasCommand("opencode") ? "yes" : "no");
 
-  writeOpenCodeJson(targetRoot, args.dryRun);
+  writeOpenCodeJson(targetRoot, args.dryRun, isSelfInstall);
+  writePluginManifests(targetRoot, args.dryRun, isSelfInstall);
   reportOpenCodeIntegration(targetRoot, args.dryRun);
   writeAgentsMd(targetRoot, args.dryRun);
   ensureDirs(targetRoot, args.dryRun);

package/scripts/postinstall.mjs

@@ -38,7 +38,10 @@ function shouldSkip(targetRoot) {
 }
 
 function run() {
-  const targetRoot = process.env.INIT_CWD ? path.resolve(process.env.INIT_CWD) : "";
+  let targetRoot = process.env.INIT_CWD ? path.resolve(process.env.INIT_CWD) : process.cwd();
+  if (!process.env.INIT_CWD) {
+    console.log("[compound-workflow] INIT_CWD not set; using process.cwd() as project root.");
+  }
   const skipReason = shouldSkip(targetRoot);
   if (skipReason) {
     console.log(`[compound-workflow] postinstall skipped (${skipReason})`);

package/src/.agents/commands/workflow/plan.md

@@ -833,6 +833,8 @@ Write the complete plan file to `docs/plans/YYYY-MM-DD-<type>-<slug>-plan.md`. T
 
 Confirm: "Plan written to docs/plans/[filename]"
 
+**Auto technical review (when Fidelity is Medium or High):** After writing the plan file, if the declared **Fidelity is Medium or High**, automatically run technical review: run **Task planning-technical-reviewer(plan_path)** when the environment can run the Task, or load the `technical-review` skill so the subagent is used when available. Use the plan path just written. If Fidelity is Low, skip this step; the user can still choose "Technical review" from Post-Generation Options or call `/workflow:tech-review` later.
+
 **Non-interactive mode:** When the invocation is non-interactive (e.g., `workflow:plan` run by automation, CI, or with an explicit non-interactive flag/convention), skip AskQuestion calls and do not present Post-Generation Options. For determinism, the repo should define the flag or convention (e.g., in `AGENTS.md` Repo Config Block or a documented env var). Still **declare** Fidelity, Confidence, Solution scope, Spike evaluation, Spikes needed, Research mode, and Open questions in the required announcement format before writing the plan. Use these defaults when user input is unavailable: fidelity = Medium, confidence = Medium, solution_scope = full_remediation, spike evaluation = not-required unless risky-work triggers are present, spikes needed = n/a when spike evaluation is not required, research mode = local + external for Medium/High risk topics else local only. Proceed directly to writing the plan file and then exit or return the plan path as output.
 
 **Required in plan frontmatter:** Add these fields to the plan file:

package/src/.agents/commands/workflow/tech-review.md

@@ -0,0 +1,28 @@
+---
+name: tech-review
+invocation: workflow:tech-review
+description: Run technical review on a plan (technical correctness before build). Optional plan path or latest in docs/plans/.
+argument-hint: "[optional: plan path]"
+---
+
+# /workflow:tech-review
+
+Run technical review on a feature approach or plan document. Checks technical alignment with architecture, code standards, and quality before build. Does not edit the plan; use `document-review` after technical review to apply agreed changes.
+
+Contract precedence: if this command conflicts with other workflow docs, follow `docs/principles/workflow-baseline-principles.md`, then `src/AGENTS.md`, then this command.
+
+## Inputs
+
+- **Plan path (optional):** `$ARGUMENTS` — path to the plan file (e.g. `docs/plans/YYYY-MM-DD-<type>-<slug>-plan.md`).
+- If not provided: use the plan from context, or discover the most recent plan in `docs/plans/` (e.g. by date prefix) or `docs/brainstorms/`.
+
+## Execution
+
+1. Resolve the plan document (from argument, context, or discovery).
+2. Load the `technical-review` skill and run it on that plan. The skill runs **Task planning-technical-reviewer(plan_path)** when the environment can run the Task, then synthesizes the verdict and findings queue.
+3. After technical review, if the user agrees to changes, recommend loading `document-review` to update the plan, then proceed to build when ready.
+
+## Guardrails
+
+- Do not modify the plan in this command; technical review is read-only. Apply changes via document-review or user edit.
+- Do not create commits, push branches, or create pull requests.

package/src/.agents/skills/technical-review/SKILL.md

@@ -23,9 +23,8 @@ Primary execution model: run an independent planning-phase pass first using `pla
 
 ## Step 1.5: Independent Fresh-Context Pass (Required)
 
-- If `planning-technical-reviewer` exists under `.agents/agents/review/`, run it on the plan first.
-- Treat its blocking findings as pre-build blockers.
-- If the agent is not available, explicitly state: "planning-technical-reviewer unavailable; running direct technical review (degraded bias resistance)".
+- Run **Task planning-technical-reviewer(plan_path)** when the environment can run the Task; treat its output as the independent pass and its blocking findings as pre-build blockers.
+- If the Task cannot be run (e.g. no subagent/mcp_task support), explicitly state: "planning-technical-reviewer unavailable; running direct technical review (degraded bias resistance)" and perform the review in-context (load the planning-technical-reviewer agent doc and execute that review in this conversation), then synthesize the verdict.
 
 ## Step 1.6: Build Findings Queue (Required)
 

package/src/AGENTS.md

@@ -30,9 +30,10 @@ This `.agents` workspace is portable and command-first.
 4. `/workflow:review` -> validate quality
 5. `/workflow:compound` -> capture durable learnings
 
-Optional manual step:
+Optional manual steps:
 
 - `/workflow:triage` -> explicitly curate/prioritize backlog items before execution when needed
+- `/workflow:tech-review` -> run technical review on a plan (technical correctness before build); optional plan path
 
 Continuous improvement:
 
@@ -43,9 +44,9 @@ Onboarding:
 
 - `/install` -> one action: writes opencode.json, merges AGENTS.md, creates dirs, preserves Repo Config Block (run `npx compound-workflow install` in the project)
 
-This workspace currently implements `brainstorm`, `plan`, `triage`, `work`, `review`, `compound`, and optional QA utilities.
+This workspace currently implements `brainstorm`, `plan`, `triage`, `work`, `review`, `tech-review`, `compound`, and optional QA utilities.
 
-Use the canonical command names (`/workflow:plan`, `/workflow:work`, `/workflow:review`, etc.). This template does not ship aliases.
+Use the canonical command names (`/workflow:plan`, `/workflow:work`, `/workflow:review`, `/workflow:tech-review`, etc.). This template does not ship aliases.
 
 ## Contract Precedence
 
@@ -168,7 +169,7 @@ worktree_bootstrap_notes:
 
 ## Implemented Components (Current Scope)
 
-- Commands: `workflow:brainstorm`, `workflow:plan`, `workflow:triage`, `workflow:work`, `workflow:review`, `workflow:compound` (under `.agents/commands/workflow/`), plus `test-browser`, `metrics`, `assess`, `install` (root commands)
+- Commands: `workflow:brainstorm`, `workflow:plan`, `workflow:triage`, `workflow:work`, `workflow:review`, `workflow:tech-review`, `workflow:compound` (under `.agents/commands/workflow/`), plus `test-browser`, `metrics`, `assess`, `install` (root commands)
 - Skills: `brainstorming`, `document-review`, `technical-review`, `compound-docs` (alias: `compound_doc`), `capture-skill`, `file-todos`, `agent-browser`, `git-worktree`, `process-metrics`, `react-ddd-mvc-frontend`, `xstate-actor-orchestration`, `standards`, `pii-protection-prisma`, `financial-workflow-integrity`, `audit-traceability`, `data-foundations`
 - Agents:
   - `repo-research-analyst`

package/src/generated/opencode.managed.json

@@ -44,6 +44,11 @@
       "description": "Review a PR/branch/diff with structured findings. Does not implement fixes unless explicitly requested.",
       "rel": "workflow/review.md"
     },
+    {
+      "id": "workflow:tech-review",
+      "description": "Run technical review on a plan (technical correctness before build). Optional plan path or latest in docs/plans/.",
+      "rel": "workflow/tech-review.md"
+    },
     {
       "id": "workflow:triage",
       "description": "Manual triage command to prioritize todo files into an executable ready queue (priority, dependencies, recommended action)",