contract-driven-delivery 2.0.1 → 2.0.3

package/CHANGELOG.md

@@ -1,5 +1,37 @@
 # Changelog
 
+## [2.0.3] - 2026-04-30
+
+### Fixed
+
+- `cdd-kit update` now syncs all installed skills (`cdd-new`, `cdd-close`,
+  `cdd-resume`, `cdd-init`, `contract-driven-delivery`) instead of only
+  `contract-driven-delivery`. Previously the four standalone skills were silently
+  left stale after an npm upgrade.
+- Backup path corrected from `.cdd-kit-backup/<ts>/skill/` to `.../skills/`
+  to cover all skill directories.
+
+## [2.0.2] - 2026-04-30
+
+### Added
+
+- `npm postinstall` hook: after `npm install -g` or `npm update -g`, skills and
+  agents in `~/.claude/` are automatically synced to the newly installed version.
+  The sync is a no-op when `cdd-kit init` has never been run (safe for CI and
+  local dev installs of the package itself). A backup of any locally modified
+  files is created in `~/.claude/.cdd-kit-backup/<timestamp>/` before overwriting,
+  matching the existing `cdd-kit update --yes` behaviour.
+- `cdd-kit update --postinstall` flag (internal): quiet mode that implies
+  `--yes`, locks provider to `claude`, and silently exits when the skill
+  directory is absent. Not intended for direct user invocation.
+
+### Migration note
+
+The first `npm update -g contract-driven-delivery` that brings in this version
+will **not** auto-sync (the postinstall hook did not exist in the previously
+installed version). Run `cdd-kit update --yes` once after this upgrade; all
+subsequent upgrades will auto-sync.
+
 ## [2.0.1] - 2026-04-30
 
 ### Fixed

package/bin/postinstall.js

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+import { spawnSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+
+try {
+  const cliPath = join(__dirname, '..', 'dist', 'cli', 'index.js');
+  if (!existsSync(cliPath)) process.exit(0);
+
+  spawnSync(process.execPath, [cliPath, 'update', '--postinstall'], {
+    stdio: 'inherit',
+    timeout: 30_000,
+  });
+  process.exit(0);
+} catch {
+  process.exit(0);
+}

package/dist/cli/index.js

@@ -11673,7 +11673,16 @@ function backupDir(dir, backupDest) {
   walk(dir, backupDest);
 }
 async function update(opts) {
-  log.blank();
+  if (opts.postinstall) {
+    if (!existsSync5(join6(SKILLS_HOME, "contract-driven-delivery"))) {
+      return;
+    }
+    opts.yes = true;
+    opts.provider = "claude";
+  }
+  const quiet = !!opts.postinstall;
+  if (!quiet)
+    log.blank();
   const cwd = process.cwd();
   const requestedProvider = opts.provider ?? "auto";
   if (!validateProviderOption(requestedProvider)) {
@@ -11682,35 +11691,38 @@ async function update(opts) {
   }
   const provider = inferProvider(cwd, requestedProvider);
   const updateClaudeAssets = provider === "claude" || provider === "both";
-  const skillDest = join6(SKILLS_HOME, "contract-driven-delivery");
   const agentDiff = updateClaudeAssets ? diffDir(ASSET.agents, AGENTS_HOME) : [];
-  const skillDiff = updateClaudeAssets ? diffDir(ASSET.skill, skillDest) : [];
+  const skillDiff = updateClaudeAssets ? readdirSync3(ASSET.skills, { withFileTypes: true }).filter((d) => d.isDirectory()).flatMap((d) => diffDir(join6(ASSET.skills, d.name), join6(SKILLS_HOME, d.name))) : [];
   const toWrite = [...agentDiff, ...skillDiff].filter((e) => e.action !== "skip");
   const toAdd = toWrite.filter((e) => e.action === "add");
   const toOver = toWrite.filter((e) => e.action === "overwrite");
   const toSkip = [...agentDiff, ...skillDiff].filter((e) => e.action === "skip");
-  log.info(`Provider: ${provider}`);
-  if (updateClaudeAssets) {
-    log.info(`Dry-run diff \u2014 agents: ${AGENTS_HOME}`);
-    log.info(`Dry-run diff \u2014 skill:  ${skillDest}`);
-  } else {
-    log.info("Codex provider has no global cdd-kit assets to update.");
-    log.info("Project files are preserved; run cdd-kit init --local-only --provider codex to add missing local guidance.");
+  if (!quiet) {
+    log.info(`Provider: ${provider}`);
+    if (updateClaudeAssets) {
+      log.info(`Dry-run diff \u2014 agents: ${AGENTS_HOME}`);
+      log.info(`Dry-run diff \u2014 skills: ${SKILLS_HOME}`);
+    } else {
+      log.info("Codex provider has no global cdd-kit assets to update.");
+      log.info("Project files are preserved; run cdd-kit init --local-only --provider codex to add missing local guidance.");
+    }
+    log.blank();
+    if (toAdd.length)
+      log.info(`  + ${toAdd.length} file(s) would be added`);
+    if (toOver.length)
+      log.warn(`  ~ ${toOver.length} file(s) would be overwritten (user edits lost without backup)`);
+    if (toSkip.length)
+      log.dim(`    ${toSkip.length} file(s) unchanged (skipped)`);
   }
-  log.blank();
-  if (toAdd.length)
-    log.info(`  + ${toAdd.length} file(s) would be added`);
-  if (toOver.length)
-    log.warn(`  ~ ${toOver.length} file(s) would be overwritten (user edits lost without backup)`);
-  if (toSkip.length)
-    log.dim(`    ${toSkip.length} file(s) unchanged (skipped)`);
   if (toWrite.length === 0) {
-    log.blank();
-    log.ok("Already up to date \u2014 nothing to write.");
-    log.blank();
+    if (!quiet) {
+      log.blank();
+      log.ok("Already up to date \u2014 nothing to write.");
+      log.blank();
+    }
     return;
   }
-  if (!opts.yes) {
+  if (!quiet && !opts.yes) {
     log.blank();
     log.info("Run with --yes to apply changes. Example:");
     log.dim("  cdd-kit update --yes");
@@ -11719,25 +11731,41 @@ async function update(opts) {
   }
   const timestamp2 = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
   const backupRoot = join6(homedir2(), ".claude", ".cdd-kit-backup", timestamp2);
-  log.blank();
-  log.info(`Backing up to ${backupRoot} \u2026`);
+  if (!quiet) {
+    log.blank();
+    log.info(`Backing up to ${backupRoot} \u2026`);
+  }
   backupDir(AGENTS_HOME, join6(backupRoot, "agents"));
-  backupDir(skillDest, join6(backupRoot, "skill"));
-  log.ok(`Backup complete: ${backupRoot}`);
-  log.blank();
+  backupDir(SKILLS_HOME, join6(backupRoot, "skills"));
+  if (!quiet)
+    log.ok(`Backup complete: ${backupRoot}`);
+  if (!quiet)
+    log.blank();
+  let totalSynced = 0;
   if (updateClaudeAssets) {
-    log.info(`Updating agents \u2192 ${AGENTS_HOME}`);
+    if (!quiet)
+      log.info(`Updating agents \u2192 ${AGENTS_HOME}`);
     const agentCount = applyDir(agentDiff);
-    log.ok(`${agentCount} agent file(s) updated.`);
-    log.info(`Updating skill  \u2192 ${skillDest}`);
+    if (!quiet)
+      log.ok(`${agentCount} agent file(s) updated.`);
+    totalSynced += agentCount;
+    if (!quiet)
+      log.info(`Updating skills \u2192 ${SKILLS_HOME}`);
     const skillCount = applyDir(skillDiff);
-    log.ok(`${skillCount} skill file(s) updated.`);
+    if (!quiet)
+      log.ok(`${skillCount} skill file(s) updated.`);
+    totalSynced += skillCount;
+  }
+  if (quiet) {
+    if (totalSynced > 0)
+      log.ok(`cdd-kit: synced ${totalSynced} file(s) to ~/.claude/`);
+  } else {
+    log.blank();
+    log.info("Project files (contracts/, specs/, tests/, ci/) were not changed.");
+    log.ok("Update complete.");
+    log.info(`Backup saved to: ${backupRoot}`);
+    log.blank();
   }
-  log.blank();
-  log.info("Project files (contracts/, specs/, tests/, ci/) were not changed.");
-  log.ok("Update complete.");
-  log.info(`Backup saved to: ${backupRoot}`);
-  log.blank();
 }
 
 // src/commands/new-change.ts
@@ -12657,7 +12685,7 @@ program.command("init").description(
     provider: opts.provider
   })
 );
-program.command("update").description("Update provider assets for the current project (does not overwrite project guidance files)").option("--yes", "Apply changes (default is dry-run)", false).option("--provider <provider>", "Provider adapter to update: auto, claude, codex, or both", "auto").action((opts) => update({ yes: opts.yes, provider: opts.provider }));
+program.command("update").description("Update provider assets for the current project (does not overwrite project guidance files)").option("--yes", "Apply changes (default is dry-run)", false).option("--provider <provider>", "Provider adapter to update: auto, claude, codex, or both", "auto").option("--postinstall", "Internal: invoked by npm postinstall; no-op if cdd has not been init-ed", false).action((opts) => update({ yes: opts.yes, provider: opts.provider, postinstall: opts.postinstall }));
 program.command("doctor").description("Inspect cdd-kit repo health, provider guidance, and context index freshness").option("--strict", "Treat warnings as errors", false).option("--json", "Print a machine-readable health report", false).option("--provider <provider>", "Provider adapter to inspect: auto, claude, codex, or both", "auto").option("--fix", "Auto-resolve safe warnings (stale context indexes, missing role bindings)", false).action(async (opts) => {
   const { doctor: doctor2 } = await Promise.resolve().then(() => (init_doctor(), doctor_exports));
   await doctor2({ strict: opts.strict, json: opts.json, provider: opts.provider, fix: opts.fix });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "contract-driven-delivery",
-  "version": "2.0.1",
+  "version": "2.0.3",
   "description": "Contract-driven delivery kit for AI coding agents with deterministic context indexes, manifest-backed read-scope governance, and orchestrated contracts-first delivery.",
   "keywords": [
     "contract-driven",
@@ -40,7 +40,8 @@
     "build": "node build.js",
     "test": "vitest run",
     "test:watch": "vitest",
-    "prepublishOnly": "node build.js && vitest run"
+    "prepublishOnly": "node build.js && vitest run",
+    "postinstall": "node bin/postinstall.js"
   },
   "engines": {
     "node": ">=18.0.0"