dev-booster 1.6.0 → 1.7.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dev-booster",
-  "version": "1.6.0",
+  "version": "1.7.0",
   "description": "Reusable AI development kit with manual boosters, governance, and project bootstrap",
   "type": "module",
   "scripts": {

package/src/index.js

@@ -257,16 +257,31 @@ function runUpdate() {
     { name: 'hub', src: path.join(templateRoot, 'hub'), dest: path.join(kitRoot, 'hub') },
   ]
 
+  const coreFiles = [
+    { name: 'MANIFEST.md', src: path.join(templateRoot, 'MANIFEST.md'), dest: path.join(kitRoot, 'MANIFEST.md') },
+    { name: 'rules/GUIDE.md', src: path.join(templateRoot, 'rules', 'GUIDE.md'), dest: path.join(kitRoot, 'rules', 'GUIDE.md') },
+    { name: 'rules/PROTOCOL.md', src: path.join(templateRoot, 'rules', 'PROTOCOL.md'), dest: path.join(kitRoot, 'rules', 'PROTOCOL.md') },
+  ]
+
   for (const target of updateTargets) {
     if (!dryRun) syncDir(target.src, target.dest)
     console.log(`▸ .devbooster/${target.name}/`)
     console.log(`  status: ${dryRun ? 'would be updated' : 'updated successfully'}`)
   }
 
+  for (const file of coreFiles) {
+    if (!dryRun && fs.existsSync(file.src)) {
+      fs.mkdirSync(path.dirname(file.dest), { recursive: true })
+      fs.copyFileSync(file.src, file.dest)
+    }
+    console.log(`▸ .devbooster/${file.name}`)
+    console.log(`  status: ${dryRun ? 'would be updated' : 'updated successfully'}`)
+  }
+
   console.log('')
-  console.log('▸ rules/')
+  console.log('▸ rules/ (Whitelabel files)')
   console.log('  status: preserved')
-  console.log('  action: no local files were overwritten')
+  console.log('  action: user-customized rules were not overwritten')
   console.log('')
   console.log('▸ DEVBOOSTER_INIT.md')
   console.log('  status: preserved')

package/template/.devbooster/boosters/code-audit.md

@@ -54,8 +54,8 @@ Only switch to execution mode after the user provides the commit scope.
 3. **Run Operational Audit Scripts:**
     - **Mandatory when relevant:** `security_scan.py`, `type_coverage.py`, `lint_runner.py` (if they exist).
 4. **React/Next.js Frontend Triage (3-Phase Flow):** ONLY IF the project uses React/Next.js:
-    - **Run Silently**: Execute `npx -y react-doctor@latest --json --diff <scope> --yes > @booster-generated/diagnostics/<slug-name-audit>.json` in the background, scoped to the user's requested commits.
-    - **Timeout Safety**: If the command hangs for more than 30 seconds, manually abort it (Kill/Ctrl+C) and proceed with the rest of the audit, gracefully skipping the React Doctor step.
+    - **Execute & Wait**: Run `npx -y react-doctor@latest --json --diff <scope> --yes > @booster-generated/diagnostics/<slug-name-audit>.json` synchronously. You MUST wait for the command to fully complete before moving to the next step. Do not run it in the background.
+    - **Timeout Safety**: If the command hangs for more than 120 seconds, manually abort it (Kill/Ctrl+C) and proceed with the rest of the audit, gracefully skipping the React Doctor step.
     - **Filter (Python)**: Run `.devbooster/hub/scripts/doctor_parser.py @booster-generated/diagnostics/<slug-name-audit>.json` to process the JSON.
     - **Report & Decide**: Present "Immediate Actions" (Critical errors) in detail by line. Present "Cosmetic Debt" (Style rules) as a grouped numerical summary. Append "Content extracted from diagnostics.json".
     - **ZERO Auto-Fix**: Do NOT modify code automatically. Ask the user: "Do you want to fix only the critical recommendations, everything, or specific items?" and wait for authorization.