devflow-kit 0.4.0 → 0.6.0

package/CHANGELOG.md

@@ -5,6 +5,134 @@ All notable changes to DevFlow will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.6.0] - 2025-11-03
+
+### Added
+
+#### Complete PR Workflow Commands
+- **`/plan` command** - Interactive planning with design decisions
+  - Extracts actionable tasks from discussion
+  - Presents tasks to user for selection via interactive UI
+  - Saves only chosen tasks to todo list
+  - Enables focused, intentional work sessions
+- **`/pull-request` command** - Smart PR creation with auto-generated descriptions
+  - Analyzes all commits and changes in branch
+  - Generates comprehensive PR description automatically
+  - Includes summary, key changes, and test plan
+  - Supports `--draft` flag and custom base branch
+  - Uses new pull-request sub-agent for deep analysis
+- **`/resolve-comments` command** - Systematic PR feedback resolution
+  - Fetches PR review comments via GitHub CLI
+  - Triages comments with user (implement, respond, defer)
+  - Implements changes and updates PR
+  - Posts replies to reviewers
+  - Tracks completion status
+
+#### Enhanced Audit System
+- **Three-category reporting** - All 9 audit agents refactored for clearer feedback
+  - **🔴 Issues in Your Changes** - NEW vulnerabilities/problems introduced (BLOCKING)
+  - **⚠️ Issues in Code You Touched** - Problems near your changes (SHOULD FIX)
+  - **ℹ️ Pre-existing Issues** - Legacy problems unrelated to PR (INFORMATIONAL)
+  - Prevents scope creep in code reviews by clearly separating what you introduced
+- **New pull-request sub-agent** - Comprehensive PR analysis specialist
+  - Analyzes commit history and code changes
+  - Generates structured PR descriptions
+  - Identifies breaking changes and migration paths
+  - Creates test plans and verification steps
+
+### Changed
+
+#### Code Review Command Rewrite
+- **Completely rewritten `/code-review` command** - Better orchestration and synthesis
+  - Orchestrates all audit sub-agents in parallel for faster execution
+  - Synthesizes findings from three-category reports
+  - Generates actionable summary with clear priorities
+  - Separates blocking issues from informational findings
+  - Provides focused feedback on what actually needs fixing
+
+#### Type Safety Improvements
+- **Enhanced error handling in CLI** - Proper TypeScript type guards
+  - Added `NodeSystemError` interface with proper typing
+  - Created `isNodeSystemError()` type guard function
+  - Replaced `error: any` with `error: unknown` in init command
+  - Safely checks `error.code` property with type guard
+  - Maintains runtime behavior while improving type safety
+
+### Fixed
+
+#### Documentation
+- **README CLI examples** - Corrected command invocation format
+  - Fixed examples to use `npx devflow-kit` instead of `devflow`
+  - Ensures users can successfully run installation commands
+- **Statusline metrics** - Fixed container-specific resource monitoring
+  - Now reads container-specific CPU and memory metrics correctly
+  - Removed redundant CPU and memory metrics from statusline implementation
+  - Improved accuracy for Docker container environments
+
+---
+
+[0.6.0]: https://github.com/dean0x/devflow/compare/v0.5.0...v0.6.0
+
+## [0.5.0] - 2025-10-24
+
+### Added
+
+#### Installation Scope Support
+- **Two-tier installation strategy** - Choose between user-wide and project-specific installation
+  - **User scope** (default): Install to `~/.claude/` for all projects
+  - **Local scope**: Install to `<git-root>/.claude/` for current project only
+  - Interactive prompt with clear descriptions when `--scope` flag not provided
+  - CLI flag: `devflow init --scope <user|local>`
+  - Automatic .gitignore updates for local scope (excludes `.claude/` and `.devflow/`)
+  - Perfect for team projects where DevFlow should be project-specific
+
+#### Smart Uninstall with Scope Detection
+- **Auto-detection of installed scopes** - Intelligently finds and removes DevFlow installations
+  - Automatically detects which scopes have DevFlow installed (user and/or local)
+  - Default behavior: Remove from all detected scopes
+  - Manual override: `--scope <user|local>` to target specific scope
+  - Clear feedback showing which scopes are being uninstalled
+  - Graceful handling when no installation found
+
+### Changed
+
+#### Code Quality Improvements
+- **Extracted shared utilities** - Eliminated code duplication between init and uninstall commands
+  - Created `src/cli/utils/paths.ts` for path resolution functions
+  - Created `src/cli/utils/git.ts` for git repository operations
+  - Reduced duplication by ~65 lines
+  - Single source of truth for path and git logic
+
+#### Performance Optimizations
+- **Eliminated redundant git detection** - Cache git root result for reuse
+  - Previously called `git rev-parse` twice during installation
+  - Now cached once and reused throughout installation process
+  - Faster installation, especially in large repositories
+
+### Fixed
+
+#### CI/CD Compatibility
+- **TTY detection for interactive prompts** - Prevents hanging in non-interactive environments
+  - Detects when running in CI/CD pipelines, Docker containers, or automated scripts
+  - Falls back to default scope (user) when no TTY available
+  - Clear messaging when non-interactive environment detected
+  - Explicit instructions for CI/CD usage: `devflow init --scope <user|local>`
+
+#### Security Hardening
+- **Environment variable path validation** - Prevents malicious path overrides
+  - Validates `CLAUDE_CODE_DIR` and `DEVFLOW_DIR` are absolute paths
+  - Warns when paths point outside user's home directory
+  - Prevents path traversal attacks via environment variables
+  - Security-first approach to custom path configuration
+
+### Documentation
+- **Installation Scopes section** in README with clear use cases
+- **Updated CLI commands table** with scope options for init and uninstall
+- **Migration guide** for existing users (scope defaults to user for compatibility)
+- **.gitignore patterns** documented for local scope installations
+
+---
+
 ## [0.4.0] - 2025-10-21
 
 ### Added
@@ -357,6 +485,7 @@ devflow init
 
 ---
 
+[0.5.0]: https://github.com/dean0x/devflow/releases/tag/v0.5.0
 [0.4.0]: https://github.com/dean0x/devflow/releases/tag/v0.4.0
 [0.3.3]: https://github.com/dean0x/devflow/releases/tag/v0.3.3
 [0.3.2]: https://github.com/dean0x/devflow/releases/tag/v0.3.2

package/README.md

@@ -9,6 +9,29 @@ A comprehensive collection of Claude Code commands and configurations designed t
 npx devflow-kit init
 ```
 
+### Installation Scopes
+
+DevFlow supports two installation scopes:
+
+**User Scope (Default)** - Install for all projects
+```bash
+npx devflow-kit init --scope user
+# Or interactively: npx devflow-kit init (prompts for scope)
+```
+- Installs to `~/.claude/` and `~/.devflow/`
+- Available across all projects
+- Recommended for personal use
+
+**Local Scope** - Install for current project only
+```bash
+npx devflow-kit init --scope local
+```
+- Installs to `<git-root>/.claude/` and `<git-root>/.devflow/`
+- Only available in the current project
+- Recommended for team projects where DevFlow should be project-specific
+- Requires a git repository (run `git init` first)
+- Add `.claude/` and `.devflow/` to `.gitignore` (done automatically)
+
 That's it! DevFlow is now installed and ready to use in Claude Code.
 
 ## What's Included
@@ -47,12 +70,15 @@ This gives you the best of both worlds: automatic assistance when needed, manual
 |---------|---------|-------------|
 | `/catch-up` | Smart summaries for starting new sessions with status validation | Starting a session |
 | `/devlog` | Development log for comprehensive session documentation | Ending a session |
-| `/plan-next-steps` | Extract actionable next steps from current discussion | After planning discussion |
-| `/implement` | Smart interactive implementation orchestrator with todo triage | After planning, ready to implement todos |
-| `/debug` | Systematic debugging workflow with hypothesis testing | When errors occur, tests fail, or investigating issues |
 | `/research` | Pre-implementation research and approach analysis | Before implementing unfamiliar features or integrations |
+| `/debug` | Systematic debugging workflow with hypothesis testing | When errors occur, tests fail, or investigating issues |
+| `/plan` | Interactive planning with task selection and prioritization | After research/review, deciding which tasks to tackle |
+| `/plan-next-steps` | Extract actionable next steps from current discussion | After planning discussion, quick task capture |
+| `/implement` | Smart interactive implementation orchestrator with todo triage | After planning, ready to implement todos |
 | `/code-review` | Comprehensive code review using specialized sub-agents | Before committing or creating PR |
 | `/commit` | Intelligent atomic commit creation with safety checks | When ready to commit |
+| `/pull-request` | Create PR with comprehensive analysis and smart description | After commits, ready to create PR |
+| `/resolve-comments` | Systematically address PR review feedback | After PR feedback, need to resolve comments |
 | `/release` | Automated release workflow with version management and publishing | Creating a new release |
 
 ### 🤖 Sub-Agents
@@ -67,10 +93,13 @@ This gives you the best of both worlds: automatic assistance when needed, manual
 | `audit-dependencies` | Dependencies | Dependency management and security analysis |
 | `audit-database` | Database | Database design and optimization review |
 | `audit-documentation` | Documentation | Docs-code alignment, API accuracy, comment quality |
+| `audit-typescript` | TypeScript | Type safety enforcement and TypeScript code quality |
 | `catch-up` | Context Restoration | Project status and context restoration with validation |
 | `commit` | Git Operations | Intelligent commit creation with safety checks |
+| `pull-request` | PR Creation | Analyze commits/changes and generate comprehensive PR descriptions |
 | `research` | Implementation Planning | Pre-implementation research, approach analysis, and planning |
 | `release` | Release Automation | Project-agnostic release workflow with version management |
+| `debug` | Debugging | Systematic debugging with hypothesis testing and issue tracking |
 
 **How Sub-Agents Work:**
 - Specialized AI assistants with deep expertise in specific domains
@@ -125,14 +154,25 @@ Covers patterns for all major languages and operating systems.
 
 ### During Development
 1. **Skills auto-activate** - `research` skill triggers for unfamiliar features, `pattern-check` validates architecture
-2. **Code with confidence** - Skills catch anti-patterns and violations during implementation
-3. `/code-review` - Review changes before committing
-4. `/commit` - Create intelligent atomic commits
+2. **Plan your work** - `/plan` to select which tasks to tackle, or `/plan-next-steps` for quick capture
+3. **Implement systematically** - `/implement` to work through todos with guidance
+4. **Code with confidence** - Skills catch anti-patterns and violations during implementation
+5. `/code-review` - Review changes before committing
+6. `/commit` - Create intelligent atomic commits
+
+### Creating Pull Requests
+1. `/code-review` - Comprehensive branch review
+2. `/commit` - Final commits with validation
+3. `/pull-request` - Create PR with smart description
+4. Wait for review feedback
+5. `/resolve-comments` - Address feedback systematically
+6. Repeat steps 4-5 until approved
 
 ### Ending a Session
 1. `/devlog` - Document decisions and state
 2. `/code-review` - Review branch before creating PR
 3. `/commit` - Final commits with validation
+4. `/pull-request` - Create PR if ready
 
 ### Creating a Release
 1. `/code-review` - Comprehensive branch review
@@ -154,10 +194,12 @@ Covers patterns for all major languages and operating systems.
 
 | Command | Purpose | Options |
 |---------|---------|---------|
-| `devflow init` | Initialize DevFlow for Claude Code | `--skip-docs` - Skip creating `.docs/` structure |
-| `devflow uninstall` | Remove DevFlow from Claude Code | `--keep-docs` - Keep `.docs/` directory |
+| `npx devflow-kit init` | Initialize DevFlow for Claude Code | `--scope <user\|local>` - Installation scope (user: user-wide, local: project-only)<br>`--skip-docs` - Skip creating `.docs/` structure |
+| `npx devflow-kit uninstall` | Remove DevFlow from Claude Code | `--scope <user\|local>` - Uninstall from specific scope only (default: auto-detect all)<br>`--keep-docs` - Keep `.docs/` directory |
 
-**What `devflow init` does:**
+**What `npx devflow-kit init` does:**
+
+**User Scope** (default):
 - Installs commands to `~/.claude/commands/devflow/`
 - Installs sub-agents to `~/.claude/agents/devflow/`
 - Installs skills to `~/.claude/skills/devflow/`
@@ -166,6 +208,16 @@ Covers patterns for all major languages and operating systems.
 - Creates `.claudeignore` at git repository root
 - Creates `.docs/` structure for project documentation
 
+**Local Scope** (`--scope local`):
+- Installs commands to `<git-root>/.claude/commands/devflow/`
+- Installs sub-agents to `<git-root>/.claude/agents/devflow/`
+- Installs skills to `<git-root>/.claude/skills/devflow/`
+- Installs scripts to `<git-root>/.devflow/scripts/`
+- Creates `<git-root>/.claude/settings.json` (statusline and model)
+- Creates `.claudeignore` at git repository root
+- Creates `.docs/` structure for project documentation
+- Adds `.claude/` and `.devflow/` to `.gitignore`
+
 **First Run:**
 ```bash
 devflow init

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/cli/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+DpC,eAAO,MAAM,WAAW,SAsfpB,CAAC"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/cli/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4CpC,eAAO,MAAM,WAAW,SAmgBpB,CAAC"}