devflow-kit 2.0.0 → 2.0.1

package/CHANGELOG.md

@@ -5,7 +5,18 @@ All notable changes to Devflow will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [2.0.1] - 2026-08-23
+
+### Changed
+- **Release workflow hardening**: the version-bump commit stages `package.json`, `package-lock.json`, and `CHANGELOG.md` explicitly instead of `git add -A` (the 2.0.0 release committed the `release-notes.md` CI artifact this way; the file is now also gitignored), and `actions/checkout`/`actions/setup-node` are bumped v4 → v7 to clear the Node 20 runtime deprecation.
+- **npm tarball changelog**: the bundled CHANGELOG.md now carries the corrected 2.0.0 section (the 2.0.0 tarball predated the release-notes fix).
+
+### Fixed
+- **`bump-version.ts` stale-header guard**: the script treated any pre-existing `## [{version}]` header as "already bumped" and skipped stamping `[Unreleased]` — which is how the 2.0.0 release initially shipped an aborted April bump's section as its release notes. It now fails loudly when a `## [{version}]` header coexists with a non-empty `[Unreleased]` section, and only skips when `[Unreleased]` is empty.
+
+---
+
+## [2.0.0] - 2026-08-23
 
 ### BREAKING CHANGES
 
@@ -120,6 +131,8 @@ renamed `review_pass`. Any custom MDS host that imports `_engine.mds` and calls
 
 - **Dynamic compliance composition** (`src/core/compliance-compose.ts`): The compliance skill (`devflow:compliance/SKILL.md`) and compliance rule are now composed at install time from per-framework fragment files (`src/assets/skills/compliance/frameworks/{id}/fragment.md`) rather than being installed as static all-six blobs. Each fragment provides `## Mapping` (6-column control row), `## Reference` (reference-table blurb), `## Checklist` (0–2 items), and `## Rule` (one ≤200-char bullet) sections that populate 5 SKILL.md tokens (`SCOPE`, `ACTIVE`, `MAPPING`, `CHECKLIST`, `REFERENCES`) and 1 rule token (`RULE_BULLETS`). The existing `${DEVFLOW_COMPLIANCE_FRAMEWORKS}` rule placeholder is retained as a second token and handled by the existing `stampComplianceRule`. Installed artifact layout is unchanged — `references/{id}.md` basenames are preserved even though source files moved to `frameworks/{id}/reference.md`. Shadow SKILL.md without composition tokens passes through byte-identical (C1 passthrough); `devflow compliance --status` now shows `[shadowed, composition skipped — per-framework sections absent]` for such shadows (and `[shadowed]` for shadows that do contain tokens). The `--status` Skill line shows `[shadowed]` when a shadow with tokens is present.
 
+- **`devflow:explore` skill** — structured codebase exploration with optional knowledge-base creation
+
 ### Changed
 - **`devflow skills list-shadowed` renamed to `devflow skills list`** (BREAKING): `skills list` now shows all known skills with install and shadow state via `validateSkillShadow`. The `list-shadowed` subcommand is removed.
 - **`/resolve` pipeline split** (BREAKING): the monolithic Resolver agent (which both validated and fixed issues) is replaced by a Triage + Code pair. The Triage agent (opus) runs a blast-radius disposition pass; the Code agent (sonnet, `OPERATION: issue-fix`) applies fixes. Plugins that declared the `resolver` agent must update their agent list to `[git, triage, code, simplify, validate]`.
@@ -133,6 +146,9 @@ renamed `review_pass`. Any custom MDS host that imports `_engine.mds` and calls
 - **Learning**: Renamed artifact paths: `commands/learned/` → `commands/self-learning/`, `skills/learned-{name}/` → `skills/{name}/`
 - **Learning**: Skill artifacts now include `user-invocable: false`, Iron Law section, and `self-learning:` name prefix
 
+- **State-aware re-init** (`devflow init`): re-running init now reads the prior manifest, feature config, and `settings.json` and pre-seeds every prompt with your existing choices — your installed plugin set, feature toggles, Claude Code flags, and view mode are preserved instead of reset to defaults. The Recommended/Advanced question is skipped entirely on re-init. Use `--reset` for a factory reset that ignores all prior state (mutually exclusive with `--plugin`).
+- **`self-review` skill** renamed to `quality-gates`
+
 ### Removed
 - **`/dynamic-wave` command** (BREAKING): the thin full-pipeline driver is removed. Run the three stages directly: `/dynamic-tickets` → `/dynamic-plan` → `/dynamic-build`. The `post-wave-report` Git-agent spawn moved into `dynamic-build`, which now owns `.devflow/docs/waves/{slug}/` output. The stale installed command file is removed automatically by the orphan sweep on the next `devflow init`. See Breaking Changes for the migration path.
 - **`devflow-audit-claude` plugin and `/audit-claude` command** (BREAKING): The CLAUDE.md audit plugin is removed. `--plugin=audit-claude` is now rejected by `devflow init`; stale `devflow-audit-claude` entries in existing manifests are silently pruned by `DELETED_PLUGIN_NAMES` on the next partial reinstall. The `claude-md-auditor` agent and `audit-claude.md` command are deleted; the orphan sweep removes any previously installed copies automatically.
@@ -144,6 +160,9 @@ renamed `review_pass`. Any custom MDS host that imports `_engine.mds` and calls
 - **Agent Teams init flags** (BREAKING): `--teams` / `--no-teams` flags removed from `devflow init`. Projects that were using Devflow-managed `teammateMode: "auto"` will have that setting cleaned up automatically on the next `devflow init` or `devflow uninstall` run.
 - **Resolver agent**: retired in favor of the Triage + Code split. The `resolver` agent file is removed from installs on `devflow init` by the orphan sweep.
 
+- **`implementation-patterns` skill** (merged into `patterns`)
+- **`search-first` skill** (merged into `research`)
+
 ### Fixed
 - **`devflow agents` TUI — four defects fixed**:
   - **Fix 1 (alias rendering)**: GPT model aliases (`sol`, `terra`, `luna`) previously rendered with a parenthetical canonical-id annotation (`sol (gpt-5.6-sol)`). The picker cycle is now built from `pickerNames(catalog.models)` — aliases only; canonical id only when a model has no aliases. Aliases render bare. Stored canonical ids (e.g. `gpt-5.6-sol` saved via `--set`) are normalized to their alias on read by `buildPickerNameMap` — no disk write. `catalog.aliasToId` is no longer referenced in `render.ts`.
@@ -159,29 +178,6 @@ renamed `review_pass`. Any custom MDS host that imports `_engine.mds` and calls
 
 ---
 
-## [2.0.0] - 2026-04-05
-
-### Added
-- **EXPLORE depth classification** (GUIDED/ORCHESTRATED) with skimmer-based codebase analysis
-- **`devflow:explore`** orchestration skill for ambient EXPLORE intent
-- **TDD enforcement**: `test-driven-development` skill auto-loads for IMPLEMENT, PLAN, and CODER intents
-- **Stale skill name detector** in tests covers all renamed/deleted skills
-
-### Changed
-- **Orchestration skills**: 7 skills renamed with `:orch` suffix — `implement:orch`, `explore:orch`, `debug:orch`, `plan:orch`, `review:orch`, `resolve:orch`, `pipeline:orch`
-- **`self-review` skill** renamed to `quality-gates`
-- **`ambient-router` skill** renamed to `router`
-- **Preamble**: simplified to detection-only; skill mappings moved to router skill
-- **Output branding**: standardized to `DevFlow: INTENT/DEPTH` across all ambient outputs
-- **Integration test `hasRequiredSkills()`**: uses bounded matching instead of substring
-
-### Removed
-- **`implementation-patterns` skill** (merged into `patterns`)
-- **`search-first` skill** (merged into `research`)
-- **Dead `isFirstToolASkill()` function** from integration test helpers
-
----
-
 ## [1.8.3] - 2026-03-22
 
 ### Fixed
@@ -1166,7 +1162,9 @@ devflow init
 
 ---
 
-[Unreleased]: https://github.com/dean0x/devflow/compare/v1.4.0...HEAD
+[Unreleased]: https://github.com/dean0x/devflow/compare/v2.0.0...HEAD
+[2.0.1]: https://github.com/dean0x/devflow/compare/v2.0.0...v2.0.1
+[2.0.0]: https://github.com/dean0x/devflow/compare/v1.8.3...v2.0.0
 [1.8.3]: https://github.com/dean0x/devflow/compare/v1.8.2...v1.8.3
 [1.8.2]: https://github.com/dean0x/devflow/compare/v1.8.1...v1.8.2
 [1.8.1]: https://github.com/dean0x/devflow/compare/v1.8.0...v1.8.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devflow-kit",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "A meta-harness for Claude Code — turns a single coding agent into an engineering team: orchestration, parallel review, persistent memory, self-learning, and graph workflows",
   "type": "module",
   "bin": {