devflow-kit 2.4.0 → 2.5.0

package/dist/cli/commands/agents.js

@@ -373,7 +373,12 @@ export const agentsCommand = new Command('agents')
     }
     const mapping = mappingResult.value;
     const proxyEnabled = await isProxyEnabled(devflowDir);
-    const shippedDefaults = await loadShippedDefaults();
+    // An agent with no shipped default renders a blank DEFAULT column and can
+    // never be reverted off an external model; surface the gap rather than
+    // letting the table imply the agent simply ships without one.
+    const shippedDefaults = await loadShippedDefaults(undefined, {
+        onWarning: (msg) => p.log.warn(msg),
+    });
     // ── --list ──────────────────────────────────────────────────────────────
     if (options.list) {
         const agentNames = getAllAgentNames().sort();

package/dist/cli/commands/attribution-prompts.js

@@ -14,7 +14,7 @@
  * The question is ADVANCED-ONLY; Recommended never asks. See shouldRunAttributionStep.
  *
  * Shared DI seam (PromptOutcome, WizardPromptIO, clackNote, clackSelect) lives in
- * prompt-io.ts — one definition, both wizard modules import from there (ADR-019).
+ * prompt-io.ts — one definition, both wizard modules import from there.
  */
 import { clackNote, clackSelect } from './prompt-io.js';
 // ── Gate predicate ─────────────────────────────────────────────────────────────

package/dist/cli/commands/compliance-prompts.js

@@ -11,7 +11,7 @@
  * own the cancel idiom (p.cancel + process.exit(0)), keeping try/finally cleanup safe.
  *
  * Shared DI seam (PromptOutcome, WizardPromptIO, clackNote, clackSelect) lives in
- * prompt-io.ts — one definition, both wizard modules import from there (ADR-019).
+ * prompt-io.ts — one definition, both wizard modules import from there.
  */
 import * as p from '@clack/prompts';
 import { COMPLIANCE_FRAMEWORKS } from '../../core/compliance.js';

package/dist/cli/commands/compliance.js

@@ -6,6 +6,9 @@
  * Applies ADR-001: compliance is manifest-group (like proxy), not config.json-gated.
  * Avoids PF-009: per-artifact failures are warn-not-throw.
  * Avoids PF-015: enable/disable each converge BOTH artifacts unconditionally.
+ * The evidence-policy lines (--status, and the --enable/--set suggestion) come
+ *   from src/core/evidence-policy.ts, the seam onto the package's own resolver;
+ *   the CLI prints .devflow/policy.json and never writes it (applies ADR-024).
  */
 import { Command } from 'commander';
 import { promises as fs } from 'fs';
@@ -15,6 +18,7 @@ import color from 'picocolors';
 import { ALWAYS_PRESENT_REFS, COMPLIANCE_FRAMEWORKS, normalizeFrameworks, parseFrameworkList, } from '../../core/compliance.js';
 import { frameworkChoices, FRAMEWORK_SELECT_MESSAGE } from './compliance-prompts.js';
 import { COMPLIANCE_SKILL_TOKENS } from '../../core/compliance-compose.js';
+import { evidencePolicyStatusLine, evidencePolicySuggestion, formatEvidencePolicyUnavailable, loadEvidencePolicyModule, } from '../../core/evidence-policy.js';
 import { readManifest, writeManifest } from '../../core/manifest.js';
 import { convergeFromManifest } from '../../targets/claude-code/compliance-install.js';
 import { validateRuleShadow, validateSkillShadow } from '../../targets/claude-code/installer.js';
@@ -177,7 +181,7 @@ export const complianceCommand = new Command('compliance')
     .description('Enable, disable, or configure the compliance feature')
     .option('--enable', 'Enable compliance (restores previously selected frameworks)')
     .option('--disable', 'Disable compliance (artifacts removed; frameworks remembered for re-enable)')
-    .option('--status', 'Show compliance state: manifest, installed artifacts, and shadow presence')
+    .option('--status', 'Show compliance state: manifest, installed artifacts, shadow presence, and the evidence policy for the current repository')
     .option('--set <list>', 'Set active frameworks (comma-separated IDs); enables compliance. Use --set "" for zero frameworks (generic controls only)')
     .action(async (options) => {
     const claudeDir = getClaudeDirectory();
@@ -247,6 +251,11 @@ export const complianceCommand = new Command('compliance')
                     ? color.yellow(' (withheld — rules disabled)')
                     : '') +
                 (isRuleShadowed ? color.green(' [shadowed]') : ''),
+            '',
+            // The repository in cwd, resolved by the package's own resolver with the
+            // compliance state already read above (D-POLICY-CJS-SEAM). Bounded: at most
+            // two `gh` calls, each with a timeout, so offline degrades to a flagged line.
+            evidencePolicyStatusLine(loadEvidencePolicyModule(), { dir: process.cwd(), compliance: current }),
         ];
         if (driftInstalled.length > 0 || validMissing.length > 0 || invalidIds.length > 0) {
             lines.push('');
@@ -333,5 +342,18 @@ export const complianceCommand = new Command('compliance')
         p.log.info(color.dim('Note: compliance rule withheld (rules disabled) — ' +
             'run `devflow rules --enable` to install the stamped rule'));
     }
+    // Suggest the team policy file compliance now implies. Printed, never written:
+    // .devflow/policy.json is team-owned (D-POLICY-NO-WRITE, applies ADR-024).
+    if (resolved.nextState.enabled) {
+        const policyModule = loadEvidencePolicyModule();
+        if (!policyModule.ok) {
+            p.log.warn(formatEvidencePolicyUnavailable(policyModule.error));
+        }
+        else {
+            const suggestion = evidencePolicySuggestion(resolved.nextState, policyModule.value);
+            if (suggestion !== null)
+                p.note(suggestion, 'Evidence policy');
+        }
+    }
 });
 //# sourceMappingURL=compliance.js.map

package/dist/cli/commands/init-seed.js

@@ -3,7 +3,6 @@
  *
  * Computes the initial state (seed) for init prompts from:
  * - The existing manifest (from a prior install)
- * - The project feature config (.devflow/config.json)
  * - The current settings.json snapshot (for view-mode resolution)
  * - The plugin registry
  *
@@ -15,6 +14,7 @@
  */
 import { resolveExistingViewMode, settingHoldsManagedShape, FLAG_REGISTRY, defaultValueOf, readViewMode, } from '../../core/flags.js';
 import { partitionSelectablePlugins } from '../../core/plugins.js';
+import { DEFAULT_TRACKER_PROVIDER } from '../../core/tracker.js';
 /** Registry defaults — all features enabled except proxy (advanced-only, off by default). */
 export const FEATURE_DEFAULTS = {
     ambient: true,
@@ -25,24 +25,21 @@ export const FEATURE_DEFAULTS = {
     rules: true,
     proxy: false,
     compliance: { enabled: false, frameworks: [] },
+    tracker: { provider: DEFAULT_TRACKER_PROVIDER },
 };
 // ── Helpers ───────────────────────────────────────────────────────────────────
 /**
- * Resolve feature booleans for the init seed.
+ * Resolve feature booleans for the init seed: every feature comes from
+ * manifest.features, with registry defaults when the manifest is absent.
  *
- * - memory / learning / knowledge come from projectConfig WHENEVER present,
- *   independent of whether a manifest exists (covers config-present /
- *   manifest-missing cases such as a fresh project with a prior learning run).
- * - ambient / hud / rules come from manifest.features; registry defaults
- *   (all true) are used when the manifest is absent.
- *
- * Applies ADR-001: .devflow/config.json is the source of truth for
- * memory/learning/knowledge; manifest reflects the last install choices for
- * the remaining toggles.
+ * D-FEATURES-MACHINE-WIDE (src/core/feature-switch.ts): memory, learning and
+ * knowledge are machine-wide, recorded in the manifest alone, so the seed takes
+ * no per-repo input at all. Seeding from whatever repo init happens to run in
+ * would flip the switch for EVERY repo as a side effect — a stale per-repo
+ * `true` would silently re-enable a feature the user turned off. ADR-014's
+ * state-aware re-init preserves the prior machine-wide choice, the manifest's.
  */
-export function resolveSeedFeatures(manifest, projectConfig) {
-    // ambient/hud/rules/proxy/compliance: manifest is the source; fall back to registry defaults.
-    // proxy and compliance follow the manifest group (like ambient) per ADR-001 — NOT config.json-gated.
+export function resolveSeedFeatures(manifest) {
     const ambient = manifest?.features.ambient ?? FEATURE_DEFAULTS.ambient;
     const hud = manifest?.features.hud ?? FEATURE_DEFAULTS.hud;
     const rules = manifest?.features.rules ?? FEATURE_DEFAULTS.rules;
@@ -52,15 +49,15 @@ export function resolveSeedFeatures(manifest, projectConfig) {
     // the module-level default by reference — downstream mutation would corrupt it process-wide.
     const rawCompliance = manifest?.features.compliance ?? FEATURE_DEFAULTS.compliance;
     const compliance = { ...rawCompliance, frameworks: [...rawCompliance.frameworks] };
-    // memory/learning/knowledge: projectConfig wins whenever present (ADR-001).
-    // Helper eliminates the repeated projectConfig !== null ternary pattern.
-    const fromConfig = (key) => projectConfig !== null
-        ? projectConfig[key]
-        : (manifest?.features[key] ?? FEATURE_DEFAULTS[key]);
-    const memory = fromConfig('memory');
-    const knowledge = fromConfig('knowledge');
-    const learning = fromConfig('learning');
-    return { ambient, memory, hud, knowledge, learning, rules, proxy, compliance };
+    // Same defensive spread, same reason: `?? FEATURE_DEFAULTS.tracker` alone would
+    // return the module-level default BY REFERENCE and downstream mutation would
+    // corrupt it process-wide.
+    const rawTracker = manifest?.features.tracker ?? FEATURE_DEFAULTS.tracker;
+    const tracker = { ...rawTracker };
+    const memory = manifest?.features.memory ?? FEATURE_DEFAULTS.memory;
+    const knowledge = manifest?.features.knowledge ?? FEATURE_DEFAULTS.knowledge;
+    const learning = manifest?.features.learning ?? FEATURE_DEFAULTS.learning;
+    return { ambient, memory, hud, knowledge, learning, rules, proxy, compliance, tracker };
 }
 /**
  * Resolve the flag record for the init seed.
@@ -184,7 +181,7 @@ export function resolveExistingAttributionSuppression(settingsJson) {
     return settingHoldsManagedShape(settingsJson, 'suppress-attribution') ? true : undefined;
 }
 /**
- * Compose the full init seed from manifest, project config, settings, and registry.
+ * Compose the full init seed from manifest, settings, and registry.
  *
  * view-mode priority: existing settings.json (non-default) → manifest → 'default'.
  * suppress-attribution priority: settings.json exact devflow shape → manifest → false.
@@ -194,8 +191,8 @@ export function resolveExistingAttributionSuppression(settingsJson) {
  * This is the single composition point; callers (init.ts hoist block) call this
  * once and pass `seed` down to prompt wiring.
  */
-export function resolveInitSeed(seedManifest, seedConfig, settingsSnapshot, plugins) {
-    const features = resolveSeedFeatures(seedManifest, seedConfig);
+export function resolveInitSeed(seedManifest, settingsSnapshot, plugins) {
+    const features = resolveSeedFeatures(seedManifest);
     // features.flags is FlagsRecord; null for fresh install (no manifest).
     // seedManifest?.features.flags may be absent at runtime on very old manifests not yet
     // healed — ?? null collapses to fresh-install behavior (all flags at registry defaults).
@@ -280,6 +277,7 @@ export function applyCliToggles(base, toggles) {
         rules: toggles.rules ?? base.rules,
         proxy: toggles.proxy ?? base.proxy,
         compliance: toggles.compliance ?? base.compliance,
+        tracker: toggles.tracker ?? base.tracker,
     };
 }
 //# sourceMappingURL=init-seed.js.map