don-cheli-sdd 1.23.0 → 1.23.1

package/CHANGELOG.md

@@ -4,6 +4,12 @@ Todos los cambios notables en Don Cheli SDD Framework.
 
 Formato basado en [Conventional Commits](https://www.conventionalcommits.org/).
 
+## [1.23.1](https://github.com/doncheli/don-cheli-sdd/compare/v1.23.0...v1.23.1) (2026-04-07)
+
+### Correcciones
+
+* auditoría completa del instalador — 11 bugs corregidos en 6 archivos ([80af310](https://github.com/doncheli/don-cheli-sdd/commit/80af310d21c5f01a2f7a9e9ac6d7500d7a1aa410))
+
 ## [1.23.0](https://github.com/doncheli/don-cheli-sdd/compare/v1.22.0...v1.23.0) (2026-04-07)
 
 ### Nuevas Funcionalidades

package/CLAUDE.md

@@ -32,16 +32,24 @@ Lee bajo demanda:
 
 ## Auto-actualización al inicio de sesión
 Al inicio de la **primera interacción** de cada sesión:
-1. Leer `${FRAMEWORK_HOME}/VERSION`
-2. `curl -s https://raw.githubusercontent.com/doncheli/don-cheli-sdd/main/VERSION`
-3. Si versiones iguales o falla el curl → silencio
-4. Si hay versión mayor → **auto-actualizar** en background:
-   a. Clonar versión nueva en temporal
-   b. Ejecutar auditoría de seguridad rápida (`--severidad critica`) sobre los archivos cambiados
-   c. Si hay hallazgos 🔴 Críticos → **DETENER**, notificar: `🛑 Actualización v{remota} bloqueada por hallazgos de seguridad críticos. Revisar con /dc:auditar-seguridad`
-   d. Si pasa la auditoría → aplicar actualización con `bash scripts/instalar.sh --global`
-   e. Notificar: `✅ Don Cheli auto-actualizado: v{local} → v{remota} (auditoría de seguridad: limpia)`
-   f. Verificar conformidad Anthropic Skills 2.0 si `verificar_skills_spec: true`
+1. Leer `${FRAMEWORK_HOME}/VERSION` para obtener la versión local
+2. Ejecutar `curl -s https://raw.githubusercontent.com/doncheli/don-cheli-sdd/main/VERSION` para obtener la versión remota
+3. Si versiones iguales o falla el curl → silencio, no mostrar nada
+4. Si hay versión mayor → **notificar** al usuario (NO auto-aplicar):
+
+**Formato de notificación (según idioma configurado):**
+- **es:** `⬆️ Don Cheli v{remota} disponible (instalada: v{local}). Ejecuta /dc:actualizar para actualizar.`
+- **en:** `⬆️ Don Cheli v{remote} available (installed: v{local}). Run /dc:update to upgrade.`
+- **pt:** `⬆️ Don Cheli v{remota} disponível (instalada: v{local}). Execute /dc:atualizar para atualizar.`
+
+**Alternativa rápida vía terminal:**
+- `don-cheli update` (si instaló via npm)
+- `bash scripts/actualizar.sh` (si instaló via git clone)
+
+**Reglas:**
+- Solo notificar **una vez por sesión** (no repetir en cada mensaje)
+- Si no hay conexión o falla el curl → continuar sin notificar (no bloquear)
+- **Nunca** auto-aplicar actualizaciones sin confirmación del usuario
 5. El proceso NO debe bloquear la interacción del usuario
 
 ## Idioma (i18n)

package/README.es.md

@@ -12,7 +12,7 @@
   </p>
   <p align="center">
     <a href="#-instalación"><img src="https://img.shields.io/badge/instalación-2_minutos-brightgreen" alt="Install"></a>
-    <img src="https://img.shields.io/badge/versión-1.23.0-blue" alt="Version">
+    <img src="https://img.shields.io/badge/versión-1.23.1-blue" alt="Version">
     <img src="https://img.shields.io/badge/licencia-Apache%202.0-green" alt="License">
     <img src="https://img.shields.io/badge/idiomas-ES%20|%20EN%20|%20PT-red" alt="Languages">
     <img src="https://img.shields.io/badge/comandos-85+-purple" alt="Commands">

package/README.md

@@ -12,7 +12,7 @@
   </p>
   <p align="center">
     <a href="#-installation"><img src="https://img.shields.io/badge/install-2_minutes-brightgreen" alt="Install"></a>
-    <img src="https://img.shields.io/badge/version-1.23.0-blue" alt="Version">
+    <img src="https://img.shields.io/badge/version-1.23.1-blue" alt="Version">
     <img src="https://img.shields.io/badge/license-Apache%202.0-green" alt="License">
     <img src="https://img.shields.io/badge/languages-ES%20|%20EN%20|%20PT-red" alt="Languages">
     <img src="https://img.shields.io/badge/commands-85+-purple" alt="Commands">

package/README.pt.md

@@ -12,7 +12,7 @@
   </p>
   <p align="center">
     <a href="#-instalação"><img src="https://img.shields.io/badge/instalação-2_minutos-brightgreen" alt="Install"></a>
-    <img src="https://img.shields.io/badge/versão-1.23.0-blue" alt="Version">
+    <img src="https://img.shields.io/badge/versão-1.23.1-blue" alt="Version">
     <img src="https://img.shields.io/badge/licença-Apache%202.0-green" alt="License">
     <img src="https://img.shields.io/badge/idiomas-ES%20|%20EN%20|%20PT-red" alt="Languages">
     <img src="https://img.shields.io/badge/comandos-85+-purple" alt="Commands">

package/VERSION

@@ -1 +1 @@
-1.23.0
+1.23.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "don-cheli-sdd",
-  "version": "1.23.0",
+  "version": "1.23.1",
   "description": "Framework SDD para Claude Code — 72+ comandos, 43 habilidades, 15 modelos de razonamiento. TDD como ley de hierro. EN/ES/PT.",
   "main": "bin/don-cheli.js",
   "scripts": {

package/scripts/.claude/don-cheli/VERSION

@@ -1 +1 @@
-1.23.0
+1.23.1

package/scripts/.claude/don-cheli/scripts/actualizar.sh

@@ -39,7 +39,7 @@ done
 # PROGRESS BAR
 # ═══════════════════════════════════════════════════════════════
 
-TOTAL_STEPS=10
+TOTAL_STEPS=13
 CURRENT_STEP=0
 
 progress() {
@@ -274,11 +274,13 @@ git clone --depth 1 "${REPO_URL}.git" "$TEMP_DIR/don-cheli-sdd" > /dev/null 2>&1
 progress "Escaneando scripts por seguridad..."
 
 AUDIT_ISSUES=0
-# Check for suspicious patterns in new scripts
+# Check for genuinely dangerous patterns in new scripts (not comments/strings)
 for f in "$TEMP_DIR/don-cheli-sdd/scripts/"*.sh; do
   [ -f "$f" ] || continue
-  # Check for eval, curl|bash, base64 decode, etc.
-  SUSPICIOUS=$(grep -cn "eval \"\$\|curl.*|.*bash\|base64.*-d\|rm -rf /\|chmod 777" "$f" 2>/dev/null || echo 0)
+  # Only flag REAL dangerous code, not patterns inside comments or grep patterns
+  # Remove comments before scanning
+  CLEAN=$(sed 's/#.*$//' "$f" | sed '/grep/d' | sed '/echo/d')
+  SUSPICIOUS=$(echo "$CLEAN" | grep -c 'eval "\$\|rm -rf /[^.]' 2>/dev/null || echo 0)
   if [ "$SUSPICIOUS" -gt 0 ]; then
     AUDIT_ISSUES=$((AUDIT_ISSUES + SUSPICIOUS))
   fi
@@ -315,7 +317,22 @@ if [ -f "$INSTALL_DIR/perfil" ]; then
   INSTALL_FLAGS="$INSTALL_FLAGS --profile $PROFILE"
 fi
 
-cd "$TEMP_DIR/don-cheli-sdd" && bash scripts/instalar.sh $INSTALL_FLAGS > /dev/null 2>&1
+# Preserve tools if exists
+if [ -f "$INSTALL_DIR/tools" ]; then
+  TOOLS=$(cat "$INSTALL_DIR/tools")
+  INSTALL_FLAGS="$INSTALL_FLAGS --tools $TOOLS"
+fi
+
+cd "$TEMP_DIR/don-cheli-sdd" && bash scripts/instalar.sh $INSTALL_FLAGS > "$TEMP_DIR/install.log" 2>&1
+INSTALL_EXIT=$?
+
+if [ "$INSTALL_EXIT" -ne 0 ]; then
+  echo ""
+  echo -e "  ${RED}❌ Error durante la instalación${NC}"
+  echo -e "  Log: $TEMP_DIR/install.log"
+  tail -10 "$TEMP_DIR/install.log"
+  exit 1
+fi
 
 progress "Verificando instalación..."
 

package/scripts/.claude/don-cheli/scripts/instalar.sh

@@ -4,7 +4,7 @@
 
 set -euo pipefail
 
-VERSION="1.23.0"
+VERSION="1.23.1"
 REPO_URL="https://github.com/doncheli/don-cheli-sdd"
 CLEANUP_TMPDIR=""
 
@@ -1053,7 +1053,8 @@ if [ "$INTERACTIVE_MODE" = true ] && [ -n "${SELECTED_TOOLS:-}" ]; then
         echo -e "  ${YELLOW}⚠ generar-config.sh no encontrado, saltando generación de configs${NC}"
     fi
 
-    # Save profile selection
+    # Save profile and tools selection (for updates)
     echo "$SELECTED_PROFILE" > "${FRAMEWORK_HOME}/perfil"
+    echo "$SELECTED_TOOLS" > "${FRAMEWORK_HOME}/tools"
     echo -e "  ${GREEN}✓${NC} Perfil guardado: ${SELECTED_PROFILE}"
 fi

package/scripts/actualizar.sh

@@ -39,7 +39,7 @@ done
 # PROGRESS BAR
 # ═══════════════════════════════════════════════════════════════
 
-TOTAL_STEPS=10
+TOTAL_STEPS=13
 CURRENT_STEP=0
 
 progress() {
@@ -274,11 +274,13 @@ git clone --depth 1 "${REPO_URL}.git" "$TEMP_DIR/don-cheli-sdd" > /dev/null 2>&1
 progress "Escaneando scripts por seguridad..."
 
 AUDIT_ISSUES=0
-# Check for suspicious patterns in new scripts
+# Check for genuinely dangerous patterns in new scripts (not comments/strings)
 for f in "$TEMP_DIR/don-cheli-sdd/scripts/"*.sh; do
   [ -f "$f" ] || continue
-  # Check for eval, curl|bash, base64 decode, etc.
-  SUSPICIOUS=$(grep -cn "eval \"\$\|curl.*|.*bash\|base64.*-d\|rm -rf /\|chmod 777" "$f" 2>/dev/null || echo 0)
+  # Only flag REAL dangerous code, not patterns inside comments or grep patterns
+  # Remove comments before scanning
+  CLEAN=$(sed 's/#.*$//' "$f" | sed '/grep/d' | sed '/echo/d')
+  SUSPICIOUS=$(echo "$CLEAN" | grep -c 'eval "\$\|rm -rf /[^.]' 2>/dev/null || echo 0)
   if [ "$SUSPICIOUS" -gt 0 ]; then
     AUDIT_ISSUES=$((AUDIT_ISSUES + SUSPICIOUS))
   fi
@@ -315,7 +317,22 @@ if [ -f "$INSTALL_DIR/perfil" ]; then
   INSTALL_FLAGS="$INSTALL_FLAGS --profile $PROFILE"
 fi
 
-cd "$TEMP_DIR/don-cheli-sdd" && bash scripts/instalar.sh $INSTALL_FLAGS > /dev/null 2>&1
+# Preserve tools if exists
+if [ -f "$INSTALL_DIR/tools" ]; then
+  TOOLS=$(cat "$INSTALL_DIR/tools")
+  INSTALL_FLAGS="$INSTALL_FLAGS --tools $TOOLS"
+fi
+
+cd "$TEMP_DIR/don-cheli-sdd" && bash scripts/instalar.sh $INSTALL_FLAGS > "$TEMP_DIR/install.log" 2>&1
+INSTALL_EXIT=$?
+
+if [ "$INSTALL_EXIT" -ne 0 ]; then
+  echo ""
+  echo -e "  ${RED}❌ Error durante la instalación${NC}"
+  echo -e "  Log: $TEMP_DIR/install.log"
+  tail -10 "$TEMP_DIR/install.log"
+  exit 1
+fi
 
 progress "Verificando instalación..."
 

package/scripts/generar-config.sh

@@ -5,6 +5,23 @@
 # Intended to be sourced from instalar.sh, not run standalone.
 # Main entry point: generar_configs()
 
+# Helper: detect project root from FRAMEWORK_HOME path
+# .claude/don-cheli → project root is the parent
+_get_project_root() {
+    local dir="$1"
+    local root
+    if [[ "$dir" == *".claude/don-cheli"* ]]; then
+        root="${dir%/.claude/don-cheli*}"
+        [ -z "$root" ] && root="."
+    elif [[ "$dir" == *".claude"* ]]; then
+        root="${dir%/.claude*}"
+        [ -z "$root" ] && root="."
+    else
+        root="$dir"
+    fi
+    echo "$root"
+}
+
 generar_configs() {
     local tools="$1"
     local profile="$2"
@@ -114,11 +131,13 @@ _gen_claude() {
 # ─────────────────────────────────────────────
 _gen_codex() {
     local dir="$1" home="$2" locale="$3"
+    local project_root
+    project_root=$(_get_project_root "$dir")
 
-    echo -e "     ${GREEN:-}✓${NC:-} Codex → AGENTS.md"
+    echo -e "     ${GREEN:-}✓${NC:-} Codex → AGENTS.md (en $project_root/)"
 
     if [ -f "$home/AGENTS.md" ]; then
-        cp "$home/AGENTS.md" "$dir/" 2>/dev/null || true
+        cp "$home/AGENTS.md" "$project_root/" 2>/dev/null || true
     else
         # Generate a minimal AGENTS.md if template is missing
         cat > "$dir/AGENTS.md" 2>/dev/null << 'AGENTSEOF' || true
@@ -142,13 +161,15 @@ AGENTSEOF
 # ─────────────────────────────────────────────
 _gen_cursor() {
     local dir="$1" home="$2" locale="$3"
+    local project_root
+    project_root=$(_get_project_root "$dir")
 
-    echo -e "     ${GREEN:-}✓${NC:-} Cursor → .cursorrules"
+    echo -e "     ${GREEN:-}✓${NC:-} Cursor → .cursorrules (en $project_root/)"
 
     if [ "$locale" != "en" ] && [ -f "$home/.cursorrules.${locale}" ]; then
-        cp "$home/.cursorrules.${locale}" "$dir/.cursorrules" 2>/dev/null || true
+        cp "$home/.cursorrules.${locale}" "$project_root/.cursorrules" 2>/dev/null || true
     elif [ -f "$home/.cursorrules" ]; then
-        cp "$home/.cursorrules" "$dir/" 2>/dev/null || true
+        cp "$home/.cursorrules" "$project_root/" 2>/dev/null || true
     else
         echo -e "     ${YELLOW:-}⚠${NC:-} .cursorrules not found in $home — skipping" >&2
     fi
@@ -159,19 +180,8 @@ _gen_cursor() {
 # ─────────────────────────────────────────────
 _gen_antigravity() {
     local dir="$1" home="$2" locale="$3"
-
-    # Antigravity needs files at project root, not inside .claude/don-cheli/
-    # Detect project root: go up from .claude/don-cheli/ or use current dir
     local project_root
-    if [[ "$dir" == *".claude/don-cheli"* ]]; then
-        project_root="${dir%/.claude/don-cheli*}"
-        [ -z "$project_root" ] && project_root="."
-    elif [[ "$dir" == *".claude"* ]]; then
-        project_root="${dir%/.claude*}"
-        [ -z "$project_root" ] && project_root="."
-    else
-        project_root="$dir"
-    fi
+    project_root=$(_get_project_root "$dir")
 
     echo -e "     ${GREEN:-}✓${NC:-} Antigravity → GEMINI.md + .agent/ (en $project_root/)"
 
@@ -194,16 +204,17 @@ _gen_antigravity() {
 # ─────────────────────────────────────────────
 _gen_windsurf() {
     local dir="$1" home="$2" locale="$3"
+    local project_root
+    project_root=$(_get_project_root "$dir")
 
-    echo -e "     ${GREEN:-}✓${NC:-} Windsurf → .windsurf/rules/don-cheli.md"
+    echo -e "     ${GREEN:-}✓${NC:-} Windsurf → .windsurf/rules/don-cheli.md (en $project_root/)"
 
-    mkdir -p "$dir/.windsurf/rules" 2>/dev/null || true
+    mkdir -p "$project_root/.windsurf/rules" 2>/dev/null || true
 
-    # Prefer a dedicated windsurf template; fall back to .cursorrules
     if [ -f "$home/.windsurf/rules/don-cheli.md" ]; then
-        cp "$home/.windsurf/rules/don-cheli.md" "$dir/.windsurf/rules/don-cheli.md" 2>/dev/null || true
+        cp "$home/.windsurf/rules/don-cheli.md" "$project_root/.windsurf/rules/don-cheli.md" 2>/dev/null || true
     elif [ -f "$home/.cursorrules" ]; then
-        cp "$home/.cursorrules" "$dir/.windsurf/rules/don-cheli.md" 2>/dev/null || true
+        cp "$home/.cursorrules" "$project_root/.windsurf/rules/don-cheli.md" 2>/dev/null || true
     else
         echo -e "     ${YELLOW:-}⚠${NC:-} No Windsurf template found in $home — skipping" >&2
     fi
@@ -214,11 +225,13 @@ _gen_windsurf() {
 # ─────────────────────────────────────────────
 _gen_amp() {
     local dir="$1" home="$2" locale="$3"
+    local project_root
+    project_root=$(_get_project_root "$dir")
 
-    echo -e "     ${GREEN:-}✓${NC:-} Amp → prompt.md"
+    echo -e "     ${GREEN:-}✓${NC:-} Amp → prompt.md (en $project_root/)"
 
     if [ -f "$home/prompt.md" ]; then
-        cp "$home/prompt.md" "$dir/" 2>/dev/null || true
+        cp "$home/prompt.md" "$project_root/" 2>/dev/null || true
     else
         echo -e "     ${YELLOW:-}⚠${NC:-} prompt.md not found in $home — skipping" >&2
     fi
@@ -229,19 +242,20 @@ _gen_amp() {
 # ─────────────────────────────────────────────
 _gen_continue() {
     local dir="$1" home="$2" locale="$3"
+    local project_root
+    project_root=$(_get_project_root "$dir")
 
-    echo -e "     ${GREEN:-}✓${NC:-} Continue.dev → .continue/config/don-cheli.json"
+    echo -e "     ${GREEN:-}✓${NC:-} Continue.dev → .continue/config/don-cheli.json (en $project_root/)"
 
-    mkdir -p "$dir/.continue/config" 2>/dev/null || true
+    mkdir -p "$project_root/.continue/config" 2>/dev/null || true
 
-    # Use existing template if available; otherwise generate inline
     if [ -f "$home/.continue/config/don-cheli.json" ]; then
-        cp "$home/.continue/config/don-cheli.json" "$dir/.continue/config/don-cheli.json" 2>/dev/null || true
+        cp "$home/.continue/config/don-cheli.json" "$project_root/.continue/config/don-cheli.json" 2>/dev/null || true
     else
-        cat > "$dir/.continue/config/don-cheli.json" 2>/dev/null << 'CONTEOF' || true
+        cat > "$project_root/.continue/config/don-cheli.json" 2>/dev/null << 'CONTEOF' || true
 {
   "name": "don-cheli-sdd",
-  "version": "1.23.0",
+  "version": "1.23.1",
   "description": "Don Cheli SDD Framework",
   "rules": [
     "All production code requires tests (TDD: RED → GREEN → REFACTOR)",
@@ -260,8 +274,19 @@ CONTEOF
 # ─────────────────────────────────────────────
 _gen_opencode() {
     local dir="$1" home="$2" locale="$3"
+    local project_root
+    project_root=$(_get_project_root "$dir")
+
+    echo -e "     ${GREEN:-}✓${NC:-} OpenCode → config + .opencode/ (en $project_root/)"
 
-    echo -e "     ${GREEN:-}✓${NC:-} OpenCode → ~/.config/opencode/config.json"
+    # Copy opencode.json and .opencode/ to project root
+    if [ -f "$home/opencode.json" ]; then
+        cp "$home/opencode.json" "$project_root/" 2>/dev/null || true
+    fi
+    if [ -d "$home/.opencode" ]; then
+        mkdir -p "$project_root/.opencode/agents" 2>/dev/null || true
+        cp -r "$home/.opencode/"* "$project_root/.opencode/" 2>/dev/null || true
+    fi
 
     local opencode_config="$HOME/.config/opencode/config.json"
     local skills_path="${home}/.agent/skills"

package/scripts/instalar.sh

@@ -4,7 +4,7 @@
 
 set -euo pipefail
 
-VERSION="1.23.0"
+VERSION="1.23.1"
 REPO_URL="https://github.com/doncheli/don-cheli-sdd"
 CLEANUP_TMPDIR=""
 
@@ -1053,7 +1053,8 @@ if [ "$INTERACTIVE_MODE" = true ] && [ -n "${SELECTED_TOOLS:-}" ]; then
         echo -e "  ${YELLOW}⚠ generar-config.sh no encontrado, saltando generación de configs${NC}"
     fi
 
-    # Save profile selection
+    # Save profile and tools selection (for updates)
     echo "$SELECTED_PROFILE" > "${FRAMEWORK_HOME}/perfil"
+    echo "$SELECTED_TOOLS" > "${FRAMEWORK_HOME}/tools"
     echo -e "  ${GREEN}✓${NC} Perfil guardado: ${SELECTED_PROFILE}"
 fi