moflo 4.8.82 → 4.8.83

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "moflo",
-  "version": "4.8.82",
+  "version": "4.8.83",
   "description": "MoFlo — AI agent orchestration for Claude Code. Forked from ruflo/claude-flow with patches applied to source, plus feature-level orchestration.",
   "main": "dist/index.js",
   "type": "module",
@@ -117,7 +117,7 @@
     "@types/node": "^24.12.2",
     "@xenova/transformers": "^2.17.0",
     "eslint": "^8.0.0",
-    "moflo": "^4.8.81",
+    "moflo": "^4.8.82",
     "tsx": "^4.21.0",
     "typescript": "^5.9.3",
     "vitest": "^4.0.0"

package/src/modules/cli/dist/src/version.js

@@ -2,5 +2,5 @@
  * Auto-generated by build. Do not edit manually.
  * Source of truth: root package.json → scripts/sync-version.mjs
  */
-export const VERSION = '4.8.82';
+export const VERSION = '4.8.83';
 //# sourceMappingURL=version.js.map

package/src/modules/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moflo/cli",
-  "version": "4.8.82",
+  "version": "4.8.83",
   "type": "module",
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",

package/src/modules/spells/dist/core/interpolation.js

@@ -4,8 +4,15 @@
  * Resolves `{stepId.outputKey}` placeholders in spell step configs.
  * Nested property access is supported: `{step1.data.nested.value}`.
  */
-/** Matches `{path}` variable references in spell step configs. */
-export const VAR_REF_PATTERN = /\{([^}]+)\}/g;
+/**
+ * Matches `{path}` variable references in spell step configs.
+ *
+ * The `(?<!\$)` negative lookbehind skips `${VAR}` — that's bash parameter
+ * expansion inside shell steps, not a spell template reference. Without it,
+ * a bash command like `sed "s/#${STORY}/.../"` would try to resolve `STORY`
+ * as a spell variable and fail.
+ */
+export const VAR_REF_PATTERN = /(?<!\$)\{([^}]+)\}/g;
 /**
  * Resolve a dot-separated path against the context variables.
  * Returns undefined if any segment is missing.

package/src/modules/spells/dist/core/runner.js

@@ -74,25 +74,27 @@ export class SpellCaster {
                 }
                 else {
                     const reason = acceptance.reason === 'hash-mismatch'
-                        ? 'Spell permissions have changed since last acceptance'
-                        : 'First run — reviewing spell permissions';
+                        ? 'Spell permissions have changed — please re-review'
+                        : 'First run — please review permissions before running this spell';
                     const report = formatSpellPermissionReport(permReport);
                     console.log(`[spell] ${reason}`);
-                    console.log(`[spell] Running automatic dry-run validation...\n`);
+                    console.log('');
                     console.log(report);
-                    // Run dry-run validation so the user also sees structural issues
+                    // Also run dry-run validation so genuine definition issues surface
+                    // alongside the permission review — but keep them cleanly separated
+                    // from the acceptance prompt (not having accepted is not an error).
                     const dryResult = await dryRunValidate(definition, resolvedArgs, defValidation, options, this.registry, (variables, wfId, stepIndex) => this.buildContext(variables, resolvedArgs, wfId, stepIndex, options.signal));
                     if (!dryResult.valid) {
-                        console.log('\n[spell] Dry-run validation found errors:');
+                        console.log('\n[spell] Issues found while validating the spell definition:');
                         for (const err of [...dryResult.definitionErrors, ...dryResult.argumentErrors]) {
                             console.log(`  - ${err.message}`);
                         }
                     }
                     // Block — user must explicitly accept
-                    console.log(`\n[spell] To accept these permissions, run: spell_accept({ name: "${definition.name}" })`);
+                    console.log(`\n[spell] To run this spell, ask Claude to accept it, or call the spell_accept tool with name "${definition.name}".`);
                     return this.failureResult(spellId, startTime, [{
                             code: 'ACCEPTANCE_REQUIRED',
-                            message: `${reason}. Review the risk analysis above and accept with spell_accept({ name: "${definition.name}" }).`,
+                            message: `${reason}. Review the permissions above, then accept the spell "${definition.name}" to continue.`,
                         }], definition.name);
                 }
             }