moflo 4.9.25 → 4.9.26

package/.claude/skills/healer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: healer
 description: Run moflo's Healer (`flo healer`, alias for `flo doctor`) from inside the Claude session. Audit-only by default; pass `--fix` to apply auto-repairs, `-c <component>` for a single check. Use when something feels off (missing moflo.yaml, daemon dead, statusline empty, hooks not firing) or as a periodic health check. Distinct from Claude Code's built-in `/doctor`, which diagnoses Claude Code itself, not moflo.
-arguments: "[--fix] [-c <component>]"
+arguments: "[options]"
 ---
 
 # /healer — moflo Installation Healer
@@ -43,7 +43,7 @@ Thin wrapper around the `flo healer` CLI. All check + fix logic lives in the CLI
 - **Don't** re-document checks or fixes here. The CLI's `--help` and `src/cli/commands/doctor-*` are the source of truth.
 - **Don't** call `flo doctor` directly — use the `healer` alias for thematic consistency. They're equivalent CLI-side.
 - **Don't** swallow non-zero exit codes silently — surface them in the summary.
-- **Note for users:** Claude Code has its own built-in `/doctor` command that diagnoses Claude Code itself. This skill (`/healer`) diagnoses **moflo**, not Claude Code. The two are complementary, not duplicates — and the healer also runs `claude doctor` internally as a delegated check (`Claude Code Doctor`) so Claude-side issues (auth, settings drift, IDE/extension state) surface in the same report. With `--fix`, the healer re-runs `claude doctor` interactively so you can see and act on its findings; Claude-side fixes typically need user gestures (re-auth, IDE reload) and aren't auto-applied.
+- **Note for users:** Claude Code has its own built-in `/doctor` command that diagnoses Claude Code itself. This skill (`/healer`) diagnoses **moflo**, not Claude Code. The two are complementary, not duplicates. The healer rolls in the user-actionable parts of `claude doctor` (Claude Code version freshness vs npm latest) into its own `Claude Code CLI` check; the rest of `claude doctor` is a TUI on current releases and must be run interactively if you need its full report.
 
 ## See Also
 

package/dist/src/cli/commands/doctor-checks-runtime.js

@@ -10,6 +10,7 @@ import { execSync, exec } from 'child_process';
 import { promisify } from 'util';
 import { errorDetail } from '../shared/utils/error-detail.js';
 import { output } from '../output.js';
+import { fetchLatestNpmVersion, parseVersion, isOutdated } from './doctor-version.js';
 const execAsync = promisify(exec);
 /**
  * Execute command asynchronously with proper environment inheritance.
@@ -132,11 +133,9 @@ export async function checkBuildTools() {
     }
 }
 export async function checkClaudeCode() {
+    let installedRaw;
     try {
-        const version = await runCommand('claude --version');
-        const versionMatch = version.match(/v?(\d+\.\d+\.\d+)/);
-        const versionStr = versionMatch ? `v${versionMatch[1]}` : version;
-        return { name: 'Claude Code CLI', status: 'pass', message: versionStr };
+        installedRaw = await runCommand('claude --version');
     }
     catch (e) {
         return {
@@ -146,83 +145,38 @@ export async function checkClaudeCode() {
             fix: 'npm install -g @anthropic-ai/claude-code',
         };
     }
-}
-/**
- * Delegate diagnostics to Claude Code's own `claude doctor` command and surface
- * the result. Catches Claude-side issues (settings drift, MCP/auth, IDE/extension
- * state, update channel) that moflo's own checks can't see — since `claude` is
- * not a moflo-owned binary we don't try to parse its output structurally; we
- * just report exit code + a short tail. Skip silently when `claude` isn't
- * installed — `checkClaudeCode` already covers that condition.
- */
-export async function checkClaudeCodeDoctor() {
+    const versionMatch = installedRaw.match(/v?(\d+\.\d+\.\d+)/);
+    const installedClean = versionMatch ? versionMatch[1] : installedRaw.trim();
+    const installedDisplay = versionMatch ? `v${installedClean}` : installedRaw.trim();
+    // Compare against the latest published @anthropic-ai/claude-code on npm.
+    // Replaces the old `claude doctor` delegate (which became a TUI in CC 2.1.x
+    // and could not be parsed from a non-TTY child). Freshness was the only
+    // user-actionable signal that delegate produced; the auto-updater state +
+    // .mcp.json server health it also covered are already verified by the
+    // existing daemon and `MCP Servers` checks.
+    let latest;
     try {
-        await runCommand('claude --version', 3000);
+        latest = await fetchLatestNpmVersion('@anthropic-ai/claude-code');
     }
-    catch {
-        return {
-            name: 'Claude Code Doctor',
-            status: 'pass',
-            message: 'Skipped (claude CLI not installed — see Claude Code CLI check)',
-        };
-    }
-    // Capture both streams + exit code without throwing. `claude doctor` exits
-    // non-zero on findings, so a try/catch over execAsync would lose the body.
-    const result = await new Promise((resolve) => {
-        const child = exec('claude doctor', {
-            encoding: 'utf8',
-            timeout: 30000,
-            shell: process.platform === 'win32' ? 'cmd.exe' : '/bin/sh',
-            env: { ...process.env },
-            windowsHide: true,
-        }, (err, stdout, stderr) => {
-            resolve({
-                code: err && typeof err.code === 'number'
-                    ? (err.code)
-                    : (err ? 1 : 0),
-                stdout: (stdout || '').toString().trim(),
-                stderr: (stderr || '').toString().trim(),
-            });
-        });
-        child.on('error', () => resolve({ code: 1, stdout: '', stderr: '' }));
-    });
-    // claude doctor not recognised → some Claude versions don't ship the
-    // subcommand. Surface as a pass-skip rather than a failure so older Claude
-    // installs aren't penalised.
-    const combined = `${result.stdout}\n${result.stderr}`.toLowerCase();
-    if (/unknown command|command not found|usage:.*claude/.test(combined) &&
-        !combined.includes('check')) {
+    catch (e) {
         return {
-            name: 'Claude Code Doctor',
+            name: 'Claude Code CLI',
             status: 'pass',
-            message: 'Skipped (this Claude version does not expose `claude doctor`)',
+            message: `${installedDisplay} (registry unreachable: ${errorDetail(e, { firstLineOnly: true })})`,
         };
     }
-    if (result.code === 0) {
-        const firstLine = result.stdout.split(/\r?\n/).find((l) => l.trim()) || 'No issues reported';
-        return { name: 'Claude Code Doctor', status: 'pass', message: firstLine.slice(0, 120) };
-    }
-    // Non-zero with zero output → `claude doctor` is interactive in current
-    // Claude Code releases (verified on 2.1.132): it opens a TUI and produces
-    // nothing on a non-TTY child stdout, then our exec timeout kills it. Treat
-    // as a skip — the check can't observe the TUI from here, and warning would
-    // fire on every machine running the same Claude version.
-    if (!result.stdout && !result.stderr) {
+    if (versionMatch && isOutdated(parseVersion(installedClean), parseVersion(latest))) {
         return {
-            name: 'Claude Code Doctor',
-            status: 'pass',
-            message: 'Skipped (claude doctor is interactive — run manually to see findings)',
+            name: 'Claude Code CLI',
+            status: 'warn',
+            message: `${installedDisplay} (latest: v${latest})`,
+            fix: 'npm install -g @anthropic-ai/claude-code@latest',
         };
     }
-    // Non-zero — surface the tail so the user has a hint, and point to the
-    // interactive command for the full report. Don't try to fix from here:
-    // Claude-side fixes (re-auth, settings repair, IDE reload) need user gestures.
-    const tailLines = result.stdout.split(/\r?\n/).filter((l) => l.trim()).slice(-3).join(' | ');
     return {
-        name: 'Claude Code Doctor',
-        status: 'warn',
-        message: `claude doctor reported issues: ${tailLines.slice(0, 200)}`,
-        fix: 'Run `claude doctor` interactively for full report and follow its instructions',
+        name: 'Claude Code CLI',
+        status: 'pass',
+        message: `${installedDisplay} (up to date)`,
     };
 }
 export async function installClaudeCode() {

package/dist/src/cli/commands/doctor-fixes.js

@@ -5,7 +5,6 @@
  * shell-out where possible). Falls back to running the check's `fix` string
  * if it looks like an `npx`/`npm`/`claude` command.
  */
-import { execSync } from 'child_process';
 import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'fs';
 import { join } from 'path';
 import { output } from '../output.js';
@@ -175,27 +174,6 @@ export async function autoFixCheck(check) {
         'Claude Code CLI': async () => {
             return installClaudeCode();
         },
-        // Pass-through to Claude Code's own diagnostic. We don't own its CLI surface
-        // and most Claude-side findings (auth, IDE reload, settings drift) need
-        // user gestures, so the "fix" here is just to re-run with inherited stdio
-        // and let the user act on what they see.
-        'Claude Code Doctor': async () => {
-            try {
-                execSync('claude doctor', {
-                    encoding: 'utf8',
-                    stdio: 'inherit',
-                    windowsHide: true,
-                    timeout: 60000,
-                });
-                return true;
-            }
-            catch {
-                // Non-zero exit is informational here — user has seen the output and
-                // can act on it. Don't claim success, but don't claim failure of OUR
-                // healer either; flag as "needs manual action".
-                return false;
-            }
-        },
         'Zombie Processes': async () => {
             const result = await findZombieProcesses(true);
             return result.killed > 0 || result.details.length === 0;

package/dist/src/cli/commands/doctor-registry.js

@@ -8,7 +8,7 @@ import { checkSubagentHealth, checkSpellExecution, checkMcpToolInvocation, check
 import { checkEmbeddingHygiene } from './doctor-embedding-hygiene.js';
 import { checkSwarmFunctional, checkHiveMindFunctional, } from './doctor-checks-swarm.js';
 import { checkMemoryAccessFunctional } from './doctor-checks-memory-access.js';
-import { checkBuildTools, checkClaudeCode, checkClaudeCodeDoctor, checkDiskSpace, checkGit, checkGitRepo, checkNodeVersion, checkNpmVersion, } from './doctor-checks-runtime.js';
+import { checkBuildTools, checkClaudeCode, checkDiskSpace, checkGit, checkGitRepo, checkNodeVersion, checkNpmVersion, } from './doctor-checks-runtime.js';
 import { checkConfigFile, checkDaemonStatus, checkMcpServers, checkMemoryDatabase, checkMofloYamlCompliance, checkStatusLine, checkTestDirs, } from './doctor-checks-config.js';
 import { checkSpellEngine, checkSandboxTier } from './doctor-checks-platform.js';
 import { checkEmbeddings, checkSemanticQuality, } from './doctor-checks-memory.js';
@@ -21,7 +21,6 @@ export const allChecks = [
     checkNodeVersion,
     checkNpmVersion,
     checkClaudeCode,
-    checkClaudeCodeDoctor,
     checkGit,
     checkGitRepo,
     checkConfigFile,
@@ -64,8 +63,6 @@ export const componentMap = {
     'node': checkNodeVersion,
     'npm': checkNpmVersion,
     'claude': checkClaudeCode,
-    'claude-doctor': checkClaudeCodeDoctor,
-    'claude-code-doctor': checkClaudeCodeDoctor,
     'config': checkConfigFile,
     'yaml': checkMofloYamlCompliance,
     'moflo-yaml': checkMofloYamlCompliance,

package/dist/src/cli/commands/doctor-version.js

@@ -66,11 +66,11 @@ function isOutdated(current, latest) {
 // Manual AbortController (NOT AbortSignal.timeout): the latter leaves
 // a libuv timer alive past process exit on Node 24 / Windows and trips
 // an `!(handle->flags & UV_HANDLE_CLOSING)` assertion in src/win/async.c.
-async function fetchLatestVersion() {
+export async function fetchLatestNpmVersion(pkg) {
     const ac = new AbortController();
     const timer = setTimeout(() => ac.abort(), REGISTRY_FETCH_TIMEOUT_MS);
     try {
-        const response = await fetch('https://registry.npmjs.org/moflo/latest', {
+        const response = await fetch(`https://registry.npmjs.org/${encodeURIComponent(pkg)}/latest`, {
             headers: { Accept: 'application/json' },
             signal: ac.signal,
         });
@@ -86,6 +86,10 @@ async function fetchLatestVersion() {
         clearTimeout(timer);
     }
 }
+export { parseVersion, isOutdated };
+async function fetchLatestVersion() {
+    return fetchLatestNpmVersion('moflo');
+}
 export async function checkVersionFreshness() {
     try {
         const currentVersion = readCurrentVersion();

package/dist/src/cli/version.js

@@ -2,5 +2,5 @@
  * Auto-generated by build. Do not edit manually.
  * Source of truth: root package.json → scripts/sync-version.mjs
  */
-export const VERSION = '4.9.25';
+export const VERSION = '4.9.26';
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "moflo",
-  "version": "4.9.25",
+  "version": "4.9.26",
   "description": "MoFlo — AI agent orchestration for Claude Code. A standalone, opinionated toolkit with semantic memory, learned routing, gates, spells, and the /flo issue-execution skill.",
   "main": "dist/src/cli/index.js",
   "type": "module",
@@ -84,7 +84,7 @@
     "@typescript-eslint/eslint-plugin": "^7.18.0",
     "@typescript-eslint/parser": "^7.18.0",
     "eslint": "^8.0.0",
-    "moflo": "^4.9.24",
+    "moflo": "^4.9.25",
     "tsx": "^4.21.0",
     "typescript": "^5.9.3",
     "vitest": "^4.0.0"