moflo 4.9.3 → 4.9.5

package/dist/src/cli/init/claudemd-generator.js

@@ -44,6 +44,10 @@ flo-search "[query]" --namespace guidance   # Semantic search
 flo doctor --fix                             # Health check
 \`\`\`
 
+### After upgrading MoFlo
+
+After running \`npm install moflo@*\` (or \`npm install\` that touches moflo), check \`.moflo/restart-pending.json\`. If it exists, surface the \`message\` field to the user verbatim (Claude Code can't pick up new hooks/MCP tools/launcher mid-session — they're only loaded at session-start), then delete the file.
+
 ### Full Reference
 
 - **Subagents protocol:** \`.claude/guidance/shipped/moflo-subagents.md\`

package/dist/src/cli/version.js

@@ -2,5 +2,5 @@
  * Auto-generated by build. Do not edit manually.
  * Source of truth: root package.json → scripts/sync-version.mjs
  */
-export const VERSION = '4.9.3';
+export const VERSION = '4.9.5';
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "moflo",
-  "version": "4.9.3",
+  "version": "4.9.5",
   "description": "MoFlo — AI agent orchestration for Claude Code. A standalone, opinionated toolkit with semantic memory, learned routing, gates, spells, and the /flo issue-execution skill.",
   "main": "dist/src/cli/index.js",
   "type": "module",
@@ -39,14 +39,15 @@
     "!.claude/**/*.map",
     "README.md",
     "LICENSE",
-    "scripts/prune-native-binaries.mjs"
+    "scripts/prune-native-binaries.mjs",
+    "scripts/post-install-notice.mjs"
   ],
   "scripts": {
     "dev": "tsx watch src/cli/index.ts",
     "prebuild": "node scripts/sync-version.mjs && node scripts/clean-dist.mjs",
     "build": "tsc",
     "prepublishOnly": "npm run build",
-    "postinstall": "node scripts/prune-native-binaries.mjs",
+    "postinstall": "node scripts/prune-native-binaries.mjs && node scripts/post-install-notice.mjs",
     "test": "node scripts/test-runner.mjs",
     "test:ui": "vitest --ui",
     "test:smoke": "node harness/consumer-smoke/run.mjs",
@@ -79,7 +80,7 @@
     "@typescript-eslint/eslint-plugin": "^7.18.0",
     "@typescript-eslint/parser": "^7.18.0",
     "eslint": "^8.0.0",
-    "moflo": "^4.9.2",
+    "moflo": "^4.9.4",
     "tsx": "^4.21.0",
     "typescript": "^5.9.3",
     "vitest": "^4.0.0"

package/scripts/post-install-notice.mjs

@@ -0,0 +1,136 @@
+#!/usr/bin/env node
+/**
+ * Postinstall restart-nudge — drops a notice file Claude reads after upgrade.
+ *
+ * Problem this solves:
+ *   When `npm install` runs inside Claude Code (typically because the user
+ *   asked Claude to upgrade moflo), the just-installed bits are on disk but
+ *   the running session still has the OLD launcher, hooks, MCP server, and
+ *   statusline loaded. The launcher only re-reads them on the NEXT
+ *   session-start — the upgrade is inert until the user restarts.
+ *
+ *   The original v4.9.4 design printed a banner to stdout, expecting npm to
+ *   relay it. It does not: npm 7+ defaults to `foreground-scripts: false`
+ *   and captures install-script stdout/stderr into log files. The banner
+ *   never reached Claude. (#856.)
+ *
+ * Fix:
+ *   This script drops `<project>/.moflo/restart-pending.json` on every
+ *   relevant install. Claude is instructed (via the moflo CLAUDE.md
+ *   injection) to read + surface + delete the file after running
+ *   `npm install moflo@*`. No reliance on npm cooperating with stdout.
+ *
+ *   The banner is still printed to stdout for the rare `--foreground-scripts`
+ *   user, and the dedup tracker is preserved so repeat postinstalls of the
+ *   same version don't double-write the notice.
+ *
+ * Files written:
+ *   - .moflo/restart-pending.json       (the payload Claude reads)
+ *   - .moflo/last-install-banner.json   (dedup tracker, version-stamped)
+ *
+ * Gating:
+ *   - Only fires when CLAUDE_PROJECT_DIR or CLAUDECODE is set; non-Claude
+ *     installs and CI stay silent.
+ *   - Dedupes by version: same (project, version) pair won't re-write.
+ *
+ * Failure posture: never blocks an install. Errors are swallowed; exit 0.
+ */
+
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+
+const SCRIPT_PATH = fileURLToPath(import.meta.url);
+
+function isClaudeSession() {
+  return Boolean(process.env.CLAUDE_PROJECT_DIR || process.env.CLAUDECODE);
+}
+
+function consumerProjectRoot() {
+  // npm sets INIT_CWD to the original directory where the user ran `npm
+  // install` — the consumer's project root, regardless of which package's
+  // postinstall is running.
+  return process.env.INIT_CWD || process.cwd();
+}
+
+function installedVersion() {
+  // package.json sits one level above scripts/.
+  const pkgPath = resolve(dirname(SCRIPT_PATH), '..', 'package.json');
+  if (!existsSync(pkgPath)) return null;
+  try {
+    return JSON.parse(readFileSync(pkgPath, 'utf-8')).version || null;
+  } catch {
+    return null;
+  }
+}
+
+function readTrackedVersion(trackerPath) {
+  if (!existsSync(trackerPath)) return null;
+  try {
+    return JSON.parse(readFileSync(trackerPath, 'utf-8')).version || null;
+  } catch {
+    return null;
+  }
+}
+
+function writeJson(filePath, payload) {
+  try {
+    mkdirSync(dirname(filePath), { recursive: true });
+    writeFileSync(filePath, JSON.stringify(payload, null, 2));
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function buildMessage(version) {
+  // Plain-text payload Claude relays verbatim. Names Claude Code explicitly
+  // so the assistant frames it as a restart instruction, not a log line.
+  return [
+    `MoFlo ${version} installed.`,
+    '',
+    'Please restart Claude Code to load the new MoFlo.',
+    '',
+    'Hooks, MCP tools, statusline, and the session-start launcher are',
+    'loaded once at session-start — the running session is still on the',
+    'previous moflo until you exit and reopen Claude Code.',
+  ].join('\n');
+}
+
+function printBanner(version, message) {
+  // Stdout fallback for --foreground-scripts users. With npm's default
+  // config this output is captured and never seen — that's why the notice
+  // file exists. Kept anyway because it costs nothing.
+  const border = '═'.repeat(67);
+  process.stdout.write(`\n${border}\n  MoFlo ${version} installed.\n\n  ⚠ ${message.split('\n')[2]}\n${border}\n\n`);
+}
+
+function run() {
+  if (!isClaudeSession()) return { fired: false, reason: 'not-claude' };
+
+  const version = installedVersion();
+  if (!version) return { fired: false, reason: 'no-version' };
+
+  const projectRoot = consumerProjectRoot();
+  const trackerPath = join(projectRoot, '.moflo', 'last-install-banner.json');
+  const noticePath = join(projectRoot, '.moflo', 'restart-pending.json');
+
+  const lastShown = readTrackedVersion(trackerPath);
+  if (lastShown === version) return { fired: false, reason: 'already-shown' };
+
+  const writtenAt = new Date().toISOString();
+  const message = buildMessage(version);
+
+  writeJson(noticePath, { version, writtenAt, message });
+  writeJson(trackerPath, { version, shownAt: writtenAt });
+
+  printBanner(version, message);
+  return { fired: true, version, noticePath };
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+  try {
+    run();
+  } catch { /* never block install */ }
+  process.exit(0);
+}