worclaude 2.4.2 → 2.4.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +4 -3
  2. package/package.json +2 -2
package/CHANGELOG.md CHANGED
@@ -4,21 +4,22 @@ All notable changes to worclaude are documented in this file. Format loosely fol
4
4
 
5
5
  ## [Unreleased]
6
6
 
7
- ## [2.4.2] — 2026-04-18
7
+ ## [2.4.3] — 2026-04-18
8
8
 
9
- Hygiene patch closing three drifts surfaced by the 2026-04-18 anthropic-watch feed audit. No user-facing CLI surface change; `worclaude init` / `upgrade` produce identical output to 2.4.1.
9
+ Hygiene patch closing three drifts surfaced by the 2026-04-18 anthropic-watch feed audit, plus a packaging fix. No user-facing CLI surface change; `worclaude init` / `upgrade` produce identical output to 2.4.1.
10
10
 
11
11
  ### Added
12
12
 
13
13
  - `worclaude doctor` now recognizes the 7 hook events introduced since Claude Code 2.1.101: `TaskCreated`, `TaskCompleted`, `StopFailure`, `InstructionsLoaded`, `ConfigChange`, `Elicitation`, `ElicitationResult`. `VALID_HOOK_EVENTS` grew from 20 to 27 — matching `docs/reference/hooks.md` and `docs/spec/SPEC.md`, which already documented 27.
14
14
  - `worclaude doctor` warns on agents declaring `claude-sonnet-4` / `sonnet-4` (Anthropic retires these model IDs on 2026-06-15).
15
15
  - New `docs/spec/BACKLOG-v2.1.md` entry — "Sandbox defaults in scaffolded settings" — captures open design questions for scaffolding the Claude Code 2.1.113 `sandbox.network.deniedDomains` feature in a future minor.
16
- - `docs/reference/upstream-automation.md` — new "Action pinning" policy paragraph and "Version history" section (2.4.0 → 2.4.2).
16
+ - `docs/reference/upstream-automation.md` — new "Action pinning" policy paragraph and "Version history" section (2.4.0 → 2.4.3).
17
17
 
18
18
  ### Changed
19
19
 
20
20
  - `.github/workflows/upstream-check.yml` — `anthropics/claude-code-action` pinned from floating `@v1` to commit SHA `38ec876110f9fbf8b950c79f534430740c3ac009` (v1.0.101). Closes the pre-existing `TODO(security):` comment in the workflow. Feed content is untrusted user input; floating `@v1` let any future action release run unreviewed against the repo's `CLAUDE_CODE_OAUTH_TOKEN`.
21
21
  - `src/commands/doctor.js` version-stamp comment refreshed from v2.1.101 to v2.1.114. `Setup` retained in the hook event set with an inline rationale comment (older worclaude scaffolds may still declare it).
22
+ - `package.json` — `bin.worclaude` path normalized from `./src/index.js` to `src/index.js` to silence a cosmetic `npm publish` warning. The installed binary is unchanged; npm already normalized the value at publish time.
22
23
 
23
24
  ## [2.4.1] — 2026-04-18
24
25
 
package/package.json CHANGED
@@ -1,10 +1,10 @@
1
1
  {
2
2
  "name": "worclaude",
3
- "version": "2.4.2",
3
+ "version": "2.4.3",
4
4
  "description": "The Workflow Layer for Claude Code — scaffold agents, commands, skills, hooks, and memory into any project",
5
5
  "type": "module",
6
6
  "bin": {
7
- "worclaude": "./src/index.js"
7
+ "worclaude": "src/index.js"
8
8
  },
9
9
  "main": "src/index.js",
10
10
  "files": [