dean0x · dean0x · Aug 17, 2026 · Aug 17, 2026 · Aug 17, 2026 · Aug 17, 2026
diff --git a/.devflow/features/installer-shadowing/KNOWLEDGE.md b/.devflow/features/installer-shadowing/KNOWLEDGE.md
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -26,6 +26,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **`devflow uninstall`**: Now removes proxy artifacts on uninstall — `ensure-proxy` hook registrations, `ANTHROPIC_BASE_URL` from `settings.json`, and the model discovery cache (`~/.devflow/cache/models/`) — in addition to standard command/agent/skill/rule removal.
 
 ### Removed
+- **`devflow-audit-claude` plugin and `/audit-claude` command** (BREAKING): The CLAUDE.md audit plugin is removed. `--plugin=audit-claude` is now rejected by `devflow init`; stale `devflow-audit-claude` entries in existing manifests are silently pruned by `DELETED_PLUGIN_NAMES` on the next partial reinstall. The `claude-md-auditor` agent and `audit-claude.md` command are deleted; the orphan sweep removes any previously installed copies automatically.
+- **Non-selectable optional carry mechanism**: `resolveNonSelectableOptionalCarry` and `applyNonSelectableCarry` deleted from `init-seed.ts`. The carry was guarding a now-impossible state (the only non-selectable optional plugin was `devflow-audit-claude`). A structural invariant test (`EXCLUDED ∩ optional === ∅`) ensures this state stays impossible. No behavior change for users.
 - **1.x migration registry and helper modules** (BREAKING): all 20 run-once 1.x upgrade migrations removed from `MIGRATIONS`; helper modules `legacy-decisions-purge.ts`, `decisions-ledger-migration.ts`, `marketplace-cleanup.ts`, and `mkdir-lock.ts` deleted. The migration framework stays for future 2.x entries. No 1.x → 2.0 upgrade path.
 - **Native `claude plugin install` path** (BREAKING): the `claude plugin install` code path is removed; `installViaFileCopy` (file copy) is the sole install mechanism for all Devflow assets.
 - **`extraKnownMarketplaces` registration from settings template**: the Devflow marketplace entry is no longer written to `~/.claude/settings.json` on install.

diff --git a/CLAUDE.md b/CLAUDE.md
@@ -12,7 +12,7 @@ Devflow enhances Claude Code with intelligent development workflows. Modificatio
 
 ## Architecture Overview
 
-Registry-driven CLI tool with 23 plugins (12 core + 10 optional language/ecosystem + 1 optional workflow). Plugins are entries in DEVFLOW_PLUGINS in `src/core/plugins.ts` — each entry declares its `commands`, `agents`, `skills`, and `rules` arrays. All assets live once in `src/assets/` and install directly; the only compile step is `.mds` command sources → `dist/commands/` via `npm run build:mds`.
+Registry-driven CLI tool with 22 plugins (12 core + 10 optional). Plugins are entries in DEVFLOW_PLUGINS in `src/core/plugins.ts` — each entry declares its `commands`, `agents`, `skills`, and `rules` arrays. All assets live once in `src/assets/` and install directly; the only compile step is `.mds` command sources → `dist/commands/` via `npm run build:mds`.
 
 | Plugin | Purpose |
 |--------|---------|
@@ -28,7 +28,6 @@ Registry-driven CLI tool with 23 plugins (12 core + 10 optional language/ecosyst
 | `devflow-bug-analysis` | Proactive bug finding with static and semantic analysis |
 | `devflow-ambient` | Ambient mode — orchestrator charter + plan handoff |
 | `devflow-core-skills` | Auto-activating quality enforcement |
-| `devflow-audit-claude` | Audit CLAUDE.md files (optional) |
 | `devflow-dynamic` | Dynamic workflow recipes — dependency-aware tickets→plan→build delivery pipeline (optional) |
 | `devflow-typescript` | TypeScript language patterns (optional) |
 | `devflow-react` | React framework patterns (optional) |
@@ -84,9 +83,9 @@ devflow/
 │   ├── targets/claude-code/ # Claude Code install target (installer, hooks.ts, post-install, claude-paths, legacy, templates/)
 │   └── assets/             # All installable assets (single source of truth)
 │       ├── skills/         # 41 skills
-│       ├── agents/         # 17 agents (16 shared + 1 plugin-specific claude-md-auditor)
+│       ├── agents/         # 16 agents
 │       ├── rules/          # 13 rules (flat .md files)
-│       ├── commands/       # MDS command sources (14 hosts + 10 partials in _partials/; 2 static .md)
+│       ├── commands/       # MDS command sources (14 hosts + 10 partials in _partials/; 1 static .md)
 │       └── scripts/hooks/  # Capture + memory + learning + ambient + proxy hooks (capture-prompt, capture-turn, capture-question, queue-append, memory-worker, background-memory-update [Stop-hook worker], learning-lock, session-start-memory, session-start-context, session-start-orchestrator, pre-compact-memory, preamble, ensure-proxy [SessionStart+UserPromptSubmit, registered/removed by addProxyHooks/removeProxyHooks], git-marker [sourced git-repo helper], get-mtime, hook-bootstrap, hook-log-init)
 │           └── assets/     # Static prose assets shipped with hooks (orchestrator-charter.md)
 ├── scripts/                # Dev tooling (build-mds.ts, bump-version.ts)
@@ -231,12 +230,9 @@ Per-project runtime files live under `.devflow/`:
 - `/research` — Researcher agents + Skimmer + Synthesizer + Knowledge; multi-type research with trust-aware synthesis
 - `/release` — Git agent + Validator + Synthesizer; adaptive release with learned configuration
 - `/bug-analysis` — BugAnalyzer agents + Git + Synthesizer; proactive bug finding with static and semantic analysis, incremental by default
-- `/audit-claude` — CLAUDE.md audit (optional plugin)
 
 **Shared agents** (16): git, synthesizer, skimmer, simplifier, coder, reviewer, triager, evaluator, tester, scrutinizer, validator, designer, knowledge, researcher, bug-analyzer, learning
 
-**Plugin-specific agents** (1): claude-md-auditor
-
 ## Key Conventions
 
 ### Skills

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -25,9 +25,9 @@ After setup, Devflow commands (`/code-review`, `/implement`, etc.) are available
 ```
 devflow/
 ├── src/assets/skills/   # 41 skills (single source of truth)
-├── src/assets/agents/   # 17 agents (single source of truth)
+├── src/assets/agents/   # 16 agents (single source of truth)
 ├── src/assets/rules/    # 13 rules (single source of truth, flat .md files)
-├── src/assets/commands/ # Command sources (.mds + 2 static .md; partials in _partials/)
+├── src/assets/commands/ # Command sources (.mds + 1 static .md; partials in _partials/)
 ├── src/assets/scripts/hooks/  # Working Memory + ambient hooks
 ├── src/core/            # Shared CLI logic (DEVFLOW_PLUGINS registry, paths, flags, …)
 ├── src/cli/             # TypeScript CLI command modules (init, list, uninstall, …)

diff --git a/README.md b/README.md
@@ -52,7 +52,7 @@ you: add rate limiting to the /api/upload endpoint
 
 **Full lifecycle.** `/devflow:plan` takes a feature idea through codebase exploration, gap analysis, design review, and outputs a plan document ready for `/devflow:implement`. `/devflow:implement` accepts that plan document (or an issue or task description directly) and drives it through coding, validation, and refinement to a PR. `/devflow:debug` investigates bugs with competing hypotheses in parallel. `/devflow:self-review` runs Simplifier + Scrutinizer quality passes.
 
-**Everything is composable.** 23 plugins (12 core + 10 language/ecosystem + 1 optional workflow recipes). Install only what you need.
+**Everything is composable.** 22 plugins (12 core + 10 optional). Install only what you need.
 
 **HUD.** A persistent status line updates on every prompt — project, branch, diff stats, context usage, model, cost with weekly/monthly totals, quota reset timers, and configuration counts at a glance.
 

diff --git a/docs/cli-reference.md b/docs/cli-reference.md
@@ -60,7 +60,6 @@ npx devflow-kit init --plugin=implement,code-review  # Install multiple
 | `devflow-bug-analysis` | Core | Proactive bug finding with static and semantic analysis |
 | `devflow-ambient` | Core | Ambient mode (orchestrator charter + plan handoff) |
 | `devflow-core-skills` | Core | Auto-activating quality skills |
-| `devflow-audit-claude` | Optional | CLAUDE.md file audit |
 | `devflow-typescript` | Language | TypeScript patterns |
 | `devflow-react` | Language | React patterns |
 | `devflow-accessibility` | Language | Web accessibility patterns |

diff --git a/docs/reference/agent-design.md b/docs/reference/agent-design.md
@@ -124,4 +124,4 @@ npx devflow-kit agents --reset --yes                    # Skip confirmation prom
 
 All agents live in `src/assets/agents/` — there is no separate per-plugin agent directory. For an agent used by only one plugin, add it to `src/assets/agents/` and declare it in only that plugin's `agents` array in DEVFLOW_PLUGINS.
 
-**Note:** `src/assets/agents/` is the single source of truth for all agents (e.g., `git.md`, `coder.md`, `designer.md`, `claude-md-auditor.md`). No build step distributes agents — they install directly at `node dist/cli.js init` time.
+**Note:** `src/assets/agents/` is the single source of truth for all agents (e.g., `git.md`, `coder.md`, `designer.md`). No build step distributes agents — they install directly at `node dist/cli.js init` time.
diff --git a/docs/reference/file-organization.md b/docs/reference/file-organization.md
@@ -44,7 +44,7 @@ devflow/
 │       │   │   └── references/
 │       │   ├── software-design/
 │       │   └── ...
-│       ├── agents/                   # 17 agents (16 shared + claude-md-auditor)
+│       ├── agents/                   # 16 agents
 │       │   ├── git.md
 │       │   ├── synthesizer.md
 │       │   ├── coder.md
@@ -55,7 +55,7 @@ devflow/
 │       │   └── ...
 │       ├── commands/                 # Command sources
 │       │   ├── *.mds                 # 14 MDS host files (compiled to dist/commands/ by build:mds)
-│       │   ├── *.md                  # 2 static command files
+│       │   ├── *.md                  # 1 static command file
 │       │   └── _partials/            # 10 MDS partial files (no output-dir:, never compiled directly)
 │       └── scripts/hooks/            # Capture + memory + learning + ambient hooks
 │           ├── capture-prompt        # UserPromptSubmit hook: appends user turn to memory + learning queues (independently gated)
@@ -151,10 +151,9 @@ Assets live once in `src/assets/` and install directly to the user's `~/.claude/
 2. Add agent name to the plugin entry's `agents` array in DEVFLOW_PLUGINS
 3. Run `node dist/cli.js init` to install
 
-### Shared vs Plugin-Specific Agents
+### Agents
 
-- **Shared** (16): `git`, `synthesizer`, `skimmer`, `simplifier`, `coder`, `reviewer`, `triager`, `evaluator`, `tester`, `scrutinizer`, `validator`, `designer`, `knowledge`, `researcher`, `bug-analyzer`, `learning`
-- **Plugin-specific** (1): `claude-md-auditor` — committed directly in `src/assets/agents/`
+All 16 agents (`git`, `synthesizer`, `skimmer`, `simplifier`, `coder`, `reviewer`, `triager`, `evaluator`, `tester`, `scrutinizer`, `validator`, `designer`, `knowledge`, `researcher`, `bug-analyzer`, `learning`) are shared — committed directly in `src/assets/agents/`.
 
 ## Settings Override
 

diff --git a/scripts/build-mds.ts b/scripts/build-mds.ts
@@ -257,9 +257,8 @@ async function main(): Promise<void> {
     process.exit(1);
   }
 
-  // Copy 2 hand-authored command files verbatim into dist/commands/
+  // Copy 1 hand-authored command file verbatim into dist/commands/
   const handAuthored = [
-    path.join(ROOT, 'src', 'assets', 'commands', 'audit-claude.md'),
     path.join(ROOT, 'src', 'assets', 'commands', 'release.md'),
   ];
   const commandsDest = path.join(ROOT, 'dist', 'commands');

diff --git a/src/assets/agents/claude-md-auditor.md b/src/assets/agents/claude-md-auditor.md
diff --git a/src/assets/commands/audit-claude.md b/src/assets/commands/audit-claude.md
Original file line number	Diff line number	Diff line change
Expand Up		@@ -124,4 +124,4 @@ npx devflow-kit agents --reset --yes # Skip confirmation prom

		All agents live in `src/assets/agents/` — there is no separate per-plugin agent directory. For an agent used by only one plugin, add it to `src/assets/agents/` and declare it in only that plugin's `agents` array in DEVFLOW_PLUGINS.

		Note: `src/assets/agents/` is the single source of truth for all agents (e.g., `git.md`, `coder.md`, `designer.md`, `claude-md-auditor.md`). No build step distributes agents — they install directly at `node dist/cli.js init` time.
		Note: `src/assets/agents/` is the single source of truth for all agents (e.g., `git.md`, `coder.md`, `designer.md`). No build step distributes agents — they install directly at `node dist/cli.js init` time.