@aiguru/google-web-operations 0.6.4 → 0.6.6

package/.env.example

@@ -38,5 +38,7 @@ GWO_REPORT_TO=ai@aiguru.co.il
 # Fine-grained token: Contents write + Pull requests write on the site repos.
 GITHUB_TOKEN=
 
-# --- NPM JS ACCESS TOKEN - gwo-release --------------------
-NPM_TOKEN=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
+# --- Publishing ---------------------------------------------------------------
+# The npm publish token is NOT an environment variable of this system and must
+# never be written here or anywhere in the repository: this file is shipped
+# inside the package. It lives only in the GitHub repository secret NPM_TOKEN.

package/bin/gwo.js

@@ -27,6 +27,12 @@ if (major < 22 || (major === 22 && minor < 18)) {
 
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const cmd = process.argv[2];
+
+// Installed inside a project rather than globally? Say so once per run (stderr, never on the MCP channel).
+// Global installs live under <prefix>/lib/node_modules or <prefix>/npm/node_modules; a checkout has no node_modules above it.
+if (/[\\/]node_modules[\\/]/.test(root) && !/[\\/](lib|npm)[\\/]node_modules[\\/]/i.test(root) && cmd !== 'mcp') {
+  console.error('note: gwo is installed locally in a project. For a stable setup: npm i -g @aiguru/google-web-operations\n');
+}
 // A checkout runs the TypeScript sources; the packaged build ships JavaScript.
 const ext = existsSync(path.join(root, 'apps', 'cli', 'src', 'index.js')) ? 'index.js' : 'index.ts';
 // Dynamic imports need file URLs on Windows; a bare drive path is read as a URL scheme.

package/bin/postinstall.js

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+/**
+ * Runs after `npm install` of the package. Says one thing, only when it
+ * matters: this is a command-line tool and belongs in a global install.
+ * Never fails the install.
+ */
+try {
+  if (process.env.npm_config_global !== 'true') {
+    console.log([
+      '',
+      '  Google Web Operations was installed into this project, not globally.',
+      '  It is a command-line tool (gwo) and the hosts need a stable path to it:',
+      '',
+      '    npm i -g @aiguru/google-web-operations',
+      '    gwo install',
+      '',
+      '  (then remove the local copy: node_modules, package.json, package-lock.json if this folder was empty)',
+      '',
+    ].join('\n'));
+  }
+} catch { /* never break an install */ }

package/docs/GETTING-STARTED.he.md

@@ -6,7 +6,7 @@
 
 דרישות: Node 22.18 ומעלה.
 
-1. בטרמינל:
+1. בטרמינל, מכל תיקייה, עם `-g` (בלעדיו npm מתקין לתיקייה הנוכחית ו‑`gwo` לא יהיה זמין):
    ```
    npm i -g @aiguru/google-web-operations
    gwo install

package/docs/INSTALL.he.md

@@ -7,11 +7,15 @@
 
 ## 1. התקנה
 
+מכל תיקייה שהיא (לא צריך תיקיית פרויקט), עם `-g`:
+
 ```
 npm i -g @aiguru/google-web-operations
 gwo install
 ```
 
+ה‑`-g` חשוב: בלעדיו npm יוצר `package.json`, `package-lock.json` ו‑`node_modules` בתיקייה הנוכחית, ו‑`gwo` לא נכנס ל‑PATH. הכלי מזהה את זה: `gwo install` מסרב לרשום נתיב מתוך `node_modules` של פרויקט ואומר מה לעשות. אם זה קרה: למחוק את שלושת אלה ולהריץ שוב עם `-g`.
+
 `gwo install` רושם את שרת ה‑MCP, את הסקילים ואת הפקודות בקלוד ובקודקס, ויוצר את `~/.gwo`. רק להוסט אחד: `gwo install claude` או `gwo install codex`. לראות בלי לשנות: `gwo install --print`.
 
 חלופה בלי npm: להוריד את ה‑tgz מעמוד ה‑Releases בריפו ולהריץ `npm i -g ./aiguru-google-web-operations-<version>.tgz` (ה‑`./` חובה).

package/hosts/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "google-web-operations",
-  "version": "0.6.4",
+  "version": "0.6.6",
   "description": "Google Web Operations: agent-run SEO and GEO operations for client websites. One core, one MCP server, two hosts (Claude Code, Codex).",
   "author": {
     "name": "AI Guru"

package/hosts/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "google-web-operations",
-  "version": "0.6.4",
+  "version": "0.6.6",
   "description": "Google Web Operations: agent-run SEO and GEO operations for client websites. One core, one MCP server, two hosts (Claude Code, Codex).",
   "author": {
     "name": "AI Guru"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aiguru/google-web-operations",
-  "version": "0.6.4",
+  "version": "0.6.6",
   "description": "Google Web Operations: agent-run SEO and GEO operations for client websites. One core, one MCP server, two hosts (Claude Code, Codex).",
   "license": "UNLICENSED",
   "private": false,
@@ -15,6 +15,9 @@
   "bin": {
     "gwo": "bin/gwo.js"
   },
+  "scripts": {
+    "postinstall": "node bin/postinstall.js"
+  },
   "dependencies": {
     "@modelcontextprotocol/server": "^2.0.0",
     "jszip": "^3.10.2",

package/tools/build-package.js

@@ -37,6 +37,7 @@ const out = {
     name: pkg['name'], version: pkg['version'], description: pkg['description'], license: pkg['license'] ?? 'UNLICENSED', private: false,
     type: 'module', engines: pkg['engines'], repository: pkg['repository'],
     bin: { gwo: 'bin/gwo.js' },
+    scripts: { postinstall: 'node bin/postinstall.js' },
     dependencies: pkg['dependencies'],
 };
 writeFileSync(path.join(OUT, 'package.json'), JSON.stringify(out, null, 2) + '\n');

package/tools/check-secrets.js

@@ -0,0 +1,59 @@
+#!/usr/bin/env node
+/**
+ * Refuse to build, test or release when a credential sits in a file that the
+ * package or the repository would carry.
+ *
+ * Scans every tracked file and every file the build copies (so .env.example,
+ * docs, policies, playbooks and hosts are all covered) for well-known token
+ * shapes and for non-empty secret-looking assignments in example env files.
+ * Runs inside `npm run check`, so CI and the release workflow fail before
+ * anything is packed or published.
+ *
+ *   node tools/check-secrets.ts
+ */
+import { execFileSync } from 'node:child_process';
+import { readFileSync, statSync } from 'node:fs';
+import path from 'node:path';
+import { ROOT } from "../packages/core/src/paths.js";
+const PATTERNS = [
+    ['npm token', /\bnpm_[A-Za-z0-9]{30,}\b/],
+    ['GitHub token', /\b(ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{30,}\b|\bgithub_pat_[A-Za-z0-9_]{40,}\b/],
+    ['Google API key', /\bAIza[0-9A-Za-z_-]{30,}\b/],
+    ['Google OAuth client secret', /\bGOCSPX-[0-9A-Za-z_-]{20,}\b/],
+    ['Resend key', /\bre_[A-Za-z0-9]{20,}\b/],
+    ['OpenAI-style key', /\bsk-[A-Za-z0-9_-]{30,}\b/],
+    ['private key block', /-----BEGIN [A-Z ]*PRIVATE KEY-----/],
+];
+/** In *.example env files, any secret-looking variable must be empty. */
+const ENV_ASSIGN = /^\s*([A-Z0-9_]*(TOKEN|KEY|SECRET|PASSWORD)[A-Z0-9_]*)\s*=\s*(\S.*)$/;
+const SKIP = /^(package-lock\.json|.*\.(png|jpg|jpeg|gif|ico|wmf|woff2?|ttf|docx|pdf|tgz))$/i;
+const files = execFileSync('git', ['ls-files', '-z'], { cwd: ROOT, encoding: 'utf8' }).split('\0').filter(Boolean)
+    .filter((f) => !SKIP.test(f)).filter((f) => { try {
+    return statSync(path.join(ROOT, f)).isFile();
+}
+catch {
+    return false;
+} });
+const problems = [];
+for (const f of files) {
+    const text = readFileSync(path.join(ROOT, f), 'utf8');
+    for (const [name, re] of PATTERNS)
+        if (re.test(text))
+            problems.push(`${f}: looks like a ${name}`);
+    if (/\.env(\.example)?$|\.example\.yaml$/.test(f)) {
+        text.split('\n').forEach((line, i) => {
+            const m = line.match(ENV_ASSIGN);
+            if (m && !/^(GWO_[A-Z_]+|.*=\s*(<|\$\{|""|'')).*/.test(line) && !/^\s*#/.test(line)) {
+                // Allow documented placeholders such as ops@aiguru.co.il for non-secret names, refuse real-looking values for secret names.
+                if (!/^(GWO_TOKEN_STORE)$/.test(m[1]))
+                    problems.push(`${f}:${i + 1}: ${m[1]} has a value; example files must leave secrets empty`);
+            }
+        });
+    }
+}
+if (problems.length) {
+    console.error('check-secrets: refusing to continue.\n' + problems.map((p) => '  - ' + p).join('\n') +
+        '\nRemove the value, rotate the credential, and keep secrets in .env (gitignored), sites/*.secrets.yaml (gitignored) or GitHub repository secrets.');
+    process.exit(1);
+}
+console.log(`check-secrets: ${files.length} tracked files clean`);

package/tools/install.js

@@ -17,6 +17,7 @@
  * Only gwo-* entries are ever written or removed; nothing else in those
  * directories or files is touched. Idempotent: run it again after an upgrade.
  */
+import { execSync } from 'node:child_process';
 import { cpSync, existsSync, mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync, copyFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import path from 'node:path';
@@ -119,6 +120,29 @@ function codex() {
 log(`Google Web Operations ${uninstall ? 'uninstall' : 'install'}${print ? ' (print only)' : ''}`);
 log(`package: ${ROOT}`);
 log(`node:    ${node}`);
+// A package under some project's node_modules is a fragile place to point the
+// hosts at: it disappears with the folder or the next npm install there.
+if (!uninstall && !IS_CHECKOUT && /[\\/]node_modules[\\/]/.test(ROOT) && !argv.includes('--allow-local')) {
+    let globalRoot = '';
+    try {
+        globalRoot = execSync('npm root -g', { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim();
+    }
+    catch { /* npm not on PATH */ }
+    const isGlobal = globalRoot && path.resolve(ROOT).toLowerCase().startsWith(path.resolve(globalRoot).toLowerCase());
+    if (!isGlobal) {
+        console.error([
+            '',
+            'This copy of the package is installed locally (inside a project\'s node_modules), so the hosts would be',
+            'pointed at a path that vanishes with the folder or the next npm install there. Install it globally instead:',
+            '',
+            '    npm i -g @aiguru/google-web-operations',
+            '    gwo install',
+            '',
+            'To register this local copy anyway (a deliberate, pinned setup): gwo install --allow-local',
+        ].join('\n'));
+        process.exit(2);
+    }
+}
 if (!uninstall)
     ensureHome();
 if (targets.includes('claude'))