@dp-pcs/ogp 0.4.2 → 0.4.4

package/docs/project-intent-testing.md

@@ -0,0 +1,97 @@
+# Project Intent Testing
+
+This repo now includes a runnable local project-intent harness:
+
+```bash
+npm run test:project-intents
+```
+
+The harness creates two isolated local gateways with separate `OGP_HOME` directories, federates them over localhost, and exercises the real project commands:
+
+- `federation request`
+- `federation approve`
+- `project create`
+- `project contribute --local-only`
+- `project request-join`
+- `project send-contribution`
+- `project query-peer`
+- `project status-peer`
+
+## What It Verifies
+
+The automated run checks these behaviors:
+
+1. Two local daemons can boot independently.
+2. Federation approval completes between them.
+3. The project owner can create a local project and persist local contributions.
+4. A non-member peer cannot query the project before joining.
+5. The peer can join the project through `project.join`.
+6. The joined peer can send a remote contribution through `project.contribute`.
+7. The joined peer can query the owner project through `project.query`.
+8. The status request path for `project.status` succeeds at the transport level.
+
+## Useful Variants
+
+Keep the temp state and logs for inspection:
+
+```bash
+npm run test:project-intents -- --keep-state
+```
+
+Use a custom root or ports:
+
+```bash
+npm run test:project-intents -- \
+  --root /tmp/ogp-project-intent-test \
+  --alpha-port 18990 \
+  --beta-port 18991
+```
+
+Skip the TypeScript rebuild when `dist/` is already current:
+
+```bash
+npm run test:project-intents -- --skip-build
+```
+
+## Manual Checks
+
+If you want to replay the flow by hand, the harness prints the exact commands it used. These are the most valuable checks:
+
+1. Membership isolation:
+   `project query-peer` should fail before `project request-join`.
+2. Membership grant:
+   `project request-join` should create or update the project on the requester and add the remote member on the owner.
+3. Data flow:
+   `project send-contribution` should create a new contribution on the owner gateway.
+4. Remote visibility:
+   `project query-peer` should return the contribution after join succeeds.
+5. Local persistence:
+   `projects.json` under each `OGP_HOME` should reflect the expected project and topic state.
+
+## Interpreting Success
+
+Project intents are working if all of the following are true:
+
+- both daemons answer `/.well-known/ogp`
+- both peers end up `approved` in `peers.json`
+- the owner `projects.json` contains the remote member after join
+- the owner `projects.json` contains the remote contribution after send
+- pre-join query fails and post-join query succeeds
+
+## Known Testing Nuance
+
+`project status-peer` currently confirms that the request was sent, but it is not the best content-verification command because the CLI does not format the returned status payload. Treat it as a transport-path check, and use `project query-peer`, `project status`, `projects.json`, and daemon logs for stronger validation.
+
+For controlled runs, `project contribute --local-only` is still useful when you want to inspect local state before any federation traffic. The default auto-sync path now limits fan-out to approved peers who are explicit members of the project.
+
+## File Transfer
+
+OGP project intents do not currently implement first-class file transfer. Small structured metadata is fine, but real file movement would need explicit protocol support such as:
+
+- file manifests with name, size, MIME type, and hash
+- signed download URLs
+- chunking or streaming for larger payloads
+- size limits and approval controls
+- storage and retention rules
+
+For now, the practical pattern is to transfer references, hashes, and URLs through project intents rather than raw file contents.

package/docs/quickstart.md

@@ -20,6 +20,14 @@ After installation, install the OGP skills for Claude Code:
 ogp-install-skills
 ```
 
+Then verify the installed skill versions:
+
+```bash
+rg -n '^version:' ~/.openclaw/skills/ogp*/SKILL.md ~/.claude/skills/ogp*/SKILL.md 2>/dev/null
+```
+
+For the current `0.4.2` release line, expect `ogp` `2.6.0`, `ogp-agent-comms` `0.6.0`, and `ogp-project` `2.2.0`.
+
 ## Step 2: Configure
 
 Run the interactive setup:
@@ -137,8 +145,8 @@ You should see:
   "gatewayUrl": "https://abc-def-123.trycloudflare.com",
   "publicKey": "302a300506032b6570032100...",
   "capabilities": {
-    "intents": ["message", "task-request", "status-update", "agent-comms"],
-    "features": ["scope-negotiation", "reply-callback", "project-intent"]
+    "intents": ["message", "task-request", "status-update", "agent-comms", "project.join", "project.contribute", "project.query", "project.status"],
+    "features": ["scope-negotiation", "reply-callback"]
   },
   "endpoints": {
     "request": "https://abc-def-123.trycloudflare.com/federation/request",
@@ -426,8 +434,8 @@ ogp federation scopes <peer-id>
 
 # Projects
 ogp project create <id> <name> [--description "..."]
-ogp project contribute <id> <topic> <summary>
-ogp project query <id> [--limit 10] [--topic <topic>]
+ogp project contribute <id> <type> <summary>
+ogp project query <id> [--limit 10] [--type <type>]
 ogp project status <id>
 
 # Intents

package/docs/scopes.md

@@ -19,8 +19,8 @@ Your gateway advertises its capabilities in the federation card at `/.well-known
   "version": "0.2.3",
   "displayName": "David's Gateway",
   "capabilities": {
-    "intents": ["message", "task-request", "status-update", "agent-comms", "project"],
-    "features": ["scope-negotiation", "reply-callback", "project-intent"]
+    "intents": ["message", "task-request", "status-update", "agent-comms", "project.join", "project.contribute", "project.query", "project.status"],
+    "features": ["scope-negotiation", "reply-callback"]
   }
 }
 ```
@@ -28,7 +28,7 @@ Your gateway advertises its capabilities in the federation card at `/.well-known
 This tells other gateways what you **can** support, not what you **will** grant.
 
 Capabilities are automatically populated from:
-- **Built-in intents**: `message`, `task-request`, `status-update`, `agent-comms`, `project`
+- **Built-in intents**: `message`, `task-request`, `status-update`, `agent-comms`, `project.join`, `project.contribute`, `project.query`, `project.status`
 - **Custom intents**: Registered via `ogp intent register`
 - **Features**: Protocol features your gateway supports
 
@@ -205,25 +205,25 @@ ogp federation approve alice \
   --rate 50/3600
 ```
 
-## Project Intent
+## Project Intents
 
-The `project` intent enables collaborative project management across federated peers.
+Project collaboration is enforced through four exact runtime intents, not a singular `project` scope.
 
 ### Project Actions
 
 | Action | Description | Rate Limit Recommended |
 |--------|-------------|------------------------|
-| `contribute` | Send contribution to peer's project | 100/hour |
-| `query` | Query peer's project contributions | 50/hour |
-| `request-join` | Request to join peer's project | 10/hour |
-| `status` | Get project status from peer | 20/hour |
+| `project.join` | Join or create a shared project context | 10/hour |
+| `project.contribute` | Send a contribution to a peer's project | 100/hour |
+| `project.query` | Query peer project contributions | 50/hour |
+| `project.status` | Get peer project status | 20/hour |
 
 ### Grant Project Access
 
 ```bash
-# Grant project collaboration access
+# Grant full project collaboration access
 ogp federation approve alice \
-  --intents project \
+  --intents project.join,project.contribute,project.query,project.status \
   --rate 100/3600
 ```
 
@@ -260,9 +260,9 @@ ogp federation approve bob \
 ### Project Collaboration
 
 ```bash
-# Grant project and agent-comms for team collaboration
+# Grant project collaboration intents plus agent-comms for team coordination
 ogp federation approve charlie \
-  --intents agent-comms,project \
+  --intents agent-comms,project.join,project.contribute,project.query,project.status \
   --topics project-updates,planning \
   --rate 200/3600
 ```

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@dp-pcs/ogp",
-  "version": "0.4.2",
+  "version": "0.4.4",
   "description": "Open Gateway Protocol (OGP) - Peer-to-peer federation daemon for OpenClaw AI gateways with cryptographic signatures",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "bin": {
-    "ogp": "./dist/cli.js",
-    "ogp-install-skills": "./scripts/install-skills.js"
+    "ogp": "dist/cli.js",
+    "ogp-install-skills": "scripts/install-skills.js"
   },
   "scripts": {
     "build": "tsc",
@@ -31,7 +31,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/dp-pcs/ogp.git"
+    "url": "git+https://github.com/dp-pcs/ogp.git"
   },
   "homepage": "https://github.com/dp-pcs/ogp#readme",
   "bugs": {

package/scripts/install-skills.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { existsSync, mkdirSync, cpSync, readdirSync } from 'node:fs';
+import { existsSync, mkdirSync, cpSync, readdirSync, rmSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
 import { fileURLToPath } from 'node:url';
@@ -55,6 +55,13 @@ const availableSkills = readdirSync(skillsSrc, { withFileTypes: true })
   .filter(d => d.isDirectory() && existsSync(join(skillsSrc, d.name, 'SKILL.md')))
   .map(d => d.name);
 
+function getSkillVersion(skill) {
+  const skillFile = join(skillsSrc, skill, 'SKILL.md');
+  const content = readFileSync(skillFile, 'utf8');
+  const match = content.match(/^version:\s*(.+)$/m);
+  return match?.[1]?.trim() ?? 'unknown';
+}
+
 if (availableSkills.length === 0) {
   console.log('No skills found in the skills/ directory.');
   process.exit(0);
@@ -176,6 +183,9 @@ async function main() {
       const src = join(skillsSrc, skill);
       const dest = join(platform.skillsDir, skill);
       try {
+        // Replace the installed skill directory wholesale so stale files from
+        // previous package versions do not survive upgrades.
+        rmSync(dest, { recursive: true, force: true });
         cpSync(src, dest, { recursive: true });
         console.log(`   ✓ ${skill}`);
         installed++;
@@ -192,6 +202,14 @@ async function main() {
     console.log(`\n✅ Successfully installed ${totalInstalled} skill(s) to ${selectedPlatforms.length} platform(s)`);
     console.log('');
 
+    const installedVersions = selectedSkills
+      .map(skill => `${skill}@${getSkillVersion(skill)}`)
+      .join(', ');
+    console.log(`Installed skill versions: ${installedVersions}`);
+    console.log('Verify installed copies with:');
+    console.log("  rg -n '^version:' ~/.openclaw/skills/ogp*/SKILL.md ~/.claude/skills/ogp*/SKILL.md 2>/dev/null");
+    console.log('');
+
     // Platform-specific restart instructions
     const platformNames = selectedPlatforms.map(p => p.name);
     if (platformNames.includes('OpenClaw')) {