@jimhoyd/urlcode 0.4.1 → 0.4.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (37) hide show
  1. package/.claude/skills/urlcode-authoring/SKILL.md +10 -0
  2. package/.claude-plugin/marketplace.json +1 -1
  3. package/CONTRIBUTING.md +36 -0
  4. package/ROADMAP.md +16 -12
  5. package/dist/BUILD-MANIFEST.json +6 -6
  6. package/dist/cli.js +2 -1
  7. package/dist/extensions.js +78 -1
  8. package/dist/mcp.js +1 -1
  9. package/dist/policy.js +16 -0
  10. package/dist/readiness.js +5 -1
  11. package/dist/tooling.js +2 -1
  12. package/dist/types/extensions.d.ts +58 -0
  13. package/dist/types/readiness.d.ts +3 -0
  14. package/dist/types/tooling.d.ts +1 -0
  15. package/docs/AI-AUTHORING.md +5 -4
  16. package/docs/COMPOSING-A-SITE.md +15 -6
  17. package/docs/CONTAINER-PROMOTION.md +74 -0
  18. package/docs/DEVELOPMENT-PIPELINE.md +39 -5
  19. package/docs/EXTENSIONS.md +53 -88
  20. package/docs/FUNCTION-SECURITY.md +5 -8
  21. package/docs/OPEN-DECISIONS.md +27 -102
  22. package/docs/READINESS.md +4 -1
  23. package/docs/README.md +16 -10
  24. package/docs/RELEASE-0.4.2.md +30 -0
  25. package/docs/RELEASE-READINESS.md +40 -11
  26. package/docs/RELEASE-SECURITY.md +6 -2
  27. package/docs/SPIKE-DEFAULT-TRUST-MODEL.md +9 -13
  28. package/docs/TOOLING.md +1 -1
  29. package/docs/VERSION-ALIGNMENT.md +8 -0
  30. package/docs/archive/2026-09-20/OPEN-DECISIONS-COMPLETED.md +116 -0
  31. package/docs/archive/README.md +1 -0
  32. package/llms-full.txt +79 -107
  33. package/llms.txt +1 -1
  34. package/package.json +1 -1
  35. package/packaging/claude-plugin/.claude-plugin/plugin.json +1 -1
  36. package/packaging/claude-plugin/skills/urlcode-authoring/SKILL.md +10 -0
  37. package/skills/urlcode/SKILL.md +8 -1
package/skills/urlcode/SKILL.md CHANGED
@@ -39,6 +39,10 @@ has registered the `urlcode` server, prefer its tools over reading documents:
39
39
  and `get_schema` (one capability or YAML fragment), `search_recipes`,
40
40
  `explain` (a route's effective behavior) and `get_manifest`. The server is
41
41
  read-only; `--allow-authoring` is an operator opt-in you never add yourself.
42
+ When the MCP server was started with an operator host file, `get_extensions`
43
+ returns installed extension configuration/policy schemas and declared project
44
+ hook contracts. Otherwise use `urlcode extensions --project DIR --host-file
45
+ ABSOLUTE_HOST --json` when the operator has supplied that host file.
42
46
  Without the server, run the CLI equivalents and read only the output:
43
47
 
44
48
  ```sh
@@ -65,7 +69,10 @@ need rather than reading them whole.
65
69
 
66
70
  1. If a native handler expresses the behavior (`redirect`, `respond`, `page`,
67
71
  `static`, `download`, `proxy`, `conditional`), write YAML only.
68
- 2. Check supported extensions and their configuration before custom code. If a
72
+ 2. Check supported extensions and their configuration before custom code. For
73
+ an installed extension, prefer declarative config and UI copy/theme/template/
74
+ CSS overrides, then a hook listed in `get_extensions`. Extension hook
75
+ contract v1 runs trusted in-process and rejects `sandbox: true`. If a
69
76
  recipe from `recipes list` is close, `urlcode recipes add NAME --out DIR`
70
77
  and adapt the copy into the project's layout.
71
78
  3. Only then write a function or middleware: one exported handler, inputs from validated `args`,