@rolepod/uiproof 0.6.0 → 0.6.2

package/.claude-plugin/marketplace.json

@@ -10,8 +10,8 @@
     {
       "name": "rolepod-uiproof",
       "source": "./",
-      "description": "26 MCP tools (21 atomic browser/mobile primitives + 5 composite workflows) + 5 user-invocable skills. v0.6 adds Extension Protocol v1 support — works standalone today, becomes the verify-phase UI provider when installed alongside the `rolepod` parent plugin (evidence routes to `.rolepod/evidence/` with `manifest.json`). Replaces chrome-devtools-mcp and playwright-mcp for UI testing. Web production-ready via Playwright; mobile (iOS/Android) via Appium scaffolded — see `rolepod-uiproof doctor` for readiness.",
-      "version": "0.6.0",
+      "description": "26 MCP tools (21 atomic browser/mobile primitives + 5 composite workflows) + 5 user-invocable skills. Works standalone today; pair with the `rolepod` parent plugin (detected via the marker file `<git-root>/.rolepod/parent-active`) and uiproof becomes the verify-phase UI provider — evidence routes to `<git-root>/.rolepod/evidence/` with `manifest.json` per Extension Protocol v1. Replaces chrome-devtools-mcp and playwright-mcp for UI testing. Web production-ready via Playwright; mobile (iOS/Android) via Appium scaffolded — see `rolepod-uiproof doctor` for readiness.",
+      "version": "0.6.2",
       "author": {
         "name": "nuttaruj"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "rolepod-uiproof",
-  "version": "0.6.0",
-  "description": "Multi-platform UI/mobile automation for AI agents — 5 shipped skills (verify-ui, audit-a11y, visual-diff, scaffold-e2e, check-errors) + MCP server with 26 tools. Works standalone OR with the `rolepod` parent plugin: when ROLEPOD_PARENT=1 is set, evidence routes to `.rolepod/evidence/` with a `manifest.json` per Extension Protocol v1, so parent's `check-work` skill can aggregate UI verify results into its phase report. v0.5 completed the UI verification surface (console + network observability, hover/drag/fill_form/upload/dialog, runtime emulation, multi-page, gated JS eval).",
+  "version": "0.6.2",
+  "description": "Multi-platform UI/mobile automation for AI agents — 5 shipped skills (verify-ui, audit-a11y, visual-diff, scaffold-e2e, check-errors) + MCP server with 26 tools. Works standalone OR with the `rolepod` parent plugin: when the marker file `<git-root>/.rolepod/parent-active` is present (written by the parent's SessionStart hook), evidence routes to `<git-root>/.rolepod/evidence/` with a `manifest.json` per Extension Protocol v1, so parent's `check-work` skill can aggregate UI verify results into its phase report. v0.5 completed the UI verification surface (console + network observability, hover/drag/fill_form/upload/dialog, runtime emulation, multi-page, gated JS eval).",
   "author": {
     "name": "nuttaruj",
     "url": "https://github.com/nuttaruj"
@@ -19,7 +19,7 @@
   "mcpServers": {
     "rolepod-uiproof": {
       "command": "npx",
-      "args": ["-y", "rolepod-uiproof"],
+      "args": ["-y", "@rolepod/uiproof"],
       "env": {}
     }
   }

package/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "rolepod-uiproof",
-  "version": "0.6.0",
-  "description": "Multi-platform UI/mobile automation for AI agents — 5 shipped skills (verify-ui, audit-a11y, visual-diff, scaffold-e2e, check-errors) + MCP server with 26 tools. v0.6 adds Extension Protocol v1 — works standalone today, becomes the verify-phase UI provider when paired with the `rolepod` parent plugin.",
+  "version": "0.6.2",
+  "description": "Multi-platform UI/mobile automation for AI agents — 5 shipped skills (verify-ui, audit-a11y, visual-diff, scaffold-e2e, check-errors) + MCP server with 26 tools. Works standalone today; pair with the `rolepod` parent plugin (detected via the marker file `<git-root>/.rolepod/parent-active`) and uiproof becomes the verify-phase UI provider.",
   "author": {
     "name": "nuttaruj",
     "url": "https://github.com/nuttaruj"
@@ -25,7 +25,7 @@
   "interface": {
     "displayName": "Rolepod UIProof",
     "shortDescription": "UI verification, a11y audits, visual diff, e2e scaffolding — for AI coding agents.",
-    "longDescription": "rolepod-uiproof ships an MCP server with 26 tools (21 atomic + 5 composite) and 5 user-invocable skills (/verify-ui, /audit-a11y, /visual-diff, /scaffold-e2e, /check-errors). Web is fully supported via Playwright; mobile (iOS/Android via Appium) supports basic input. v0.6: pair with the `rolepod` parent plugin (v2.7+) and uiproof becomes the verify-phase UI provider — evidence routes to `.rolepod/evidence/` with a `manifest.json` per Extension Protocol v1.",
+    "longDescription": "rolepod-uiproof ships an MCP server with 26 tools (21 atomic + 5 composite) and 5 user-invocable skills (/verify-ui, /audit-a11y, /visual-diff, /scaffold-e2e, /check-errors). Web is fully supported via Playwright; mobile (iOS/Android via Appium) supports basic input. v0.6.1: pair with the `rolepod` parent plugin (v2.7+) and uiproof becomes the verify-phase UI provider — evidence routes to `<git-root>/.rolepod/evidence/` with a `manifest.json` per Extension Protocol v1. Parent detection uses the marker file `<git-root>/.rolepod/parent-active`.",
     "developerName": "nuttaruj",
     "category": "Productivity",
     "capabilities": ["Read", "Write", "Bash"],

package/.cursor/mcp.json

@@ -2,7 +2,7 @@
   "mcpServers": {
     "rolepod-uiproof": {
       "command": "npx",
-      "args": ["-y", "rolepod-uiproof"],
+      "args": ["-y", "@rolepod/uiproof"],
       "env": {}
     }
   }

package/.cursor-plugin/plugin.json

@@ -1,8 +1,8 @@
 {
   "name": "rolepod-uiproof",
   "displayName": "Rolepod UIProof",
-  "version": "0.6.0",
-  "description": "Multi-platform UI / mobile automation MCP server + 5 shipped skills (verify-ui, audit-a11y, visual-diff, scaffold-e2e, check-errors) for AI coding agents. v0.6 adds Extension Protocol v1 — works standalone today, becomes the verify-phase UI provider when paired with the `rolepod` parent plugin (evidence routes to `.rolepod/evidence/` with `manifest.json`). Replaces chrome-devtools-mcp and playwright-mcp.",
+  "version": "0.6.2",
+  "description": "Multi-platform UI / mobile automation MCP server + 5 shipped skills (verify-ui, audit-a11y, visual-diff, scaffold-e2e, check-errors) for AI coding agents. Works standalone today; pair with the `rolepod` parent plugin (detected via the marker file `<git-root>/.rolepod/parent-active`) and uiproof becomes the verify-phase UI provider — evidence routes to `<git-root>/.rolepod/evidence/` with `manifest.json` per Extension Protocol v1. Replaces chrome-devtools-mcp and playwright-mcp.",
   "author": {
     "name": "nuttaruj"
   },

package/CHANGELOG.md

@@ -7,6 +7,108 @@ release.
 
 ## [Unreleased]
 
+## [0.6.2] — 2026-05-28
+
+### Fixed
+
+- **Plugin MCP server failed to start in fresh sessions** with
+  `Failed to reconnect to plugin:rolepod-uiproof:rolepod-uiproof: -32000`.
+  Root cause: v0.4.1 changed every `mcpServers` config to invoke
+  `npx -y rolepod-uiproof` (unscoped) instead of
+  `npx -y @rolepod/uiproof` (scoped). The unscoped name does not
+  exist on the npm registry — npx returned `E404` and the spawn
+  failed. The earlier "fix" only appeared to work on machines that
+  already had `node_modules/.bin/rolepod-uiproof` cached from a
+  previous local install; a fresh environment (where Claude Code
+  spawns the MCP server in its own subprocess with a clean PATH)
+  always 404'd.
+
+  Verified directly: `npx -y rolepod-uiproof` → `npm error code E404`;
+  `npx -y @rolepod/uiproof` → MCP server boots, lists 26 tools,
+  responds to `initialize`. v0.4.1's premise that npx couldn't
+  resolve a scoped package's bin when the bin name didn't match the
+  short name was wrong — modern npx exec selects the single
+  available bin regardless of naming.
+
+  Reverts the four `mcpServers` invocations + the matching
+  documentation:
+
+  - `.mcp.json`
+  - `.cursor/mcp.json`
+  - `.claude-plugin/plugin.json`
+  - `plugins/rolepod-uiproof/.mcp.json`
+  - `README.md` (Install snippet)
+  - `skills/verify-ui/SKILL.md` + `skills/check-errors/SKILL.md`
+    ("If the tool is unavailable" hint)
+  - `plugins/rolepod-uiproof/skills/{verify-ui,check-errors}/SKILL.md`
+    (mirrors)
+
+  Plugin and standalone consumers must update to v0.6.2 (or override
+  the command manually in `.mcp.json`) to get working spawns. The
+  package itself was always installable as `@rolepod/uiproof`; only
+  the invocation form was broken.
+
+## [0.6.1] — 2026-05-28
+
+### Fixed
+
+- **Extension Protocol v1 detection** swapped from environment variable
+  (`ROLEPOD_PARENT=1`) to filesystem marker
+  (`<git-root>/.rolepod/parent-active`). The env-var mechanism never
+  fired in practice because Claude Code SessionStart hooks cannot
+  propagate env to the Bash tool or to the MCP server subprocess
+  Claude later spawns. The marker file is what the parent v2.7+ hook
+  actually writes — v0.6.1 reads it. **End-to-end combined mode now
+  works.**
+- Same swap for the protocol-version compatibility warning. Previously
+  read `process.env.ROLEPOD_PROTOCOL`; now reads the first trimmed
+  line of the marker file content.
+
+### Added
+
+- `src/util/rolepodProtocol.ts` — shared `detectRolepodParent()`
+  helper returning `{ active, protocol, gitRoot }`. ArtifactStore and
+  the server both call it.
+
+### Changed
+
+- With-parent runs anchor at **git root** (resolved via
+  `git rev-parse --show-toplevel`), not at `process.cwd()`. A uiproof
+  skill invoked from a subdirectory now lands its evidence under the
+  worktree root where parent's `check-work` skill looks — previously
+  it would have landed at `<cwd>/.rolepod/evidence/` and been
+  invisible to the aggregator.
+- Standalone path is unchanged — still anchored at `process.cwd()`.
+- All 5 SKILL.md files (+ mirrors under `plugins/`) updated to
+  describe the marker mechanism instead of the env var.
+- README "Standalone vs Combined" section updated with the marker
+  language and the `touch .rolepod/parent-active` force-on hint.
+
+### Removed
+
+- All reads of `process.env.ROLEPOD_PARENT` and
+  `process.env.ROLEPOD_PROTOCOL` from runtime code. Only historical
+  references remain in JSDoc that explains why the mechanism changed.
+
+### Migration from 0.6.0
+
+No API change. Standalone users see no difference (same evidence
+path, same tool output, same `manifest.json`). Combined-mode users
+gain working evidence routing — provided the parent plugin actually
+writes the marker (parent v2.7+ does).
+
+To force combined mode without a real parent session:
+
+```bash
+mkdir -p .rolepod && echo v1 > .rolepod/parent-active
+```
+
+To force standalone:
+
+```bash
+rm -f .rolepod/parent-active
+```
+
 ## [0.6.0] — 2026-05-27
 
 **Extension Protocol v1 — `uiproof` becomes parent-aware. Standalone

package/README.md

@@ -33,7 +33,7 @@ Every skill is **single-backend** (D-024) — it calls the rolepod-uiproof serve
 
 **Standalone** (default): use the 5 skills directly as atomic browser tools. Evidence saved under `./.rolepod-uiproof/artifacts/<run>/` with a `manifest.json` per Extension Protocol v1.
 
-**Combined with rolepod parent**: when the parent's SessionStart hook sets `ROLEPOD_PARENT=1`, uiproof writes evidence to `./.rolepod/evidence/<ts>-rolepod-uiproof-<skill>/` instead, where parent's `check-work` skill auto-aggregates manifests into the verify report. No skill changes — same 26 tools, same 5 skills, smarter routing.
+**Combined with rolepod parent**: when the parent's SessionStart hook drops the marker file `<git-root>/.rolepod/parent-active` (single line of content = the protocol version, e.g. `v1`), uiproof writes evidence to `<git-root>/.rolepod/evidence/<ts>-rolepod-uiproof-<skill>/` instead, where parent's `check-work` skill auto-aggregates manifests into the verify report. The marker is read fresh per ArtifactStore construction; no env-var, no daemon. To force combined mode without a parent session: `mkdir -p .rolepod && echo v1 > .rolepod/parent-active`. No skill changes — same 26 tools, same 5 skills, smarter routing.
 
 | Install | Unlocks |
 |---|---|
@@ -89,11 +89,11 @@ Skills are not auto-registered under Cursor (no unified plugin format for skills
 ```bash
 # Install
 codex plugin marketplace add nuttaruj/rolepod-uiproof
-codex plugin install rolepod-uiproof@rolepod-uiproof
+codex plugin add rolepod-uiproof@rolepod-uiproof
 
 # Update
 codex plugin marketplace upgrade rolepod-uiproof
-codex plugin install rolepod-uiproof@rolepod-uiproof
+codex plugin add rolepod-uiproof@rolepod-uiproof
 ```
 
 Codex reads the plugin from `.agents/plugins/marketplace.json` + `.codex-plugin/plugin.json` in this repo. Skills install to `~/.codex/skills/` (Codex's plugin loader handles registration).
@@ -111,7 +111,7 @@ Use this when your tool reads a standard `mcpServers` config (most non-CLI MCP c
   "mcpServers": {
     "rolepod-uiproof": {
       "command": "npx",
-      "args": ["-y", "rolepod-uiproof"]
+      "args": ["-y", "@rolepod/uiproof"]
     }
   }
 }

package/dist/bin/rolepod-uiproof.js

@@ -201,18 +201,40 @@ var log = {
   }
 };
 
+// src/util/rolepodProtocol.ts
+import { execSync } from "child_process";
+import { existsSync as existsSync2, readFileSync } from "fs";
+import { join as join2 } from "path";
+function detectRolepodParent(cwd = process.cwd()) {
+  let gitRoot = cwd;
+  try {
+    gitRoot = execSync("git rev-parse --show-toplevel", {
+      cwd,
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"]
+    }).trim();
+  } catch {
+  }
+  const file = join2(gitRoot, ".rolepod", "parent-active");
+  if (!existsSync2(file)) {
+    return { active: false, protocol: null, gitRoot };
+  }
+  const protocol = readFileSync(file, "utf8").trim().split(/\r?\n/)[0] ?? null;
+  return { active: true, protocol, gitRoot };
+}
+
 // src/artifact/ArtifactStore.ts
 var ArtifactStore = class {
   rootDir;
   mode;
   baselineRoot;
   constructor(opts = {}) {
-    const detectedParent = process.env.ROLEPOD_PARENT === "1";
-    this.mode = opts.mode ?? (detectedParent ? "with-parent" : "standalone");
+    const parent = detectRolepodParent();
+    this.mode = opts.mode ?? (parent.active ? "with-parent" : "standalone");
     if (opts.rootDir !== void 0) {
       this.rootDir = opts.rootDir;
     } else if (this.mode === "with-parent") {
-      this.rootDir = resolve2(process.cwd(), ".rolepod", "evidence");
+      this.rootDir = resolve2(parent.gitRoot, ".rolepod", "evidence");
     } else {
       this.rootDir = resolve2(process.cwd(), ".rolepod-uiproof", "artifacts");
     }
@@ -222,7 +244,7 @@ var ArtifactStore = class {
    * Allocate a fresh run dir and ensure it exists.
    *
    * - standalone: `./.rolepod-uiproof/artifacts/{prefix}_{ts}_{uuid}/`
-   * - with-parent: `./.rolepod/evidence/{ts}-rolepod-uiproof-{skill}/`
+   * - with-parent: `<git-root>/.rolepod/evidence/{ts}-rolepod-uiproof-{skill}/`
    *
    * `prefix` is preserved for back-compat with v0.5 callers; new callers
    * should also pass `opts.skill` so the with-parent path can be derived
@@ -3740,7 +3762,7 @@ function indent(block, n) {
 }
 
 // src/tools/composite/visual_diff.ts
-import { existsSync as existsSync2 } from "fs";
+import { existsSync as existsSync3 } from "fs";
 import { readFile as readFile3 } from "fs/promises";
 import { resolve as resolve6 } from "path";
 import pixelmatch from "pixelmatch";
@@ -3778,7 +3800,7 @@ var visualDiffTool = {
           ctx.store.baselineDir,
           `${args.baseline_id}.png`
         );
-        if (!existsSync2(baselinePath)) {
+        if (!existsSync3(baselinePath)) {
           await ctx.store.writeBytes(
             ctx.store.baselineDir,
             `${args.baseline_id}.png`,
@@ -4143,14 +4165,14 @@ var toolMetadata = {
 
 // src/server.ts
 var SERVER_NAME = "rolepod-uiproof";
-var SERVER_VERSION = "0.6.0";
+var SERVER_VERSION = "0.6.2";
 var SUPPORTED_PROTOCOL = "v1";
 function checkProtocolCompat() {
-  const requested = process.env.ROLEPOD_PROTOCOL;
-  if (!requested) return;
-  if (requested !== SUPPORTED_PROTOCOL) {
+  const parent = detectRolepodParent();
+  if (!parent.active || !parent.protocol) return;
+  if (parent.protocol !== SUPPORTED_PROTOCOL) {
     console.warn(
-      `rolepod protocol mismatch: expected ${SUPPORTED_PROTOCOL}, got ${requested}. Manifest will still be written in ${SUPPORTED_PROTOCOL} shape \u2014 parent may not parse it correctly.`
+      `rolepod protocol mismatch: expected ${SUPPORTED_PROTOCOL}, got ${parent.protocol}. Manifest will still be written in ${SUPPORTED_PROTOCOL} shape \u2014 parent may not parse it correctly.`
     );
   }
 }