@shadowclone/cli 0.0.12 → 0.0.13

package/.claude-plugin/marketplace.json

@@ -3,11 +3,13 @@
   "owner": {
     "name": "Shadowclone"
   },
+  "description": "Install Shadowclone with agent-led local setup and explicit consent.",
   "plugins": [
     {
       "name": "shadowclone",
-      "source": ".",
-      "description": "Load and apply the user's learned engineering profile"
+      "source": "./plugins/shadowclone",
+      "strict": true,
+      "description": "Set up and maintain portable coding-agent skills with explicit local consent"
     }
   ]
 }

package/PRIVACY.md

@@ -0,0 +1,25 @@
+# Privacy
+
+Shadowclone runs on your machine. It does not operate a collection service and does not add telemetry.
+
+## What it reads
+
+Each session, memory, repository, and skill source is disabled until you consent to that source. Setup asks separately about session learning, skill maintenance, and background learning. You can use the browser build editor without enabling learning.
+
+Shadowclone excludes tool results, tool-returned file contents, thinking blocks, and data-access results from learning. It resolves eligible text through its redaction boundary before model work. Redaction reduces exposure but does not guarantee anonymity, so use only material you are authorized to send.
+
+## What leaves your machine
+
+Opening the browser editor and using the local MCP server do not send data to Shadowclone. Optional learning, skill drafting, build descriptions, and delegated runs use an agent CLI you choose. Consented, redacted inputs go directly through that provider and are governed by its terms.
+
+The build description action sends selected skill titles and redacted summaries. It does not send skill bodies, file paths, repository names, or ownership metadata.
+
+## Local storage and removal
+
+Configuration, evidence, revisions, generated skills, and installation records stay in Shadowclone's local state directory or in files you review before applying. Disable background learning with `shadowclone learning disable`, stop automatic skill edits with `shadowclone skills automatic off`, or remove recorded state with `shadowclone forget --all`.
+
+Uninstalling the plugin removes its packaged setup workflow. Use the CLI removal commands for locally installed guidance and state.
+
+## Questions and reports
+
+Use [GitHub issues](https://github.com/theonly1me/shadowclone/issues) for privacy questions that contain no sensitive data. Follow [the security policy](SECURITY.md) when a report needs private material.

package/README.md

@@ -6,6 +6,28 @@ Shadowclone maintains the skills, instructions, and checks that help **Claude Co
 
 ## Get started
 
+### Let your agent set it up
+
+In Claude Code, add and install the plugin:
+
+```text
+/plugin marketplace add theonly1me/shadowclone
+/plugin install shadowclone@shadowclone
+```
+
+In Codex, add the marketplace and install **Shadowclone** from the Plugins Directory:
+
+```bash
+codex plugin marketplace add theonly1me/shadowclone
+codex plugin add shadowclone@shadowclone
+```
+
+Then tell the agent: **Set up Shadowclone.** The packaged setup skill checks the CLI version, offers installation or an upgrade when needed, asks you for three separate consent choices, installs native guidance for detected agents, and prints the local build URL. This setup flow requires CLI 0.0.13 or newer. It never uses elevated privileges or chooses data access for you.
+
+Cursor, Antigravity, and other skill-compatible agents can use the portable [`setup-shadowclone` skill](plugins/shadowclone/skills/setup-shadowclone/SKILL.md). Once any supported agent completes setup, Shadowclone synchronizes native guidance across the detected agents on your machine.
+
+### Set it up manually
+
 Install the CLI:
 
 ```bash
@@ -16,34 +38,24 @@ npm install -g @shadowclone/cli
 | --- | --- | --- | ---: |
 | 1 | `shadowclone init` | Answer three questions about learning and skill maintenance | About 1 minute |
 | 2 | `shadowclone learn --deep` | Learn from enabled past sessions; repeat if more history remains | Up to 5 minutes per run |
-| 3 | `shadowclone wizard` | Choose skills in the browser and review the files before applying them | About 1 minute |
+| 3 | `shadowclone learning pending` and `shadowclone skills pending` | Review learned rules, scope, and publication before relying on them | About 1 minute |
 
-Setup takes about two to three minutes, excluding learning. Deep learning needs an installed and authenticated `claude`, `codex`, or `cursor-agent` CLI.
+Setup takes about two to three minutes, excluding learning. Deep learning needs an installed and authenticated `claude`, `codex`, or `cursor-agent` CLI. Claude Code learning on Linux needs `bwrap` and `socat` for its sandbox.
 
 **Skip learning.** Run `shadowclone wizard` by itself if you do not want Shadowclone to read sessions or call a model. It starts from an empty active environment and lets you choose a build locally.
 
-**For coding agents.** Install the CLI, run `shadowclone wizard --no-open`, and give the user the printed local URL. Keep the command running while they edit their build. `shadowclone init` asks consent questions and needs the user.
+Run `shadowclone` to see the current result and next action. Use `shadowclone wizard` to browse optional workflow skills in a browser.
 
 ## Evaluations
 
-The preference study tested ordinary coding tasks on GPT-6 Sol, GPT-6 Luna, Sonnet 5.5, and Opus 5.5. Each agent ran with no personal help, with existing skills, with Shadowclone skills, and with Shadowclone skills plus deep learning.
+The preference study compared agent alone, existing user skills, those skills plus Shadowclone setup, and setup plus deep learning on GPT-6 Sol, GPT-6 Luna, Sonnet 5.5, and Opus 5.5. After corrected scoring, deep learning over existing skills was +10.0, -2.5, +9.7, and +7.3 percentage points respectively, with every 95% interval including zero. It recovered a concrete review-reply preference across all four models. The study covers one participant and one synthetic repository. [Read all four setups, corrected results, and limitations](evals.md).
 
-| Share of preferences followed | GPT-6 Sol | GPT-6 Luna | Sonnet 5.5 | Opus 5.5 |
+| Preferences followed | Sol | Luna | Sonnet | Opus |
 | --- | ---: | ---: | ---: | ---: |
-| Agent alone | 72% | 73% | 55% | 57% |
-| With Shadowclone skills | 84% | 83% | 68% | 68% |
-| With Shadowclone skills and deep learning | 97% | 88% | 76% | 82% |
-| Improvement with skills and deep learning | **+25** | **+15** | **+22** | **+25** |
-
-Here is what changed in practice. Each cell compares the agent alone with Shadowclone skills and deep learning.
-
-| Preference | GPT-6 Sol | GPT-6 Luna | Sonnet 5.5 | Opus 5.5 |
-| --- | ---: | ---: | ---: | ---: |
-| Review reply preferences | 2 of 6 → 6 of 6 | 2 of 6 → 6 of 6 | 0 of 6 → 6 of 6 | 0 of 6 → 6 of 6 |
-| Failing test first | 0 of 3 → 3 of 3 | 0 of 3 → 2 of 3 | 0 of 3 → 0 of 3 | 0 of 3 → 2 of 3 |
-| Pull request checklist | 0 of 3 → 3 of 3 | 3 of 3 → 3 of 3 | 0 of 3 → 1 of 3 | 2 of 3 → 3 of 3 |
-
-Skills with deep learning beat the agent alone on all four agents by 15 to 25 points. The gain is statistically clear on GPT-6 Sol and Opus 5.5, and directional on the other two. The participant's existing skills scored in the same range and slightly higher on GPT-6 Luna. [Read the tasks, intervals, and limitations](evals.md).
+| Agent alone | 72% | 73% | 59% | 59% |
+| Existing user skills | 87% | 91% | 70% | 79% |
+| Existing skills plus Shadowclone setup | 84% | 83% | 72% | 72% |
+| Setup plus deep learning | 97% | 88% | 80% | 86% |
 
 ## Privacy comes first
 
@@ -60,7 +72,7 @@ Skills with deep learning beat the agent alone on all four agents by 15 to 25 po
 
 **Redaction is a boundary, not an anonymity guarantee.** Tool results, tool-returned file contents, thinking blocks, and data-access results are excluded from learning. Use only sources and repositories you are authorized to send to the selected provider.
 
-**Removal stays in your control.** Disable background learning with `shadowclone learning disable`, stop automatic skill edits with `shadowclone skills automatic off`, or remove recorded state with `shadowclone forget --all`. See [data handling](docs/data-handling.md) and [enterprise controls](docs/architecture/07-enterprise.md) for sources, storage, managed policy, and removal details.
+**Removal stays in your control.** Disable background learning with `shadowclone learning disable`, stop automatic skill edits with `shadowclone skills automatic off`, or remove recorded state with `shadowclone forget --all`. See the [privacy policy](PRIVACY.md), [data handling](docs/data-handling.md), and [enterprise controls](docs/architecture/07-enterprise.md) for sources, storage, managed policy, and removal details.
 
 ## Guides
 

package/dist/_.._/web/client/index.html

@@ -22,7 +22,7 @@
     
     
     
-  <link rel="stylesheet" crossorigin href="../../../web/index-174jt7gq.css"><script type="module" crossorigin src="../../../web/index-1ezbn24z.js"></script></head>
+  <link rel="stylesheet" crossorigin href="../../../web/index-dzztba9n.css"><script type="module" crossorigin src="../../../web/index-pty3xg03.js"></script></head>
   <body>
     <div class="frame">
       <header class="masthead">
@@ -76,26 +76,36 @@
           <section
             id="constellation"
             class="constellation"
-            aria-label="Skill tree"
+            aria-label="Skill constellation"
           >
+            <div id="constellation-status" class="constellation-status" role="status">
+              <p id="constellation-status-text">Loading your skills…</p>
+              <button id="retry-build" class="quiet-button" hidden>Retry loading skills</button>
+            </div>
+            <div class="constellation-controls" aria-label="Constellation controls">
+              <button id="fit-constellation" class="quiet-button">Fit</button>
+              <button id="reset-constellation" class="quiet-button">Reset</button>
+              <button
+                id="toggle-constellation-view"
+                class="quiet-button"
+                aria-controls="constellation-map constellation-list"
+                aria-pressed="false"
+              >
+                Map / list
+              </button>
+            </div>
             <svg
               id="starfield"
               class="starfield"
-              viewBox="0 0 600 900"
-              preserveAspectRatio="none"
               aria-hidden="true"
             ></svg>
             <svg
-              id="tree-connections"
-              class="tree-connections"
-              aria-hidden="true"
+              id="constellation-map"
+              class="constellation-map"
+              aria-label="Skills grouped into navigable hubs"
             ></svg>
-            <div id="tree" class="tree"></div>
-            <div class="tree-root" aria-hidden="true">
-              <span id="tree-origin"
-                ><img src="../../../web/shadowclone-mark-w6a76wqy.svg" alt="" /></span>
-            </div>
-            <p class="tree-hint">Select a star to inspect its skill.</p>
+            <div id="constellation-list" class="constellation-list"></div>
+            <p class="tree-hint">Select a category to expand it or a skill to inspect it. Drag to pan and scroll to zoom.</p>
           </section>
 
           <aside class="build-panel" aria-label="Your character build">