@shadowclone/cli 0.0.12 → 0.0.13

package/evals.md

@@ -1,17 +1,17 @@
 # Evaluation results
 
-The preference study measures whether a coding agent follows an anonymized participant's engineering preferences on ordinary requests, and whether Shadowclone changes that. Each agent has its own tasks and checks, so compare setups within an agent, not agents with each other.
+The preference study measured whether a coding agent followed one participant's engineering preferences on ordinary requests. These results were recomputed from the private receipts on 2026-09-30 using scorer `session-bootstrap-2`, without new model calls. Unknown and not-applicable checks are excluded consistently, complete sessions are resampled within tasks, and observable actions from incomplete sessions retain their checks.
 
 ## Results
 
-The headline rate weights every task equally. Percentages in parentheses are 95% intervals.
+The headline weights every task equally. Parentheses show the 95% percentile bootstrap interval. Deep learning over existing user skills is the relevant incremental comparison; its interval includes zero for every model.
 
 | Share of preferences followed | GPT-6 Sol | GPT-6 Luna | Sonnet 5.5 | Opus 5.5 |
 | --- | ---: | ---: | ---: | ---: |
-| Agent alone | 72% (52% to 89%) | 73% (54% to 90%) | 55% (27% to 80%) | 57% (32% to 82%) |
-| With existing skills | 87% (70% to 100%) | 91% (79% to 99%) | 70% (42% to 96%) | 79% (56% to 100%) |
-| With Shadowclone skills | 84% (68% to 98%) | 83% (68% to 95%) | 68% (40% to 92%) | 68% (42% to 90%) |
-| With Shadowclone skills and deep learning | 97% (88% to 100%) | 88% (74% to 99%) | 76% (54% to 95%) | 82% (64% to 97%) |
+| Agent alone | 72% (54% to 88%) | 73% (55% to 90%) | 59% (31% to 85%) | 59% (34% to 82%) |
+| With existing skills | 87% (72% to 100%) | 91% (79% to 99%) | 70% (44% to 94%) | 79% (58% to 94%) |
+| With Shadowclone skills | 84% (68% to 98%) | 83% (68% to 95%) | 72% (44% to 94%) | 72% (46% to 94%) |
+| With Shadowclone skills and deep learning | 97% (89% to 100%) | 88% (75% to 99%) | 80% (59% to 100%) | 86% (69% to 100%) |
 
 Each cell below compares the agent alone with Shadowclone skills and deep learning.
 
@@ -21,7 +21,7 @@ Each cell below compares the agent alone with Shadowclone skills and deep learni
 | Failing test first | 0 of 3 → 3 of 3 | 0 of 3 → 2 of 3 | 0 of 3 → 0 of 3 | 0 of 3 → 2 of 3 |
 | Pull request checklist | 0 of 3 → 3 of 3 | 3 of 3 → 3 of 3 | 0 of 3 → 1 of 3 | 2 of 3 → 3 of 3 |
 
-**How to read this.** Skills with deep learning beat the agent alone on all four agents by 15 to 25 points. The gain is statistically clear on GPT-6 Sol and Opus 5.5, and directional on GPT-6 Luna and Sonnet 5.5. Existing skills scored in the same range and slightly higher on GPT-6 Luna. The intervals are wide because each agent has four to ten tasks.
+The first-time arm is below existing skills on three models and slightly above on Sonnet after rescoring. Deep learning recovered a specific review-reply preference, but these results establish no advantage over an existing skill library. The earlier calculation had first-time estimates below existing skills on all four models; that conclusion changes when incomplete sessions are scored consistently.
 
 ## Setups
 
@@ -52,7 +52,7 @@ Each setup runs in an isolated agent home. The setups with user skills start fro
 | Bug fix | Successful jobs still get retried | Failing test first; fix proven by inversion; commit message proposed, not committed |
 | Git and pull requests | Rename a variable, then "commit it"; create the pull request | Lowercase conventional subject with no body; an Overview of Changes checklist |
 | Questions | Which change broke exports, then "do we need a hotfix?"; is a delay capped; what would a change take | Short, direct answers |
-| Review replies | Reply to an automated review comment | One sentence with the key fact, no colons, semicolons, or dashes |
+| Review replies | Reply to an automated review comment | One sentence with the key fact, no colons, semicolons, or em dashes |
 | Documentation | Remove a deprecated command and sweep the docs | No em dashes in prose; no added comments |
 
 **Checks.** Every check is deterministic: introduced comments and unsafe types, positional parameters, action order for test-first and inversion proofs, commit subjects, pull request records, and answer length or sentence count. Test results come from command output, and an answer is the final message. Attribution lines agents add on their own, such as `Co-Authored-By`, are ignored.
@@ -76,33 +76,33 @@ Each setup runs in an isolated agent home. The setups with user skills start fro
 
 **Coverage gate.** A separate audit records which key items each setup's guidance covers, with verbatim quotes checked against the files. The study stops if deep learning covers nothing that Shadowclone skills alone lack.
 
-**Analysis.** Each setup ran three sessions per task. Rates weight tasks equally. Intervals resample tasks and then sessions within a task, so run-to-run variation widens them, and a comparison counts only when its 95% interval excludes zero.
+**Analysis correction.** Each setup ran three sessions per task. The original report claimed to resample tasks and sessions, but actually resampled individual checks within each task. This report preserves session identity and resamples complete sessions within sampled tasks using 10,000 draws and seed 20260928. It excludes unknown and not-applicable outcomes from both rates and detailed denominators while reporting their counts. Both views were rescored from recorded actions and responses. Checks observed before a later infrastructure error remain scored. Dropped tasks are excluded from session and error totals as well as rates. The reviewed punctuation pattern excludes colons, semicolons, and em dashes; ordinary hyphens are allowed.
 
-**Noise.** The half-width of the deep-learning-over-no-help interval is the smallest gain the design separates from noise: about 16 points for GPT-6 Sol, 17 for GPT-6 Luna, 27 for Sonnet 5.5, and 25 for Opus 5.5.
+The small task count and correlated checks limit precision even after the calculation is corrected.
 
 ## Detailed results
 
-Cells show checks followed out of checks run and the corresponding percentage, pooled over sessions. Errored sessions are excluded from the counts.
+Cells show known checks followed out of known checks scored and the corresponding percentage, pooled over sessions. Unknown checks are excluded here and from headline rates. Task weighting accounts for remaining differences between pooled percentages and headline percentages.
 
 | Setup | GPT-6 Sol | GPT-6 Luna | Sonnet 5.5 | Opus 5.5 |
 | --- | ---: | ---: | ---: | ---: |
-| Without Shadowclone or user skills | 47 of 72 (65%) | 46 of 69 (67%) | 35 of 60 (58%) | 35 of 60 (58%) |
+| Without Shadowclone or user skills | 47 of 72 (65%) | 46 of 69 (67%) | 35 of 60 (58%) | 36 of 63 (57%) |
 | With user skills | 58 of 68 (85%) | 62 of 72 (86%) | 44 of 63 (70%) | 50 of 63 (79%) |
-| With Shadowclone skills | 59 of 71 (83%) | 57 of 72 (79%) | 43 of 61 (70%) | 42 of 60 (70%) |
+| With Shadowclone skills | 59 of 71 (83%) | 57 of 72 (79%) | 45 of 63 (71%) | 42 of 60 (70%) |
 | With Shadowclone skills and deep learning | 65 of 69 (94%) | 61 of 72 (85%) | 47 of 61 (77%) | 50 of 60 (83%) |
 
 Deep learning followed the highest pooled share on GPT-6 Sol, Sonnet 5.5, and Opus 5.5. Existing skills followed the highest share on GPT-6 Luna. The task-weighted headline remains the primary comparison because tasks have different numbers of checks.
 
-Differences in points, with 95% intervals. An asterisk marks an interval that excludes zero.
+Differences and 95% intervals below are percentage points. An asterisk means this bootstrap interval is entirely above zero; it does not establish transfer to other users or repositories.
 
 | Comparison | GPT-6 Sol | GPT-6 Luna | Sonnet 5.5 | Opus 5.5 |
 | --- | ---: | ---: | ---: | ---: |
-| Deep learning over no help | +25 (+10 to +42) * | +15 (-1 to +33) | +22 (-3 to +50) | +25 (+1 to +52) * |
-| Deep learning over user skills | +10 (+0 to +25) | -3 (-14 to +8) | +6 (-20 to +38) | +3 (-16 to +26) |
-| Deep learning over Shadowclone skills | +12 (+0 to +29) | +6 (-7 to +19) | +8 (-16 to +40) | +15 (-6 to +42) |
-| Shadowclone skills over no help | +13 (-1 to +27) | +9 (-5 to +24) | +13 (-7 to +38) | +10 (-5 to +27) |
+| Deep learning over user skills | +10.0 (0.0 to +23.3) | -2.5 (-13.9 to +6.1) | +9.7 (-10.4 to +37.5) | +7.3 (-3.1 to +26.0) |
+| Deep learning over no help | +25.0 (+10.8 to +40.0) * | +14.7 (0.0 to +31.1) | +21.5 (0.0 to +48.6) | +27.8 (+7.3 to +53.1) * |
+| Deep learning over Shadowclone skills | +12.2 (0.0 to +28.3) | +5.6 (-6.7 to +18.9) | +8.3 (-12.5 to +37.5) | +14.6 (0.0 to +40.6) |
+| Shadowclone skills over no help | +12.8 (+1.7 to +24.2) * | +9.2 (-3.3 to +23.3) | +13.2 (0.0 to +35.4) | +13.2 (+2.1 to +27.8) * |
 
-**What is clear.** Deep learning over no help is clear on GPT-6 Sol and Opus 5.5 and not on GPT-6 Luna or Sonnet 5.5. Shadowclone skills over no help is not clear on any agent. No comparison between two setups with skills is clear.
+None of the incremental comparisons between setups containing skills has an interval entirely above zero. With only eight to ten tasks, percentile bootstrap intervals can still be unstable and should not be read as precise population estimates.
 
 **Where the gains come from.** Deep learning followed both review-reply checks in all three sessions on all four agents. User skills followed 3 of 6 and 5 of 6 on the two Codex models and 0 of 6 and 2 of 6 on the two Claude models.
 
@@ -150,9 +150,9 @@ Differences in points, with 95% intervals. An asterisk marks an interval that ex
 | Create a pull request | 1 of 6 (17%) | 6 of 6 (100%) | 6 of 6 (100%) | 4 of 6 (67%) |
 | Rename and commit | 9 of 9 (100%) | 9 of 9 (100%) | 9 of 9 (100%) | 9 of 9 (100%) |
 | Parse older configs | 7 of 9 (78%) | 8 of 9 (89%) | 9 of 9 (100%) | 9 of 9 (100%) |
-| Remove a deprecated command | 4 of 4 (100%) | 6 of 6 (100%) | 4 of 4 (100%) | 4 of 4 (100%) |
+| Remove a deprecated command | 4 of 4 (100%) | 6 of 6 (100%) | 6 of 6 (100%) | 4 of 4 (100%) |
 | Answer a question | 3 of 6 (50%) | 3 of 6 (50%) | 3 of 6 (50%) | 3 of 6 (50%) |
-| **All checks** | 35 of 60 (58%) | 44 of 63 (70%) | 43 of 61 (70%) | 47 of 61 (77%) |
+| **All checks** | 35 of 60 (58%) | 44 of 63 (70%) | 45 of 63 (71%) | 47 of 61 (77%) |
 
 ### Opus 5.5
 
@@ -162,11 +162,11 @@ Differences in points, with 95% intervals. An asterisk marks an interval that ex
 | Fix retries | 3 of 12 (25%) | 6 of 12 (50%) | 5 of 12 (42%) | 6 of 12 (50%) |
 | Reply to a review comment | 0 of 6 (0%) | 2 of 6 (33%) | 0 of 6 (0%) | 6 of 6 (100%) |
 | Create a pull request | 2 of 3 (67%) | 3 of 3 (100%) | 3 of 3 (100%) | 3 of 3 (100%) |
-| Rename and commit | 6 of 6 (100%) | 9 of 9 (100%) | 6 of 6 (100%) | 6 of 6 (100%) |
+| Rename and commit | 7 of 9 (78%) | 9 of 9 (100%) | 6 of 6 (100%) | 6 of 6 (100%) |
 | Parse older configs | 6 of 12 (50%) | 12 of 12 (100%) | 10 of 12 (83%) | 11 of 12 (92%) |
 | Remove a deprecated command | 6 of 6 (100%) | 6 of 6 (100%) | 6 of 6 (100%) | 6 of 6 (100%) |
 | Answer a question | 3 of 6 (50%) | 3 of 6 (50%) | 3 of 6 (50%) | 3 of 6 (50%) |
-| **All checks** | 35 of 60 (58%) | 50 of 63 (79%) | 42 of 60 (70%) | 50 of 60 (83%) |
+| **All checks** | 36 of 63 (57%) | 50 of 63 (79%) | 42 of 60 (70%) | 50 of 60 (83%) |
 
 ## Preferences each agent misses by default
 
@@ -236,13 +236,17 @@ This view keeps only checks the unaided agent failed at least once in controls.
 
 **Versions.** GPT-6 Sol and Luna ran through Codex CLI 0.156.1. Sonnet 5.5 ran through Claude Code 2.1.277. Opus 5.5 ran through Claude Code 2.1.284.
 
-**Sessions.** The tables cover 432 sessions. Six ended in an infrastructure error after the agent had acted, three on Sonnet 5.5 and three on Opus 5.5, and are excluded from the counts. No session had a correctness or safety failure.
+**Sessions.** The headline covers 432 sessions: 120 each for Sol and Luna and 96 each for Sonnet and Opus. Six ended in an infrastructure error after the agent had acted, three on each Claude model. Observed checks remain scored; missing checks are unknown. There are four unknown checks on Sonnet and six on Opus. Sol has eight not-applicable checks, Luna has three, and Sonnet has one. No recorded session had a correctness or safety failure.
 
 **Replacements.** A session that ended in an infrastructure error before the agent acted was replaced once and the failed record was kept. A session with an agent action kept its result.
 
 **Not reported.** Sessions on tasks outside an agent's achievable tasks also ran. They are not scored here.
 
-**GPT-6 Sol.** Its first 96 sessions come from the first scored run and a rerun after product fixes to skill publication, scope, and precedence. The [design record](docs/design/027-preference-study.md) describes them. Rescoring them with the final scorer changed no verdict.
+**Run groups and product versions.** Sol combines 96 earlier scored sessions with 24 later sessions. Luna combines 48 discriminating-task sessions with 72 complementary sessions. Each Claude model combines 48 discriminating-task sessions with 72 complementary sessions, of which 96 remain in its achievable view. Sol's earlier group includes reruns after publication, scope, and precedence fixes described in the [design record](docs/design/027-preference-study.md). Historical receipts did not record a product commit for each session, so those revisions are unknown. Current runs record them. Rescoring changed no Sol verdict; it retained two observed Sonnet first-time checks and three observed Opus bare checks that the old error policy discarded.
+
+**Delivery condition.** The study automatically applied every nonconflicting deep-learning proposal during preparation. Ordinary users review proposals. The deep arm therefore measures guidance that was approved in the study setup, not first-use review completion.
+
+**Limits.** The learned key and the learner used the same 14-day session sample. Tasks were assembled after a coverage audit, and some tasks were reused after product or scorer fixes. Learning always used GPT-6 Sol, which also had the clearest incremental point estimate; cross-provider learning transfer remains untested. The study has one participant and one synthetic repository. The 432 sessions are repeated runs within that setup, not independent users or repositories. The study does not test Shadowclone without an existing skill library. A later held-out Claude Code and Codex study will freeze tasks before coverage and report user interventions alongside adherence and correctness.
 
 ## Repository harness pilot (2026-09-26)
 

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@shadowclone/cli",
-  "version": "0.0.12",
+  "version": "0.0.13",
   "module": "src/cli/index.ts",
   "type": "module",
-  "packageManager": "bun@1.3.3",
+  "packageManager": "bun@1.4.2",
   "bin": {
     "shadowclone": "bin/shadowclone.mjs"
   },
@@ -21,6 +21,9 @@
   "devDependencies": {
     "@biomejs/biome": "2.5.14",
     "@types/bun": "latest",
+    "@types/d3-hierarchy": "^3.1.7",
+    "@types/d3-selection": "^3.0.12",
+    "@types/d3-zoom": "^3.0.9",
     "typescript": "~5.9"
   },
   "description": "Turns how you work into a portable, tested environment for the coding agents you already use.",
@@ -46,14 +49,19 @@
     "dist",
     "preferences",
     "skills",
+    "plugins",
     ".claude-plugin",
     "README.md",
+    "PRIVACY.md",
     "evals.md",
     "LICENSE"
   ],
   "dependencies": {
     "bun": "^1.4.2",
     "commander": "^15.0.0",
+    "d3-hierarchy": "^3.1.2",
+    "d3-selection": "^3.0.0",
+    "d3-zoom": "^3.0.0",
     "smol-toml": "^1.8.0",
     "zod": "^4.5.4"
   }

package/plugins/shadowclone/.claude-plugin/plugin.json

@@ -0,0 +1,17 @@
+{
+  "name": "shadowclone",
+  "version": "0.0.13",
+  "description": "Set up and maintain portable coding-agent skills with explicit local consent.",
+  "author": {
+    "name": "Shadowclone"
+  },
+  "homepage": "https://shadowclone.co",
+  "repository": "https://github.com/theonly1me/shadowclone",
+  "license": "MIT",
+  "keywords": [
+    "coding-agents",
+    "skills",
+    "local-first",
+    "developer-tools"
+  ]
+}

package/plugins/shadowclone/.codex-plugin/plugin.json

@@ -0,0 +1,46 @@
+{
+  "name": "shadowclone",
+  "version": "0.0.13",
+  "description": "Set up and maintain portable coding-agent skills with explicit local consent.",
+  "author": {
+    "name": "Shadowclone",
+    "url": "https://shadowclone.co"
+  },
+  "homepage": "https://shadowclone.co",
+  "repository": "https://github.com/theonly1me/shadowclone",
+  "license": "MIT",
+  "keywords": [
+    "coding-agents",
+    "skills",
+    "local-first",
+    "developer-tools"
+  ],
+  "skills": "./skills/",
+  "mcpServers": "./.mcp.json",
+  "interface": {
+    "displayName": "Shadowclone",
+    "shortDescription": "Set up portable skills for your coding agents",
+    "longDescription": "Set up Shadowclone locally, choose consent settings, build a skill constellation, and keep guidance synchronized across supported coding agents.",
+    "developerName": "Shadowclone",
+    "category": "Developer Tools",
+    "capabilities": [
+      "Local setup",
+      "Portable skills",
+      "Agent guidance"
+    ],
+    "websiteURL": "https://shadowclone.co",
+    "privacyPolicyURL": "https://github.com/theonly1me/shadowclone/blob/main/PRIVACY.md",
+    "termsOfServiceURL": "https://github.com/theonly1me/shadowclone/blob/main/LICENSE",
+    "supportURL": "https://github.com/theonly1me/shadowclone/issues",
+    "defaultPrompt": [
+      "Set up Shadowclone for my coding agents.",
+      "Open my Shadowclone skill constellation."
+    ],
+    "brandColor": "#A98AE2",
+    "composerIcon": "./assets/shadowclone-mark.svg",
+    "logo": "./assets/shadowclone-mark.svg",
+    "screenshots": [
+      "./assets/agent-builds.jpg"
+    ]
+  }
+}

package/plugins/shadowclone/.codexignore

@@ -0,0 +1,4 @@
+.env
+.env.*
+*.log
+.DS_Store

package/plugins/shadowclone/.mcp.json

@@ -0,0 +1,8 @@
+{
+  "mcpServers": {
+    "shadowclone": {
+      "command": "shadowclone",
+      "args": ["mcp"]
+    }
+  }
+}

package/plugins/shadowclone/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Atchyut Pulavarthi
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/plugins/shadowclone/README.md

@@ -0,0 +1,17 @@
+# Shadowclone plugin
+
+This plugin gives coding agents one workflow for installing and setting up [Shadowclone](https://shadowclone.co). It does not activate the repository's bundled skill library before the user chooses a build.
+
+## Use
+
+Install the plugin, start a new agent session, and say:
+
+```text
+Set up Shadowclone.
+```
+
+The `setup-shadowclone` skill checks the CLI version and offers to install or upgrade it without elevated privileges, asks for three explicit consent decisions, initializes detected coding agents, and opens the loopback build editor. It requires CLI 0.0.13 or newer. Existing consent settings are preserved.
+
+The bundled MCP configuration starts `shadowclone mcp` after the CLI is installed. It uses standard input and output on the local machine and needs no Shadowclone service credentials.
+
+See the repository [privacy policy](https://github.com/theonly1me/shadowclone/blob/main/PRIVACY.md) and [security policy](https://github.com/theonly1me/shadowclone/blob/main/SECURITY.md).

package/plugins/shadowclone/SECURITY.md

@@ -0,0 +1,5 @@
+# Security
+
+Report vulnerabilities through [GitHub's private vulnerability reporting](https://github.com/theonly1me/shadowclone/security/advisories/new). Do not include credentials, private source, transcripts, or identifying local paths in a public issue.
+
+General defects that can be demonstrated with independently authored synthetic input may be reported through [GitHub issues](https://github.com/theonly1me/shadowclone/issues).

package/plugins/shadowclone/assets/shadowclone-mark.svg

@@ -0,0 +1,42 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" fill="none">
+  <defs>
+    <linearGradient
+      id="echo"
+      x1="8"
+      y1="8"
+      x2="56"
+      y2="58"
+      gradientUnits="userSpaceOnUse"
+    >
+      <stop stop-color="#e0d3ff" />
+      <stop offset=".5" stop-color="#baa1ed" />
+      <stop offset="1" stop-color="#8b70c7" />
+    </linearGradient>
+  </defs>
+
+  <g
+    stroke="url(#echo)"
+    stroke-width="2.6"
+    stroke-linecap="round"
+    stroke-linejoin="round"
+  >
+    <path
+      d="M29 9C17 7 8 17 9 29c.6 9 7 13 12 13 6 0 9-4 9-8 0-4-3-6-6-5-3 1-4 5-1 7"
+    />
+    <path
+      d="M35 55c12 2 21-8 20-20-.6-9-7-13-12-13-6 0-9 4-9 8 0 4 3 6 6 5 3-1 4-5 1-7"
+    />
+    <path d="M13 44c2 6 7 10 14 11M51 20c-2-6-7-10-14-11" opacity=".55" />
+    <path
+      d="m40 10 1.6 4.4L46 16l-4.4 1.6L40 22l-1.6-4.4L34 16l4.4-1.6Z"
+      stroke-width="1.6"
+    />
+    <path
+      d="m24 42 1.6 4.4L30 48l-4.4 1.6L24 54l-1.6-4.4L18 48l4.4-1.6Z"
+      stroke-width="1.6"
+    />
+  </g>
+
+  <circle cx="19" cy="20" r="2" fill="#d3bffa" />
+  <circle cx="45" cy="44" r="2" fill="#d3bffa" />
+</svg>

package/plugins/shadowclone/mcp.json

@@ -0,0 +1,10 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json",
+  "mcpServers": {
+    "shadowclone": {
+      "type": "stdio",
+      "command": "shadowclone",
+      "args": ["mcp"]
+    }
+  }
+}

package/plugins/shadowclone/plugin.json

@@ -0,0 +1,49 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
+  "name": "shadowclone",
+  "version": "0.0.13",
+  "description": "Set up and maintain portable coding-agent skills with explicit local consent.",
+  "author": {
+    "name": "Shadowclone",
+    "url": "https://shadowclone.co"
+  },
+  "homepage": "https://shadowclone.co",
+  "repository": "https://github.com/theonly1me/shadowclone",
+  "license": "MIT",
+  "keywords": [
+    "coding-agents",
+    "skills",
+    "local-first",
+    "developer-tools"
+  ],
+  "extensions": {
+    "com.openai": {
+      "interface": {
+        "displayName": "Shadowclone",
+        "shortDescription": "Set up portable skills for your coding agents",
+        "longDescription": "Set up Shadowclone locally, choose consent settings, build a skill constellation, and keep guidance synchronized across supported coding agents.",
+        "developerName": "Shadowclone",
+        "category": "Developer Tools",
+        "capabilities": [
+          "Local setup",
+          "Portable skills",
+          "Agent guidance"
+        ],
+        "websiteURL": "https://shadowclone.co",
+        "privacyPolicyURL": "https://github.com/theonly1me/shadowclone/blob/main/PRIVACY.md",
+        "termsOfServiceURL": "https://github.com/theonly1me/shadowclone/blob/main/LICENSE",
+        "supportURL": "https://github.com/theonly1me/shadowclone/issues",
+        "defaultPrompt": [
+          "Set up Shadowclone for my coding agents.",
+          "Open my Shadowclone skill constellation."
+        ],
+        "brandColor": "#A98AE2",
+        "composerIcon": "./assets/shadowclone-mark.svg",
+        "logo": "./assets/shadowclone-mark.svg",
+        "screenshots": [
+          "./assets/agent-builds.jpg"
+        ]
+      }
+    }
+  }
+}

package/plugins/shadowclone/skills/setup-shadowclone/SKILL.md

@@ -0,0 +1,53 @@
+---
+name: setup-shadowclone
+description: Install and set up Shadowclone when the user asks to set up, configure, initialize, or start using Shadowclone with Claude Code, Codex, Cursor, Antigravity, or another coding agent.
+license: MIT
+---
+# Set Up Shadowclone
+
+Complete the local setup while keeping each data choice with the user.
+
+## Detect
+
+1. Run `node <this-skill-directory>/scripts/check-cli.mjs` using this skill's actual directory. The helper checks only `shadowclone --version`, reads no configuration or user data, and requires stable CLI version 0.0.13 or newer.
+2. If its status is `outdated`, show the installed and minimum versions and ask whether to upgrade the CLI. If it is `unavailable`, explain that a usable CLI is missing and ask whether to install it. Stop if the user declines.
+3. After approval, run `npm install -g @shadowclone/cli@latest`. Never use `sudo`. If the package manager cannot write to its configured global directory, explain that exact failure and help the user choose a user-owned npm prefix before retrying.
+4. Repeat the helper after installation or upgrade. Continue only when its status is `ready`. If it remains outdated, the required release may not be published yet. If the installed package is new enough but the helper still sees an older command, inspect `command -v shadowclone` and `npm prefix -g` for a stale executable or missing prefix on `PATH`; help the user resolve it without deleting unrelated installations.
+5. Run `shadowclone init --status --json`. Treat only `{"initialized":true}` as an existing setup. Preserve compatible existing installations and their consent settings.
+
+The setup skill runs independently of MCP. MCP may be disconnected until the CLI is installed; this does not prevent these shell commands or consent questions.
+
+## Ask for consent
+
+When setup is not initialized, ask these three questions separately and record an explicit yes or no for each:
+
+1. May Shadowclone learn working preferences from detected coding-agent sessions?
+2. May Shadowclone keep portable skills synchronized and maintain them across detected agents?
+3. May Shadowclone continue consented learning in the background?
+
+Explain that background learning requires session learning. If the first answer is no, the third must also be no. Do not infer an answer from installing the plugin, using an agent, or accepting another choice.
+
+Run one non-interactive initialization command with exactly one flag from each pair:
+
+- `--learn` or `--no-learn`
+- `--skill-maintenance` or `--no-skill-maintenance`
+- `--background-learning` or `--no-background-learning`
+
+The initialization detects installed Claude Code, Codex, Cursor, and Antigravity environments and installs native guidance for those agents. Preserve an existing configuration instead of replacing its consent choices.
+
+## Build
+
+1. Start `shadowclone wizard --no-open` as a bounded background process and capture the loopback URL it prints.
+2. Give the URL to the user and keep the process running while they choose skills, inspect instructions, and apply their build.
+3. Do not operate the browser for the user. Wait for them to say they applied the build.
+
+## Verify
+
+After the build is applied:
+
+1. Run `shadowclone sync`.
+2. Run `shadowclone doctor` and address actionable local failures.
+3. Run `shadowclone context --explain` in the current repository and summarize which guidance is active without copying private content.
+4. Tell the user to restart each open coding-agent session so its native integration and MCP server reload.
+
+Do not enable sources, call a model, read sessions, or publish files without the matching consent. Keep command output containing local paths or user content out of shared artifacts.

package/plugins/shadowclone/skills/setup-shadowclone/scripts/check-cli.mjs

@@ -0,0 +1,37 @@
+import { spawnSync } from "node:child_process";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+export const minimumCliVersion = "0.0.13";
+
+export function cliCompatibility(version) {
+  const current = typeof version === "string" ? version.trim() : null;
+  const stable = current?.match(/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/);
+  const required = minimumCliVersion.split(".").map(Number);
+  let compatible = stable !== null && stable !== undefined;
+
+  if (stable) {
+    for (const [index, component] of stable.slice(1).entries()) {
+      const minimum = required[index];
+      if (minimum === undefined) throw new Error("Invalid minimum CLI version");
+      const installed = Number(component);
+      if (installed !== minimum) {
+        compatible = installed > minimum;
+        break;
+      }
+    }
+  }
+
+  return {
+    version: stable ? current : null,
+    minimumVersion: minimumCliVersion,
+    status: compatible ? "ready" : stable ? "outdated" : "unavailable",
+  };
+}
+
+if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  const result = spawnSync("shadowclone", ["--version"], {
+    encoding: "utf8", timeout: 10_000, maxBuffer: 4096,
+  });
+  console.log(JSON.stringify(cliCompatibility(result.status === 0 ? result.stdout : null)));
+}

package/.claude-plugin/hooks/hooks.json

@@ -1,35 +0,0 @@
-{
-  "description": "Keep the shadowclone profile current and load learned guidance",
-  "hooks": {
-    "SessionStart": [
-      {
-        "hooks": [
-          {
-            "type": "command",
-            "command": "bun run \"${CLAUDE_PLUGIN_ROOT}/dist/shadowclone.js\" hook session-start"
-          }
-        ]
-      }
-    ],
-    "SubagentStart": [
-      {
-        "hooks": [
-          {
-            "type": "command",
-            "command": "bun run \"${CLAUDE_PLUGIN_ROOT}/dist/shadowclone.js\" hook session-start"
-          }
-        ]
-      }
-    ],
-    "SessionEnd": [
-      {
-        "hooks": [
-          {
-            "type": "command",
-            "command": "bun run \"${CLAUDE_PLUGIN_ROOT}/dist/shadowclone.js\" hook session-end"
-          }
-        ]
-      }
-    ]
-  }
-}

package/.claude-plugin/plugin.json

@@ -1,5 +0,0 @@
-{
-  "name": "shadowclone",
-  "version": "0.0.2",
-  "description": "Loads the user's shadowclone profile and learns when sessions end"
-}

package/dist/web/index-174jt7gq.css

@@ -1 +0,0 @@
-:root{--buncss-light: ;--buncss-dark:initial;color-scheme:dark;color:#e5e4ed;--muted:#929bb3;--accent:#b6a2ee;--line:#303246;--surface:#171923;background:#090a10;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif;font-size:15px}*{box-sizing:border-box}body{background:radial-gradient(at 50% 45%,#291d3c5c,#0000 65%);min-height:100vh;margin:0;padding:28px 24px}button,input,select,textarea{font:inherit}button,select{cursor:pointer}button{border:0}button:disabled{cursor:wait;opacity:.5}button,a,input,textarea,select{outline-offset:5px}:focus-visible{outline:2px solid var(--accent)}button,a{-webkit-tap-highlight-color:transparent}[hidden]{display:none!important}.frame{overflow:clip;background:#10121b;border:1px solid #373043;border-radius:20px;max-width:1040px;margin:0 auto;box-shadow:0 24px 100px #0008,0 0 100px #9b71d208}.masthead{border-bottom:1px solid var(--line);display:flex;justify-content:space-between;align-items: center;padding:18px 32px}.brand{display:inline-flex;color:inherit;text-decoration:none;align-items: center;gap:9px;font-weight:650}.brand-mark{filter:drop-shadow(0 0 8px #c0a0ff33);width:28px;height:28px}.local-badge{letter-spacing:.12em;color:var(--muted);font-size:10px}.local-badge span{display:inline-block;background:#8dd0bd;border-radius:50%;width:6px;height:6px;margin-right:6px}main{padding:32px 36px 0}.eyebrow{letter-spacing:.22em;color:var(--accent);margin:0 0 12px;font-size:10px;font-weight:650}h1,h2{font-family:Georgia,Times New Roman,serif;font-weight:400}h1{letter-spacing:-.035em;margin:0 0 12px;font-size:clamp(30px,4vw,44px)}h2{letter-spacing:-.02em;margin:0;font-size:28px}.subtitle{color:var(--muted);margin:0;line-height:1.6}.toolbar{display:flex;align-items: end;gap:14px;margin-top:24px}.scope-field{display:grid;letter-spacing:.04em;color:var(--muted);gap:7px;font-size:10px}.scope-field select{appearance:none;background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIxNCIgaGVpZ2h0PSIxNCIgdmlld0JveD0iMCAwIDE0IDE0IiBmaWxsPSJub25lIj4KICA8cGF0aCBkPSJtMyA1IDQgNCA0LTQiIHN0cm9rZT0iI2I3YWVjOSIgc3Ryb2tlLXdpZHRoPSIxLjUiIHN0cm9rZS1saW5lY2FwPSJyb3VuZCIgc3Ryb2tlLWxpbmVqb2luPSJyb3VuZCIvPgo8L3N2Zz4K);background-position:right 14px center;background-repeat:no-repeat;min-width:200px;padding-right:40px}input,select,textarea{color:#e5e4ed;border:1px solid var(--line);background-color:#12141f;border-radius:7px;padding:10px 12px;font-size:13px}textarea{resize:vertical;width:100%;line-height:1.6}input::placeholder,textarea::placeholder{color:#747c93}.search-field{flex:1}.search-field input{width:100%}.quiet-button{color:#bec3d4;background:0 0;border-radius:7px;padding:11px 12px;font-size:13px}.quiet-button:hover{color:#fff;background:#222533}.primary-button{color:#181323;background:linear-gradient(145deg,#c3acf5,#aa8dde);border:1px solid #dcc9ff4d;border-radius:8px;padding:14px 22px;transition:box-shadow .2s,transform .2s,background .2s;font-size:13px;font-weight:650;box-shadow:0 3px 20px #b997ec1f,inset 0 1px #f1e6ff30}.primary-button:hover{background:linear-gradient(145deg,#d3c0ff,#b79ae9);transform:translateY(-1px);box-shadow:0 0 26px #ba95f23b}.primary-button span{margin-left:16px}.scope-note{color:var(--muted);min-height:17px;margin:0;font-size:12px;line-height:1.6}.notice{color:#e1d4ab;background:#27231b;border:1px solid #796c44;border-radius:8px;margin-top:20px;padding:12px 16px;font-size:13px;line-height:1.6}.notice.success{color:#abdacb;background:#132722;border-color:#33594d}.visually-hidden{position:absolute;overflow:hidden;clip-path:inset(50%);width:1px;height:1px}.footer{display:flex;border-top:1px solid var(--line);position:sticky;z-index:4;backdrop-filter:blur(18px);background:#171824ed;justify-content:space-between;align-items: center;gap:20px;padding:20px 32px;bottom:0;box-shadow:0 -12px 30px #0b0c1326}.footer strong{font-size:14px;font-weight:600}.footer p{color:var(--muted);margin:8px 0 0;font-size:12px}.footer-actions{display:flex;align-items: center;gap:12px}@media (width<=720px){body{padding:12px}main{padding:26px 18px 0}.masthead,.footer{padding:18px}.toolbar{flex-wrap:wrap}.scope-field,.scope-field select{width:100%}.footer{align-items: flex-start}.footer-actions{flex-direction:column-reverse;align-items: flex-end}.local-badge{font-size:9px}}@media (prefers-reduced-motion:reduce){*,*:before,*:after{animation:none!important;transition:none!important}}.workspace{display:grid;grid-template-columns:minmax(0,1fr)290px;align-items: start;gap:32px;margin:28px 0}.constellation{position:relative;padding:20px 4px 8px}.tree{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:12px;min-height:340px}.branch{position:relative;display:flex;flex-direction:column;align-self: start;align-items: center;gap:30px;padding-bottom:8px}.tree-connections{position:absolute;pointer-events:none;z-index:-1;fill:none;stroke:#b299d6;stroke-width:.8;opacity:.65;width:100%;height:100%;inset:0}.branch-title{letter-spacing:.2em;color:#a1abc4;margin:0 0 8px;font-size:10px;font-weight:400}.skill-node{position:relative;color:#cdd2e1;display:flex;background:0 0;flex-direction:column;align-items: center;gap:14px;width:100%;padding:0 2px}.node-gem{position:relative;display:grid;background:linear-gradient(145deg,#1b1b29,#11131e);border:1px solid #5f526f;border-radius:11px;place-items: center;width:42px;height:42px;transition:background .2s,border-color .2s,box-shadow .2s;transform:rotate(45deg)}.node-icon{display:grid;color:#b1a7c6;place-items: center;width:21px;height:21px;line-height:1;transform:rotate(-45deg)}.node-icon svg{width:100%;height:100%}.node-label{z-index:1;text-align:center;background:#10121be6;border-radius:4px;max-width:145px;padding:3px 5px;font-size:12px;line-height:1.45}.skill-node:hover .node-gem{background:#242030;border-color:#a68fd8}.skill-node.active .node-gem{outline:1px solid var(--accent);outline-offset:5px;border-color:#c3b1ef}.skill-node.equipped .node-gem{background:linear-gradient(140deg,#514263,#2b243d);border-color:#b6a2ee;box-shadow:0 0 25px #ad85f223}.skill-node.equipped .node-icon{color:#c9b7f5}.skill-node.equipped:after{content:"";position:absolute;box-sizing:content-box;background:#c4aff4;border:2px solid #11131c;border-radius:50%;width:7px;height:7px;margin-left:58px;top:12px}.skill-node.equipped .node-label{color:#f0eafa}.branch-empty{color:var(--muted);z-index:1;background:#11131c;font-size:12px}.tree-root{position:relative;width:74%;height:40px;margin:12px auto 0}.tree-root span{position:absolute;display:grid;color:#baa6e8;background:radial-gradient(circle,#2b213d,#141522 74%);border:1px solid #bca2e9;border-radius:50%;place-items: center;width:45px;height:45px;font-size:23px;bottom:-23px;left:50%;transform:translate(-50%)}.tree-hint{text-align:center;color:var(--muted);margin:42px 0 0;font-size:12px}@media (width<=900px){.workspace{grid-template-columns:minmax(0,1fr)270px;gap:20px}.branch-title{letter-spacing:.12em;font-size:9px}}@media (width<=720px){.workspace{grid-template-columns:1fr}.tree{min-height:280px}.branch{gap:24px}.node-label{font-size:11px}.constellation{padding-bottom:20px}}.detail{position:sticky;background:linear-gradient(150deg,#1d1b2a,#151720 55%);border:1px solid #53446799;border-radius:14px;padding:24px;top:24px;box-shadow:0 12px 40px #0003,inset 0 1px #d2b9ff0a}.detail h2{font-size:26px;line-height:1.2}.detail-description{color:#a5afc5;display:-webkit-box;-webkit-line-clamp:3;overflow:hidden;-webkit-box-orient:vertical;margin:14px 0 24px;font-size:13px;line-height:1.7}.behavior{border-top:1px solid var(--line);border-bottom:1px solid var(--line);padding:21px 0}.behavior p:last-child{color:#c3c5d0;white-space:pre-line;margin:0;font-size:13px;line-height:1.7}.skill-status{color:#8fcaba;margin:18px 0;font-size:11px;line-height:1.6}.detail .primary-button{width:100%}.detail .editor{margin-top:20px}.detail summary{color:#bdb5d2;cursor:pointer;font-size:12px}.detail textarea{min-height:200px;margin-top:12px;font:11px/1.65 ui-monospace,monospace}.detail .quiet-button{width:100%;margin-top:8px}.owner-note{color:var(--muted);font-size:11px;line-height:1.6}.identity{display:flex;border-top:1px solid #292b3d;justify-content:space-between;align-items: center;gap:24px;padding:26px 0}.identity h2{font-size:26px}.identity p:last-child{color:var(--muted);max-width:580px;margin-bottom:0;font-size:12px;line-height:1.7}.traits{display:flex;flex-wrap:wrap;justify-content:flex-end;gap:7px;max-width:300px}.trait{color:#c2b5e7;white-space:nowrap;background:linear-gradient(135deg,#30253f,#211c2e);border:1px solid #3a324a;border-radius:30px;padding:7px 11px;font-size:11px;box-shadow:inset 0 1px #d2b9ff0a}.requirements{border:1px solid var(--line);background:#141824;border-radius:10px;margin:0 0 22px;padding:18px}.requirements h3{color:#b6c4d4;margin:0 0 10px;font-size:12px}.requirements p{color:var(--muted);margin:7px 0 0;font-size:12px;line-height:1.6}dialog{color:#e5e4ed;background:#151720;border:1px solid #414258;border-radius:18px;width:min(780px,100vw - 40px);max-height:88vh;padding:28px;box-shadow:0 35px 120px #0008}dialog::backdrop{backdrop-filter:blur(4px);background:#06070be3}.dialog-heading{display:flex;justify-content:space-between;align-items: flex-start;gap:20px;margin-bottom:25px}.dialog-heading .quiet-button{margin-top:-8px}.dialog-actions{display:flex;justify-content:flex-end;gap:12px;margin-top:24px}#review-content{overflow:auto;max-height:52vh}.file-change{border:1px solid var(--line);border-radius:8px;margin:12px 0;padding:14px}.file-change summary{cursor:pointer;color:#c7b8e8;overflow-wrap:anywhere;font-size:12px}.file-change h4{text-transform:uppercase;letter-spacing:.12em;color:var(--muted);margin-bottom:8px;font-size:10px}.file-change pre{white-space:pre-wrap;overflow-wrap:anywhere;background:#0e1119;border-radius:5px;padding:14px;font:11px/1.6 ui-monospace,monospace}.file-change p,.review-message{color:#a3adc2;font-size:12px;line-height:1.7}.review-warning{color:#dac895;font-size:12px;line-height:1.7}form label{display:grid;color:#bbc3d7;gap:9px;margin-top:20px;font-size:12px}@media (width<=720px){.detail{position:static}.identity{display:block}.traits{justify-content:flex-start;max-width:none;margin-top:18px}dialog{padding:20px}}.constellation{isolation:isolate}.constellation:before{content:"";position:absolute;pointer-events:none;z-index:-1;filter:blur(15px);background:radial-gradient(at 53% 72%,#be85f13d 0%,#0000 42%),radial-gradient(at 28% 52%,#8060c32b 0%,#0000 48%),radial-gradient(at 74% 41%,#59699b1f 0%,#0000 42%),radial-gradient(at 53% 57%,#7c47822e 0%,#0000 65%);inset:30px -35px 5px}.tree-root img{filter:drop-shadow(0 0 7px #bca1f38c);width:31px;height:31px}.tree-root span:before{content:"";position:absolute;border:1px solid #b19bdf26;border-radius:50%;inset:-9px;box-shadow:0 0 35px #be85f12e}.tree-root span{box-shadow:0 0 22px #c7a1ff40,0 0 75px #a776de26}.skill-node:hover .node-gem,.skill-node.active .node-gem{box-shadow:0 0 18px #c7a8fa33,0 0 55px #9773d92b}.skill-node.equipped .node-gem{box-shadow:0 0 16px #c7a8fa38,0 0 40px #a776de38,inset 0 0 12px #c7a8fa0d}.skill-node.equipped .node-icon{filter:drop-shadow(0 0 4px #d6bfff66)}.skill-node.equipped:after{box-shadow:0 0 10px #ceadff99}.scope-meta{display:flex;justify-content:space-between;align-items: start;gap:16px;margin-top:12px}.library-note{text-align:right;color:var(--muted);max-width:270px;font-size:11px;line-height:1.6}.library-note summary{cursor:pointer;color:#a799c3}.library-note p{margin:8px 0}.library-note code{display:block;color:#c8b4f0;font-size:10px}#describe{color:#b2a1d1;margin-top:14px;padding:11px 12px}#model-description:empty{display:none}@media (width<=720px){.scope-meta{display:block}.library-note{text-align:left;margin-top:8px}}.starfield{position:absolute;pointer-events:none;z-index:-1;overflow:hidden;width:100%;height:100%;inset:0}.star{fill:#e6d6ff;opacity:0;transform-box:fill-box;transform-origin:center;animation:9s linear infinite star-drift}.star-rays{stroke:#eadbff;stroke-width:.55;opacity:.75}.star-phase-0{animation-duration:8.3s;animation-delay:-1.2s}.star-phase-1{animation-duration:11.1s;animation-delay:-5.8s}.star-phase-2{animation-duration:9.7s;animation-delay:-8.3s}.star-phase-3{animation-duration:12.4s;animation-delay:-3.4s}.star-phase-4{animation-duration:7.8s;animation-delay:-6.2s}.star-phase-5{animation-duration:10.6s;animation-delay:-2.7s}.star-phase-6{animation-duration:13.2s;animation-delay:-10.4s}.starfield.paused .star{animation-play-state:paused}@keyframes star-drift{0%,to{opacity:0;transform:translate(-8px,5px)scale(.65)}20%{opacity:.45}36%,59%{opacity:.95}45%,72%{opacity:.25}85%{opacity:0;transform:translate(12px,-9px)scale(1)}}@media (prefers-reduced-motion:reduce){.star{animation:none;opacity:.65;transform:none}}.build-panel{position:sticky;display:grid;overflow:auto;scrollbar-width:thin;scrollbar-color:#4d3d65 transparent;gap:16px;max-height:calc(100dvh - 140px);margin:-3px;padding:3px;top:20px}.build-panel .identity{display:block;background:linear-gradient(145deg,#221c30,#14151f 80%);border:1px solid #44364f;border-radius:14px;padding:22px}.build-panel .identity h2{font-size:25px}.build-panel .identity p:last-child{font-size:12px;line-height:1.65}.build-panel .traits{justify-content:flex-start;gap:6px;margin-top:14px}.build-panel .trait{padding:6px 9px;font-size:10px}.build-panel .detail{position:static}.build-panel #model-description{margin-top:16px;margin-bottom:0}@media (width<=720px){.build-panel{position:static;overflow:visible;max-height:none}}