@webpresso/claude-plugin 3.1.20 → 3.1.21

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Webpresso agent-kit Claude Code plugin: blueprints, skills, hooks, MCP server",
-    "version": "3.1.20"
+    "version": "3.1.21"
   },
   "plugins": [
     {
@@ -26,5 +26,5 @@
       }
     }
   ],
-  "version": "3.1.20"
+  "version": "3.1.21"
 }

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-kit",
-  "version": "3.1.20",
+  "version": "3.1.21",
   "description": "Webpresso agent-kit: blueprints, skills, lore commit protocol, tech-debt lifecycle",
   "author": {
     "name": "Webpresso",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webpresso/claude-plugin",
-  "version": "3.1.20",
+  "version": "3.1.21",
   "private": false,
   "description": "Claude Code plugin adapter for Webpresso agent-kit skills, commands, and MCP runtime.",
   "homepage": "https://github.com/webpresso/agent-kit#readme",

package/plugin-skill-ownership.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "host": "claude",
   "packageName": "@webpresso/claude-plugin",
-  "packageVersion": "3.1.20",
+  "packageVersion": "3.1.21",
   "runtimeDirs": [".claude/skills"],
   "skills": {
     "ai-deslop": {
@@ -21,10 +21,10 @@
       "digest": "sha256:21fd24862e7f7c8a1feadea6bc376492b136b99fc381cf1b8927c9db80615431"
     },
     "claude": {
-      "digest": "sha256:dec5cc89c31485bab6defea919c22e9a9c50c530d8fc4ef4f5be5080b5d91b75"
+      "digest": "sha256:09ed281443338ff5ab38decbd39827b4c96e2b90cfabd90cf13267e4f2ff71f7"
     },
     "codex": {
-      "digest": "sha256:98187c2845b5cd88ba9eb9f682d16fec648932a084b3d1cebd066945b1fb6fdf"
+      "digest": "sha256:f363f40230ecd0741ba45ea6b1b18136b04292dc966aa1d72596e5add6abfc4e"
     },
     "deep-interview": {
       "digest": "sha256:e80d7e12e486397103108bb473e98e8e8656519770fa20701f8b3e9e66991939"
@@ -51,7 +51,7 @@
       "digest": "sha256:a80fbacc765e8b886437b9fdf7dd71e1ceb1b98b939078ec90fc88d06a8b4c69"
     },
     "opencode-go": {
-      "digest": "sha256:8bbfad8273c526c563ceef3c8b98efbc60c3b24dc6b0a2a25d8efd9e83788860"
+      "digest": "sha256:b36683da200b59fc5a8cceb8da34b7b29613680c4e52c4f4aaae03ff3acdd269"
     },
     "plan-ceo-review": {
       "digest": "sha256:4d426158518dd71f8998770e8d4037bcbfa3c65d7265a93a4a78a9b015ba881e"

package/skills/claude/SKILL.md

@@ -94,6 +94,11 @@ TARGET_FILE=${TARGET_FILE:?set TARGET_FILE to one changed file}
 
 Run both the availability probe and the full review through the typed `wp review run` owner. Skills must not embed subprocess supervision. The runtime consumes Claude's streaming JSON events, advances its idle clock only on monotonic semantic progress, and has no total wall-clock cutoff.
 
+The artifact root contains private runtime diagnostics, not a recorded
+transcript or committable approval evidence. Direct `wp review run` output is
+advisory. Only `wp review gate` may publish a bounded, target-bound artifact and
+ledger event for blueprint promotion or completion.
+
 ```bash
 CLAUDE_REVIEW_MODEL=${CLAUDE_REVIEW_MODEL:-opus}
 CLAUDE_REVIEW_EFFORT=${CLAUDE_REVIEW_EFFORT:-medium}
@@ -141,7 +146,7 @@ if [ -n "$DASH_HELPER_RUN_ID" ]; then
 fi
 ```
 
-Treat `true-idle`, `protocol-unsupported`, provider failure, abort, spawn failure, or artifact failure as unavailable review evidence. Never replace them with a static timeout, arbitrary byte-growth heartbeat, or buffered-output fallback.
+Treat `true-idle`, `protocol-unsupported`, provider failure, abort, spawn failure, or artifact failure as an unavailable advisory result. Never replace them with a static timeout, arbitrary byte-growth heartbeat, or buffered-output fallback.
 
 #### Retry policy
 

package/skills/codex/SKILL.md

@@ -65,8 +65,13 @@ overrides (defaults shown). Set them inline, e.g.
   review stages accept only `medium` or `high`; any other value is rejected.
 - `CODEX_REVIEW_IDLE_SECONDS` / `CODEX_REVIEW_PROBE_IDLE_SECONDS` — idle timeout
   (seconds) for the review stage and the preflight probe, default `180` each.
-- `CODEX_REVIEW_ARTIFACT_ROOT` — directory for the recorded review transcript
-  used as outside-review evidence, default `<cwd>/.webpresso/reviews`.
+- `CODEX_REVIEW_ARTIFACT_ROOT` — directory for private runtime diagnostics,
+  default `<cwd>/.webpresso/reviews`. Never commit files from this directory or
+  cite them as approval evidence.
+
+Direct `wp review run` output is advisory. Only `wp review gate` may publish a
+bounded, target-bound review artifact and ledger event for blueprint promotion
+or completion.
 
 ## Modes
 

package/skills/opencode-go/SKILL.md

@@ -57,6 +57,7 @@ The managed OpenCode plugin currently has no parent-linked native subagent compl
 ## Review command
 
 Use read-only prompts. Run from the repo directory; do NOT pass `--dir "$PWD"` because opencode already uses the current directory and the extra index can stall reviews.
+The artifact root contains private runtime diagnostics, not a recorded transcript or committable approval evidence. Direct `wp review run` output is advisory. Only `wp review gate` may publish a bounded, target-bound artifact and ledger event for blueprint promotion or completion.
 
 ```bash
 # Aggregate reviewer: honor the canonical reviewer policy (Kimi K2.7 Code → DeepSeek V4 Pro → DeepSeek V4 Flash first, then cross-family fallbacks).
@@ -106,4 +107,4 @@ wp review run \
 ```
 
 If `$MODEL` is empty, run `opencode models opencode-go` and choose a present reviewer.
-Treat a provider-wide usage limit as terminal for every OpenCode Go model in the current review; do not fall back to another family. Treat `true-idle`, `protocol-unsupported`, provider failure, abort, spawn failure, or artifact failure as unavailable review evidence. Never replace them with a static timeout, arbitrary byte-growth heartbeat, or buffered-output fallback.
+Treat a provider-wide usage limit as terminal for every OpenCode Go model in the current review; do not fall back to another family. Treat `true-idle`, `protocol-unsupported`, provider failure, abort, spawn failure, or artifact failure as an unavailable advisory result. Never replace them with a static timeout, arbitrary byte-growth heartbeat, or buffered-output fallback.