@webpresso/claude-plugin 3.1.30 → 3.3.0

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Webpresso agent-kit Claude Code plugin: blueprints, skills, hooks, MCP server",
-    "version": "3.1.30"
+    "version": "3.3.0"
   },
   "plugins": [
     {
@@ -14,17 +14,8 @@
       "source": "./",
       "description": "Webpresso agent-kit: blueprints, skills, lore commit protocol, tech-debt lifecycle",
       "category": "development",
-      "keywords": ["agent", "blueprint", "claude-code", "skills", "mcp"],
-      "mcpServers": {
-        "webpresso": {
-          "command": "${CLAUDE_PLUGIN_ROOT}/bin/wp",
-          "args": ["mcp"],
-          "env": {
-            "WP_SKIP_UPDATE_CHECK": "1"
-          }
-        }
-      }
+      "keywords": ["agent", "blueprint", "claude-code", "skills", "mcp"]
     }
   ],
-  "version": "3.1.30"
+  "version": "3.3.0"
 }

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-kit",
-  "version": "3.1.30",
+  "version": "3.3.0",
   "description": "Webpresso agent-kit: blueprints, skills, lore commit protocol, tech-debt lifecycle",
   "author": {
     "name": "Webpresso",

package/bin/wp

@@ -1,21 +1,23 @@
 #!/usr/bin/env node
 
 import { spawnSync } from "node:child_process";
-import { accessSync, constants, realpathSync, statSync } from "node:fs";
+import { accessSync, constants, existsSync, readFileSync, realpathSync, statSync } from "node:fs";
 import { createRequire } from "node:module";
-import { dirname, delimiter, join } from "node:path";
+import { dirname, delimiter, isAbsolute, join, relative, resolve } from "node:path";
+import { homedir } from "node:os";
 import { fileURLToPath } from "node:url";
 
 const require = createRequire(import.meta.url);
 const shimPath = fileURLToPath(import.meta.url);
 const shimDir = dirname(shimPath);
 const adapterRoot = dirname(shimDir);
+const pathWpBinNames = process.platform === "win32" ? ["wp.cmd", "wp"] : ["wp"];
 
 function isExecutableFile(candidate) {
   try {
     const stat = statSync(candidate);
     if (!stat.isFile()) return false;
-    accessSync(candidate, constants.X_OK);
+    if (process.platform !== "win32") accessSync(candidate, constants.X_OK);
     return true;
   } catch {
     return false;
@@ -34,7 +36,7 @@ function pathWpCandidates() {
   return (process.env.PATH ?? "")
     .split(delimiter)
     .filter(Boolean)
-    .map((entry) => join(entry, process.platform === "win32" ? "wp.cmd" : "wp"));
+    .flatMap((entry) => pathWpBinNames.map((name) => join(entry, name)));
 }
 
 function resolveAgentKitPackageWp() {
@@ -46,14 +48,94 @@ function resolveAgentKitPackageWp() {
   }
 }
 
+function isPathInsideOrEqual(parent, candidate) {
+  const parentRoot = realpathSync(parent);
+  const candidateRoot = realpathSync(candidate);
+  const rel = relative(resolve(parentRoot), resolve(candidateRoot));
+  return rel === "" || (!rel.startsWith("..") && !isAbsolute(rel));
+}
+
+function isAgentKitWp(candidate) {
+  if (candidate.toLowerCase().endsWith(".cmd")) return false;
+  if (!isExecutableFile(candidate) || sameFile(candidate, shimPath)) return false;
+  try {
+    const resolved = realpathSync(candidate);
+    const packageRoot = dirname(dirname(resolved));
+    if (resolved !== join(packageRoot, "bin", "wp")) return false;
+    return isTrustedAgentKitPackageRoot(packageRoot);
+  } catch {
+    return false;
+  }
+}
+
+function isUsableAgentKitPackageRoot(packageRoot) {
+  try {
+    const pkg = JSON.parse(readFileSync(join(packageRoot, "package.json"), "utf8"));
+    return pkg.name === "@webpresso/agent-kit" && isExecutableFile(join(packageRoot, "bin", "wp"));
+  } catch {
+    return false;
+  }
+}
+
+function packageWpFromAdjacentNpmCmdShim(candidate) {
+  if (!candidate.toLowerCase().endsWith(".cmd")) return null;
+  const packageRoot = join(dirname(candidate), "node_modules", "@webpresso", "agent-kit");
+  return isTrustedAgentKitPackageRoot(packageRoot) ? join(packageRoot, "bin", "wp") : null;
+}
+
+function currentAgentKitPackageRoot() {
+  let current = dirname(shimPath);
+  for (let depth = 0; depth < 12; depth += 1) {
+    const packagePath = join(current, "package.json");
+    if (existsSync(packagePath)) {
+      try {
+        const pkg = JSON.parse(readFileSync(packagePath, "utf8"));
+        if (pkg.name === "@webpresso/agent-kit") return current;
+      } catch {
+        return null;
+      }
+    }
+    const parent = dirname(current);
+    if (parent === current) break;
+    current = parent;
+  }
+  return null;
+}
+
+function trustedHomeInstallPackageRoots() {
+  const home = process.env.HOME || homedir();
+  return [
+    join(home, ".claude", "plugins", "cache", "webpresso", "agent-kit"),
+    join(home, ".bun", "install", "global", "node_modules", "@webpresso", "agent-kit"),
+  ];
+}
+
+function isTrustedAgentKitPackageRoot(packageRoot) {
+  try {
+    if (!isUsableAgentKitPackageRoot(packageRoot)) return false;
+    const realPackageRoot = realpathSync(packageRoot);
+    const sourceRoot = currentAgentKitPackageRoot();
+    if (sourceRoot !== null && realPackageRoot === realpathSync(sourceRoot)) return true;
+    return trustedHomeInstallPackageRoots().some(
+      (anchor) => existsSync(anchor) && isPathInsideOrEqual(anchor, realPackageRoot),
+    );
+  } catch {
+    return false;
+  }
+}
+
+function assertAgentKitWp(candidate, label) {
+  if (isAgentKitWp(candidate)) return candidate;
+  throw new Error(
+    `${label} points to ${candidate}, but that executable is not @webpresso/agent-kit. ` +
+      "Set WEBPRESSO_WP_BIN to the Webpresso wp executable, install/update @webpresso/agent-kit, or run wp setup.",
+  );
+}
+
 function resolveAgentKitWp() {
   const explicitPath = process.env.WEBPRESSO_WP_BIN;
   if (explicitPath) {
-    if (isExecutableFile(explicitPath)) return explicitPath;
-    throw new Error(
-      `WEBPRESSO_WP_BIN points to ${explicitPath}, but that file is not executable. ` +
-        "Set WEBPRESSO_WP_BIN to a valid wp executable, install/update @webpresso/agent-kit, or run wp setup.",
-    );
+    return assertAgentKitWp(explicitPath, "WEBPRESSO_WP_BIN");
   }
 
   const candidates = [
@@ -63,8 +145,10 @@ function resolveAgentKitWp() {
   ].filter(Boolean);
 
   for (const candidate of candidates) {
-    if (isExecutableFile(candidate) && !sameFile(candidate, shimPath)) {
-      return candidate;
+    const packageWp = packageWpFromAdjacentNpmCmdShim(candidate);
+    const command = packageWp ?? candidate;
+    if (isAgentKitWp(command)) {
+      return command;
     }
   }
 

package/commands/blueprint.md

@@ -12,7 +12,7 @@ Use the focused blueprint MCP tools.
 - `wp_blueprint_put` — whole-document structured authoring; writes the canonical blueprint markdown from typed input and returns revision metadata
 - `wp_blueprint_transition` — optimistic-concurrency lifecycle transition; requires `expected_version` and returns updated revision metadata
 - `wp_blueprint_task_next` — return the next ready task; accepts optional `project_id` when the current cwd is a multi-repo workspace container
-- `wp_blueprint_task_advance` — change task status (non-`done`); requires `project_id` and accepts optional `request_id` and `head_at_ingest` for retry-safe mutation
+- `wp_blueprint_task_advance` — change task status (non-`done`); requires `project_id` and `slug` (task ids are not unique across blueprints, so `slug` scopes the mutation to the right one), and accepts optional `request_id` and `head_at_ingest` for retry-safe mutation
 - `wp_blueprint_task_verify` — mark a task `done` with evidence; accepts optional `request_id` and `head_at_ingest` for retry-safe verification
 - `wp_blueprint_promote` / `wp_blueprint_finalize` — accept optional `project_id` for nested-workspace disambiguation
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webpresso/claude-plugin",
-  "version": "3.1.30",
+  "version": "3.3.0",
   "private": false,
   "description": "Claude Code plugin adapter for Webpresso agent-kit skills, commands, and MCP runtime.",
   "homepage": "https://github.com/webpresso/agent-kit#readme",

package/plugin-skill-ownership.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "host": "claude",
   "packageName": "@webpresso/claude-plugin",
-  "packageVersion": "3.1.30",
+  "packageVersion": "3.3.0",
   "runtimeDirs": [".claude/skills"],
   "skills": {
     "ai-deslop": {
@@ -24,7 +24,7 @@
       "digest": "sha256:a97c243b11a25a893d3149a5545d3d111bc54e72c2e2acea9ce6fad3d333d2f1"
     },
     "codex": {
-      "digest": "sha256:07804f1e139e1e2e76f34f35dd5471895072aea5d8b3f5f412cf1328a8180b4b"
+      "digest": "sha256:7093f390749bed751038ad480d68c12380cfa2630e61881c16be46da7f75e238"
     },
     "deep-interview": {
       "digest": "sha256:e80d7e12e486397103108bb473e98e8e8656519770fa20701f8b3e9e66991939"
@@ -90,7 +90,7 @@
       "digest": "sha256:953ab2625287866e5f27e602a89f1752e054d47522d04e1fdc11880867dc2fde"
     },
     "verify": {
-      "digest": "sha256:60de27bef39fd24041e1b78a276fc7ed2f38bc6d7ac5af88beba7eb6770a0119"
+      "digest": "sha256:47c1d75ef5d1d47b94ef48ac91b0fd4bbf6ba1ab32563cfc28518bb75c7798f0"
     }
   }
 }

package/skills/codex/SKILL.md

@@ -8,13 +8,37 @@ license: MIT
 
 Use this skill from Claude or another non-Codex host when the user wants Codex to independently review a diff, challenge a plan, or answer a repo question. Keep Codex read-only by default and treat its answer as external advice until independently verified.
 
+## Primary path: the `wp_review_run` MCP tool
+
+When the webpresso MCP server is available, call `wp_review_run` directly instead of any bash block below — it is the same `wp review run` typed runtime, called in-process, with two ergonomic wins: it takes a `prompt` string (no `--prompt-file` bookkeeping) and it runs the probe stage and the review stage in **one call** by default (the review stage is skipped automatically if the probe fails, so you never waste a full review invocation on a cold/broken provider).
+
+```jsonc
+// wp_review_run MCP tool call
+{
+  "prompt": "<diff summary + what to look for>",
+  "provider": "codex",
+  // model, effort, artifactRoot, idleSeconds are all optional and default
+  // the same way the `wp review run` CLI does. Omit `stage` for automatic
+  // probe-then-review; pass stage: "probe" or stage: "review" only for
+  // manual single-stage control.
+}
+```
+
+**Provider fallback lives in this one call.** If your primary provider (e.g. Codex) is unavailable — out of credits, auth expired — switch the `provider` parameter to another supported value (`claude`, `opencode`, `grok`) in the SAME `wp_review_run` call. Never shell into a different provider's CLI directly; that bypasses artifact capture under `.webpresso/reviews`, availability tracking, and the probe-then-review handshake this tool exists to provide. The pretool guard hook actively blocks shelling straight into a provider CLI's review-launching subcommand and redirects here.
+
+The bash blocks in this skill (below) are the **MCP-unavailable fallback only** — use them when the webpresso MCP server itself is not reachable in the current host, not as a provider-fallback mechanism.
+
 ## Single-shot budget (anti-stampede)
 
 - Default: **one** review invocation per request.
 - Do **not** fan out parallel multi-host review matrices unless the user set `review_budget`/`N` > 1.
-- Prefer `wp review run` / `wp review gate` over spawn/wait agent loops for review.
+- Prefer `wp_review_run` (MCP) or `wp review run` / `wp review gate` (CLI fallback) over spawn/wait agent loops for review.
 - Keep prompts bounded; no whole-repo paste.
 
+## MCP-unavailable fallback (raw CLI)
+
+Everything from here down is the manual `wp review run` CLI path documented for hosts or sessions where the webpresso MCP server is not reachable. Prefer `wp_review_run` above whenever MCP is available.
+
 ## Auth check
 
 ```bash

package/skills/verify/SKILL.md

@@ -235,8 +235,10 @@ Reviewer preference (pick **one** path):
 
 Approval evidence requirements:
 
-- Blueprint lifecycle: `wp review gate <blueprint-slug> --target HEAD --json` first.
-  Use `wp review log` / `wp review read` for inspection.
+- Blueprint lifecycle: `wp review gate <blueprint-slug> --purpose delivery --target HEAD --json`
+  first. Delivery gates automatically run declared Promotion Gates from the
+  Trust Dossier before outside-review provider probes. Use `wp review log` /
+  `wp review read` for inspection.
 - Each reviewer must return clear `APPROVED`/`BLOCKED` with enough evidence.
 - Record as PR comments when a PR exists (model/tool, verdict, reviewed commit).
 - Unavailable reviewer → try next preferred; if still short, report gap and