@webpresso/plugin-antigravity 0.0.0-stage → 0.0.17

package/LICENSE

@@ -0,0 +1,104 @@
+Elastic License 2.0
+===================
+
+Copyright (c) 2026 Webpresso, Inc.
+
+Acceptance
+----------
+
+By using the software, you agree to all of the terms and conditions below.
+
+Copyright License
+-----------------
+
+The licensor grants you a non-exclusive, royalty-free, worldwide,
+non-sublicensable, non-transferable license to use, copy, distribute, make
+available, and prepare derivative works of the software, in each case subject
+to the limitations and conditions below.
+
+Limitations
+-----------
+
+You may not provide the software to third parties as a hosted or managed
+service, where the service provides users with access to any substantial set of
+the features or functionality of the software.
+
+You may not move, change, disable, or circumvent the license key
+functionality in the software, and you may not remove or obscure any
+functionality in the software that is protected by the license key.
+
+You may not alter, remove, or obscure any licensing, copyright, or other
+notices of the licensor in the software. Any use of the licensor's trademarks
+is subject to applicable law.
+
+Patents
+-------
+
+The licensor grants you a license, under any patent claims the licensor can
+license, or becomes able to license, to make, have made, use, sell, offer for
+sale, import and have imported the software, in each case subject to the
+limitations and conditions in this license. This license does not cover any
+patent claims that you cause to be infringed by modifications or additions to
+the software.
+
+If you or your company make any written claim that the software infringes or
+contributes to infringement of any patent, your patent license for the software
+granted under these terms ends immediately. If your company makes such a claim,
+your patent license ends immediately for work on behalf of your company.
+
+Notices
+-------
+
+You must ensure that anyone who gets a copy of any part of the software from
+you also gets a copy of these terms.
+
+If you modify the software, you must include in any modified copies of the
+software prominent notices stating that you have modified the software.
+
+No Other Rights
+---------------
+
+These terms do not imply any licenses other than those expressly granted in
+these terms.
+
+Termination
+-----------
+
+If you use the software in violation of these terms, such use is not licensed,
+and your licenses will automatically terminate. If the licensor provides you
+with a notice of your violation, and you cease all violation of this license no
+later than 30 days after you receive that notice, your licenses will be
+reinstated retroactively. However, if you violate these terms after such
+reinstatement, any additional violation of these terms will cause your licenses
+to terminate automatically and permanently.
+
+No Liability
+------------
+
+As far as the law allows, the software comes as is, without any warranty or
+condition, and the licensor will not be liable to you for any damages arising
+out of these terms or the use or nature of the software, under any kind of
+legal claim.
+
+Definitions
+-----------
+
+The licensor is the entity offering these terms, and the software is the
+software the licensor makes available under these terms, including any portion
+of it.
+
+you refers to the individual or entity agreeing to these terms.
+
+your company is any legal entity, sole proprietorship, or other kind of
+organization that you work for, plus all organizations that have control over,
+are under the control of, or are under common control with that organization.
+control means ownership of substantially all the assets of an entity, or the
+power to direct its management and policies by vote, contract, or otherwise.
+Control can be direct or indirect.
+
+your licenses are all the licenses granted to you for the software under these
+terms.
+
+use means anything you do with the software requiring one of your licenses.
+
+trademark means trademarks, service marks, and similar rights.

package/bin/wp

@@ -0,0 +1,276 @@
+#!/bin/sh
+# webpresso-wp-shim v1 — keep this marker on line 2 (shim loop guard).
+#
+# The one `wp` shim. Copied byte-identically into each plugin's bin/wp
+# (packages/scripts/stage-plugin-runtime-artifacts.ts) and, once the release
+# installer adopts it, into ~/.webpresso/bin/wp. It stores no state, writes
+# nothing, and picks the runtime on EVERY call from where it is called:
+#
+#   1. WEBPRESSO_WP_BIN (an absolute executable)  xor  WP_FORCE_JIT_PATH (an
+#      absolute checkout)
+#   2. the nearest ancestor of $PWD that is a webpresso source checkout
+#      (bin/wp + src/cli/cli.ts) ADMITTED in ~/.webpresso/source-checkouts
+#      -> <checkout>/bin/wp, whose own launcher guards freshness against HEAD.
+#      Layout is not trust: a source-shaped directory whose repository is not
+#      listed there fails with checkout-not-admitted instead of running its
+#      bin/wp. A linked worktree is admitted through its repository, and only
+#      when the admitted repository's own .git/worktrees/*/gitdir names it.
+#   3. else (no checkout ancestor at all) the nearest ancestor
+#      .webpressorc.json: its top-level exact-semver "runtime" pin
+#      -> ~/.webpresso/versions/<pin>/bin/wp, else the legacy
+#      ~/.webpresso/runtimes/<pin>/wp (missing = error)
+#   4. else the installer's active release ~/.webpresso/current/bin/wp, else
+#      the newest stable ~/.webpresso/versions/<x.y.z>/bin/wp, else the legacy
+#      newest stable ~/.webpresso/runtimes/<x.y.z>/wp
+#   5. else a named error, exit 127 — never a different runtime. A pre-shim
+#      ~/.webpresso/bin/wp is never run implicitly (nothing in it proves it is
+#      a release rather than a development build); name it with
+#      WEBPRESSO_WP_BIN.
+#
+# Bounded: a parent-directory walk, one-line reads of the user's admission file
+# and of admitted repositories' worktree back-links, at most one size-capped
+# JSON read (node, only in a consumer repo with a
+# .webpressorc.json), one directory listing. No git, no network, no retries,
+# no timeouts. Mode and error literals
+# are the closed vocabulary in src/runtime/runtime-selector-vocab.ts.
+#
+# `exec`, not a spawn wrapper: the MCP server this launches is a long-lived
+# stdio service, and a relay process could die and orphan it. Arguments are
+# forwarded verbatim through "$@".
+
+set -u
+
+announced_modes='explicit-binary explicit-checkout'
+
+fail() {
+  printf 'wp-shim: error %s: %s\n' "$1" "$2" >&2
+  exit 127
+}
+
+MODE=
+TARGET=
+choose() {
+  MODE=$1
+  TARGET=$2
+}
+
+admission_file=${HOME:-}/.webpresso/source-checkouts
+
+is_source_shaped() {
+  [ -f "$1/bin/wp" ] && [ -x "$1/bin/wp" ] && [ -f "$1/src/cli/cli.ts" ]
+}
+
+# True when checkout $1 is an admitted repository's primary checkout, or one of
+# its registered linked worktrees. The admission file is user-owned, one
+# absolute primary-checkout path per line. Identity is by directory (-ef), and
+# a linked worktree is recognized only from the admitted repository's own
+# .git/worktrees/*/gitdir back-links: nothing inside the project (its .git
+# file, symlink or metadata) is ever read or trusted, and stat never blocks.
+is_admitted_checkout() {
+  [ -f "$admission_file" ] || return 1
+  while IFS= read -r entry || [ -n "$entry" ]; do
+    case $entry in /*) ;; *) continue ;; esac
+    [ "$entry" -ef "$1" ] && return 0
+    for meta in "$entry"/.git/worktrees/*/; do
+      [ -f "${meta}gitdir" ] || continue
+      back=
+      IFS= read -r back <"${meta}gitdir" || [ -n "$back" ] || continue
+      [ "${back%/.git}" -ef "$1" ] && return 0
+    done
+  done <"$admission_file"
+  return 1
+}
+
+# Exact semver x.y.z[-pre], no leading zeros, no build metadata. With a second
+# argument "stable", a prerelease is rejected too.
+is_exact_semver() {
+  version=$1
+  core=${version%%-*}
+  pre=
+  if [ "$core" != "$version" ]; then
+    pre=${version#*-}
+    [ "${2:-}" != stable ] || return 1
+    case $pre in '' | .* | *. | *..* | *[!0-9A-Za-z.-]*) return 1 ;; esac
+    saved_ifs=$IFS
+    IFS=.
+    # shellcheck disable=SC2086 # deliberate field split on "."
+    set -- $pre
+    IFS=$saved_ifs
+    for part in "$@"; do
+      case $part in 0?*) case $part in *[!0-9]*) ;; *) return 1 ;; esac ;; esac
+    done
+  fi
+  case $core in '' | .* | *. | *..* | *[!0-9.]*) return 1 ;; esac
+  saved_ifs=$IFS
+  IFS=.
+  # shellcheck disable=SC2086 # deliberate field split on "."
+  set -- $core
+  IFS=$saved_ifs
+  [ "$#" -eq 3 ] || return 1
+  for part in "$@"; do
+    case $part in '' | 0?* | *[!0-9]*) return 1 ;; esac
+  done
+  return 0
+}
+
+# Release layout literals; src/runtime/runtime-selector-vocab.ts (WP_RELEASE_LAYOUTS)
+# is the authority and bin/wp-shim.subprocess.test.ts asserts both directions.
+webpresso_home=${HOME:-}/.webpresso
+current_release=$webpresso_home/current/bin/wp
+versions_dir=$webpresso_home/versions
+runtimes_dir=$webpresso_home/runtimes
+
+# Sets PIN to the top-level "runtime" of $1 (empty when absent). The document
+# is opened non-blocking, must be a regular file, and is read through a
+# 64 KiB + 1 buffer on that one descriptor (growth after open cannot exceed
+# it); anything longer is refused. The pin
+# is validated as an exact semver BEFORE it crosses back into the shell, so no
+# shell transport (such as a stripped trailing newline) can change it.
+read_pin() {
+  PIN=$(node -e '
+    const fs = require("node:fs");
+    let fd;
+    try { fd = fs.openSync(process.argv[1], fs.constants.O_RDONLY | fs.constants.O_NONBLOCK); } catch { process.exit(2); }
+    if (!fs.fstatSync(fd).isFile()) process.exit(3);
+    const limit = 65536;
+    const buffer = Buffer.alloc(limit + 1);
+    let length = 0;
+    for (let n; length <= limit && (n = fs.readSync(fd, buffer, length, limit + 1 - length, null)) > 0; ) length += n;
+    if (length > limit) process.exit(3);
+    let v;
+    try { v = JSON.parse(buffer.subarray(0, length).toString("utf8")); } catch { process.exit(2); }
+    if (v === null || typeof v !== "object" || Array.isArray(v) || !Object.hasOwn(v, "runtime")) process.exit(0);
+    const pattern = /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*))*)?$/u;
+    if (typeof v.runtime !== "string" || !pattern.test(v.runtime)) process.exit(4);
+    process.stdout.write(v.runtime);
+  ' "$1" 2>/dev/null)
+  case $? in
+    0) return 0 ;;
+    3) PIN_PROBLEM="is not a regular file of at most 64 KiB" ;;
+    4) PIN_PROBLEM="has a \"runtime\" pin that is not an exact version such as 1.2.3 (no ranges, no build metadata)" ;;
+    127) PIN_PROBLEM="cannot be read: node is not on PATH" ;;
+    *) PIN_PROBLEM="is not valid JSON" ;;
+  esac
+  return 1
+}
+
+# Sets BEST to the newest stable x.y.z under directory $1 whose release binary
+# is "$1/<version>/$2" (an executable file); empty when there is none.
+scan_releases() {
+  BEST=
+  best_major=
+  best_minor=
+  best_patch=
+  for entry in "$1"/*/; do
+    [ -d "$entry" ] || continue
+    entry=${entry%/}
+    version=${entry##*/}
+    is_exact_semver "$version" stable || continue
+    [ -f "$entry/$2" ] && [ -x "$entry/$2" ] || continue
+    major=${version%%.*}
+    rest=${version#*.}
+    minor=${rest%%.*}
+    patch=${rest#*.}
+    if [ -z "$BEST" ] ||
+      [ "$major" -gt "$best_major" ] ||
+      { [ "$major" -eq "$best_major" ] && [ "$minor" -gt "$best_minor" ]; } ||
+      { [ "$major" -eq "$best_major" ] && [ "$minor" -eq "$best_minor" ] && [ "$patch" -gt "$best_patch" ]; }; then
+      BEST=$version
+      best_major=$major
+      best_minor=$minor
+      best_patch=$patch
+    fi
+  done
+}
+
+# The installer's active release (the current link) wins, then the newest
+# versions/x.y.z/bin/wp, then the legacy runtimes/x.y.z/wp.
+choose_latest_release() {
+  if [ -f "$current_release" ] && [ -x "$current_release" ]; then
+    choose current-release "$current_release"
+    return 0
+  fi
+  scan_releases "$versions_dir" bin/wp
+  if [ -n "$BEST" ]; then
+    choose latest-release "$versions_dir/$BEST/bin/wp"
+    return 0
+  fi
+  scan_releases "$runtimes_dir" wp
+  if [ -n "$BEST" ]; then
+    choose latest-release "$runtimes_dir/$BEST/wp"
+    return 0
+  fi
+  return 1
+}
+
+is_shim_file() {
+  [ -f "$1" ] || return 1
+  { head -c 256 "$1" | grep -q 'webpresso-wp-shim'; } 2>/dev/null
+}
+
+choose_release() {
+  if [ -n "${1:-}" ]; then
+    rc_file=$1/.webpressorc.json
+    read_pin "$rc_file" || fail pin-invalid "$rc_file $PIN_PROBLEM."
+    if [ -n "$PIN" ]; then
+      is_exact_semver "$PIN" || fail pin-invalid "$rc_file pins runtime \"$PIN\"; use an exact version such as 1.2.3 (no ranges)."
+      pinned=$versions_dir/$PIN/bin/wp
+      [ -f "$pinned" ] && [ -x "$pinned" ] || pinned=$runtimes_dir/$PIN/wp
+      [ -f "$pinned" ] && [ -x "$pinned" ] || fail pin-not-installed "$rc_file pins runtime $PIN, but it is installed under neither $versions_dir/$PIN/bin/wp nor $runtimes_dir/$PIN/wp."
+      choose pinned-release "$pinned"
+      return 0
+    fi
+  fi
+  choose_latest_release && return 0
+  fail no-release-installed "no webpresso source checkout above $PWD and no release at $current_release, under $versions_dir or under $runtimes_dir; install the Webpresso app, or name a runtime explicitly with WEBPRESSO_WP_BIN (for example a pre-shim \$HOME/.webpresso/bin/wp release) or WP_FORCE_JIT_PATH (a source checkout)."
+}
+
+: "${WEBPRESSO_WP_BIN:=}"
+: "${WP_FORCE_JIT_PATH:=}"
+
+if [ -n "$WEBPRESSO_WP_BIN" ] && [ -n "$WP_FORCE_JIT_PATH" ]; then
+  fail both-overrides-set "WEBPRESSO_WP_BIN and WP_FORCE_JIT_PATH are both set; unset one."
+elif [ -n "$WEBPRESSO_WP_BIN" ]; then
+  case $WEBPRESSO_WP_BIN in /*) ;; *) fail override-missing "WEBPRESSO_WP_BIN must be an absolute path (got $WEBPRESSO_WP_BIN); exec would otherwise search PATH for a different file." ;; esac
+  [ -f "$WEBPRESSO_WP_BIN" ] && [ -x "$WEBPRESSO_WP_BIN" ] || fail override-missing "WEBPRESSO_WP_BIN points to $WEBPRESSO_WP_BIN, which is not an executable file."
+  choose explicit-binary "$WEBPRESSO_WP_BIN"
+elif [ -n "$WP_FORCE_JIT_PATH" ]; then
+  case $WP_FORCE_JIT_PATH in /*) ;; *) fail override-missing "WP_FORCE_JIT_PATH must be an absolute path (got $WP_FORCE_JIT_PATH)." ;; esac
+  is_source_shaped "$WP_FORCE_JIT_PATH" || fail override-missing "WP_FORCE_JIT_PATH points to $WP_FORCE_JIT_PATH, which is not a webpresso source checkout (executable bin/wp and src/cli/cli.ts)."
+  choose explicit-checkout "$WP_FORCE_JIT_PATH/bin/wp"
+else
+  # Checkout first, across every ancestor: a .webpressorc.json nested inside
+  # a source checkout must not pin a foreign runtime there. Only when no
+  # ancestor is a checkout does the nearest consumer config decide.
+  dir=${PWD:-}
+  consumer_root=
+  while [ -n "$dir" ]; do
+    if is_source_shaped "$dir"; then
+      is_admitted_checkout "$dir" || fail checkout-not-admitted "$dir looks like a webpresso source checkout, but its repository is not listed in $admission_file; add the absolute path of its primary checkout there (one per line) to run its bin/wp, or set WP_FORCE_JIT_PATH=$dir for this call."
+      choose checkout "$dir/bin/wp"
+      break
+    fi
+    if [ -z "$consumer_root" ] && [ -e "$dir/.webpressorc.json" ]; then
+      consumer_root=$dir
+    fi
+    [ "$dir" != / ] || break
+    dir=${dir%/*}
+    [ -n "$dir" ] || dir=/
+  done
+  [ -n "$TARGET" ] || choose_release "$consumer_root"
+fi
+
+# Never exec a shim: this one (directly or through a symlink) or another
+# byte-identical plugin copy would recurse instead of reaching a runtime.
+if [ "$TARGET" = "$0" ] || [ "$TARGET" -ef "$0" ] || is_shim_file "$TARGET"; then
+  fail self-reference "$MODE resolved to a wp shim ($TARGET); point it at a wp runtime instead."
+fi
+
+case " $announced_modes " in
+  *" $MODE "*) printf 'wp-shim: %s %s\n' "$MODE" "$TARGET" >&2 ;;
+esac
+
+WP_SKIP_UPDATE_CHECK=${WP_SKIP_UPDATE_CHECK:-1}
+export WP_SKIP_UPDATE_CHECK
+
+exec "$TARGET" "$@"

package/hooks.json

@@ -0,0 +1,54 @@
+{
+  "webpresso": {
+    "SessionStart": [
+      {
+        "type": "command",
+        "command": "wp_bin=; if [ -n \"${WEBPRESSO_WP_BIN:-}\" ]; then if [ -f \"${WEBPRESSO_WP_BIN}\" ] && [ -x \"${WEBPRESSO_WP_BIN}\" ]; then wp_bin=\"${WEBPRESSO_WP_BIN}\"; fi; elif [ -f \"${HOME}/.webpresso/bin/wp\" ] && [ -x \"${HOME}/.webpresso/bin/wp\" ]; then wp_bin=\"${HOME}/.webpresso/bin/wp\"; elif [ -f \"${HOME}/.gemini/config/plugins/wp/bin/wp\" ] && [ -x \"${HOME}/.gemini/config/plugins/wp/bin/wp\" ]; then wp_bin=\"${HOME}/.gemini/config/plugins/wp/bin/wp\"; fi; if [ -n \"$wp_bin\" ]; then hook_pid=''; exec 3<&0; trap 'trap - INT TERM; if [ -n \"$hook_pid\" ]; then kill -INT \"$hook_pid\" 2>/dev/null || true; wait \"$hook_pid\" 2>/dev/null || true; fi; kill -INT \"$$\"' INT; trap 'trap - INT TERM; if [ -n \"$hook_pid\" ]; then kill -TERM \"$hook_pid\" 2>/dev/null || true; wait \"$hook_pid\" 2>/dev/null || true; fi; kill -TERM \"$$\"' TERM; env WP_HOOK_HOST='antigravity' \"$wp_bin\" hook sessionstart-routing <&3 & hook_pid=$!; wait \"$hook_pid\"; hook_status=$?; trap - INT TERM; exec 3<&-; if [ \"$hook_status\" -ne 0 ]; then printf '%s\\n' '{}'; fi; else printf '%s\\n' '{}'; fi # wp-sessionstart-routing",
+        "timeout": 5
+      }
+    ],
+    "PreToolUse": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "wp_bin=; if [ -n \"${WEBPRESSO_WP_BIN:-}\" ]; then if [ -f \"${WEBPRESSO_WP_BIN}\" ] && [ -x \"${WEBPRESSO_WP_BIN}\" ]; then wp_bin=\"${WEBPRESSO_WP_BIN}\"; fi; elif [ -f \"${HOME}/.webpresso/bin/wp\" ] && [ -x \"${HOME}/.webpresso/bin/wp\" ]; then wp_bin=\"${HOME}/.webpresso/bin/wp\"; elif [ -f \"${HOME}/.gemini/config/plugins/wp/bin/wp\" ] && [ -x \"${HOME}/.gemini/config/plugins/wp/bin/wp\" ]; then wp_bin=\"${HOME}/.gemini/config/plugins/wp/bin/wp\"; fi; if [ -n \"$wp_bin\" ]; then hook_pid=''; exec 3<&0; trap 'trap - INT TERM; if [ -n \"$hook_pid\" ]; then kill -INT \"$hook_pid\" 2>/dev/null || true; wait \"$hook_pid\" 2>/dev/null || true; fi; kill -INT \"$$\"' INT; trap 'trap - INT TERM; if [ -n \"$hook_pid\" ]; then kill -TERM \"$hook_pid\" 2>/dev/null || true; wait \"$hook_pid\" 2>/dev/null || true; fi; kill -TERM \"$$\"' TERM; env WP_HOOK_HOST='antigravity' \"$wp_bin\" hook pretool-guard <&3 & hook_pid=$!; wait \"$hook_pid\"; hook_status=$?; trap - INT TERM; exec 3<&-; if [ \"$hook_status\" -eq 2 ]; then exit 0; elif [ \"$hook_status\" -ne 0 ]; then printf '%s\\n' \"{\\\"decision\\\":\\\"deny\\\",\\\"reason\\\":\\\"GUARD_PRETOOL_FAILURE: pretool-guard exit $hook_status; run wp hooks doctor\\\"}\"; printf '%s\\n' \"GUARD_PRETOOL_FAILURE: pretool-guard exit $hook_status; run wp hooks doctor\" >&2; exit 0; fi; else printf '%s\\n' '{\"decision\":\"deny\",\"reason\":\"GUARD_PRETOOL_FAILURE: wp missing; set WEBPRESSO_WP_BIN or install the app\"}'; printf '%s\\n' 'GUARD_PRETOOL_FAILURE: wp missing; set WEBPRESSO_WP_BIN or install the app' >&2; exit 0; fi # wp-pretool-guard",
+            "timeout": 5
+          }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "wp_bin=; if [ -n \"${WEBPRESSO_WP_BIN:-}\" ]; then if [ -f \"${WEBPRESSO_WP_BIN}\" ] && [ -x \"${WEBPRESSO_WP_BIN}\" ]; then wp_bin=\"${WEBPRESSO_WP_BIN}\"; fi; elif [ -f \"${HOME}/.webpresso/bin/wp\" ] && [ -x \"${HOME}/.webpresso/bin/wp\" ]; then wp_bin=\"${HOME}/.webpresso/bin/wp\"; elif [ -f \"${HOME}/.gemini/config/plugins/wp/bin/wp\" ] && [ -x \"${HOME}/.gemini/config/plugins/wp/bin/wp\" ]; then wp_bin=\"${HOME}/.gemini/config/plugins/wp/bin/wp\"; fi; if [ -n \"$wp_bin\" ]; then hook_pid=''; exec 3<&0; trap 'trap - INT TERM; if [ -n \"$hook_pid\" ]; then kill -INT \"$hook_pid\" 2>/dev/null || true; wait \"$hook_pid\" 2>/dev/null || true; fi; kill -INT \"$$\"' INT; trap 'trap - INT TERM; if [ -n \"$hook_pid\" ]; then kill -TERM \"$hook_pid\" 2>/dev/null || true; wait \"$hook_pid\" 2>/dev/null || true; fi; kill -TERM \"$$\"' TERM; env WP_HOOK_HOST='antigravity' \"$wp_bin\" hook post-tool <&3 & hook_pid=$!; wait \"$hook_pid\"; hook_status=$?; trap - INT TERM; exec 3<&-; if [ \"$hook_status\" -ne 0 ]; then printf '%s\\n' '{}'; fi; else printf '%s\\n' '{}'; fi # wp-post-tool",
+            "timeout": 5
+          }
+        ]
+      }
+    ],
+    "PreInvocation": [
+      {
+        "type": "command",
+        "command": "wp_bin=; if [ -n \"${WEBPRESSO_WP_BIN:-}\" ]; then if [ -f \"${WEBPRESSO_WP_BIN}\" ] && [ -x \"${WEBPRESSO_WP_BIN}\" ]; then wp_bin=\"${WEBPRESSO_WP_BIN}\"; fi; elif [ -f \"${HOME}/.webpresso/bin/wp\" ] && [ -x \"${HOME}/.webpresso/bin/wp\" ]; then wp_bin=\"${HOME}/.webpresso/bin/wp\"; elif [ -f \"${HOME}/.gemini/config/plugins/wp/bin/wp\" ] && [ -x \"${HOME}/.gemini/config/plugins/wp/bin/wp\" ]; then wp_bin=\"${HOME}/.gemini/config/plugins/wp/bin/wp\"; fi; if [ -n \"$wp_bin\" ]; then hook_pid=''; exec 3<&0; trap 'trap - INT TERM; if [ -n \"$hook_pid\" ]; then kill -INT \"$hook_pid\" 2>/dev/null || true; wait \"$hook_pid\" 2>/dev/null || true; fi; kill -INT \"$$\"' INT; trap 'trap - INT TERM; if [ -n \"$hook_pid\" ]; then kill -TERM \"$hook_pid\" 2>/dev/null || true; wait \"$hook_pid\" 2>/dev/null || true; fi; kill -TERM \"$$\"' TERM; env WP_HOOK_HOST='antigravity' \"$wp_bin\" hook guard-switch <&3 & hook_pid=$!; wait \"$hook_pid\"; hook_status=$?; trap - INT TERM; exec 3<&-; if [ \"$hook_status\" -ne 0 ]; then printf '%s\\n' '{}'; fi; else printf '%s\\n' '{}'; fi # wp-guard-switch",
+        "timeout": 5
+      }
+    ],
+    "Stop": [
+      {
+        "type": "command",
+        "command": "wp_bin=; if [ -n \"${WEBPRESSO_WP_BIN:-}\" ]; then if [ -f \"${WEBPRESSO_WP_BIN}\" ] && [ -x \"${WEBPRESSO_WP_BIN}\" ]; then wp_bin=\"${WEBPRESSO_WP_BIN}\"; fi; elif [ -f \"${HOME}/.webpresso/bin/wp\" ] && [ -x \"${HOME}/.webpresso/bin/wp\" ]; then wp_bin=\"${HOME}/.webpresso/bin/wp\"; elif [ -f \"${HOME}/.gemini/config/plugins/wp/bin/wp\" ] && [ -x \"${HOME}/.gemini/config/plugins/wp/bin/wp\" ]; then wp_bin=\"${HOME}/.gemini/config/plugins/wp/bin/wp\"; fi; if [ -n \"$wp_bin\" ]; then hook_pid=''; exec 3<&0; trap 'trap - INT TERM; if [ -n \"$hook_pid\" ]; then kill -INT \"$hook_pid\" 2>/dev/null || true; wait \"$hook_pid\" 2>/dev/null || true; fi; kill -INT \"$$\"' INT; trap 'trap - INT TERM; if [ -n \"$hook_pid\" ]; then kill -TERM \"$hook_pid\" 2>/dev/null || true; wait \"$hook_pid\" 2>/dev/null || true; fi; kill -TERM \"$$\"' TERM; env WP_HOOK_HOST='antigravity' \"$wp_bin\" hook stop-qa <&3 & hook_pid=$!; wait \"$hook_pid\"; hook_status=$?; trap - INT TERM; exec 3<&-; if [ \"$hook_status\" -ne 0 ]; then printf '%s\\n' '{\"decision\":\"allow\"}'; fi; else printf '%s\\n' '{\"decision\":\"allow\"}'; fi # wp-stop-qa",
+        "timeout": 5
+      },
+      {
+        "type": "command",
+        "command": "wp_bin=; if [ -n \"${WEBPRESSO_WP_BIN:-}\" ]; then if [ -f \"${WEBPRESSO_WP_BIN}\" ] && [ -x \"${WEBPRESSO_WP_BIN}\" ]; then wp_bin=\"${WEBPRESSO_WP_BIN}\"; fi; elif [ -f \"${HOME}/.webpresso/bin/wp\" ] && [ -x \"${HOME}/.webpresso/bin/wp\" ]; then wp_bin=\"${HOME}/.webpresso/bin/wp\"; elif [ -f \"${HOME}/.gemini/config/plugins/wp/bin/wp\" ] && [ -x \"${HOME}/.gemini/config/plugins/wp/bin/wp\" ]; then wp_bin=\"${HOME}/.gemini/config/plugins/wp/bin/wp\"; fi; if [ -n \"$wp_bin\" ]; then hook_pid=''; exec 3<&0; trap 'trap - INT TERM; if [ -n \"$hook_pid\" ]; then kill -INT \"$hook_pid\" 2>/dev/null || true; wait \"$hook_pid\" 2>/dev/null || true; fi; kill -INT \"$$\"' INT; trap 'trap - INT TERM; if [ -n \"$hook_pid\" ]; then kill -TERM \"$hook_pid\" 2>/dev/null || true; wait \"$hook_pid\" 2>/dev/null || true; fi; kill -TERM \"$$\"' TERM; env WP_HOOK_HOST='antigravity' \"$wp_bin\" hook stop-ultragoal <&3 & hook_pid=$!; wait \"$hook_pid\"; hook_status=$?; trap - INT TERM; exec 3<&-; if [ \"$hook_status\" -ne 0 ]; then printf '%s\\n' '{\"decision\":\"allow\"}'; fi; else printf '%s\\n' '{\"decision\":\"allow\"}'; fi # wp-stop-ultragoal",
+        "timeout": 5
+      }
+    ]
+  }
+}

package/mcp_config.json

@@ -0,0 +1,11 @@
+{
+  "mcpServers": {
+    "webpresso": {
+      "command": "wp",
+      "args": ["mcp"],
+      "env": {
+        "WP_SKIP_UPDATE_CHECK": "1"
+      }
+    }
+  }
+}

package/package.json

@@ -1,6 +1,40 @@
 {
   "name": "@webpresso/plugin-antigravity",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.0.17",
+  "private": false,
+  "description": "Antigravity plugin adapter for the Webpresso app (wp CLI) skills, hooks, and MCP runtime.",
+  "homepage": "https://github.com/webpresso/app#readme",
+  "bugs": {
+    "url": "https://github.com/webpresso/app/issues"
+  },
+  "license": "Elastic-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/webpresso/app.git",
+    "directory": "packages/plugin-antigravity"
+  },
+  "files": [
+    "plugin.json",
+    "mcp_config.json",
+    "hooks.json",
+    "bin/wp",
+    "plugin-skill-ownership.json",
+    "skills/**/SKILL.md",
+    "skills/**/references/**",
+    "skills/**/LICENSE*",
+    "LICENSE",
+    "!README.md",
+    "!CHANGELOG.md",
+    "!**/*.test.js",
+    "!**/*.test.ts"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "engines": {
+    "node": ">=24"
+  }
 }

package/plugin-skill-ownership.json

@@ -0,0 +1,105 @@
+{
+  "schemaVersion": 1,
+  "host": "antigravity",
+  "packageName": "@webpresso/plugin-antigravity",
+  "packageVersion": "0.0.17",
+  "runtimeDirs": [],
+  "skills": {
+    "ai-deslop": {
+      "digest": "sha256:cf07df5835037f10401400e220c1c923f5325a6149d59c231ce316e10595fdfc"
+    },
+    "antigravity": {
+      "digest": "sha256:729c4dd74e5c6394c31de23d04f664140088ee58ddfc57f3a2751394945a938b"
+    },
+    "autopilot": {
+      "digest": "sha256:8355f6ddc6e53e68ada49248bdd8d8beb0069ed09d3f2d346debc2401270445c"
+    },
+    "autoresearch": {
+      "digest": "sha256:b4d51cd53beb4a3271827172dfbd0b1d27bd58761ca07a35d49a5d6324b87fdf"
+    },
+    "best-practice-research": {
+      "digest": "sha256:b863ef3969b85e83934911d4ba65f0547c0f586b147597d6a37c41d4b7a762f3"
+    },
+    "browse": {
+      "digest": "sha256:21fd24862e7f7c8a1feadea6bc376492b136b99fc381cf1b8927c9db80615431"
+    },
+    "claude": {
+      "digest": "sha256:63b7afb2b65f65fb142e5ef142f80516be00c54d449c5fa7d7897bcaa6cae657"
+    },
+    "codex": {
+      "digest": "sha256:574669e040141e9986e362e9f46e3176aa47eccfda0f4589205d9d6d65e57b8d"
+    },
+    "deep-interview": {
+      "digest": "sha256:6feeaa35de63a0e1f39dbe2882ca91a72928a058f138d4d79e70d81d09209693"
+    },
+    "deep-research": {
+      "digest": "sha256:ece766cb18869317d7c8992fc562920b03250ff8c44bdcb9eccdc3b21922a83f"
+    },
+    "delivery-program": {
+      "digest": "sha256:a2222cc04fb5366026b951273e4e5d5d8c296d426d51706da8a6b56761a4567f"
+    },
+    "design-review": {
+      "digest": "sha256:5b213735e2842568774572f36b198bccf03c03a54b2732484aadd023f04acb23"
+    },
+    "devex-review": {
+      "digest": "sha256:306355888da0827e3523022077f731845726bbaaf595ca12515cc91d8605b5e6"
+    },
+    "fix": {
+      "digest": "sha256:aa5caa229f0a56290bd6ad4487f41fd2933ac9e9cf4fdf2191f04a559bf66943"
+    },
+    "handoff": {
+      "digest": "sha256:5d40899f54fabe3f6ec8f99b417345a433850585086570872a137a1d0d837002"
+    },
+    "hooks-doctor": {
+      "digest": "sha256:6169e2b4b3638b9b5430811cd44e7952a54685b6f6556ebe81a9aee8ade1a3e0"
+    },
+    "investigate": {
+      "digest": "sha256:b6d82b2dc76297167a8fb75422d1f7037c4b9f0c74186cc4a2d719246764ca7e"
+    },
+    "lore-protocol": {
+      "digest": "sha256:a80fbacc765e8b886437b9fdf7dd71e1ceb1b98b939078ec90fc88d06a8b4c69"
+    },
+    "opencode-go": {
+      "digest": "sha256:9498e4f9d9c1b8ee2355d9ca57c65eaf2a3a9dbc2ba11ef0c4b0428769949f05"
+    },
+    "plan-ceo-review": {
+      "digest": "sha256:4d426158518dd71f8998770e8d4037bcbfa3c65d7265a93a4a78a9b015ba881e"
+    },
+    "plan-design-review": {
+      "digest": "sha256:a8a33efe67844d0602ff595c0b7e8f5529e52f51a781112952636c91963ce19e"
+    },
+    "plan-devex-review": {
+      "digest": "sha256:a49b4f61f1c54a7d89111c270616684dcbf2a7236bc817fafb5919366a7cda31"
+    },
+    "plan-eng-review": {
+      "digest": "sha256:b728dad90254d4c9f81b3818321d34ab53519b79ce20ff3bfe08bfacb2aa3e86"
+    },
+    "plan-refine": {
+      "digest": "sha256:8a0e38564627565d267b347a0361eb222b9ba230961998c2d6812874ea7cf608"
+    },
+    "ralplan": {
+      "digest": "sha256:95d02771d3e3a46d225b1bf9dd12a33e83c9e0dbe2c126aad24986c4cb1d98a3"
+    },
+    "team": {
+      "digest": "sha256:e403a5a92d145e777d7a344fe8fc6fe5df44640691aa2319b6dfd50b909166f5"
+    },
+    "tech-debt": {
+      "digest": "sha256:fd2f8e26e006c9c5ed5ef6f1678c3f7472a35dfd2f743e58f7ec348606399353"
+    },
+    "testing-philosophy": {
+      "digest": "sha256:23fdad944b089de3cfcd13957a5ac10c37bd3d136b192029af69368bca1470db"
+    },
+    "tooling-friction": {
+      "digest": "sha256:6f94949b6910d88ff974a95f4cd67bbaca05579db88fbeacc50126a13faf800b"
+    },
+    "tph": {
+      "digest": "sha256:bed3684a850651534f315d355cdeae50d951c429817df0f105cccdb7f4e1561b"
+    },
+    "ultragoal": {
+      "digest": "sha256:e60091f795311fd4ee8779b60b04f835522163fcca5d27122740b66f66afeceb"
+    },
+    "verify": {
+      "digest": "sha256:e1aa3baed96ef005b144e17fac8a2153b90a075b142acee2fdfba7c89e613765"
+    }
+  }
+}

package/plugin.json

@@ -0,0 +1,11 @@
+{
+  "name": "wp",
+  "description": "Webpresso app: blueprints, skills, lore commit protocol, tech-debt lifecycle",
+  "version": "0.0.17",
+  "author": {
+    "name": "Webpresso",
+    "url": "https://github.com/webpresso"
+  },
+  "homepage": "https://github.com/webpresso/app#readme",
+  "repository": "https://github.com/webpresso/app"
+}