agentlinkops 0.6.11 → 0.6.16

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agentlinkops",
-  "version": "0.6.11",
-  "description": "Connect an agent to AgentLinkOps and run backlink work with it: the connect skill (views, the three discovery verbs, evidence rules), local ledger and campaign skills, a portable CRM, the source-cited content pipeline, user-managed disavow lists, HTML reports and monitoring-event sync.",
+  "version": "0.6.16",
+  "description": "Five product skills for AgentLinkOps connection, backlink discovery, campaign preparation, local CRM records and focused linkable assets. Use the customer's own research and sender tools. Optional content and SEO are outside this pack; their separate artifacts await source, rights and dependency qualification.",
   "author": {
     "name": "AgentLinkOps"
   },

package/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agentlinkops",
-  "version": "0.6.11",
-  "description": "Connect an agent to AgentLinkOps and run backlink work with it: the connect skill (views, the three discovery verbs, evidence rules), local ledger and campaign skills, a portable CRM, the source-cited content pipeline, user-managed disavow lists, HTML reports and monitoring-event sync.",
+  "version": "0.6.16",
+  "description": "Five product skills for AgentLinkOps connection, backlink discovery, campaign preparation, local CRM records and focused linkable assets. Use the customer's own research and sender tools. Optional content and SEO are outside this pack; their separate artifacts await source, rights and dependency qualification.",
   "author": {
     "name": "AgentLinkOps"
   },

package/CHANGELOG.md

@@ -3,6 +3,41 @@
 All notable changes to the `agentlinkops` package are recorded here. The version follows the
 plugin manifests in `.claude-plugin/` and `.codex-plugin/`.
 
+## 0.6.16 (unreleased)
+
+- First npm release since 0.6.13. It carries the source changes recorded below for 0.6.14 and 0.6.15, including the refusal of an activity state written by a newer CLI.
+- The agent reference separates hosted command discovery from installed local CLI features. Refreshing the catalog does not install a newer CLI; an upgrade must use a version available through the customer's chosen channel.
+- The campaigns skill no longer points to AI citation panels. AI citation measurement is not part of the AgentLinkOps offer. The local `agentlinkops citation` commands stay for existing panels. The README keeps a short note about them, and the package keywords drop the citation terms.
+- Update the MCP client and server SDKs to 2.3.1, undici to 7.30.1 and zod to 4.6.7. The production dependency audit of the 0.6.16 candidate flagged the earlier versions for published security advisories.
+- The default plugin and npm build contain exactly five product skills: connect, discovery, campaigns, CRM and assets. Individual archives include required references and Python resources. The separate optional content target remains held on source-rights and dependency qualification; older optional artifacts and customer selections are preserved.
+- CLI setup keeps its connection-only default and additive selections. Selecting a separate optional pack does not configure MCP or require the connection skill.
+- The recipe catalog (1.0.11) adds the planned internal-link improvement workflow with explicit evidence, permissions, effects and recovery. The campaign preparation reference adds ranked ideas and version-bound review, and separates prospect saving from verification and monitoring. These source changes retain their unrun qualification gates.
+
+## 0.6.15 (2026-10-19, source only; not published to npm)
+
+- List 152 hosted customer commands in 13 toolsets while webhook delivery is off. Keep operator commands out of customer discovery. Hosted citation and AI classification automation commands remain callable by known name for compatibility, with existing access checks.
+- Keep manual link types, tags, placement metadata and history available. The free local citation panel and its CLI workflows remain listed.
+- Use the same 0.6.15 identity for the CLI, plugin and generated agent reference. npm's previous published version was 0.6.13; 0.6.14 was already used in public source and agent references but was never published to npm.
+
+## 0.6.14 (source only; not published to npm)
+
+- Connect the CLI without environment variables or IDs. `agentlinkops connect` asks for an API key from the Agent page, checks it, and saves it outside the repository: in the macOS Keychain, or in a mode 600 file under `~/.agentlinkops/keys` on Linux. The key names its workspace. With a ledger in the folder, `connect` maps the ledger to the workspace's only website, or prints one command per website to choose from.
+- Send cloud commands to `https://app.agentlinkops.com` when no origin is configured. Without a key, `call` now says to run `connect` instead of failing with `NO_CLOUD_ORIGIN`.
+- End `agent setup` with the sign-in and approval steps for each client. On a terminal it also offers to connect the CLI; pressing Enter skips it.
+- Refuse an activity state written by a newer CLI (`state.json` format above 3) with `UNSUPPORTED_STATE_VERSION` before loading, reducing or writing it. The original state and history stay unchanged.
+
+## 0.6.13 (2026-10-10)
+
+- Show the latest attempt, conclusive source check and link verification separately in status, fleet and reports. Unknown checks retain the previous link verification for the same placement.
+- Add `chronology pull` for saved placement history on compatible hosted versions and `chronology export` for frozen local pages. Exports retain denied origins, history gaps and partial paging.
+- Preserve existing frozen version-two reports and reject exports that would replace an input or existing file.
+
+## 0.6.12 (2026-10-07, source only; not published to npm)
+
+- Check every watch import result before updating sync mappings or reporting progress. Reject incomplete, duplicate or out-of-range results without resending the request.
+- Show inspection and read-only cursor recovery steps after a sync timeout or lost connection. Keep the project ledger and history while the write outcome is unknown.
+- Test multi-batch imports and uncertain responses in the assembled CLI package.
+
 ## 0.6.11 (2026-10-06)
 
 - Keep `check --json` stdout limited to observation rows. Send empty-ledger, not-due and filter notices to stderr.

package/PACK-ARTIFACT.json

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": 1,
+  "pack": "product",
+  "skills": [
+    "agentlinkops-connect",
+    "agentlinkops-discovery",
+    "agentlinkops-campaigns",
+    "agentlinkops-crm",
+    "agentlinkops-assets"
+  ],
+  "defaultCliSkills": [
+    "agentlinkops-connect"
+  ],
+  "mcp": true,
+  "contractSha256": "e3d29a169dd1ecae2db26b22ab666419c4057e84831653df655f04ae61725e93"
+}

package/PACKS.json

@@ -0,0 +1,591 @@
+{
+  "schemaVersion": 1,
+  "defaultPack": "product",
+  "packs": {
+    "product": {
+      "artifactName": "agentlinkops",
+      "skills": [
+        "agentlinkops-connect",
+        "agentlinkops-discovery",
+        "agentlinkops-campaigns",
+        "agentlinkops-crm",
+        "agentlinkops-assets"
+      ],
+      "selection": "default-plugin",
+      "sourcePolicy": "maintained-product-source",
+      "defaultCliSkills": [
+        "agentlinkops-connect"
+      ],
+      "mcp": true,
+      "indexPath": ".well-known/agent-skills/index.json",
+      "archiveIndex": "index.json"
+    },
+    "content": {
+      "artifactName": "agentlinkops-content",
+      "skills": [
+        "source-cited-content-builder",
+        "source-cited-humanizer",
+        "content-defingerprinting",
+        "internal-linking-optimizer",
+        "pre-publish-review"
+      ],
+      "selection": "explicit-only",
+      "sourcePolicy": "held",
+      "holdReasons": [
+        "Existing optional source provenance/rights gaps remain open.",
+        "Required portable content-quality dependencies are not yet qualified."
+      ],
+      "defaultCliSkills": [],
+      "mcp": false,
+      "indexPath": "content/.well-known/agent-skills/index.json",
+      "archiveIndex": "content/index.json"
+    },
+    "seo": {
+      "artifactName": null,
+      "skills": [],
+      "selection": "unselected",
+      "sourcePolicy": "held",
+      "holdReasons": [
+        "No curated source selection with reviewed rights and dependencies is adopted."
+      ],
+      "defaultCliSkills": [],
+      "mcp": false
+    }
+  },
+  "dependencies": {
+    "agentlinkops-connect": {
+      "requiredBundled": [],
+      "optionalSelected": [
+        {
+          "kind": "optional-selected",
+          "from": "skills/agentlinkops-connect/SKILL.md",
+          "target": "references/recipes/",
+          "selection": "agentlinkops agent setup --recipe"
+        }
+      ],
+      "externalRuntime": [
+        {
+          "kind": "external-runtime",
+          "id": "agentlinkops-cli",
+          "commands": [
+            "agentlinkops",
+            "linktrail",
+            "node cli/agentlinkops.mjs"
+          ],
+          "availability": "Install separately for a standalone skill; inspect the installed version and help before using a local command. Hosted discovery does not install local CLI features."
+        },
+        {
+          "kind": "external-runtime",
+          "id": "agentlinkops-hosted-mcp",
+          "availability": "Hosted commands require separately connected customer access and current catalog exposure. Installing a skill alone does not establish access."
+        }
+      ],
+      "privateExcluded": [
+        "private Fleet/account files",
+        "customer records and credentials",
+        "unselected or uncleared publisher material"
+      ],
+      "requiredOwn": [
+        "SKILL.md",
+        "agents/openai.yaml",
+        "references/agentlinkops.md",
+        "references/placement-workflows.md"
+      ]
+    },
+    "agentlinkops-discovery": {
+      "requiredBundled": [
+        "references/cli.md",
+        "references/disavow.md",
+        "references/reports.md",
+        "scripts/agentlinkops.py",
+        "scripts/disavow.py",
+        "scripts/report.py",
+        "scripts/migrations/001_crm.sql",
+        "scripts/migrations/002_cloud_events.sql",
+        "scripts/migrations/003_disavow.sql",
+        "scripts/migrations/004_placement_costs.sql",
+        "templates/campaigns.v1.json",
+        "references/discovery-handoff.md"
+      ],
+      "optionalSelected": [
+        {
+          "kind": "optional-selected",
+          "from": "references/discovery-handoff.md",
+          "target": "skills/agentlinkops-campaigns/SKILL.md",
+          "selection": "agentlinkops agent setup --skill agentlinkops-campaigns"
+        }
+      ],
+      "externalRuntime": [
+        {
+          "kind": "external-runtime",
+          "id": "agentlinkops-cli",
+          "commands": [
+            "agentlinkops",
+            "linktrail",
+            "node cli/agentlinkops.mjs"
+          ],
+          "availability": "Install separately for a standalone skill; inspect the installed version and help before using a local command. Hosted discovery does not install local CLI features."
+        },
+        {
+          "kind": "external-runtime",
+          "id": "python-standard-library",
+          "minimumVersion": "3.10",
+          "imports": [
+            "argparse",
+            "contextlib",
+            "csv",
+            "datetime",
+            "decimal",
+            "errno",
+            "fcntl",
+            "hashlib",
+            "html",
+            "importlib",
+            "io",
+            "ipaddress",
+            "json",
+            "os",
+            "pathlib",
+            "re",
+            "sqlite3",
+            "stat",
+            "sys",
+            "tempfile",
+            "time",
+            "urllib"
+          ]
+        },
+        {
+          "kind": "external-runtime",
+          "id": "customer-search-browser",
+          "availability": "Use supplied files when a search or browser tool is unavailable; a graph download or paid provider is not required."
+        },
+        {
+          "kind": "external-runtime",
+          "id": "agentlinkops-hosted-mcp",
+          "availability": "Hosted commands require separately connected customer access and current catalog exposure. Installing a skill alone does not establish access."
+        }
+      ],
+      "privateExcluded": [
+        "private Fleet/account files",
+        "customer records and credentials",
+        "unselected or uncleared publisher material"
+      ],
+      "resourceBindings": [
+        {
+          "from": "scripts/agentlinkops.py",
+          "expression": "(ROOT.parent / \"templates\" / \"campaigns.v1.json\")",
+          "target": "templates/campaigns.v1.json"
+        },
+        {
+          "from": "scripts/agentlinkops.py",
+          "expression": "(ROOT / \"migrations\").glob(\"[0-9][0-9][0-9]_*.sql\")",
+          "target": "scripts/migrations/001_crm.sql"
+        }
+      ],
+      "resourceDirectories": [
+        "scripts/migrations"
+      ],
+      "requiredOwn": [
+        "SKILL.md",
+        "references/saved-backlink-workflows.md"
+      ]
+    },
+    "agentlinkops-campaigns": {
+      "requiredBundled": [
+        "references/cli.md",
+        "references/disavow.md",
+        "references/reports.md",
+        "scripts/agentlinkops.py",
+        "scripts/disavow.py",
+        "scripts/report.py",
+        "scripts/migrations/001_crm.sql",
+        "scripts/migrations/002_cloud_events.sql",
+        "scripts/migrations/003_disavow.sql",
+        "scripts/migrations/004_placement_costs.sql",
+        "templates/campaigns.v1.json"
+      ],
+      "optionalSelected": [
+        {
+          "kind": "optional-selected",
+          "from": "skills/agentlinkops-campaigns/SKILL.md",
+          "target": "skills/agentlinkops-discovery/SKILL.md",
+          "selection": "agentlinkops agent setup --skill agentlinkops-discovery"
+        },
+        {
+          "kind": "optional-selected",
+          "from": "skills/agentlinkops-campaigns/SKILL.md",
+          "target": "references/recipes/qualified-campaign-handoff.md",
+          "selection": "agentlinkops agent setup --recipe qualified-campaign-handoff"
+        }
+      ],
+      "externalRuntime": [
+        {
+          "kind": "external-runtime",
+          "id": "agentlinkops-cli",
+          "commands": [
+            "agentlinkops",
+            "linktrail",
+            "node cli/agentlinkops.mjs"
+          ],
+          "availability": "Install separately for a standalone skill; inspect the installed version and help before using a local command. Hosted discovery does not install local CLI features."
+        },
+        {
+          "kind": "external-runtime",
+          "id": "python-standard-library",
+          "minimumVersion": "3.10",
+          "imports": [
+            "argparse",
+            "contextlib",
+            "csv",
+            "datetime",
+            "decimal",
+            "errno",
+            "fcntl",
+            "hashlib",
+            "html",
+            "importlib",
+            "io",
+            "ipaddress",
+            "json",
+            "os",
+            "pathlib",
+            "re",
+            "sqlite3",
+            "stat",
+            "sys",
+            "tempfile",
+            "time",
+            "urllib"
+          ]
+        },
+        {
+          "kind": "external-runtime",
+          "id": "customer-search-browser-sender",
+          "availability": "Discover the customer-selected tools and permissions. Supplied candidates and draft files remain usable without hosted access or a sender."
+        },
+        {
+          "kind": "external-runtime",
+          "id": "agentlinkops-hosted-mcp",
+          "availability": "Hosted commands require separately connected customer access and current catalog exposure. Installing a skill alone does not establish access."
+        }
+      ],
+      "privateExcluded": [
+        "private Fleet/account files",
+        "customer records and credentials",
+        "unselected or uncleared publisher material"
+      ],
+      "resourceBindings": [
+        {
+          "from": "scripts/agentlinkops.py",
+          "expression": "(ROOT.parent / \"templates\" / \"campaigns.v1.json\")",
+          "target": "templates/campaigns.v1.json"
+        },
+        {
+          "from": "scripts/agentlinkops.py",
+          "expression": "(ROOT / \"migrations\").glob(\"[0-9][0-9][0-9]_*.sql\")",
+          "target": "scripts/migrations/001_crm.sql"
+        }
+      ],
+      "resourceDirectories": [
+        "scripts/migrations"
+      ],
+      "requiredOwn": [
+        "SKILL.md",
+        "agents/openai.yaml",
+        "references/first-campaign.md",
+        "references/mailbox-campaign.md"
+      ]
+    },
+    "agentlinkops-crm": {
+      "requiredBundled": [
+        "references/cli.md",
+        "references/disavow.md",
+        "references/reports.md",
+        "scripts/agentlinkops.py",
+        "scripts/disavow.py",
+        "scripts/report.py",
+        "scripts/migrations/001_crm.sql",
+        "scripts/migrations/002_cloud_events.sql",
+        "scripts/migrations/003_disavow.sql",
+        "scripts/migrations/004_placement_costs.sql",
+        "templates/campaigns.v1.json",
+        "references/portable-ledger-handoff.md",
+        "references/local-crm-draft-handoff.md",
+        "scripts/portable-handoff.py",
+        "scripts/outreach-crm-draft.py"
+      ],
+      "optionalSelected": [
+        {
+          "kind": "optional-selected",
+          "from": "skills/agentlinkops-crm/SKILL.md",
+          "target": "references/recipes/placement-reconciliation.md",
+          "selection": "agentlinkops agent setup --recipe placement-reconciliation"
+        },
+        {
+          "kind": "optional-selected",
+          "from": "references/portable-ledger-handoff.md",
+          "target": "references/recipes/qualified-campaign-handoff.md",
+          "selection": "agentlinkops agent setup --recipe qualified-campaign-handoff"
+        },
+        {
+          "kind": "optional-selected",
+          "from": "references/portable-ledger-handoff.md",
+          "target": "references/recipes/placement-reconciliation.md",
+          "selection": "agentlinkops agent setup --recipe placement-reconciliation"
+        }
+      ],
+      "externalRuntime": [
+        {
+          "kind": "external-runtime",
+          "id": "agentlinkops-cli",
+          "commands": [
+            "agentlinkops",
+            "linktrail",
+            "node cli/agentlinkops.mjs"
+          ],
+          "availability": "Install separately for a standalone skill; inspect the installed version and help before using a local command. Hosted discovery does not install local CLI features."
+        },
+        {
+          "kind": "external-runtime",
+          "id": "python-standard-library",
+          "minimumVersion": "3.10",
+          "imports": [
+            "argparse",
+            "contextlib",
+            "csv",
+            "datetime",
+            "decimal",
+            "errno",
+            "fcntl",
+            "hashlib",
+            "html",
+            "importlib",
+            "io",
+            "ipaddress",
+            "json",
+            "os",
+            "pathlib",
+            "re",
+            "sqlite3",
+            "stat",
+            "sys",
+            "tempfile",
+            "time",
+            "urllib"
+          ]
+        },
+        {
+          "kind": "external-runtime",
+          "id": "agentlinkops-hosted-mcp",
+          "availability": "Hosted commands require separately connected customer access and current catalog exposure. Installing a skill alone does not establish access."
+        }
+      ],
+      "privateExcluded": [
+        "private Fleet/account files",
+        "customer records and credentials",
+        "unselected or uncleared publisher material"
+      ],
+      "resourceBindings": [
+        {
+          "from": "scripts/agentlinkops.py",
+          "expression": "(ROOT.parent / \"templates\" / \"campaigns.v1.json\")",
+          "target": "templates/campaigns.v1.json"
+        },
+        {
+          "from": "scripts/agentlinkops.py",
+          "expression": "(ROOT / \"migrations\").glob(\"[0-9][0-9][0-9]_*.sql\")",
+          "target": "scripts/migrations/001_crm.sql"
+        }
+      ],
+      "resourceDirectories": [
+        "scripts/migrations"
+      ],
+      "requiredOwn": [
+        "SKILL.md",
+        "agents/openai.yaml"
+      ],
+      "pythonDynamicFiles": [
+        {
+          "from": "scripts/outreach-crm-draft.py",
+          "expression": "importlib.util.spec_from_file_location('portable_handoff', Path(__file__).with_name('portable-handoff.py'))",
+          "target": "scripts/portable-handoff.py"
+        }
+      ]
+    },
+    "agentlinkops-assets": {
+      "requiredBundled": [
+        "references/cli.md",
+        "references/disavow.md",
+        "references/reports.md",
+        "scripts/agentlinkops.py",
+        "scripts/disavow.py",
+        "scripts/report.py",
+        "scripts/migrations/001_crm.sql",
+        "scripts/migrations/002_cloud_events.sql",
+        "scripts/migrations/003_disavow.sql",
+        "scripts/migrations/004_placement_costs.sql",
+        "templates/campaigns.v1.json"
+      ],
+      "optionalSelected": [
+        {
+          "kind": "optional-selected",
+          "from": "skills/agentlinkops-assets/SKILL.md",
+          "target": "references/recipes/sourced-linkable-asset.md",
+          "selection": "agentlinkops agent setup --recipe sourced-linkable-asset"
+        },
+        {
+          "kind": "optional-selected",
+          "from": "skills/agentlinkops-assets/SKILL.md",
+          "target": "references/recipes/internal-link-improvement.md",
+          "selection": "agentlinkops agent setup --recipe internal-link-improvement"
+        }
+      ],
+      "externalRuntime": [
+        {
+          "kind": "external-runtime",
+          "id": "agentlinkops-cli",
+          "commands": [
+            "agentlinkops",
+            "linktrail",
+            "node cli/agentlinkops.mjs"
+          ],
+          "availability": "Install separately for a standalone skill; inspect the installed version and help before using a local command. Hosted discovery does not install local CLI features."
+        },
+        {
+          "kind": "external-runtime",
+          "id": "python-standard-library",
+          "minimumVersion": "3.10",
+          "imports": [
+            "argparse",
+            "contextlib",
+            "csv",
+            "datetime",
+            "decimal",
+            "errno",
+            "fcntl",
+            "hashlib",
+            "html",
+            "importlib",
+            "io",
+            "ipaddress",
+            "json",
+            "os",
+            "pathlib",
+            "re",
+            "sqlite3",
+            "stat",
+            "sys",
+            "tempfile",
+            "time",
+            "urllib"
+          ]
+        },
+        {
+          "kind": "external-runtime",
+          "id": "agentlinkops-hosted-mcp",
+          "availability": "Hosted commands require separately connected customer access and current catalog exposure. Installing a skill alone does not establish access."
+        }
+      ],
+      "privateExcluded": [
+        "private Fleet/account files",
+        "customer records and credentials",
+        "unselected or uncleared publisher material"
+      ],
+      "resourceBindings": [
+        {
+          "from": "scripts/agentlinkops.py",
+          "expression": "(ROOT.parent / \"templates\" / \"campaigns.v1.json\")",
+          "target": "templates/campaigns.v1.json"
+        },
+        {
+          "from": "scripts/agentlinkops.py",
+          "expression": "(ROOT / \"migrations\").glob(\"[0-9][0-9][0-9]_*.sql\")",
+          "target": "scripts/migrations/001_crm.sql"
+        }
+      ],
+      "resourceDirectories": [
+        "scripts/migrations"
+      ],
+      "requiredOwn": [
+        "SKILL.md",
+        "agents/openai.yaml"
+      ]
+    },
+    "source-cited-content-builder": {
+      "requiredBundled": [],
+      "optionalSelected": [],
+      "externalRuntime": [],
+      "privateExcluded": [
+        "private Fleet/account files",
+        "site-specific private policy/runtime files"
+      ],
+      "unresolved": [
+        "Existing source provenance and required content-quality dependencies remain unqualified; DP-0073-T03/T08 retain this work."
+      ],
+      "requiredOwn": [
+        "SKILL.md"
+      ]
+    },
+    "source-cited-humanizer": {
+      "requiredBundled": [],
+      "optionalSelected": [],
+      "externalRuntime": [],
+      "privateExcluded": [
+        "private Fleet/account files",
+        "site-specific private policy/runtime files"
+      ],
+      "unresolved": [
+        "Existing source provenance and required content-quality dependencies remain unqualified; DP-0073-T03/T08 retain this work."
+      ],
+      "requiredOwn": [
+        "SKILL.md"
+      ]
+    },
+    "content-defingerprinting": {
+      "requiredBundled": [],
+      "optionalSelected": [],
+      "externalRuntime": [],
+      "privateExcluded": [
+        "private Fleet/account files",
+        "site-specific private policy/runtime files"
+      ],
+      "unresolved": [
+        "Existing source provenance and required content-quality dependencies remain unqualified; DP-0073-T03/T08 retain this work."
+      ],
+      "requiredOwn": [
+        "SKILL.md"
+      ]
+    },
+    "internal-linking-optimizer": {
+      "requiredBundled": [],
+      "optionalSelected": [],
+      "externalRuntime": [],
+      "privateExcluded": [
+        "private Fleet/account files",
+        "site-specific private policy/runtime files"
+      ],
+      "unresolved": [
+        "Existing source provenance and required content-quality dependencies remain unqualified; DP-0073-T03/T08 retain this work."
+      ],
+      "requiredOwn": [
+        "SKILL.md"
+      ]
+    },
+    "pre-publish-review": {
+      "requiredBundled": [],
+      "optionalSelected": [],
+      "externalRuntime": [],
+      "privateExcluded": [
+        "private Fleet/account files",
+        "site-specific private policy/runtime files"
+      ],
+      "unresolved": [
+        "Existing source provenance and required content-quality dependencies remain unqualified; DP-0073-T03/T08 retain this work."
+      ],
+      "requiredOwn": [
+        "SKILL.md"
+      ]
+    }
+  }
+}