motionspec 1.0.2 → 1.0.3

package/README.md

@@ -20,8 +20,9 @@ request ──> Routing (small model, Stage A) ──> MotionSpec (JSON)
 
 | | |
 |---|---|
-| Version | **v1.0.0** · schema frozen at spec v1 (ADR-0001, signed) |
-| Tests | **151** green · CI on Node 18/20/22 |
+| Version | **v1.0.3** · schema frozen at spec v1 (ADR-0001, signed) |
+| Published | **npm `motionspec`** · MCP Registry `io.github.MasterPlayspots/motionspec` |
+| Tests | **155** green · CI on Node 18/20/22 |
 | Catalog | **8** primitives, all device-verified |
 | Dependencies | **0 vulnerabilities** · SBOM committed · all permissive licenses |
 | Coverage | **98.4% lines / 95.9% functions** of `src/` + `worker/` (CI gate fails under 90%) |
@@ -31,7 +32,22 @@ request ──> Routing (small model, Stage A) ──> MotionSpec (JSON)
 
 Schema v1 is frozen: `specVersion "1.0"` is the stable public contract; `"0.1"` is deprecated and accepted until v1.2. The `[MS-XXX]` error-code registry is public API. Phase B (test & security) is closed — CI is green on the x86 runner incl. Playwright `e2e` for every primitive (all jobs pass on every push to `main` — see the repo Actions tab; the x86 runner is the source of truth). **Phase C (observability + hosted MCP) is live and gate-proven**: the MCP server runs as a private, secret-gated Cloudflare Worker; a per-minute cron canary runs `validate→compile` and pings an external heartbeat, so a failure alerts by email within 5 minutes (verified on real infra). A gated `/dashboard` renders live telemetry.
 
-## Quickstart
+## Install
+
+```bash
+npm install -g motionspec        # CLI: `motion compile spec.json` writes ./out in your cwd
+npx motionspec                   # start the stdio MCP server (no global install needed)
+```
+
+Use it as an MCP server in any MCP-capable agent (Claude Code, Cowork, Cursor, …) — the host LLM authors the spec, the Trust Boundary stays enforced:
+
+```bash
+claude mcp add motionspec -- npx motionspec
+```
+
+Listed on the MCP Registry as `io.github.MasterPlayspots/motionspec`.
+
+## Quickstart (from a clone of the repo)
 
 ```bash
 npm ci                                      # install (0 runtime deps beyond MCP SDK + zod)
@@ -59,10 +75,12 @@ npm run e2e               # real-browser Playwright (CI x86 only — the sandbox
 Any MCP-capable agent (Claude Code, Cowork, Cursor, …) can use MotionSpec directly — the host LLM is the spec author, the Trust Boundary stays enforced:
 
 ```bash
-npm run mcp                                  # start stdio server
-claude mcp add motionspec -- node <repo>/src/mcp/server.mjs
+npx motionspec                               # start stdio server from the published package
+claude mcp add motionspec -- npx motionspec  # register in a host agent
 ```
 
+From a clone of the repo, `npm run mcp` runs the same server. Listed on the MCP Registry as `io.github.MasterPlayspots/motionspec`.
+
 Tools: `motion_catalog` (primitives + authoring rules) · `motion_validate` (fail-closed, surfaces deprecations) · `motion_compile` (deterministic) · `motion_stats`. Input is size-capped (`MS-INPUT-TOO-LARGE`, 64 KB). Tested in `test/mcp.test.mjs`.
 
 ## Guarantees

package/bin/motion.js

@@ -20,8 +20,10 @@ const { route } = require("../src/router/route.js");
 const { mockClient, openAICompatClient } = require("../src/router/clients.js");
 const telemetry = require("../src/router/telemetry.js");
 
-const ROOT = path.join(__dirname, "..");
-const OUT = path.join(ROOT, "out");
+/* Ausgabe relativ zum Arbeitsverzeichnis des Nutzers, NICHT zum Paket-Pfad.
+ * Sonst schreibt der installierte Bin in node_modules/motionspec/out (beim
+ * globalen Install droht EACCES) und der Nutzer findet seine Artefakte nicht. */
+const OUT = path.join(process.cwd(), "out");
 
 function writeOut(name, result) {
   if (!fs.existsSync(OUT)) fs.mkdirSync(OUT, { recursive: true });
@@ -72,7 +74,7 @@ async function main() {
     if (!fs.existsSync(OUT)) fs.mkdirSync(OUT, { recursive: true });
     const md = path.join(OUT, "gap-report-" + (r.project || "discovery") + ".md");
     fs.writeFileSync(md, toMarkdown(r));
-    console.log("\n  Discovery: " + r.covered.length + "/" + r.total + " abgedeckt, " + r.gaps.length + " Luecke(n)  ->  " + path.relative(ROOT, md) + "\n");
+    console.log("\n  Discovery: " + r.covered.length + "/" + r.total + " abgedeckt, " + r.gaps.length + " Luecke(n)  ->  " + path.relative(process.cwd(), md) + "\n");
     return;
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "motionspec",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "mcpName": "io.github.MasterPlayspots/motionspec",
   "description": "MotionSpec — a formal intermediate language for scroll-driven web motion. A small model writes schema-validated specs; a deterministic compiler emits GSAP/CSS, hallucination-proof by construction with enforced reduced-motion fallbacks.",
   "license": "MIT",
@@ -38,7 +38,7 @@
     "catalog.lock.json"
   ],
   "scripts": {
-    "test": "node --test test/validate.test.js test/compile.test.js test/specversion-v1.test.js test/route.test.js test/route-live.test.js test/catalog-wave1.test.js test/catalog-semver.test.js test/schema-parity.test.js test/catalog-pin.test.js test/css-safety.test.js test/fuzz.test.js test/hardening.test.js test/cache.test.js test/errorcodes.test.js test/catalog-integrity.test.js test/discover.test.js test/telemetry-sink.test.js test/worker-contract.test.mjs test/analytics-engine-sink.test.mjs test/canary.test.mjs test/dashboard.test.mjs test/mcp.test.mjs",
+    "test": "node --test test/validate.test.js test/compile.test.js test/specversion-v1.test.js test/route.test.js test/route-live.test.js test/catalog-wave1.test.js test/catalog-semver.test.js test/schema-parity.test.js test/catalog-pin.test.js test/css-safety.test.js test/fuzz.test.js test/hardening.test.js test/cache.test.js test/errorcodes.test.js test/catalog-integrity.test.js test/discover.test.js test/telemetry-sink.test.js test/worker-contract.test.mjs test/analytics-engine-sink.test.mjs test/canary.test.mjs test/dashboard.test.mjs test/mcp.test.mjs test/cli-output.test.mjs",
     "coverage": "node --test --experimental-test-coverage --test-coverage-exclude=test/** --test-coverage-exclude=bin/** --test-coverage-lines=90 --test-coverage-functions=90 --test-coverage-branches=75 test/*.test.js test/*.test.mjs",
     "e2e": "playwright test",
     "sbom": "npm sbom --sbom-format cyclonedx --omit dev > sbom.cdx.json",