npm - shadow-claw - Versions diffs - 1.27.0 → 1.28.0 - Mend

shadow-claw 1.27.0 → 1.28.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (240) hide show

package/.well-known/ai-catalog.json ADDED Viewed

@@ -0,0 +1,11 @@
+{
+  "$schema": "https://agent-card.github.io/schemas/ai-catalog/v1.json",
+  "version": "1.0",
+  "name": "ShadowClaw AI Catalog",
+  "servers": [
+    {
+      "name": "shadow-claw",
+      "card": "https://xt-ml.github.io/shadow-claw/.well-known/mcp.json"
+    }
+  ]
+}

package/.well-known/mcp/index.html ADDED Viewed

@@ -0,0 +1,19 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <title>ShadowClaw MCP Server Discovery</title>
+  <meta name="description" content="ShadowClaw MCP Server Card and Discovery metadata">
+  <link rel="alternate" type="application/json" href="../mcp.json" title="MCP Server Card">
+</head>
+<body>
+  <h1>ShadowClaw MCP Server Discovery</h1>
+  <p>Model Context Protocol (MCP) server endpoints and discovery metadata for ShadowClaw.</p>
+  <ul>
+    <li><a href="../mcp.json">MCP Server Card (SEP-2127)</a></li>
+    <li><a href="../ai-catalog.json">AI Catalog Discovery</a></li>
+    <li><a href="servers.json">Servers Manifest (Discussion #1147)</a></li>
+    <li><a href="../oauth-protected-resource">OAuth Protected Resource Metadata (RFC 9728)</a></li>
+  </ul>
+</body>
+</html>

package/.well-known/mcp/server-card.json ADDED Viewed

@@ -0,0 +1,52 @@
+{
+  "$schema": "https://modelcontextprotocol.io/schemas/server-card/v1.json",
+  "name": "shadow-claw",
+  "version": "1.28.0",
+  "description": "Browser-native personal AI assistant with local and remote LLM orchestration, Web Workers, OPFS storage, and agentic tool execution.",
+  "title": "ShadowClaw MCP Server",
+  "websiteUrl": "https://xt-ml.github.io/shadow-claw/",
+  "repository": {
+    "url": "https://github.com/xt-ml/shadow-claw",
+    "source": "github"
+  },
+  "icons": [
+    {
+      "src": "https://xt-ml.github.io/shadow-claw/assets/icons/favicon.svg",
+      "mimeType": "image/svg+xml",
+      "sizes": [
+        "any"
+      ]
+    },
+    {
+      "src": "https://xt-ml.github.io/shadow-claw/assets/icons/512.png",
+      "mimeType": "image/png",
+      "sizes": [
+        "512x512"
+      ]
+    }
+  ],
+  "remotes": [
+    {
+      "type": "streamable-http",
+      "url": "http://localhost:8888/mcp",
+      "supportedProtocolVersions": [
+        "2026-07-28",
+        "2025-11-25",
+        "2024-11-05"
+      ],
+      "headers": [
+        {
+          "name": "MCP-Protocol-Version",
+          "default": "2026-07-28",
+          "isRequired": false
+        },
+        {
+          "name": "x-control-token",
+          "description": "Control plane token for authorized client access",
+          "isSecret": true,
+          "isRequired": false
+        }
+      ]
+    }
+  ]
+}

package/.well-known/mcp/servers.json ADDED Viewed

@@ -0,0 +1,15 @@
+{
+  "version": "1.0",
+  "servers": [
+    {
+      "name": "shadow-claw",
+      "description": "ShadowClaw Browser-Native AI Assistant MCP Server",
+      "endpoint": "http://localhost:8888/mcp",
+      "capabilities": [
+        "tools",
+        "extensions"
+      ],
+      "card": "https://xt-ml.github.io/shadow-claw/.well-known/mcp.json"
+    }
+  ]
+}

package/.well-known/mcp.json ADDED Viewed

@@ -0,0 +1,52 @@
+{
+  "$schema": "https://modelcontextprotocol.io/schemas/server-card/v1.json",
+  "name": "shadow-claw",
+  "version": "1.28.0",
+  "description": "Browser-native personal AI assistant with local and remote LLM orchestration, Web Workers, OPFS storage, and agentic tool execution.",
+  "title": "ShadowClaw MCP Server",
+  "websiteUrl": "https://xt-ml.github.io/shadow-claw/",
+  "repository": {
+    "url": "https://github.com/xt-ml/shadow-claw",
+    "source": "github"
+  },
+  "icons": [
+    {
+      "src": "https://xt-ml.github.io/shadow-claw/assets/icons/favicon.svg",
+      "mimeType": "image/svg+xml",
+      "sizes": [
+        "any"
+      ]
+    },
+    {
+      "src": "https://xt-ml.github.io/shadow-claw/assets/icons/512.png",
+      "mimeType": "image/png",
+      "sizes": [
+        "512x512"
+      ]
+    }
+  ],
+  "remotes": [
+    {
+      "type": "streamable-http",
+      "url": "http://localhost:8888/mcp",
+      "supportedProtocolVersions": [
+        "2026-07-28",
+        "2025-11-25",
+        "2024-11-05"
+      ],
+      "headers": [
+        {
+          "name": "MCP-Protocol-Version",
+          "default": "2026-07-28",
+          "isRequired": false
+        },
+        {
+          "name": "x-control-token",
+          "description": "Control plane token for authorized client access",
+          "isSecret": true,
+          "isRequired": false
+        }
+      ]
+    }
+  ]
+}

package/.well-known/oauth-protected-resource ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "resource": "http://localhost:8888/mcp",
+  "authorization_servers": [
+    "http://localhost:8888"
+  ],
+  "bearer_methods_supported": [
+    "header"
+  ],
+  "resource_documentation": "https://xt-ml.github.io/shadow-claw/docs/subsystems/mcp-server.md"
+}

package/.well-known/oauth-protected-resource.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "resource": "http://localhost:8888/mcp",
+  "authorization_servers": [
+    "http://localhost:8888"
+  ],
+  "bearer_methods_supported": [
+    "header"
+  ],
+  "resource_documentation": "https://xt-ml.github.io/shadow-claw/docs/subsystems/mcp-server.md"
+}

package/bin/assert-version-bump.mjs CHANGED Viewed

@@ -49,15 +49,21 @@ export async function assertVersionBump({
   pkgName,
   publishedVersion,
   silent = false,
+  wellKnownMcpVersion,
+  wellKnownServerCardVersion,
 }) {
   if (!silent) {
     console.log(`Checking version bump for package "${pkgName}"...`);
-    console.log(`- Local package.json version     : ${localPkgVersion}`);
+    console.log(
+      `- Local package.json version             : ${localPkgVersion}`,
+    );
   }
   if (localLockVersion) {
     if (!silent) {
-      console.log(`- Local package-lock.json version: ${localLockVersion}`);
+      console.log(
+        `- Local package-lock.json version        : ${localLockVersion}`,
+      );
     }
     if (localPkgVersion !== localLockVersion) {
       throw new Error(
@@ -66,9 +72,40 @@ export async function assertVersionBump({
     }
   }
+  if (wellKnownMcpVersion !== undefined && wellKnownMcpVersion !== null) {
+    if (!silent) {
+      console.log(
+        `- Local .well-known/mcp.json version     : ${wellKnownMcpVersion}`,
+      );
+    }
+    if (localPkgVersion !== wellKnownMcpVersion) {
+      throw new Error(
+        `Version mismatch: package.json (${localPkgVersion}) does not match .well-known/mcp.json (${wellKnownMcpVersion})!`,
+      );
+    }
+  }
+  if (
+    wellKnownServerCardVersion !== undefined &&
+    wellKnownServerCardVersion !== null
+  ) {
+    if (!silent) {
+      console.log(
+        `- Local .well-known/mcp/server-card version: ${wellKnownServerCardVersion}`,
+      );
+    }
+    if (localPkgVersion !== wellKnownServerCardVersion) {
+      throw new Error(
+        `Version mismatch: package.json (${localPkgVersion}) does not match .well-known/mcp/server-card.json (${wellKnownServerCardVersion})!`,
+      );
+    }
+  }
   if (publishedVersion) {
     if (!silent) {
-      console.log(`- Published npm registry version : ${publishedVersion}`);
+      console.log(
+        `- Published npm registry version         : ${publishedVersion}`,
+      );
     }
     const cmp = compareSemver(localPkgVersion, publishedVersion);
     if (cmp <= 0) {
@@ -98,6 +135,25 @@ async function main() {
   const localPkgVersion = pkg.version;
   const localLockVersion = lock?.version;
+  let wellKnownMcpVersion = null;
+  try {
+    const mcpJson = JSON.parse(
+      await readFile(path.join(rootDir, ".well-known/mcp.json"), "utf8"),
+    );
+    wellKnownMcpVersion = mcpJson?.version || null;
+  } catch {}
+  let wellKnownServerCardVersion = null;
+  try {
+    const serverCard = JSON.parse(
+      await readFile(
+        path.join(rootDir, ".well-known/mcp/server-card.json"),
+        "utf8",
+      ),
+    );
+    wellKnownServerCardVersion = serverCard?.version || null;
+  } catch {}
   let publishedVersion = null;
   try {
     const rawOut = execSync(`npm view ${pkgName} version --json`, {
@@ -129,6 +185,8 @@ async function main() {
     localLockVersion,
     pkgName,
     publishedVersion,
+    wellKnownMcpVersion,
+    wellKnownServerCardVersion,
   });
 }

package/bin/assert-version-bump.test.mjs CHANGED Viewed

@@ -73,7 +73,83 @@ describe("assert-version-bump", () => {
           publishedVersion: "1.23.2",
           silent: true,
         }),
-      ).rejects.toThrow("Version mismatch");
+      ).rejects.toThrow(
+        "Version mismatch: package.json (1.23.4) does not match package-lock.json (1.23.3)!",
+      );
+    });
+    it("throws when package.json does not match .well-known/mcp.json", async () => {
+      await expect(
+        assertVersionBump({
+          localPkgVersion: "1.23.4",
+          localLockVersion: "1.23.4",
+          wellKnownMcpVersion: "1.23.3",
+          pkgName: "shadow-claw",
+          publishedVersion: "1.23.2",
+          silent: true,
+        }),
+      ).rejects.toThrow(
+        "Version mismatch: package.json (1.23.4) does not match .well-known/mcp.json (1.23.3)!",
+      );
+    });
+    it("throws when package.json does not match .well-known/mcp/server-card.json", async () => {
+      await expect(
+        assertVersionBump({
+          localPkgVersion: "1.23.4",
+          localLockVersion: "1.23.4",
+          wellKnownMcpVersion: "1.23.4",
+          wellKnownServerCardVersion: "1.23.3",
+          pkgName: "shadow-claw",
+          publishedVersion: "1.23.2",
+          silent: true,
+        }),
+      ).rejects.toThrow(
+        "Version mismatch: package.json (1.23.4) does not match .well-known/mcp/server-card.json (1.23.3)!",
+      );
+    });
+    it("passes when package.json, lockfile, and .well-known versions all match", async () => {
+      await expect(
+        assertVersionBump({
+          localPkgVersion: "1.23.4",
+          localLockVersion: "1.23.4",
+          wellKnownMcpVersion: "1.23.4",
+          wellKnownServerCardVersion: "1.23.4",
+          pkgName: "shadow-claw",
+          publishedVersion: "1.23.3",
+          silent: true,
+        }),
+      ).resolves.toBeUndefined();
+    });
+  });
+  describe("repository live version parity", () => {
+    it("verifies package.json, package-lock.json, and .well-known discovery files are strictly in sync", async () => {
+      const { readFile } = await import("node:fs/promises");
+      const { fileURLToPath } = await import("node:url");
+      const path = await import("node:path");
+      const rootDir = fileURLToPath(new URL("..", import.meta.url));
+      const pkg = JSON.parse(
+        await readFile(path.join(rootDir, "package.json"), "utf8"),
+      );
+      const lock = JSON.parse(
+        await readFile(path.join(rootDir, "package-lock.json"), "utf8"),
+      );
+      const mcpJson = JSON.parse(
+        await readFile(path.join(rootDir, ".well-known/mcp.json"), "utf8"),
+      );
+      const serverCard = JSON.parse(
+        await readFile(
+          path.join(rootDir, ".well-known/mcp/server-card.json"),
+          "utf8",
+        ),
+      );
+      expect(lock.version).toBe(pkg.version);
+      expect(mcpJson.version).toBe(pkg.version);
+      expect(serverCard.version).toBe(pkg.version);
     });
   });
 });

package/bin/build/build.mjs CHANGED Viewed

@@ -149,19 +149,15 @@ export async function runBuild(options = {}) {
         const { generateSkillsIndex } =
           await import("../commands/skills-index.mjs");
         await generateSkillsIndex(projectRoot);
-        if (await pathExists(".well-known/agent-skills/index.json")) {
-          await cp(".well-known", "dist/public/.well-known", {
-            recursive: true,
-            force: true,
-          });
-        }
       } catch (err) {
         console.warn(
           "Notice: Failed to auto-generate agent-skills index:",
           err,
         );
       }
-    } else if (await pathExists(".well-known")) {
+    }
+    if (await pathExists(".well-known")) {
       try {
         await cp(".well-known", "dist/public/.well-known", {
           recursive: true,
@@ -190,6 +186,42 @@ export async function runBuild(options = {}) {
       await run(`node bin/site-config/apply.mjs dist/public ${siteConfigPath}`);
     } catch {}
+    try {
+      const pkgJson = JSON.parse(await readFile("package.json", "utf8"));
+      if (pkgJson.version) {
+        const idxPath = "dist/public/index.html";
+        const idxHtml = await readFile(idxPath, "utf8");
+        await writeFile(
+          idxPath,
+          idxHtml.replace(
+            /<meta\s+name="version"[^>]*>/,
+            `<meta name="version" content="${pkgJson.version}" />`,
+          ),
+          "utf8",
+        );
+        for (const relPath of [
+          ".well-known/mcp.json",
+          ".well-known/mcp/server-card.json",
+        ]) {
+          const cardPath = join("dist/public", relPath);
+          if (await pathExists(cardPath)) {
+            try {
+              const card = JSON.parse(await readFile(cardPath, "utf8"));
+              if (card.version !== pkgJson.version) {
+                card.version = pkgJson.version;
+                await writeFile(
+                  cardPath,
+                  JSON.stringify(card, null, 2) + "\n",
+                  "utf8",
+                );
+              }
+            } catch {}
+          }
+        }
+      }
+    } catch {}
     if (isProduction) {
       log("Running production post-build steps...");
@@ -225,6 +257,7 @@ export async function runBuild(options = {}) {
       try {
         meta = execSync("npm run -s build:pkg:get:meta", {
           encoding: "utf8",
+          stdio: ["ignore", "pipe", "ignore"],
         }).trim();
       } catch {}
       if (meta) {
@@ -388,51 +421,43 @@ export async function runBuild(options = {}) {
     }
   }
-  // 6b. Generate / sync Agent Skills Discovery index (.well-known/agent-skills/index.json)
-  if (await pathExists(contentSkills)) {
+  // 6b. Copy .well-known discovery files & generate/sync Agent Skills index
+  const toolchainWellKnown = join(toolchainRoot, ".well-known");
+  if (await pathExists(toolchainWellKnown)) {
+    await cp(toolchainWellKnown, join(distPublicDir, ".well-known"), {
+      recursive: true,
+      force: true,
+    });
+  }
+  const contentWellKnown = join(contentRoot, ".well-known");
+  if (contentRoot !== toolchainRoot && (await pathExists(contentWellKnown))) {
+    await cp(contentWellKnown, join(distPublicDir, ".well-known"), {
+      recursive: true,
+      force: true,
+    });
+  }
+  const distSkillsDir = join(distPublicDir, ".agents/skills");
+  if (await pathExists(distSkillsDir)) {
     try {
       const { generateSkillsIndex } =
         await import("../commands/skills-index.mjs");
-      await generateSkillsIndex(contentRoot);
-      const rootWellKnownIndex = join(
-        contentRoot,
-        ".well-known/agent-skills/index.json",
-      );
-      if (await pathExists(rootWellKnownIndex)) {
-        await cp(
-          join(contentRoot, ".well-known"),
-          join(distPublicDir, ".well-known"),
-          {
-            recursive: true,
-            force: true,
-          },
-        );
+      await generateSkillsIndex(distPublicDir, {
+        metadataRoot: contentRoot,
+        outDir: ".well-known/agent-skills",
+      });
+      // Also keep contentRoot/.well-known/agent-skills/index.json in sync if contentSkills exists
+      if (await pathExists(contentSkills)) {
+        try {
+          await generateSkillsIndex(contentRoot, {
+            toolchainRoot,
+            includeBundled: true,
+          });
+        } catch {}
       }
     } catch (err) {
       console.warn("Notice: Failed to auto-generate agent-skills index:", err);
-      const contentWellKnown = join(contentRoot, ".well-known");
-      if (await pathExists(contentWellKnown)) {
-        await cp(contentWellKnown, join(distPublicDir, ".well-known"), {
-          recursive: true,
-          force: true,
-        });
-      }
-    }
-  } else {
-    const contentWellKnown = join(contentRoot, ".well-known");
-    if (await pathExists(contentWellKnown)) {
-      await cp(contentWellKnown, join(distPublicDir, ".well-known"), {
-        recursive: true,
-        force: true,
-      });
-    } else {
-      const toolchainWellKnown = join(toolchainRoot, ".well-known");
-      if (await pathExists(toolchainWellKnown)) {
-        await cp(toolchainWellKnown, join(distPublicDir, ".well-known"), {
-          recursive: true,
-          force: true,
-        });
-      }
     }
   }
@@ -470,12 +495,51 @@ export async function runBuild(options = {}) {
   const basePath = defaultBasePath;
   try {
-    const idxHtml = await readFile(indexPath, "utf8");
-    const updatedHtml = idxHtml.replace(
+    let idxHtml = await readFile(indexPath, "utf8");
+    idxHtml = idxHtml.replace(
       /<base\s+href="[^"]*"\s*\/?>/i,
       `<base href="${basePath}" />`,
     );
-    await writeFile(indexPath, updatedHtml, "utf8");
+    let pkgVersion = "";
+    try {
+      const pkgPath = await findFirstExistingPath([
+        join(contentRoot, "package.json"),
+        join(toolchainRoot, "package.json"),
+      ]);
+      if (pkgPath) {
+        const pkg = JSON.parse(await readFile(pkgPath, "utf8"));
+        pkgVersion = pkg.version || "";
+      }
+    } catch {}
+    if (pkgVersion) {
+      idxHtml = idxHtml.replace(
+        /<meta\s+name="version"[^>]*>/,
+        `<meta name="version" content="${pkgVersion}" />`,
+      );
+      for (const relPath of [
+        ".well-known/mcp.json",
+        ".well-known/mcp/server-card.json",
+      ]) {
+        const cardPath = join(distPublicDir, relPath);
+        if (await pathExists(cardPath)) {
+          try {
+            const card = JSON.parse(await readFile(cardPath, "utf8"));
+            if (card.version !== pkgVersion) {
+              card.version = pkgVersion;
+              await writeFile(
+                cardPath,
+                JSON.stringify(card, null, 2) + "\n",
+                "utf8",
+              );
+            }
+          } catch {}
+        }
+      }
+    }
+    await writeFile(indexPath, idxHtml, "utf8");
   } catch {}
   if (isProduction) {
@@ -508,15 +572,18 @@ export async function runBuild(options = {}) {
       meta = execSync("git rev-parse HEAD", {
         cwd: contentRoot,
         encoding: "utf8",
+        stdio: ["ignore", "pipe", "ignore"],
       }).trim();
     } catch {
       try {
         meta = execSync("git rev-parse HEAD", {
           cwd: toolchainRoot,
           encoding: "utf8",
+          stdio: ["ignore", "pipe", "ignore"],
         }).trim();
       } catch {}
     }
     if (meta) {
       const idxHtml = await readFile(indexPath, "utf8");
       await writeFile(