smart-web-mcp 0.22.0 → 0.23.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +8 -0
- package/README.md +1 -1
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -51,6 +51,7 @@ The format is based on Keep a Changelog[^1] and this project uses SemVer.
|
|
|
51
51
|
- Added deterministic Exa/Tavily-style `search_external` provider benchmark fixtures so credentialed search lanes can be measured without paid/live requests before any external-search live-smoke work.
|
|
52
52
|
- Added fixture skipped-case lane/reason metadata to provider benchmark live-vs-fixture and evidence-gap artifacts so credential-gated fixtures are not misread as absent fixtures.
|
|
53
53
|
- Added `scripts/partial-handoff-watchdog.mjs` and `npm run watchdog:partial-handoff` to run a no-secret drift watchdog over representative partial/blocked/handoff outputs and fail on chrome URL, script, or style-shell leakage.
|
|
54
|
+
- Added `--report-file <path>` to the partial/handoff watchdog so durable runners can persist the full JSON report while keeping stdout human-readable.
|
|
54
55
|
- Added an explicit `smartcrawl-export.v1` schema version to smartcrawl export manifests and summaries.
|
|
55
56
|
- Added per-document SHA-256 hashes to smartcrawl export manifests for generated Markdown integrity checks.
|
|
56
57
|
- Added resolved crawl options to smartcrawl export manifests for reproducible docs exports.
|
|
@@ -116,6 +117,13 @@ The format is based on Keep a Changelog[^1] and this project uses SemVer.
|
|
|
116
117
|
- Korean public API helpers now validate outbound URLs and redirects before fetching, blocking localhost, private, and reserved targets unless `network.allowPrivateHosts` is explicitly enabled.
|
|
117
118
|
- CI now declares read-only default repository permissions, Dependabot auto-merge pins the reusable workflow without forwarding all caller secrets, and the workflow check enforces those guards.
|
|
118
119
|
|
|
120
|
+
## [0.23.0](https://github.com/jojo-labs/smart-web/compare/v0.22.0...v0.23.0) (2026-06-21)
|
|
121
|
+
|
|
122
|
+
|
|
123
|
+
### Features
|
|
124
|
+
|
|
125
|
+
* persist partial handoff watchdog reports ([#328](https://github.com/jojo-labs/smart-web/issues/328)) ([5a49af2](https://github.com/jojo-labs/smart-web/commit/5a49af2c0f8388481d59bed24edfc7c8742b5b48))
|
|
126
|
+
|
|
119
127
|
## [0.22.0](https://github.com/jojo-labs/smart-web/compare/v0.21.0...v0.22.0) (2026-06-21)
|
|
120
128
|
|
|
121
129
|
|
package/README.md
CHANGED
|
@@ -556,7 +556,7 @@ Provider benchmark reports also include `providerEvidenceGaps`: a ranked next-ac
|
|
|
556
556
|
|
|
557
557
|
See `reports/README.md` for the curated report archive index. It identifies `provider-benchmark-live-no-secret.{json,md}` and `provider-benchmark-live-no-secret-gaps.json` as the current maintenance artifacts, and labels older cumulative live-smoke reports as historical calibration snapshots.
|
|
558
558
|
|
|
559
|
-
`npm run watchdog:partial-handoff` builds the package and runs a compact no-secret drift watchdog over representative partial/blocked/handoff `smartfetch` outputs (httpbin authwall, Wikidocs, Naver Cafe, and Naver Map search). It exits non-zero when compact text or structured links/assets leak chrome URLs, script globals, or style-shell tokens, and prints a `partial-handoff-watchdog.v1` JSON report without raw page dumps or credentials.
|
|
559
|
+
`npm run watchdog:partial-handoff` builds the package and runs a compact no-secret drift watchdog over representative partial/blocked/handoff `smartfetch` outputs (httpbin authwall, Wikidocs, Naver Cafe, and Naver Map search). It exits non-zero when compact text or structured links/assets leak chrome URLs, script globals, or style-shell tokens, and prints a `partial-handoff-watchdog.v1` JSON report without raw page dumps or credentials. For runner artifacts without JSON stdout, run `node scripts/partial-handoff-watchdog.mjs --report-file <path>` after `npm run build`; the command keeps stdout human-readable and writes the full JSON report to the requested path.
|
|
560
560
|
|
|
561
561
|
## Quick verification
|
|
562
562
|
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "smart-web-mcp",
|
|
3
3
|
"mcpName": "io.github.jojo-labs/smart-web",
|
|
4
|
-
"version": "0.
|
|
4
|
+
"version": "0.23.0",
|
|
5
5
|
"packageManager": "npm@11.9.0",
|
|
6
6
|
"description": "Local MCP for web search, direct-URL fetch, compact normalized output, site crawling, and docs export.",
|
|
7
7
|
"homepage": "https://github.com/jojo-labs/smart-web",
|