claude-code-kit 0.62.0__tar.gz → 0.63.0__tar.gz

{claude_code_kit-0.62.0 → claude_code_kit-0.63.0}/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "claude-kit",
       "source": "./",
       "description": "Cookiecutter-style scaffolder for an autonomous Claude Code SDLC config (no app code, no Docker): install CLAUDE.md + .claude/ (rules, the profile's agents/skills, hooks, artifact templates) + optional .mcp.json, then run /sdlc to drive spec → review → build → test → security → ship through profile-aware quality gates, working memory, and a self-improving learnings loop.",
-      "version": "0.62.0",
+      "version": "0.63.0",
       "license": "MIT",
       "keywords": ["sdlc", "agents", "orchestration", "quality-gates", "workflow", "scaffold", "cookiecutter"]
     }

{claude_code_kit-0.62.0 → claude_code_kit-0.63.0}/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-kit",
-  "version": "0.62.0",
+  "version": "0.63.0",
   "description": "Cookiecutter-style scaffolder for an autonomous Claude Code SDLC config (no app code, no Docker). `claude-kit init` asks ordered questions and installs CLAUDE.md + .claude/ (rules, the profile's agents/skills, hooks, artifact templates) + optional .mcp.json; run /sdlc to drive spec → review → build → test → security → ship through profile-aware quality gates with working memory and a self-improving learnings loop.",
   "author": {
     "name": "Arjunsingh Yadav",

{claude_code_kit-0.62.0 → claude_code_kit-0.63.0}/CHANGELOG.md

@@ -4,6 +4,42 @@ All notable changes to claude-kit are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/), and the project uses
 [semantic versioning](https://semver.org/).
 
+## [0.63.0] — 2026-07-16
+
+**Catalog fix — the `auditor` agent can finally get the MCP server it depends on.** The `auditor`
+agent (enterprise profile) drives its entire audit workflow — navigate, snapshot, screenshot,
+performance trace, console inspection — through the **Chrome DevTools MCP**, but `catalog/mcp.yaml`
+only offered `playwright`, so a user who installed the auditor had **no catalog option** to enable
+the server it requires. This surfaced during a full-lifecycle SDLC coverage audit (external /
+black-box testing vertical). Pure data change — no `resolve()` branches, no new agents/skills
+(golden rule #7).
+
+### Added
+
+- **`chrome-devtools` MCP server** in `catalog/mcp.yaml` — stdio, pinned to
+  `chrome-devtools-mcp@1.6.0` (the official Google Chrome DevTools MCP; referenced, not vendored,
+  like every other catalog server). Selectable via `claude-kit init` / `list-options`; writes into
+  the project `.mcp.json` + `.mcp.lock.json` when chosen. Carries the same toxic-flow annotation
+  discipline as `playwright` (untrusted-content on any loaded page · egress to arbitrary URLs —
+  point it only at trusted dev/staging targets).
+
+### Changed
+
+- `docs/install.md` MCP-integrations list now enumerates Chrome DevTools (the canonical full list
+  stays `claude-kit list-options`).
+
+### Not adopted (deliberately)
+
+- **No auto-wiring of `chrome-devtools` to the auditor agent or the enterprise profile.** MCP
+  servers stay user-selected and opt-in across the whole catalog — a browser MCP is a real egress
+  surface, so the user makes the trust decision. The fix closes the *availability* gap (the server
+  is now offerable); it does not silently enable a browser in anyone's project.
+- **The deeper external/black-box testing gaps stay open for an owner decision** — no gate spawns
+  the `auditor` (it remains available-but-not-gated), and there is still no page-performance-budget
+  enforcement, visual-regression, or synthetic uptime probe. Those are enforcement-design choices
+  (they change what blocks a pipeline), tracked in the SDLC coverage audit alongside the existing
+  user-gated backlog; this release deliberately ships only the self-contained catalog correctness fix.
+
 ## [0.62.0] — 2026-07-15
 
 **OSS-adoption wave 3 — the two L-sized consolidation items that close out the implement-now

{claude_code_kit-0.62.0 → claude_code_kit-0.63.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: claude-code-kit
-Version: 0.62.0
+Version: 0.63.0
 Summary: Cookiecutter-style scaffolder for an autonomous Claude Code SDLC configuration (no app code, no Docker). Asks ordered questions and installs CLAUDE.md + .claude/ (rules, the chosen profile's agents/skills, hooks, artifact templates) + optional .mcp.json; run /sdlc to drive spec → review → build → test → security → ship through profile-aware quality gates, working memory, and a self-improving learnings loop.
 Project-URL: Homepage, https://github.com/ajyadav013/claude-kit
 Project-URL: Repository, https://github.com/ajyadav013/claude-kit
@@ -149,7 +149,7 @@ claude-kit init --defaults      # non-interactive: React + Python/FastAPI + Post
 | 📐 **Rules & skills** | **25** stack-agnostic core rules + **105** context-activated skills (57 core + 48 stack-collection), pulled into context on demand |
 | 🧱 **Stacks & overlays** | A stack-agnostic core + **13** overlay rule files (React · FastAPI · Go · Postgres · Mongo) wired to your exact commands and path-scoped to load only when you touch matching files |
 | 🛠️ **Hooks & guards** | **18** event hooks — deterministic safety guards and advisory warnings — that no-op gracefully without `jq` |
-| 📦 **Distribution & lifecycle** | Plugin **and** pip from one source, **22** ready MCP fragments (version-pinned), edit-preserving `upgrade`, and a root `AGENTS.md` at init so non-Claude agents share the same standards |
+| 📦 **Distribution & lifecycle** | Plugin **and** pip from one source, **23** ready MCP fragments (version-pinned), edit-preserving `upgrade`, and a root `AGENTS.md` at init so non-Claude agents share the same standards |
 
 Profiles (`lean` · `standard` · `enterprise`), team scopes, autonomy levels, and org capability
 packs decide how much of this actually installs — see

{claude_code_kit-0.62.0 → claude_code_kit-0.63.0}/README.md

@@ -116,7 +116,7 @@ claude-kit init --defaults      # non-interactive: React + Python/FastAPI + Post
 | 📐 **Rules & skills** | **25** stack-agnostic core rules + **105** context-activated skills (57 core + 48 stack-collection), pulled into context on demand |
 | 🧱 **Stacks & overlays** | A stack-agnostic core + **13** overlay rule files (React · FastAPI · Go · Postgres · Mongo) wired to your exact commands and path-scoped to load only when you touch matching files |
 | 🛠️ **Hooks & guards** | **18** event hooks — deterministic safety guards and advisory warnings — that no-op gracefully without `jq` |
-| 📦 **Distribution & lifecycle** | Plugin **and** pip from one source, **22** ready MCP fragments (version-pinned), edit-preserving `upgrade`, and a root `AGENTS.md` at init so non-Claude agents share the same standards |
+| 📦 **Distribution & lifecycle** | Plugin **and** pip from one source, **23** ready MCP fragments (version-pinned), edit-preserving `upgrade`, and a root `AGENTS.md` at init so non-Claude agents share the same standards |
 
 Profiles (`lean` · `standard` · `enterprise`), team scopes, autonomy levels, and org capability
 packs decide how much of this actually installs — see

{claude_code_kit-0.62.0 → claude_code_kit-0.63.0}/catalog/mcp.yaml

@@ -72,6 +72,15 @@ servers:
       type: stdio
       command: npx
       args: ["-y", "@playwright/mcp@0.0.77"]
+  chrome-devtools:
+    label: "Chrome DevTools (live-page audit: a11y/perf/Core Web Vitals/console/responsive — powers the `auditor` agent)"
+    # The `auditor` agent (enterprise profile) drives its whole workflow — navigate, snapshot, screenshot,
+    # performance trace, console — through this server; without it the agent has no browser to inspect.
+    # toxic-flow legs: untrusted-content (ANY loaded page) · egress (navigates arbitrary URLs) — browser-grade; point it only at trusted dev/staging targets.
+    config:
+      type: stdio
+      command: npx
+      args: ["-y", "chrome-devtools-mcp@1.6.0"]
   docs:
     label: "Docs / Context7 (live library docs)"
     # toxic-flow legs: untrusted-content (fetched pages) · egress (hosted endpoint)

{claude_code_kit-0.62.0 → claude_code_kit-0.63.0}/docs/install.md

@@ -76,7 +76,7 @@ config — nothing else:
 3. **Backend language** (default: Python; `none` for frontend-only projects) → **backend framework** (default: FastAPI)
 4. **Database** (PostgreSQL · MongoDB · `none`)
 5. **SDLC profile** (`lean` · `standard` · `enterprise`)
-6. **Optional MCP integrations** (GitHub · Jira/Linear · Azure DevOps · Postgres/Mongo · Playwright · Docs/MS Learn · Azure · Wassette · Sentry · Repowise · the Google security suite — full list: `claude-kit list-options`) — a
+6. **Optional MCP integrations** (GitHub · Jira/Linear · Azure DevOps · Postgres/Mongo · Playwright · Chrome DevTools · Docs/MS Learn · Azure · Wassette · Sentry · Repowise · the Google security suite — full list: `claude-kit list-options`) — a
    project-root `.mcp.json` is written **only** if you select any (env placeholders, never secrets)
 7. **Learning capture** (`session-end-catchup` default · `session-end` · `per-task` · `off`) — how often
    the background learnings job runs. *Privacy note:* it reads your session transcript + changed files

{claude_code_kit-0.62.0 → claude_code_kit-0.63.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "claude-code-kit"
-version = "0.62.0"
+version = "0.63.0"
 description = "Cookiecutter-style scaffolder for an autonomous Claude Code SDLC configuration (no app code, no Docker). Asks ordered questions and installs CLAUDE.md + .claude/ (rules, the chosen profile's agents/skills, hooks, artifact templates) + optional .mcp.json; run /sdlc to drive spec → review → build → test → security → ship through profile-aware quality gates, working memory, and a self-improving learnings loop."
 readme = "README.md"
 requires-python = ">=3.9"

{claude_code_kit-0.62.0 → claude_code_kit-0.63.0}/src/claude_kit/__init__.py

@@ -7,4 +7,4 @@ Docker): ``claude-kit init`` asks ordered questions and lays down ``CLAUDE.md``
 as a plugin. Extensibility is data-driven via the ``catalog/`` (stacks, profiles, MCP).
 """
 
-__version__ = "0.62.0"
+__version__ = "0.63.0"