Add SafeSkill security badge (50/100 — Use with Caution)

.claude-plugin/marketplace.json

@@ -5,8 +5,8 @@
     "url": "https://github.com/bahadirarda"
   },
   "metadata": {
-    "description": "clawtool: the canonical tool layer for AI coding agents — by Bahadır Arda",
-    "version": "0.8.6"
+    "description": "clawtool — Tools. Agents. Wired. By Bahadır Arda.",
+    "version": "0.21.7"
   },
   "plugins": [
     {
@@ -16,8 +16,8 @@
         "repo": "cogitave/clawtool",
         "ref": "main"
       },
-      "description": "The canonical tool layer for AI coding agents. Auto-registers an MCP server on install (no claude mcp add-json), biases agent preference toward clawtool's structured-output / timeout-safe / format-aware tools via the loaded skill description, exposes /clawtool slash commands. Uninstall removes everything except user data and the binary itself.",
-      "version": "0.8.6",
+      "description": "Tools. Agents. Wired. — wires every AI coding agent (Claude Code / Codex / Opencode / Gemini) onto one timeout-safe, structured-output tool surface. Auto-registers an MCP server on install (no `claude mcp add-json`), biases agent preference via a loaded skill, exposes `/clawtool` slash commands, and dispatches across agents through async BIAM with edge-triggered TaskNotify fan-in. Bundles sandbox profiles (bwrap / sandbox-exec / docker), saved web-UI portals, an MCP scaffolder, and search-first tool discovery. Uninstall removes everything except user data and the binary itself.",
+      "version": "0.21.7",
       "author": {
         "name": "Bahadır Arda",
         "url": "https://github.com/bahadirarda"

.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "clawtool",
-  "version": "0.8.6",
-  "description": "The canonical tool layer for AI coding agents — install once, use everywhere. Replaces native Bash/Read/Edit/Write/Grep/Glob with timeout-safe, structured-output equivalents; adds WebFetch + WebSearch + a bleve-backed ToolSearch primitive for deferred tool discovery; aggregates configurable MCP source servers (github, slack, postgres, …) under the same surface.",
+  "version": "0.21.7",
+  "description": "Tools. Agents. Wired. — the canonical tool layer that wires every AI coding agent (Claude Code / Codex / Opencode / Gemini / Hermes) onto one timeout-safe, structured-output surface with multi-agent dispatch, sandbox profiles, and search-first discovery.",
   "author": {
     "name": "Bahadır Arda",
     "url": "https://github.com/bahadirarda"
@@ -11,14 +11,24 @@
   "repository": "https://github.com/cogitave/clawtool",
   "keywords": [
     "mcp",
+    "mcp-server",
     "tools",
-    "canonical",
-    "bash",
+    "canonical-tools",
     "search-first",
     "multi-agent",
+    "agent-supervisor",
+    "agent-dispatch",
+    "biam",
     "claude-code",
+    "claude-code-plugin",
     "codex",
     "opencode",
+    "gemini",
+    "hermes",
+    "ai-coding-agent",
+    "sandbox",
+    "structured-output",
+    "marketplace-plugin",
     "toolset"
   ],
   "mcpServers": {

.clawtool/rules.toml

@@ -0,0 +1,27 @@
+# clawtool rules — predicate-based invariants enforced at
+# lifecycle events (pre_commit, post_edit, session_end,
+# pre_send, pre_unattended). See docs/rules.md for the schema.
+
+[[rule]]
+name      = "no-internal-doc-ids"
+description = "User-facing surfaces must not leak internal doc IDs (ADR-XXX, audit-#NNN, ticket slugs)."
+when      = "post_edit"
+condition = "changed(\"internal/cli/**/*.go\") OR changed(\"commands/*.md\") OR changed(\"internal/tools/core/*.go\") OR changed(\"README.md\") OR changed(\"skills/clawtool/SKILL.md\")"
+severity  = "warn"
+hint      = "Grep the touched files for ADR-, audit-#, and bare #\\d+ references. Move internal references to source comments or wiki cross-links; describe behavior plainly in CLI help, slash commands, MCP tool descriptions, onboard prompts, README operator sections, and config templates. Operator caught ADR-029 leaking into onboard / overview / doctor / commands/clawtool-overview.md and called it bad UX."
+
+[[rule]]
+name      = "gofmt-clean"
+description = "Go sources must be gofmt-clean before commit. CI Lint job will fail otherwise."
+when      = "pre_commit"
+condition = "changed(\"**/*.go\")"
+severity  = "warn"
+hint      = "Run: gofmt -l . to find diverged files; gofmt -w <file> to fix in-place. Apply across the whole repo: find . -name \"*.go\" -not -path \"./vendor/*\" -exec gofmt -w {} +"
+
+[[rule]]
+name      = "race-clean"
+description = "Go tests must pass under -race before commit. CI Test job runs go test -race and will fail otherwise."
+when      = "pre_commit"
+condition = "changed(\"**/*.go\")"
+severity  = "warn"
+hint      = "Run: go test -race -count=1 -timeout=120s ./... — fix any DATA RACE warnings (usually shared variables across test goroutines; reorder so the writer settles before the reader spawns, or use a channel)."

.dockerignore

@@ -0,0 +1,32 @@
+# Anything not needed inside the build context — keeps `docker
+# build` fast and makes layer caching meaningful.
+
+.git
+.github
+.idea
+.vscode
+.obsidian
+/wiki
+/_templates
+/.raw
+/CLAUDE.md
+/.envrc
+/.envrc.local
+
+# Build outputs (we re-build inside the container anyway)
+/bin
+/dist
+/test/e2e/stub-server/stub-server
+
+# Local caches
+/.clawtool/state
+*.log
+*.test
+*.out
+
+# Documentation that the runtime container doesn't need
+# (the source is still copied so godoc / embed paths work; only
+# docs/ as a tree is excluded to keep the build context lean).
+/docs
+*.md
+!README.md

.github/dependabot.yml

@@ -12,8 +12,11 @@ updates:
       day: monday
     open-pull-requests-limit: 5
     commit-message:
+      # `include: scope` deliberately omitted — dependabot would
+      # add `(deps)` after our `chore(deps)` prefix, producing the
+      # invalid `chore(deps)(deps): bump foo` shape Conventional
+      # Commits rejects.
       prefix: "chore(deps)"
-      include: scope
     groups:
       # Group all minor/patch dep bumps into one PR per week. Major
       # bumps still get their own PR so they're easier to review.
@@ -32,8 +35,8 @@ updates:
       day: monday
     open-pull-requests-limit: 3
     commit-message:
+      # See gomod block above for why `include: scope` is omitted.
       prefix: "chore(ci)"
-      include: scope
     labels:
       - dependencies
       - ci

.github/workflows/ci.yml

@@ -18,7 +18,12 @@ concurrency:
 env:
   # Pinned Go version. Bumped via dependabot or a deliberate `chore(ci)`
   # commit — never silently. Keep in sync with go.mod's `go` directive.
-  GO_VERSION: "1.25.5"
+  #
+  # 2026-04-27: bumped 1.25.5 → 1.26.0 because chromedp/chromedp v0.15.x
+  # (pulled by the portal feature, ADR-018/020) requires Go 1.26.
+  # setup-go installs the requested version and GOTOOLCHAIN=local
+  # prevents an automatic upgrade, so the env var is the gate.
+  GO_VERSION: "1.26.0"
 
 jobs:
   # Static analysis — fast feedback so devs see formatting / vet errors
@@ -27,17 +32,21 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
         with:
           go-version: ${{ env.GO_VERSION }}
           cache: true
-      - name: gofmt -d (no diff allowed)
+      - name: gofmt (no diff allowed)
+        # gofmt does not understand the "./..." pattern; pass the
+        # repo root so it walks recursively. Capture stdout (the
+        # offending file list); fail when non-empty.
         run: |
-          out=$(gofmt -d -l ./...)
+          out=$(gofmt -l .)
           if [ -n "$out" ]; then
-            echo "::error::gofmt produced diff; run 'gofmt -w ./...'"
+            echo "::error::gofmt drift; run 'gofmt -w .'"
             echo "$out"
+            gofmt -d $out
             exit 1
           fi
       - name: go vet
@@ -55,24 +64,27 @@ jobs:
       matrix:
         os: [ubuntu-latest, macos-latest]
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
         with:
           go-version: ${{ env.GO_VERSION }}
           cache: true
 
-      # Linux runners ship ripgrep + grep already; macOS runners ship
-      # grep but not rg. We install rg explicitly on macOS so the Grep
-      # tool's preferred-engine code path gets exercised everywhere.
-      - name: Install ripgrep (macOS)
-        if: matrix.os == 'macos-latest'
-        run: brew install ripgrep
-      - name: Install pandoc (universal — needed for Read .docx)
+      # ripgrep is no longer pre-installed on either runner image
+      # consistently. Install it explicitly so Grep's preferred-engine
+      # code path stays exercised everywhere (the e2e test asserts
+      # engine == ripgrep, not grep).
+      - name: Install test-time binaries
+        # macOS GitHub runners do not ship GNU coreutils, so `timeout`
+        # (and its homonym `gtimeout`) are absent until we install them
+        # via brew. test/e2e/run.sh detects whichever is on PATH and
+        # uses it; we just have to make sure one ends up there.
         run: |
           if [ "$(uname -s)" = "Linux" ]; then
-            sudo apt-get update -qq && sudo apt-get install -y -qq pandoc poppler-utils
+            sudo apt-get update -qq
+            sudo apt-get install -y -qq ripgrep pandoc poppler-utils
           else
-            brew install pandoc poppler
+            brew install ripgrep pandoc poppler coreutils
           fi
 
       - name: go test -race
@@ -93,8 +105,8 @@ jobs:
     name: Cross-compile sanity
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
         with:
           go-version: ${{ env.GO_VERSION }}
           cache: true

.github/workflows/integration.yml

@@ -39,19 +39,29 @@ jobs:
       contains(github.event.pull_request.labels.*.name, 'integration')
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version: ${{ env.GO_VERSION }}
           cache: true
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: ${{ env.NODE_VERSION }}
-          # `npx` doesn't reliably cache packages across runs on its own,
-          # so we cache npm's directory ourselves to keep wall time down.
-          cache: npm
+          # `cache: npm` requires a package-lock.json at repo root — clawtool
+          # is a Go project so there isn't one. npx packages download per run;
+          # this job is scheduled daily so the cache miss is tolerable.
+
+      # Manually cache ~/.npm so npx download-on-demand isn't wholly cold
+      # across runs. Hashing on go.sum is a stable-enough key — it changes
+      # roughly when the integration set turns over too.
+      - uses: actions/cache@v4
+        with:
+          path: ~/.npm
+          key: ${{ runner.os }}-npm-${{ hashFiles('go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-npm-
 
       - name: Build clawtool
         run: make build