Portable Web Toolkit v0.4.0

Portable Web Toolkit v0.4.0

Automatic freshness, live WCAGate integration, and standards-aware public
discovery validation for toolkit-managed Astro + Cloudflare sites.

Highlights

• Automatic toolkit freshness: normal toolkit entrypoints perform a
  throttled update check, fast-forward only a clean public main checkout,
  refresh the unpinned WCAGate main dependency, and report skipped/error
  states without overwriting local work.
• Live WCAGate bridge: the website accessibility wrapper resolves the
  current @imyourboyroy/wcagate engine from the toolkit dependency instead of
  maintaining a bundled copy.
• Standards-aware Discovery Doctor: bounded sitemap XML, robots, llms,
  humans, security.txt, JSON-LD, content-type, REST, and public MCP discovery
  validation with same-origin and response-size safety bounds.
• Production discovery contract: llms.txt, llms-full.txt,
  humans.txt, security.txt, structured content, headers, and homepage
  JSON-LD are required by default. Profiles can explicitly relax or extend the
  contract; preview/development mode does not require production-only
  sitemap/security.txt artifacts.
• Wix sourcing doctor: profile-driven public storefront HTML and JSON-LD
  harvesting without admin credentials or OAuth.

Validation

• npm run validate
• Discovery Doctor tests: 23 passing
• Toolkit syntax check: 247 files, 0 failures
• Toolkit self-verification: all checks passing
• Release privacy scan: 0 findings

See CHANGELOG.md for the complete release history and upgrade notes.

Portable Web Toolkit v0.3.9

Portable Web Toolkit v0.3.9

Hardening + full-product operator polish: fail-closed gates, glass/frost WCAG path, Astro Image defaults, Brand Guide → tokens.

Highlights

• Fail-closed doctors: discovery-doctor, registrar MX gate, CF dry-run/--apply defaults, site-quality smoke compliance, louder toolkit-report/package-updater/project-init exits.
• WCAG glassmorphism: frost-aware remediations, frost-glass-contrast manual evidence, suppressions with outcomes: ["cantTell"] for axe incomplete contrast — keep frost UI, resolve evidence.
• Astro Image posture: site-starter OptimizedPicture + Workers imageService: 'compile'; image-pipeline audit/readiness checks.
• package-updater: runs official npx @astrojs/upgrade for Astro projects (dry-run / --apply), then registry pin updates.
• Brand Guide → tokens: brand-doctor sync-tokens; deeper stylesheet-check architecture rules.
• Skills: brand-doctor, discovery-doctor, image-pipeline, pagespeed-diagnostics, site-maintenance, wcag-auditor (+ site-maintenance routing).

Notes

• Client reports stay under <project>/output/; toolkit self-checks under Web_Toolkit/.runtime/.
• Node pin lives at repo root .node-version (and site-starter/.node-version for client copies) — not under Web_Toolkit/.
• After package-updater --apply on Astro sites, still run npm install if the lockfile needs a refresh.

v0.3.8 — init-site-profile + env ownership

Portable Web Toolkit v0.3.8

Fix init-site-profile default output + clarify .env.example ownership.

Highlights

• init-site-profile create writes into the client project (./<siteId>.site-profile.json) by default — no more accidental toolkit site-profiles/ client files.
• Agent-ready README/help + requirements --json; full optional flag list documented.
• Root .env.example is a pointer only; use site-starter/.env.example for client sites.

Example

node ./Web_Toolkit/init_site_profile/bin/init-site-profile.mjs requirements --json
node ./Web_Toolkit/init_site_profile/bin/init-site-profile.mjs create \
  --site-id bakery \
  --project-root . \
  --deploy-target workers \
  --zone bakery.com \
  --prod-hosts bakery.com,www.bakery.com

v0.3.7 — sectioned .env handoff

Portable Web Toolkit v0.3.7

.env handoff: user owns API secrets; agent fills naming with the user; PostHog + GA4 explained early.

Highlights

• Sectioned .env template (site-starter/.env.example + bootstrap generator):
  • A — Required APIs the user pastes (CLOUDFLARE_API_TOKEN, GOOGLE_PAGESPEED_API_KEY)
  • B — Agent proposes zone/worker/pages/URL with the user
  • C — Recommended PostHog + GA4 (explain why in S5; wire in S7)
  • D — Optional features (forms, Instagram, registrar tooling)
• Porkbun is an optional registrar example, not a requirement.
• Agents must be curious: challenge vague names and “analytics later.”

Operator notes

Follow docs/agent-skills/ONBOARDING_STAGES.md S5/S7 and copy site-starter/.env.example into new client projects.

v0.3.6 — staged agent onboarding

Portable Web Toolkit v0.3.6

Checkpoint-driven staged agent onboarding for non-experts (host → Cloudflare → first site).

Highlights

• docs/agent-skills/ONBOARDING_STAGES.md: S0–S9 protocol with stop-and-ask checkpoints (sandbox, host bootstrap, skills, CF token, MCP plugin, site intent, scaffold, brand/secrets, local gates, staging→prod).
• site-onboarding skill (core, not default-install): thin loader for the stages doc; router sends “new machine / Cloudflare beginner” here.
• README paste prompt + getting-started.md lead with staged onboarding.
• cf-agent REQUIRED_PERMISSION_NAMES adds API Tokens Write, Account API Tokens Write, and Gateway Write; token recipe in cf-agent README.
• Bootstrap: after installing desired Python, also runs pyenv global <desired> (posix + Windows).

Operator notes

# Guided first site
node ./scripts/manage-project-skills.mjs link --project /path/to/site \
  --skills site-onboarding,portable-web-toolkit,site-readiness,site-starter,toolkit-update

Follow docs/agent-skills/ONBOARDING_STAGES.md. Cloudflare MCP: live fetch https://developers.cloudflare.com/agent-setup/prompt.md (do not invent install steps).

Portable Web Toolkit v0.3.5

Portable Web Toolkit v0.3.5

Light skill defaults + freshest safe toolchain floors.

Highlights

• Token-light installs: only portable-web-toolkit-router is install_by_default. Link heavy skills explicitly with --skills.
• Site-starter floors refreshed with package-updater (TypeScript capped at ^6.0.3 until @astrojs/check peers allow 7.x).
• Node pin / bootstrap tarballs → 26.7.0.
• Focus-indicator probe scroll fix in bundled WCAG auditor.

Operator notes

# Default link = router only
node ./scripts/manage-project-skills.mjs link --project /path/to/site

# Active toolkit site work
node ./scripts/manage-project-skills.mjs link --project /path/to/site \
  --skills portable-web-toolkit,site-readiness,site-starter,toolkit-update

Portable Web Toolkit v0.3.4

Portable Web Toolkit v0.3.4

Keeps accessibility evidence inside the linked toolkit for website work.

Highlights

• Web_Toolkit/wcag_auditor is self-contained — core-path resolves only to this module.
• Website agents must not open or patch AI/wcag-auditor (or any other tree under AI/).
• Includes Playwright .default browser interop fix for file-URL / CJS imports.

Operator notes

1. Pull/update toolkit so the client’s Web_Toolkit link includes the full wcag_auditor tree (src/cli.mjs present).
2. Confirm: node ./Web_Toolkit/wcag_auditor/bin/wcag-auditor.mjs core-path ends with Web_Toolkit/wcag_auditor.
3. Optional peers in the client project: playwright, @axe-core/playwright.

Portable Web Toolkit v0.3.3

Portable Web Toolkit v0.3.3

Hard-segregates accessibility evidence into a standalone package and refreshes toolchain floors.

Key Highlights

• WCAG Auditor bridge only: Web_Toolkit/wcag_auditor is a thin site-profile/Astro bridge. The evidence engine lives at AI/wcag-auditor (@roydawsoniv/wcag-auditor) for websites and apps.
• Site-doctor opt-in: --wcag / diagnostics.wcagAuditor.enabled.
• Toolchain floors: Astro ^7.1.6, Cloudflare adapter ^14.1.7, Wrangler ^4.118.0, Vite ^8.2.0, Playwright ^1.62.1, Node .node-version 26.6.0.
• Skill architecture unchanged: global idle cost stays on portable-web-toolkit-router; heavy skills remain project-scoped symlinks.

Upgrade notes

1. Pull / install this release.
2. Ensure the standalone checkout exists at ../../wcag-auditor (from this repo) or set WCAG_AUDITOR_ROOT.
3. Keep only portable-web-toolkit-router in global skill homes; link project skills with manage-project-skills.mjs.

v0.3.2 - Dynamic Symlinked Skill Router

Portable Web Toolkit v0.3.2

This release introduces the Dynamic Symlinked Skill Architecture for zero-context-bloat skill distribution across all AI coding tools (Antigravity, Cursor, Claude Code, Codex, Copilot).

Key Highlights

• portable-web-toolkit-router Minimalist Skill: Installed globally (~60 tokens idle cost) to dynamically inspect project needs and link required skills into .agents/skills/.
• manage-project-skills.mjs: Cross-platform manager utility for creating POSIX symlinks / Windows junctions in project scope with --auto optional skill detection.
• Fast-Lookup SKILL_INDEX.md: Selection matrix in docs/agent-skills/SKILL_INDEX.md for instant model routing.
• Scaffolding & Audit Integration: Automatic skill symlinking in project-init apply-safe and .agents/skills/ health auditing in site-readiness.
• Full Verification: 100% pass across release validation, skill governance, privacy scans, and unit tests.

Portable Web Toolkit v0.3.1

Portable Web Toolkit v0.3.1

This documentation hotfix corrects the contributor command for regenerating
skill content hashes. Use:

node ./scripts/update-skill-hashes.mjs

All v0.3.0 skill-governance, cross-client compatibility, validation, licensing,
privacy, and security improvements remain unchanged.