Skip to content

chore(mcp): complete WayforthRank/WRI scrub + bump 0.9.1 (staged republish — review before publish) - #62

Merged
WayforthOfficial merged 1 commit into
mainfrom
chore/wayforth-mcp-scrub-republish
Jun 27, 2026
Merged

chore(mcp): complete WayforthRank/WRI scrub + bump 0.9.1 (staged republish — review before publish)#62
WayforthOfficial merged 1 commit into
mainfrom
chore/wayforth-mcp-scrub-republish

Conversation

@WayforthOfficial

Copy link
Copy Markdown
Owner

Staged for review — do NOT publish until you've seen this. Closes the live WayforthRank/WRI exposure in the published wayforth-mcp.

Why

The #47 scrub fixed the repo + gateway but never reached the published package: PyPI wayforth-mcp 0.9.0 (and Smithery, which serves latest via uvx) still ships WayforthRank/WRI in tool descriptions. And #47 missed the WRI acronym in 5 more files (README.md, reliability.py, run.py, execute.py, compare.py) — leaking in both published and repo HEAD (my first "repo clean" check only matched WayforthRank, not WRI — caught by the full grep you asked for).

What this does (one publish closes it completely)

  • Scrubs prose WRIreliability score / Reliability across README + 4 tool files.
  • Kept (deliberate — output contract / public API, already exposed via the gateway, not a trade-secret-name leak): the wri_score / original_wri / fallback_wri response fields and the wayforth_set_wri_alert tool name (renaming would break clients).
  • Bumps 0.8.14 → 0.9.1 (one above published 0.9.0).

Proof

  • Diff is only the WRI prose scrub + the bump — 6 files, 14/14 lines, no accidental changes; field names visibly preserved (e.g. {svc['wri_score']}, {failover.get('original_wri')} unchanged, only the WRI labelReliability). All .py parse.
  • Built the artifacts from HEAD (uv build): wayforth_mcp-0.9.1.tar.gz + .whl → grep of both = 0 WRI/WayforthRank hits. The republish is clean and reproducible from HEAD.
  • After this, HEAD has zero uppercase WRI and zero WayforthRank anywhere in the package.

Judgment calls to confirm

  1. Keeping wri_score/wri field names (already public via the gateway JSON) — vs renaming them (a breaking output-contract change). I kept them.
  2. Keeping the wayforth_set_wri_alert tool name (public API) — scrubbed only its description.

Publish plan after you approve: merge → uv publish 0.9.1 → Smithery auto-picks it up (latest, no separate Smithery action).

🤖 Generated with Claude Code

The #47 scrub fixed the repo + gateway but never reached the published wayforth-mcp
(PyPI 0.9.0, served by Smithery as latest) — so WayforthRank/WRI is still live in the
version users install. AND #47 missed the 'WRI' acronym in 5 more files (README,
reliability/run/execute/compare) that were leaking in BOTH published and repo HEAD.

This completes the scrub so ONE republish fully closes the exposure: WRI prose ->
'reliability score'/'Reliability' across README + 4 tool files. KEPT (output contract /
public API, already exposed via the gateway, not a trade-secret-name leak): the
wri_score / original_wri / fallback_wri response fields and the wayforth_set_wri_alert
tool name. Version 0.8.14 -> 0.9.1 (one above published 0.9.0).

After this, HEAD has ZERO uppercase WRI + ZERO WayforthRank anywhere in the package;
a republish from HEAD is clean + reproducible. STAGED for review — do NOT publish yet.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@railway-app
railway-app Bot temporarily deployed to wayforth / wayforth-pr-62 June 27, 2026 17:25 Destroyed
@WayforthOfficial
WayforthOfficial merged commit ec91b2c into main Jun 27, 2026
3 of 4 checks passed
@WayforthOfficial
WayforthOfficial deleted the chore/wayforth-mcp-scrub-republish branch June 27, 2026 17:29
WayforthOfficial added a commit that referenced this pull request Jun 27, 2026
…63)

Repo HEAD version fields had drifted BELOW what's actually published, so the repo
disagreed with reality. For these three, the published artifact's CODE matches repo
HEAD (verified by diffing the published artifacts) — only the version string was
behind. This aligns them; no republish needed (the published versions already exist
and match the code).

  sdk-python  (PyPI wayforth-sdk)      0.8.14 -> 0.9.0   (code already == published 0.9.0)
  sdk-typescript (npm wayforth-sdk)    0.8.0  -> 0.9.0   (src == published 0.9.0; dist built at publish)
  create-wayforth-agent (npm)          0.9.0  -> 0.9.1   (code already == published 0.9.1)

Version-string only; no code/formatting changes. wayforth-langgraph already in sync
(0.9.0). The wayforth-mcp desync is a real exposure handled separately in #62 (it
needs an actual republish). The TS-SDK 0.10.0 work is preserved on origin branch
chore/consolidate-ts-sdk-source for a future cut.

Co-authored-by: MytelligentPRV <assulindor@gmail.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants