v0.9.91 MCP Clients as Providers with Session Replay and Google Sheets

.github/workflows/chrome-extension.yml

@@ -6,12 +6,14 @@ on:
     paths:
       - 'extension/**'
       - 'scripts/package-extension.mjs'
+      - 'scripts/sync-product-version.mjs'
       - 'scripts/validate-extension.mjs'
       - 'tests/**'
       - 'package.json'
       - 'package-lock.json'
       - 'mcp/**'
       - '.github/workflows/chrome-extension.yml'
+      - '.github/workflows/npm-publish.yml'
     tags:
       - 'extension-v*'
   workflow_dispatch:
@@ -22,28 +24,30 @@ concurrency:
 
 jobs:
   package:
-    name: validate, test, package
+    name: validate, test, and package extension
     runs-on: ubuntu-latest
     permissions:
       contents: write
+    outputs:
+      version: ${{ steps.extension-version.outputs.version }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
 
       - uses: actions/setup-node@v4
         with:
           node-version: '20'
 
-      - name: Install root deps
-        run: npm install --no-audit --no-fund
-
-      - name: Install mcp deps
-        run: npm --prefix mcp install --no-audit --no-fund
-
-      - name: Install showcase/server deps (needed by server-telemetry tests in npm test chain)
-        run: npm --prefix showcase/server install --no-audit --no-fund
+      - name: Verify independent product versions
+        run: npm run version:check
 
-      - name: Install showcase/angular deps (needed by fsb-telemetry-service + build-smoke + privacy-page tests in npm test chain)
-        run: npm --prefix showcase/angular install --no-audit --no-fund
+      - name: Install exact dependency trees
+        run: |
+          npm ci --no-audit --no-fund
+          npm --prefix mcp ci --no-audit --no-fund
+          npm --prefix showcase/server ci --no-audit --no-fund
+          npm --prefix showcase/angular ci --no-audit --no-fund
 
       - name: Validate extension
         run: npm run validate:extension
@@ -54,59 +58,61 @@ jobs:
       - name: Package Chrome extension
         run: npm run package:extension
 
-      - name: Read extension version
-        id: extension_version
+      - name: Read canonical extension version
+        id: extension-version
         run: |
-          node -e "const { version } = require('./extension/manifest.json'); console.log('version=' + version)" >> "$GITHUB_OUTPUT"
+          node -e "require('fs').appendFileSync(process.env.GITHUB_OUTPUT, 'version=' + require('./extension/manifest.json').version + String.fromCharCode(10))"
+
+      - name: Bind tag to canonical extension version
+        if: startsWith(github.ref, 'refs/tags/extension-v')
+        run: test "$GITHUB_REF_NAME" = "extension-v${{ steps.extension-version.outputs.version }}"
 
-      - name: Upload Chrome extension artifact
+      - name: Require the tagged commit to be on main
+        if: startsWith(github.ref, 'refs/tags/extension-v')
+        run: |
+          git fetch origin main --no-tags
+          release_commit="$(git rev-list -n 1 "$GITHUB_REF_NAME")"
+          git merge-base --is-ancestor "$release_commit" origin/main
+
+      - name: Verify version-bound extension archive
+        run: test -f "dist/fsb-extension-v${{ steps.extension-version.outputs.version }}.zip"
+
+      - name: Upload version-bound extension artifact
         uses: actions/upload-artifact@v4
         with:
-          name: fsb-extension-v${{ steps.extension_version.outputs.version }}
-          path: dist/fsb-extension-v*.zip
+          name: fsb-extension-v${{ steps.extension-version.outputs.version }}
+          path: dist/fsb-extension-v${{ steps.extension-version.outputs.version }}.zip
           if-no-files-found: error
 
-      # On extension-v* tag pushes, also attach the zip to the matching
-      # GitHub Release. Mirrors the pattern in .github/workflows/npm-publish.yml.
-      # The if-guard keeps main-branch pushes artifact-only (no Release touch).
-      - name: Attach zip to GitHub Release
+      - name: Create extension GitHub release
         if: startsWith(github.ref, 'refs/tags/extension-v')
         uses: softprops/action-gh-release@v2
         with:
-          files: dist/fsb-extension-v*.zip
+          name: FSB extension v${{ steps.extension-version.outputs.version }}
+          body: |
+            FSB Chrome extension v${{ steps.extension-version.outputs.version }}.
+
+            Install from the Chrome Web Store when available, or use the attached package for a supervised manual installation.
+          files: dist/fsb-extension-v${{ steps.extension-version.outputs.version }}.zip
           fail_on_unmatched_files: true
+          generate_release_notes: true
 
   publish-cws:
-    name: publish to Chrome Web Store
+    name: publish extension to Chrome Web Store
     needs: package
     if: startsWith(github.ref, 'refs/tags/extension-v') && vars.CWS_PUBLISH_ENABLED == 'true'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-node@v4
+      - name: Download version-bound extension artifact
+        uses: actions/download-artifact@v4
         with:
-          node-version: '20'
-
-      - name: Install root deps
-        run: npm install --no-audit --no-fund
-
-      - name: Install mcp deps
-        run: npm --prefix mcp install --no-audit --no-fund
-
-      - name: Rebuild Chrome extension zip
-        run: npm run package:extension
-
-      - name: Resolve zip path
-        id: zip
-        run: |
-          ZIP=$(ls dist/fsb-extension-v*.zip | head -n1)
-          echo "path=$ZIP" >> "$GITHUB_OUTPUT"
+          name: fsb-extension-v${{ needs.package.outputs.version }}
+          path: dist
 
       - name: Upload to Chrome Web Store
         uses: mnao305/chrome-extension-upload@v5.0.0
         with:
-          file-path: ${{ steps.zip.outputs.path }}
+          file-path: dist/fsb-extension-v${{ needs.package.outputs.version }}.zip
           extension-id: ${{ secrets.CWS_EXTENSION_ID }}
           client-id: ${{ secrets.CWS_CLIENT_ID }}
           client-secret: ${{ secrets.CWS_CLIENT_SECRET }}

.github/workflows/ci.yml

@@ -23,14 +23,14 @@ jobs:
       - name: Install root deps
         run: npm install --no-audit --no-fund
       - name: Install mcp deps (needed by root test script)
-        run: npm --prefix mcp install --no-audit --no-fund
+        run: npm --prefix mcp ci --no-audit --no-fund
       - name: Install showcase/server deps (needed by server-telemetry tests in npm test chain)
         run: npm --prefix showcase/server install --no-audit --no-fund
       - name: Install showcase/angular deps (needed by fsb-telemetry-service + build-smoke + privacy-page tests)
         run: npm --prefix showcase/angular install --no-audit --no-fund
       - name: Validate extension (manifest + JS syntax)
         run: npm run validate:extension
-      - name: Run extension + bridge contract tests
+      - name: Phase 65 Codex contract (sole Linux root invocation)
         run: npm test
 
   mcp-smoke:
@@ -44,12 +44,99 @@ jobs:
       - name: Install root deps
         run: npm install --no-audit --no-fund
       - name: Install mcp deps
-        run: npm --prefix mcp install --no-audit --no-fund
+        run: npm --prefix mcp ci --no-audit --no-fund
       - name: Build MCP server (TypeScript)
         run: npm --prefix mcp run build
+      - name: Phase 62 adapter drift smoke
+        run: node tests/mcp-agent-drift-smoke.test.js
       - name: MCP lifecycle + tools smoke
         run: npm run test:mcp-smoke
 
+  native-host-windows:
+    name: native host (Windows PE + pack)
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+      - name: Install MCP dependencies
+        run: npm --prefix mcp ci --no-audit --no-fund
+      - name: Locate MSVC developer command prompt
+        shell: pwsh
+        run: |
+          $vswhere = Join-Path ${env:ProgramFiles(x86)} 'Microsoft Visual Studio\Installer\vswhere.exe'
+          if (-not (Test-Path $vswhere)) {
+            throw "vswhere.exe was not found at $vswhere"
+          }
+          $installationPath = & $vswhere -latest -products '*' -requires Microsoft.VisualStudio.Component.VC.Tools.x86.x64 -property installationPath | Select-Object -First 1
+          if (-not $installationPath) {
+            throw 'No Visual Studio installation with the MSVC C++ toolchain was found'
+          }
+          $devCmd = Join-Path $installationPath 'Common7\Tools\VsDevCmd.bat'
+          if (-not (Test-Path $devCmd)) {
+            throw "VsDevCmd.bat was not found at $devCmd"
+          }
+          "VSDEVCMD=$devCmd" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append
+      - name: Build x64 native-host bootstrap
+        shell: cmd
+        run: |
+          call "%VSDEVCMD%" -arch=x64 -host_arch=x64
+          if errorlevel 1 exit /b %errorlevel%
+          node scripts/build-native-host-windows.mjs --arch x64
+      - name: Build arm64 native-host bootstrap
+        shell: cmd
+        run: |
+          call "%VSDEVCMD%" -arch=arm64 -host_arch=x64
+          if errorlevel 1 exit /b %errorlevel%
+          node scripts/build-native-host-windows.mjs --arch arm64
+      - name: Verify both PE artifacts and write package metadata
+        shell: cmd
+        run: |
+          call "%VSDEVCMD%" -arch=x64 -host_arch=x64
+          if errorlevel 1 exit /b %errorlevel%
+          node scripts/build-native-host-windows.mjs --arch all --verify-only --metadata-out mcp/native-host/windows-artifacts.json
+      - name: Execute the x64 bootstrap and safe registry-helper harnesses
+        run: node tests/mcp-native-host-packaging.test.js --section windows-bootstrap
+      - name: Inspect the staged npm package
+        working-directory: mcp
+        run: npm pack --dry-run --ignore-scripts --json
+      - name: Read package version
+        id: package-version
+        shell: pwsh
+        run: |
+          node -e "require('fs').appendFileSync(process.env.GITHUB_OUTPUT, 'version=' + require('./mcp/package.json').version + String.fromCharCode(10))"
+      - name: Upload version-bound Windows bootstrap artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: fsb-native-host-${{ steps.package-version.outputs.version }}
+          if-no-files-found: error
+          path: |
+            mcp/native-host/bin/win32-x64/fsb-native-host.exe
+            mcp/native-host/bin/win32-x64/fsb-native-host-registry.exe
+            mcp/native-host/bin/win32-arm64/fsb-native-host.exe
+            mcp/native-host/bin/win32-arm64/fsb-native-host-registry.exe
+            mcp/native-host/windows-artifacts.json
+
+  runtime-payload:
+    name: native runtime payload (${{ matrix.os }})
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+      - name: Install MCP dependencies from the committed lock
+        run: npm --prefix mcp ci --no-audit --no-fund
+      - name: Build the package payload
+        run: npm --prefix mcp run build
+      - name: Prove complete offline payload and negative cases
+        run: node tests/mcp-native-host-packaging.test.js --section workflow-and-pack
+
   website:
     name: showcase (build + crawler smoke)
     runs-on: ubuntu-latest
@@ -88,7 +175,7 @@ jobs:
 
   all-green:
     name: all-green
-    needs: [extension, mcp-smoke, website]
+    needs: [extension, mcp-smoke, website, native-host-windows, runtime-payload]
     runs-on: ubuntu-latest
     steps:
       - run: echo "All required CI checks passed."