-
v0.3.4 — the gateway first, lab_api_* as the fallback
StableAll checks were successfulci / check (push) Successful in 13sreleased this
2026-10-27 19:26:09 +00:00 | 1 commits to main since this releaseoss-oo.io for Claude Code
In this release
- Two doors to the whole API, one guard. Once the laboratory's gateway lists
api_spec,api_readandapi_write(laboratory#163), the skill and the tool descriptions prefer them, for three reasons:- they serve every agent family alike;
- their answers also give
total_countand the paginglink; - a per-token budget caps their request rate.
lab_api_*stay as the direct fallback. They are used only when the gateway's tools are not listed or a call cannot reach the gateway at all.- Door rules:
- A guard refusal is never retried on the other door.
- A budget 429 is waited out once. If the gateway is still limited, the session stops and tells the user; it never switches doors for a 429.
- If the fallback fails as well, the session stops.
- More precise texts:
- The gateway's own limits are named.
- The
identityoption driveslab_api_*too. - An asset upload needs a file body, which neither door sends.
- No code path changes. Until the gateway lists the tools,
lab_api_*are the only door. After the gateway deploy, the preference takes effect without another release.
Update
git -C ~/tools/oss-oo-claude-plugin fetch origin tag v0.3.4 git -C ~/tools/oss-oo-claude-plugin checkout v0.3.4 claude plugin update oss-oo@oss-oo🤖 Generated with Claude Code
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Two doors to the whole API, one guard. Once the laboratory's gateway lists
-
v0.3.3 — no redirects, one policy with the gateway
StableAll checks were successfulci / check (push) Successful in 12sreleased this
2026-10-27 18:59:06 +00:00 | 2 commits to main since this releaseoss-oo.io for Claude Code
In this release
- No redirect is followed, for any method.
- A resource the laboratory moved, a renamed repository for example, is reported with its new path. Call again with that path, or with the new
OWNER/REPOinlab_ciandlab_watch. - Up to v0.3.2, same-origin redirects were followed. The token was sent again and the guard never saw the new path. A redirected
POSTturned into aGETthat was reported asHTTP 200, and other 3xx answers counted as success.
- A resource the laboratory moved, a renamed repository for example, is reported with its new path. Call again with that path, or with the new
- One policy with the laboratory's gateway:
lab_api_specreports the SHA-256 of the guard's decision tables,b4e86f74…. The gateway's copy pins the same value, and the tests here pin it too. - The token never shows.
- Should the laboratory ever send it back, the core replaces it as the answer arrives, before anything is cut or printed.
- Error text from the server is bounded and printable.
- A keyring entry that is not an API token is refused.
- Clean errors instead of tracebacks for:
- a malformed redirect;
- a cut answer;
- JSON nested too deeply;
- an API description that is not one;
- a request that cannot be written.
- Query values without a JSON spelling (NaN, infinities, numbers too long to print) are refused before anything is sent.
Update
git -C ~/tools/oss-oo-claude-plugin fetch origin tag v0.3.3 git -C ~/tools/oss-oo-claude-plugin checkout v0.3.3 claude plugin update oss-oo@oss-oo🤖 Generated with Claude Code
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- No redirect is followed, for any method.
-
v0.3.2 — oversized PR numbers refused cleanly
StableAll checks were successfulci / check (push) Successful in 9sreleased this
2026-10-27 16:59:01 +00:00 | 3 commits to main since this releaseoss-oo.io for Claude Code
In this release
- A PR number longer than 18 digits is refused cleanly, with a short echo that names the limit. Before, a huge number crashed
labci.py; the family security bench found it (case S5b). - No other changes since v0.3.1.
Update
git -C ~/tools/oss-oo-claude-plugin fetch origin tag v0.3.2 git -C ~/tools/oss-oo-claude-plugin checkout v0.3.2 claude plugin update oss-oo@oss-oo🤖 Generated with Claude Code
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- A PR number longer than 18 digits is refused cleanly, with a short echo that names the limit. Before, a huge number crashed
-
v0.3.1 — merge checks by REST
StableAll checks were successfulci / check (push) Successful in 9sreleased this
2026-10-27 16:28:21 +00:00 | 4 commits to main since this releaseoss-oo.io for Claude Code
In this release
- The skill confirms a merge with
lab_api_readon/repos/OWNER/REPO/pulls/N. The gateway'sget_pull_requestdoes not reportmergedyet (laboratory#162 adds it), so a merged PR and one closed without merging look the same there. - No code changes since v0.3.0.
Update
git -C ~/tools/oss-oo-claude-plugin fetch origin tag v0.3.1 git -C ~/tools/oss-oo-claude-plugin checkout v0.3.1 claude plugin update oss-oo@oss-oo🤖 Generated with Claude Code
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- The skill confirms a merge with
-
v0.3.0 — the whole laboratory API
StableAll checks were successfulci / check (push) Successful in 9sreleased this
2026-10-27 16:18:11 +00:00 | 5 commits to main since this releaseoss-oo.io for Claude Code: the laboratory's pull requests and their CI, and now the whole laboratory API, followed and used from Claude Code.
New in 0.3.0
lab_api_specsearches the laboratory's API description (500+ operations): method, path, parameters, and whether the plugin allows the call.lab_api_readperforms anyGET, with query parameters; long answers are cut, with a note to page.lab_api_writehandles project work with a JSON body:- issues, pull requests, comments, reviews, labels and milestones
- releases and assets, tags, branches, files and commit statuses
- topics, description and website, avatar and social preview
- wiki, workflow dispatch, notifications and agent work grants
- new repositories and forks
- Guarded: writes are an allow-list approved by the owner (63 operations). Settings, runners, mirrors, access, accounts and deleting repositories or organizations stay with the owner. Reads are open except for credential routes. All three tools run as the agent identity.
Install or update
git -C ~/tools/oss-oo-claude-plugin fetch origin tag v0.3.0 git -C ~/tools/oss-oo-claude-plugin checkout v0.3.0 claude plugin update oss-oo@oss-ooVerification
- Review: a security review turned the first deny-list into this allow-list. An independent edge-case suite (410 tests, 3,324 sub-cases, shipped in
lab/test_guard_edges.py) found no bypass, and every gap it found is fixed. - Tests: 444 Python tests, 18 mod tests,
claude plugin validate, and the asset check pass. CI is green.
🤖 Generated with Claude Code
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
v0.2.1 — oss-oo.io for Claude Code
StableAll checks were successfulci / check (push) Successful in 4sreleased this
2026-10-27 14:52:19 +00:00 | 6 commits to main since this releaseoss-oo.io for Claude Code: the laboratory's pull requests and their CI, followed from Claude Code.
In this release
- The laboratory gets its own name everywhere. The social preview (re-rendered), README, skill, tool description, manifest, comments and test data now say "laboratory".
- No behaviour changes since v0.2.0.
Install or update
git -C ~/tools/oss-oo-claude-plugin fetch origin tag v0.2.1 git -C ~/tools/oss-oo-claude-plugin checkout v0.2.1 claude plugin update oss-oo@oss-ooFor a new install or an upgrade from 0.1.x, see the README.
Verification
- Gate: 28 Python tests, the asset check,
claude plugin validate, and 16 of 16 mod tests. - CI: green.
- Review: an independent review found it merge-ready.
🤖 Generated with Claude Code
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
v0.2.0 — oss-oo.io for Claude Code
StableAll checks were successfulci / check (push) Successful in 4sreleased this
2026-10-27 14:47:41 +00:00 | 7 commits to main since this releaseoss-oo.io for Claude Code: the laboratory's pull requests and their CI, followed from Claude Code.
The desktop app's own PR/CI monitor cannot follow oss-oo.io pull requests (the laboratory's
/pulls/<n>URLs). This plugin does.What it gives a session
- Gateway: the laboratory's remote MCP gateway,
plugin:oss-oo:oss-oo, for repositories, issues, pull requests, merges, memory and hand-offs. It authenticates as the agent identityclaudethrough aheadersHelperthat reads the desktop keyring and checks that the token is the agent's own. - CI reader (read-only):
lab_cifollows the PR head to runs, jobs and steps by id and gives a verdict.lab_ci_logshows the failed step's log, failure lines first.lab_watch/lab_unwatchrun a background watcher with a status line and the oss-oo.io CI pane.
- Wake events: a
<lab-ci-event>wakes the session:- when the CI is final, and again after a re-run or new push
- when a run waits for approval
- when no run starts within 20 minutes
- when the PR is merged or closed
- Skill
oss-oo:oss-oo-io: WIP drafts, watching instead of polling, merging after an independent review.
In this release
- First release, with:
- #3 hardening: an independent review fixed:
- forgeable wake events
- the token following cross-origin redirects
- the environment choosing host or identity
- lost or missing wakes, now with retry, backoff and give-up
- verdict edge cases
- the guards against registrar tools and against printing the token
- #4 rename: plugin id
oss-oo, skilloss-oo-io, and every label "oss-oo.io".
Install
git clone https://oss-oo.io/OSS-OO/claude-plugin.git ~/tools/oss-oo-claude-plugin git -C ~/tools/oss-oo-claude-plugin checkout v0.2.0 claude plugin marketplace add ~/tools/oss-oo-claude-plugin claude plugin install oss-oo@oss-oo --scope userIt needs
python3,secret-tool, and an agent token in the keyring underservice oss-oo-api,user claude.Upgrading from 0.1.x (
oss-oo-lab@oss-oo): see the README. Uninstall the old id first; options and permission rules do not carry over.Verification
- Gate: 28 Python tests, the deterministic asset check,
claude plugin validate, and 16 mod tests. - CI: green on
main(run 2056). - Live: a desktop session woke on its own when a watched PR's CI finished.
- Review: five rounds by an independent reviewer for the hardening, plus a review of the rename, with the upgrade path simulated in a throwaway config.
Code MIT; artwork CC BY-SA 4.0 (derived from the oss-oo.io brand pack).
🤖 Generated with Claude Code
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Gateway: the laboratory's remote MCP gateway,