claw-code/.guardrails/docs/RELEASE_v1.10.0.md

4.7 KiB

Release v1.10.0 - MCP Gap Implementation & Web UI

Release Date: 2026-02-08 Version: 1.10.0 Branch: mcpserver


Overview

This release delivers three major workstreams:

  1. MCP Gap Implementation - 5 new tools and 6 new resources for comprehensive agent safety
  2. Web UI Management Interface - Complete SPA for human administrators
  3. Documentation Parity - Organized 73 markdown files with consolidation and search

What's New

MCP Gap Implementation (5 New Tools)

Tool Purpose Use Case
guardrail_validate_scope File path scope validation Ensure agents only touch authorized files
guardrail_validate_commit Conventional commit validation Enforce commit message standards
guardrail_prevent_regression Pattern-based regression prevention Check code against known failure patterns
guardrail_check_test_prod_separation Environment isolation verification Prevent test/production mixing
guardrail_validate_push Git push safety validation Block dangerous push operations

MCP Documentation Resources (6 New Resources)

Resource Content
guardrail://docs/agent-guardrails Core safety protocols
guardrail://docs/four-laws Four Laws of Agent Safety (canonical)
guardrail://docs/halt-conditions When to stop and ask
guardrail://docs/workflows Workflow documentation index
guardrail://docs/standards Standards documentation index
guardrail://docs/pre-work-checklist Pre-work regression checklist

Web UI Management Interface

Complete Single Page Application with:

  • Dashboard - System stats, health status, quick actions
  • Documents - Browse, search, view, edit documentation
  • Rules - Full CRUD for prevention rules with toggle switches
  • Projects - Manage projects with guardrail context
  • Failures - View and update failure registry entries
  • IDE Tools - Live code validation interface

Location: http://localhost:8080/web (when server is running)

Technology:

  • Pure JavaScript (no frameworks)
  • CSS variables for theming
  • Hash-based SPA routing
  • 26 API endpoints covered

Documentation Parity

  • 73 markdown files organized and indexed
  • Four Laws consolidated to single canonical source
  • 10 actionable rules extracted to JSON format
  • Document ingestion script created for full-text search
  • INDEX_MAP.md updated with new entries

Files Added/Modified

New Files

mcp-server/internal/mcp/tools_extended.go
mcp-server/internal/mcp/resources_extended.go
mcp-server/internal/models/validation.go
mcp-server/internal/web/server.go
mcp-server/web/
  ├── index.html
  ├── css/variables.css
  ├── css/components.css
  ├── css/layout.css
  ├── js/api.js
  ├── js/app.js
  ├── js/router.js
  ├── js/components/
  │   ├── Navigation.js
  │   ├── DataTable.js
  │   ├── Forms.js
  │   ├── Modal.js
  │   └── Toast.js
  └── js/pages/
      ├── Dashboard.js
      ├── Documents.js
      ├── Rules.js
      ├── Projects.js
      ├── Failures.js
      └── IDETools.js
.guardrails/prevention-rules/extracted-rules.json
scripts/ingest_docs.go
docs/sprints/SPRINT_001_MCP_GAP_IMPLEMENTATION.md
docs/sprints/SPRINT_002_WEB_UI_IMPLEMENTATION.md
docs/sprints/SPRINT_003_DOCUMENTATION_PARITY.md
docs/RELEASE_v1.10.0.md

Modified Files

CHANGELOG.md
README.md
docs/AGENT_GUARDRAILS.md
INDEX_MAP.md
mcp-server/internal/mcp/server.go

Migration Guide

For MCP Server Users

No breaking changes. The new tools and resources are additive.

To use new tools:

  1. Update your MCP client to use the new tool names
  2. No configuration changes required

For Web UI Users

Access the Web UI at http://localhost:8080/web when the server is running.

No additional setup required - the Web UI is served statically from the server.


Testing

Build Verification

cd mcp-server
go build ./cmd/server
go test ./...

Web UI Verification

# Start the server
./mcp-server/cmd/server/server

# Open browser
open http://localhost:8080/web

MCP Tools Verification

Connect to the SSE endpoint and test new tools:

curl http://localhost:8080/mcp/v1/sse

Known Issues

None identified in testing.


Security Considerations

  • All new tools validate inputs before processing
  • Web UI uses existing authentication mechanisms
  • Document resources are read-only
  • No secrets or credentials exposed

Contributors

  • TheArchitectit - Implementation and coordination
  • Automated agents - Sprint execution

Full Changelog: See CHANGELOG.md