v2.5.5 release ritual — tag + ship td_ingest_url (post-PR-#56) (#57)

dreamrec · claude · web-flow · commit 797960bbb82a · 2026-05-19T18:02:16.000+03:00
PR-#56 landed the v2.5.5 source sweep (td_ingest_url MCP tool + argument-shape parity tests) on main with [skip-version-check] — the documented escape hatch in v2.5.4's tag-freshness CI gate. This commit runs the standard release ritual that was deferred: Version manifests (13/13 to v2.5.5): pyproject.toml, src/td_mcp/__init__.py, .claude-plugin/{plugin,marketplace}.json, npm/package.json, mcp/manifest.json, td_component/callbacks/_header.py (API_VERSION), README.md, plugin_README.md, npm/README.md, docs/MANUAL.md, skills/tdpilot-dpsk4-{core,production}/SKILL.md. Tool count 109 → 110 in user-visible descriptions: README badge + standalone-vs-CLI table, plugin_README.md (×2), both SKILL.md files (×4), npm/package.json description, .claude-plugin/marketplace.json (×2 descriptions), .claude-plugin/plugin.json description. Description extensions to mention td_ingest_url web-page ingestion: npm/package.json, .claude-plugin/marketplace.json (×2), .claude-plugin/plugin.json, plugin_README.md banner, both SKILL.md descriptions. CHANGELOG: "## Unreleased — v2.5.5 maintenance + early v2.6.3 slice" promoted to "## 2.5.5 - 2026-05-19" with proper release blurb + corrected .tox-rebuild note. PR-#56's "NOT REQUIRED" claim was based on a wrong premise — the API .tox source list (mcp/.tox-api-source-hash.json) ALSO includes td_component/callbacks/_header.py (the callbacks/ package is bundled into the API .tox for the chat-pipe's MCP-server fallback), so bumping API_VERSION triggers rebuild for BOTH .tox files, not just MCP. .tox artifacts (rebuilt 2026-05-19T14:56:50 inside TD 2025.32820): td_component/tdpilot-dpsk4.tox (MCP, hash 3dfaf709ff39a0be...) td_component/tdpilot_API.tox (API, hash 821f8a6604e031f9...) td_component/.tox-source-hash.json td_component/.tox-api-source-hash.json Verification (pre-commit local sweep): scripts/check_versions.py — synced at v2.5.5 scripts/check_tox_freshness.py — MCP fresh scripts/check_tox_api_freshness.py — API fresh ruff check + ruff format --check — clean scripts/check_no_personal_paths.sh — clean pytest -q (release-critical + cross-runtime + v2.5.5 + H-1 smoke) — 59/59 passing Tool count 109 → 110 (td_ingest_url, shipped in PR-#56). Source tests 2170 → 2205 passing (PR-#56's delta; this commit adds zero test changes). Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
@@ -1,16 +1,16 @@
 {
   "$schema": "https://anthropic.com/claude-code/marketplace.schema.json",
   "name": "dreamrec-TDPilot-dpsk4",
-  "description": "AI copilot for TouchDesigner (DeepSeek v4 optimized) \u2014 109 MCP tools for live node graph control, parameter management, diagnostics, safety, streaming, technique memory, knowledge corpus, focus + locations, hint injection, component notes, typed patch sessions, activity-log + journal hints, OCR sidecar, update awareness, tool approval gates, and trace viewer.",
+  "description": "AI copilot for TouchDesigner (DeepSeek v4 optimized) \u2014 110 MCP tools for live node graph control, parameter management, diagnostics, safety, streaming, technique memory, knowledge corpus, focus + locations, hint injection, component notes, typed patch sessions, activity-log + journal hints, OCR sidecar, update awareness, tool approval gates, trace viewer, and web-page ingestion (td_ingest_url).",
   "owner": {
     "name": "dreamrec",
     "email": "dreamrec@users.noreply.github.com"
   },
   "plugins": [
     {
       "name": "tdpilot-dpsk4",
-      "description": "AI copilot for TouchDesigner with live MCP control (DeepSeek v4 optimized) \u2014 109 tools (incl. v2.5 activity log, journal hints, OCR sidecar, update awareness, tool approval gates, trace viewer), focus + locations, hint injection, component notes, POPx inspection, knowledge corpus, project lifecycle, custom parameter authoring, snapshots, undo-block safety, and typed patch sessions. Works with Claude Desktop, Claude Code (DeepSeek v4 backend), and any MCP-compatible client.",
-      "version": "2.5.4",
+      "description": "AI copilot for TouchDesigner with live MCP control (DeepSeek v4 optimized) \u2014 110 tools (incl. v2.5 activity log, journal hints, OCR sidecar, update awareness, tool approval gates, trace viewer, td_ingest_url web ingestion), focus + locations, hint injection, component notes, POPx inspection, knowledge corpus, project lifecycle, custom parameter authoring, snapshots, undo-block safety, and typed patch sessions. Works with Claude Desktop, Claude Code (DeepSeek v4 backend), and any MCP-compatible client.",
+      "version": "2.5.5",
       "author": {
         "name": "silviu"
       },
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
@@ -1,7 +1,7 @@
 {
   "name": "tdpilot-dpsk4",
-  "version": "2.5.4",
-  "description": "TDPilot DPSK4 — AI copilot for TouchDesigner (DeepSeek v4 optimized). 109 MCP tools for live node graph control, parameter management, diagnostics, safety, streaming, knowledge corpus, focus + locations, hint injection, component notes, technique memory, typed patch sessions, tool-call activity log, journal hints, OCR sidecar (optional), update awareness, tool approval gates, and per-turn trace viewer.",
+  "version": "2.5.5",
+  "description": "TDPilot DPSK4 — AI copilot for TouchDesigner (DeepSeek v4 optimized). 110 MCP tools for live node graph control, parameter management, diagnostics, safety, streaming, knowledge corpus, focus + locations, hint injection, component notes, technique memory, typed patch sessions, tool-call activity log, journal hints, OCR sidecar (optional), update awareness, tool approval gates, per-turn trace viewer, and web-page ingestion (`td_ingest_url`).",
   "author": {
     "name": "silviu"
   },
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,12 +1,17 @@
 # Changelog
 
-## Unreleased — v2.5.5 maintenance + early v2.6.3 slice (2026-05-19)
+## 2.5.5 - 2026-05-19
 
-> Lands on `main` with `[skip-version-check]` because the v2.5.4 release
-> ritual completed earlier today and the next official version bump should
-> roll a few sessions' worth of work together. Once a v2.5.5 (or v2.6.0)
-> tag is cut, this header gets renamed and `mcp/manifest.json`'s
-> `tool_count` (already at 110 here) becomes the new floor.
+**v2.5.5 maintenance + early v2.6.3 slice.** Ships the `td_ingest_url`
+MCP tool (first slice of the v2.6.3 web-ingestion plan) + closes the
+v2.5.4 audit's "lower-frequency argument-shape parity gap" finding via
+two new cross-runtime tests. PR-#56 landed the source changes on `main`
+with `[skip-version-check]` (the documented escape hatch from the v2.5.4
+tag-freshness CI gate); this release follows up by bumping all 13
+version manifests, regenerating the MCP `.tox` against the v2.5.5
+`API_VERSION`, and tagging + publishing through the standard ritual.
+
+Tool count **109 → 110**. Tests **2170 → 2205 passing**.
 
 ### 🆕 `td_ingest_url` — v2.6.3 first slice
 
@@ -89,11 +94,18 @@ snapshot regenerated to include `td_ingest_url`.
 Source-only sweep: 2170 → **2205 passing** (+35, +0 regressions; 4
 skipped: 1 paddleocr E2E + 3 mock-eval scenarios pending fixture capture).
 
-### `.tox` rebuild — NOT REQUIRED for this commit
-
-All changes are `src/td_mcp/` (MCP-server-side Python) + tests + docs.
-Zero `td_component/` changes. Both `.tox` source-hash gates stay green
-without a rebuild.
+### Both `.tox` files rebuilt against v2.5.5 `API_VERSION`
+
+The source-only sweep (PR-#56) shipped to `main` with zero
+`td_component/` changes and both `.tox` gates green. The v2.5.5 tag
+ritual bumps `td_component/callbacks/_header.py::API_VERSION` from
+`"2.5.4"` to `"2.5.5"` — one byte change in a single file. That file
+is in the source list for **both** the MCP `.tox`
+(`td_component/.tox-source-hash.json`) and the API `.tox`
+(`td_component/.tox-api-source-hash.json`, where the `callbacks/`
+package is included for the chat-pipe's bundled MCP-server fallback),
+so the version bump trips both freshness gates. Both files rebuilt in
+TouchDesigner 2025.32820 against the v2.5.5 sources.
 
 ---
 
diff --git a/README.md b/README.md
@@ -7,14 +7,14 @@
    ╚═╝   ╚═════╝ ╚═╝     ╚═╝╚══════╝ ╚═════╝    ╚═╝
 ```
 
-# TDPilot — DeepSeek v4 · v2.5.4
+# TDPilot — DeepSeek v4 · v2.5.5
 
 [![CI](https://github.com/dreamrec/TDPilot_deepseekv4/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/dreamrec/TDPilot_deepseekv4/actions/workflows/ci.yml)
 [![npm](https://img.shields.io/npm/v/tdpilot-dpsk4?label=npm)](https://www.npmjs.com/package/tdpilot-dpsk4)
 [![downloads](https://img.shields.io/npm/dm/tdpilot-dpsk4?label=downloads)](https://www.npmjs.com/package/tdpilot-dpsk4)
 [![license](https://img.shields.io/badge/license-MIT-blue)](./LICENSE)
 [![python](https://img.shields.io/badge/python-3.10%2B-blue)](./pyproject.toml)
-[![tools](https://img.shields.io/badge/tools-95%20%28standalone%29%20%C2%B7%20109%20%28CLI%29-blueviolet)](./docs/MANUAL.md)
+[![tools](https://img.shields.io/badge/tools-95%20%28standalone%29%20%C2%B7%20110%20%28CLI%29-blueviolet)](./docs/MANUAL.md)
 [![TouchDesigner](https://img.shields.io/badge/TouchDesigner-2025.30000%2B-ff6200)](https://derivative.ca)
 [![DeepSeek](https://img.shields.io/badge/DeepSeek-v4-00a86b)](https://deepseek.com)
 
@@ -28,7 +28,7 @@ Two ways to run it. They coexist in the same TD project if you want both.
 |---|---|---|
 | **Install effort** | Drag one file in, paste a key. | Install Claude Code, install the plugin, configure MCP. |
 | **Where chat lives** | Browser tab + a panel inside TD. | Your Claude Code terminal. |
-| **Tools** | 95 curated for in-TD use | 109 (full surface) |
+| **Tools** | 95 curated for in-TD use | 110 (full surface) |
 | **Best for** | Live performance, quick patches, demos, "no setup" use | Heavy multi-file projects, long sessions, full Claude Code ecosystem |
 | **TD port** | 9987 | 9985 + 9986 |
 | **Config dir** | `~/.tdpilot-api/` | `~/.tdpilot-dpsk4/` |
diff --git a/docs/MANUAL.md b/docs/MANUAL.md
@@ -1,4 +1,4 @@
-# TDPilot v2.5.4 Manual
+# TDPilot v2.5.5 Manual
 
 The full reference. Read the [README](../README.md) first if you haven't installed yet — this manual assumes you've got either the standalone .tox or the Claude Code plugin running.
 
diff --git a/mcp/manifest.json b/mcp/manifest.json
@@ -2,7 +2,7 @@
   "schema_version": 1,
   "name": "TDPilot DPSK4",
   "slug": "tdpilot-dpsk4",
-  "version": "2.5.4",
+  "version": "2.5.5",
   "repository": "https://github.com/dreamrec/TDPilot_deepseekv4",
   "description": "MCP server for TouchDesigner (DeepSeek v4 optimized) with live graph control, diagnostics, safety, streaming, knowledge corpus, technique memory, and typed patch sessions.",
   "entrypoints": {
diff --git a/npm/README.md b/npm/README.md
@@ -1,4 +1,4 @@
-# TDPilot v2.5.4
+# TDPilot v2.5.5
 
 [![CI](https://github.com/dreamrec/TDPilot_deepseekv4/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/dreamrec/TDPilot_deepseekv4/actions/workflows/ci.yml)
 [![npm](https://img.shields.io/npm/v/tdpilot-dpsk4?label=npm)](https://www.npmjs.com/package/tdpilot-dpsk4)
diff --git a/npm/package.json b/npm/package.json
@@ -1,7 +1,7 @@
 {
   "name": "tdpilot-dpsk4",
-  "version": "2.5.4",
-  "description": "AI copilot for TouchDesigner with live MCP control (DeepSeek v4 optimized) \u2014 109 tools (incl. v2.5: td_get_activity_log, td_ocr_image, td_check_for_updates, td_get_traces, tool approval gates), focus + locations, hint injection, component notes, POPx inspection, knowledge corpus, project lifecycle control, technique memory, typed patch sessions.",
+  "version": "2.5.5",
+  "description": "AI copilot for TouchDesigner with live MCP control (DeepSeek v4 optimized) \u2014 110 tools (incl. v2.5: td_get_activity_log, td_ocr_image, td_check_for_updates, td_get_traces, tool approval gates; v2.5.5: td_ingest_url web ingestion), focus + locations, hint injection, component notes, POPx inspection, knowledge corpus, project lifecycle control, technique memory, typed patch sessions.",
   "keywords": [
     "touchdesigner",
     "mcp",
diff --git a/plugin_README.md b/plugin_README.md
@@ -1,11 +1,11 @@
-# TDPilot v2.5.4 — TouchDesigner AI Assistant Plugin
+# TDPilot v2.5.5 — TouchDesigner AI Assistant Plugin
 
 This plugin installs the **DPSK4 (Claude Code CLI) variant** of TDPilot.
 Two variants ship in the same repo:
 
 | Variant | This plugin? | Install | Best for |
 |---|---|---|---|
-| **TDPilot DPSK4** (Claude Code MCP) | ✅ yes | `/plugin install tdpilot-dpsk4@…` | 109 tools, full Claude Code plugin ecosystem |
+| **TDPilot DPSK4** (Claude Code MCP) | ✅ yes | `/plugin install tdpilot-dpsk4@…` | 110 tools, full Claude Code plugin ecosystem |
 | **TDPilot API** (standalone .tox) | ❌ separate path | drag `td_component/tdpilot_API.tox` into TD | self-contained, no CLI, in-TD chat |
 
 For the standalone .tox path, see the [main README](https://github.com/dreamrec/TDPilot_deepseekv4#readme) and the [MANUAL](https://github.com/dreamrec/TDPilot_deepseekv4/blob/main/docs/MANUAL.md). Both variants coexist in the same TD project (different ports + COMP names + config dirs).
@@ -14,7 +14,7 @@ For the standalone .tox path, see the [main README](https://github.com/dreamrec/
 
 ---
 
-TDPilot v2.5.4 provides 109 MCP tools for live control of TouchDesigner projects from Claude Code, optimized for DeepSeek v4. The bundled `.tox` includes a one-button installer (drag-drop into TD, click "Bootstrap All", done) — no manual setup script.
+TDPilot v2.5.5 provides 110 MCP tools for live control of TouchDesigner projects from Claude Code, optimized for DeepSeek v4 (v2.5.5 adds `td_ingest_url` for fetching HTTPS pages into Markdown context). The bundled `.tox` includes a one-button installer (drag-drop into TD, click "Bootstrap All", done) — no manual setup script.
 
 ## Components
 
diff --git a/pyproject.toml b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "tdpilot-dpsk4"
-version = "2.5.4"
+version = "2.5.5"
 description = "MCP server for live control of TouchDesigner — create, inspect, connect, and manipulate nodes via AI agents"
 readme = "README.md"
 license = "MIT"
diff --git a/skills/tdpilot-dpsk4-core/SKILL.md b/skills/tdpilot-dpsk4-core/SKILL.md
@@ -1,7 +1,7 @@
 ---
 name: tdpilot-dpsk4-core
 description: >
-  Core patching discipline for TDPilot DPSK4 v2.5.4 (DeepSeek v4 optimized, 109 tools) — the AI assistant inside TouchDesigner. v2.5.0 adds activity log + journal hints, OCR sidecar, tool approval gates, update awareness, and a trace viewer. v2.5.1 ships the chat-pipe `td_get_traces` alias; v2.5.2 fixes cycle-detect orphan-`tool_use`; v2.5.3 preserves rollback hints on cycle-detect; v2.5.4 hardens the MCP webserver (default-secure auth, Origin allowlist, traceback redaction, snapshot path-sandbox regression tests). Updated for TD build 2025.32820 (May 2026): Trace/Triangulate POP, DMX POP pipeline, Layer Mix TOP, Render Simple TOP, NVIDIA RTX Video TOP, ST2110 I/O, color-management overhaul, native 3D textures/2D arrays, unified pattern matching.
+  Core patching discipline for TDPilot DPSK4 v2.5.5 (DeepSeek v4 optimized, 110 tools) — the AI assistant inside TouchDesigner. v2.5.0 adds activity log + journal hints, OCR sidecar, tool approval gates, update awareness, and a trace viewer. v2.5.1 ships the chat-pipe `td_get_traces` alias; v2.5.2 fixes cycle-detect orphan-`tool_use`; v2.5.3 preserves rollback hints on cycle-detect; v2.5.4 hardens the MCP webserver (default-secure auth, Origin allowlist, traceback redaction, snapshot path-sandbox regression tests); v2.5.5 adds `td_ingest_url` for fetching HTTPS pages into Markdown context (SSRF-sandboxed, no redirects, markitdown-backed). Updated for TD build 2025.32820 (May 2026): Trace/Triangulate POP, DMX POP pipeline, Layer Mix TOP, Render Simple TOP, NVIDIA RTX Video TOP, ST2110 I/O, color-management overhaul, native 3D textures/2D arrays, unified pattern matching.
   Use this skill whenever working with TouchDesigner through the td_ MCP tools.
   It governs how you build, debug, modify, and maintain TD projects: clean node
   layouts with color coding, error checking after every operation, visual
@@ -12,9 +12,9 @@ description: >
   project lifecycle, technique memory, everything.
 ---
 
-# TDPilot DPSK4 Core v2.5.4 — Patching Discipline (109 tools, TD 2025.32820)
+# TDPilot DPSK4 Core v2.5.5 — Patching Discipline (110 tools, TD 2025.32820)
 
-You are an AI assistant working live inside a TouchDesigner project. You have full control through 109 MCP tools — but control without discipline creates mess. This skill defines how you work.
+You are an AI assistant working live inside a TouchDesigner project. You have full control through 110 MCP tools — but control without discipline creates mess. This skill defines how you work.
 
 The goal: every action you take should leave the project cleaner, more readable, and more stable than you found it. You're not generating throwaway demos — you're working inside someone's real project.
 
diff --git a/skills/tdpilot-dpsk4-production/SKILL.md b/skills/tdpilot-dpsk4-production/SKILL.md
@@ -1,17 +1,18 @@
 ---
 name: tdpilot-dpsk4-production
 description: >
-  Production-grade TouchDesigner MCP workflow for TDPilot DPSK4 v2.5.4 (DeepSeek v4 optimized, 109 tools):
+  Production-grade TouchDesigner MCP workflow for TDPilot DPSK4 v2.5.5 (DeepSeek v4 optimized, 110 tools):
   staged edits with undo blocks, rollback safety via snapshots (auto-rollback
   hint preservation across cycle-detect since v2.5.3), token-efficient
   diagnostics, strict completion gates, tool approval gates for destructive
   operations, activity log + journal hints for loop detection, default-secure
-  MCP auth + Origin allowlist + traceback redaction (v2.5.4). For core patching
+  MCP auth + Origin allowlist + traceback redaction (v2.5.4), web-page
+  ingestion via td_ingest_url (v2.5.5, SSRF-sandboxed). For core patching
   discipline (layout, error checking, parameter authoring, POP inspection,
   technique memory), see tdpilot-dpsk4-core.
 ---
 
-# TDPilot DPSK4 Production v2.5.4 (TD 2025.32820)
+# TDPilot DPSK4 Production v2.5.5 (TD 2025.32820)
 
 ## Use This Skill When
 - The user asks for reliable, production-safe network edits.
diff --git a/src/td_mcp/__init__.py b/src/td_mcp/__init__.py
@@ -1,6 +1,6 @@
 """TouchDesigner MCP Server — AI-powered control of TouchDesigner via MCP."""
 
-__version__ = "2.5.4"
+__version__ = "2.5.5"
 
 # Canonical .tox filename. The TD component's API_VERSION lives inside the
 # .tox itself (see ``td_component/callbacks/_header.py`` since v1.8.3), so
diff --git a/td_component/.tox-api-source-hash.json b/td_component/.tox-api-source-hash.json
@@ -1,6 +1,6 @@
 {
-  "tox_source_hash": "af7dc03f1027b6bb59666bdd13a55088275146affe763eb681a6b22f8e1274a7",
-  "built_at": "2026-05-19T13:40:39.882016+00:00",
+  "tox_source_hash": "821f8a6604e031f94fc59322108a8823d34b8c4a3619f8fc738d66f0b52ffbbd",
+  "built_at": "2026-05-19T14:56:50.088792+00:00",
   "source_files": [
     "td_component/tdpilot_api_agent.py",
     "td_component/tdpilot_api_dispatcher.py",
diff --git a/td_component/.tox-source-hash.json b/td_component/.tox-source-hash.json
@@ -1,6 +1,6 @@
 {
-  "tox_source_hash": "8208bf7d04573ab8c88aaf6a8cd112cef56078f7db6c1679aaef63eb03b6258e",
-  "built_at": "2026-05-19T13:40:39.312495+00:00",
+  "tox_source_hash": "3dfaf709ff39a0be4e7345060ef2a2178b49ccf864bbd534116644acc1c57e32",
+  "built_at": "2026-05-19T14:56:50.472611+00:00",
   "source_files": [
     "td_component/callbacks/_composer.py",
     "td_component/callbacks/__init__.py",
diff --git a/td_component/callbacks/_header.py b/td_component/callbacks/_header.py
@@ -26,7 +26,7 @@
 # Configuration
 # ─────────────────────────────────────────────────────────────
 
-API_VERSION = "2.5.4"
+API_VERSION = "2.5.5"
 SCREENSHOT_TEMP_PATH = os.path.join(os.environ.get('TEMP', os.environ.get('TMP', '/tmp')), 'td_mcp_screenshot.jpg')
 
 # Auth + policy env is read at CALL TIME, not import time — otherwise TD's
diff --git a/td_component/tdpilot-dpsk4.tox b/td_component/tdpilot-dpsk4.tox
diff --git a/td_component/tdpilot_API.tox b/td_component/tdpilot_API.tox
diff --git a/uv.lock b/uv.lock

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# TDPilot v2.5.4 Manual`
	`1`	`+# TDPilot v2.5.5 Manual`
`2`	`2`
`3`	`3`	`The full reference. Read the [README](../README.md) first if you haven't installed yet — this manual assumes you've got either the standalone .tox or the Claude Code plugin running.`
`4`	`4`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# TDPilot v2.5.4`
	`1`	`+# TDPilot v2.5.5`
`2`	`2`
`3`	`3`	`[![CI](https://github.com/dreamrec/TDPilot_deepseekv4/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/dreamrec/TDPilot_deepseekv4/actions/workflows/ci.yml)`
`4`	`4`	`[![npm](https://img.shields.io/npm/v/tdpilot-dpsk4?label=npm)](https://www.npmjs.com/package/tdpilot-dpsk4)`