@jstn-sdk/ma 0.14.0 → 0.14.1

package/docs/qa/{release-issue-gates-0.14.0.json → release-issue-gates-0.14.1.json}

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "1.0.0",
-  "releaseVersion": "0.14.0",
-  "releaseTag": "v0.14.0",
+  "releaseVersion": "0.14.1",
+  "releaseTag": "v0.14.1",
   "previousVersion": "0.1.12",
   "passContract": {
     "allIssuesMustPassProduction": true,
@@ -13,9 +13,9 @@
       "number": 13,
       "title": "[feature] Meta tracking: next-release core gated lanes and runtime maturity program",
       "url": "https://github.com/JustineDevs/meta-architect/issues/13",
-      "releaseVersion": "0.14.0",
-      "releaseTag": "v0.14.0",
-      "milestone": "v0.14.0",
+      "releaseVersion": "0.14.1",
+      "releaseTag": "v0.14.1",
+      "milestone": "v0.14.1",
       "status": "passed",
       "requiredProof": [
         "All child next-release issues are individually passed with evidence.",
@@ -26,11 +26,11 @@
       "proof": {
         "implementationEvidence": [
           "Child issues #14, #15, #16, #17, #18, #19, #20, #21, #22, #23, #24, #25, #26, #27, #28, #29 are individually marked passed in this gate with implementation, verification, and production evidence.",
-          "docs/qa/release-readiness-0.14.0.md links this gate as the canonical v0.14.0 issue proof artifact.",
+          "docs/qa/release-readiness-0.14.1.md links this gate as the canonical v0.14.1 issue proof artifact.",
           "src/release-issue-gates.js validates all tracked issue statuses, labels, proof arrays, milestone, release version, and release tag."
         ],
         "verificationEvidence": [
-          "node-based validateReleaseIssueGates(document, { version: 0.14.0 }) returns valid true after this evidence update.",
+          "node-based validateReleaseIssueGates(document, { version: 0.14.1 }) returns valid true after this evidence update.",
           "test/release-issue-gates.test.js covers failing pending gates and passing proof gates.",
           "npm run check passed after core implementation changes (Biome checked 117 files).",
           "npm test passed after core implementation changes (30/30 tests).",
@@ -45,15 +45,15 @@
           "npm run release:check is the required final production release gate for this issue set."
         ]
       },
-      "labels": ["feature", "next-release", "v0.14.0"]
+      "labels": ["feature", "next-release", "v0.14.1"]
     },
     {
       "number": 14,
       "title": "[feature] Reconcile core gated lane contracts and harden the `$build` state loop",
       "url": "https://github.com/JustineDevs/meta-architect/issues/14",
-      "releaseVersion": "0.14.0",
-      "releaseTag": "v0.14.0",
-      "milestone": "v0.14.0",
+      "releaseVersion": "0.14.1",
+      "releaseTag": "v0.14.1",
+      "milestone": "v0.14.1",
       "status": "passed",
       "requiredProof": [
         "Core gated lane contracts are implemented in repo code and prompts.",
@@ -83,15 +83,15 @@
           "npm run release:check is the required final production release gate for this issue set."
         ]
       },
-      "labels": ["feature", "next-release", "v0.14.0"]
+      "labels": ["feature", "next-release", "v0.14.1"]
     },
     {
       "number": 15,
       "title": "[feature] Add the operational scratchpad layer and `maestro-state.json` control-plane ledger",
       "url": "https://github.com/JustineDevs/meta-architect/issues/15",
-      "releaseVersion": "0.14.0",
-      "releaseTag": "v0.14.0",
-      "milestone": "v0.14.0",
+      "releaseVersion": "0.14.1",
+      "releaseTag": "v0.14.1",
+      "milestone": "v0.14.1",
       "status": "passed",
       "requiredProof": [
         "Scratchpad and maestro-state ledger are implemented with safe ownership boundaries.",
@@ -119,15 +119,15 @@
           "npm run release:check is the required final production release gate for this issue set."
         ]
       },
-      "labels": ["feature", "next-release", "v0.14.0"]
+      "labels": ["feature", "next-release", "v0.14.1"]
     },
     {
       "number": 16,
       "title": "[feature] Add read-only supply-chain exposure intake and build circuit-breaker orchestration",
       "url": "https://github.com/JustineDevs/meta-architect/issues/16",
-      "releaseVersion": "0.14.0",
-      "releaseTag": "v0.14.0",
-      "milestone": "v0.14.0",
+      "releaseVersion": "0.14.1",
+      "releaseTag": "v0.14.1",
+      "milestone": "v0.14.1",
       "status": "passed",
       "requiredProof": [
         "Supply-chain intake is read-only and cannot mutate release state directly.",
@@ -157,15 +157,15 @@
           "npm run release:check is the required final production release gate for this issue set."
         ]
       },
-      "labels": ["feature", "next-release", "v0.14.0"]
+      "labels": ["feature", "next-release", "v0.14.1"]
     },
     {
       "number": 17,
       "title": "[feature] Add the Redaction Gateway for provider-bound context sanitization",
       "url": "https://github.com/JustineDevs/meta-architect/issues/17",
-      "releaseVersion": "0.14.0",
-      "releaseTag": "v0.14.0",
-      "milestone": "v0.14.0",
+      "releaseVersion": "0.14.1",
+      "releaseTag": "v0.14.1",
+      "milestone": "v0.14.1",
       "status": "passed",
       "requiredProof": [
         "Provider-bound context sanitization is implemented.",
@@ -192,15 +192,15 @@
           "npm run release:check is the required final production release gate for this issue set."
         ]
       },
-      "labels": ["feature", "next-release", "v0.14.0"]
+      "labels": ["feature", "next-release", "v0.14.1"]
     },
     {
       "number": 18,
       "title": "[feature] Add the Alignment Sentinel for runtime drift detection and bounded worker reboot",
       "url": "https://github.com/JustineDevs/meta-architect/issues/18",
-      "releaseVersion": "0.14.0",
-      "releaseTag": "v0.14.0",
-      "milestone": "v0.14.0",
+      "releaseVersion": "0.14.1",
+      "releaseTag": "v0.14.1",
+      "milestone": "v0.14.1",
       "status": "passed",
       "requiredProof": [
         "Runtime drift detection is implemented.",
@@ -227,15 +227,15 @@
           "npm run release:check is the required final production release gate for this issue set."
         ]
       },
-      "labels": ["feature", "next-release", "v0.14.0"]
+      "labels": ["feature", "next-release", "v0.14.1"]
     },
     {
       "number": 19,
       "title": "[feature] Add the Synthetic Workspace Virtualizer for low-overhead bounded verification",
       "url": "https://github.com/JustineDevs/meta-architect/issues/19",
-      "releaseVersion": "0.14.0",
-      "releaseTag": "v0.14.0",
-      "milestone": "v0.14.0",
+      "releaseVersion": "0.14.1",
+      "releaseTag": "v0.14.1",
+      "milestone": "v0.14.1",
       "status": "passed",
       "requiredProof": [
         "Synthetic workspace virtualization is implemented without replacing real release checks.",
@@ -262,15 +262,15 @@
           "npm run release:check is the required final production release gate for this issue set."
         ]
       },
-      "labels": ["feature", "next-release", "v0.14.0"]
+      "labels": ["feature", "next-release", "v0.14.1"]
     },
     {
       "number": 20,
       "title": "[feature] Add the Quorum Review Engine as an optional high-assurance `$build` substep",
       "url": "https://github.com/JustineDevs/meta-architect/issues/20",
-      "releaseVersion": "0.14.0",
-      "releaseTag": "v0.14.0",
-      "milestone": "v0.14.0",
+      "releaseVersion": "0.14.1",
+      "releaseTag": "v0.14.1",
+      "milestone": "v0.14.1",
       "status": "passed",
       "requiredProof": [
         "Quorum review is available as an optional high-assurance substep.",
@@ -297,15 +297,15 @@
           "npm run release:check is the required final production release gate for this issue set."
         ]
       },
-      "labels": ["feature", "next-release", "v0.14.0"]
+      "labels": ["feature", "next-release", "v0.14.1"]
     },
     {
       "number": 21,
       "title": "[feature] Add an incremental code graph and bounded `$rehearse` trajectory mode",
       "url": "https://github.com/JustineDevs/meta-architect/issues/21",
-      "releaseVersion": "0.14.0",
-      "releaseTag": "v0.14.0",
-      "milestone": "v0.14.0",
+      "releaseVersion": "0.14.1",
+      "releaseTag": "v0.14.1",
+      "milestone": "v0.14.1",
       "status": "passed",
       "requiredProof": [
         "Incremental code graph support is implemented.",
@@ -332,15 +332,15 @@
           "npm run release:check is the required final production release gate for this issue set."
         ]
       },
-      "labels": ["feature", "next-release", "v0.14.0"]
+      "labels": ["feature", "next-release", "v0.14.1"]
     },
     {
       "number": 22,
       "title": "[feature] Add the multi-agent skills registry and exported compatibility payload contract",
       "url": "https://github.com/JustineDevs/meta-architect/issues/22",
-      "releaseVersion": "0.14.0",
-      "releaseTag": "v0.14.0",
-      "milestone": "v0.14.0",
+      "releaseVersion": "0.14.1",
+      "releaseTag": "v0.14.1",
+      "milestone": "v0.14.1",
       "status": "passed",
       "requiredProof": [
         "Universal and non-universal agent registry is implemented.",
@@ -367,15 +367,15 @@
           "npm run release:check is the required final production release gate for this issue set."
         ]
       },
-      "labels": ["feature", "next-release", "v0.14.0"]
+      "labels": ["feature", "next-release", "v0.14.1"]
     },
     {
       "number": 23,
       "title": "[feature] Harden Linux packaging and cross-agent install verification against the real release contract",
       "url": "https://github.com/JustineDevs/meta-architect/issues/23",
-      "releaseVersion": "0.14.0",
-      "releaseTag": "v0.14.0",
-      "milestone": "v0.14.0",
+      "releaseVersion": "0.14.1",
+      "releaseTag": "v0.14.1",
+      "milestone": "v0.14.1",
       "status": "passed",
       "requiredProof": [
         "Linux package artifacts build for Debian, Arch, and RPM lanes.",
@@ -390,32 +390,32 @@
           "test/package-install-smoke.test.js and test/package-exports.test.js cover install and package export behavior."
         ],
         "verificationEvidence": [
-          "npm run linux:packages:build passed and produced dist/meta-architect_0.14.0_all.deb, dist/meta-architect-0.14.0-1-any.pkg.tar.xz, and dist/meta-architect-0.14.0-1.noarch.rpm.",
+          "npm run linux:packages:build passed and produced dist/meta-architect_0.14.1_all.deb, dist/meta-architect-0.14.1-1-any.pkg.tar.xz, and dist/meta-architect-0.14.1-1.noarch.rpm.",
           "npm run linux:packages:smoke passed against extracted package payloads.",
-          "npm run release:assets passed and validated all v0.14.0 release artifacts plus dist/linux-package-manifest.json.",
+          "npm run release:assets passed and validated all v0.14.1 release artifacts plus dist/linux-package-manifest.json.",
           "npm run check passed after core implementation changes (Biome checked 117 files).",
           "npm test passed after core implementation changes (30/30 tests).",
           "node bin/ma.js doctor returned READY after runtime artifact validation.",
           "node bin/ma.js status reported Evidence VERIFIED, Logic GREEN, Security GREEN, Experience GREEN, and Build DONE."
         ],
         "productionEvidence": [
-          "dist/meta-architect_0.14.0_all.deb validated by release:assets at 1889688 bytes.",
-          "dist/meta-architect-0.14.0-1-any.pkg.tar.xz validated by release:assets at 1892412 bytes.",
-          "dist/meta-architect-0.14.0-1.noarch.rpm validated by release:assets at 1990404 bytes.",
+          "dist/meta-architect_0.14.1_all.deb validated by release:assets at 1889688 bytes.",
+          "dist/meta-architect-0.14.1-1-any.pkg.tar.xz validated by release:assets at 1892412 bytes.",
+          "dist/meta-architect-0.14.1-1.noarch.rpm validated by release:assets at 1990404 bytes.",
           "node bin/ma.js status exercised the shipped CLI runtime and reported all release lanes green.",
           "node bin/ma.js doctor exercised install/runtime readiness checks and returned READY.",
           "npm run release:check is the required final production release gate for this issue set."
         ]
       },
-      "labels": ["feature", "next-release", "v0.14.0"]
+      "labels": ["feature", "next-release", "v0.14.1"]
     },
     {
       "number": 24,
       "title": "[feature] Add Obsidian Integration Core as default vault/plugin capability",
       "url": "https://github.com/JustineDevs/meta-architect/issues/24",
-      "releaseVersion": "0.14.0",
-      "releaseTag": "v0.14.0",
-      "milestone": "v0.14.0",
+      "releaseVersion": "0.14.1",
+      "releaseTag": "v0.14.1",
+      "milestone": "v0.14.1",
       "status": "passed",
       "requiredProof": [
         "Obsidian integration is default core, not optional.",
@@ -447,15 +447,15 @@
           "npm run release:check is the required final production release gate for this issue set."
         ]
       },
-      "labels": ["feature", "next-release", "v0.14.0"]
+      "labels": ["feature", "next-release", "v0.14.1"]
     },
     {
       "number": 25,
       "title": "[feature] Add Context Economy Core as default compression capability",
       "url": "https://github.com/JustineDevs/meta-architect/issues/25",
-      "releaseVersion": "0.14.0",
-      "releaseTag": "v0.14.0",
-      "milestone": "v0.14.0",
+      "releaseVersion": "0.14.1",
+      "releaseTag": "v0.14.1",
+      "milestone": "v0.14.1",
       "status": "passed",
       "requiredProof": [
         "Context economy is default core across applicable capabilities.",
@@ -486,15 +486,15 @@
           "npm run release:check is the required final production release gate for this issue set."
         ]
       },
-      "labels": ["feature", "next-release", "v0.14.0"]
+      "labels": ["feature", "next-release", "v0.14.1"]
     },
     {
       "number": 26,
       "title": "[feature] Add Ralph Execution Core as default maestro execution engine",
       "url": "https://github.com/JustineDevs/meta-architect/issues/26",
-      "releaseVersion": "0.14.0",
-      "releaseTag": "v0.14.0",
-      "milestone": "v0.14.0",
+      "releaseVersion": "0.14.1",
+      "releaseTag": "v0.14.1",
+      "milestone": "v0.14.1",
       "status": "passed",
       "requiredProof": [
         "Ralph execution core is default where autonomous execution applies.",
@@ -522,15 +522,15 @@
           "npm run release:check is the required final production release gate for this issue set."
         ]
       },
-      "labels": ["feature", "next-release", "v0.14.0"]
+      "labels": ["feature", "next-release", "v0.14.1"]
     },
     {
       "number": 27,
       "title": "[feature] Add Workspace Intelligence Runtime Core semantic composition contracts",
       "url": "https://github.com/JustineDevs/meta-architect/issues/27",
-      "releaseVersion": "0.14.0",
-      "releaseTag": "v0.14.0",
-      "milestone": "v0.14.0",
+      "releaseVersion": "0.14.1",
+      "releaseTag": "v0.14.1",
+      "milestone": "v0.14.1",
       "status": "passed",
       "requiredProof": [
         "Workspace intelligence runtime contracts are implemented.",
@@ -559,15 +559,15 @@
           "npm run release:check is the required final production release gate for this issue set."
         ]
       },
-      "labels": ["feature", "next-release", "v0.14.0"]
+      "labels": ["feature", "next-release", "v0.14.1"]
     },
     {
       "number": 28,
       "title": "[feature] Add Prompt Strategy Core as default MA prompt-policy capability",
       "url": "https://github.com/JustineDevs/meta-architect/issues/28",
-      "releaseVersion": "0.14.0",
-      "releaseTag": "v0.14.0",
-      "milestone": "v0.14.0",
+      "releaseVersion": "0.14.1",
+      "releaseTag": "v0.14.1",
+      "milestone": "v0.14.1",
       "status": "passed",
       "requiredProof": [
         "Prompt strategy is default core across applicable roles and skills.",
@@ -598,15 +598,15 @@
           "npm run release:check is the required final production release gate for this issue set."
         ]
       },
-      "labels": ["feature", "next-release", "v0.14.0"]
+      "labels": ["feature", "next-release", "v0.14.1"]
     },
     {
       "number": 29,
       "title": "[feature] Add Active Autonomy Contract Core to prevent passive chatbot behavior",
       "url": "https://github.com/JustineDevs/meta-architect/issues/29",
-      "releaseVersion": "0.14.0",
-      "releaseTag": "v0.14.0",
-      "milestone": "v0.14.0",
+      "releaseVersion": "0.14.1",
+      "releaseTag": "v0.14.1",
+      "milestone": "v0.14.1",
       "status": "passed",
       "requiredProof": [
         "Active autonomy contract is default core across applicable agents and roles.",
@@ -638,7 +638,7 @@
           "npm run release:check is the required final production release gate for this issue set."
         ]
       },
-      "labels": ["feature", "next-release", "v0.14.0"]
+      "labels": ["feature", "next-release", "v0.14.1"]
     }
   ]
 }

package/docs/qa/{release-readiness-0.14.0.md → release-readiness-0.14.1.md}

@@ -1,26 +1,26 @@
-# Release Readiness 0.14.0
+# Release Readiness 0.14.1
 
 ## Production bar
 
-`v0.14.0` is treated as production only when:
+`v0.14.1` is treated as production only when:
 - the package installs cleanly from the canonical public install command
 - the Codex-hosted runtime path works end to end
 - the helper flow remains valid for scripted verification
 - the singular `$maestro` umbrella and helper-skill contract stay coherent
-- release docs, package metadata, and workflows all agree on `0.14.0`
+- release docs, package metadata, and workflows all agree on `0.14.1`
 
 Target release state:
-- npm package: `@jstn-sdk/ma@0.14.0`
+- npm package: `@jstn-sdk/ma@0.14.1`
 - npm registry state: pending publish
-- publishability note: `0.14.0` is already published, so `0.14.0` is the next publishable package line
-- git tag: `v0.14.0`
-- GitHub release: pending publish for `v0.14.0`
+- publishability note: `0.14.0` is already published, so `0.14.1` is the next publishable package line
+- git tag: `v0.14.1`
+- GitHub release: pending publish for `v0.14.1`
 
 ## Production checklist
 
 - skills-first product identity: PASS
 - package/plugin identity aligned to `@jstn-sdk/ma`: PASS
-- version/tag alignment `0.14.0` / `v0.14.0`: PASS
+- version/tag alignment `0.14.1` / `v0.14.1`: PASS
 - install/uninstall docs aligned: PASS
 - onboarding is concise and sequential: PASS
 - helper command documented as secondary: PASS
@@ -36,7 +36,7 @@ Target release state:
 - workflow/release/provenance docs aligned: PASS
 - no stale package names remain in tracked repo surfaces: PASS
 - no conflicting CLI-first product story remains in tracked product docs: PASS
-- issue proof gates for `v0.14.0`: PASS; `release-issue-gates-0.14.0.json` marks issues `#13-#29` passed with implementation, verification, and production evidence, so release verification can enforce the gate artifact instead of blocking on pending issue states
+- issue proof gates for `v0.14.1`: PASS; `release-issue-gates-0.14.1.json` marks issues `#13-#29` passed with implementation, verification, and production evidence, so release verification can enforce the gate artifact instead of blocking on pending issue states
 
 ## Automated checks run
 
@@ -71,10 +71,10 @@ That should prove:
 Issue gate artifact:
 
 ```text
-docs/qa/release-issue-gates-0.14.0.json
+docs/qa/release-issue-gates-0.14.1.json
 ```
 
-Every open issue assigned to `v0.14.0` must remain in this file until it is production-passed. A passed issue requires:
+Every open issue assigned to `v0.14.1` must remain in this file until it is production-passed. A passed issue requires:
 - implementation evidence
 - verification evidence
 - production evidence
@@ -93,7 +93,7 @@ Helper-path validation:
 
 ```bash
 ma setup
-ma idea "Harden Meta-Architect v0.14.0 semantic core with Obsidian vault context, Ralph execution proof, context economy, and package-gated release evidence"
+ma idea "Harden Meta-Architect v0.14.1 semantic core with Obsidian vault context, Ralph execution proof, context economy, and package-gated release evidence"
 ma run '$arch'
 ma run '$sage'
 ma run '$flow'

package/docs/release-spec.md

@@ -1,13 +1,13 @@
-# v0.14.0 Requirements & Rules
+# v0.14.1 Requirements & Rules
 
 ## Production definition
 
-Meta-Architect `v0.14.0` is production only when:
+Meta-Architect `v0.14.1` is production only when:
 1. the package/install surface works
 2. the in-session skill workflow from `$arch` through `$build` works
 3. the release evidence matches the actual package and git tag
 
-## What `v0.14.0` must have
+## What `v0.14.1` must have
 
 ### 1. Canonical package/runtime path
 
@@ -54,16 +54,16 @@ Canonical state files:
 
 ### 4. Required release evidence
 
-- `package.json` version `0.14.0`
-- git tag `v0.14.0`
+- `package.json` version `0.14.1`
+- git tag `v0.14.1`
 - `RELEASE.md`
 - `CHANGELOG.md`
-- `docs/qa/release-readiness-0.14.0.md`
-- `docs/qa/release-issue-gates-0.14.0.json`
+- `docs/qa/release-readiness-0.14.1.md`
+- `docs/qa/release-issue-gates-0.14.1.json`
 - green `npm run release:check`
-- GitHub release asset `meta-architect_0.14.0_all.deb`
-- GitHub release asset `meta-architect-0.14.0-1-any.pkg.tar.xz`
-- GitHub release asset `meta-architect-0.14.0-1.noarch.rpm`
+- GitHub release asset `meta-architect_0.14.1_all.deb`
+- GitHub release asset `meta-architect-0.14.1-1-any.pkg.tar.xz`
+- GitHub release asset `meta-architect-0.14.1-1.noarch.rpm`
 - green `npm run linux:packages:build`
 - green `npm run linux:packages:smoke`
 - green `npm run release:assets`
@@ -107,11 +107,11 @@ Canonical state files:
 
 ### 6.2 Issue proof gates
 
-Every open next-release issue must be represented in `docs/qa/release-issue-gates-0.14.0.json`.
+Every open next-release issue must be represented in `docs/qa/release-issue-gates-0.14.1.json`.
 
 Production pass rule:
 - issue status must be `passed`
-- issue milestone must match `v0.14.0`
+- issue milestone must match `v0.14.1`
 - implementation evidence must be present
 - verification evidence must be present
 - production evidence must be present

package/docs/vendor-plugin-publishing.md

@@ -0,0 +1,49 @@
+# Vendor Plugin Publishing
+
+The existing `plugins/meta-architect` directory is the only hand-authored plugin source. Build vendor outputs from it:
+
+```bash
+npm run plugin:build -- --targets all --output ./dist/vendor-plugins
+```
+
+Publishing is explicit and one host at a time. It is a dry run unless `--execute` is supplied:
+
+```bash
+npm run plugin:publish -- --target pi
+```
+
+Pi consumes the existing `@jstn-sdk/ma` package; no second npm package is created. Claude Code, Cursor, Antigravity, Gemini CLI, OpenCode, Cline, Continue, Goose, and OpenClaw use host-specific Git, marketplace, extension, or workspace distribution flows; `plugin:publish` prepares those native inputs and does not pretend a local npm command publishes them.
+
+The builder produces one directory per host. It copies the existing lane skills and adds only the host manifest, rules, context file, or package metadata required by that host. It never creates a second workflow or changes the canonical skills.
+
+ChatGPT is not included as a generated local plugin target. ChatGPT
+publication requires a deployed HTTPS MCP backend, authentication, privacy
+materials, and OpenAI review. See [ChatGPT Integration](./chatgpt-integration.md)
+for the exact readiness contract.
+
+## Outputs
+
+| Target | Output | Mode |
+| --- | --- | --- |
+| `codex` | `.codex-plugin/`, `skills/`, app and MCP metadata | native |
+| `claude-code` | Claude marketplace plus plugin source | native |
+| `cursor` | Cursor marketplace plus plugin source and rules | native |
+| `antigravity` | `plugin.json`, `skills/`, `rules/` | native |
+| `gemini-cli` | `gemini-extension.json`, `GEMINI.md`, `skills/` | native |
+| `opencode` | `.opencode/skills/`, `AGENTS.md` | native |
+| `pi` | `@jstn-sdk/ma` package with `pi.skills` metadata | native |
+| `cline` | `.clinerules`, `.cline/skills/` | native |
+| `openclaw` | workspace `skills/` and `AGENTS.md` | portable |
+| `continue` | `.continue/rules/` and portable skills | portable |
+| `goose` | workspace `skills/` and `AGENTS.md` | portable |
+
+Portable means the generated bundle is usable as project context and skills, but this repository does not invent a host runtime plugin or claim marketplace publication. A host-specific publisher still requires the host account, repository, or review process.
+
+## Verification
+
+```bash
+npm test -- test/plugin-build.test.js
+npm run plugin:verify
+```
+
+Inspect `BUILD-MANIFEST.json` in each output before publishing. It records the generated version, source, support mode, and the host-specific install/publish action.

package/mcp/local/code-intel.js

@@ -1,10 +1,10 @@
-import { execFile } from "node:child_process";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { promisify } from "node:util";
 import { getRepoRoot } from "../../src/paths.js";
+import { safeExecFile } from "../../src/process-utils.js";
 
-const execFileAsync = promisify(execFile);
+const execFileAsync = promisify(safeExecFile);
 const MAX_SCAN_BYTES = 1024 * 1024;
 const ignoredDirs = new Set([
   ".git",
@@ -103,7 +103,13 @@ async function listGitFiles(rootDir) {
     const { stdout } = await execFileAsync(
       "git",
       ["ls-files", "--cached", "--others", "--exclude-standard", "-z"],
-      { cwd: rootDir, encoding: "buffer", maxBuffer: 4 * 1024 * 1024 },
+      {
+        cwd: rootDir,
+        encoding: "buffer",
+        maxBuffer: 4 * 1024 * 1024,
+        timeout: 10_000,
+        shell: false,
+      },
     );
     return stdout
       .toString("utf8")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jstn-sdk/ma",
-  "version": "0.14.0",
+  "version": "0.14.1",
   "description": "Codex-native skills system for architecture, evidence, review, and gated build guidance.",
   "license": "MIT",
   "author": "JustineDevs",
@@ -9,6 +9,11 @@
     "type": "git",
     "url": "git+https://github.com/JustineDevs/meta-architect.git"
   },
+  "pi": {
+    "skills": [
+      "./skills"
+    ]
+  },
   "bugs": {
     "url": "https://github.com/JustineDevs/meta-architect/issues"
   },
@@ -49,6 +54,8 @@
     "docs/quality.md",
     "docs/codex-integration.md",
     "docs/autonomous-tasks.md",
+    "docs/vendor-plugin-publishing.md",
+    "docs/assets/banner.png",
     "docs/reference/",
     "docs/qa/",
     "data/",
@@ -71,7 +78,6 @@
   "scripts": {
     "prepare": "husky",
     "prepack": "node ./scripts/prepack.js",
-    "postinstall": "node ./scripts/postinstall.js",
     "test": "node --test --test-concurrency=1 test/*.test.js",
     "test:disk": "node --test --test-concurrency=1 test/test-fixtures.test.js",
     "fixtures:cleanup": "bash ./scripts/cleanup-test-fixtures.sh",
@@ -86,13 +92,16 @@
     "release:verify": "node ./scripts/release-verify.js",
     "release:assets": "node ./.github/scripts/validate-release-assets.js",
     "release:assets:generate": "node ./.github/scripts/validate-release-assets.js --generate",
-    "release:check": "npm run release:verify && npm run skills:manifest && npm run plugin:sync && npm run skills:validate && npm run plugin:verify && npm run skills:pack && npm run check && npm test && npm run pack:inspect",
+    "release:check": "npm run release:verify && npm run skills:manifest && npm run plugin:sync && npm run plugin:build:all && npm run skills:validate && npm run plugin:verify && npm run skills:pack && npm run check && npm test && npm run pack:inspect",
     "skills:manifest": "node ./scripts/skills-manifest.js",
     "skills:validate": "node ./scripts/skills-validate.js",
     "skills:install": "node ./scripts/skills-install.js",
     "skills:pack": "node ./scripts/skills-pack.js",
     "plugin:sync": "node ./scripts/plugin-sync.js",
     "plugin:verify": "node ./scripts/plugin-sync.js --check",
+    "plugin:build": "node ./scripts/plugin-build.js",
+    "plugin:build:all": "node ./scripts/plugin-build.js --targets all --output ./dist/vendor-plugins",
+    "plugin:publish": "node ./scripts/plugin-publish.js",
     "pack:inspect": "npm pack --dry-run --ignore-scripts --cache ./.npm-cache",
     "package:size": "node ./scripts/package-size-check.mjs",
     "package:doctor": "node ./scripts/doctor.js",

package/plugins/meta-architect/.app.json

@@ -1,7 +1,7 @@
 {
   "name": "meta-architect",
   "displayName": "Meta-Architect",
-  "version": "0.14.0",
+  "version": "0.14.1",
   "description": "Programmatic architecture and verified engineering skills for Codex-native workflows.",
   "entry": "./README.md",
   "skillsDir": "./skills"