@raishin/vanguard-frontier-agentic 2.5.0 → 2.6.0

package/.agents/tasks/task-dynamic-kiro-powers/2025-01-24-120000-review.md

@@ -0,0 +1,92 @@
+# Dynamic Kiro Powers generator
+
+The generator was previously hardcoded to 15 providers. This change makes it scan `catalog/agents.json` at generate-time, discovering all 32 providers with a `kiro` harness, and auto-deriving steering content (displayName, description, keywords, invariants) for the 17 providers that lack hand-authored entries. A merged map of hand-authored + derived entries drives the iteration loop, and a new `renderReadme()` produces an alphabetically-sorted README reflecting the full set.
+
+Watch for: mid-word truncation in 10 of 17 derived descriptions produces broken text visible in frontmatter (confirmed); grammar error "All 1 agents" for single-agent providers (confirmed); template renders maestro-routing guidance even for maestro-less providers, creating contradictory body text (confirmed, but pre-existing pattern extended to new providers).
+
+## High-level view
+
+The description-generation logic for single-agent providers has a truncation path that cuts at 120 characters without respecting word boundaries, producing mid-word breaks like `secre...` and `t...` that appear literally in the POWER.md frontmatter `description` field. Ten of the seventeen derived providers hit this path. The descriptions pass the 3-sentence validator (the `...` doesn't count as a sentence terminator) but the output is visually broken and semantically incomplete.
+
+The template-rendering path (`renderPower`) emits maestro guidance ("Use the maestro as the entry point...") unconditionally, even when the bullet above says "no maestro for this provider." This PR did not introduce the pattern but propagates it to 11 additional maestro-less providers, making the contradiction more visible and more likely to confuse Kiro's AI routing.
+
+The `adapterNote` string has no singular branch — when a provider has exactly 1 agent, the output reads "All 1 agents in this provider ship a Kiro adapter" across 10 new providers.
+
+<details>
+<summary>Issues (3)</summary>
+
+1. **Mid-word description truncation** — `core.substring(0, 117) + "..."` cuts at byte offset regardless of word boundary. Truncate to the last space before 120 chars, or trim the catalog summary at a comma/list-item boundary so the description remains a coherent sentence fragment. Affects 10 of 17 new providers.
+2. **"All 1 agents" grammar** — The `adapterNote` template uses `All ${total} agents` without a singular branch. When `total === 1`, this should read "The single agent in this provider ships..." or equivalent. Affects 10 providers.
+3. **Maestro boilerplate on maestro-less providers** — The "Use the maestro as the entry point" paragraph is rendered even when the provider has no maestro. Conditionally omit or rewrite this paragraph when `maestro` is null.
+
+</details>
+
+<details>
+<summary>Details</summary>
+
+## Description truncation at 120 chars
+
+The derivation path for single-agent providers strips the catalog summary's "Agent for X." prefix, removes a leading "Review"/"Static review of" prefix, then truncates at 120 characters:
+
+```javascript
+if (core.length > 120) {
+  core = core.substring(0, 117) + "...";
+}
+```
+
+This hard cut lands mid-word. For backstage the result is `"secre..."` (cutting "secret scope"), for cert-manager `"t..."` (cutting "trust"), for cilium `"policy ..."`. The frontmatter `description` field is the primary metadata Kiro's Powers panel shows to users. A word-boundary-aware truncation (find last space before offset 117, trim there, append `"..."`) would keep descriptions readable.
+
+Only single-agent providers with long catalog summaries are affected — the multi-agent paths use `deriveTopics` which slices to 4 items and stays short.
+
+## Singular/plural grammar in adapter note
+
+`renderPower` assembles: `"All ${total} agents in this provider ship a Kiro adapter..."`. When `total === 1`, this produces "All 1 agents in this provider ship." The template distinguishes `kiroAvailable === total` vs `kiroAvailable === 0` vs partial, but never checks for the singular case. Adding a `total === 1` guard (e.g., "The single agent in this provider ships a Kiro adapter...") fixes ten affected providers.
+
+## Contradictory maestro guidance for non-maestro providers
+
+The body template always emits:
+
+```
+Use the maestro as the entry point: classify the task, then dispatch to
+one specialist or a parallel team of specialists.
+```
+
+This appears directly beneath "*(no maestro for this provider; reference agents directly under `agents/<provider>/`)*". After this PR, 11 providers render this contradictory pair (up from 2 in the base). Since Kiro's AI uses this steering text for routing decisions, the contradiction could cause it to search for a non-existent maestro agent. Conditionalizing the paragraph on `maestro !== null` eliminates the issue.
+
+## Coverage gap: no truncation quality check
+
+The Python validator checks structural constraints (3-sentence max, kebab-case, banned keywords) but has no assertion on description coherence. Mid-word truncation passes all existing checks. A simple regex check for `\w{2}\.\.\. ` (word fragment followed by ellipsis mid-sentence) would catch this class of defect.
+
+</details>
+
+<details>
+<summary>File map</summary>
+
+| File | Change |
+|------|--------|
+| `scripts/generate-kiro-powers.mjs` | +342 lines: `discoverKiroProviders`, `deriveProviderConfig`, `DISPLAY_NAME_OVERRIDES`, `DERIVED_KEYWORDS`, `buildMergedProviders`, `renderReadme`; loop changed from `PROVIDERS` to `allProviders` |
+| `powers/README.md` | Now generated (count 14 -> 32, tree alphabetized, "How to update" references dynamic count) |
+| `powers/vanguard-argocd/POWER.md` | New derived power |
+| `powers/vanguard-backstage/POWER.md` | New derived power |
+| `powers/vanguard-cert-manager/POWER.md` | New derived power |
+| `powers/vanguard-cilium/POWER.md` | New derived power |
+| `powers/vanguard-dotnet/POWER.md` | New derived power (has maestro) |
+| `powers/vanguard-falco/POWER.md` | New derived power |
+| `powers/vanguard-fluxcd/POWER.md` | New derived power |
+| `powers/vanguard-generic/POWER.md` | New derived power |
+| `powers/vanguard-hr/POWER.md` | New derived power (has maestro) |
+| `powers/vanguard-istio/POWER.md` | New derived power |
+| `powers/vanguard-kyverno/POWER.md` | New derived power |
+| `powers/vanguard-legal/POWER.md` | New derived power (has maestro) |
+| `powers/vanguard-marketing/POWER.md` | New derived power (has maestro) |
+| `powers/vanguard-multi-cloud/POWER.md` | New derived power (has maestro) |
+| `powers/vanguard-opentelemetry/POWER.md` | New derived power |
+| `powers/vanguard-prometheus/POWER.md` | New derived power |
+| `powers/vanguard-sigstore/POWER.md` | New derived power |
+| `.agents/tasks/task-dynamic-kiro-powers/context.json` | Task context metadata |
+| `.agents/tasks/task-dynamic-kiro-powers/features/FEAT-001.json` | Feature spec |
+| `.agents/tasks/task-dynamic-kiro-powers/task.json` | Task tracker |
+
+Full diff: `git diff 8e0a7fc..HEAD`
+
+</details>

package/.agents/tasks/task-dynamic-kiro-powers/context.json

@@ -0,0 +1,22 @@
+{
+  "project_type": "Multi-platform agent marketplace (Node.js scripts, Python validators)",
+  "language": "JavaScript (ESM) for generator, Python for validator",
+  "build_system": "npm scripts - no compile step, just generator + validators",
+  "test_framework": "Python validator scripts (tests/validate-kiro-powers.py) plus generator --check mode",
+  "build_command": "NODE_OPTIONS=\"\" node scripts/generate-kiro-powers.mjs",
+  "test_command": "NODE_OPTIONS=\"\" python3 tests/validate-kiro-powers.py",
+  "verification_instructions": "1. Run NODE_OPTIONS=\"\" node scripts/generate-kiro-powers.mjs to generate powers. 2. Run NODE_OPTIONS=\"\" python3 tests/validate-kiro-powers.py to validate. 3. Run NODE_OPTIONS=\"\" node scripts/generate-kiro-powers.mjs --check to confirm idempotency.",
+  "snapshot_or_generated_files": "powers/*/POWER.md and powers/README.md are generated files. Command: node scripts/generate-kiro-powers.mjs",
+  "setup_instructions": "No setup needed - Node.js and Python3 are pre-installed",
+  "environment_constraints": "Must prefix node commands with NODE_OPTIONS=\"\" due to sandbox preload issue",
+  "contribution_requirements": "Generated powers must conform to strict-5 frontmatter (name, displayName, description, keywords, author). Description max 3 sentences. Keywords must be specific, not broad (avoid: cloud, code, devops, infrastructure, infra, agent, agents, ai, ml, ops, automation, tool, tools, general). Names must be kebab-case.",
+  "key_patterns": "Generator uses a PROVIDERS object with hand-authored steering (displayName, description, keywords, invariants). renderPower() creates frontmatter + body. summarize() reads catalog for agent counts, maestro, live-guards. renderReadme() generates powers/README.md from PROVIDERS keys. Validator independently checks all powers/ subdirs.",
+  "relevant_files": [
+    "scripts/generate-kiro-powers.mjs",
+    "tests/validate-kiro-powers.py",
+    "catalog/agents.json",
+    "powers/README.md",
+    "powers/vanguard-aws/POWER.md"
+  ],
+  "directory_structure": "scripts/ has generators, tests/ has validators, catalog/agents.json is the source of truth for all agents, powers/ has generated POWER.md files per provider"
+}

package/.agents/tasks/task-dynamic-kiro-powers/features/FEAT-001.json

@@ -0,0 +1,34 @@
+{
+  "id": "FEAT-001",
+  "type": "fix",
+  "description": "Make the Kiro Powers generator fully dynamic so it auto-generates Powers for ALL 32 providers in catalog/agents.json that have 'kiro' in their harnesses array, not just the 15 hardcoded in the PROVIDERS object.",
+  "status": "completed",
+  "steps": [
+    "Step 1: In scripts/generate-kiro-powers.mjs, add a function that reads catalog/agents.json and discovers all unique providers where at least one agent has 'kiro' in its harnesses array. This should happen dynamically at generate-time.",
+    "Step 2: Add a function (e.g. `deriveProviderConfig`) that auto-generates steering content for providers NOT already in the hardcoded PROVIDERS object. The logic should be: (a) displayName: title-case the provider name with 'Vanguard Frontier -- ' prefix (use actual double-hyphen-space, e.g. 'Vanguard Frontier -- ArgoCD' becomes 'Vanguard Frontier \\u2014 ArgoCD' using em-dash matching existing convention). For multi-word names like 'multi-cloud' or 'cert-manager', convert to title case: 'Multi-Cloud', 'Cert-Manager'. For abbreviations like 'dotnet' use '.NET', 'hr' use 'HR', 'fluxcd' use 'FluxCD', 'argocd' use 'ArgoCD', 'opentelemetry' use 'OpenTelemetry'. (b) description: Generate from catalog data - max 3 sentences. Pattern: describe what the agents do based on agent IDs/summaries, mention maestro routing if present, note whether it has live-guard agents. Keep under 3 sentences. (c) keywords: Derive from provider name and agent IDs. Must be specific, NOT broad. Avoid the banned list: cloud, code, devops, infrastructure, infra, agent, agents, ai, ml, ops, automation, tool, tools, general. (d) invariants: Generate sensible defaults - if no live-guards, focus on review-only / static-analysis invariants. If has maestro, mention routing through maestro. If has live-guards, include the standard live-guard discipline bullet.",
+    "Step 3: Build a merged PROVIDERS-like map that combines the hand-authored PROVIDERS entries (unchanged) with the auto-derived entries for missing providers. The final iteration loop should use this merged map instead of just PROVIDERS.",
+    "Step 4: Update the loop at the bottom of the generator that iterates `Object.entries(PROVIDERS)` to instead iterate the merged map (all 32 providers). The renderPower and renderReadme functions should work with this merged map.",
+    "Step 5: Make sure the renderReadme function uses the merged map (all 32 providers) so the README.md accurately reflects the full count.",
+    "Step 6: The auto-derived descriptions MUST comply with the strict-5 spec: max 3 sentences for description, kebab-case name, specific non-broad keywords. Test each derived entry mentally.",
+    "Step 7: Run `NODE_OPTIONS=\"\" node scripts/generate-kiro-powers.mjs` and verify it generates 32 Power directories under powers/.",
+    "Step 8: Run `NODE_OPTIONS=\"\" python3 tests/validate-kiro-powers.py` and confirm all 32 Powers pass validation.",
+    "Step 9: Run `NODE_OPTIONS=\"\" node scripts/generate-kiro-powers.mjs --check` and confirm it reports all 32 Powers in sync (idempotency check)."
+  ],
+  "acceptance_criteria": [
+    "Running `NODE_OPTIONS=\"\" node scripts/generate-kiro-powers.mjs` produces 32 POWER.md files under powers/ (one per kiro-enabled provider)",
+    "Running `NODE_OPTIONS=\"\" python3 tests/validate-kiro-powers.py` passes with OK status for all 32 Powers",
+    "Running `NODE_OPTIONS=\"\" node scripts/generate-kiro-powers.mjs --check` exits 0 (all Powers in sync)",
+    "The 15 existing hand-authored providers (aws, azure, gcp, oci, alibaba, huawei, ovhcloud, scaleway, hetzner, contabo, ionos, kubernetes, terraform, nvidia, salesforce) retain their exact same steering content unchanged",
+    "The 17 new providers (argocd, backstage, cert-manager, cilium, dotnet, falco, fluxcd, generic, hr, istio, kyverno, legal, marketing, multi-cloud, opentelemetry, prometheus, sigstore) each get auto-generated Powers with valid strict-5 frontmatter",
+    "No generated keyword is in the broad-keywords banned list",
+    "No generated description exceeds 3 sentences",
+    "All generated names are lowercase kebab-case matching pattern 'vanguard-<provider>'"
+  ],
+  "verification": [
+    "NODE_OPTIONS=\"\" node scripts/generate-kiro-powers.mjs",
+    "NODE_OPTIONS=\"\" python3 tests/validate-kiro-powers.py",
+    "NODE_OPTIONS=\"\" node scripts/generate-kiro-powers.mjs --check"
+  ],
+  "blocked_reason": null,
+  "findings": "All 32 providers generate successfully. The generator outputs '33 Kiro Powers (+ README.md)' because it counts 32 POWER.md files + 1 README.md in the written array. The validator correctly reports 32 Powers. Single-agent providers use their catalog summary (second sentence if first is 'Agent for <id>.') with truncation to 120 chars. All descriptions pass the 3-sentence validator."
+}

package/.agents/tasks/task-dynamic-kiro-powers/task.json

@@ -0,0 +1,14 @@
+{
+  "task_id": "task-dynamic-kiro-powers",
+  "task_description": "Make the Kiro Powers generator fully dynamic so it auto-generates Powers for ALL providers in catalog/agents.json that have 'kiro' in their harnesses array, not just the 15 hardcoded in the PROVIDERS object. This fixes the bug where 17 providers with Kiro adapters have no Power generated.",
+  "status": "completed",
+  "feature_order": ["FEAT-001"],
+  "blocked_reason": null,
+  "verification": {
+    "build": "pass",
+    "tests": "pass",
+    "test_quality": "pass",
+    "docker_build": "skipped",
+    "summary": "Generator produces 32 Powers (up from 15). Validator confirms all 32 pass strict-5 frontmatter, kebab-case, max-3-sentence, non-broad-keyword checks. Idempotency check (--check) passes. Review fixes applied: word-boundary truncation, singular grammar for single-agent providers, conditional maestro boilerplate."
+  }
+}

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Curated marketplace for cloud and zero-trust AI workflows. Skills, agents, rules, MCP references, and compliance-aware architecture across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, Kubernetes, and Terraform.",
-    "version": "2.5.0"
+    "version": "2.6.0"
   },
   "plugins": [
     {

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vanguard-frontier-agentic",
-  "version": "2.4.4",
+  "version": "2.5.0",
   "description": "Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.",
   "author": {
     "name": "Raishin",

package/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vanguard-frontier-agentic",
-  "version": "2.4.4",
+  "version": "2.5.0",
   "description": "Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.",
   "author": {
     "name": "Raishin",

package/.github/plugin/marketplace.json

@@ -2,7 +2,7 @@
   "$schema": "https://raw.githubusercontent.com/github/copilot-cli/main/schemas/marketplace.schema.json",
   "name": "vanguard-frontier-agentic",
   "description": "Curated marketplace for cloud and zero-trust AI workflows. 331 agents, 286 skills, and rules across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, Kubernetes, and Terraform.",
-  "version": "2.5.0",
+  "version": "2.6.0",
   "owner": {
     "name": "Raishin",
     "url": "https://github.com/Raishin"

package/README.md

@@ -15,6 +15,8 @@
     <a href="https://github.com/Raishin/vanguard-frontier-agentic/actions/workflows/codeql.yml"><img alt="CodeQL" src="https://github.com/Raishin/vanguard-frontier-agentic/actions/workflows/codeql.yml/badge.svg?branch=master" /></a>
     <a href="https://github.com/Raishin/vanguard-frontier-agentic/actions/workflows/install-paths-smoke.yml"><img alt="Install Paths Smoke" src="https://github.com/Raishin/vanguard-frontier-agentic/actions/workflows/install-paths-smoke.yml/badge.svg?branch=master" /></a>
     <a href="https://scorecard.dev/viewer/?uri=github.com/Raishin/vanguard-frontier-agentic"><img alt="OpenSSF Scorecard" src="https://api.securityscorecards.dev/projects/github.com/Raishin/vanguard-frontier-agentic/badge" /></a>
+    <a href="https://www.bestpractices.dev/projects/12964"><img alt="OpenSSF Best Practices" src="https://www.bestpractices.dev/projects/12964/badge" /></a>
+    <a href="https://www.bestpractices.dev/projects/12964"><img alt="OpenSSF Baseline" src="https://www.bestpractices.dev/projects/12964/baseline" /></a>
     <a href="https://github.com/Raishin/vanguard-frontier-agentic/actions/workflows/docs-quality.yml"><img alt="Docs Quality" src="https://github.com/Raishin/vanguard-frontier-agentic/actions/workflows/docs-quality.yml/badge.svg?branch=master" /></a>
     <a href="https://docs.npmjs.com/generating-provenance-statements"><img alt="npm provenance" src="https://img.shields.io/badge/npm-provenance-26a566.svg?logo=npm" /></a>
     <a href="CONTRIBUTING.md"><img alt="PRs welcome" src="https://img.shields.io/badge/PRs-welcome-brightgreen.svg" /></a>

package/catalog/asset-integrity.json

@@ -20128,7 +20128,7 @@
     },
     {
       "tree": "scripts",
-      "aggregate_sha256": "61d0b8d2fddd8393d936223e26b260c84dbbdecef4da3808c4ab9869fa803335",
+      "aggregate_sha256": "6138f2412ca20a0d1699082ba5aee6b7ba2cfe6c8ff83036e753a6196289d4aa",
       "files": [
         {
           "path": "scripts/apply-skill-allowed-tools.py",
@@ -20142,8 +20142,8 @@
         },
         {
           "path": "scripts/export-marketplace-agents.mjs",
-          "sha256": "a6880e1fbd2430b72ed9db38a538995bce94e48b04d2cf5dd55dedcf227b781b",
-          "bytes": 26744
+          "sha256": "c79e3e7decbb3b9ba77f33e05145a22892bcfbf6a15231a74191a1d60e47cbac",
+          "bytes": 27654
         },
         {
           "path": "scripts/gen_azure_live_guards.py",
@@ -20167,8 +20167,8 @@
         },
         {
           "path": "scripts/generate-kiro-powers.mjs",
-          "sha256": "5bd32b71458dab9741cfa2e9bb3c0df81ea0150dbc38a2e01418022b543872ad",
-          "bytes": 20700
+          "sha256": "38c60ad9b98a6fc0d6eb0901594c1fbcb9c6cf4ac7b69f3bb246d81ac816bed6",
+          "bytes": 35147
         },
         {
           "path": "scripts/generate-plugin-manifest.mjs",
@@ -20180,6 +20180,11 @@
           "sha256": "6134b200b037ecaf94d7758d06ad9c35afec05348b4f4fddcafc6bae15e3bb0b",
           "bytes": 5674
         },
+        {
+          "path": "scripts/install-codex-home.mjs",
+          "sha256": "07189e47956afbf0a316112c6f3988558a35a33de22e3d850af6969b7354f01f",
+          "bytes": 3493
+        },
         {
           "path": "scripts/release-prepare.mjs",
           "sha256": "bc1ce887b378273fd93e458a87208011959c5355ff651d9f63757825135bb763",
@@ -20194,18 +20199,23 @@
     },
     {
       "tree": "powers",
-      "aggregate_sha256": "7a35f82ab67f5e925c1cc265bc1df5f5863f7ba16f1b9cd4d4f2669a469fdbdc",
+      "aggregate_sha256": "0ed8a6ef5bd9d7cd9ea910cb07b0b72fad0cd8bc9376e11bb0242a158e577a1c",
       "files": [
         {
           "path": "powers/README.md",
-          "sha256": "b0a8ff62a1ab2869bedb17a224e061c5e4e43f11a99deef88cabbdbb03d467bc",
-          "bytes": 3832
+          "sha256": "5f9d27fab9ced4d1a49eac13483893f05b9232862ae9a860038d1b698c796a49",
+          "bytes": 4491
         },
         {
           "path": "powers/vanguard-alibaba/POWER.md",
           "sha256": "b09a2b37781189ea99507f6c729ee93a3ff848091ea210433c70a27ae67d757d",
           "bytes": 3391
         },
+        {
+          "path": "powers/vanguard-argocd/POWER.md",
+          "sha256": "eed0a27bca26f305cc3d5f322baf58d8eb70a7546542273160d73a8cb4119862",
+          "bytes": 2193
+        },
         {
           "path": "powers/vanguard-aws/POWER.md",
           "sha256": "305cc05b3ab469f719a28c20816f6590e26ef09965dac3457e0bcd25f1817895",
@@ -20216,21 +20226,61 @@
           "sha256": "da345fff3860f7e4f3e12031f94da912eb8120e15eede8880447609dc09f56a9",
           "bytes": 3310
         },
+        {
+          "path": "powers/vanguard-backstage/POWER.md",
+          "sha256": "e40b729c9b863f0b4519dad598f373316adb63bf84bf23605c8387144b74a08f",
+          "bytes": 2224
+        },
+        {
+          "path": "powers/vanguard-cert-manager/POWER.md",
+          "sha256": "69e93d7b111357cae3f41e5e614081268778a8086db80b084ac724dad9cc7230",
+          "bytes": 2238
+        },
+        {
+          "path": "powers/vanguard-cilium/POWER.md",
+          "sha256": "98e198624678b311847ba15534f59465c14b7b301a8958c8537e47241c3c3687",
+          "bytes": 2204
+        },
         {
           "path": "powers/vanguard-contabo/POWER.md",
           "sha256": "bd66d54f12dac3b3ed7567056027ef0e4f9bb8e6704960d54e60b77b4b7d8bb5",
           "bytes": 2791
         },
+        {
+          "path": "powers/vanguard-dotnet/POWER.md",
+          "sha256": "27fe59a46c68c254ecaba9b9dd65c819867a08cf5f66947fbb31b98c7e6fccf0",
+          "bytes": 2469
+        },
+        {
+          "path": "powers/vanguard-falco/POWER.md",
+          "sha256": "39bc91075468397ec49ef77e8c48ec5a0685c26e748811516387c57a9b681c6b",
+          "bytes": 2184
+        },
+        {
+          "path": "powers/vanguard-fluxcd/POWER.md",
+          "sha256": "853288b0d4a6818a095ab3d7b83de413b84589c57de64573a221d91a70ee67fb",
+          "bytes": 2187
+        },
         {
           "path": "powers/vanguard-gcp/POWER.md",
           "sha256": "e1bfb799b1556ed9d62b0bd80045d85a8ca742a7572d6c836942a23063231a9a",
           "bytes": 3117
         },
+        {
+          "path": "powers/vanguard-generic/POWER.md",
+          "sha256": "8d8e9d028bac2b764e3dd889750a82d7b4e17aa1ba6cbc9e36bdc16982baaccb",
+          "bytes": 2281
+        },
         {
           "path": "powers/vanguard-hetzner/POWER.md",
           "sha256": "f4f0373730597e6ec3cca5b9dd709043a4d57655035873f51c9c21db48d243ef",
           "bytes": 2797
         },
+        {
+          "path": "powers/vanguard-hr/POWER.md",
+          "sha256": "fba79b9ba4c4678ba433a323015482d40645208fa3cad5d4dd691b11cc504c7b",
+          "bytes": 2422
+        },
         {
           "path": "powers/vanguard-huawei/POWER.md",
           "sha256": "5502a64508a9710f33fc35e8e785c12a794e4cd4fdff967032eb9ae7eb6a7382",
@@ -20241,11 +20291,36 @@
           "sha256": "dd63303bbadb05bbadbf71adbd759e2f21d940f38fc6275d3f8fb3804386db3c",
           "bytes": 2659
         },
+        {
+          "path": "powers/vanguard-istio/POWER.md",
+          "sha256": "cd1e64d7ad7b97cf08177fe6e8da47d5087490ff50c08116866da61115674002",
+          "bytes": 2148
+        },
         {
           "path": "powers/vanguard-kubernetes/POWER.md",
           "sha256": "5fb458af0013896e6b95dd7e9b5d7f0f619ad558f983623bd95b94de207d12a0",
           "bytes": 3552
         },
+        {
+          "path": "powers/vanguard-kyverno/POWER.md",
+          "sha256": "33d9fdd860e5293c0037eed1134b514c502dc4a678a81fa6523c34c84d556572",
+          "bytes": 2209
+        },
+        {
+          "path": "powers/vanguard-legal/POWER.md",
+          "sha256": "5c420a3f7a45bdad7b8fbf310a14712839a654a2f32be42d8d37bd51894ff5a5",
+          "bytes": 2462
+        },
+        {
+          "path": "powers/vanguard-marketing/POWER.md",
+          "sha256": "256fd80234b41929c3724af452b69dd1114b5f1ceb5698c6413a7a8de70a1061",
+          "bytes": 2633
+        },
+        {
+          "path": "powers/vanguard-multi-cloud/POWER.md",
+          "sha256": "641c7bfbb6258afe4975be060007ec8c9398fafcc1ad17421c479168089d5c89",
+          "bytes": 2454
+        },
         {
           "path": "powers/vanguard-nvidia/POWER.md",
           "sha256": "2176bcac6966618b55f97fea344729964b3e6d03f7489bda457a057489c52853",
@@ -20256,11 +20331,21 @@
           "sha256": "9fe36c6951d2cab23ffaa64b851cb08d8a0ad1118942db7b850c78a683c536c6",
           "bytes": 3291
         },
+        {
+          "path": "powers/vanguard-opentelemetry/POWER.md",
+          "sha256": "6a4849c8234d8d49111a4b04a94722b7a66dff0e29eb498ae66a96b94b45d10b",
+          "bytes": 2270
+        },
         {
           "path": "powers/vanguard-ovhcloud/POWER.md",
           "sha256": "b2d374c57933a5cd227f868f0c265f11b83476b98ee55ef894c1d05b2ef01f04",
           "bytes": 2611
         },
+        {
+          "path": "powers/vanguard-prometheus/POWER.md",
+          "sha256": "58676f3b9402efdb9ab63ae5976e58b7879aab8fb9c621b018696c02e5420955",
+          "bytes": 2245
+        },
         {
           "path": "powers/vanguard-salesforce/POWER.md",
           "sha256": "7b71640dfa49d9ce213be315da4c72dff1b527b1fafc37c213d34b5cc909ccfb",
@@ -20271,6 +20356,11 @@
           "sha256": "19ef9329b40cd528860651a41e6617b70760df70c7c1cfd3f57aed9446f4068f",
           "bytes": 2651
         },
+        {
+          "path": "powers/vanguard-sigstore/POWER.md",
+          "sha256": "66b7845eab94a6b74f7af0ad09af39e263cbd0dd2f510d1f4992f9d9b01739a5",
+          "bytes": 2230
+        },
         {
           "path": "powers/vanguard-terraform/POWER.md",
           "sha256": "f31175f2b1965b82836de12ce8f52498f828701f2f85709c8e38c7d6ddcc7770",
@@ -20280,7 +20370,7 @@
     },
     {
       "tree": "plugins",
-      "aggregate_sha256": "c8cc07cabc5b5e4aa810af98470b6c56d5913a9b26e7e460243d3d373e9f7bba",
+      "aggregate_sha256": "e388389be5636351efcf827ff8f008699318ae8a74be3082f7bff0b940f56b92",
       "files": [
         {
           "path": "plugins/cross-platform-agent-template/.codex-plugin/plugin.json",
@@ -20289,14 +20379,19 @@
         },
         {
           "path": "plugins/vanguard-frontier-agentic/.codex-plugin/plugin.json",
-          "sha256": "791816bfc75a13de933e6c97795d3663a6a4b2875294ca8e936a68e9033884c5",
-          "bytes": 1850
+          "sha256": "0e91ea8994f768bcfcc559ab61f026cd1a938688d4e1fa36e8ae4614ce187e2c",
+          "bytes": 1875
+        },
+        {
+          "path": "plugins/vanguard-frontier-agentic/skills/vanguard-frontier-agentic-install/SKILL.md",
+          "sha256": "e6f6380390a42e4a00b6d07f0d416bfcb6436a5fb8b377d2b7e583963f81216a",
+          "bytes": 1482
         }
       ]
     },
     {
       "tree": ".claude-plugin",
-      "aggregate_sha256": "c6c0585b941f064516306511a3c4ae53fb23a329f69828331d43c26da969d37c",
+      "aggregate_sha256": "2eb63ab7ec008444c6a6d4f0a36ef238f45f15eddcae226f8f6f4bad588cb648",
       "files": [
         {
           "path": ".claude-plugin/README.md",
@@ -20305,19 +20400,19 @@
         },
         {
           "path": ".claude-plugin/marketplace.json",
-          "sha256": "e66fbfd20e5524f3b9544d79b5ace2efb09b4569516bee271a586c2939c7aa9d",
+          "sha256": "992db993de65919c948bc9b4afe39fb73f1f5d0fc6c611e137bf1046e5eceffa",
           "bytes": 1008
         },
         {
           "path": ".claude-plugin/plugin.json",
-          "sha256": "3bb0b4529f51cb0a41c6fa149dd8b030527792592448ff1615ab63d7d76fb1c5",
+          "sha256": "1eb0f0599050b0b37b1e38727abc4b47e12bd83e476755fd71e4b2a58f8f3a17",
           "bytes": 39327
         }
       ]
     },
     {
       "tree": ".cursor-plugin",
-      "aggregate_sha256": "0f2788a978ea2608ccf23e6f0dbf3e3918459a6a6432e8d046af2a3f2ebe5fd1",
+      "aggregate_sha256": "dbcf5a1402d0bf05f45b56392f1aebef6d8cee2469920c82b2e88988560e865a",
       "files": [
         {
           "path": ".cursor-plugin/README.md",
@@ -20326,14 +20421,14 @@
         },
         {
           "path": ".cursor-plugin/plugin.json",
-          "sha256": "75dfa6dac3f5e22fed6a39aeb6ce8f1752f8a2631bb2a35d6af091d07091203c",
+          "sha256": "fc5e4b05bc5555507ff7616473d380cbd031d4b598d2de682e6dee22eabc18e4",
           "bytes": 37173
         }
       ]
     },
     {
       "tree": ".github/plugin",
-      "aggregate_sha256": "bd2625bee1b9855893616d48209813797a1a09a3dea980375c2685333caa5fe2",
+      "aggregate_sha256": "ee468384c788e19ff6b148bcf9ec18ff181091ea2bac3208ecbf5afbce0116e2",
       "files": [
         {
           "path": ".github/plugin/README.md",
@@ -20342,7 +20437,7 @@
         },
         {
           "path": ".github/plugin/marketplace.json",
-          "sha256": "e2f4437d4101e30c0b3130038b1f94af18dde3ee77a3f5e40357a365ce71f5c5",
+          "sha256": "927a0b470a5627e9c61ed494c2b205d78154acde4c7efbae71a58601f6a856ba",
           "bytes": 790
         }
       ]
@@ -20365,7 +20460,7 @@
     },
     {
       "tree": "tests",
-      "aggregate_sha256": "96b0a1808d38b9001820c9561f0978d06b9dbf468b39f6b415c4c2780623cc59",
+      "aggregate_sha256": "ca295db4c108d4c6e7fbe183b19bbb980315fe68d0cf41b92480a63d3a2c1d18",
       "files": [
         {
           "path": "tests/AGENTS.md",
@@ -25397,6 +25492,11 @@
           "sha256": "30ae65384ee3d1bea4ff7d753fd4ef79acc4f6d0c5bc1934491b085549d825f7",
           "bytes": 7763
         },
+        {
+          "path": "tests/test-codex-plugin-marketplace-install.test.mjs",
+          "sha256": "158c54d2759b9e28e5e1844f4ff9c03008790ed09a9e0922df3066b04e62cc73",
+          "bytes": 4911
+        },
         {
           "path": "tests/test-copilot-skill-bundling.py",
           "sha256": "d642c65ffc814853007d833b8025d858622a7eb238eaa0c0e80acd843522fefd",
@@ -25414,8 +25514,8 @@
         },
         {
           "path": "tests/test-vfa-export-coverage.test.mjs",
-          "sha256": "e9475468429ddfd1194a86716fe937d7645c69ebe334c11dcbb51a1c4c8a0b9c",
-          "bytes": 33463
+          "sha256": "5d5de11a7c60d1fbfbf3777cfa692553fb883261ae73f68daa4dd7ce59fa4ee7",
+          "bytes": 39135
         },
         {
           "path": "tests/validate-agent-frontmatter-schema.py",
@@ -25449,8 +25549,8 @@
         },
         {
           "path": "tests/validate-codex-marketplace.py",
-          "sha256": "ea5a0a153e4299bfb0ae0a2367c0ff5e6b549cb38c4dbd241ce81782bb16c086",
-          "bytes": 5899
+          "sha256": "62a85a3d4ee2d3a0b890f1fe6eac73c9251742bab2672e39a93dd5827ac9f1be",
+          "bytes": 7333
         },
         {
           "path": "tests/validate-finops-price-fixtures.py",
@@ -25523,12 +25623,12 @@
   "root_files": [
     {
       "path": "README.md",
-      "sha256": "0e04fe0bf500fd7dd3cb79ee62840232a5e63708f0bc6479b59e9f52d0d8f454",
-      "bytes": 78319
+      "sha256": "921ce5b110a89730f5502efcb93393fd17b41068f7c21a007c91363c92fb178a",
+      "bytes": 78630
     },
     {
       "path": "SECURITY.md",
-      "sha256": "36f9875216fa8c375fafca01a2f1d49c0f806fc84608ae02d8a0b7954bb8db8a",
+      "sha256": "6f1d5963e733270d0bc2945bc43bda00b794242a8ab65249b966fc0b08a6e322",
       "bytes": 7073
     },
     {
@@ -25563,8 +25663,8 @@
     },
     {
       "path": "package.json",
-      "sha256": "ef0ff18dfec9cd529337902aa662633d427797e9d0e47d8fab39935b072b02cd",
-      "bytes": 5551
+      "sha256": "32383f9e37207b310bf8f37c7222e47edce759788d0b2f0fae3f78250c0cf717",
+      "bytes": 5722
     },
     {
       "path": ".releaserc.js",
@@ -25572,5 +25672,5 @@
       "bytes": 4523
     }
   ],
-  "aggregate_sha256": "d28665ecb6f7c7a64b2be030bc7e61effe320ac624d4fd498b7c38045a2ae485"
+  "aggregate_sha256": "57576c874d562d0a4b43ec9644e502474e3ed9ee59293bd7fa10e347ec870f96"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@raishin/vanguard-frontier-agentic",
-  "version": "2.5.0",
+  "version": "2.6.0",
   "description": "Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.",
   "license": "Apache-2.0",
   "repository": {
@@ -37,6 +37,7 @@
   ],
   "scripts": {
     "agents:export": "node scripts/export-marketplace-agents.mjs",
+    "install:codex-home": "node scripts/install-codex-home.mjs",
     "manifest:write": "python3 tests/validate-skill-manifest.py --write",
     "manifest:check": "python3 tests/validate-skill-manifest.py",
     "validate:aws": "python3 tests/validate-aws-skill-quality.py && python3 tests/validate-aws-progressive-disclosure.py",
@@ -55,6 +56,7 @@
     "validate:kiro-powers": "python3 tests/validate-kiro-powers.py",
     "validate:multi-harness-marketplace": "python3 tests/validate-multi-harness-marketplace.py",
     "validate:codex-marketplace": "python3 tests/validate-codex-marketplace.py",
+    "test:codex-plugin-marketplace-install": "node tests/test-codex-plugin-marketplace-install.test.mjs",
     "validate:finops-fixtures": "python3 tests/validate-finops-price-fixtures.py",
     "validate:readme-counts": "node tests/validate-readme-counts.mjs",
     "validate:qa-cluster": "node tests/eval-qa-cluster.mjs",

package/plugins/vanguard-frontier-agentic/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vanguard-frontier-agentic",
-  "version": "2.5.0",
+  "version": "2.6.0",
   "description": "Curated marketplace for cloud and zero-trust AI workflows. 331 agents, 286 skills, and rules across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, Kubernetes, and Terraform.",
   "author": {
     "name": "Raishin",
@@ -42,5 +42,6 @@
       "Route this Alibaba Cloud task through the maestro pattern."
     ],
     "brandColor": "#3B82F6"
-  }
+  },
+  "skills": "./skills/"
 }