@ssheleg/agent-sync 1.4.0 → 1.4.2

package/CHANGELOG.md

@@ -3,6 +3,32 @@
 All notable changes to this project are documented here.
 This project adheres to [Semantic Versioning](https://semver.org/).
 
+## 1.4.2 — 2026-07-30
+
+### Changed
+- **The README's hook section now opens with what it actually is:** the only part
+  of this plugin that executes code on your machine, four bash scripts with 15-20s
+  timeouts, run by Claude Code on named events, with a pointer to `SECURITY.md`
+  for every path the install touches. The facts were already in `SECURITY.md`; the
+  README described the hooks' behavior without ever framing them as the security
+  surface a reader should check first.
+
+### Added
+- **`displayName`** ("Agent Sync") in both manifests.
+
+## 1.4.1 — 2026-07-30
+
+### Fixed
+- **`homepage` and `repository` sat at the top level of `marketplace.json`,
+  where Claude Code does not recognize them.** They are plugin-entry fields;
+  moved there, so the values reach the plugin listing instead of being ignored.
+  This plugin's `argument-hint` was already quoted — the only one in the family
+  that was.
+
+### Added
+- `claude plugin validate --strict` runs in CI against both the plugin and the
+  marketplace manifest: the upstream schema, next to this repo's own validator.
+
 ## 1.4.0 — 2026-07-30
 
 ### Work happens on a branch, and the integration branch stays somebody else's stable base

package/README.md

@@ -361,8 +361,15 @@ Adding one: read
 
 ## Enforcement hooks
 
-Installed with the Claude Code plugin. Every hook exits immediately in projects without
-`.claude/agent-sync.json`, so installing globally changes nothing elsewhere.
+**This is the only part of the plugin that executes code on your machine.** Everything
+else — the skill, its references — is text an agent reads. Four bash scripts, bundled in
+the plugin and run by Claude Code on the events below, each with a timeout (15–20s) so a
+hung script cannot stall a session. Read them before installing: they are short, and
+[`SECURITY.md`](SECURITY.md) lists every path the install touches and why.
+
+Every hook exits immediately in projects without `.claude/agent-sync.json`, so installing
+globally changes nothing elsewhere. The `PreToolUse` guard can **deny** a tool call and
+never grants one that would otherwise be denied.
 
 | Hook | Runs | Effect |
 |---|---|---|

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ssheleg/agent-sync",
-  "version": "1.4.0",
+  "version": "1.4.2",
   "description": "Let concurrent coding agents share one project without colliding \u2014 leases with TTL, race-free id reservation, a run journal and a generated board, over a pluggable knowledge cloud.",
   "bin": {
     "agent-sync": "bin/agent-sync.js"

package/plugins/agent-sync/.claude-plugin/plugin.json

@@ -1,6 +1,7 @@
 {
   "name": "agent-sync",
-  "version": "1.4.0",
+  "displayName": "Agent Sync",
+  "version": "1.4.2",
   "description": "Coordination layer for multi-agent repositories \u2014 leases with TTL, race-free ID reservation, a run journal, a cross-repo signal feed and a generated board, over a pluggable knowledge cloud.",
   "author": {
     "name": "ssheleg"

package/plugins/agent-sync/skills/agent-sync/SKILL.md

@@ -4,7 +4,7 @@ description: "Use when several coding agents work one repository at the same tim
 compatibility: "Requires the task-pipeline skill for its stages (npx sshlg-skills install). Needs python3 3.9+ (stdlib only, HTTP included - nothing to pip install) and bash for the hooks. The knowledge backend is configured per project; with none configured it degrades to git-file leases. Enforcement hooks are Claude Code only - on other agents the same checks run as a self-check."
 license: MIT
 metadata:
-  version: "1.4.0"
+  version: "1.4.2"
   author: ssheleg
 ---
 

package/plugins/agent-sync/skills/agent-sync/scripts/agent_sync.py

@@ -32,7 +32,7 @@ from datetime import datetime, timezone
 from pathlib import Path
 from typing import Any
 
-VERSION = "1.4.0"
+VERSION = "1.4.2"
 
 CONFIG_PATH = Path(".claude/agent-sync.json")
 ENV_FILE = Path(".env.agent-sync")