ma-agents 3.17.0-beta.3 → 3.17.0-beta.4

package/lib/bmad-extension-plugin/.claude-plugin/marketplace.json

@@ -37,7 +37,7 @@
       "name": "ma-skills",
       "source": "./",
       "description": "ma-agents extension module providing enterprise SDLC personas and operational workflow skills.",
-      "version": "3.17.0-beta.3",
+      "version": "3.17.0-beta.4",
       "author": {
         "name": "Alon Mayaffit"
       },

package/lib/bmad.js

@@ -1719,12 +1719,19 @@ async function installCustomMarketplaceSubset({ projectRoot, modules, tools, sel
     let stagePath;
     let customSourceArg;
     let resolvedModules;
+    // Registry mode is best-effort across entries: `installedCodes` is the subset
+    // that actually resolved, `skipped` names the ones that did not (with reasons).
+    // discovery/direct are atomic → installedCodes = the selection, no skips.
+    let installedCodes = selection.selectedCodes;
+    let skipped = [];
     try {
         if (selection.mode === 'registry') {
             // Registry-index mode (this story): two-level clone+resolve+stage of
             // each selected entry's own repository. Shares the same stage dir +
             // install path as discovery/direct; only the staging step differs.
-            ({ stagePath, customSourceArg, resolvedModules } = await stageRegistryFn({
+            // Best-effort: a stale/broken entry is skipped (loudly), not fatal —
+            // it does not block the entries that do resolve.
+            ({ stagePath, customSourceArg, resolvedModules, installedCodes, skipped } = await stageRegistryFn({
                 source: selection.source,
                 plugins: selection.plugins,
                 selectedCodes: selection.selectedCodes,
@@ -1747,6 +1754,11 @@ async function installCustomMarketplaceSubset({ projectRoot, modules, tools, sel
         return false;
     }
 
+    // Defensive: a stager that predates the best-effort contract (or a partial
+    // mock) may omit these — fall back to treating the whole selection as installed.
+    if (!Array.isArray(installedCodes)) installedCodes = selection.selectedCodes;
+    if (!Array.isArray(skipped)) skipped = [];
+
     const command = buildBmadArgs({
         projectRoot,
         modules,
@@ -1755,7 +1767,7 @@ async function installCustomMarketplaceSubset({ projectRoot, modules, tools, sel
         customSource: customSourceArg,
     });
 
-    console.log(chalk.cyan(`  Installing custom marketplace subset (${selection.selectedCodes.join(', ')})...`));
+    console.log(chalk.cyan(`  Installing custom marketplace subset (${(installedCodes || []).join(', ')})...`));
     console.log(chalk.gray(`  Running: ${command}`));
 
     try {
@@ -1768,6 +1780,27 @@ async function installCustomMarketplaceSubset({ projectRoot, modules, tools, sel
         // for diagnostics on any post-invoke failure" policy (AC 8, 30.6b).
         cleanupStageFn(stagePath);
 
+        // LOUD best-effort report: any selected registry entry that could not be
+        // installed (unreachable repo, stale approved_tag, no skills) is named
+        // here with its reason — never silently omitted (FR238).
+        if (skipped && skipped.length > 0) {
+            console.log(
+                chalk.yellow(
+                    `\n  ${skipped.length} selected extension${skipped.length === 1 ? ' was' : 's were'} NOT installed ` +
+                    `(the rest installed fine):`
+                )
+            );
+            for (const s of skipped) {
+                console.log(chalk.yellow(`    - ${s.code}: ${s.reason}`));
+            }
+            console.log(
+                chalk.gray(
+                    '  These are typically stale/broken registry entries (e.g. an approved_tag that no longer ' +
+                    'exists upstream). Report them to the marketplace maintainer, or re-run without them.'
+                )
+            );
+        }
+
         // Story 30.7 (FR242) — persist source + selection (+ SHA pin) now that
         // the subset is actually installed. `resolvedModules[].cloneSha` is
         // only stamped for Git-URL sources (see custom-module-manager.js
@@ -1776,19 +1809,22 @@ async function installCustomMarketplaceSubset({ projectRoot, modules, tools, sel
         // failure is logged as a warning only — it must never turn an
         // otherwise-successful install into a reported failure.
         try {
+            // Persist only what ACTUALLY installed (`installedCodes`), not the
+            // raw selection — otherwise a skipped/broken entry would be recorded
+            // as installed and re-attempted (and re-reported) on every update.
             const persistEntry = {
                 source: selection.source,
                 sourceUrl: selection.sourceUrl ?? null,
                 mode: selection.mode,
-                selectedCodes: selection.selectedCodes,
+                selectedCodes: installedCodes,
             };
             if (selection.mode === 'registry') {
-                // AC5 — record each selected entry's registry-provided
+                // AC5 — record each INSTALLED entry's registry-provided
                 // `approved_sha` (the immutable pin the registry declares), plus
                 // its `approved_tag`. `sha` (the top-level field) mirrors the
                 // first available approved_sha for back-compat with readers that
                 // only look at `sha`.
-                const selectedSet = new Set(selection.selectedCodes);
+                const selectedSet = new Set(installedCodes);
                 const registryEntries = (selection.plugins || [])
                     .filter((p) => selectedSet.has(p.code))
                     .map((p) => ({ code: p.code, approvedSha: p.approvedSha ?? null, approvedTag: p.approvedTag ?? null }));

package/lib/custom-marketplace.js

@@ -941,30 +941,44 @@ async function stageRegistrySubset({ source, plugins, selectedCodes, projectRoot
         seenCodes.add(p.code);
     }
 
-    // Resolve every selected entry (each from its own clone) BEFORE touching the
-    // stage dir, so an unreachable/stale entry aborts clean with nothing staged.
+    // Resolve each selected entry INDEPENDENTLY (each from its own clone) BEFORE
+    // touching the stage dir. A community registry legitimately contains
+    // individually-broken/stale entries — an unreachable repo, a nonexistent
+    // approved_tag (e.g. the marketplace pinning wds@v0.1.0 when that tag does
+    // not exist), or a module with no skills. One bad entry must NOT nuke the
+    // whole multi-select. Best-effort: keep the resolvable entries, collect the
+    // skipped ones (with reasons), install the good ones, and let the caller
+    // report the skips LOUDLY. FR238 = no SILENT partial install — NOT
+    // all-or-nothing.
     const entries = [];
+    const skipped = [];
     for (const plugin of selected) {
-        entries.push(await resolveRegistryEntry(plugin, resolveSourceFn, resolvePluginFn));
+        let entry;
+        try {
+            entry = await resolveRegistryEntry(plugin, resolveSourceFn, resolvePluginFn);
+        } catch (err) {
+            diag('custom-source: registry entry skipped (resolve failed)', { code: plugin.code, error: err.message });
+            skipped.push({ code: plugin.code, reason: err.message });
+            continue;
+        }
+        if (!entry.resolved || entry.resolved.length === 0) {
+            const reason =
+                'resolved to zero installable modules — no SKILL.md directories found ' +
+                '(stale registry pointer, changed repo layout, or a module with no skills)';
+            diag('custom-source: registry entry skipped (zero modules)', { code: plugin.code, repository: plugin.repository });
+            skipped.push({ code: plugin.code, reason });
+            continue;
+        }
+        entries.push(entry);
     }
 
-    // Per-entry LOUD guard: a SELECTED entry that resolves to zero modules must
-    // NOT be silently dropped while others install (which read as an overall
-    // "success"). Fail before staging, naming exactly which entries produced
-    // nothing — the user picked them explicitly, so a partial install is a
-    // fail-clean violation (FR238), not an acceptable default.
-    const emptyEntries = entries.filter(({ resolved }) => !resolved || resolved.length === 0);
-    if (emptyEntries.length > 0) {
-        const names = emptyEntries.map(({ plugin }) => plugin.code).join(', ');
-        diag('custom-source: registry entries resolved to zero modules', {
-            entries: emptyEntries.map(({ plugin }) => ({ code: plugin.code, repository: plugin.repository, moduleDefinition: plugin.moduleDefinition || null })),
-        });
+    // Hard-fail ONLY when nothing at all resolved — otherwise proceed with the
+    // resolvable subset and surface `skipped` to the caller for a loud report.
+    if (entries.length === 0) {
+        const detail = skipped.map((s) => `${s.code} (${s.reason})`).join('; ');
         throw new CustomMarketplaceError(
-            `Selected registry ${emptyEntries.length === 1 ? 'entry' : 'entries'} ${names} resolved to ` +
-            `zero installable modules — no SKILL.md directories were found for ${emptyEntries.length === 1 ? 'it' : 'them'} ` +
-            `(a stale registry pointer, a changed repo layout, or a module with no skills). ` +
-            `Aborting before staging so the selection is not silently partially installed (FR238). ` +
-            `Re-run and deselect ${emptyEntries.length === 1 ? 'it' : 'those'}, or report the registry entry as broken.`
+            `None of the ${selected.length} selected registry ${selected.length === 1 ? 'entry' : 'entries'} could be installed — ${detail}. ` +
+            `Nothing was staged (FR238).`
         );
     }
 
@@ -1021,7 +1035,13 @@ async function stageRegistrySubset({ source, plugins, selectedCodes, projectRoot
     );
 
     const customSourceArg = `./${CUSTOM_MARKETPLACE_STAGE_DIR_NAME}`;
-    return { stagePath, customSourceArg, resolvedModules: allModules };
+    return {
+        stagePath,
+        customSourceArg,
+        resolvedModules: allModules,
+        installedCodes: entries.map((e) => e.plugin.code),
+        skipped,
+    };
 }
 
 // ─── Story 30.7 — persist + re-enumerate/reconcile on update ───────────────

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ma-agents",
-  "version": "3.17.0-beta.3",
+  "version": "3.17.0-beta.4",
   "description": "NPX tool to install skills for AI coding agents (Claude Code, Gemini, Copilot, Kilocode, Cline, Cursor, Roo Code)",
   "main": "index.js",
   "bin": {