ultra-builder-pro-cli 0.5.1 → 0.5.3

package/CHANGELOG.md

@@ -7,6 +7,27 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.5.3] — 2026-07-17
+
+### Fixed
+
+- Removed the final bundled agent instruction that asked workers to update and
+  consult project memory. Test workers now return reusable findings to the
+  parent agent, while persistent memory remains owned by a separately installed
+  host provider.
+- Added a release regression guard that rejects private memory ownership,
+  `.ultra/memory`, and retired `/recall` instructions from every bundled agent.
+
+## [0.5.2] — 2026-07-16
+
+### Fixed
+
+- Preserved Codex hook entry points for already-running tasks across plugin
+  refreshes, including cache versions whose adapter file or entire cache
+  directory had already disappeared. Historical cache versions are now kept in
+  the managed runtime manifest and restored as validated forwarders to the
+  current adapter.
+
 ## [0.5.1] — 2026-07-16
 
 ### Changed
@@ -211,7 +232,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   skill manifest, CLI protocol + mapping table; 5 spec validators.
 - **Phase 0 — skeleton**: multi-runtime installer scaffolding.
 
-[Unreleased]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.5.1...HEAD
+[Unreleased]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.5.3...HEAD
+[0.5.3]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.5.2...v0.5.3
+[0.5.2]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.5.1...v0.5.2
 [0.5.1]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.5.0...v0.5.1
 [0.5.0]: https://github.com/rocky2431/ultra-builder-pro-cli/releases/tag/v0.5.0
 [0.4.0]: https://github.com/rocky2431/ultra-builder-pro-cli/releases/tag/v0.4.0

package/README.md

@@ -8,7 +8,7 @@ authoritative `.ultra/state.db`.
 
 <div align="center">
 
-[![Version](https://img.shields.io/badge/version-0.5.1-blue)](./CHANGELOG.md)
+[![Version](https://img.shields.io/badge/version-0.5.3-blue)](./CHANGELOG.md)
 [![Tests](https://img.shields.io/badge/tests-passing-brightgreen)](#verification)
 [![License: MIT](https://img.shields.io/badge/license-MIT-green)](./LICENSE)
 [![Node](https://img.shields.io/badge/node-%E2%89%A522-informational)](./package.json)

package/adapters/_shared/tests/runtime-assets.test.cjs

@@ -89,6 +89,18 @@ test('workflow hook allowlist contains no memory, prompt capture, or generic pol
   assert.doesNotMatch(WORKFLOW_HOOK_FILES.join('\n'), /memory|recall|journal|observation|prompt|dangerous|post_edit/);
 });
 
+test('bundled agents never instruct workers to own persistent memory', () => {
+  const agentsDir = path.join(REPO_ROOT, 'agents');
+  const agentText = fs.readdirSync(agentsDir)
+    .filter((name) => name.endsWith('.md'))
+    .map((name) => fs.readFileSync(path.join(agentsDir, name), 'utf8'))
+    .join('\n');
+
+  assert.doesNotMatch(agentText, /^## Memory$/m);
+  assert.doesNotMatch(agentText, /Update your project memory|Consult memory before starting work/);
+  assert.doesNotMatch(agentText, /\.ultra\/memory|\/recall(?:\s|`|$)/m);
+});
+
 test('npm publish list uses the same explicit skill boundary', () => {
   const pkg = JSON.parse(fs.readFileSync(path.join(REPO_ROOT, 'package.json'), 'utf8'));
   const publishedSkills = pkg.files

package/adapters/codex.js

@@ -191,14 +191,53 @@ function pluginCacheRoot(configDir, marketplaceName) {
   return path.join(configDir, 'plugins', 'cache', marketplaceName, PLUGIN_NAME);
 }
 
-function listCachedHookAdapters(configDir, marketplaceName) {
+function normalizeHookCacheVersions(versions) {
+  const normalized = new Set();
+  for (const version of versions) {
+    if (typeof version !== 'string'
+      || !/^[A-Za-z0-9][A-Za-z0-9.+_-]*$/.test(version)) {
+      throw new Error(`invalid Codex plugin cache version: ${String(version)}`);
+    }
+    normalized.add(version);
+  }
+  return [...normalized].sort();
+}
+
+function listKnownHookCacheVersions(configDir, marketplaceName, manifest = null) {
+  const root = pluginCacheRoot(configDir, marketplaceName);
+  const versions = [];
+  if (fs.existsSync(root)) {
+    versions.push(...fs.readdirSync(root, { withFileTypes: true })
+      .filter((entry) => entry.isDirectory() || entry.isSymbolicLink())
+      .map((entry) => entry.name));
+  }
+
+  if (manifest && manifest.source === SOURCE_TAG && manifest.adapter === 'codex') {
+    if (manifest.plugin && manifest.plugin.version !== undefined) {
+      versions.push(manifest.plugin.version);
+    }
+    if (manifest.hook_cache_versions !== undefined) {
+      if (!Array.isArray(manifest.hook_cache_versions)) {
+        throw new Error('invalid Codex runtime manifest hook_cache_versions');
+      }
+      versions.push(...manifest.hook_cache_versions);
+    }
+  }
+  return normalizeHookCacheVersions(versions);
+}
+
+function hookAdaptersForVersions(configDir, marketplaceName, versions) {
   const root = pluginCacheRoot(configDir, marketplaceName);
-  if (!fs.existsSync(root)) return [];
-  return fs.readdirSync(root, { withFileTypes: true })
-    .filter((entry) => entry.isDirectory())
-    .map((entry) => path.join(root, entry.name, HOOK_ADAPTER_RELATIVE))
-    .filter((file) => fs.existsSync(file))
-    .sort();
+  return normalizeHookCacheVersions(versions)
+    .map((version) => path.join(root, version, HOOK_ADAPTER_RELATIVE));
+}
+
+function listCachedHookAdapters(configDir, marketplaceName, manifest = null) {
+  return hookAdaptersForVersions(
+    configDir,
+    marketplaceName,
+    listKnownHookCacheVersions(configDir, marketplaceName, manifest),
+  );
 }
 
 function hookForwarder(target) {
@@ -211,6 +250,20 @@ runpy.run_path(${JSON.stringify(path.resolve(target))}, run_name="__main__")
 `;
 }
 
+function prepareHookAdapterPath(file) {
+  const versionRoot = path.dirname(path.dirname(path.dirname(file)));
+  try {
+    const stat = fs.lstatSync(versionRoot);
+    if (stat.isSymbolicLink()) {
+      fs.unlinkSync(versionRoot);
+    } else if (!stat.isDirectory()) {
+      throw new Error(`Codex plugin cache version is not a directory: ${versionRoot}`);
+    }
+  } catch (error) {
+    if (error.code !== 'ENOENT') throw error;
+  }
+}
+
 function restoreCachedHookAdapters(previousAdapters, target) {
   const resolvedTarget = path.resolve(target);
   if (!fs.existsSync(resolvedTarget)) {
@@ -219,6 +272,7 @@ function restoreCachedHookAdapters(previousAdapters, target) {
   const restored = [];
   for (const previous of previousAdapters) {
     if (path.resolve(previous) === resolvedTarget || fs.existsSync(previous)) continue;
+    prepareHookAdapterPath(previous);
     writeAtomic(previous, hookForwarder(resolvedTarget));
     restored.push(previous);
   }
@@ -239,6 +293,7 @@ function writeRuntimeManifest(configDir, data) {
     plugin: data.plugin,
     marketplace: data.marketplace,
     agents: data.agents,
+    hook_cache_versions: data.hookCacheVersions,
   }, null, 2) + '\n');
   return file;
 }
@@ -250,20 +305,25 @@ function install(ctx = {}) {
   const marketplaceFile = resolveMarketplaceFile(ctx);
   ensureDir(configDir);
 
+  const previousManifest = readRuntimeManifest(configDir);
   const legacy = cleanupLegacyConfig(configDir);
   const plugin = buildPlugin({ repoRoot, pluginRoot });
   const agents = installAgents({ repoRoot, configDir });
   const marketplace = upsertMarketplace(marketplaceFile);
-  const manifestFile = writeRuntimeManifest(configDir, {
-    plugin: { root: plugin.root, version: plugin.version },
-    marketplace: { file: marketplace.file, name: marketplace.name },
-    agents: agents.installed,
-  });
+  const previousVersions = listKnownHookCacheVersions(
+    configDir,
+    marketplace.name,
+    previousManifest,
+  );
 
   let registration = null;
   let hookCompatibility = null;
   if (shouldRunPluginCli(ctx)) {
-    const previousAdapters = listCachedHookAdapters(configDir, marketplace.name);
+    const previousAdapters = hookAdaptersForVersions(
+      configDir,
+      marketplace.name,
+      previousVersions,
+    );
     try {
       registration = runPluginCli('add', marketplace.name, ctx);
     } catch (registrationError) {
@@ -285,6 +345,16 @@ function install(ctx = {}) {
       currentHookAdapter(configDir, marketplace.name, plugin),
     );
   }
+  const hookCacheVersions = normalizeHookCacheVersions([
+    ...previousVersions,
+    plugin.version,
+  ]);
+  const manifestFile = writeRuntimeManifest(configDir, {
+    plugin: { root: plugin.root, version: plugin.version },
+    marketplace: { file: marketplace.file, name: marketplace.name },
+    agents: agents.installed,
+    hookCacheVersions,
+  });
 
   return {
     target: configDir,
@@ -379,7 +449,9 @@ module.exports = {
     removeMarketplaceEntry,
     runPluginCli,
     pluginCacheRoot,
+    listKnownHookCacheVersions,
     listCachedHookAdapters,
+    prepareHookAdapterPath,
     restoreCachedHookAdapters,
   },
 };

package/agents/tdd-runner.md

@@ -86,7 +86,8 @@ Scan test files for forbidden patterns:
 ALL PASS / X FAILURES NEED ATTENTION
 ```
 
-## Memory
+## Handoff
 
-Update your project memory with test patterns, common failure causes, and framework
-quirks for this project. Consult memory before starting work.
+Return reusable test patterns, common failure causes, and framework quirks to the
+parent agent as explicit evidence. Do not create or update a private Ultra memory
+store; persistent memory belongs to the host's separately installed provider.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultra-builder-pro-cli",
-  "version": "0.5.1",
+  "version": "0.5.3",
   "description": "Multi-runtime installer for the Ultra Builder Pro agent engineering system — deploys commands, agents, skills, hooks, and MCP server to Claude Code, OpenCode, Codex CLI, and Gemini CLI.",
   "bin": {
     "ultra-builder-pro-cli": "bin/install.js",