universal-plugin 0.11.0 → 0.11.2

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
 	"name": "universal-plugin",
-	"version": "0.11.0",
+	"version": "0.11.2",
 	"description": "Research and design toolkit for building universal AI coding agent plugins that work across Claude Code, Cursor, Codex, and GitHub Copilot CLI.",
 	"author": {
 		"name": "unional"

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
 	"name": "universal-plugin",
-	"version": "0.11.0",
+	"version": "0.11.2",
 	"description": "Research and design toolkit for building universal AI coding agent plugins that work across Claude Code, Cursor, Codex, and GitHub Copilot CLI.",
 	"author": {
 		"name": "unional"

package/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
 	"name": "universal-plugin",
-	"version": "0.11.0",
+	"version": "0.11.2",
 	"description": "Research and design toolkit for building universal AI coding agent plugins that work across Claude Code, Cursor, Codex, and GitHub Copilot CLI.",
 	"author": {
 		"name": "unional"

package/dist/cli.mjs

@@ -26,11 +26,11 @@ var __copyProps = (to, from, except, desc) => {
 	}
 	return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
 	value: mod,
 	enumerable: true
 }) : target, mod));
-var __require = /* @__PURE__ */ createRequire(import.meta.url);
+var __require = /* #__PURE__ */ (() => createRequire(import.meta.url))();
 //#endregion
 //#region ../../node_modules/.pnpm/commander@14.0.3/node_modules/commander/lib/error.js
 var require_error = /* @__PURE__ */ __commonJSMin(((exports) => {
@@ -102,7 +102,6 @@ var require_argument = /* @__PURE__ */ __commonJSMin(((exports) => {
 				default:
 					this.required = true;
 					this._name = name;
-					break;
 			}
 			if (this._name.endsWith("...")) {
 				this.variadic = true;
@@ -1597,16 +1596,20 @@ Expecting one of '${allowedValues.join("', '")}'`);
 				const oldValue = this.getOptionValue(name);
 				if (val !== null && option.parseArg) val = this._callParseArg(option, val, oldValue, invalidValueMessage);
 				else if (val !== null && option.variadic) val = option._collectValue(val, oldValue);
-				if (val == null) if (option.negate) val = false;
-				else if (option.isBoolean() || option.optional) val = true;
-				else val = "";
+				if (val == null) {
+					if (option.negate) val = false;
+					else if (option.isBoolean() || option.optional) val = true;
+					else val = "";
+				}
 				this.setOptionValueWithSource(name, val, valueSource);
 			};
 			this.on("option:" + oname, (val) => {
-				handleOptionValue(val, `error: option '${option.flags}' argument '${val}' is invalid.`, "cli");
+				const invalidValueMessage = `error: option '${option.flags}' argument '${val}' is invalid.`;
+				handleOptionValue(val, invalidValueMessage, "cli");
 			});
 			if (option.envVar) this.on("optionEnv:" + oname, (val) => {
-				handleOptionValue(val, `error: option '${option.flags}' value '${val}' from env '${option.envVar}' is invalid.`, "env");
+				const invalidValueMessage = `error: option '${option.flags}' value '${val}' from env '${option.envVar}' is invalid.`;
+				handleOptionValue(val, invalidValueMessage, "env");
 			});
 			return this;
 		}
@@ -1997,12 +2000,13 @@ Expecting one of '${allowedValues.join("', '")}'`);
 			}
 			launchWithNode = sourceExt.includes(path$1.extname(executableFile));
 			let proc;
-			if (process$1.platform !== "win32") if (launchWithNode) {
-				args.unshift(executableFile);
-				args = incrementNodeInspectorPort(process$1.execArgv).concat(args);
-				proc = childProcess$1.spawn(process$1.argv[0], args, { stdio: "inherit" });
-			} else proc = childProcess$1.spawn(executableFile, args, { stdio: "inherit" });
-			else {
+			if (process$1.platform !== "win32") {
+				if (launchWithNode) {
+					args.unshift(executableFile);
+					args = incrementNodeInspectorPort(process$1.execArgv).concat(args);
+					proc = childProcess$1.spawn(process$1.argv[0], args, { stdio: "inherit" });
+				} else proc = childProcess$1.spawn(executableFile, args, { stdio: "inherit" });
+			} else {
 				this._checkForMissingExecutable(executableFile, executableDir, subcommand._name);
 				args.unshift(executableFile);
 				args = incrementNodeInspectorPort(process$1.execArgv).concat(args);
@@ -2446,8 +2450,10 @@ Expecting one of '${allowedValues.join("', '")}'`);
 						"default",
 						"config",
 						"env"
-					].includes(this.getOptionValueSource(optionKey))) if (option.required || option.optional) this.emit(`optionEnv:${option.name()}`, process$1.env[option.envVar]);
-					else this.emit(`optionEnv:${option.name()}`);
+					].includes(this.getOptionValueSource(optionKey))) {
+						if (option.required || option.optional) this.emit(`optionEnv:${option.name()}`, process$1.env[option.envVar]);
+						else this.emit(`optionEnv:${option.name()}`);
+					}
 				}
 			});
 		}
@@ -3071,7 +3077,7 @@ function resolveOwnVersion(packageJsonPath, deps = {}) {
 }
 //#endregion
 //#region src/state/state.ts
-const KNOWN_ACTION_TYPES = new Set([
+const KNOWN_ACTION_TYPES = /* @__PURE__ */ new Set([
 	"install",
 	"upgrade",
 	"remove"
@@ -3784,14 +3790,12 @@ function output(data, view) {
 //#endregion
 //#region ../../node_modules/.pnpm/semver@7.8.1/node_modules/semver/internal/constants.js
 var require_constants = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const SEMVER_SPEC_VERSION = "2.0.0";
-	const MAX_LENGTH = 256;
-	const MAX_SAFE_INTEGER = Number.MAX_SAFE_INTEGER || 9007199254740991;
 	module.exports = {
-		MAX_LENGTH,
+		MAX_LENGTH: 256,
 		MAX_SAFE_COMPONENT_LENGTH: 16,
-		MAX_SAFE_BUILD_LENGTH: MAX_LENGTH - 6,
-		MAX_SAFE_INTEGER,
+		MAX_SAFE_BUILD_LENGTH: 250,
+		MAX_SAFE_INTEGER: Number.MAX_SAFE_INTEGER || 
+		/* istanbul ignore next */ 9007199254740991,
 		RELEASE_TYPES: [
 			"major",
 			"premajor",
@@ -3801,7 +3805,7 @@ var require_constants = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			"prepatch",
 			"prerelease"
 		],
-		SEMVER_SPEC_VERSION,
+		SEMVER_SPEC_VERSION: "2.0.0",
 		FLAG_INCLUDE_PRERELEASE: 1,
 		FLAG_LOOSE: 2
 	};
@@ -3933,9 +3937,10 @@ var require_semver$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = class SemVer {
 		constructor(version, options) {
 			options = parseOptions(options);
-			if (version instanceof SemVer) if (version.loose === !!options.loose && version.includePrerelease === !!options.includePrerelease) return version;
-			else version = version.version;
-			else if (typeof version !== "string") throw new TypeError(`Invalid version. Must be a string. Got type "${typeof version}".`);
+			if (version instanceof SemVer) {
+				if (version.loose === !!options.loose && version.includePrerelease === !!options.includePrerelease) return version;
+				else version = version.version;
+			} else if (typeof version !== "string") throw new TypeError(`Invalid version. Must be a string. Got type "${typeof version}".`);
 			if (version.length > MAX_LENGTH) throw new TypeError(`version is longer than ${MAX_LENGTH} characters`);
 			debug("SemVer", version, options);
 			this.options = options;
@@ -4356,7 +4361,11 @@ var require_coerce = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		}
 		if (match === null) return null;
 		const major = match[2];
-		return parse(`${major}.${match[3] || "0"}.${match[4] || "0"}${options.includePrerelease && match[5] ? `-${match[5]}` : ""}${options.includePrerelease && match[6] ? `+${match[6]}` : ""}`, options);
+		const minor = match[3] || "0";
+		const patch = match[4] || "0";
+		const prerelease = options.includePrerelease && match[5] ? `-${match[5]}` : "";
+		const build = options.includePrerelease && match[6] ? `+${match[6]}` : "";
+		return parse(`${major}.${minor}.${patch}${prerelease}${build}`, options);
 	};
 	module.exports = coerce;
 }));
@@ -4372,7 +4381,8 @@ var require_truncate = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		return clonedVersion && doTruncation(clonedVersion, truncation);
 	};
 	const cloneInputVersion = (version, options) => {
-		return parse(version instanceof SemVer ? version.version : version, options);
+		const versionStringToParse = version instanceof SemVer ? version.version : version;
+		return parse(versionStringToParse, options);
 	};
 	const doTruncation = (version, truncation) => {
 		if (isPrerelease(truncation)) return version.version;
@@ -4382,9 +4392,7 @@ var require_truncate = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 				version.minor = 0;
 				version.patch = 0;
 				break;
-			case "minor":
-				version.patch = 0;
-				break;
+			case "minor": version.patch = 0;
 		}
 		return version.format();
 	};
@@ -4433,8 +4441,10 @@ var require_range = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = class Range {
 		constructor(range, options) {
 			options = parseOptions(options);
-			if (range instanceof Range) if (range.loose === !!options.loose && range.includePrerelease === !!options.includePrerelease) return range;
-			else return new Range(range.raw, options);
+			if (range instanceof Range) {
+				if (range.loose === !!options.loose && range.includePrerelease === !!options.includePrerelease) return range;
+				else return new Range(range.raw, options);
+			}
 			if (range instanceof Comparator) {
 				this.raw = range.value;
 				this.set = [[range]];
@@ -4602,18 +4612,21 @@ var require_range = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			let ret;
 			if (isX(M)) ret = "";
 			else if (isX(m)) ret = `>=${M}.0.0${z} <${+M + 1}.0.0-0`;
-			else if (isX(p)) if (M === "0") ret = `>=${M}.${m}.0${z} <${M}.${+m + 1}.0-0`;
-			else ret = `>=${M}.${m}.0${z} <${+M + 1}.0.0-0`;
-			else if (pr) {
+			else if (isX(p)) {
+				if (M === "0") ret = `>=${M}.${m}.0${z} <${M}.${+m + 1}.0-0`;
+				else ret = `>=${M}.${m}.0${z} <${+M + 1}.0.0-0`;
+			} else if (pr) {
 				debug("replaceCaret pr", pr);
-				if (M === "0") if (m === "0") ret = `>=${M}.${m}.${p}-${pr} <${M}.${m}.${+p + 1}-0`;
-				else ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
-				else ret = `>=${M}.${m}.${p}-${pr} <${+M + 1}.0.0-0`;
+				if (M === "0") {
+					if (m === "0") ret = `>=${M}.${m}.${p}-${pr} <${M}.${m}.${+p + 1}-0`;
+					else ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
+				} else ret = `>=${M}.${m}.${p}-${pr} <${+M + 1}.0.0-0`;
 			} else {
 				debug("no pr");
-				if (M === "0") if (m === "0") ret = `>=${M}.${m}.${p}${z} <${M}.${m}.${+p + 1}-0`;
-				else ret = `>=${M}.${m}.${p}${z} <${M}.${+m + 1}.0-0`;
-				else ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
+				if (M === "0") {
+					if (m === "0") ret = `>=${M}.${m}.${p}${z} <${M}.${m}.${+p + 1}-0`;
+					else ret = `>=${M}.${m}.${p}${z} <${M}.${+m + 1}.0-0`;
+				} else ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
 			}
 			debug("caret return", ret);
 			return ret;
@@ -4634,9 +4647,10 @@ var require_range = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			const anyX = xp;
 			if (gtlt === "=" && anyX) gtlt = "";
 			pr = options.includePrerelease ? "-0" : "";
-			if (xM) if (gtlt === ">" || gtlt === "<") ret = "<0.0.0-0";
-			else ret = "*";
-			else if (gtlt && anyX) {
+			if (xM) {
+				if (gtlt === ">" || gtlt === "<") ret = "<0.0.0-0";
+				else ret = "*";
+			} else if (gtlt && anyX) {
 				if (xm) m = 0;
 				p = 0;
 				if (gtlt === ">") {
@@ -4710,8 +4724,10 @@ var require_comparator = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		}
 		constructor(comp, options) {
 			options = parseOptions(options);
-			if (comp instanceof Comparator) if (comp.loose === !!options.loose) return comp;
-			else comp = comp.value;
+			if (comp instanceof Comparator) {
+				if (comp.loose === !!options.loose) return comp;
+				else comp = comp.value;
+			}
 			comp = comp.trim().split(/\s+/).join(" ");
 			debug("comparator", comp, options);
 			this.options = options;
@@ -5031,11 +5047,15 @@ var require_subset = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const minimumVersion = [new Comparator(">=0.0.0")];
 	const simpleSubset = (sub, dom, options) => {
 		if (sub === dom) return true;
-		if (sub.length === 1 && sub[0].semver === ANY) if (dom.length === 1 && dom[0].semver === ANY) return true;
-		else if (options.includePrerelease) sub = minimumVersionWithPreRelease;
-		else sub = minimumVersion;
-		if (dom.length === 1 && dom[0].semver === ANY) if (options.includePrerelease) return true;
-		else dom = minimumVersion;
+		if (sub.length === 1 && sub[0].semver === ANY) {
+			if (dom.length === 1 && dom[0].semver === ANY) return true;
+			else if (options.includePrerelease) sub = minimumVersionWithPreRelease;
+			else sub = minimumVersion;
+		}
+		if (dom.length === 1 && dom[0].semver === ANY) {
+			if (options.includePrerelease) return true;
+			else dom = minimumVersion;
+		}
 		const eqSet = /* @__PURE__ */ new Set();
 		let gt, lt;
 		for (const c of sub) if (c.operator === ">" || c.operator === ">=") gt = higherGT(gt, c, options);
@@ -5169,7 +5189,7 @@ const VENDOR_READS_DEPENDENCIES = {
 };
 /** Vendors the canonical root manifest serves as-is: nothing is derived for them, so a declaration
 *  they cannot read is ignored at runtime rather than dropped from a file. */
-const CANONICAL_SERVED$1 = new Set(["copilot-cli"]);
+const CANONICAL_SERVED$1 = /* @__PURE__ */ new Set(["copilot-cli"]);
 /** What Claude Code accepts as a dependency string: a plugin name, an optional `@marketplace`, and an
 *  optional `@^…` range tail that the runtime strips before resolving. */
 const DEPENDENCY_STRING = /^[A-Za-z0-9][-A-Za-z0-9._]*(@[A-Za-z0-9][-A-Za-z0-9._]*)?(@\^[^@]*)?$/;
@@ -6232,12 +6252,12 @@ const STRING_FIELDS = [
 	"repository",
 	"license"
 ];
-const AUTHOR_FIELDS = new Set([
+const AUTHOR_FIELDS = /* @__PURE__ */ new Set([
 	"name",
 	"email",
 	"url"
 ]);
-const TOP_LEVEL_FIELDS = new Set([
+const TOP_LEVEL_FIELDS = /* @__PURE__ */ new Set([
 	"$schema",
 	"name",
 	...STRING_FIELDS,
@@ -6258,7 +6278,7 @@ function validateCanonicalManifest(manifest, opts) {
 		const uext = isObject(manifest.extensions) ? manifest.extensions[UP_NAMESPACE$2] : void 0;
 		const extension = isObject(uext) ? uext : {};
 		const harnesses = isObject(extension.harnesses) ? extension.harnesses : {};
-		const declared = [...new Set([...Array.isArray(extension.vendors) ? extension.vendors.filter((v) => typeof v === "string") : [], ...Object.keys(harnesses)])];
+		const declared = [.../* @__PURE__ */ new Set([...Array.isArray(extension.vendors) ? extension.vendors.filter((v) => typeof v === "string") : [], ...Object.keys(harnesses)])];
 		for (const vendor of declared.filter((v) => !opts.knownVendors.has(v))) {
 			const message = `Unknown vendor "${vendor}" in harnesses`;
 			warnings.push(message);
@@ -6315,18 +6335,22 @@ function schemaRuleViolations(manifest, warnings) {
 		else for (const [key, value] of Object.entries(manifest.author)) if (!AUTHOR_FIELDS.has(key)) push(`author.${key}`, "additionalProperties", "unknown author field");
 		else if (typeof value !== "string") push(`author.${key}`, "type", "must be a string");
 	}
-	if (manifest.keywords !== void 0) if (!Array.isArray(manifest.keywords)) push("keywords", "type", "must be an array of strings");
-	else manifest.keywords.forEach((keyword, index) => {
-		if (typeof keyword !== "string") push(`keywords[${index}]`, "type", "must be a string");
-	});
-	if (manifest.extensions !== void 0) if (!isObject(manifest.extensions)) push("extensions", "type", "must be an object keyed by namespace");
-	else {
-		for (const [namespace, value] of Object.entries(manifest.extensions)) if (!isObject(value)) push(`extensions.${namespace}`, "type", "must be an object");
-		const uext = manifest.extensions[UP_NAMESPACE$2];
-		if (isObject(uext)) {
-			const dependencies = validateDependencies(uext.dependencies);
-			for (const error of dependencies.errors) push(`extensions.${UP_NAMESPACE$2}.dependencies`, "dependencies", error);
-			warnings.push(...dependencies.warnings);
+	if (manifest.keywords !== void 0) {
+		if (!Array.isArray(manifest.keywords)) push("keywords", "type", "must be an array of strings");
+		else manifest.keywords.forEach((keyword, index) => {
+			if (typeof keyword !== "string") push(`keywords[${index}]`, "type", "must be a string");
+		});
+	}
+	if (manifest.extensions !== void 0) {
+		if (!isObject(manifest.extensions)) push("extensions", "type", "must be an object keyed by namespace");
+		else {
+			for (const [namespace, value] of Object.entries(manifest.extensions)) if (!isObject(value)) push(`extensions.${namespace}`, "type", "must be an object");
+			const uext = manifest.extensions[UP_NAMESPACE$2];
+			if (isObject(uext)) {
+				const dependencies = validateDependencies(uext.dependencies);
+				for (const error of dependencies.errors) push(`extensions.${UP_NAMESPACE$2}.dependencies`, "dependencies", error);
+				warnings.push(...dependencies.warnings);
+			}
 		}
 	}
 	for (const key of Object.keys(manifest)) if (!TOP_LEVEL_FIELDS.has(key)) push(key, "additionalProperties", "not an Agent Plugins 1.0.0 field; move tool-specific data under extensions");
@@ -6346,7 +6370,7 @@ const KNOWN_VENDORS$1 = new Set(Object.keys(VENDOR_OUTPUT));
 /** Vendors the canonical root manifest serves as-is. The build derives no *manifest* for these —
 *  writing one would either be shadowed by root (a lower-precedence path) or clobber root itself.
 *  Their components are a separate question: see COPILOT_NAMESPACE. */
-const CANONICAL_SERVED = new Set(["copilot-cli"]);
+const CANONICAL_SERVED = /* @__PURE__ */ new Set(["copilot-cli"]);
 /** The reverse-domain directory Copilot CLI reads its native components from once a plugin declares
 *  the canonical `$schema` (ADR-0015). It REPLACES the plugin root for these kinds — a spec-mode
 *  runtime does not read `agents/` at all — so the build derives the tree rather than relying on the
@@ -6368,6 +6392,66 @@ const COPILOT_LSP_PATH = "lsp.json";
 /** Authored under the namespace, never derived: Copilot's canvas extensions have no canonical root
 *  location to derive from, so `--clean` must leave this subtree alone. */
 const COPILOT_AUTHORED_DIR = "extensions";
+/** The component paths each derived manifest accepts. A path on the shared extension reaches every
+*  derived manifest unless the vendor is listed here without it — then the build leaves it out and
+*  warns, as it does for `dependencies` (issue #132). A harness override is applied after this
+*  filter, so `harnesses.<vendor>` can still set any key on purpose.
+*  Each row is what the runtime reads: Claude Code's SchemaStore manifest schema, Cursor's published
+*  `plugin.schema.json`, and Codex's manifest loader, which reads `commands` too (migrated into
+*  skills on install). Codex's plugin-creator validator is narrower — it rejects `hooks` and
+*  `commands` — and is not what the row follows. With a root Agent Plugins `$schema`, Codex reads only
+*  `apps`, `hooks` and `interface` from its manifest and ignores the rest, so the Codex row is the
+*  superset its legacy (no-`$schema`) mode reads (`.research/plugin-schema/evidence.md` E28).
+*  Copilot CLI is absent: it reads the canonical manifest and derives no manifest of its own. */
+const VENDOR_COMPONENTS = {
+	"claude-code": /* @__PURE__ */ new Set([
+		"skills",
+		"commands",
+		"agents",
+		"hooks",
+		"mcpServers",
+		"lspServers",
+		"outputStyles",
+		"themes",
+		"channels",
+		"monitors"
+	]),
+	cursor: /* @__PURE__ */ new Set([
+		"skills",
+		"commands",
+		"agents",
+		"rules",
+		"hooks",
+		"mcpServers"
+	]),
+	codex: /* @__PURE__ */ new Set([
+		"skills",
+		"commands",
+		"apps",
+		"hooks",
+		"mcpServers"
+	])
+};
+/** Every component key some vendor reads. Only these are filtered; any other key on the extension is
+*  not a component and passes through as before. */
+const COMPONENT_KEYS = new Set(Object.values(VENDOR_COMPONENTS).flatMap((set) => [...set ?? []]));
+/** Splits the shared component config into what `vendor` reads and the component keys it has none
+*  of. A vendor without a table entry keeps everything. */
+function vendorComponentConfig(componentConfig, vendor) {
+	const supported = VENDOR_COMPONENTS[vendor];
+	if (!supported) return {
+		config: componentConfig,
+		dropped: []
+	};
+	const config = {};
+	const dropped = [];
+	for (const [key, value] of Object.entries(componentConfig)) if (COMPONENT_KEYS.has(key) && !supported.has(key)) dropped.push(key);
+	else config[key] = value;
+	return {
+		config,
+		dropped
+	};
+}
 /** What each vendor's build output occupies in the published package, for `plugin init --npm`'s
 *  `package.json` `files` wiring. */
 const VENDOR_SHIPPED_PATHS = {
@@ -6477,9 +6561,10 @@ function buildPlugin(root, opts = {}) {
 		const outputPath = path.join(root, relPath);
 		const outputDir = path.dirname(outputPath);
 		const vendorFields = harnesses[vendor] ?? {};
+		const components = vendorComponentConfig(componentConfig, vendor);
 		const vendorManifest = {
 			...metadata,
-			...componentConfig,
+			...components.config,
 			...vendorFields
 		};
 		const hooks = canonicalHooks ? translateHooks(canonicalHooks, vendor) : null;
@@ -6491,7 +6576,7 @@ function buildPlugin(root, opts = {}) {
 			if (mcp?.changed) warnings.push(`${vendor} reads the canonical plugin.json directly — the pinned mcpServers is not delivered to it`);
 			const overrides = Object.keys(vendorFields);
 			if (overrides.length > 0) warnings.push(`harnesses.${vendor} sets ${overrides.join(", ")}, but ${vendor} reads the canonical plugin.json directly — these fields are not delivered`);
-			writeSkillArtifacts(vendor, skills, opts, written, warnings);
+			writeSkillArtifacts(vendor, skills, opts, written);
 			const derived = deriveCopilotNamespace(root, componentConfig, hooks, indent, opts, written, warnings);
 			rows.push(derived ? {
 				vendor,
@@ -6504,13 +6589,18 @@ function buildPlugin(root, opts = {}) {
 			});
 			continue;
 		}
+		for (const key of components.dropped.filter((k) => !(k in vendorFields))) warnings.push(`${vendor} has no "${key}" component — the path is left out of ${relPath}`);
 		for (const drop of dedupeDrops(hooks?.drops ?? [])) warnings.push(`${vendor} cannot run the "${drop.type}" hook handler on ${drop.event} — dropped from the derived hooks file`);
 		const derivedHooksPath = path.join(outputDir, "hooks.json");
-		if (hooks?.changed) if (hooks.hooks) vendorManifest["hooks"] = `./${path.dirname(relPath).split(path.sep).join("/")}/hooks.json`;
-		else delete vendorManifest["hooks"];
+		if (hooks?.changed) {
+			if (hooks.hooks) vendorManifest["hooks"] = `./${path.dirname(relPath).split(path.sep).join("/")}/hooks.json`;
+			else delete vendorManifest["hooks"];
+		}
 		const derivedMcpPath = path.join(outputDir, "mcp.json");
-		if (mcp?.changed && declaredMcp) if (declaredMcp.inline) vendorManifest["mcpServers"] = mcp.servers;
-		else vendorManifest["mcpServers"] = `./${path.dirname(relPath).split(path.sep).join("/")}/mcp.json`;
+		if (mcp?.changed && declaredMcp) {
+			if (declaredMcp.inline) vendorManifest["mcpServers"] = mcp.servers;
+			else vendorManifest["mcpServers"] = `./${path.dirname(relPath).split(path.sep).join("/")}/mcp.json`;
+		}
 		if (opts.verbose) {
 			console.log(`[${vendor}] → ${outputPath}`);
 			for (const key of Object.keys(vendorFields)) console.log(`  + ${key} (from harnesses.${vendor})`);
@@ -6527,7 +6617,7 @@ function buildPlugin(root, opts = {}) {
 				else if (!opts.dryRun && fs.existsSync(derivedHooksPath)) fs.unlinkSync(derivedHooksPath);
 			}
 			if (mcp?.changed && declaredMcp && !declaredMcp.inline) writeArtifact(derivedMcpPath, `${JSON.stringify({ mcpServers: mcp.servers }, null, indent)}\n`, opts, written);
-			writeSkillArtifacts(vendor, skills, opts, written, warnings);
+			writeSkillArtifacts(vendor, skills, opts, written);
 			rows.push({
 				vendor,
 				path: relPath,
@@ -6615,20 +6705,9 @@ function refreshCatalogs(root, manifest, vendors, opts, written, warnings) {
 		catalogRoot: repo.root
 	} : { catalogs: rows };
 }
-function writeSkillArtifacts(vendor, skills, opts, written, warnings) {
-	for (const skill of skills) {
-		if (vendor === "claude-code") {
-			writeClaudeSkill(skill, opts, written);
-			continue;
-		}
-		if (vendor === "cursor") continue;
-		if (skill.invocationPolicy === "model") continue;
-		if (vendor === "codex") try {
-			writeArtifact(path.join(os.homedir(), ".codex", "prompts", `${skill.name}.md`), skill.body, opts, written);
-		} catch (err) {
-			warnings.push(`Failed to write Codex prompt for skill "${skill.name}" (best-effort): ${err instanceof Error ? err.message : String(err)}`);
-		}
-	}
+function writeSkillArtifacts(vendor, skills, opts, written) {
+	if (vendor !== "claude-code") return;
+	for (const skill of skills) writeClaudeSkill(skill, opts, written);
 }
 /** Resolves a `pathValue` declaration — a single "./" path, an array of them, or a { paths: [...] }
 *  object — into the list of declared paths. Returns null when the field is absent or malformed, so
@@ -6948,7 +7027,7 @@ function buildCommand() {
 }
 //#endregion
 //#region src/pin/fs.ts
-const TEXT_EXTENSIONS = new Set([
+const TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
 	".md",
 	".mdx",
 	".markdown",
@@ -7636,7 +7715,7 @@ function initCommand$1(deps = { fs: realInitFs }) {
 	return cmd;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@cyberuni+agent-harness@0.1.0/node_modules/@cyberuni/agent-harness/dist/index.js
+//#region ../../node_modules/.pnpm/@cyberuni+agent-harness@0.3.0/node_modules/@cyberuni/agent-harness/dist/index.js
 const harnessIds = [
 	"claude-code",
 	"cursor",
@@ -7647,7 +7726,10 @@ const harnessIds = [
 	"gemini-cli",
 	"qwen-code",
 	"vscode-copilot",
-	"cline"
+	"cline",
+	"crush",
+	"openhands",
+	"augment"
 ];
 function resolveHarnessEnvironment(environment = {}) {
 	return {
@@ -7868,6 +7950,50 @@ const storages = {
 				research: "E-CLINE-P3"
 			}]
 		};
+	},
+	crush: ({ env, homedir }) => {
+		return {
+			harness: "crush",
+			configDir: env.CRUSH_GLOBAL_CONFIG || join(env.XDG_CONFIG_HOME || join(homedir, ".config"), "crush"),
+			locations: []
+		};
+	},
+	openhands: ({ env, homedir }) => {
+		const configDir = env.OH_PERSISTENCE_DIR || env.OPENHANDS_PERSISTENCE_DIR || join(homedir, ".openhands");
+		const installed = join(configDir, "plugins", "installed");
+		return {
+			harness: "openhands",
+			configDir,
+			locations: [{
+				kind: "installed-plugins",
+				path: installed,
+				description: "Installed plugins, one folder each",
+				research: "E-OH-P3"
+			}, {
+				kind: "enabled-record",
+				path: join(installed, ".installed.json"),
+				description: "Install metadata keyed by plugin name, each with enabled: <bool>",
+				research: "E-OH-P4"
+			}]
+		};
+	},
+	augment: ({ homedir }) => {
+		const configDir = join(homedir, ".augment");
+		return {
+			harness: "augment",
+			configDir,
+			locations: [{
+				kind: "marketplaces",
+				path: join(configDir, "plugins", "marketplaces"),
+				description: "Marketplace checkouts",
+				research: "E-AUG-P2"
+			}, {
+				kind: "enabled-record",
+				path: join(configDir, "settings.json"),
+				description: "User settings; enabledPlugins maps plugin@marketplace to a boolean",
+				research: "E-AUG-P4"
+			}]
+		};
 	}
 };
 //#endregion
@@ -7964,7 +8090,7 @@ function readPluginName(manifestPath) {
 }
 /** Entries a copy never carries: the working copy's history and its installed dependencies. Neither
 *  is part of the plugin, and both dwarf it. */
-const COPY_EXCLUDED = new Set([".git", "node_modules"]);
+const COPY_EXCLUDED = /* @__PURE__ */ new Set([".git", "node_modules"]);
 /** Applies one planned write. A replace removes the destination first, so a copy never merges into
 *  what was there before. A copy dereferences symlinks — a skill linked into the tree has to travel
 *  as its content, since the destination is read on its own. */
@@ -9302,8 +9428,10 @@ function runPrepare(opts) {
 			version
 		});
 	}
-	if (!dryRun) if (scope === "global") prepareFs.writeGlobalState(updatedState);
-	else prepareFs.writeProjectState(updatedState);
+	if (!dryRun) {
+		if (scope === "global") prepareFs.writeGlobalState(updatedState);
+		else prepareFs.writeProjectState(updatedState);
+	}
 	return { newActionCount: actions.length };
 }
 //#endregion

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "universal-plugin",
-  "version": "0.11.0",
+  "version": "0.11.2",
   "description": "Universal AI agent plugin build tool",
   "keywords": [
     "agent-plugin",
@@ -39,8 +39,8 @@
     "agents"
   ],
   "dependencies": {
-    "@cyberuni/agent-harness": "^0.1.0",
-    "@repobuddy/upx": "^0.1.0",
+    "@cyberuni/agent-harness": "^0.3.0",
+    "@repobuddy/upx": "^0.2.0",
     "@toon-format/toon": "^4.1.1",
     "commander": "^14.0.3",
     "semver": "^7.8.1"
@@ -50,7 +50,7 @@
     "@types/semver": "^7.7.1",
     "ajv": "^8.20.0",
     "knip": "^6.14.1",
-    "tsdown": "^0.22.0",
+    "tsdown": "^0.23.0",
     "tsx": "^4.22.3",
     "typescript": "^6.0.0",
     "vitest": "^4.1.7"

package/plugin.json

@@ -1,7 +1,7 @@
 {
 	"$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
 	"name": "universal-plugin",
-	"version": "0.11.0",
+	"version": "0.11.2",
 	"description": "Research and design toolkit for building universal AI coding agent plugins that work across Claude Code, Cursor, Codex, and GitHub Copilot CLI.",
 	"author": {
 		"name": "unional"

package/readme.md

@@ -110,7 +110,7 @@ TOON by default; pass `--format json` for JSON.
 
 This package ships its own documents (`plugin-design`, `slash-invocation`, `universal-plugin`) under
 `references/`. Read one with `buddy-agent-harness reference show <name>` in any project that depends
-on `universal-plugin`, or, from a skill, with the `load-reference` skill in the `buddy-agent-harness`
+on `universal-plugin`, or, from a skill, with the `reference` skill in the `buddy-agent-harness`
 plugin.
 
 ### Housekeeping

package/references/plugin-design.md

@@ -330,6 +330,6 @@ Portability rules for skill bodies: keep each `SKILL.md` body under 6,000 chars;
 
 ## References
 
-Load `skill-design`, `skill-repo-structure`, and `agent-tool-output` with the `load-reference` skill in the `buddy-agent-harness` plugin.
+Load `skill-design`, `skill-repo-structure`, and `agent-tool-output` with the `reference` skill in the `buddy-agent-harness` plugin.
 
 Spec: https://github.com/cyberuni/universal-plugin/blob/main/packages/universal-plugin/.agents/spec/spec.md

package/references/slash-invocation.md

@@ -23,7 +23,7 @@ Deploy $ARGUMENTS.
 
 - Claude Code uses the same `SKILL.md` and adds its native invocation flag.
 - Cursor receives a thin `.cursor/commands/<skill>.md` prompt insert for `user` and `both` skills.
-- Codex receives a best-effort, local-only `~/.codex/prompts/<skill>.md` for `user` and `both` skills. Codex has deprecated custom prompts, so the skill remains the primary integration.
+- Codex uses the skill itself. A user invokes it with `$skill` or `/skills`, so no command is derived. Codex custom prompts are deprecated and home-only, and `plugin build` never writes outside the plugin tree.
 - Copilot CLI receives no derived command. Its `/skill-name` form is only a prompt hint, not deterministic invocation.
 
 If a workflow requires deterministic user-triggered invocation, document Copilot

package/references/universal-plugin.md

@@ -1,4 +1,4 @@
 # Universal Plugin Format
 
 The rules for the universal plugin format live in `plugin-design`, which this package also ships.
-Load `plugin-design` with the `load-reference` skill in the `buddy-agent-harness` plugin.
+Load `plugin-design` with the `reference` skill in the `buddy-agent-harness` plugin.

package/skills/build-plugin/SKILL.md

@@ -117,7 +117,7 @@ Validation runs before the first write, so a failed build leaves the tree untouc
 - **Expect a build to pin skill `npx` references.** That is the release-time `plugin bundle`, not
   this step.
 - **Expect a build to copy governances into skills.** A skill loads a reference through the
-  `load-reference` skill in the `buddy-agent-harness` plugin; the build no longer copies them, and
+  `reference` skill in the `buddy-agent-harness` plugin; the build no longer copies them, and
   `--check` is gone.
 
 ## Related skills

package/skills/doctor-universal-plugin/SKILL.md

@@ -77,6 +77,7 @@ Each `code` below is what the script emits.
 | `stale` | a derived manifest older than `plugin.json` | `universal-plugin plugin build` |
 | `hand-edited` | a derived manifest that `build` would rewrite — the edit is already lost, it just has not been overwritten yet | move the field to the canonical manifest or to `harnesses.<vendor>`, then rebuild |
 | `unknown-vendor` | a `vendors` entry no build target matches; reported as `skipped` plus a warning | fix the id in `plugin.json` |
+| `unsupported-component` | a component path on the shared extension names a component one targeted vendor has none of (`agents` for Codex, `rules` for Claude Code, …); the build leaves it out of that vendor's manifest | declare the path under `harnesses.<vendor>` for the vendors that read it, or leave it — nothing is lost |
 | `undeliverable-override` | `harnesses["copilot-cli"]` sets fields that reach nothing | `/universal-plugin:init-universal-plugin`, update route — move them to a vendor that has a derived manifest, or drop them |
 | `codex-fields-missing` | Codex is targeted without `version` or `description`; the build fails and writes **nothing at all**, including for the other vendors | add both to the canonical top level |
 | `version-drift` | the `packagePath` `package.json` and the canonical manifest carry different versions | `/universal-plugin:version` |

package/skills/doctor-universal-plugin/scripts/doctor.mjs

@@ -232,6 +232,13 @@ if (build === null) {
 				'no vendor is declared — the build writes nothing, so no runtime reads this plugin',
 				'/universal-plugin:init-universal-plugin, update route',
 			)
+		} else if (/has no "[^"]+" component/.test(warning)) {
+			add(
+				'unsupported-component',
+				'low',
+				warning,
+				'declare the path under harnesses.<vendor> for the vendors that read it, or leave it — the build already drops it',
+			)
 		} else if (/^Unknown vendor/.test(warning)) {
 			add('unknown-vendor', 'medium', warning, 'fix the vendor id in plugin.json')
 		} else {

package/skills/init-universal-plugin/SKILL.md

@@ -38,7 +38,7 @@ This skill owns the **authoring** side: the plugin a project ships. Setting a re
 
 ## Prerequisites
 
-Before any work that adds or removes components, load `plugin-design` with the `load-reference`
+Before any work that adds or removes components, load `plugin-design` with the `reference`
 skill in the `buddy-agent-harness` plugin.
 
 It is the authoritative source for which component to reach for and which anti-patterns to avoid.
@@ -233,7 +233,7 @@ This skill is not a formatter. If the project has one, run it over the written f
 
 ## References
 
-- Reference: `plugin-design`, loaded with the `load-reference` skill in the `buddy-agent-harness` plugin
+- Reference: `plugin-design`, loaded with the `reference` skill in the `buddy-agent-harness` plugin
 - Spec: https://github.com/cyberuni/universal-plugin/blob/main/packages/universal-plugin/.agents/spec/spec.md
 - Manifest schema (Agent Plugins Specification v1.0.0): https://agent-plugins.org/schemas/1.0.0/plugin.schema.json
 - Extension schema (the body of `extensions["org.cyberuni.universal-plugin"]`), shipped in the package at

package/skills/init-universal-plugin/references/vendors/claude-code.md

@@ -8,7 +8,8 @@ npx universal-plugin plugin build --vendor claude-code
 
 ## What lands in the derived manifest
 
-The shared metadata from the canonical top level, plus the component paths, plus whatever
+The shared metadata from the canonical top level, plus the component paths Claude Code reads (every
+one except `rules` and Codex's `apps`; the build drops those with a warning), plus whatever
 `extensions["org.cyberuni.universal-plugin"].harnesses["claude-code"]` sets. `$schema`, `extensions`,
 `vendors`, and `harnesses` are universal-plugin's own orchestration — they never
 appear in a vendor manifest.

package/skills/init-universal-plugin/references/vendors/codex.md

@@ -33,14 +33,35 @@ Codex's presentation metadata goes under its `harnesses` entry:
 }
 ```
 
-## Skills
+## Components
+
+What Codex reads from `.codex-plugin/plugin.json` depends on the root `plugin.json`:
+
+- **Root declares the canonical `$schema`** (`https://agent-plugins.org/schemas/1.0.0/plugin.schema.json`,
+  the normal universal-plugin layout). Codex reads root `plugin.json` as an Agent Plugins manifest,
+  takes skills from `./skills` and MCP servers from `./mcp.json`, and uses `.codex-plugin/plugin.json`
+  only as an overlay for `apps`, `hooks`, and `interface`. Any other key there is ignored, and
+  commands are not read at all.
+- **Root has no `$schema`**. `.codex-plugin/plugin.json` is the manifest. Codex reads `skills`,
+  `commands`, `hooks`, `mcpServers`, and `apps` from it, and migrates each command into a skill on
+  install, falling back to `./commands/` when `commands` is absent.
 
-For every skill that is not `invocation-policy: model`, the build also writes
-`~/.codex/prompts/<name>.md` — the skill body, as a Codex prompt.
+Codex has no `agents`, `rules`, `lspServers`, `outputStyles`, `themes`, `channels`, or `monitors` in
+either case. `plugin build` leaves any of those out of `.codex-plugin/plugin.json` and warns
+(`codex has no "agents" component — the path is left out of .codex-plugin/plugin.json`); the other
+vendors still get the path. Set the path under `harnesses.codex` only if you mean Codex to see it
+anyway — a harness override is never filtered.
+
+The Codex runtime ignores keys it does not read. The plugin-creator validator Codex ships
+(`validate_plugin.py`) is stricter: it rejects any field outside its allowlist, including `commands`
+and `hooks`. That matters only if you submit the plugin through OpenAI's ingestion flow.
+
+## Skills
 
-Two things follow. It writes **outside the repository**, into the current machine's home directory,
-so it is not part of the plugin's tracked output and does not travel with a clone. And it is
-**best-effort**: a failure there becomes a build warning, not a failed build. Read the warnings.
+Codex reaches a plugin's skills natively. A user invokes one with `$name` or `/skills`, so the
+build derives nothing per skill for Codex. Codex custom prompts (`~/.codex/prompts/`) are deprecated
+and load only from the user's home directory, and the build never writes there. See
+[`codex-skill-invocation`](https://github.com/cyberuni/universal-plugin/blob/main/.research/codex-skill-invocation/conclusion.md).
 
 ## Hooks
 

package/skills/init-universal-plugin/references/vendors/cursor.md

@@ -22,6 +22,12 @@ Cursor's catalog metadata goes under its `harnesses` entry, not at the canonical
 }
 ```
 
+## Components
+
+Cursor reads `skills`, `commands`, `agents`, `rules`, `hooks`, and `mcpServers`. Its manifest schema
+is closed, so the build leaves `lspServers`, `outputStyles`, `apps`, and Claude Code's other
+components out of `.cursor-plugin/plugin.json` and warns.
+
 ## Skills
 
 Cursor reads `SKILL.md` straight from the path the manifest's `skills` field names, and lets the user