universal-plugin 0.11.2 → 0.11.3

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
 	"name": "universal-plugin",
-	"version": "0.11.2",
+	"version": "0.11.3",
 	"description": "Research and design toolkit for building universal AI coding agent plugins that work across Claude Code, Cursor, Codex, and GitHub Copilot CLI.",
 	"author": {
 		"name": "unional"

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
 	"name": "universal-plugin",
-	"version": "0.11.2",
+	"version": "0.11.3",
 	"description": "Research and design toolkit for building universal AI coding agent plugins that work across Claude Code, Cursor, Codex, and GitHub Copilot CLI.",
 	"author": {
 		"name": "unional"

package/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
 	"name": "universal-plugin",
-	"version": "0.11.2",
+	"version": "0.11.3",
 	"description": "Research and design toolkit for building universal AI coding agent plugins that work across Claude Code, Cursor, Codex, and GitHub Copilot CLI.",
 	"author": {
 		"name": "unional"

package/dist/cli.mjs

@@ -9557,13 +9557,25 @@ function syncVersion(root, syncFs) {
 //#region src/publish/cli.ts
 function publishCommand() {
 	const cmd = new Command("publish").description("Prepare plugin for publishing").helpCommand(false);
-	cmd.command("sync-version").description("Sync version from packagePath/package.json (default: the plugin root) into plugin.json").addOption(ROOT_OPTION).action((opts) => {
+	cmd.command("sync-version").description("Sync version from packagePath/package.json (default: the plugin root) into plugin.json").option("--no-build", "Skip re-deriving the vendor manifests").addOption(ROOT_OPTION).action((opts) => {
 		try {
-			const result = syncVersion(resolveRoot(opts.root), realSyncVersionFs);
-			output(result, {
+			const root = resolveRoot(opts.root);
+			const result = syncVersion(root, realSyncVersionFs);
+			const derived = [];
+			if (opts.build !== false) {
+				const build = buildPlugin(root, {});
+				for (const warning of build.warnings) process.stderr.write(`warn: ${warning}\n`);
+				for (const written of build.written) derived.push(path.relative(root, written).split(path.sep).join("/"));
+			}
+			output({
+				...result,
+				derived
+			}, {
 				version: result.version,
-				manifest: result.manifestPath
+				manifest: result.manifestPath,
+				derived
 			});
+			if (opts.build === false) process.stderr.write("→ universal-plugin plugin build\n");
 		} catch (err) {
 			process.stderr.write(`${err instanceof Error ? err.message : String(err)}\n`);
 			process.exit(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "universal-plugin",
-  "version": "0.11.2",
+  "version": "0.11.3",
   "description": "Universal AI agent plugin build tool",
   "keywords": [
     "agent-plugin",

package/plugin.json

@@ -1,7 +1,7 @@
 {
 	"$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
 	"name": "universal-plugin",
-	"version": "0.11.2",
+	"version": "0.11.3",
 	"description": "Research and design toolkit for building universal AI coding agent plugins that work across Claude Code, Cursor, Codex, and GitHub Copilot CLI.",
 	"author": {
 		"name": "unional"

package/readme.md

@@ -69,7 +69,7 @@ npx universal-plugin sync apply <action-id>
 ### publish
 
 ```sh
-npx universal-plugin publish sync-version             # copy packagePath/package.json version into plugin.json
+npx universal-plugin publish sync-version             # copy packagePath/package.json version into plugin.json, then rebuild
 ```
 
 This writes the canonical `plugin.json` only. Run `plugin build` afterwards, or the vendor manifests

package/skills/doctor-universal-plugin/SKILL.md

@@ -73,8 +73,8 @@ Each `code` below is what the script emits.
 | `no-manifest` | no root `plugin.json` — this is not a plugin yet | `/universal-plugin:init-universal-plugin` |
 | `legacy-manifest` | root `plugin.json` with neither `$schema` nor `extensions` — a single-vendor manifest on the canonical path | `/universal-plugin:init-universal-plugin`, adopt route |
 | `vendor-only` | a vendor manifest with no canonical manifest above it | `/universal-plugin:init-universal-plugin`, adopt route |
-| `unbuilt` | a declared vendor whose output path holds no file — that runtime sees no plugin | `universal-plugin plugin build` |
-| `stale` | a derived manifest older than `plugin.json` | `universal-plugin plugin build` |
+| `unbuilt` | a declared vendor whose output path holds no file — that runtime sees no plugin | `/universal-plugin:build-plugin` |
+| `stale` | a derived manifest older than `plugin.json`; for a derived directory (`com.github.copilot/`), its newest file is what is compared | `/universal-plugin:build-plugin` |
 | `hand-edited` | a derived manifest that `build` would rewrite — the edit is already lost, it just has not been overwritten yet | move the field to the canonical manifest or to `harnesses.<vendor>`, then rebuild |
 | `unknown-vendor` | a `vendors` entry no build target matches; reported as `skipped` plus a warning | fix the id in `plugin.json` |
 | `unsupported-component` | a component path on the shared extension names a component one targeted vendor has none of (`agents` for Codex, `rules` for Claude Code, …); the build leaves it out of that vendor's manifest | declare the path under `harnesses.<vendor>` for the vendors that read it, or leave it — nothing is lost |
@@ -82,7 +82,7 @@ Each `code` below is what the script emits.
 | `codex-fields-missing` | Codex is targeted without `version` or `description`; the build fails and writes **nothing at all**, including for the other vendors | add both to the canonical top level |
 | `version-drift` | the `packagePath` `package.json` and the canonical manifest carry different versions | `/universal-plugin:version` |
 | `unreleased-content` | shipped content was committed after the commit that set the current version — a consumer keyed on that version never re-extracts it | `/universal-plugin:version` |
-| `copilot-root-components` | agents, commands, rules, hooks, or LSP servers sit at the plugin root with no copy under `com.github.copilot/` — Copilot CLI reads them only from there in spec mode, so it loads none of them, silently | `universal-plugin plugin build` |
+| `copilot-root-components` | agents, commands, rules, hooks, or LSP servers sit at the plugin root with no copy under `com.github.copilot/` — Copilot CLI reads them only from there in spec mode, so it loads none of them, silently | `/universal-plugin:build-plugin` |
 | `stale-github-plugin` | a leftover `.github/plugin/plugin.json` from an older build — shadowed by root and no longer generated | `/universal-plugin:remove-plugin` |
 | `shadowing-manifest` | a `.plugin/plugin.json` exists — it outranks root in Copilot CLI's search order and silently shadows the canonical manifest | `/universal-plugin:remove-plugin` |
 | `no-vendors` | no vendor is declared, so the build writes nothing and no runtime reads the plugin. On a repository still on the pre-0.6 layout the build stops rather than reporting an empty result, and the detail says so — read it beside `legacy-manifest` and `shadowing-manifest`, which name the signals | `/universal-plugin:init-universal-plugin`, adopt route on the pre-0.6 layout, else update route |
@@ -126,7 +126,7 @@ the diff:
 ```bash
 git status --short          # must be clean first, or the diff proves nothing
 npx universal-plugin plugin build
-git diff -- .claude-plugin .cursor-plugin .codex-plugin
+git diff -- .claude-plugin .cursor-plugin .codex-plugin com.github.copilot
 ```
 
 An empty diff means the derived manifests match what the canonical manifest says. Any hunk is drift —
@@ -180,6 +180,7 @@ is meant to ship — content that is still being worked on is not a finding to a
 | Task | Skill |
 |------|-------|
 | Create, adopt, or change what the plugin declares | `init-universal-plugin` |
+| Rebuild the derived manifests (`unbuilt`, `stale`, `copilot-root-components`) | `build-plugin` |
 | Move the plugin's version | `version` |
 | Remove derived manifests, or the plugin itself | `remove-plugin` |
 | Generate the repository's own marketplace catalogs | `marketplace` |

package/skills/doctor-universal-plugin/scripts/doctor.mjs

@@ -30,6 +30,15 @@ const readJson = (file) => {
 	}
 }
 const mtime = (file) => (fs.existsSync(file) ? fs.statSync(file).mtimeMs : null)
+// A derived directory (copilot-cli's com.github.copilot/) is as fresh as the newest file in it. The
+// directory's own mtime moves only when an entry is added, removed or renamed, so a rebuild that
+// rewrites its files in place leaves it as old as the first build (issue #144).
+const contentMtime = (abs) => {
+	const stat = fs.statSync(abs)
+	if (!stat.isDirectory()) return stat.mtimeMs
+	const files = fs.readdirSync(abs).map((entry) => contentMtime(path.join(abs, entry)))
+	return files.length === 0 ? stat.mtimeMs : Math.max(...files)
+}
 
 const VENDOR_MANIFESTS = ['.claude-plugin/plugin.json', '.cursor-plugin/plugin.json', '.codex-plugin/plugin.json']
 
@@ -207,7 +216,7 @@ if (build === null) {
 		const abs = path.join(root, row.path)
 		const exists = fs.existsSync(abs)
 		// `canonical` means the vendor reads root plugin.json; no derived file is expected.
-		const stale = row.status === 'built' && exists && manifestMtime !== null && mtime(abs) < manifestMtime
+		const stale = row.status === 'built' && exists && manifestMtime !== null && contentMtime(abs) < manifestMtime
 		vendors.push({ vendor: row.vendor, path: row.path, status: row.status, exists, stale })
 
 		if (row.status === 'built' && !exists) {

package/skills/version/README.md

@@ -18,7 +18,7 @@ The first question the skill asks is whether the repository uses changesets.
 
 - **With changesets** — the number is decided by the release, not by this skill. Add a changeset, let
   the release run, and `publish sync-version` carries the released number into the canonical
-  manifest.
+  manifest and re-derives the vendor manifests. With `--no-build`, `plugin build` is the next step.
 - **Without** — `plugin version <bump>` is the whole step. `scripts/version.mjs` runs it from the CLI
   shipped beside the skill, so nothing is downloaded.
 

package/skills/version/SKILL.md

@@ -22,12 +22,17 @@ test -d .changeset && echo "changesets"
 
 **If it does**, the version number is decided by changesets, not by you. Add a changeset and let the
 release run — the repo's `version` script should already call `publish sync-version`, which carries
-the released number from `package.json` into the canonical manifest:
+the released number from `package.json` into the canonical manifest and re-derives the vendor
+manifests, the same way `plugin version` does:
 
 ```bash
 npx universal-plugin publish sync-version
 ```
 
+If the script passes `--no-build`, it must run `plugin build` next (`/universal-plugin:build-plugin`);
+otherwise the vendor manifests and `com.github.copilot/` keep the old version, and a consumer's
+plugin cache never re-extracts.
+
 Do **not** run `plugin version` in a changesets repo — it would decide a number changesets is about
 to decide again.
 
@@ -109,6 +114,7 @@ Every guard resolves before the first write, so a failed run leaves the tree unt
 | Task | Skill |
 |------|-------|
 | Create, adopt, or change what the plugin declares | `init-universal-plugin` |
+| Re-derive the vendor manifests by hand | `build-plugin` |
 | Check whether the two authored versions agree | `doctor` |
 | Add a changeset for the change being released | `add-changeset` |
 | Refresh the repository's own marketplace catalogs after a bump | `marketplace` |