agentbundle 0.31.0__tar.gz → 0.32.0__tar.gz

agentbundle-0.32.0/MANIFEST.in

@@ -0,0 +1,16 @@
+graft tests
+include conftest.py
+graft templates
+recursive-include agentbundle/_data/catalogue-scaffold/packs/_example/.apm *
+recursive-include agentbundle/_data/catalogue-scaffold/packs/_example/.claude-plugin *
+prune tests/live-catalogue
+prune tests/.pytest_cache
+prune tests/.mypy_cache
+prune tests/.ruff_cache
+prune tests/.hypothesis
+prune tests/htmlcov
+global-exclude *.py[cod]
+global-exclude .DS_Store
+global-exclude .coverage
+global-exclude .coverage.*
+global-exclude coverage.xml

{agentbundle-0.31.0 → agentbundle-0.32.0}/PKG-INFO

@@ -1,17 +1,15 @@
 Metadata-Version: 2.4
 Name: agentbundle
-Version: 0.31.0
+Version: 0.32.0
 Summary: npm for your coding agent. Install packs of skills, subagents, and hooks into any repo, for every major agent.
 Author-email: eugenelim <eugenelim@users.noreply.github.com>
-License: Apache-2.0 OR MIT
+License-Expression: Apache-2.0 OR MIT
 Project-URL: Homepage, https://github.com/eugenelim/agent-ready-repo
 Project-URL: Source, https://github.com/eugenelim/agent-ready-repo
 Project-URL: Documentation, https://eugenelim.github.io/agent-ready-repo/docs/
 Project-URL: Catalogue Format, https://eugenelim.github.io/agent-ready-repo/docs/reference/catalogue-format
 Project-URL: Changelog, https://eugenelim.github.io/agent-ready-repo/docs/changelog
 Classifier: Development Status :: 4 - Beta
-Classifier: License :: OSI Approved :: Apache Software License
-Classifier: License :: OSI Approved :: MIT License
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
@@ -31,7 +29,7 @@ Requires-Dist: pyyaml>=6.0; extra == "lint"
 ## Quick start
 
 ```bash
-pip install agentbundle
+python -m pip install agentbundle
 ```
 
 Requires Python 3.11+. Runs on macOS, Linux, and Windows.
@@ -52,8 +50,36 @@ agentbundle install --pack desk-research --scope user
 
 User-scope packs land in your home directory, not the repo — they're yours, not the team's, and they're there in every project you open.
 
+**Try a pack without committing it** — so the pack is live in this clone while
+`git status` stays clean:
+
+```bash
+agentbundle install --pack core --scope local
+```
+
+Local scope projects the same runtime files as repo scope, then records them in
+`.git/info/exclude`. It requires a Git work tree. Uninstalling removes both the
+projected files and the managed exclude entries; local and repo installs of the
+same pack cannot coexist.
+
 The install auto-detects your agent (`--adapter` overrides). Multi-IDE? Install the same pack for each agent at the same scope — they coexist, and the agents that read `.agents/skills/` (codex, cursor, gemini, copilot) share one skill copy instead of fighting over it. To install from a **different** catalogue, pass it as a trailing argument — a git URL or a local path (`agentbundle install --pack core <catalogue>`); a `config set source <catalogue>` makes that the default, and an editable clone (`pip install -e`) defaults to itself.
 
+## Claude Code marketplace
+
+Claude Code users can install any pack that permits user scope without first
+installing this CLI:
+
+```bash
+claude plugin marketplace add eugenelim/agent-ready-repo
+claude plugin install architect@agent-ready-repo
+```
+
+The marketplace excludes repo-only packs because Claude plugins live in a
+global cache. Install `core` and other repo-only packs with `agentbundle` so
+their files land in the project. For hook-bearing user-scope packs, the
+generated marketplace description lists the authored hook event, matcher,
+timeout, interpreter, and body path before publication.
+
 ## More commands
 
 ```bash
@@ -200,10 +226,10 @@ Artifactory bootstrap and editable-install detection entirely. `agentbundle` fal
 straight through to the packaged default, so hosts without network access to Artifactory
 still resolve a source without errors.
 
-See the full enterprise adoption guide at
-`docs/guides/_shared/how-to/use-an-artifactory-catalogue.md` for all six flows
-(org bootstrap, repo-scope CI upgrade, user-scope MDM, source-conflict remediation,
-disconnected hosts, and security controls).
+See [Configure catalogue enterprise
+distribution](https://github.com/eugenelim/agent-ready-repo/blob/main/guides/_shared/how-to/configure-catalogue-enterprise-distribution.md)
+for channel setup, authentication, CI upgrades, disconnected hosts, and the
+security boundary.
 
 ## Build your own catalogue
 
@@ -250,6 +276,7 @@ my-pack/
       evals/                 # activation + output-quality evals, skill-local
     agents/<name>.md         # subagents
     hooks/<name>.py          # lifecycle hooks
+    hook-wiring/<name>.toml  # adapter event wiring for a shipped hook body
   tests/                     # implementation tests — NEVER projected
     skills/<name>/
     hooks/
@@ -278,6 +305,12 @@ on the published distribution branch, and every entry is schema-validated at
 build time against `marketplace-entry.schema.json`. Extra fields stay in `pack.toml`; the projection
 is deliberately lossy per tool.
 
+A hook-bearing pack that permits user scope must explicitly set
+`[pack.install] user-scope-hooks = true`. On the Claude-plugin route,
+`agentbundle` compiles supported Claude-shaped wiring into native plugin hooks
+and rejects unsafe event, matcher, timeout, command, or body-path shapes before
+creating output. Direct CLI installs keep their adapter-native wiring contract.
+
 Point a catalogue URI (a git URL or a local path) at the repo that holds your packs. Then `validate` a pack against the adapter contract, `render` it to preview the projection, and `install` it into a target repo. `scaffold` drops a pack's seeds into a fresh directory to start from. The build pipeline (`agentbundle.build`) is the same engine `make build` runs.
 
 **Org adapter default:** If your org ships a private `agentbundle` wheel (or a fork pinned to your internal catalogue), you can set a default adapter for all developers without requiring them to run `agentbundle config set` or pass `--adapter` on every install. Add an `[organization]` table to `_data/install-defaults.toml` in your fork:
@@ -287,7 +320,7 @@ Point a catalogue URI (a git URL or a local path) at the repo that holds your pa
 preferred_adapter = "cursor"
 ```
 
-The org hint fires after the user-config but before the on-disk IDE probe — so `--adapter`, user-config, and upgrade state-hints all take priority. An invalid value exits 1 before writing anything. See the [`agentbundle` reference](https://github.com/eugenelim/agent-ready-repo/blob/main/docs/guides/_shared/reference/agentbundle.md#org-adapter-default) for the full cascade.
+The org hint fires after the user-config but before the on-disk IDE probe — so `--adapter`, user-config, and upgrade state-hints all take priority. An invalid value exits 1 before writing anything. See the [`agentbundle` reference](https://github.com/eugenelim/agent-ready-repo/blob/main/guides/_shared/reference/agentbundle.md#org-adapter-default) for the full cascade.
 
 **Bundled contracts** — the wheel ships the machine contracts used for offline validation:
 `pack.schema.json`, `skill.schema.json`, `guide.schema.json`, `skill-manifest.schema.json`,
@@ -348,7 +381,7 @@ When `preferred-adapter` names an adapter not in the upstream `SELF_HOST_ADAPTER
 agentbundle pack evals run --pack <pack-name> --catalogue-root .
 ```
 
-See the [pack layout reference](https://github.com/eugenelim/agent-ready-repo/blob/main/docs/architecture/pack-layout.md) and [authoring a skill](https://github.com/eugenelim/agent-ready-repo/blob/main/docs/guides/_shared/how-to/author-a-skill.md).
+See the [pack layout reference](https://github.com/eugenelim/agent-ready-repo/blob/main/docs/architecture/pack-layout.md) and [authoring a skill](https://github.com/eugenelim/agent-ready-repo/blob/main/guides/_shared/how-to/author-a-skill.md).
 
 ## Catalogue defaults and pack config API
 

{agentbundle-0.31.0 → agentbundle-0.32.0}/README-pypi.md

@@ -9,7 +9,7 @@
 ## Quick start
 
 ```bash
-pip install agentbundle
+python -m pip install agentbundle
 ```
 
 Requires Python 3.11+. Runs on macOS, Linux, and Windows.
@@ -30,8 +30,36 @@ agentbundle install --pack desk-research --scope user
 
 User-scope packs land in your home directory, not the repo — they're yours, not the team's, and they're there in every project you open.
 
+**Try a pack without committing it** — so the pack is live in this clone while
+`git status` stays clean:
+
+```bash
+agentbundle install --pack core --scope local
+```
+
+Local scope projects the same runtime files as repo scope, then records them in
+`.git/info/exclude`. It requires a Git work tree. Uninstalling removes both the
+projected files and the managed exclude entries; local and repo installs of the
+same pack cannot coexist.
+
 The install auto-detects your agent (`--adapter` overrides). Multi-IDE? Install the same pack for each agent at the same scope — they coexist, and the agents that read `.agents/skills/` (codex, cursor, gemini, copilot) share one skill copy instead of fighting over it. To install from a **different** catalogue, pass it as a trailing argument — a git URL or a local path (`agentbundle install --pack core <catalogue>`); a `config set source <catalogue>` makes that the default, and an editable clone (`pip install -e`) defaults to itself.
 
+## Claude Code marketplace
+
+Claude Code users can install any pack that permits user scope without first
+installing this CLI:
+
+```bash
+claude plugin marketplace add eugenelim/agent-ready-repo
+claude plugin install architect@agent-ready-repo
+```
+
+The marketplace excludes repo-only packs because Claude plugins live in a
+global cache. Install `core` and other repo-only packs with `agentbundle` so
+their files land in the project. For hook-bearing user-scope packs, the
+generated marketplace description lists the authored hook event, matcher,
+timeout, interpreter, and body path before publication.
+
 ## More commands
 
 ```bash
@@ -178,10 +206,10 @@ Artifactory bootstrap and editable-install detection entirely. `agentbundle` fal
 straight through to the packaged default, so hosts without network access to Artifactory
 still resolve a source without errors.
 
-See the full enterprise adoption guide at
-`docs/guides/_shared/how-to/use-an-artifactory-catalogue.md` for all six flows
-(org bootstrap, repo-scope CI upgrade, user-scope MDM, source-conflict remediation,
-disconnected hosts, and security controls).
+See [Configure catalogue enterprise
+distribution](https://github.com/eugenelim/agent-ready-repo/blob/main/guides/_shared/how-to/configure-catalogue-enterprise-distribution.md)
+for channel setup, authentication, CI upgrades, disconnected hosts, and the
+security boundary.
 
 ## Build your own catalogue
 
@@ -228,6 +256,7 @@ my-pack/
       evals/                 # activation + output-quality evals, skill-local
     agents/<name>.md         # subagents
     hooks/<name>.py          # lifecycle hooks
+    hook-wiring/<name>.toml  # adapter event wiring for a shipped hook body
   tests/                     # implementation tests — NEVER projected
     skills/<name>/
     hooks/
@@ -256,6 +285,12 @@ on the published distribution branch, and every entry is schema-validated at
 build time against `marketplace-entry.schema.json`. Extra fields stay in `pack.toml`; the projection
 is deliberately lossy per tool.
 
+A hook-bearing pack that permits user scope must explicitly set
+`[pack.install] user-scope-hooks = true`. On the Claude-plugin route,
+`agentbundle` compiles supported Claude-shaped wiring into native plugin hooks
+and rejects unsafe event, matcher, timeout, command, or body-path shapes before
+creating output. Direct CLI installs keep their adapter-native wiring contract.
+
 Point a catalogue URI (a git URL or a local path) at the repo that holds your packs. Then `validate` a pack against the adapter contract, `render` it to preview the projection, and `install` it into a target repo. `scaffold` drops a pack's seeds into a fresh directory to start from. The build pipeline (`agentbundle.build`) is the same engine `make build` runs.
 
 **Org adapter default:** If your org ships a private `agentbundle` wheel (or a fork pinned to your internal catalogue), you can set a default adapter for all developers without requiring them to run `agentbundle config set` or pass `--adapter` on every install. Add an `[organization]` table to `_data/install-defaults.toml` in your fork:
@@ -265,7 +300,7 @@ Point a catalogue URI (a git URL or a local path) at the repo that holds your pa
 preferred_adapter = "cursor"
 ```
 
-The org hint fires after the user-config but before the on-disk IDE probe — so `--adapter`, user-config, and upgrade state-hints all take priority. An invalid value exits 1 before writing anything. See the [`agentbundle` reference](https://github.com/eugenelim/agent-ready-repo/blob/main/docs/guides/_shared/reference/agentbundle.md#org-adapter-default) for the full cascade.
+The org hint fires after the user-config but before the on-disk IDE probe — so `--adapter`, user-config, and upgrade state-hints all take priority. An invalid value exits 1 before writing anything. See the [`agentbundle` reference](https://github.com/eugenelim/agent-ready-repo/blob/main/guides/_shared/reference/agentbundle.md#org-adapter-default) for the full cascade.
 
 **Bundled contracts** — the wheel ships the machine contracts used for offline validation:
 `pack.schema.json`, `skill.schema.json`, `guide.schema.json`, `skill-manifest.schema.json`,
@@ -326,7 +361,7 @@ When `preferred-adapter` names an adapter not in the upstream `SELF_HOST_ADAPTER
 agentbundle pack evals run --pack <pack-name> --catalogue-root .
 ```
 
-See the [pack layout reference](https://github.com/eugenelim/agent-ready-repo/blob/main/docs/architecture/pack-layout.md) and [authoring a skill](https://github.com/eugenelim/agent-ready-repo/blob/main/docs/guides/_shared/how-to/author-a-skill.md).
+See the [pack layout reference](https://github.com/eugenelim/agent-ready-repo/blob/main/docs/architecture/pack-layout.md) and [authoring a skill](https://github.com/eugenelim/agent-ready-repo/blob/main/guides/_shared/how-to/author-a-skill.md).
 
 ## Catalogue defaults and pack config API
 

{agentbundle-0.31.0 → agentbundle-0.32.0}/agentbundle/_data/adapter.schema.json

@@ -54,6 +54,25 @@
                   ]
                 },
                 "target-path": {"type": "string"},
+                "plugin-target-path": {"type": "string"},
+                "plugin-mode": {
+                  "type": "string",
+                  "enum": [
+                    "direct-directory",
+                    "direct-file",
+                    "merge-json",
+                    "user-merge-json",
+                    "merge-into-agent-json",
+                    "instruction-file",
+                    "managed-block-inline",
+                    "degraded-info-log",
+                    "dropped",
+                    "codex-agent-toml",
+                    "copilot-agent-md",
+                    "copilot-hooks-json",
+                    "gemini-command-toml"
+                  ]
+                },
                 "on-conflict": {
                   "type": "string",
                   "enum": [

{agentbundle-0.31.0 → agentbundle-0.32.0}/agentbundle/_data/adapter.toml

@@ -90,7 +90,10 @@
 # reader cohort. cursor/gemini/copilot route the `skill` primitive to the shared
 # `.agents/skills/` home (joining codex) and gain it in `allowed-prefixes` at
 # both scopes; their agent/hook/command projection stays native.
-version = "0.17"
+# v0.18 (Claude-plugin hook parity): `hook-body` gains the plugin-root
+# `hooks/` target and `hook-wiring` is dropped from the ordinary projection on
+# that route after its entries are compiled into plugin.json.
+version = "0.18"
 
 # Sibling schemas this contract references — pack metadata and the
 # per-pack Claude-plugin manifest.
@@ -202,11 +205,13 @@ on-conflict = "prompt-then-preserve"
 primitive = "hook-body"
 mode = "direct-file"
 target-path = "tools/hooks/"
+plugin-target-path = "hooks/"
 on-conflict = "prompt-then-preserve"
 
 [[adapter."claude-code".projection]]
 primitive = "hook-wiring"
 mode = "merge-json"
+plugin-mode = "dropped"
 target-path = ".claude/settings.local.json"
 managed-key = "hooks"
 on-conflict = "merge-managed-key-only"

{agentbundle-0.31.0 → agentbundle-0.32.0}/agentbundle/_data/catalogue-scaffold/manifest.json

@@ -12,7 +12,10 @@
     "profiles/AGENTS.md": "8950438d9e0f57c13613104c88c90b598b53196c91bfdced6d63e4e01b5e9254",
     "profiles/README.md": "a0b0268edc57fc575f7fea08f3363ba7da9f6e67dc4a0a6f8bd38c9668c97922",
     "profiles/_example/README.md": "164494df049ddce3e57cb44ed604cb3d39be0a6ec2072e609ea3fa4bbfc74c72",
-    "profiles/_example/profile.toml": "68af18cf50fa0327a9776b029c92bb1cf82710c649691b3ac889eb8537b8eac7"
+    "profiles/_example/profile.toml": "68af18cf50fa0327a9776b029c92bb1cf82710c649691b3ac889eb8537b8eac7",
+    "tests/conformance/test_gemini_admissibility.py": "8b337da9272823aed2cb22041b3f9fd27549f075f28b9817efd5be8f8c5bb948",
+    "tests/conformance/test_pack_metadata.py": "8ea175b88cc6e10ba10cda87676fc225ee2b968d710c8e6ab05fb20e31ec978a",
+    "tests/conformance/test_shared_library_boundaries.py": "5e07783459336e657a355f43aa5a9cf6c138603624daec258ecc0fa3d74239c3"
   },
   "version": 1
 }

agentbundle-0.32.0/agentbundle/_data/catalogue-scaffold/packs/_example/.apm/skills/example-skill/SKILL.md

@@ -0,0 +1,27 @@
+---
+name: example-skill
+description: "Demonstrate the standard skill layout. Triggers on: run example, show example skill output. Near-miss: requesting a demo or test of any skill (route those to the specific skill)."
+---
+
+# Example Skill
+
+This skill is a minimal demonstration of the standard SKILL.md layout. Replace this content
+with your skill's actual instructions.
+
+## What it does
+
+Produces a short greeting and lists any files the user has mentioned.
+
+## When to use this skill
+
+The agent invokes this skill when the user asks to "run example" or "show example skill output".
+
+## Steps
+
+1. Greet the user.
+2. List any files mentioned in the conversation.
+3. Summarize what the example-skill would do in a real pack.
+
+## Output
+
+A short greeting and a bullet list.

agentbundle-0.32.0/agentbundle/_data/catalogue-scaffold/packs/_example/.apm/skills/example-skill/evals/eval_queries.json

@@ -0,0 +1,42 @@
+[
+  {
+    "query": "run example",
+    "skill": "example-skill",
+    "should_trigger": true
+  },
+  {
+    "query": "show example skill output",
+    "skill": "example-skill",
+    "should_trigger": true
+  },
+  {
+    "query": "what does example-skill do",
+    "skill": "example-skill",
+    "should_trigger": true
+  },
+  {
+    "query": "demonstrate the example",
+    "skill": "example-skill",
+    "should_trigger": true
+  },
+  {
+    "query": "run the example skill now",
+    "skill": "example-skill",
+    "should_trigger": true
+  },
+  {
+    "query": "give me a demo",
+    "skill": "example-skill",
+    "should_trigger": false
+  },
+  {
+    "query": "show me a test run of architect-design",
+    "skill": "example-skill",
+    "should_trigger": false
+  },
+  {
+    "query": "how do I install a pack",
+    "skill": "example-skill",
+    "should_trigger": false
+  }
+]

agentbundle-0.32.0/agentbundle/_data/catalogue-scaffold/packs/_example/.claude-plugin/plugin.json

@@ -0,0 +1,14 @@
+{
+  "name": "example-pack",
+  "version": "0.1.0",
+  "description": "The skeleton to copy when you start a new pack.",
+  "displayName": "Example Pack",
+  "category": "productivity",
+  "keywords": [
+    "example",
+    "template"
+  ],
+  "skills": [
+    "example-skill"
+  ]
+}

agentbundle-0.32.0/agentbundle/_data/catalogue-scaffold/tests/conformance/test_gemini_admissibility.py

@@ -0,0 +1,67 @@
+"""Portable Gemini adapter rules over every pack in a catalogue."""
+
+from __future__ import annotations
+
+import tomllib
+from importlib.resources import files
+from pathlib import Path
+
+CATALOGUE_ROOT = Path(__file__).resolve().parents[2]
+PACKS_DIR = CATALOGUE_ROOT / "packs"
+
+
+def _adapter_contract() -> dict:
+    """Load the runtime adapter contract from the installed engine data."""
+    resource = files("agentbundle").joinpath("_data", "adapter.toml")
+    return tomllib.loads(resource.read_text(encoding="utf-8"))
+
+
+def _pack_dirs() -> list[Path]:
+    return sorted(
+        path
+        for path in PACKS_DIR.iterdir()
+        if path.is_dir()
+        and not path.name.startswith("_")
+        and (path / "pack.toml").is_file()
+    )
+
+
+def test_every_declared_agent_tool_is_mapped() -> None:
+    declared: set[str] = set()
+    for agent_path in PACKS_DIR.glob("*/.apm/agents/*.md"):
+        for line in agent_path.read_text(encoding="utf-8").splitlines():
+            if line.startswith("tools:"):
+                declared.update(
+                    item.strip()
+                    for item in line.split(":", 1)[1].split(",")
+                    if item.strip()
+                )
+    if not declared:
+        return
+    contract = _adapter_contract()
+    values = contract["frontmatter-mapping"]["gemini-agent-frontmatter"]["tools"][
+        "values"
+    ]
+    assert declared <= set(values), f"unmapped agent tools: {declared - set(values)}"
+
+
+def test_every_compatible_pack_admits_gemini_in_both_scopes() -> None:
+    from agentbundle.commands.install import _resolve_target_adapter
+
+    for pack_dir in _pack_dirs():
+        data = tomllib.loads((pack_dir / "pack.toml").read_text(encoding="utf-8"))
+        pack = data["pack"]
+        allowed = pack.get("install", {}).get("allowed-adapters")
+        if allowed is not None and "gemini" not in allowed:
+            continue
+        contract_version = pack.get("adapter-contract", {}).get("version", "0.13")
+        for scope in ("repo", "user"):
+            resolved = _resolve_target_adapter(
+                pack_dir,
+                scope=scope,
+                adapter="gemini",
+                allowed_adapters=allowed,
+                contract_version=contract_version,
+                command_name="install",
+            )
+            assert resolved == "gemini", f"{pack_dir.name} @ {scope}"

agentbundle-0.32.0/agentbundle/_data/catalogue-scaffold/tests/conformance/test_pack_metadata.py

@@ -0,0 +1,116 @@
+"""Portable catalogue manifest and marketplace rules."""
+
+from __future__ import annotations
+
+import json
+import tomllib
+from importlib.resources import files
+from pathlib import Path
+
+import pytest
+
+CATALOGUE_ROOT = Path(__file__).resolve().parents[2]
+PACKS_DIR = CATALOGUE_ROOT / "packs"
+MARKETPLACE_PATH = CATALOGUE_ROOT / ".claude-plugin" / "marketplace.json"
+
+
+def _bundled_schema(name: str) -> dict:
+    """Load a runtime schema without requiring a source-checkout contract tree."""
+    resource = files("agentbundle").joinpath("_data", name)
+    return json.loads(resource.read_text(encoding="utf-8"))
+
+
+def _pack_dirs() -> list[Path]:
+    return sorted(
+        path
+        for path in PACKS_DIR.iterdir()
+        if path.is_dir()
+        and not path.name.startswith("_")
+        and (path / "pack.toml").is_file()
+    )
+
+
+def _pack_data(pack_dir: Path) -> dict:
+    return tomllib.loads((pack_dir / "pack.toml").read_text(encoding="utf-8"))[
+        "pack"
+    ]
+
+
+@pytest.mark.parametrize("pack_dir", _pack_dirs(), ids=lambda path: path.name)
+def test_pack_declares_enriched_metadata(pack_dir: Path) -> None:
+    pack = _pack_data(pack_dir)
+    assert pack.get("readme") == "README.md", f"{pack_dir.name}: readme"
+    assert (pack_dir / "README.md").is_file(), f"{pack_dir.name}: README.md"
+    assert isinstance(pack.get("license"), str) and pack["license"]
+    links = pack.get("links")
+    assert isinstance(links, dict)
+    assert isinstance(links.get("repository"), str) and links["repository"]
+    for field in ("categories", "keywords"):
+        values = pack.get(field)
+        assert isinstance(values, list) and values, f"{pack_dir.name}: {field}"
+        assert len(values) <= 5, f"{pack_dir.name}: {field} capped at 5"
+    maintainers = pack.get("maintainers")
+    assert isinstance(maintainers, list) and maintainers
+    assert isinstance(maintainers[0].get("name"), str) and maintainers[0]["name"]
+
+
+@pytest.mark.parametrize("pack_dir", _pack_dirs(), ids=lambda path: path.name)
+def test_pack_and_plugin_versions_match(pack_dir: Path) -> None:
+    plugin_path = pack_dir / ".claude-plugin" / "plugin.json"
+    if not plugin_path.exists():
+        return
+    plugin = json.loads(plugin_path.read_text(encoding="utf-8"))
+    assert plugin.get("version") == _pack_data(pack_dir)["version"]
+
+
+def test_source_plugin_manifests_obey_schema() -> None:
+    from agentbundle.build.validate import validate
+
+    manifests = sorted(
+        path
+        for pack_dir in _pack_dirs()
+        if (path := pack_dir / ".claude-plugin" / "plugin.json").is_file()
+    )
+    if not manifests:
+        return
+    schema = _bundled_schema("plugin-manifest.schema.json")
+    for path in manifests:
+        content = json.loads(path.read_text(encoding="utf-8"))
+        assert "hooks" not in content, f"{path.relative_to(CATALOGUE_ROOT)}: hooks"
+        errors = validate(content, schema)
+        assert not errors, f"{path.relative_to(CATALOGUE_ROOT)}: {errors}"
+
+
+def test_root_marketplace_entries_obey_schema() -> None:
+    from agentbundle.build.validate import validate
+
+    if not MARKETPLACE_PATH.is_file():
+        return
+    marketplace = json.loads(MARKETPLACE_PATH.read_text(encoding="utf-8"))
+    entries = marketplace.get("plugins", [])
+    if not entries:
+        return
+    schema = _bundled_schema("marketplace-entry.schema.json")
+    for entry in entries:
+        assert not validate(entry, schema), entry.get("name", "<unnamed>")
+
+
+def test_root_marketplace_has_portable_metadata_shapes() -> None:
+    if not MARKETPLACE_PATH.is_file():
+        return
+    marketplace = json.loads(MARKETPLACE_PATH.read_text(encoding="utf-8"))
+    assert "name" in marketplace
+    assert isinstance(marketplace.get("owner"), dict)
+    for plugin in marketplace.get("plugins", []):
+        assert isinstance(plugin.get("author"), dict), plugin.get("name")
+        source = plugin.get("source")
+        if source is None:
+            continue
+        assert isinstance(source, dict), plugin.get("name")
+        assert source.get("source") == "git-subdir", plugin.get("name")
+        assert isinstance(source.get("url"), str) and source["url"].startswith(
+            "https://github.com/"
+        )
+        assert source.get("path")
+        assert source.get("ref") or source.get("sha")
+        assert "branch" not in source and "directory" not in source

agentbundle-0.32.0/agentbundle/_data/catalogue-scaffold/tests/conformance/test_shared_library_boundaries.py

@@ -0,0 +1,40 @@
+"""Portable rules for retired credential-shim copies in pack scripts."""
+
+from __future__ import annotations
+
+import re
+from pathlib import Path
+
+CATALOGUE_ROOT = Path(__file__).resolve().parents[2]
+PACKS_DIR = CATALOGUE_ROOT / "packs"
+SHIM_BASENAMES = (
+    "credentials_shim.py",
+    "_keychain_macos.py",
+    "_credman_windows.py",
+)
+SHIM_IMPORT_RE = re.compile(
+    r"(?:from\s+\.{0,2}(?:[\w.]+\.)?credentials_shim\s+import"
+    r"|import\s+(?:[\w.]+\.)?credentials_shim\b)"
+)
+
+
+def test_no_pack_skill_carries_a_retired_shim_copy() -> None:
+    offenders = [
+        str(path.relative_to(CATALOGUE_ROOT))
+        for scripts_dir in PACKS_DIR.glob("*/.apm/skills/*/scripts")
+        for basename in SHIM_BASENAMES
+        if (path := scripts_dir / basename).exists()
+    ]
+    assert not offenders, offenders
+
+
+def test_no_pack_skill_imports_the_retired_shim() -> None:
+    offenders: list[str] = []
+    for path in PACKS_DIR.glob("*/.apm/skills/*/scripts/*.py"):
+        try:
+            source = path.read_text(encoding="utf-8")
+        except OSError:
+            continue
+        if SHIM_IMPORT_RE.search(source):
+            offenders.append(str(path.relative_to(CATALOGUE_ROOT)))
+    assert not offenders, offenders