Version Packages

[unional]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

universal-plugin@0.10.0

Minor Changes

• e0b672d: A new build-plugin skill is the entry point for plugin build. It runs the project's own build script when one exists, and otherwise the CLI shipped beside it through scripts/build.mjs, so nothing is downloaded. It reads the vendor and catalog rows back, reports each warning about something a vendor cannot represent, hands a built 0 result to doctor-universal-plugin, and uses --check to gate CI on committed governance copies.

• 738df81: marketplace add lists a plugin the repository does not hold, so a repository can curate a marketplace instead of only publishing its own plugins. One positional says where the plugin lives and is read by shape: a ./ path, an owner/repo slug, a git URL, an npm package (npm:pkg or @scope/pkg), or <plugin>@<marketplace> — with --path, --npm, --github, --url, and --from-marketplace to force the reading where owner/repo and a relative path collide. Nothing is fetched: metadata comes from a path's own plugin.json, an installed node_modules copy, the entry being copied, or the --description/--version/--homepage/--repository/--license/--keywords flags. A <plugin>@<marketplace> entry is resolved from a marketplace the runtime has already added, or from --from <dir>. A source that is relative to that marketplace is rewritten rather than copied, against the origin the runtime recorded for it or its clone's own git remote: ./plugins/aced in cyberuni/cyberplace becomes { "source": "git-subdir", "url": "https://github.com/cyberuni/cyberplace.git", "path": "plugins/aced" }, and an entry at the marketplace root becomes github or url. An entry only reaches a catalog whose runtime resolves that source — npm goes to Claude Code and Codex, and Copilot CLI and Cursor are reported skipped with the reason rather than written a source they refuse.

  A regeneration no longer discards the entries it did not derive. marketplace init, plugin build, and plugin init keep an entry whose source is not a local path, and keep a non-local source on a plugin they do discover while refreshing its derived metadata — so a plugin distributed through npm is not rewritten to a repository path holding gitignored build output, and add and init compose on one repository. A local-path entry discovery no longer finds is still dropped.

  The marketplace skill is now a gateway over three routes (init, add, validate), each with its own reference, and ships a scripts/add.mjs wrapper.