v0.6.0: P0 fixes, binary pipeline, OpenCode MCP, GitHub hardening

.agents/docs/prd.md

@@ -45,7 +45,7 @@ Five operating principles:
 
 1. **Tier-1 parity is the bar.** Same functionality across Claude Code, Codex, OpenCode, Pi Mono. TUI-grade fidelity (overlays, widgets) is the only allowed degradation.
 2. **Codegen first, guided per-harness fallback second.** Where universal codegen can express a capability across all Tier-1, do that. Where a harness lacks the native primitive, check whether all Tier-1 can support it via a custom (escape-hatch) method, and if so guide the author — rather than dropping the feature.
-3. **Keep a compat matrix.** The living [Tier-1 Capability Matrix](../../docs/reference/compat-matrix.md) (published at `/reference/compat-matrix`) records what's universal-codegen, guided-per-harness, and genuinely unsupported. It's the contract for "same functionality, different plumbing."
+3. **Keep a compat matrix.** The living [Capability Matrix](../../docs/guide/capability-matrix.md) (published at `/guide/capability-matrix`) records what's universal-codegen, guided-per-harness, and genuinely unsupported. It's the contract for "same functionality, different plumbing."
 4. **Lean, no global SDK.** Primitives express intent, not mechanism; each adapter owns its own plumbing. The escape hatch lets power users write native code against each harness's SDK.
 5. **Multi-platform by default, platform-specific code allowed.** AgentPlugins gives plugin authors the foundations to distribute their plugin across all Tier-1 harnesses (Claude Code, Codex, OpenCode, Pi Mono). Authors are not forced to support every harness — they may target a single harness or ship harness-specific behavior (e.g., custom logging for one harness) when another harness lacks a needed primitive. The end goal is a distribution platform and utilities so authors can make a plugin usable in other harnesses without porting or rewriting the implementation. Think React Native or Rust: multi-platform by default, platform-specific code when you need it.
 
@@ -69,8 +69,8 @@ _Draft — this section reflects the current product direction and will be final
 
 - **Distribution-first CLI** — `agentplugins add <github-url>` installs a plugin once; the universal store (`~/.agents/plugins/<name>/`) fans out via symlinks to every detected agent harness.
 - **Skills.sh compatibility** — plugins exposing `SKILL.md` are first-class citizens; our CLI reads both AgentPlugins and Skills.sh layouts.
-- **JSON Schema** — `@agentplugins/schema` package + hosted JSON Schema (`agentplugins.dev/schema/v1.json`) for editor autocomplete and self-documenting manifests.
-- **Tier-1 parity primitives** — every shipped capability works across Claude Code, Codex, OpenCode, and Pi Mono. The [Tier-1 Capability Matrix](../../docs/reference/compat-matrix.md) is the living contract.
+- **JSON Schema** — `@agentplugins/schema` package + hosted JSON Schema (`agentplugins.pages.dev/schema/v1.json`) for editor autocomplete and self-documenting manifests.
+- **Parity primitives** — every shipped capability works across Claude Code, Codex, OpenCode, and Pi Mono. The [Capability Matrix](../../docs/guide/capability-matrix.md) is the living contract.
 - **Security & audit guardrails** — `agentplugins audit` scores supply-chain risk (OSV, Scorecard, npm provenance); safe-fetch SSRF guard; lifecycle script policy.
 - **Public launch** — registry, docs site, examples, and a stable v1 manifest format.
 

.github/FUNDING.yml

@@ -0,0 +1 @@
+custom: ["https://buy.polar.sh/polar_cl_Mv1gdlG7bw3I70EC9IHtfeSHJj4PEKvA7JAUz23CFhj"]

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,46 @@
+name: Bug Report
+description: Something is broken
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Before filing: check the [capability matrix](https://agentplugins.pages.dev/guide/capability-matrix) — some behaviours are by design.
+  - type: textarea
+    id: description
+    attributes:
+      label: What happened?
+      description: A clear description of the bug.
+    validations:
+      required: true
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: Steps to reproduce
+      placeholder: |
+        1. Run `agentplugins add ...`
+        2. See error
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behaviour
+    validations:
+      required: true
+  - type: input
+    id: version
+    attributes:
+      label: AgentPlugins version
+      placeholder: "0.5.0"
+    validations:
+      required: true
+  - type: input
+    id: harness
+    attributes:
+      label: Agent harness(es) affected
+      placeholder: "Claude Code, Codex, ..."
+  - type: textarea
+    id: context
+    attributes:
+      label: Additional context

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Documentation
+    url: https://agentplugins.pages.dev
+    about: Read the full docs before filing an issue.
+  - name: Capability Matrix
+    url: https://agentplugins.pages.dev/guide/capability-matrix
+    about: Check if a behaviour is by design (⚠️ guided per-harness).

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,30 @@
+name: Feature Request
+description: Propose a new capability or improvement
+labels: ["feature"]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem or motivation
+      description: What are you trying to do that you can't do today?
+    validations:
+      required: true
+  - type: textarea
+    id: solution
+    attributes:
+      label: Proposed solution
+    validations:
+      required: true
+  - type: textarea
+    id: harnesses
+    attributes:
+      label: Harnesses this should cover
+      placeholder: "Claude Code, Codex, OpenCode, Pi Mono (Tier-1) / Copilot, Gemini, Kimi (Tier-2)"
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+  - type: textarea
+    id: context
+    attributes:
+      label: Additional context

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,18 @@
+## Summary
+
+<!-- What does this PR do? Link the issue: Closes #123 -->
+
+## Changes
+
+<!-- Bullet list of what changed -->
+
+## Test plan
+
+- [ ] `pnpm test` passes
+- [ ] `pnpm -r exec tsc --noEmit` passes
+- [ ] Capability matrix updated (if adapter behaviour changed)
+- [ ] Linked to a refined issue in Project 14
+
+## Notes
+
+<!-- Anything reviewers should know -->

.github/social-preview.snip.txt

@@ -0,0 +1,16 @@
+$ agentplugins add sigilco/agentplugins-ponytail
+
+  > AgentPlugins - write once, ship to every AI agent
+
+  + Resolved sigilco/agentplugins-ponytail@0.4.0
+  + ponytail: linked to ~/.agents/plugins/ponytail/
+
+  Detected 5 harnesses:
+  + claude-code   ~/.claude/skills/ponytail
+  + opencode      ~/.config/opencode/skills/ponytail
+  + codex         ~/.codex/skills/ponytail
+  + pimono        ~/.pi/skills/ponytail
+  + copilot       ~/.copilot/skills/ponytail
+
+$ agentplugins list
+  agentplugins-ponytail  v0.4.0  5/5 harnesses

.github/workflows/release.yml

@@ -106,11 +106,8 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
-      - name: Build workspace dependencies
-        run: pnpm --filter @agentplugins/core --filter @agentplugins/schema build
-
-      - name: Build CLI (tsc)
-        run: pnpm --filter @agentplugins/cli build
+      - name: Build all packages (topological)
+        run: pnpm --filter './packages/**' build
 
       - name: Compile native binary
         run: |

.github/workflows/triage.yml

@@ -0,0 +1,34 @@
+name: Triage
+
+on:
+  issues:
+    types: [opened, reopened]
+  pull_request_target:
+    types: [opened, reopened]
+
+jobs:
+  label:
+    name: Auto-label
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
+    steps:
+      - name: Label issues by template
+        if: github.event_name == 'issues'
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const body = context.payload.issue.body ?? '';
+            const title = context.payload.issue.title ?? '';
+            // Templates already inject labels via YAML; this is a fallback.
+            // If no label was set, apply 'needs-triage'.
+            const existing = context.payload.issue.labels.map(l => l.name);
+            if (existing.length === 0) {
+              await github.rest.issues.addLabels({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: context.payload.issue.number,
+                labels: ['needs-triage'],
+              });
+            }

.gitignore

@@ -9,6 +9,9 @@ dist/
 *.d.ts
 *.d.ts.map
 
+# Exceptions: source declaration files (not build artifacts)
+!docs/.vitepress/env.d.ts
+
 # pnpm
 .pnpm-store/
 .pnpm/
@@ -48,11 +51,22 @@ coverage/
 storybook-static/
 docs/.vitepress/cache/
 docs/.vitepress/dist/
-docs/public/
+docs/public/*
+!docs/public/robots.txt
+!docs/public/favicon.svg
+!docs/public/favicon.ico
+!docs/public/og.png
+!docs/public/img/
+!docs/public/img/logo-dark.png
+!docs/public/img/logo-light.png
 
 # Misc
 *.local
 *.backup
 
+# Session / scratch files
+tmp/
+
 # Deepwork session state (ephemeral)
 .slim/
+.npmrc

.nvmrc

@@ -0,0 +1 @@
+22

AGENTS.md

@@ -6,7 +6,7 @@ GitHub Project is [https://github.com/users/espetro/projects/14](https://github.
 
 1. **Tier-1 parity is the bar.** Every shipped capability must work across all four Tier-1 harnesses at the functionality level (not TUI level).
 2. **Codegen first, guided per-harness fallback second.** Universal codegen where possible; otherwise guide the author via the escape hatch rather than dropping the feature.
-3. **Compat matrix is the contract.** `docs/reference/compat-matrix.md` — universal-codegen / guided-per-harness / unsupported, per Tier-1 harness. Keep it current.
+3. **Compat matrix is the contract.** `docs/guide/capability-matrix.md` — universal-codegen / guided-per-harness / unsupported, per harness. Keep it current.
 4. **Lean, no global SDK.** Primitives express intent; each adapter owns its plumbing.
 5. **Community plugins are ground-up rewrites** in `agentplugins-<name>` sibling repos (e.g. `../agentplugins-caveman`), not mechanical ports.
 
@@ -15,6 +15,6 @@ Full detail: [`prd.md`](.agents/docs/prd.md)
 ## Commit & branch conventions
 
 - Atomic conventional commits (`feat(adapter-pimono): fix subagentStop collision`)
-- Feature work on `feat/v0.3.0-authoring-wins`; release branch `release/v0.3.0` cut from `develop`
+- Feature work on `feat/*` branches off `develop`; merge to `develop`, then PR `develop → main` to release
 - All plans in `.agents/plans/<date>-<purpose>.md` before implementation begins
 - All work linked to a refined issue in [Project 14](https://github.com/users/espetro/projects/14/views/1)