feat(claude): emit manifest metadata fields and pin component path rules (#187)

[ScriptedAlchemy]

Summary

• Slice 2 of the Track Claude Code plugin contract parity beyond the current adapter #187 systematic Claude parity pass (manifest completion).
• ClaudeHostConfig gains displayName, metadata (free-form object), and defaultEnabled; they emit into .claude-plugin/plugin.json with plan-time validation (claude.manifest.displayName.invalid, claude.manifest.metadata.invalid, claude.manifest.defaultEnabled.invalid).
• Honest tightening recorded in PROVENANCE: Claude Code only warns-and-ignores a non-object metadata, but the compiler rejects it.
• Component path replace/add rules (commands/agents/workflows/outputStyles/experimental.* replace, skills adds, ./ prefix, . skills exception since 2.1.221, ignored-default-folder warning) pinned as a plugin.paths capability block with dated doc citations; the generator deliberately keeps emitting the canonical default layout only.
• Closes the custom-paths remainder of the commands/ checklist item: flat .md emission already landed; custom-path discovery is documented host behavior with a native positive probe.
• New capability rows manifestMetadata and manifestPaths; unified plugin adapter rows unavailable per the lsp precedent. Claude adapter 1.9.0 → 1.10.0, plugin adapter 1.8.0 → 1.9.0.
• Native proof against the installed Claude Code 2.1.257: strict validation accepts the emitted metadata fields and a "commands": "./custom/deploy.md" manifest with no default commands/.

Test plan

• Scoped suites: host-adapters, host-adapters.native (AGENT_BUNDLE_NATIVE_HOST_CONTRACTS=1, 8 native proofs, 0 skipped), adapter-metadata, adapter-capability-states, plugin-bundle — 160 passed
• pnpm typecheck
• pnpm lint

Part of #187 (slice 2).

[changeset-bot]

🦋 Changeset detected

Latest commit: 3396bfa

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
agent-bundle	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-02T06:46:14.537584Z	ec8ab03	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[pkg-pr-new]

npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle@293

npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle/create-agent-bundle@293

npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle/@agent-bundle/runtime@293

commit: ec8ab03