fix: second-wave review findings (framework group)

[ScriptedAlchemy]

Summary

• feat(claude): emit userConfig manifest options (#187 slice 1) #287: artifact validation now enforces relational numeric userConfig bounds (min<=max, default in range) beyond JSON Schema's type checks
• feat(claude): support marketplace source matrix #314: relative marketplace sources split on both slash forms before traversal rejection; URL schema permits authority-only archive hosts (schema re-pinned)
• Finish identity migration and expose Workbench provenance #322 P1: lifecycle replay carries operationId + surface through child and in-process render contexts; workspace falls back to validated workspace_roots
• fix(dev): deduplicate unchanged watcher events by path signature (#122) #329 P1: watcher path signatures include mode + ctimeNs so chmod-only changes invalidate (regression: chmod event test)

Test plan

• scoped suites (watcher, claude validation, host adapters, adapter metadata, replay service)
• route-unit pool, typecheck, lint

[changeset-bot]

🦋 Changeset detected

Latest commit: 4f9e6c6

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
agent-bundle	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-03T02:44:28.388926Z	4f9e6c6	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4f9e6c6dc7

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Allow harmless dot segments in relative marketplace paths

When an authored plugin.source or metadata.pluginRoot contains a no-op segment such as ./plugins/./review-tools, this helper now rejects it because isInternalSubdirectory forbids both . and ... Such paths remain inside the marketplace and were accepted by the previous validation, so this introduces a compatibility regression unrelated to the backslash-traversal fix; reject only .. segments or normalize the path before checking it.

Useful? React with 👍 / 👎.

[ScriptedAlchemy]

Fixed on main in #364 (merge 305161a).