ScriptedAlchemy · ScriptedAlchemy · Sep 3, 2026 · Sep 3, 2026
diff --git a/.changeset/389-bin-claim-script-discovery.md b/.changeset/389-bin-claim-script-discovery.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Keep a conventional `src/scripts/<name>.ts` module in script discovery when a `bin` config entry also references it, so `agent-bundle build` emits both `dist/bin/<name>.js` and the artifact `scripts/<name>.mjs` and `agent-bundle inspect --json` lists the module under both `packageBuild.bins` and `scripts` instead of silently dropping the script. Explicit `scripts`, `hooks`, `lib`, and `mcp` entries still claim the module they reference. Report `AB4737` when a `bin` entry points at a rendered `src/scripts/<name>.tsx` script that does not export both its default Server Component and a named `main`, because the bin envelope calls `main` while the artifact script renders the component, and `AB4738` when it points at a plain `src/scripts/<name>.ts` script that exports a `default` but no `main`, because the artifact script would ship inert while the bin runs the default export. (#413)
diff --git a/.changeset/agent-document-contracts.md b/.changeset/agent-document-contracts.md
@@ -1,5 +1,5 @@
 ---
-"@agent-bundle/runtime": minor
+"@agent-bundle/runtime": patch
 ---
 
 Add the versioned immutable Agent Document, bounded sequence-numbered render

diff --git a/.changeset/agent-document-stage.md b/.changeset/agent-document-stage.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add the Workbench Agent Document stage (#105 stage 2). The dev server gains a

diff --git a/.changeset/bright-taxis-source.md b/.changeset/bright-taxis-source.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Support the documented Claude marketplace plugin source matrix, including pinned git, npm, archive, and command copy/link sources.
diff --git a/.changeset/browser-app-harness.md b/.changeset/browser-app-harness.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add the browser-app proof level to the consumer test harness (#103 stage 3).

diff --git a/.changeset/build-path-conformance.md b/.changeset/build-path-conformance.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Harden the generated-executable build path (Rspack/Rslib/Rsbuild

diff --git a/.changeset/calm-codex-manifests.md b/.changeset/calm-codex-manifests.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add authored Codex plugin package metadata, validate documented component forms, and record submission-facing capability limits.
diff --git a/.changeset/claude-experimental-themes-monitors.md b/.changeset/claude-experimental-themes-monitors.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add validated Claude Code experimental theme and monitor declarations, including default-location emission, monitor trigger checks, and host-availability warnings.
diff --git a/.changeset/claude-host-validation.md b/.changeset/claude-host-validation.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Validate built Claude bundles with Claude Code's strict plugin developer tools and expose the bounded validator as an opt-in test helper.
diff --git a/.changeset/claude-lsp-emission.md b/.changeset/claude-lsp-emission.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add host-scoped Claude Code language-server configuration and emit validated plugin-root `.lsp.json` documents for Claude targets.
diff --git a/.changeset/claude-manifest-metadata-paths.md b/.changeset/claude-manifest-metadata-paths.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Emit validated Claude Code `displayName`, `metadata`, and `defaultEnabled` manifest fields, and pin the documented custom component-path discovery rules as capability evidence.
diff --git a/.changeset/claude-marketplace-manifest.md b/.changeset/claude-marketplace-manifest.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add the complete authored Claude marketplace manifest overlay, including catalog metadata, plugin relevance and authentication fields, renames, and cross-marketplace dependency allowlists.
diff --git a/.changeset/claude-plugin-bin.md b/.changeset/claude-plugin-bin.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add `claude.bin` for byte-faithful Claude Code plugin executables, preserving executable modes in emitted plugin-root `bin/` directories.
diff --git a/.changeset/claude-plugin-channels.md b/.changeset/claude-plugin-channels.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add validated Claude Code plugin channel declarations bound to emitted MCP servers, including per-channel user configuration and unified plugin bundle emission.
diff --git a/.changeset/claude-plugin-dependencies.md b/.changeset/claude-plugin-dependencies.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add validated Claude Code plugin dependency declarations and emit them in generated plugin manifests, including unified plugin bundles.
diff --git a/.changeset/claude-plugin-settings.md b/.changeset/claude-plugin-settings.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add host-scoped Claude Code plugin defaults under `claude.settings` and emit a validated plugin-root `settings.json` for Claude targets, pinned to the documented `agent` and `subagentStatusLine` keys. Declaring `agent` warns that the plugin agents component is still deferred, so the referenced agent must reach the plugin root another way.
diff --git a/.changeset/claude-plugin-user-config.md b/.changeset/claude-plugin-user-config.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add validated Claude Code plugin `userConfig` declarations and emit them in Claude plugin manifests, including unified plugin bundles.
diff --git a/.changeset/claude-plugin-workflows-output-styles.md b/.changeset/claude-plugin-workflows-output-styles.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add Claude Code plugin workflow scripts and Markdown output styles as byte-faithful `workflows/` and `output-styles/` directory payloads.
diff --git a/.changeset/codex-hook-contract.md b/.changeset/codex-hook-contract.md
@@ -1,5 +1,5 @@
 ---
-'agent-bundle': minor
+'agent-bundle': patch
 ---
 
 Pin the Codex 0.147.0 hook contract: close `hooks/hooks.json` to the eleven release events, admit every documented `command` and `mcp_tool` handler field while rejecting parsed-but-skipped `prompt`/`agent` handlers and per-event rules the host would ignore (`codex.hooks.*` and `codex.native-hooks.*` diagnostics), byte-pin all 21 generated hook wire schemas and validate Codex lifecycle-replay envelopes and codec outputs against them, accept a null `last_assistant_message` on Codex `Stop`, and publish dated four-state hook-contract capability rows (handler types, async, `additionalContextLimit`, `commandWindows`, `statusMessage`, timeouts, matcher semantics, trust review, generated-schema validation).
diff --git a/.changeset/codex-host-validation.md b/.changeset/codex-host-validation.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Validate built Codex bundles against vendored pinned schemas, report the host's missing plugin-validation developer tool honestly, and expose bounded app-server schema drift evidence through the public and test APIs.
diff --git a/.changeset/codex-interface-policy.md b/.changeset/codex-interface-policy.md
@@ -1,5 +1,5 @@
 ---
-'agent-bundle': minor
+'agent-bundle': patch
 ---
 
 Support authored Codex interface metadata and registered MCP app mappings, and publish capability evidence for plugin policy and compatibility environment surfaces.
diff --git a/.changeset/codex-marketplace-policy.md b/.changeset/codex-marketplace-policy.md
@@ -1,5 +1,5 @@
 ---
-'agent-bundle': minor
+'agent-bundle': patch
 ---
 
 Author the Codex marketplace entry (`codex.marketplace` displayName, category, and documented `policy.installation` / `policy.authentication` values, with the category following the plugin interface category; `installation: NOT_AVAILABLE` fails the build with `codex.marketplace.policy.installation.not-installable` because live `codex plugin add` refuses it and the emitted `INSTALL.md` / `installBundle()` run that command), admit every documented marketplace source form (local string or object, Git root `url`, `git-subdir`, `npm`) in the pinned marketplace schema with structurally validated Git and registry URLs, and publish dated four-state Codex distribution rows for marketplace discovery, sources, cache layout, enable state, `codex plugin` / `codex plugin marketplace` JSON contracts, feature flags, managed `requirements.toml`, `allow_managed_hooks_only`, `restrict_to_allowed_sources`, and workspace publishing, backed by live codex-cli 0.147.0 probes.
diff --git a/.changeset/consumer-route-test-harness.md b/.changeset/consumer-route-test-harness.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Ship the consumer route test harness as two new public subpaths.

diff --git a/.changeset/contract-matrix-stage1.md b/.changeset/contract-matrix-stage1.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add stage-1 generated-plugin contract matrix at the `mcp-in-memory` and packed stdio proof boundaries (#218). `runContractMatrix` runs framework-owned wire-contract checks — surface completeness, fixture coverage, invocation sweep, JSON serialized round-trip, declared additive/closed result compat, version-skew fixtures, negative inputs from advertised JSON Schema, and cancellation hygiene — with project-supplied fixtures only. `runPackedContractMatrix` reuses the same implementation against an already-open packed session for process stdio evidence (including MCP App resource registration), reporting module-backed checks as not-applicable when project source may be absent.
diff --git a/.changeset/contract-matrix-stage2.md b/.changeset/contract-matrix-stage2.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add stage-2 stateful lifecycle replay to the generated-plugin contract matrix (#218). Projects can supply deterministic `unknown → queued → running → first-progress → repeated-progress → terminal` drivers while the shared matrix owns transport, per-phase schema/render/compat checks, live-progress evidence, journal accumulation, notice observation, idempotency replay, typed commit-budget rejection, and same-store restart durability at both in-memory and packed boundaries.
diff --git a/.changeset/contract-matrix-stage3.md b/.changeset/contract-matrix-stage3.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add the stage-3 installed-host contract matrix boundary (#218). `openInstalledHostMcpServer` verifies and discovers a clean installed host layout, spawns its emitted MCP command over stdio, and observes the live initialize identity. `runInstalledHostContractMatrix` reuses the shared matrix at `host-install` proof level and reports a fail-closed source, built-artifact, installed-artifact, and running-process version quadruple with host binary, adapter, manifest/schema, and framework metadata.
diff --git a/.changeset/correct-subagent-event-support.md b/.changeset/correct-subagent-event-support.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Correct Claude Code and Codex event-route capabilities for native

diff --git a/.changeset/cursor-hook-lowering.md b/.changeset/cursor-hook-lowering.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Lower hooks to Cursor. The `cursor` target now emits the flat versioned

diff --git a/.changeset/cursor-host-adapter.md b/.changeset/cursor-host-adapter.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add a first-class `cursor` compile target. The standalone Cursor artifact

diff --git a/.changeset/cursor-rules-surface.md b/.changeset/cursor-rules-surface.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add conventional `rules/*.mdc` authoring with validated Cursor rule emission

diff --git a/.changeset/cursor-workspace-open-observation.md b/.changeset/cursor-workspace-open-observation.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Support Cursor's canonical `workspace/open` event route as a fire-and-forget

diff --git a/.changeset/declaration-build-diagnostics.md b/.changeset/declaration-build-diagnostics.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Declaration-build failures now report as the dedicated `AB4716` code instead of the `AB5000` catch-all, and carry the TypeScript diagnostics that caused them. When the `lib` dts pass aborts, the package build replays declaration emit over the same synthesized tsconfig using the consumer project's own `typescript`, so every underlying error reaches human and `--json` CLI output with its file, `(line,column)`, `TS` code, and message — plus a recovery hint that emit-only errors such as `TS4023` are invisible to `tsc --noEmit`.
diff --git a/.changeset/dev-epoch-contract-matrix.md b/.changeset/dev-epoch-contract-matrix.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Gate live host and development-install epoch adoption on an opt-in, project-declared contract matrix (`dev.contracts`). Each published epoch runs the generated contract matrix through an epoch-pinned generated stdio session at the new `dev-epoch` proof level (`runDevEpochContractMatrix`); failing epochs stay inactive for live host MCP connections and `--install-host` installs while the last passing epoch keeps serving, and are reported on the `dev.contract.status` project event with `AB7210` (invalid declaration or fixture module) or `AB7211` (contract violations). `startDevServer().status()` and `/api/project/status` now carry a `hostAdoption` snapshot (`mode`, `adoptedEpochId`, latest `contracts` evaluation) that the Workbench Overview renders as **Host adoption**. A cold start whose initial build fails now seeds the restored last-good epoch through the same gate instead of leaving hosts without an epoch.
diff --git a/.changeset/doctor-read-only.md b/.changeset/doctor-read-only.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add a read-only `agent-bundle doctor` command for inspecting host availability, installed bundles, bundle drift, and runtime endpoint health without applying repairs.
diff --git a/.changeset/doctor-static-validation.md b/.changeset/doctor-static-validation.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Surface pinned static bytes-at-rest validation findings for supplied bundles

diff --git a/.changeset/durable-next-event-notices.md b/.changeset/durable-next-event-notices.md
@@ -1,5 +1,5 @@
 ---
-"@agent-bundle/runtime": minor
+"@agent-bundle/runtime": patch
 ---
 
 Add the optional recipient-scoped notice ledger behind the new `./notices`

diff --git a/.changeset/event-family-capabilities.md b/.changeset/event-family-capabilities.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Publish evidence-backed event-route support states for Claude, Codex, Cursor,

diff --git a/.changeset/event-route-transport.md b/.changeset/event-route-transport.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Compile semantic event routes into native hook clients that render through the

diff --git a/.changeset/final-only-flight-dispatcher.md b/.changeset/final-only-flight-dispatcher.md
@@ -1,5 +1,5 @@
 ---
-"@agent-bundle/runtime": minor
+"@agent-bundle/runtime": patch
 ---
 
 Add React-owned final-only Flight execution behind the public render-dispatcher

diff --git a/.changeset/flagship-route-authoring.md b/.changeset/flagship-route-authoring.md
@@ -1,5 +1,5 @@
 ---
-"create-agent-bundle": minor
+"create-agent-bundle": patch
 ---
 
 Generate single-file MCP route modules with matching runtime dependencies.
diff --git a/.changeset/framework-owned-build.md b/.changeset/framework-owned-build.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 agent-bundle owns the build (RFC #50 Phase 1): one `agent-bundle.config.ts` now produces the npm package build alongside host artifacts, with framework-owned entry lifecycles and one bundler escape hatch.

diff --git a/.changeset/generated-context-providers.md b/.changeset/generated-context-providers.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 "@agent-bundle/runtime": patch
 ---
 

diff --git a/.changeset/generated-request-scope-state-mounting.md b/.changeset/generated-request-scope-state-mounting.md
@@ -1,6 +1,6 @@
 ---
-"@agent-bundle/runtime": minor
-"agent-bundle": minor
+"@agent-bundle/runtime": patch
+"agent-bundle": patch
 ---
 
 Mount the #98 state kernel and #99 notice ledger into generated request

diff --git a/.changeset/honest-cursors-validate.md b/.changeset/honest-cursors-validate.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add honest Cursor plugin host validation that probes the installed CLI for version evidence while always validating generated bytes locally against the vendored pinned schemas and loader contract.
diff --git a/.changeset/host-command-surface.md b/.changeset/host-command-surface.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add conventional `commands/*.md` authoring with validated Cursor and Claude

diff --git a/.changeset/host-install-distribution.md b/.changeset/host-install-distribution.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Emit evidence-backed install instructions for every target, add safe Cursor

diff --git a/.changeset/host-install-proof-level.md b/.changeset/host-install-proof-level.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add the `host-install` consumer proof level for real public-path installation

diff --git a/.changeset/identity-package-axes.md b/.changeset/identity-package-axes.md
@@ -1,5 +1,5 @@
 ---
-'agent-bundle': minor
+'agent-bundle': patch
 ---
 
 Derive validated `packageName`/`packageVersion` from the project's `package.json` into the project identity (issue #94 stages 1-2). Both axes now flow through the normalized model metadata, `ProjectContext`, artifact manifests, inspect output, and dev status DTOs (source status and artifact epochs); `plugin.version` still authors the native plugin version but the package version is authoritative for release identity and a mismatch never silently wins. Projects without a package version keep a clearly labeled `0.0.0-dev` development fallback in displays. New warning diagnostics: AB4008 (`plugin.version` differs from the package version), AB4009 (invalid npm package name), AB4010 (invalid package semver), AB4011 (unusable package.json).
diff --git a/.changeset/inspect-component-accounting.md b/.changeset/inspect-component-accounting.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Explain host component selection in `inspect`. Every inspection plan now

diff --git a/.changeset/live-host-mcp-proxy.md b/.changeset/live-host-mcp-proxy.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Keep development hosts connected across rebuilds with an epoch-aware Streamable HTTP MCP endpoint and stable stdio proxy. New calls use the active artifact while in-flight calls retain their original epoch, and catalog changes reach hosts without reinstalling the plugin.
diff --git a/.changeset/manifest-driven-workbench-navigation.md b/.changeset/manifest-driven-workbench-navigation.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Derive Workbench navigation and its route catalog from the compiled route graph

diff --git a/.changeset/mcp-apps-shared-across-servers.md b/.changeset/mcp-apps-shared-across-servers.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 One MCP App can now be served by several local servers (#42): declaring the

diff --git a/.changeset/mcp-progress-projector.md b/.changeset/mcp-progress-projector.md
@@ -1,5 +1,5 @@
 ---
-"@agent-bundle/runtime": minor
+"@agent-bundle/runtime": patch
 "agent-bundle": patch
 ---
 

diff --git a/.changeset/mcp-run-env-and-anchor.md b/.changeset/mcp-run-env-and-anchor.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 `mcp run` now owns the operator-environment seam the RFC #50 launchers were meant to retire, and stops fragmenting durable state per rebuild.

diff --git a/.changeset/movie-library-port-findings.md b/.changeset/movie-library-port-findings.md
@@ -1,6 +1,6 @@
 ---
-"@agent-bundle/runtime": minor
-"agent-bundle": minor
+"@agent-bundle/runtime": patch
+"agent-bundle": patch
 ---
 
 Fixes found while re-porting a real external plugin onto route mode

diff --git a/.changeset/official-mcp-conformance.md b/.changeset/official-mcp-conformance.md
@@ -1,5 +1,5 @@
 ---
-"agent-bundle": minor
+"agent-bundle": patch
 ---
 
 Add an opt-in MCP conformance lane that builds a generated route server,