feat(hook-manager): register managers that need no install fix (#1825)

.apache-magpie-overrides/project.md

@@ -88,7 +88,7 @@ produces.
 | `upstream_agents_md_url` | `https://github.com/apache/magpie/blob/main/AGENTS.md` (derived) | Conventions this repo mirrors |
 | `upstream_contributing_docs_url` | `https://github.com/apache/magpie/blob/main/CONTRIBUTING.md` (derived: file exists) | |
 | `upstream_genai_disclosure_anchor` | `https://github.com/apache/magpie/blob/main/docs/ai-contribution-policy.md` | |
-| `upstream_security_policy_url` | `https://www.apache.org/security/` (ASF default; the repo ships no `SECURITY.md`) | |
+| `upstream_security_policy_url` | [`SECURITY.md`](../SECURITY.md) — reports go to `[email protected]` under the ASF process (`https://www.apache.org/security/`); the threat model is [`docs/security/threat-model.md`](../docs/security/threat-model.md) | |
 
 ## Mailing lists
 

.claude-plugin/marketplace.json

@@ -9,85 +9,85 @@
     {
       "name": "magpie-adversarial-review",
       "source": "./plugins/magpie-adversarial-review",
-      "version": "0.9.0.dev202610251812",
-      "description": "Apache Magpie \u2014 adversarial review: runs other models' CLIs (Codex, Copilot, Gemini, Claude) read-only over a change before its PR is created, and merges their findings. Runs from the installed plugin, so no repository needs a copy."
+      "version": "0.9.0.dev202610270025",
+      "description": "Apache Magpie \u2014 adversarial review: runs other models' CLIs (Codex, Copilot, Antigravity, Pi, Grok, Goose, Claude) read-only over a change before its PR is created, and merges their findings. Runs from the installed plugin, so no repository needs a copy."
     },
     {
       "name": "magpie-agent-guard",
       "source": "./plugins/magpie-agent-guard",
-      "version": "0.9.0.dev202610251812",
+      "version": "0.9.0.dev202610270025",
       "description": "Apache Magpie \u2014 deterministic pre-execution command guard: a PreToolUse hook that denies shell commands which would break a hard framework rule. Runs from the installed plugin, so no repository or worktree needs a local copy."
     },
     {
       "name": "magpie-security-tools",
       "source": "./plugins/magpie-security-tools",
-      "version": "0.9.0.dev202610251812",
+      "version": "0.9.0.dev202610270025",
       "description": "Apache Magpie \u2014 the tools the security skills run (tracker field and rollup edits, CVE JSON, the privacy gate, the scan importer), shipped so a marketplace install needs no framework checkout."
     },
     {
       "name": "magpie-vetted-ops",
       "source": "./plugins/magpie-vetted-ops",
-      "version": "0.9.0.dev202610251812",
+      "version": "0.9.0.dev202610270025",
       "description": "Apache Magpie \u2014 vetted-ops: a dispatcher for fixed, policy-scoped forge operations, so a session needs one allowlist entry instead of a dozen wildcard `ask` rules. Runs from the installed plugin, which is what keeps the operation catalogue out of reach of the agent that calls it."
     },
     {
       "name": "magpie-contributor-growth",
       "source": "./plugins/magpie-contributor-growth",
-      "version": "0.9.0.dev202610251812",
+      "version": "0.9.0.dev202610270025",
       "description": "Apache Magpie contributor-growth family (9 skills)."
     },
     {
       "name": "magpie-issue",
       "source": "./plugins/magpie-issue",
-      "version": "0.9.0.dev202610251812",
+      "version": "0.9.0.dev202610270025",
       "description": "Apache Magpie issue family (8 skills)."
     },
     {
       "name": "magpie-mentoring",
       "source": "./plugins/magpie-mentoring",
-      "version": "0.9.0.dev202610251812",
+      "version": "0.9.0.dev202610270025",
       "description": "Apache Magpie mentoring family (4 skills)."
     },
     {
       "name": "magpie-pairing",
       "source": "./plugins/magpie-pairing",
-      "version": "0.9.0.dev202610251812",
+      "version": "0.9.0.dev202610270025",
       "description": "Apache Magpie pairing family (2 skills)."
     },
     {
       "name": "magpie-pr-management",
       "source": "./plugins/magpie-pr-management",
-      "version": "0.9.0.dev202610251812",
+      "version": "0.9.0.dev202610270025",
       "description": "Apache Magpie pr-management family (9 skills)."
     },
     {
       "name": "magpie-release-management",
       "source": "./plugins/magpie-release-management",
-      "version": "0.9.0.dev202610251812",
+      "version": "0.9.0.dev202610270025",
       "description": "Apache Magpie release-management family (10 skills)."
     },
     {
       "name": "magpie-repo-health",
       "source": "./plugins/magpie-repo-health",
-      "version": "0.9.0.dev202610251812",
+      "version": "0.9.0.dev202610270025",
       "description": "Apache Magpie repo-health family (8 skills)."
     },
     {
       "name": "magpie-security",
       "source": "./plugins/magpie-security",
-      "version": "0.9.0.dev202610251812",
+      "version": "0.9.0.dev202610270025",
       "description": "Apache Magpie security family (16 skills)."
     },
     {
       "name": "magpie-setup",
       "source": "./plugins/magpie-setup",
-      "version": "0.9.0.dev202610251812",
+      "version": "0.9.0.dev202610270025",
       "description": "Apache Magpie setup family (12 skills)."
     },
     {
       "name": "magpie-utilities",
       "source": "./plugins/magpie-utilities",
-      "version": "0.9.0.dev202610251812",
+      "version": "0.9.0.dev202610270025",
       "description": "Apache Magpie utilities family (5 skills)."
     }
   ]

.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "magpie",
-  "version": "0.9.0.dev202610251812",
+  "version": "0.9.0.dev202610270025",
   "description": "Apache Magpie \u2014 a reusable, governance-agnostic framework of agentic skills for maintaining open-source projects: release management, security triage, PR and issue workflows, contributor growth, and repo health.",
   "author": {
     "name": "Apache Magpie",

.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "magpie",
-  "version": "0.9.0.dev202610251812",
+  "version": "0.9.0.dev202610270025",
   "description": "Apache Magpie — agentic skills for maintaining open-source projects.",
   "skills": "./skills"
 }

.github/dependabot.yml

@@ -58,6 +58,24 @@ updates:
         patterns:
           - "*"
 
+  # The root package.json makes the repository a Pi package; its lockfile
+  # pins the sandbox runtime the Pi extension runs bash in. Regenerate it
+  # with the flags Pi installs with, plus `--package-lock-only
+  # --ignore-scripts` (see docs/adapters/pi.md).
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7
+      semver-major-days: 7
+      semver-minor-days: 7
+      semver-patch-days: 7
+    groups:
+      pi-package:
+        patterns:
+          - "*"
+
   # All Python projects in this repo, consolidated into one update
   # entry with `directories:` (plural). Dependabot writes per-directory
   # inside a SINGLE weekly PR per group, so this collapses what was

.github/workflows/codeql.yml

@@ -117,7 +117,7 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d  # v4.38.3
+        uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee  # v4.39.0
         with:
           languages: ${{ matrix.language }}
           # Neither the Python tools (stdlib-only / single OAuth dep, no
@@ -135,6 +135,6 @@ jobs:
               - plugins/*/tools/**
 
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d  # v4.38.3
+        uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee  # v4.39.0
         with:
           category: "/language:${{ matrix.language }}"

.github/workflows/rat.yml

@@ -55,7 +55,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6  # v6.0.1
+      - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad  # v6.1.0
         with:
           distribution: temurin
           java-version: "21"

.github/workflows/sandbox-lint.yml

@@ -33,7 +33,7 @@ on:  # yamllint disable-line rule:truthy
       - ".claude/settings.local.json"
       - "tools/agent-isolation/claude-settings.local.template.json"
       - "plugins/magpie-setup/skills/setup/family-mcp-allows.json"
-      - ".gemini/**"
+      - "tools/agent-isolation/antigravity/**"
       - "tools/sandbox-lint/**"
       - ".github/workflows/sandbox-lint.yml"
   push:
@@ -45,7 +45,7 @@ on:  # yamllint disable-line rule:truthy
       - ".claude/settings.local.json"
       - "tools/agent-isolation/claude-settings.local.template.json"
       - "plugins/magpie-setup/skills/setup/family-mcp-allows.json"
-      - ".gemini/**"
+      - "tools/agent-isolation/antigravity/**"
       - "tools/sandbox-lint/**"
       - ".github/workflows/sandbox-lint.yml"
 
@@ -104,5 +104,5 @@ jobs:
           fi
       - name: Run sandbox-lint
         run: uv run sandbox-lint
-      - name: Check Gemini sandbox and policy profile
-        run: uv run sandbox-lint --gemini .gemini
+      - name: Check the user-scope Antigravity profile
+        run: uv run sandbox-lint --antigravity tools/agent-isolation/antigravity

.github/workflows/tests.yml

@@ -144,6 +144,12 @@ jobs:
           # stable across runs (the split is deterministic), and a single
           # member's key is its name.
           cache-suffix: "tests-${{ matrix.batch.key }}"
+      # Node runs the TypeScript tests of the Pi extension
+      # (tools/agent-isolation/pi/, via `node --test` type stripping), which
+      # the agent-isolation suite wraps; without it those tests skip.
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1  # v7.1.0
+        with:
+          node-version: "24"
       - name: Sync the batch's members (and ruff / mypy / pytest from the root dev group)
         # Dev-group deps live in the root pyproject (`[dependency-groups]
         # dev`) and only land in the shared workspace `.venv` when an

.gitignore

@@ -13,12 +13,16 @@ logs
 .build
 .claude/worktrees/
 .worktrees/
+# The root package.json makes the repository a Pi package, and Pi installs its
+# dependencies into its own clone. package-lock.json is committed (it pins the
+# sandbox runtime's whole tree, integrity hashes included); node_modules is not.
+/node_modules/
 .claude/settings.local.json
 # Skill source lives in skills/. The framework self-adopts by committing
 # magpie-<skill> symlinks (see skills/setup/adopt.md → "Local
 # self-adoption"). .agents/skills/ is the ONE canonical home: its
 # magpie-<skill> entries point into ../../skills/<skill>/ (the path shared
-# by Codex, Cursor, Gemini CLI, Copilot, …). Every other agent dir is a
+# by Codex, Cursor, Antigravity, Copilot, …). Every other agent dir is a
 # thin relay: .claude/skills/ (Claude Code) and .github/skills/ (GitHub's
 # skill loader) each carry magpie-<skill> → ../../.agents/skills/magpie-<skill>.
 # Those symlinks ARE committed — their targets are in-repo and always