feat(setup): always install vetted-ops and warn when the isolated setup is missing

.agents/plugins/marketplace.json

@@ -133,7 +133,7 @@
       },
       "category": "maintenance",
       "policy": {
-        "installation": "AVAILABLE"
+        "installation": "INSTALLED_BY_DEFAULT"
       }
     }
   ]

.claude-plugin/marketplace.json

@@ -9,79 +9,79 @@
     {
       "name": "magpie-adversarial-review",
       "source": "./plugins/magpie-adversarial-review",
-      "version": "0.9.0.dev202610221403",
+      "version": "0.9.0.dev202610221934",
       "description": "Apache Magpie \u2014 adversarial review: runs other models' CLIs (Codex, Copilot, Gemini, Claude) read-only over a change before its PR is created, and merges their findings. Runs from the installed plugin, so no repository needs a copy."
     },
     {
       "name": "magpie-agent-guard",
       "source": "./plugins/magpie-agent-guard",
-      "version": "0.9.0.dev202610221403",
+      "version": "0.9.0.dev202610221934",
       "description": "Apache Magpie \u2014 deterministic pre-execution command guard: a PreToolUse hook that denies shell commands which would break a hard framework rule. Runs from the installed plugin, so no repository or worktree needs a local copy."
     },
     {
       "name": "magpie-vetted-ops",
       "source": "./plugins/magpie-vetted-ops",
-      "version": "0.9.0.dev202610221403",
+      "version": "0.9.0.dev202610221934",
       "description": "Apache Magpie \u2014 vetted-ops: a dispatcher for fixed, policy-scoped forge operations, so a session needs one allowlist entry instead of a dozen wildcard `ask` rules. Runs from the installed plugin, which is what keeps the operation catalogue out of reach of the agent that calls it."
     },
     {
       "name": "magpie-contributor-growth",
       "source": "./plugins/magpie-contributor-growth",
-      "version": "0.9.0.dev202610221403",
+      "version": "0.9.0.dev202610221934",
       "description": "Apache Magpie contributor-growth family (9 skills)."
     },
     {
       "name": "magpie-issue",
       "source": "./plugins/magpie-issue",
-      "version": "0.9.0.dev202610221403",
+      "version": "0.9.0.dev202610221934",
       "description": "Apache Magpie issue family (8 skills)."
     },
     {
       "name": "magpie-mentoring",
       "source": "./plugins/magpie-mentoring",
-      "version": "0.9.0.dev202610221403",
+      "version": "0.9.0.dev202610221934",
       "description": "Apache Magpie mentoring family (4 skills)."
     },
     {
       "name": "magpie-pairing",
       "source": "./plugins/magpie-pairing",
-      "version": "0.9.0.dev202610221403",
+      "version": "0.9.0.dev202610221934",
       "description": "Apache Magpie pairing family (2 skills)."
     },
     {
       "name": "magpie-pr-management",
       "source": "./plugins/magpie-pr-management",
-      "version": "0.9.0.dev202610221403",
+      "version": "0.9.0.dev202610221934",
       "description": "Apache Magpie pr-management family (9 skills)."
     },
     {
       "name": "magpie-release-management",
       "source": "./plugins/magpie-release-management",
-      "version": "0.9.0.dev202610221403",
+      "version": "0.9.0.dev202610221934",
       "description": "Apache Magpie release-management family (10 skills)."
     },
     {
       "name": "magpie-repo-health",
       "source": "./plugins/magpie-repo-health",
-      "version": "0.9.0.dev202610221403",
+      "version": "0.9.0.dev202610221934",
       "description": "Apache Magpie repo-health family (8 skills)."
     },
     {
       "name": "magpie-security",
       "source": "./plugins/magpie-security",
-      "version": "0.9.0.dev202610221403",
+      "version": "0.9.0.dev202610221934",
       "description": "Apache Magpie security family (15 skills)."
     },
     {
       "name": "magpie-setup",
       "source": "./plugins/magpie-setup",
-      "version": "0.9.0.dev202610221403",
+      "version": "0.9.0.dev202610221934",
       "description": "Apache Magpie setup family (11 skills)."
     },
     {
       "name": "magpie-utilities",
       "source": "./plugins/magpie-utilities",
-      "version": "0.9.0.dev202610221403",
+      "version": "0.9.0.dev202610221934",
       "description": "Apache Magpie utilities family (5 skills)."
     }
   ]

.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "magpie",
-  "version": "0.9.0.dev202610221403",
+  "version": "0.9.0.dev202610221934",
   "description": "Apache Magpie \u2014 a reusable, governance-agnostic framework of agentic skills for maintaining open-source projects: release management, security triage, PR and issue workflows, contributor growth, and repo health.",
   "author": {
     "name": "Apache Magpie",

.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "magpie",
-  "version": "0.9.0.dev202610221403",
+  "version": "0.9.0.dev202610221934",
   "description": "Apache Magpie — agentic skills for maintaining open-source projects.",
   "skills": "./skills",
   "hooks": {

README.md

@@ -74,12 +74,13 @@ in the agent you already use. Nothing is written to your repository.
 ```text
 /plugin marketplace add apache/magpie                # Claude Code
 /plugin install magpie-setup@apache-magpie           # install this one first
+/plugin install magpie-vetted-ops@apache-magpie      # always: the skills run on it
 /plugin install magpie-agent-guard@apache-magpie     # the baseline:
-/plugin install magpie-utilities@apache-magpie       #   take all three
+/plugin install magpie-utilities@apache-magpie       #   take all four
 /plugin install magpie-pr-management@apache-magpie   # + the families you need
 ```
 
-Those first three are the **baseline** — and the same set a project commits as
+Those first four are the **baseline** — and the same set a project commits as
 its floor when it adopts Magpie, so taking them is taking what a project would
 recommend to every contributor. After that, install **one plugin per family you
 actually want**: every installed skill costs context on every turn, used or

apm.yml

@@ -6,7 +6,7 @@
 # Gemini). Schema is v0.1 and may change — verify against the current
 # https://microsoft.github.io/apm/ before publishing.
 name: magpie
-version: 0.9.0.dev202610221403
+version: 0.9.0.dev202610221934
 type: skill
 description: >-
   Apache Magpie — a reusable, governance-agnostic framework of agentic skills