0.9.84

0.9.83 shipped a root plugins/pstack/plugin.json in the Agent Plugins 1.0.0 format. Codex reads that manifest before .codex-plugin/plugin.json and loads no plugin hooks for an Agent Plugins manifest, so on Codex the SessionStart hook stopped running and sessions lost the pstack routing instruction. Skills still loaded, and Claude Code was not affected. The root manifest is gone, so Codex reads .codex-plugin/plugin.json and its hooks again. The generator now fails when plugins/pstack/plugin.json exists, and the sync still excludes upstream's copy. A packaging test follows Codex's manifest lookup over the shipped plugin and checks that it finds the SessionStart hook, and that the 0.9.83 manifest would hide it. @Dude-Bear found the cause and confirmed it by moving the file aside, in #265.

The worktree-audit tests that make a directory unreadable now skip where chmod cannot deny a read, as under root, instead of failing six cases in containers and other root shells. They still run on CI's non-root runners.