test: port plugin checks to TypeScript + vitest, run via npm scripts

Replace the shell-based install checks in the workflow with a vitest suite
runnable locally and in CI (hybrid model):

- tests/unit/manifests.test.ts — fast structural assertions: manifest
  validity, shared version, keyword consistency (grok/kimi/copilot match the
  canonical Claude list), per-vendor X-Source-Name/Version, the Grok
  dedicated-file and Kimi-inline rules, and release-please wiring.
- tests/integration/install.test.ts — installs the plugin into a sandboxed
  HOME once per supported target via the `plugins` CLI, plus Grok's native
  `grok plugin install`. Specs needing a native CLI (grok, copilot) skip when
  the binary is absent, so local runs without those tools stay green.

package.json exposes `npm test` (unit) and `npm run test:install`
(integration); the workflow now runs `npm ci` + the scripts, provisioning the
Grok and Copilot CLIs for the install job. `plugins` is pinned as a devDep.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: Rodriguespn

.github/workflows/validate-plugin-manifests.yml

@@ -5,10 +5,6 @@ on:
     branches:
       - main
 
-env:
-  # Pin the vendor-neutral installer so CI is deterministic; bump intentionally.
-  PLUGINS_CLI_VERSION: "1.3.4"
-
 jobs:
   validate:
     name: Validate Claude plugin manifest
@@ -26,29 +22,12 @@ jobs:
       - name: Validate plugin manifest
         run: npx -y @anthropic-ai/claude-code plugin validate .claude-plugin/plugin.json
 
-  install-via-plugins:
-    # Verify every supported vendor is installable through the vendor-neutral
-    # `plugins` CLI (https://www.npmjs.com/package/plugins). One leg per agent,
-    # forced with --target so we exercise exactly that vendor's surface.
-    # Gemini is intentionally omitted: it is not a `plugins` CLI target (it ships
-    # as a Gemini extension via gemini-extension.json).
-    name: Install via plugins CLI (${{ matrix.target }})
+  test-unit:
+    # Fast structural checks: manifest validity, version + keyword consistency,
+    # per-vendor X-Source headers, the Kimi-inline / Grok-dedicated-file rules,
+    # and release-please wiring. See tests/unit.
+    name: Unit tests
     runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        # Target ids per the plugins CLI docs (Supported targets table).
-        target:
-          - claude-code
-          - cursor
-          - codex
-          - grok
-          - kimi
-          - github-copilot
-
-    env:
-      NO_COLOR: "1"
-      DO_NOT_TRACK: "1"
 
     steps:
       - name: Check out repository
@@ -58,53 +37,42 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: 20
+          cache: npm
 
-      # Grok and Copilot install through their native CLIs, so those binaries
-      # must be present. The other targets are installed file-based and need no
-      # extra tooling.
-      - name: Install Grok Build CLI
-        if: matrix.target == 'grok'
-        run: |
-          curl -fsSL https://x.ai/cli/install.sh | GROK_BIN_DIR="$HOME/.grokbin" bash
-          echo "$HOME/.grokbin" >> "$GITHUB_PATH"
+      - name: Install dependencies
+        run: npm ci
 
-      - name: Install GitHub Copilot CLI
-        if: matrix.target == 'github-copilot'
-        run: npm install -g @github/copilot
+      - name: Run unit tests
+        run: npm test
 
-      - name: Install Supabase plugin via plugins CLI
-        run: |
-          npx -y "plugins@${PLUGINS_CLI_VERSION}" add . --target "${{ matrix.target }}" --yes 2>&1 | tee install.log
-          grep -q "Installed" install.log
-
-  install-via-grok-cli:
-    # Verify the plugin also installs through Grok Build's own CLI
-    # (`grok plugin install`), independent of the plugins CLI. Grok natively
-    # prefers .grok-plugin/plugin.json.
-    #
-    # Kimi Code has no equivalent headless native install: `/plugins install` is
-    # an interactive TUI slash-command, and Kimi's only programmatic installer is
-    # the `plugins` CLI (covered above), which writes Kimi's native plugin store
-    # directly without invoking a `kimi` binary.
-    name: Install via native Grok CLI
+  test-install:
+    # Installability checks: run the vendor-neutral `plugins` CLI once per
+    # supported target, plus Grok's native `grok plugin install`. See
+    # tests/integration. Grok and Copilot install through their native CLIs, so
+    # this job provisions those binaries; the specs skip any CLI that is absent.
+    name: Install tests
     runs-on: ubuntu-latest
 
-    env:
-      NO_COLOR: "1"
-
     steps:
       - name: Check out repository
         uses: actions/checkout@v4
 
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
       - name: Install Grok Build CLI
         run: |
           curl -fsSL https://x.ai/cli/install.sh | GROK_BIN_DIR="$HOME/.grokbin" bash
           echo "$HOME/.grokbin" >> "$GITHUB_PATH"
 
-      - name: Validate and install with grok plugin install
-        run: |
-          grok plugin validate .
-          grok plugin install . --trust 2>&1 | tee grok-install.log
-          grep -qi "supabase" grok-install.log
-          grok plugin list 2>&1 | tee grok-list.log
-          grep -qi "supabase" grok-list.log
+      - name: Install GitHub Copilot CLI
+        run: npm install -g @github/copilot
+
+      - name: Run install tests
+        run: npm run test:install

.gitignore

@@ -1,3 +1,6 @@
+### Node ###
+node_modules/
+
 ### Agents ###
 CLAUDE.local.md
 .claude/

AGENTS.md

@@ -32,6 +32,16 @@ Validate the plugin manifest:
 npx claude plugin validate .claude-plugin/plugin.json
 ```
 
+Run the tests (see `tests/`):
+
+```bash
+npm install         # once, to install the dev dependencies
+npm test            # fast structural checks (manifests, versions, keywords, MCP headers)
+npm run test:install # install each vendor via the `plugins` CLI + native Grok CLI
+```
+
+`npm run test:install` installs the supabase plugin for every supported vendor into a sandboxed `HOME`. Specs that need a native CLI (`grok`, `copilot`) skip automatically when that binary is not on `PATH`; CI provisions them.
+
 ## Editing Rules
 
 - Do not move `skills/`, `agents/`, `.claude-plugin/plugin.json`, `.cursor-plugin/plugin.json`, `.codex-plugin/plugin.json`, `.grok-plugin/plugin.json`, or `.kimi-plugin/plugin.json` out of the repo root layout.