build: refresh cachebuster-compatible snapshot

Author: vitry

marketplace/.agents/plugins/provenance.json

@@ -1,8 +1,8 @@
 {
   "packageVersion": "0.1.0",
   "pluginVersion": "0.1.0",
-  "sourceRef": "fb27a7431272541c958972e58248d2309d072f3f",
-  "sourceSha": "fb27a7431272541c958972e58248d2309d072f3f",
+  "sourceRef": "17a60d543ae743fb6626517979641d5ae9508f25",
+  "sourceSha": "17a60d543ae743fb6626517979641d5ae9508f25",
   "dependencyLock": {
     "file": "npm-shrinkwrap.json",
     "sha256": "fa927194e6ca0b25c1d3f428859b2ab4798b8eabb4d31bc87188d73c630f9938"

marketplace/plugins/zcode/CHANGELOG.md

@@ -5,6 +5,7 @@ All notable changes follow Semantic Versioning.
 ## Unreleased
 
 - Fixed `$zcode:setup` managed Role reconciliation with Codex 0.147 effective configuration, which normalizes an otherwise exact Role registration with `nickname_candidates = null`.
+- Fixed local cachebuster reinstallations so SemVer build metadata keeps the installed plugin's marketplace-qualified data root valid.
 - Fixed installed `$zcode:*` skills failing with `DATA_ROOT_REQUIRED` when Codex does not inject `PLUGIN_DATA` into ordinary skill commands.
 - Added marketplace-qualified plugin-data discovery and a restart-safe `$zcode:setup` bootstrap that configures the data directory as a writable root before persisting state.
 - Added ZCode CLI 0.16.1 compatibility for runtime-preference server requests with string IDs.

marketplace/plugins/zcode/scripts/lib/plugin-data.mjs

@@ -43,7 +43,8 @@ function installedIdentity(pluginRoot, codexHome) {
   const segments = relative(cache, canonical).split(sep);
   if (segments.length !== 3 || segments.some((segment) => !segment || segment === '.' || segment === '..' || hasControl(segment))) throw invalidRoot();
   const [marketplace, plugin, version] = segments;
-  if (!/^[A-Za-z0-9_-]+$/.test(marketplace) || plugin !== 'zcode' || !/^[A-Za-z0-9._-]+$/.test(version)) throw invalidRoot();
+  if (!/^[A-Za-z0-9_-]+$/.test(marketplace) || plugin !== 'zcode'
+    || !/^[A-Za-z0-9._-]+(?:\+[A-Za-z0-9._-]+)?$/.test(version)) throw invalidRoot();
   return { marketplace };
 }