feat(skills): version skills plugins via dedicated workspace package

Introduce @salesforce/b2c-agent-plugins (at skills/package.json, private) as
the changesets target for skill-content changes. Its version syncs into the
plugin manifest files (.claude-plugin/marketplace.json entries for b2c-cli
and b2c, plus both .codex-plugin/plugin.json files) so installed plugins see
a proper version bump when skills change.

Publish workflow now tracks skills-only bumps with a `b2c-agent-plugins@X.Y.Z`
GitHub release tag. Skills zips are only attached to releases where the
plugins package actually changed. Skills installer resolves "latest" via a
hybrid: GitHub REST API (paginated, asset-filtered) with a raw.githubusercontent.com
fallback when the API is rate-limited. The resolved version is cached for
1 hour to avoid redundant lookups. Zip downloads continue to go through the
GitHub CDN with no API calls.

- skills/package.json: new private workspace package `@salesforce/b2c-agent-plugins`
- pnpm-workspace.yaml: add `skills`
- scripts/sync-plugin-versions.mjs: stamps version into plugin manifests
- package.json: `version` script now runs changeset version + sync
- .github/workflows/changesets.yml: action uses `pnpm run version`
- .github/workflows/publish.yml: adds publish_plugins gate, re-gates skills
  zip steps, adds release-tag fallback
- packages/b2c-tooling-sdk/src/skills/github.ts: adds resolveLatestVersion()
  with API→raw hybrid, replaces /releases/latest usage
- .claude-plugin/marketplace.json: b2c-cli and b2c entries gain `version`

Author: clavery

.claude-plugin/marketplace.json

@@ -16,7 +16,8 @@
       "license": "Apache-2.0",
       "source": "./skills/b2c-cli",
       "category": "productivity",
-      "strict": false
+      "strict": false,
+      "version": "1.0.0"
     },
     {
       "name": "b2c",
@@ -27,7 +28,8 @@
       "license": "Apache-2.0",
       "source": "./skills/b2c",
       "category": "productivity",
-      "strict": false
+      "strict": false,
+      "version": "1.0.0"
     },
     {
       "name": "b2c-dx-mcp",

.github/workflows/changesets.yml

@@ -37,7 +37,7 @@ jobs:
         id: changesets
         uses: changesets/action@6a0a831ff30acef54f2c6aa1cbbc1096b066edaf # v1.7.0
         with:
-          version: pnpm changeset version
+          version: pnpm run version
           title: 'Next Release: changelog and version packages'
           commit: 'chore: version packages'
         env:

.github/workflows/publish.yml

@@ -96,6 +96,13 @@ jobs:
               HAS_CHANGES=true
             fi
           fi
+          # Also check agent-plugins tag
+          if [ "$HAS_CHANGES" = "false" ]; then
+            PLUGINS_VERSION=$(node -p "require('./skills/package.json').version")
+            if ! git rev-parse "b2c-agent-plugins@${PLUGINS_VERSION}" >/dev/null 2>&1; then
+              HAS_CHANGES=true
+            fi
+          fi
           if [ "$HAS_CHANGES" = "false" ]; then
             echo "skip=true" >> $GITHUB_OUTPUT
             echo "::notice::All package versions match npm — nothing to publish"
@@ -184,6 +191,16 @@ jobs:
           fi
           echo "@salesforce/b2c-docs: version=${DOCS_VERSION}"
 
+          # Check if agent-plugins version changed (private package — uses git tag)
+          PLUGINS_VERSION=$(node -p "require('./skills/package.json').version")
+          if git rev-parse "b2c-agent-plugins@${PLUGINS_VERSION}" >/dev/null 2>&1; then
+            echo "publish_plugins=false" >> $GITHUB_OUTPUT
+          else
+            echo "publish_plugins=true" >> $GITHUB_OUTPUT
+            echo "version_plugins=${PLUGINS_VERSION}" >> $GITHUB_OUTPUT
+          fi
+          echo "@salesforce/b2c-agent-plugins: version=${PLUGINS_VERSION}"
+
       - name: Create snapshot versions
         if: steps.release-type.outputs.type == 'nightly'
         run: |
@@ -357,6 +374,13 @@ jobs:
               extract_latest docs/CHANGELOG.md
               echo ""
             fi
+
+            if [[ "${{ steps.packages.outputs.publish_plugins }}" == "true" && -f skills/CHANGELOG.md ]]; then
+              echo "## Agent Skills Plugins"
+              echo ""
+              extract_latest skills/CHANGELOG.md
+              echo ""
+            fi
           } > /tmp/release-notes.md
 
       - name: Create GitHub Release
@@ -375,6 +399,8 @@ jobs:
             RELEASE_TAG="b2c-vs-extension@${{ steps.packages.outputs.version_vsx }}"
           elif [[ "${{ steps.packages.outputs.publish_docs }}" == "true" ]]; then
             RELEASE_TAG="docs@${{ steps.packages.outputs.version_docs }}"
+          elif [[ "${{ steps.packages.outputs.publish_plugins }}" == "true" ]]; then
+            RELEASE_TAG="b2c-agent-plugins@${{ steps.packages.outputs.version_plugins }}"
           else
             echo "No packages published, skipping release"
             exit 0
@@ -385,7 +411,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Package skills artifacts
-        if: steps.release-type.outputs.type == 'stable' && steps.changesets.outputs.skip != 'true' && steps.quick-check.outputs.skip != 'true'
+        if: steps.release-type.outputs.type == 'stable' && steps.changesets.outputs.skip != 'true' && steps.quick-check.outputs.skip != 'true' && steps.packages.outputs.publish_plugins == 'true'
         run: |
           # Create b2c-skills.zip containing skills/b2c/skills/
           cd skills/b2c && zip -r ../../b2c-skills.zip skills/
@@ -397,9 +423,9 @@ jobs:
           ls -la *.zip
 
       - name: Upload skills to release
-        if: steps.release-type.outputs.type == 'stable' && steps.changesets.outputs.skip != 'true' && steps.quick-check.outputs.skip != 'true'
+        if: steps.release-type.outputs.type == 'stable' && steps.changesets.outputs.skip != 'true' && steps.quick-check.outputs.skip != 'true' && steps.packages.outputs.publish_plugins == 'true'
         run: |
-          # Determine the release tag (same logic as Create GitHub Release)
+          # Determine the release tag (same priority as Create GitHub Release)
           if [[ "${{ steps.packages.outputs.publish_cli }}" == "true" ]]; then
             RELEASE_TAG="@salesforce/b2c-cli@${{ steps.packages.outputs.version_cli }}"
           elif [[ "${{ steps.packages.outputs.publish_sdk }}" == "true" ]]; then
@@ -410,9 +436,10 @@ jobs:
             RELEASE_TAG="@salesforce/mrt-utilities@${{ steps.packages.outputs.version_mrt }}"
           elif [[ "${{ steps.packages.outputs.publish_vsx }}" == "true" ]]; then
             RELEASE_TAG="b2c-vs-extension@${{ steps.packages.outputs.version_vsx }}"
+          elif [[ "${{ steps.packages.outputs.publish_docs }}" == "true" ]]; then
+            RELEASE_TAG="docs@${{ steps.packages.outputs.version_docs }}"
           else
-            echo "No package release to upload to"
-            exit 0
+            RELEASE_TAG="b2c-agent-plugins@${{ steps.packages.outputs.version_plugins }}"
           fi
 
           gh release upload "$RELEASE_TAG" b2c-skills.zip b2c-cli-skills.zip

package.json

@@ -21,7 +21,7 @@
     "skills:eval": "uv run skills/eval/run_eval.py --model us.anthropic.claude-sonnet-4-6 --verbose",
     "skills:eval:optimize": "uv run skills/eval/run_loop.py --model us.anthropic.claude-sonnet-4-6 --verbose",
     "changeset": "changeset",
-    "version": "changeset version",
+    "version": "changeset version && node scripts/sync-plugin-versions.mjs",
     "release": "echo 'Releases are handled by CI (publish.yml). Use workflow_dispatch for manual releases.' && exit 1"
   },
   "keywords": [],