chore: add version validation pre-push hook and .envrc

Author: CybotTM

.envrc

@@ -0,0 +1,2 @@
+# Install git hooks for version validation
+git config core.hooksPath Build/hooks

.github/workflows/release.yml

@@ -22,6 +22,18 @@ jobs:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
+      - name: Validate plugin.json matches tag
+        env:
+          TAG_VERSION: ${{ github.ref_name }}
+        run: |
+          PLUGIN_VERSION=$(python3 -c "import json; print(json.load(open('.claude-plugin/plugin.json'))['version'])")
+          TAG_BARE="${TAG_VERSION#v}"
+          if [[ "${TAG_BARE}" != "${PLUGIN_VERSION}" ]]; then
+            echo "::error file=.claude-plugin/plugin.json::Tag ${TAG_VERSION} does not match plugin.json version ${PLUGIN_VERSION}"
+            exit 1
+          fi
+          echo "Version validated: ${TAG_VERSION} matches plugin.json ${PLUGIN_VERSION}"
+
       - name: Get version from tag
         id: version
         run: echo "version=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT

Build/Scripts/check-plugin-version.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+set -euo pipefail
+TAGS=$(git tag --points-at HEAD | sed -nE 's/^v?([0-9]+\.[0-9]+\.[0-9]+)$/\1/p' || true)
+[[ -z "${TAGS}" ]] && exit 0
+PLUGIN_VERSION=$(python3 -c "import json; print(json.load(open('.claude-plugin/plugin.json'))['version'])")
+if [[ -z "${PLUGIN_VERSION}" ]]; then
+    echo "ERROR: Could not extract version from .claude-plugin/plugin.json" >&2
+    exit 1
+fi
+if ! echo "${TAGS}" | grep -qFx "${PLUGIN_VERSION}"; then
+    echo "ERROR: .claude-plugin/plugin.json version (${PLUGIN_VERSION}) does not match any semver tag at HEAD." >&2
+    echo "Tags found at HEAD:" >&2
+    echo "${TAGS}" >&2
+    exit 1
+fi

Build/hooks/pre-push

@@ -0,0 +1,2 @@
+#!/usr/bin/env bash
+"$(dirname "$0")/../Scripts/check-plugin-version.sh"