---
summary: "Adopt @cyanheads/mcp-ts-core ^0.10.9: floating-specifier and plugin-manifest devcheck guards, fresh-scaffold check resilience, .codex-plugin long description"
breaking: false
security: false
---

# 0.1.9 — 2026-06-20

Framework-maintenance release — no source or tool-behavior changes. Adopts the `^0.10.7`–`^0.10.9` framework deltas and re-syncs the vendored devcheck scripts and skills.

## Added

- **`scripts/check-dependency-specifiers.ts`** — new devcheck step (`Dependency Specifiers`, `--no-dep-specifiers`) that hard-fails on floating specifiers (`latest`, `*`, pre-release dist-tags) in `package.json`'s dependency sections and `bun.lock`'s `workspaces` map. Static and local — runs in the default and `--fast` passes. ([mcp-ts-core#246](https://github.com/cyanheads/mcp-ts-core/issues/246))
- **Plugin marketplace manifest checks** (`scripts/lint-packaging.ts` check 10) — validates `.claude-plugin/plugin.json` and `.codex-plugin/plugin.json`/`mcp.json` for non-empty descriptions, unscoped display identity, and a full-name `npx -y` install arg. Gated by the new `devcheck.config.json` `packaging.pluginManifests` flag (default on); the `Packaging` gate now runs when a plugin manifest is present, not only when `manifest.json` exists. ([mcp-ts-core#240](https://github.com/cyanheads/mcp-ts-core/issues/240))

## Changed

- **`.codex-plugin/plugin.json`** — `interface.longDescription` populated (was empty), satisfying the new plugin-manifest description check.
- **Vendored skills resynced** — `add-tool`, `api-context` (documents `ctx.content`), `git-wrapup` (v1.4), `orchestrations` (v1.4), and the seven `metadata.version` bumps from framework `0.10.7` (`api-auth`, `api-canvas`, `api-config`, `api-errors`, `api-services`, `api-telemetry`, `field-test`, `polish-docs-meta`, `report-issue-local`, `tool-defs-analysis`). ([mcp-ts-core#238](https://github.com/cyanheads/mcp-ts-core/issues/238))

## Fixed

- **Fresh-scaffold devcheck resilience** (`scripts/devcheck.ts`, `build-changelog.ts`, `check-framework-antipatterns.ts`, `check-skill-versions.ts`) — git-dependent checks and the changelog sync skip cleanly before `git init` instead of failing on exit 128; `check-skill-versions` skips a `SKILL.md` deleted from the worktree. ([mcp-ts-core#242](https://github.com/cyanheads/mcp-ts-core/issues/242), [#243](https://github.com/cyanheads/mcp-ts-core/issues/243), [#237](https://github.com/cyanheads/mcp-ts-core/issues/237))

## Dependencies

- `@cyanheads/mcp-ts-core` ^0.10.6 → ^0.10.9
- `@types/node` ^25.9.3 → ^26.0.0
- `vitest` ^4.1.8 → ^4.1.9