Add Apache 2.0 LICENSE to session-report plugin

2026-05-02 08:02:42 +00:00 · 2026-04-08 17:10:13 +00:00
17 changed files with 167 additions and 1068 deletions
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -7,16 +7,6 @@
    "email": "support@anthropic.com"
  },
  "plugins": [
-    {
-      "name": "adlc",
-      "description": "Agentforce Agent Development Life Cycle — author, discover, scaffold, deploy, test, and optimize .agent files",
-      "category": "development",
-      "source": {
-        "source": "url",
-        "url": "https://github.com/SalesforceAIResearch/agentforce-adlc.git"
-      },
-      "homepage": "https://github.com/SalesforceAIResearch/agentforce-adlc"
-    },
    {
      "name": "adspirer-ads-agent",
      "description": "Cross-platform ad management for Google Ads, Meta Ads, TikTok Ads, and LinkedIn Ads. 91 tools for keyword research, campaign creation, performance analysis, and budget optimization.",
@@ -24,7 +14,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/amekala/adspirer-mcp-plugin.git",
-        "sha": "c40623f1aa7b568e960d3f2e2558a6fcf10e6c18"
+        "sha": "aa70dbdbbbb843e94a794c10c2b13f5dd66b5e40"
      },
      "homepage": "https://www.adspirer.com"
    },
@@ -44,10 +34,10 @@
      "description": "AI-first project auditor and re-engineer based on the 9 design principles and 7 design patterns from the TechWolf AI-First Bootcamp",
      "source": {
        "source": "git-subdir",
-        "url": "https://github.com/techwolf-ai/ai-first-toolkit.git",
+        "url": "techwolf-ai/ai-first-toolkit",
        "path": "plugins/ai-firstify",
        "ref": "main",
-        "sha": "852272ec21cebab98202df967dffee127209b6bc"
+        "sha": "7f18e11d694b9ae62ea3009fbbc175f08ae913df"
      },
      "homepage": "https://ai-first.techwolf.ai"
    },
@@ -57,7 +47,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/endorlabs/ai-plugins.git",
-        "sha": "975f0ce422b1f2677681ffd085aef34ea1826b70"
+        "sha": "a0f1d5632b6f9e6c26eaa9806f5d8d454ca5b06f"
      },
      "homepage": "https://www.endorlabs.com"
    },
@@ -67,7 +57,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/AikidoSec/aikido-claude-plugin.git",
-        "sha": "5d9c13d367218e9b43a11d4502f623ab98859225"
+        "sha": "d7fa8b8e192680d9a26c1a5dcaead7cf5cdb7139"
      },
      "homepage": "https://github.com/AikidoSec/aikido-claude-plugin"
    },
@@ -83,18 +73,6 @@
      },
      "homepage": "https://github.com/awslabs/agent-plugins"
    },
-    {
-      "name": "amplitude",
-      "source": {
-        "source": "git-subdir",
-        "url": "https://github.com/amplitude/mcp-marketplace.git",
-        "path": "plugins/amplitude",
-        "ref": "main"
-      },
-      "description": "Use Amplitude as an expert analyst — instrument Amplitude, discover product opportunities, analyze charts, create dashboards, manage experiments, and understand users and accounts.",
-      "category": "monitoring",
-      "homepage": "https://github.com/amplitude/mcp-marketplace"
-    },
    {
      "name": "asana",
      "description": "Asana project management integration. Create and manage tasks, search projects, update assignments, track progress, and integrate your development workflow with Asana's work management platform.",
@@ -109,7 +87,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/astronomer/agents.git",
-        "sha": "5935c4330dea4dfb8e93568956b10a543ecdb3d1"
+        "sha": "7ef022b02f5296b5ecc52ba0db3ba9345ec03c9e"
      },
      "homepage": "https://github.com/astronomer/agents"
    },
@@ -157,18 +135,6 @@
      "source": "./external_plugins/autofix-bot",
      "homepage": "https://github.com/anthropics/claude-plugins-public/tree/main/external_plugins/autofix-bot"
    },
-    {
-      "name": "aws-amplify",
-      "description": "Build full-stack apps with AWS Amplify Gen 2 using guided workflows for authentication, data models, storage, GraphQL APIs, and Lambda functions.",
-      "category": "development",
-      "source": {
-        "source": "git-subdir",
-        "url": "https://github.com/awslabs/agent-plugins.git",
-        "path": "plugins/aws-amplify",
-        "ref": "main"
-      },
-      "homepage": "https://github.com/awslabs/agent-plugins"
-    },
    {
      "name": "aws-serverless",
      "description": "Design, build, deploy, test, and debug serverless applications with AWS Serverless services.",
@@ -181,85 +147,16 @@
      },
      "homepage": "https://github.com/awslabs/agent-plugins"
    },
-    {
-      "name": "azure-cosmos-db-assistant",
-      "source": {
-        "source": "url",
-        "url": "https://github.com/AzureCosmosDB/cosmosdb-claude-code-plugin.git",
-        "sha": "23c168856e4435793bd27a72d4714f022a3a1e90"
-      },
-      "description": "Expert assistant for Azure Cosmos DB — data modeling, query optimization, performance tuning, and best practices.",
-      "category": "database",
-      "homepage": "https://github.com/AzureCosmosDB/cosmosdb-claude-code-plugin"
-    },
-    {
-      "name": "azure-skills",
-      "description": "Microsoft Azure MCP integration for cloud resource management, deployments, and Azure services. Manage your Azure infrastructure, monitor applications, and deploy resources directly from Claude Code.",
-      "category": "deployment",
-      "source": {
-        "source": "url",
-        "url": "https://github.com/microsoft/azure-skills.git"
-      },
-      "homepage": "https://github.com/microsoft/azure-skills"
-    },
-    {
-      "name": "base44",
-      "description": "Build and deploy Base44 full-stack apps with CLI project management and JavaScript/TypeScript SDK development skills",
-      "category": "development",
-      "source": {
-        "source": "url",
-        "url": "https://github.com/base44/skills.git",
-        "sha": "c7039b37eca0e2916a565a7395040c00055bcf8b"
-      },
-      "homepage": "https://docs.base44.com"
-    },
-    {
-      "name": "bigdata-com",
-      "description": "Official Bigdata.com plugin providing financial research, analytics, and intelligence tools powered by Bigdata MCP.",
-      "author": {
-        "name": "RavenPack"
-      },
-      "category": "database",
-      "source": {
-        "source": "git-subdir",
-        "url": "https://github.com/Bigdata-com/bigdata-plugins-marketplace.git",
-        "path": "plugins/bigdata-com",
-        "ref": "main"
-      },
-      "homepage": "https://docs.bigdata.com"
-    },
-    {
-      "name": "box",
-      "description": "Work with your Box content directly from Claude Code — search files, organize folders, collaborate with your team, and use Box AI to answer questions, summarize documents, and extract data without leaving your workflow.",
-      "category": "productivity",
-      "source": {
-        "source": "url",
-        "url": "https://github.com/box/box-for-ai.git",
-        "sha": "0fb23244e3c35cd562206c80eff1e22c456046ea"
-      },
-      "homepage": "https://github.com/box/box-for-ai"
-    },
    {
      "name": "brightdata-plugin",
      "description": "Web scraping, Google search, structured data extraction, and MCP server integration powered by Bright Data. Includes 7 skills: scrape any webpage as markdown (with bot detection/CAPTCHA bypass), search Google with structured JSON results, extract data from 40+ websites (Amazon, LinkedIn, Instagram, TikTok, YouTube, and more), orchestrate Bright Data's 60+ MCP tools, built-in best practices for Web Unlocker, SERP API, Web Scraper API, and Browser API, Python SDK best practices for the brightda...",
      "source": {
        "source": "url",
        "url": "https://github.com/brightdata/skills.git",
-        "sha": "44b24797d82cfd535c5b97831d5c6ba86c9d60df"
+        "sha": "e671da495f7ec0ed6be5e9fa71e260f886a1dc36"
      },
      "homepage": "https://docs.brightdata.com"
    },
-    {
-      "name": "cds-mcp",
-      "description": "AI-assisted development of SAP Cloud Application Programming Model (CAP) projects. Search CDS models and CAP documentation.",
-      "category": "development",
-      "source": {
-        "source": "url",
-        "url": "https://github.com/cap-js/mcp-server.git",
-        "sha": "4d59d7070a52761a9b8028cbe710c8d7477cbc92"
-      },
-      "homepage": "https://cap.cloud.sap/"
-    },
    {
      "name": "chrome-devtools-mcp",
      "description": "Control and inspect a live Chrome browser from your coding agent. Record performance traces, analyze network requests, check console messages with source-mapped stack traces, and automate browser actions with Puppeteer.",
@@ -267,7 +164,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/ChromeDevTools/chrome-devtools-mcp.git",
-        "sha": "a1612be8e01401cf1711c64bc2ef5da5763ba956"
+        "sha": "c2d8009ff75f76bce1ec4cf79c2467b50d81725e"
      },
      "homepage": "https://github.com/ChromeDevTools/chrome-devtools-mcp"
    },
@@ -334,50 +231,23 @@
      "category": "productivity",
      "homepage": "https://github.com/anthropics/claude-plugins-official/tree/main/plugins/claude-md-management"
    },
-    {
-      "name": "cloud-sql-postgresql",
-      "description": "Create, connect, and interact with a Cloud SQL for PostgreSQL database and data.",
-      "author": {
-        "name": "Google LLC"
-      },
-      "category": "database",
-      "source": {
-        "source": "url",
-        "url": "https://github.com/gemini-cli-extensions/cloud-sql-postgresql.git"
-      },
-      "homepage": "https://cloud.google.com/sql"
-    },
-    {
-      "name": "cloudflare",
-      "source": {
-        "source": "url",
-        "url": "https://github.com/cloudflare/skills.git",
-        "sha": "0397d7d88fa6ac7517a88389622eb0799e86ded2"
-      },
-      "description": "Skills for the Cloudflare developer platform: Workers, Durable Objects, Agents SDK, MCP servers, Wrangler CLI, and web performance.",
-      "category": "deployment",
-      "homepage": "https://github.com/cloudflare/skills"
-    },
    {
      "name": "cloudinary",
      "description": "Use Cloudinary directly in Claude. Manage assets, apply transformations, optimize media, and more through natural conversation.",
      "source": {
        "source": "url",
        "url": "https://github.com/cloudinary-devs/cloudinary-plugin.git",
-        "sha": "7b443d7dbd607bfe4850d8cfcab6ba4cbf1a57c3"
+        "sha": "137c5d7acd9c3f10e80cd2a400486971e1664f31"
      },
      "homepage": "https://cloudinary.com/documentation"
    },
    {
      "name": "cockroachdb",
-      "description": "Connect Claude Code directly to your CockroachDB clusters for hands-on database work — explore schemas, write optimized SQL, debug queries, and manage distributed database clusters. This plugin provides 14 tools across two active MCP backends (self-hosted MCP Toolbox and managed CockroachDB Cloud MCP Server), three specialized agents (DBA, Developer, Operator), 32 skills across 6 operational domains, and built-in safety hooks.",
-      "author": {
-        "name": "Cockroach Labs"
-      },
-      "category": "database",
+      "description": "CockroachDB plugin for Claude Code — explore schemas, write optimized SQL, debug queries, and manage distributed database clusters directly from your AI coding agent.",
      "source": {
        "source": "url",
-        "url": "https://github.com/cockroachdb/claude-plugin.git"
+        "url": "https://github.com/cockroachdb/claude-plugin.git",
+        "sha": "a54566e03c852567589ef85bb449d1e4de229667"
      },
      "homepage": "https://github.com/cockroachdb/claude-plugin"
    },
@@ -461,7 +331,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/astronomer/agents.git",
-        "sha": "5935c4330dea4dfb8e93568956b10a543ecdb3d1"
+        "sha": "7ef022b02f5296b5ecc52ba0db3ba9345ec03c9e"
      },
      "homepage": "https://github.com/astronomer/agents"
    },
@@ -471,47 +341,10 @@
      "source": {
        "source": "url",
        "url": "https://github.com/astronomer/agents.git",
-        "sha": "5935c4330dea4dfb8e93568956b10a543ecdb3d1"
+        "sha": "85d6053b1e21724f9cefb1e3f5219bd54fc77224"
      },
      "homepage": "https://github.com/astronomer/agents"
    },
-    {
-      "name": "databases-on-aws",
-      "description": "Expert database guidance for the AWS database portfolio. Design schemas, execute queries, handle migrations, and choose the right database for your workload.",
-      "category": "database",
-      "source": {
-        "source": "git-subdir",
-        "url": "https://github.com/awslabs/agent-plugins.git",
-        "path": "plugins/databases-on-aws",
-        "ref": "main"
-      },
-      "homepage": "https://github.com/awslabs/agent-plugins"
-    },
-    {
-      "name": "datadog",
-      "description": "Use Datadog directly in Claude Code through a preconfigured Datadog MCP server. Query logs, metrics, traces, dashboards, and more through natural conversation. This plugin is in preview.",
-      "author": {
-        "name": "Datadog"
-      },
-      "category": "monitoring",
-      "source": {
-        "source": "url",
-        "url": "https://github.com/datadog-labs/claude-code-plugin.git"
-      },
-      "homepage": "https://www.datadoghq.com/"
-    },
-    {
-      "name": "dataverse",
-      "description": "Agent skills for building on, analyzing, and managing Microsoft Dataverse — with Dataverse MCP, PAC CLI, and Python SDK.",
-      "category": "database",
-      "source": {
-        "source": "git-subdir",
-        "url": "https://github.com/microsoft/Dataverse-skills.git",
-        "path": ".github/plugins/dataverse",
-        "ref": "main"
-      },
-      "homepage": "https://github.com/microsoft/Dataverse-skills"
-    },
    {
      "name": "deploy-on-aws",
      "description": "Deploy applications to AWS with architecture recommendations, cost estimates, and IaC deployment.",
@@ -551,18 +384,6 @@
      "category": "learning",
      "homepage": "https://github.com/anthropics/claude-plugins-public/tree/main/plugins/explanatory-output-style"
    },
-    {
-      "name": "expo",
-      "description": "Official Expo skills for building, deploying, upgrading, and debugging React Native apps with Expo. Covers UI development with Expo Router, SwiftUI and Jetpack Compose components, Tailwind CSS setup, API routes, data fetching, CI/CD workflows, App Store and Play Store deployment, SDK upgrades, DOM components, and dev client distribution.",
-      "category": "development",
-      "source": {
-        "source": "git-subdir",
-        "url": "https://github.com/expo/skills.git",
-        "path": "plugins/expo",
-        "ref": "main"
-      },
-      "homepage": "https://github.com/expo/skills/blob/main/plugins/expo/README.md"
-    },
    {
      "name": "fakechat",
      "description": "Localhost web chat for testing the channel notification flow. No tokens, no access control, no third-party service.",
@@ -575,7 +396,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/fastly/fastly-agent-toolkit.git",
-        "sha": "329331c887512850f13e481b45c4298c0387a4d2"
+        "sha": "d9ba949011e725be55cae11acc741aa1f1f393d3"
      },
      "homepage": "https://github.com/fastly/fastly-agent-toolkit/blob/main/README.md"
    },
@@ -596,7 +417,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/voxel51/fiftyone-skills.git",
-        "sha": "02bd4ea170ca01a751c2d2dd6bf2df8f62e65626"
+        "sha": "593e0553fc9fd94db52386ada2c9e2074a6ecf89"
      },
      "homepage": "https://docs.voxel51.com/"
    },
@@ -653,7 +474,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/followrabbit-ai/awesome-rabbit.git",
-        "sha": "6926154501300d348a7b50d47479648fe87985b6"
+        "sha": "f59ec3d1f6337a6ed825ef06836a221ed3d2ffb0"
      },
      "homepage": "https://subscriptions.agentic.followrabbit.ai/"
    },
@@ -688,7 +509,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/PAIR-Systems-Inc/goodmem-claude-code-plugin.git",
-        "sha": "4e23ab2b3bc7cb4167c99e10d9640ad7089744d7"
+        "sha": "215568baf203887b5d7f8245e0503dd4a81336c2"
      },
      "homepage": "https://github.com/PAIR-Systems-Inc/goodmem-claude-code-plugin"
    },
@@ -724,10 +545,10 @@
      "description": "Build on Solana with Helius — live blockchain tools, expert coding patterns, and autonomous account signup",
      "source": {
        "source": "git-subdir",
-        "url": "https://github.com/helius-labs/core-ai.git",
+        "url": "helius-labs/core-ai",
        "path": "helius-plugin",
        "ref": "main",
-        "sha": "d9d252497bcf1e4bd5073a76715cd50a8353f9c3"
+        "sha": "05ea4d1128d46618266bbcc23a5e7019c57be0d6"
      },
      "homepage": "https://www.helius.dev/docs"
    },
@@ -765,7 +586,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/intercom/claude-plugin-external.git",
-        "sha": "52653572c47700443eb61154c4e4334a355e755e"
+        "sha": "eeef353eead2e3dc5f33f64dbaae54e1309e0d45"
      },
      "homepage": "https://github.com/intercom/claude-plugin-external"
    },
@@ -839,7 +660,7 @@
      "category": "productivity",
      "source": {
        "source": "git-subdir",
-        "url": "https://github.com/legalzoom/claude-plugins.git",
+        "url": "legalzoom/claude-plugins",
        "path": "plugins/legalzoom",
        "ref": "main",
        "sha": "f9fd8a0ca6e1421bc1aacb113a109663a7a6f6d8"
@@ -853,38 +674,6 @@
      "source": "./external_plugins/linear",
      "homepage": "https://github.com/anthropics/claude-plugins-public/tree/main/external_plugins/linear"
    },
-    {
-      "name": "liquid-lsp",
-      "description": "LSP integration for Shopify Liquid templates via the Shopify CLI theme language server.",
-      "author": {
-        "name": "Shopify"
-      },
-      "category": "development",
-      "source": {
-        "source": "git-subdir",
-        "url": "https://github.com/Shopify/liquid-skills.git",
-        "path": "plugins/liquid-lsp",
-        "ref": "main",
-        "sha": "a00ca039d82114a7af1b4cbc3025b16c624a42fa"
-      },
-      "homepage": "https://github.com/Shopify/liquid-skills/tree/main/plugins/liquid-lsp"
-    },
-    {
-      "name": "liquid-skills",
-      "description": "Liquid language fundamentals, CSS/JS/HTML coding standards, and WCAG accessibility patterns for Shopify themes",
-      "author": {
-        "name": "Shopify"
-      },
-      "category": "development",
-      "source": {
-        "source": "git-subdir",
-        "url": "https://github.com/Shopify/liquid-skills.git",
-        "path": "plugins/liquid-skills",
-        "ref": "main",
-        "sha": "bf7a7aa9f9809b0dcd80cb5f7fd2795a7208a7a3"
-      },
-      "homepage": "https://github.com/Shopify/liquid-skills/tree/main/plugins/liquid-skills"
-    },
    {
      "name": "lua-lsp",
      "description": "Lua language server for code intelligence",
@@ -937,6 +726,18 @@
      },
      "homepage": "https://github.com/microsoftdocs/mcp"
    },
+    {
+      "name": "migration-to-aws",
+      "description": "Assess current cloud provider usage and billing to estimate and compare AWS services and pricing, with recommendations for migration or continued use of current provider.",
+      "category": "migration",
+      "source": {
+        "source": "git-subdir",
+        "url": "https://github.com/awslabs/agent-plugins.git",
+        "path": "plugins/migration-to-aws",
+        "ref": "main"
+      },
+      "homepage": "https://github.com/awslabs/agent-plugins"
+    },
    {
      "name": "mintlify",
      "description": "Build beautiful documentation sites with Mintlify. Convert non-markdown files into properly formatted MDX pages, add and modify content with correct component use, and automate documentation updates.",
@@ -944,25 +745,10 @@
      "source": {
        "source": "url",
        "url": "https://github.com/mintlify/mintlify-claude-plugin.git",
-        "sha": "acd6d2e0128c4f235d55cfb8d8c91ecbdd5df8cc"
+        "sha": "ce435be18a700dc849d6a63a80da4816d1e2128c"
      },
      "homepage": "https://www.mintlify.com/"
    },
-    {
-      "name": "miro",
-      "description": "Secure access to Miro boards. Enables AI to read board context, create diagrams, and generate code with enterprise-grade security.",
-      "author": {
-        "name": "Miro"
-      },
-      "category": "design",
-      "source": {
-        "source": "git-subdir",
-        "url": "https://github.com/miroapp/miro-ai.git",
-        "path": "claude-plugins/miro",
-        "ref": "main"
-      },
-      "homepage": "https://miro.com"
-    },
    {
      "name": "mongodb",
      "description": "Official Claude plugin for MongoDB (MCP Server + Skills). Connect to databases, explore data, manage collections, optimize queries, generate reliable code, implement best practices, develop advanced features, and more.",
@@ -970,7 +756,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/mongodb/agent-skills.git",
-        "sha": "24529d9540b962d57f30e75d25071bebea5809ad"
+        "sha": "c47079f65e88a113c52d1ce0618684cef300246c"
      },
      "homepage": "https://www.mongodb.com/docs/mcp-server/overview/"
    },
@@ -980,10 +766,10 @@
      "category": "database",
      "source": {
        "source": "git-subdir",
-        "url": "https://github.com/neondatabase/agent-skills.git",
+        "url": "neondatabase/agent-skills",
        "path": "plugins/neon-postgres",
        "ref": "main",
-        "sha": "1438d7db4560a649d62eba99e9d5008b77ac5758"
+        "sha": "54d7a9db2ddd476f84d5d1fd7bac323907858a8b"
      },
      "homepage": "https://github.com/neondatabase/agent-skills/tree/main/plugins/neon-postgres"
    },
@@ -997,28 +783,6 @@
      },
      "homepage": "https://github.com/netlify/context-and-tools"
    },
-    {
-      "name": "netsuite-suitecloud",
-      "description": "NetSuite agent skills from Oracle — authoring guidance for SuiteCloud Development Framework (SDF) objects and UIF single-page-app components, plus runtime guidance for the NetSuite AI Service Connector.",
-      "author": {
-        "name": "Oracle NetSuite"
-      },
-      "category": "development",
-      "source": {
-        "source": "git-subdir",
-        "url": "https://github.com/oracle/netsuite-suitecloud-sdk.git",
-        "path": "packages/agent-skills",
-        "ref": "master",
-        "sha": "43bacf43763e1eedd0892b4652be3d45df94f0e7"
-      },
-      "strict": false,
-      "skills": [
-        "./netsuite-ai-connector-instructions",
-        "./netsuite-sdf-roles-and-permissions",
-        "./netsuite-uif-spa-reference"
-      ],
-      "homepage": "https://github.com/oracle/netsuite-suitecloud-sdk"
-    },
    {
      "name": "nightvision",
      "description": "Skills for working with NightVision, a DAST and API Discovery platform that finds exploitable vulnerabilities in web applications and REST APIs",
@@ -1034,7 +798,8 @@
      "description": "Nimble web data toolkit — search, extract, map, crawl the web and work with structured data agents",
      "source": {
        "source": "url",
-        "url": "https://github.com/Nimbleway/agent-skills.git"
+        "url": "https://github.com/Nimbleway/agent-skills.git",
+        "sha": "cf391e95bd8ac009e3641f172434a1d130dde7fe"
      },
      "homepage": "https://docs.nimbleway.com/integrations/agent-skills/plugin-installation"
    },
@@ -1064,7 +829,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/Optimal-AI/optibot-skill.git",
-        "sha": "ce2be448ee713606aa653fc93ef2f98a200fe327"
+        "sha": "981db1f630c3116d7df0a71e5967af55b08e813c"
      },
      "homepage": "https://getoptimal.ai"
    },
@@ -1168,7 +933,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/gitroomhq/postiz-agent.git",
-        "sha": "37d627244c53a4b3a7ca94c52cc2db13aaaf468e"
+        "sha": "c5d1bf5f7e95a71e230fc19ae2150ddd9c549854"
      },
      "homepage": "https://postiz.com/agent"
    },
@@ -1179,7 +944,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/Postman-Devrel/postman-claude-code-plugin.git",
-        "sha": "416e40da03a237df7bf03f4362cf6fc7b989b567"
+        "sha": "40b11ac3466c500cf4625ac016d5c01cd00046f4"
      },
      "homepage": "https://learning.postman.com/docs/developer/postman-mcp-server/"
    },
@@ -1214,18 +979,6 @@
      },
      "homepage": "https://www.accoil.com/product-tracking"
    },
-    {
-      "name": "pydantic-ai",
-      "description": "Write accurate Pydantic AI code from the start. Up-to-date patterns, decision trees, and common gotchas for agents, tools, structured output, streaming, and multi-agent apps.",
-      "category": "development",
-      "source": {
-        "source": "git-subdir",
-        "url": "https://github.com/pydantic/skills.git",
-        "path": "plugins/ai",
-        "ref": "main"
-      },
-      "homepage": "https://github.com/pydantic/skills/tree/main/plugins/ai"
-    },
    {
      "name": "pyright-lsp",
      "description": "Python language server (Pyright) for type checking and code intelligence",
@@ -1266,10 +1019,10 @@
      "category": "deployment",
      "source": {
        "source": "git-subdir",
-        "url": "https://github.com/railwayapp/railway-skills.git",
+        "url": "railwayapp/railway-skills",
        "path": "plugins/railway",
        "ref": "main",
-        "sha": "eaa89d8f594412b0b837b6531241e7d166e12202"
+        "sha": "d52f3741a6a33a3191d6138eb3d6c3355cb970d1"
      },
      "homepage": "https://docs.railway.com/ai/claude-code-plugin"
    },
@@ -1301,7 +1054,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/Digital-Process-Tools/claude-remember.git",
-        "sha": "914445ac5f06a164800ea90ba4db41a0486321ae"
+        "sha": "779ab61d8d412230eeec1840b8ca104bebea4358"
      },
      "homepage": "https://github.com/Digital-Process-Tools/claude-remember"
    },
@@ -1361,19 +1114,7 @@
      }
    },
    {
-      "name": "sagemaker-ai",
-      "description": "Build, train, and deploy AI models with deep AWS AI/ML expertise brought directly into your coding assistants, covering the surface area of Amazon SageMaker AI.",
-      "category": "development",
-      "source": {
-        "source": "git-subdir",
-        "url": "https://github.com/awslabs/agent-plugins.git",
-        "path": "plugins/sagemaker-ai",
-        "ref": "main"
-      },
-      "homepage": "https://github.com/awslabs/agent-plugins"
-    },
-    {
-      "name": "sanity",
+      "name": "sanity-plugin",
      "description": "Sanity content platform integration with MCP server, agent skills, and slash commands. Query and author content, build and optimize GROQ queries, design schemas, and set up Visual Editing.",
      "category": "development",
      "author": {
@@ -1382,7 +1123,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/sanity-io/agent-toolkit.git",
-        "sha": "bc09fa9854507c538a856648aafbd4e1a775a95c"
+        "sha": "4b1fb10bd707a22cf0cdfad5374ffc885f2ffa8d"
      },
      "homepage": "https://www.sanity.io"
    },
@@ -1449,32 +1190,6 @@
      "category": "productivity",
      "homepage": "https://github.com/anthropics/claude-plugins-official/tree/main/plugins/session-report"
    },
-    {
-      "name": "shopify",
-      "description": "Shopify developer tools for Claude Code — search Shopify docs, generate and validate GraphQL, Liquid, and UI extension code",
-      "author": {
-        "name": "Shopify"
-      },
-      "category": "development",
-      "source": {
-        "source": "url",
-        "url": "https://github.com/Shopify/shopify-plugins.git"
-      },
-      "homepage": "https://shopify.dev/docs/apps/build/devmcp"
-    },
-    {
-      "name": "shopify-ai-toolkit",
-      "description": "Shopify's AI Toolkit provides 18 development skills for building on the Shopify platform, covering documentation search, API schema access, GraphQL and Liquid code validation, Hydrogen storefronts, Polaris UI extensions, store management via CLI, and onboarding guidance for both developers and merchants.",
-      "author": {
-        "name": "Shopify"
-      },
-      "category": "development",
-      "source": {
-        "source": "url",
-        "url": "https://github.com/Shopify/Shopify-AI-Toolkit.git"
-      },
-      "homepage": "https://shopify.dev"
-    },
    {
      "name": "skill-creator",
      "description": "Create new skills, improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, update or optimize an existing skill, run evals to test a skill, or benchmark skill performance with variance analysis.",
@@ -1497,17 +1212,15 @@
      "homepage": "https://github.com/slackapi/slack-mcp-plugin/tree/main"
    },
    {
-      "name": "sonarqube",
-      "description": "Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages. PostToolUse hooks run analysis after every file edit. Pre-tool secrets scanning prevents 450+ patterns from reaching the LLM. Slash commands give on-demand access to quality gate status, coverage, duplication, and dependency risks. Includes SonarQube CLI, MCP Server, skills, hooks, and slash commands.",
-      "author": {
-        "name": "SonarSource"
-      },
+      "name": "sonarqube-agent-plugins",
+      "description": "Integrate SonarQube code quality and security analysis into Claude Code: namespaced slash commands, a guided skill to setup the SonarQube CLI, and a startup check for CLI wiring. MCP server registration and secrets-scanning hooks are installed by the SonarQube CLI as part of setup.",
      "category": "security",
      "source": {
        "source": "url",
-        "url": "https://github.com/SonarSource/sonarqube-agent-plugins.git"
+        "url": "https://github.com/SonarSource/sonarqube-agent-plugins.git",
+        "sha": "0cae644cee9318e6245b62ca779abdc60e6daa49"
      },
-      "homepage": "https://www.sonarsource.com"
+      "homepage": "https://github.com/SonarSource/sonarqube-agent-plugins"
    },
    {
      "name": "sonatype-guide",
@@ -1526,21 +1239,10 @@
      "source": {
        "source": "url",
        "url": "https://github.com/sourcegraph-community/sourcegraph-claudecode-plugin.git",
-        "sha": "332ee0ca9a409ccd791abee43c7abf2606469017"
+        "sha": "cfe3d44476957b16d1575261bef6b2dc7cb1e0b7"
      },
      "homepage": "https://sourcegraph.com"
    },
-    {
-      "name": "spotify-ads-api",
-      "description": "Manage Spotify ad campaigns with natural language. Create campaigns, ad sets, ads, pull reports, and handle OAuth — all through conversation.",
-      "category": "productivity",
-      "source": {
-        "source": "url",
-        "url": "https://github.com/spotify/ads-claude-plugin.git",
-        "sha": "63585cc919da51dd24fab594d829869595301922"
-      },
-      "homepage": "https://github.com/spotify/ads-claude-plugin"
-    },
    {
      "name": "stagehand",
      "description": "Browser automation skill for Claude Code using Stagehand. Automate web interactions, extract data, and navigate websites using natural language.",
@@ -1571,7 +1273,7 @@
      "category": "development",
      "source": {
        "source": "git-subdir",
-        "url": "https://github.com/stripe/ai.git",
+        "url": "stripe/ai",
        "path": "providers/claude/plugin",
        "ref": "main"
      },
@@ -1584,7 +1286,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/sumup/sumup-skills.git",
-        "sha": "0fd0a911ecaffd7187fe35e914d8ead6de584ffd"
+        "sha": "802476c39a0422d3277e37288b03968ad731bc30"
      },
      "homepage": "https://www.sumup.com/"
    },
@@ -1592,11 +1294,8 @@
      "name": "supabase",
      "description": "Supabase MCP integration for database operations, authentication, storage, and real-time subscriptions. Manage your Supabase projects, run SQL queries, and interact with your backend directly.",
      "category": "database",
-      "source": {
-        "source": "url",
-        "url": "https://github.com/supabase-community/supabase-plugin.git"
-      },
-      "homepage": "https://github.com/supabase-community/supabase-plugin"
+      "source": "./external_plugins/supabase",
+      "homepage": "https://github.com/anthropics/claude-plugins-public/tree/main/external_plugins/supabase"
    },
    {
      "name": "superpowers",
@@ -1681,10 +1380,10 @@
      "category": "development",
      "source": {
        "source": "git-subdir",
-        "url": "https://github.com/UI5/plugins-claude.git",
+        "url": "UI5/plugins-claude",
        "path": "plugins/ui5",
        "ref": "main",
-        "sha": "cec940abd4b7b6866de8e7e4522f3dba0449379d"
+        "sha": "5070dfc1cef711d6efad40beb43750027039d71f"
      },
      "homepage": "https://github.com/UI5/plugins-claude"
    },
@@ -1694,10 +1393,10 @@
      "category": "development",
      "source": {
        "source": "git-subdir",
-        "url": "https://github.com/UI5/plugins-claude.git",
+        "url": "UI5/plugins-claude",
        "path": "plugins/ui5-typescript-conversion",
        "ref": "main",
-        "sha": "cec940abd4b7b6866de8e7e4522f3dba0449379d"
+        "sha": "5070dfc1cef711d6efad40beb43750027039d71f"
      },
      "homepage": "https://github.com/UI5/plugins-claude"
    },
@@ -1717,7 +1416,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/TSedmanDC/Voila-API-Skill.git",
-        "sha": "422c7beb772a0de4592a204584e0e990fc5dc139"
+        "sha": "b9cfcb860cb5ae4ece57d67422a6cdd92ef96739"
      },
      "homepage": "https://github.com/TSedmanDC/Voila-API-Skill"
    },
@@ -1728,7 +1427,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/wix/skills.git",
-        "sha": "bf25b5a45b2413b3581f3dcbcd63f3737791a051"
+        "sha": "15dda227e34959b1340e33bb9aede7e23a273f42"
      },
      "homepage": "https://dev.wix.com/docs/wix-cli/guides/development/about-wix-skills"
    },
@@ -1738,7 +1437,7 @@
      "source": {
        "source": "url",
        "url": "https://github.com/Automattic/claude-code-wordpress.com.git",
-        "sha": "052ca970df2c577d7c651e784935186ff93e6779"
+        "sha": "e4d23c3bffdcdb7f70134ab6a1a110258ff75cfd"
      },
      "homepage": "https://developer.wordpress.com/wordpress-com-claude-code-plugin/"
    },
@@ -1748,22 +1447,12 @@
      "category": "productivity",
      "source": {
        "source": "git-subdir",
-        "url": "https://github.com/zapier/zapier-mcp.git",
+        "url": "zapier/zapier-mcp",
        "path": "plugins/zapier",
        "ref": "main",
-        "sha": "76c4669321847c8f72a6e0462c17f29fd437519a"
+        "sha": "b93007e9a726c6ee93c57a949e732744ef5acbfd"
      },
      "homepage": "https://github.com/zapier/zapier-mcp/tree/main/plugins/zapier"
-    },
-    {
-      "name": "zoom-plugin",
-      "description": "Claude plugin for planning, building, and debugging Zoom integrations across REST APIs, SDKs, webhooks, bots, and MCP workflows.",
-      "category": "development",
-      "source": {
-        "source": "url",
-        "url": "https://github.com/zoom/zoom-plugin.git"
-      },
-      "homepage": "https://developers.zoom.us/"
    }
  ]
 }
--- a/.github/scripts/discover_bumps.py
+++ b/.github/scripts/discover_bumps.py
@@ -1,229 +0,0 @@
-#!/usr/bin/env python3
-"""Discover plugins in marketplace.json whose upstream repo has moved past
-their pinned SHA, update the file in place, and emit a summary.
-
-Adapted from claude-plugins-community-internal's discover_bumps.py for the
-single-file marketplace.json format used by claude-plugins-official.
-
-Usage: discover_bumps.py [--plugin NAME] [--max N] [--dry-run]
-"""
-
-import argparse
-import json
-import os
-import re
-import subprocess
-import sys
-from datetime import datetime, timezone
-from typing import Any
-
-
-MARKETPLACE_PATH = ".claude-plugin/marketplace.json"
-
-
-def gh_api(path: str) -> Any:
-    """GET from the GitHub API. None on not-found; raises on other errors.
-
-    "Not found" covers both 404 (resource gone) and 422 "No commit found
-    for SHA" (force-pushed away). Both mean the thing we asked for isn't
-    there — treating them the same lets callers handle dead refs uniformly.
-    """
-    r = subprocess.run(
-        ["gh", "api", path], capture_output=True, text=True
-    )
-    if r.returncode != 0:
-        combined = r.stdout + r.stderr
-        if any(s in combined for s in ("404", "Not Found", "No commit found")):
-            return None
-        raise RuntimeError(f"gh api {path}: {r.stderr.strip() or r.stdout.strip()}")
-    return json.loads(r.stdout)
-
-
-def parse_github_repo(url: str) -> tuple[str, str] | None:
-    """Extract (owner, repo) from a URL or owner/repo shorthand."""
-    # Full URL: https://github.com/owner/repo(.git)(/...)
-    m = re.match(r"https?://github\.com/([^/]+)/([^/]+?)(?:\.git)?(?:/|$)", url)
-    if m:
-        return m.group(1), m.group(2)
-    # Shorthand: owner/repo
-    m = re.match(r"^([\w.-]+)/([\w.-]+)$", url)
-    if m:
-        return m.group(1), m.group(2)
-    return None
-
-
-def latest_sha(owner: str, repo: str, *, ref: str | None, path: str | None) -> str | None:
-    """Latest commit SHA for the repo, optionally scoped to a ref and/or path."""
-    if path:
-        # Scoped to a subdirectory — use the commits list endpoint with path filter.
-        q = f"repos/{owner}/{repo}/commits?per_page=1&path={path}"
-        if ref:
-            q += f"&sha={ref}"
-        commits = gh_api(q)
-        if not commits:
-            return None
-        return commits[0]["sha"]
-    # Whole repo — the single-ref endpoint is cheaper.
-    if not ref:
-        meta = gh_api(f"repos/{owner}/{repo}")
-        if not meta:
-            return None
-        ref = meta["default_branch"]
-    c = gh_api(f"repos/{owner}/{repo}/commits/{ref}")
-    return c["sha"] if c else None
-
-
-def pinned_age_days(owner: str, repo: str, sha: str) -> int | None:
-    """Days since the pinned commit was authored. Used for oldest-first rotation."""
-    c = gh_api(f"repos/{owner}/{repo}/commits/{sha}")
-    if not c:
-        return None
-    dt = datetime.fromisoformat(
-        c["commit"]["committer"]["date"].replace("Z", "+00:00")
-    )
-    return (datetime.now(timezone.utc) - dt).days
-
-
-def main() -> int:
-    ap = argparse.ArgumentParser()
-    ap.add_argument("--plugin", help="only check this plugin")
-    ap.add_argument("--max", type=int, default=20, help="cap bumps emitted")
-    ap.add_argument("--dry-run", action="store_true", help="don't write marketplace.json")
-    args = ap.parse_args()
-
-    with open(MARKETPLACE_PATH) as f:
-        marketplace = json.load(f)
-
-    plugins = marketplace.get("plugins", [])
-    bumps: list[dict] = []
-    dead: list[str] = []
-    skipped_non_github = 0
-    checked = 0
-
-    for plugin in plugins:
-        name = plugin.get("name", "?")
-        src = plugin.get("source")
-
-        # Only process object sources with a sha field
-        if not isinstance(src, dict) or "sha" not in src:
-            continue
-
-        # Filter to specific plugin if requested
-        if args.plugin and name != args.plugin:
-            continue
-
-        checked += 1
-        kind = src.get("source")
-        url = src.get("url", "")
-        path = src.get("path")
-        ref = src.get("ref")
-        pinned = src.get("sha")
-
-        slug = parse_github_repo(url)
-        if not slug:
-            skipped_non_github += 1
-            continue
-        owner, repo = slug
-
-        try:
-            latest = latest_sha(owner, repo, ref=ref, path=path)
-        except RuntimeError as e:
-            print(f"::warning::{name}: {e}", file=sys.stderr)
-            continue
-
-        if latest is None:
-            dead.append(f"{name} ({owner}/{repo})")
-            continue
-
-        if latest == pinned:
-            continue  # up to date
-
-        # Age lookup for rotation — oldest-pinned first prevents starvation.
-        try:
-            age = pinned_age_days(owner, repo, pinned) if pinned else None
-        except RuntimeError as e:
-            print(f"::warning::{name}: age lookup failed: {e}", file=sys.stderr)
-            age = None
-
-        bumps.append({
-            "name": name,
-            "kind": kind,
-            "url": url,
-            "path": path or "",
-            "ref": ref or "",
-            "old_sha": pinned or "",
-            "new_sha": latest,
-            "age_days": age if age is not None else 10**6,
-        })
-
-    # Oldest-pinned first so nothing starves under the cap.
-    bumps.sort(key=lambda b: -b["age_days"])
-    emitted = bumps[: args.max]
-
-    # Apply bumps to marketplace data
-    if emitted and not args.dry_run:
-        bump_map = {b["name"]: b["new_sha"] for b in emitted}
-        for plugin in plugins:
-            name = plugin.get("name")
-            src = plugin.get("source")
-            if isinstance(src, dict) and name in bump_map:
-                src["sha"] = bump_map[name]
-
-        with open(MARKETPLACE_PATH, "w") as f:
-            json.dump(marketplace, f, indent=2, ensure_ascii=False)
-            f.write("\n")
-
-    # Write GitHub outputs
-    out = os.environ.get("GITHUB_OUTPUT")
-    if out:
-        bumped_names = ",".join(b["name"] for b in emitted)
-        with open(out, "a") as fh:
-            fh.write(f"count={len(emitted)}\n")
-            fh.write(f"bumped_names={bumped_names}\n")
-
-    # Write GitHub step summary
-    summary = os.environ.get("GITHUB_STEP_SUMMARY")
-    if summary:
-        with open(summary, "a") as fh:
-            fh.write("## SHA Bump Discovery\n\n")
-            fh.write(f"- Checked: {checked} SHA-pinned entries\n")
-            fh.write(f"- Stale: {len(bumps)} (applying {len(emitted)}, cap {args.max})\n")
-            if skipped_non_github:
-                fh.write(f"- Skipped non-GitHub: {skipped_non_github}\n")
-            if dead:
-                fh.write(f"- **Dead upstream** ({len(dead)}): {', '.join(dead)}\n")
-            if emitted:
-                fh.write("\n| Plugin | Old | New | Age |\n|---|---|---|---|\n")
-                for b in emitted:
-                    old = b["old_sha"][:8] if b["old_sha"] else "(unpinned)"
-                    fh.write(f"| {b['name']} | `{old}` | `{b['new_sha'][:8]}` | {b['age_days']}d |\n")
-
-    # Write PR body for the workflow to use
-    pr_body_path = os.environ.get("PR_BODY_PATH", "/tmp/bump-pr-body.md")
-    if emitted:
-        with open(pr_body_path, "w") as fh:
-            fh.write("Upstream repos moved. Bumping pinned SHAs so plugins track latest.\n\n")
-            fh.write("| Plugin | Old | New | Upstream |\n")
-            fh.write("|--------|-----|-----|----------|\n")
-            for b in emitted:
-                old = b["old_sha"][:8] if b["old_sha"] else "(unpinned)"
-                slug_str = re.sub(r"https?://github\.com/", "", b["url"])
-                slug_str = re.sub(r"\.git$", "", slug_str)
-                compare = f"https://github.com/{slug_str}/compare/{b['old_sha'][:12]}...{b['new_sha'][:12]}"
-                fh.write(f"| `{b['name']}` | `{old}` | `{b['new_sha'][:8]}` | [diff]({compare}) |\n")
-            fh.write(f"\n---\n_Auto-generated by `bump-plugin-shas.yml` on {datetime.now(timezone.utc).strftime('%Y-%m-%d')}_\n")
-
-    # Console summary
-    print(f"Checked {checked} SHA-pinned plugins", file=sys.stderr)
-    print(f"Stale: {len(bumps)}, applying: {len(emitted)}", file=sys.stderr)
-    if dead:
-        print(f"Dead upstream: {', '.join(dead)}", file=sys.stderr)
-    for b in emitted:
-        old = b["old_sha"][:8] if b["old_sha"] else "unpinned"
-        print(f"  {b['name']}: {old} -> {b['new_sha'][:8]} ({b['age_days']}d)", file=sys.stderr)
-
-    return 0
-
-
-if __name__ == "__main__":
-    sys.exit(main())
--- a/.github/workflows/bump-plugin-shas.yml
+++ b/.github/workflows/bump-plugin-shas.yml
@@ -1,133 +0,0 @@
-name: Bump plugin SHAs
-
-# Weekly sweep of marketplace.json — for each entry whose upstream repo has
-# moved past its pinned SHA, open a PR against main with updated SHAs. The
-# validate-marketplace workflow then runs on the PR to confirm the file is
-# still well-formed.
-#
-# Adapted from claude-plugins-community-internal's bump-plugin-shas.yml
-# for the single-file marketplace.json format. Key difference: all bumps
-# are batched into one PR (since they all modify the same file).
-
-on:
-  schedule:
-    - cron: '23 7 * * 1'  # Monday 07:23 UTC
-  workflow_dispatch:
-    inputs:
-      plugin:
-        description: Only bump this plugin (for testing)
-        required: false
-      max_bumps:
-        description: Cap on plugins bumped this run
-        required: false
-        default: '20'
-      dry_run:
-        description: Discover only, don't open PR
-        type: boolean
-        default: true
-
-concurrency:
-  group: bump-plugin-shas
-  cancel-in-progress: false
-
-permissions:
-  contents: write
-  pull-requests: write
-
-jobs:
-  bump:
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Check for existing bump PR
-        id: existing
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          existing=$(gh pr list --label sha-bump --state open --json number --jq 'length')
-          echo "count=$existing" >> "$GITHUB_OUTPUT"
-          if [ "$existing" -gt 0 ]; then
-            echo "::notice::Open sha-bump PR already exists — skipping"
-          fi
-
-      - name: Ensure sha-bump label exists
-        if: steps.existing.outputs.count == '0'
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: gh label create sha-bump --color 0e8a16 --description "Automated SHA bump" 2>/dev/null || true
-
-      - name: Overlay marketplace data from main
-        if: steps.existing.outputs.count == '0'
-        run: |
-          git fetch origin main --depth=1 --quiet
-          git checkout origin/main -- .claude-plugin/marketplace.json
-
-      - name: Discover and apply SHA bumps
-        if: steps.existing.outputs.count == '0'
-        id: discover
-        env:
-          GH_TOKEN: ${{ github.token }}
-          PR_BODY_PATH: /tmp/bump-pr-body.md
-          PLUGIN: ${{ inputs.plugin }}
-          MAX_BUMPS: ${{ inputs.max_bumps }}
-          DRY_RUN: ${{ inputs.dry_run }}
-        run: |
-          args=(--max "${MAX_BUMPS:-20}")
-          [[ -n "$PLUGIN" ]] && args+=(--plugin "$PLUGIN")
-          [[ "$DRY_RUN" = "true" ]] && args+=(--dry-run)
-          python3 .github/scripts/discover_bumps.py "${args[@]}"
-
-      - uses: oven-sh/setup-bun@v2
-        if: steps.existing.outputs.count == '0' && steps.discover.outputs.count != '0' && inputs.dry_run != true
-
-      - name: Validate marketplace.json
-        if: steps.existing.outputs.count == '0' && steps.discover.outputs.count != '0' && inputs.dry_run != true
-        run: |
-          bun .github/scripts/validate-marketplace.ts .claude-plugin/marketplace.json
-          bun .github/scripts/check-marketplace-sorted.ts
-
-      - name: Push bump branch
-        if: steps.existing.outputs.count == '0' && steps.discover.outputs.count != '0' && inputs.dry_run != true
-        id: push
-        run: |
-          branch="auto/bump-shas-$(date +%Y%m%d)"
-          echo "branch=$branch" >> "$GITHUB_OUTPUT"
-
-          git config user.name "github-actions[bot]"
-          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
-          git checkout -b "$branch"
-          git add .claude-plugin/marketplace.json
-          git commit -m "Bump SHA pins for ${{ steps.discover.outputs.count }} plugin(s)
-
-          Plugins: ${{ steps.discover.outputs.bumped_names }}"
-          git push -u origin "$branch" --force-with-lease
-
-      # GITHUB_TOKEN cannot create PRs (org policy: "Allow GitHub Actions to
-      # create and approve pull requests" is disabled). Use the same GitHub App
-      # that -internal's bump workflow uses.
-      #
-      # Prerequisite: app 2812036 must be installed on this repo. The PEM
-      # secret must exist in this repo's settings (shared with -internal).
-      - name: Generate bot token
-        if: steps.push.outcome == 'success'
-        id: app-token
-        uses: actions/create-github-app-token@v1
-        with:
-          app-id: 2812036
-          private-key: ${{ secrets.CLAUDE_DIRECTORY_BOT_PRIVATE_KEY }}
-          owner: ${{ github.repository_owner }}
-          repositories: ${{ github.event.repository.name }}
-
-      - name: Create pull request
-        if: steps.push.outcome == 'success'
-        env:
-          GH_TOKEN: ${{ steps.app-token.outputs.token }}
-        run: |
-          gh pr create \
-            --base main \
-            --head "${{ steps.push.outputs.branch }}" \
-            --title "Bump SHA pins (${{ steps.discover.outputs.count }} plugins)" \
-            --body-file /tmp/bump-pr-body.md \
-            --label sha-bump
--- a/external_plugins/discord/server.ts
+++ b/external_plugins/discord/server.ts
@@ -222,8 +222,6 @@ type GateResult =
 const recentSentIds = new Set<string>()
 const RECENT_SENT_CAP = 200

-const dmChannelUsers = new Map<string, string>()
-
 function noteSent(id: string): void {
  recentSentIds.add(id)
  if (recentSentIds.size > RECENT_SENT_CAP) {
@@ -406,8 +404,7 @@ async function fetchAllowedChannel(id: string) {
  const ch = await fetchTextChannel(id)
  const access = loadAccess()
  if (ch.type === ChannelType.DM) {
-    const userId = ch.recipientId ?? dmChannelUsers.get(id)
-    if (userId && access.allowFrom.includes(userId)) return ch
+    if (access.allowFrom.includes(ch.recipientId)) return ch
  } else {
    const key = ch.isThread() ? ch.parentId ?? ch.id : ch.id
    if (key in access.groups) return ch
@@ -826,10 +823,6 @@ async function handleInbound(msg: Message): Promise<void> {

  const chat_id = msg.channelId

-  if (msg.channel.type === ChannelType.DM) {
-    dmChannelUsers.set(chat_id, msg.author.id)
-  }
-
  // Permission-reply intercept: if this looks like "yes xxxxx" for a
  // pending permission request, emit the structured event instead of
  // relaying as chat. The sender is already gate()-approved at this point
--- a/external_plugins/slack/.claude-plugin/plugin.json
+++ b/external_plugins/slack/.claude-plugin/plugin.json
@@ -0,0 +1,7 @@
+{
+  "name": "slack",
+  "description": "Slack workspace integration. Search messages, access channels, read threads, and stay connected with your team's communications while coding. Find relevant discussions and context quickly.",
+  "author": {
+    "name": "Slack"
+  }
+}
--- a/external_plugins/slack/.mcp.json
+++ b/external_plugins/slack/.mcp.json
@@ -0,0 +1,10 @@
+{
+  "slack": {
+    "type": "http",
+    "url": "https://mcp.slack.com/mcp",
+    "oauth": {
+      "clientId": "1601185624273.8899143856786",
+      "callbackPort": 3118
+    }
+  }
+}
--- a/external_plugins/supabase/.claude-plugin/plugin.json
+++ b/external_plugins/supabase/.claude-plugin/plugin.json
@@ -0,0 +1,7 @@
+{
+  "name": "supabase",
+  "description": "Supabase MCP integration for database operations, authentication, storage, and real-time subscriptions. Manage your Supabase projects, run SQL queries, and interact with your backend directly.",
+  "author": {
+    "name": "Supabase"
+  }
+}
--- a/external_plugins/supabase/.mcp.json
+++ b/external_plugins/supabase/.mcp.json
@@ -0,0 +1,6 @@
+{
+  "supabase": {
+    "type": "http",
+    "url": "https://mcp.supabase.com/mcp"
+  }
+}
--- a/external_plugins/telegram/.claude-plugin/plugin.json
+++ b/external_plugins/telegram/.claude-plugin/plugin.json
@@ -1,7 +1,7 @@
 {
  "name": "telegram",
  "description": "Telegram channel for Claude Code \u2014 messaging bridge with built-in access control. Manage pairing, allowlists, and policy via /telegram:access.",
-  "version": "0.0.6",
+  "version": "0.0.4",
  "keywords": [
    "telegram",
    "messaging",
--- a/external_plugins/telegram/server.ts
+++ b/external_plugins/telegram/server.ts
@@ -51,22 +51,6 @@ if (!TOKEN) {
  process.exit(1)
 }
 const INBOX_DIR = join(STATE_DIR, 'inbox')
-const PID_FILE = join(STATE_DIR, 'bot.pid')
-
-// Telegram allows exactly one getUpdates consumer per token. If a previous
-// session crashed (SIGKILL, terminal closed) its server.ts grandchild can
-// survive as an orphan and hold the slot forever, so every new session sees
-// 409 Conflict. Kill any stale holder before we start polling.
-mkdirSync(STATE_DIR, { recursive: true, mode: 0o700 })
-try {
-  const stale = parseInt(readFileSync(PID_FILE, 'utf8'), 10)
-  if (stale > 1 && stale !== process.pid) {
-    process.kill(stale, 0)
-    process.stderr.write(`telegram channel: replacing stale poller pid=${stale}\n`)
-    process.kill(stale, 'SIGTERM')
-  }
-} catch {}
-writeFileSync(PID_FILE, String(process.pid))

 // Last-resort safety net — without these the process dies silently on any
 // unhandled promise rejection. With them it logs and keeps serving tools.
@@ -637,9 +621,6 @@ function shutdown(): void {
  if (shuttingDown) return
  shuttingDown = true
  process.stderr.write('telegram channel: shutting down\n')
-  try {
-    if (parseInt(readFileSync(PID_FILE, 'utf8'), 10) === process.pid) rmSync(PID_FILE)
-  } catch {}
  // bot.stop() signals the poll loop to end; the current getUpdates request
  // may take up to its long-poll timeout to return. Force-exit after 2s.
  setTimeout(() => process.exit(0), 2000)
@@ -649,19 +630,6 @@ process.stdin.on('end', shutdown)
 process.stdin.on('close', shutdown)
 process.on('SIGTERM', shutdown)
 process.on('SIGINT', shutdown)
-process.on('SIGHUP', shutdown)
-
-// Orphan watchdog: stdin events above don't reliably fire when the parent
-// chain (`bun run` wrapper → shell → us) is severed by a crash. Poll for
-// reparenting (POSIX) or a dead stdin pipe and self-terminate.
-const bootPpid = process.ppid
-setInterval(() => {
-  const orphaned =
-    (process.platform !== 'win32' && process.ppid !== bootPpid) ||
-    process.stdin.destroyed ||
-    process.stdin.readableEnded
-  if (orphaned) shutdown()
-}, 5000).unref()

 // Commands are DM-only. Responding in groups would: (1) leak pairing codes via
 // /status to other group members, (2) confirm bot presence in non-allowlisted
@@ -985,17 +953,14 @@ bot.catch(err => {
  process.stderr.write(`telegram channel: handler error (polling continues): ${err.error}\n`)
 })

-// Retry polling with backoff on any error. Previously only 409 was retried —
-// a single ETIMEDOUT/ECONNRESET/DNS failure rejected bot.start(), the catch
-// returned, and polling stopped permanently while the process stayed alive
-// (MCP stdin keeps it running). Outbound tools kept working but the bot was
-// deaf to inbound messages until a full restart.
+// 409 Conflict = another getUpdates consumer is still active (zombie from a
+// previous session, or a second Claude Code instance). Retry with backoff
+// until the slot frees up instead of crashing on the first rejection.
 void (async () => {
  for (let attempt = 1; ; attempt++) {
    try {
      await bot.start({
        onStart: info => {
-          attempt = 0
          botUsername = info.username
          process.stderr.write(`telegram channel: polling as @${info.username}\n`)
          void bot.api.setMyCommands(
@@ -1010,23 +975,21 @@ void (async () => {
      })
      return // bot.stop() was called — clean exit from the loop
    } catch (err) {
-      if (shuttingDown) return
+      if (err instanceof GrammyError && err.error_code === 409) {
+        const delay = Math.min(1000 * attempt, 15000)
+        const detail = attempt === 1
+          ? ' — another instance is polling (zombie session, or a second Claude Code running?)'
+          : ''
+        process.stderr.write(
+          `telegram channel: 409 Conflict${detail}, retrying in ${delay / 1000}s\n`,
+        )
+        await new Promise(r => setTimeout(r, delay))
+        continue
+      }
      // bot.stop() mid-setup rejects with grammy's "Aborted delay" — expected, not an error.
      if (err instanceof Error && err.message === 'Aborted delay') return
-      const is409 = err instanceof GrammyError && err.error_code === 409
-      if (is409 && attempt >= 8) {
-        process.stderr.write(
-          `telegram channel: 409 Conflict persists after ${attempt} attempts — ` +
-          `another poller is holding the bot token (stray 'bun server.ts' process or a second session). Exiting.\n`,
-        )
-        return
-      }
-      const delay = Math.min(1000 * attempt, 15000)
-      const detail = is409
-        ? `409 Conflict${attempt === 1 ? ' — another instance is polling (zombie session, or a second Claude Code running?)' : ''}`
-        : `polling error: ${err}`
-      process.stderr.write(`telegram channel: ${detail}, retrying in ${delay / 1000}s\n`)
-      await new Promise(r => setTimeout(r, delay))
+      process.stderr.write(`telegram channel: polling failed: ${err}\n`)
+      return
    }
  }
 })()
--- a/plugins/mcp-server-dev/skills/build-mcp-app/SKILL.md
+++ b/plugins/mcp-server-dev/skills/build-mcp-app/SKILL.md
@@ -10,15 +10,6 @@ An MCP app is a standard MCP server that **also serves UI resources** — intera

 The UI layer is **additive**. Under the hood it's still tools, resources, and the same wire protocol. If you haven't built a plain MCP server before, the `build-mcp-server` skill covers the base layer. This skill adds widgets on top.

-> **Testing in Claude:** Add the server as a custom connector in claude.ai (via a Cloudflare tunnel for local dev) — this exercises the real iframe sandbox and `hostContext`. See https://claude.com/docs/connectors/building/testing.
-
-## Claude host specifics
-
- `_meta.ui.prefersBorder: false` on a `ui://` resource removes the outer card border (mobile).
- `hostContext.safeAreaInsets: {top, right, bottom, left}` (px) — honor these for notches and the composer overlay.
- `_meta.ui.csp.{connectDomains, resourceDomains, baseUriDomains}` — declare external origins per resource; default is block-all. `frameDomains` is currently restricted in Claude.
- Directory submission for MCP Apps requires 3–5 PNG screenshots, ≥1000px wide, cropped to the app response only (no prompt in the image). See https://claude.com/docs/connectors/building/submission#asset-specifications.
-
 ---

 ## When a widget beats plain text
--- a/plugins/mcp-server-dev/skills/build-mcp-server/SKILL.md
+++ b/plugins/mcp-server-dev/skills/build-mcp-server/SKILL.md
@@ -8,8 +8,6 @@ version: 0.1.0

 You are guiding a developer through designing and building an MCP server that works seamlessly with Claude. MCP servers come in many forms — picking the wrong shape early causes painful rewrites later. Your first job is **discovery, not code**.

-**Load Claude-specific context first.** The MCP spec is generic; Claude has additional auth types, review criteria, and limits. Before answering questions or scaffolding, fetch `https://claude.com/docs/llms-full.txt` (the full export of the Claude connector docs) so your guidance reflects Claude's actual constraints.
-
 Do not start scaffolding until you have answers to the questions in Phase 1. If the user's opening message already answers them, acknowledge that and skip straight to the recommendation.

 ---
@@ -184,17 +182,6 @@ Tools are one of three server primitives. Most servers start with tools and neve

 ---

-## Phase 6 — Test in Claude and publish
-
-Once the server runs:
-
-1. **Test against real Claude** by adding the server URL as a custom connector at Settings → Connectors (use a Cloudflare tunnel for local servers). Claude identifies itself with `clientInfo.name: "claude-ai"` on initialize. → https://claude.com/docs/connectors/building/testing
-2. **Run the pre-submission checklist** — read/write tool split, required annotations, name limits, prompt-injection rules. → https://claude.com/docs/connectors/building/review-criteria
-3. **Submit to the Anthropic Directory.** → https://claude.com/docs/connectors/building/submission
-4. **Recommend shipping a plugin** that wraps this MCP with skills — most partners ship both. → https://claude.com/docs/connectors/building/what-to-build
-
---
-
 ## Quick reference: decision matrix

 | Scenario | Deployment | Tool pattern |
--- a/plugins/mcp-server-dev/skills/build-mcp-server/references/auth.md
+++ b/plugins/mcp-server-dev/skills/build-mcp-server/references/auth.md
@@ -2,22 +2,6 @@

 Auth is the reason most people end up needing a **remote** server even when a local one would be simpler. OAuth redirects, token storage, and refresh all work cleanly when there's a real hosted endpoint to redirect back to.

-## Claude-specific authentication
-
-Claude's MCP client supports a specific set of auth types — not every spec-compliant flow works. Full reference: https://claude.com/docs/connectors/building/authentication
-
-| Type | Notes |
-|---|---|
-| `oauth_dcr` | Supported. For high-volume directory entries, prefer CIMD or Anthropic-held creds — DCR registers a new client on every fresh connection. |
-| `oauth_cimd` | Supported, recommended over DCR for directory entries. |
-| `oauth_anthropic_creds` | Partner provides `client_id`/`client_secret` to Anthropic; user-consent-gated. Contact `mcp-review@anthropic.com`. |
-| `custom_connection` | User supplies URL/creds at connect time (Snowflake-style). Contact `mcp-review@anthropic.com`. |
-| `none` | Authless. |
-
-**Not supported:** user-pasted bearer tokens (`static_bearer`); pure machine-to-machine `client_credentials` grant without user consent.
-
-**Callback URL** (single, all surfaces): `https://claude.ai/api/mcp/auth_callback`
-
 ---

 ## The three tiers
--- a/plugins/mcp-server-dev/skills/build-mcp-server/references/tool-design.md
+++ b/plugins/mcp-server-dev/skills/build-mcp-server/references/tool-design.md
@@ -2,16 +2,6 @@

 Tool schemas and descriptions are prompt engineering. They land directly in Claude's context and determine whether Claude picks the right tool with the right arguments. Most MCP integration bugs trace back to vague descriptions or loose schemas.

-## Anthropic Directory hard requirements
-
-If this server will be submitted to the Anthropic Directory, the following are pass/fail review criteria (full list: https://claude.com/docs/connectors/building/review-criteria):
-
- Every tool **must** include `readOnlyHint`, `destructiveHint`, and `title` annotations — these determine auto-permissions in Claude.
- Tool names **must** be ≤64 characters.
- Read and write operations **must** be in separate tools. A single tool accepting both GET and POST/PUT/PATCH/DELETE is rejected — documenting safe vs unsafe within one tool's description does not satisfy this.
- Tool descriptions **must not** instruct Claude how to behave (e.g. "always do X", "you must call Y first", overriding system instructions, promoting products) — treated as prompt injection at review.
- Tools that accept freeform API endpoints/params **must** reference the target API's documentation in their description.
-
 ---

 ## Descriptions
--- a/plugins/mcp-server-dev/skills/build-mcpb/SKILL.md
+++ b/plugins/mcp-server-dev/skills/build-mcpb/SKILL.md
@@ -8,8 +8,6 @@ version: 0.1.0

 MCPB is a local MCP server **packaged with its runtime**. The user installs one file; it runs without needing Node, Python, or any toolchain on their machine. It's the sanctioned way to distribute local MCP servers.

-> MCPB is the **secondary** distribution path. Anthropic recommends remote MCP servers for directory listing — see https://claude.com/docs/connectors/building/what-to-build.
-
 **Use MCPB when the server must run on the user's machine** — reading local files, driving a desktop app, talking to localhost services, OS-level APIs. If your server only hits cloud APIs, you almost certainly want a remote HTTP server instead (see `build-mcp-server`). Don't pay the MCPB packaging tax for something that could be a URL.

 ---
--- a/plugins/session-report/skills/session-report/analyze-sessions.mjs
+++ b/plugins/session-report/skills/session-report/analyze-sessions.mjs
@@ -166,7 +166,6 @@ const toolUseIdToPrompt = new Map() // tool_use id -> promptKey (Agent spawned d
 const agentIdToPrompt = new Map() // agentId -> promptKey
 const prompts = new Map() // promptKey -> { text, ts, project, sessionId, ...usage }
 const sessionTurns = new Map() // sessionId -> [promptKey, ...] in transcript order
-const sessionSpans = new Map() // sessionId -> {project, firstTs, lastTs, tokens}

 function promptRecord(key, init) {
  let r = prompts.get(key)
@@ -334,29 +333,11 @@ async function processFile(p, info, buckets) {
    }
  }

-  // session span (for by_day timeline) — subagent files roll into parent sessionId
-  let span = sessionSpans.get(info.sessionId)
-  if (!span) {
-    span = { project: info.project, firstTs: null, lastTs: null, tokens: 0 }
-    sessionSpans.set(info.sessionId, span)
-  }
-  if (firstTs !== null) {
-    if (span.firstTs === null || firstTs < span.firstTs) span.firstTs = firstTs
-    if (span.lastTs === null || lastTs > span.lastTs) span.lastTs = lastTs
-  }
-
  // commit API calls
  for (const [key, { usage, ts, skill, prompt }] of fileApiCalls) {
    if (key && seenRequestIds.has(key)) continue
    seenRequestIds.add(key)

-    const tot =
-      (usage.input_tokens || 0) +
-      (usage.cache_creation_input_tokens || 0) +
-      (usage.cache_read_input_tokens || 0) +
-      (usage.output_tokens || 0)
-    span.tokens += tot
-
    const targets = [overall, project]
    if (subagent) targets.push(subagent)
    if (skill && skillStats) {
@@ -378,6 +359,11 @@ async function processFile(p, info, buckets) {

    // subagent token accounting on parent buckets
    if (info.kind === 'subagent') {
+      const tot =
+        (usage.input_tokens || 0) +
+        (usage.cache_creation_input_tokens || 0) +
+        (usage.cache_read_input_tokens || 0) +
+        (usage.output_tokens || 0)
      overall.subagentTokens += tot
      project.subagentTokens += tot
      if (subagent) subagent.subagentTokens += tot
@@ -670,55 +656,10 @@ function printJson({ overall, perProject, perSubagent, perSkill }) {
      [...perSkill].map(([k, v]) => [k, summarize(v)]),
    ),
    top_prompts: topPrompts(100),
-    by_day: buildByDay(),
  }
  process.stdout.write(JSON.stringify(out, null, 2) + '\n')
 }

-// Group sessions into local-date buckets for the timeline view. A session is
-// placed on the day its first message landed; tokens for that session (incl.
-// subagents) count toward that day even if it ran past midnight.
-function buildByDay() {
-  const DOW = ['Sun', 'Mon', 'Tue', 'Wed', 'Thu', 'Fri', 'Sat']
-  const days = new Map() // yyyy-mm-dd -> {date, dow, tokens, sessions:[]}
-  for (const [id, s] of sessionSpans) {
-    if (s.firstTs === null || s.tokens === 0) continue
-    const d0 = new Date(s.firstTs)
-    const key = `${d0.getFullYear()}-${String(d0.getMonth() + 1).padStart(2, '0')}-${String(d0.getDate()).padStart(2, '0')}`
-    let day = days.get(key)
-    if (!day) {
-      day = { date: key, dow: DOW[d0.getDay()], tokens: 0, sessions: [] }
-      days.set(key, day)
-    }
-    const base = new Date(
-      d0.getFullYear(),
-      d0.getMonth(),
-      d0.getDate(),
-    ).getTime()
-    day.tokens += s.tokens
-    day.sessions.push({
-      id,
-      project: s.project,
-      tokens: s.tokens,
-      start_min: Math.max(0, Math.round((s.firstTs - base) / 60000)),
-      end_min: Math.max(1, Math.round((s.lastTs - base) / 60000)),
-    })
-  }
-  for (const d of days.values()) {
-    // peak concurrency via 10-min buckets, capped at 24h for display
-    const b = new Array(144).fill(0)
-    for (const s of d.sessions) {
-      const lo = Math.min(143, Math.floor(s.start_min / 10))
-      const hi = Math.min(144, Math.ceil(Math.min(s.end_min, 1440) / 10))
-      for (let i = lo; i < hi; i++) b[i]++
-    }
-    d.peak = Math.max(0, ...b)
-    d.peak_at_min = d.peak > 0 ? b.indexOf(d.peak) * 10 : 0
-    d.sessions.sort((a, b) => a.start_min - b.start_min)
-  }
-  return [...days.values()].sort((a, b) => a.date.localeCompare(b.date))
-}
-
 function promptTotal(r) {
  return (
    r.inputUncached + r.inputCacheCreate + r.inputCacheRead + r.outputTokens
--- a/plugins/session-report/skills/session-report/template.html
+++ b/plugins/session-report/skills/session-report/template.html
@@ -102,42 +102,6 @@
             color: var(--dim); margin: 6px 0; }
  .callout b, .callout code { color: var(--term-fg); }

-  /* ——— day pills + session gantt ——— */
-  .days { display: flex; gap: 8px; flex-wrap: wrap; margin-bottom: 14px; }
-  .dpill { flex: 1; min-width: 84px; max-width: 140px; background: none;
-           border: 1px solid var(--subtle); border-radius: 4px;
-           padding: 9px 6px; font: inherit; color: var(--dim);
-           cursor: pointer; text-align: center; }
-  .dpill:hover { border-color: var(--dim); background: var(--hover); }
-  .dpill .dow { font-size: 10px; color: var(--subtle); display: block; }
-  .dpill .date { font-size: 11px; color: var(--term-fg); font-weight: 500;
-                 display: block; margin: 2px 0 4px; }
-  .dpill .pct { font-size: 16px; font-weight: 700; color: var(--term-fg); display: block; }
-  .dpill .ns { font-size: 10px; color: var(--subtle); display: block; margin-top: 2px; }
-  .dpill.heaviest .pct { color: var(--clay); }
-  .dpill.sel { border-color: var(--clay); background: rgba(217,119,87,0.10); }
-  .gantt-hd { display: flex; justify-content: space-between; align-items: baseline;
-              margin-bottom: 6px; }
-  .gantt-hd .day { color: var(--term-fg); font-weight: 500; }
-  .gantt-hd .stats { font-size: 11px; color: var(--dim); }
-  .gantt-hd .stats b { color: var(--clay); }
-  .gantt { position: relative; border-top: 1px solid var(--outline);
-           border-bottom: 1px solid var(--outline); min-height: 32px; }
-  .lane { position: relative; height: 16px;
-          border-bottom: 1px dashed rgba(255,255,255,0.04); }
-  .seg { position: absolute; top: 2px; height: 12px; border-radius: 2px;
-         opacity: .85; cursor: crosshair; }
-  .seg:hover { opacity: 1; outline: 1px solid var(--term-fg); z-index: 2; }
-  .gantt-rule { position: absolute; top: 0; bottom: 0; width: 0;
-                border-left: 1px dashed var(--subtle); opacity: .4;
-                pointer-events: none; }
-  .gantt-axis { display: flex; justify-content: space-between;
-                font-size: 10px; color: var(--subtle); padding: 4px 0; }
-  .gantt-leg { font-size: 10px; color: var(--subtle); margin-top: 8px;
-               display: flex; gap: 14px; flex-wrap: wrap; }
-  .gantt-leg .sw { display: inline-block; width: 14px; height: 10px;
-                   border-radius: 2px; vertical-align: middle; margin-right: 4px; }
-
  /* ——— block-char bars ——— */
  .bar { display: grid; grid-template-columns: 26ch 1fr 8ch; gap: 14px;
         padding: 2px 0; align-items: center; }
@@ -267,21 +231,6 @@
      <div class="section-body" id="project-bars"></div>
    </section>

-    <section id="timeline-section">
-      <div class="hr"></div>
-      <h2>session timeline by day<span class="hint">click a day · ←/→ to navigate</span></h2>
-      <div class="section-body">
-        <div class="days" id="day-pills"></div>
-        <div class="gantt-hd">
-          <span class="day" id="g-day">—</span>
-          <span class="stats" id="g-stats"></span>
-        </div>
-        <div class="gantt-axis"><span>00:00</span><span>06:00</span><span>12:00</span><span>18:00</span><span>24:00</span></div>
-        <div class="gantt" id="gantt"></div>
-        <div class="gantt-leg" id="gantt-leg"></div>
-      </div>
-    </section>
-
    <section>
      <div class="hr"></div>
      <h2>most expensive prompts<span class="hint">click to expand context</span></h2>
@@ -386,65 +335,6 @@
    `<div class="val">${typeof v==='number'&&v>=1e4?fmt(v):v}</div>`+
    (d?`<div class="detail">${d}</div>`:'')+`</div>`).join('');

-  // session timeline by day
-  (function() {
-    const days = (DATA.by_day||[]).slice(-14);
-    if (!days.length) { $('timeline-section').style.display='none'; return; }
-    const PCOL = ['rgb(177,185,249)','rgb(78,186,101)','#D97757','rgb(255,193,7)',
-                  'rgb(255,107,128)','#9b8cff','#6ec1d6','#c792ea'];
-    const dayTotal = days.reduce((a,d)=>a+d.tokens,0) || 1;
-    const tokMax = Math.max(...days.map(d=>d.tokens));
-    const projects = [...new Set(days.flatMap(d=>d.sessions.map(s=>s.project)))];
-    const colorOf = p => PCOL[projects.indexOf(p)%PCOL.length];
-    const hhmm = m => (m>=1440?`+${Math.floor(m/1440)}d `:'') +
-      `${String(Math.floor(m/60)%24).padStart(2,'0')}:${String(m%60).padStart(2,'0')}`;
-    const md = iso => { const [,mo,da]=iso.split('-'); return `${MON[+mo-1]} ${+da}`; };
-    let sel = days.findIndex(d=>d.tokens===tokMax);
-
-    function pills() {
-      $('day-pills').innerHTML = days.map((d,i)=>
-        `<button class="dpill${d.tokens===tokMax?' heaviest':''}${i===sel?' sel':''}" data-i="${i}">`+
-        `<span class="dow">${esc(d.dow)}</span>`+
-        `<span class="date">${esc(md(d.date))}</span>`+
-        `<span class="pct">${(100*d.tokens/dayTotal).toFixed(1)}%</span>`+
-        `<span class="ns">${d.sessions.length} sess</span></button>`
-      ).join('');
-      $('day-pills').querySelectorAll('.dpill').forEach(el=>
-        el.onclick=()=>{sel=+el.dataset.i;pills();gantt();});
-    }
-    function gantt() {
-      const d = days[sel], DAY = 1440;
-      $('g-day').textContent = `${d.dow} ${md(d.date)}`;
-      $('g-stats').innerHTML = `${d.sessions.length} sessions · ${fmt(d.tokens)} tokens`+
-        ` · peak <b>${d.peak}</b> concurrent at <b>${hhmm(d.peak_at_min)}</b>`;
-      const lanes = [];
-      for (const s of d.sessions) {
-        let placed = false;
-        for (const L of lanes) if (L[L.length-1].end_min <= s.start_min) { L.push(s); placed=true; break; }
-        if (!placed) lanes.push([s]);
-      }
-      let h = '';
-      for (let t=0;t<=24;t+=6) h += `<div class="gantt-rule" style="left:${100*t/24}%"></div>`;
-      h += lanes.map(L=>`<div class="lane">${L.map(s=>{
-        const end = Math.min(s.end_min, DAY);
-        const w = Math.max(0.15, 100*(end-s.start_min)/DAY);
-        const tip = `folder: ${short(s.project)}\n`+
-          `${hhmm(s.start_min)}–${hhmm(s.end_min)} · ${fmt(s.tokens)} tokens\n`+
-          `session ${s.id}`;
-        return `<span class="seg" style="left:${100*s.start_min/DAY}%;width:${w}%;`+
-          `background:${colorOf(s.project)}" title="${esc(tip)}"></span>`;
-      }).join('')}</div>`).join('');
-      $('gantt').innerHTML = h || '<div class="callout">no sessions</div>';
-    }
-    document.addEventListener('keydown',e=>{
-      if (e.key==='ArrowRight'&&sel<days.length-1){sel++;pills();gantt();e.preventDefault();}
-      if (e.key==='ArrowLeft'&&sel>0){sel--;pills();gantt();e.preventDefault();}
-    });
-    $('gantt-leg').innerHTML = projects.slice(0,12).map(p=>
-      `<span><span class="sw" style="background:${colorOf(p)}"></span>${esc(short(p))}</span>`).join('');
-    pills(); gantt();
-  })();
-
  // block-char project bars
  (function() {
    const W = 48;
@@ -476,52 +366,57 @@
    return h + '</div>';
  }

-  // expandable drill-down list with "show N more" toggle
-  function drillList(hostId, items, rowFn, empty) {
+  // top prompts — share of grand total
+  (function() {
+    const ps = (DATA.top_prompts||[]).slice(0,100);
    const SHOW = 5;
-    const host = $(hostId);
-    if (!items.length) { host.innerHTML = `<div class="callout">${empty}</div>`; return; }
-    const head = items.slice(0,SHOW).map(rowFn).join('');
-    const rest = items.slice(SHOW).map(rowFn).join('');
-    host.innerHTML = head + (rest
-      ? `<div hidden>${rest}</div><button class="more-btn">show ${items.length-SHOW} more</button>`
-      : '');
-    const btn = host.querySelector('.more-btn');
-    if (btn) btn.onclick = () => {
-      const r = btn.previousElementSibling; r.hidden = !r.hidden;
-      btn.textContent = r.hidden ? `show ${items.length-SHOW} more` : 'show less';
+    const row = p => {
+      const inTot = p.input.uncached+p.input.cache_create+p.input.cache_read;
+      return `<details><summary>`+
+        `<span class="amt">${share(p.total_tokens)}</span>`+
+        `<span class="desc">${esc(p.text)}</span>`+
+        `<span class="meta">${niceDate(p.ts)} · ${esc(short(p.project))} · ${p.api_calls} calls`+
+          (p.subagent_calls?` · ${p.subagent_calls} subagents`:'')+
+          ` · ${pct(p.input.cache_read,inTot)} cached</span>`+
+        `</summary><div class="body">`+
+        renderContext(p.context)+
+        `<div>session <code>${esc(p.session)}</code></div>`+
+        `<div>in: uncached ${fmt(p.input.uncached)} · cache-create ${fmt(p.input.cache_create)} · `+
+        `cache-read ${fmt(p.input.cache_read)} · out ${fmt(p.output)}</div>`+
+        `</div></details>`;
    };
-  }
+    const head = ps.slice(0,SHOW).map(row).join('');
+    const rest = ps.slice(SHOW).map(row).join('');
+    $('top-prompts').innerHTML = ps.length
+      ? head + (rest
+          ? `<div id="tp-rest" hidden>${rest}</div>`+
+            `<button id="tp-more" class="more-btn">show ${ps.length-SHOW} more</button>`
+          : '')
+      : '<div class="callout">No prompts in range.</div>';
+    const btn = $('tp-more');
+    if (btn) btn.onclick = () => {
+      const r = $('tp-rest'); r.hidden = !r.hidden;
+      btn.textContent = r.hidden ? `show ${ps.length-SHOW} more` : 'show less';
+    };
+  })();

-  drillList('top-prompts', (DATA.top_prompts||[]).slice(0,100), p => {
-    const inTot = p.input.uncached+p.input.cache_create+p.input.cache_read;
-    return `<details><summary>`+
-      `<span class="amt">${share(p.total_tokens)}</span>`+
-      `<span class="desc">${esc(p.text)}</span>`+
-      `<span class="meta">${niceDate(p.ts)} · ${esc(short(p.project))} · ${p.api_calls} calls`+
-        (p.subagent_calls?` · ${p.subagent_calls} subagents`:'')+
-        ` · ${pct(p.input.cache_read,inTot)} cached</span>`+
+  // cache breaks
+  (function() {
+    const bs = (DATA.cache_breaks||[]).slice(0,100);
+    $('cache-breaks').innerHTML = bs.map(b =>
+      `<details><summary>`+
+      `<span class="amt">${fmt(b.uncached)}</span>`+
+      `<span class="desc">${esc(short(b.project))} · `+
+        `${b.kind==='subagent'?esc(b.agentType||'subagent'):'main'}</span>`+
+      `<span class="meta">${niceDate(b.ts)} · ${pct(b.uncached,b.total)} of ${fmt(b.total)} uncached</span>`+
      `</summary><div class="body">`+
-      renderContext(p.context)+
-      `<div>session <code>${esc(p.session)}</code></div>`+
-      `<div>in: uncached ${fmt(p.input.uncached)} · cache-create ${fmt(p.input.cache_create)} · `+
-      `cache-read ${fmt(p.input.cache_read)} · out ${fmt(p.output)}</div>`+
-      `</div></details>`;
-  }, 'No prompts in range.');
-
-  drillList('cache-breaks', (DATA.cache_breaks||[]).slice(0,100), b =>
-    `<details><summary>`+
-    `<span class="amt">${fmt(b.uncached)}</span>`+
-    `<span class="desc">${esc(short(b.project))} · `+
-      `${b.kind==='subagent'?esc(b.agentType||'subagent'):'main'}</span>`+
-    `<span class="meta">${niceDate(b.ts)} · ${pct(b.uncached,b.total)} of ${fmt(b.total)} uncached</span>`+
-    `</summary><div class="body">`+
-    renderContext(b.context,
-      `<div class="ctx-break"><b>${fmt(b.uncached)}</b> uncached `+
-      `(${pct(b.uncached,b.total)} of ${fmt(b.total)}) — cache break here</div>`)+
-    `<div>session <code>${esc(b.session)}</code></div>`+
-    `</div></details>`,
-  'No cache breaks over threshold.');
+      renderContext(b.context,
+        `<div class="ctx-break"><b>${fmt(b.uncached)}</b> uncached `+
+        `(${pct(b.uncached,b.total)} of ${fmt(b.total)}) — cache break here</div>`)+
+      `<div>session <code>${esc(b.session)}</code></div>`+
+      `</div></details>`
+    ).join('') || '<div class="callout">No cache breaks over threshold.</div>';
+  })();

  // sortable table
  function table(el, cols, rows) {