Add pre-push plugin version check; fix plugin version to 0.9.2

- Add scripts/check-plugin-version.sh: verifies plugin.json version is
  consistent with package.json major.minor and that no commits since the
  last tag changed plugin content without bumping the version
- Add pre-push hook in lefthook.yml to run the check as a backstop for
  pre-commit bypasses (e.g. worktree agent commits)
- Bump plugin version to 0.9.2 to reflect skill changes shipped in 841a27d
  that were missed by the pre-commit hook

Author: mindsocket

lefthook.yml

@@ -7,3 +7,8 @@ pre-commit:
       glob: "*.{js,ts,cjs,mjs,d.cts,d.mts,jsx,tsx,json,jsonc}"
       run: bunx @biomejs/biome check --write --no-errors-on-unmatched --files-ignore-unknown=true --colors=off {staged_files}
       stage_fixed: true
+
+pre-push:
+  commands:
+    check-plugin-version:
+      run: bash scripts/check-plugin-version.sh

plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "structured-context",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "description": "Structured content authoring for Obsidian — automatic validation hooks, slash commands, and agent skills to keep markdown files compliant with your schema.",
   "homepage": "https://github.com/mindsocket/structured-context",
   "repository": "https://github.com/mindsocket/structured-context",

scripts/check-plugin-version.sh

@@ -0,0 +1,63 @@
+#!/usr/bin/env bash
+# Verifies plugin/.claude-plugin/plugin.json version is consistent with
+# package.json and plugin content changes in git history.
+#
+# Checks:
+#   - plugin major.minor must match package major.minor
+#   - no commits since the last release tag changed plugin content without
+#     also updating plugin.json in the same commit
+#
+# Intended for pre-push and release checks — does NOT modify any files.
+
+set -euo pipefail
+
+PLUGIN_JSON="plugin/.claude-plugin/plugin.json"
+
+BUN=$(command -v bun 2>/dev/null || echo "$HOME/.bun/bin/bun")
+if ! "$BUN" --version >/dev/null 2>&1; then
+  echo "check-plugin-version: bun not found, cannot verify" >&2
+  exit 1
+fi
+
+pkg_version=$("$BUN" -e "process.stdout.write(JSON.parse(require('fs').readFileSync('package.json','utf8')).version)")
+plugin_version=$("$BUN" -e "process.stdout.write(JSON.parse(require('fs').readFileSync('$PLUGIN_JSON','utf8')).version)")
+
+IFS='.' read -r pkg_major pkg_minor _pkg_patch <<< "$pkg_version"
+IFS='.' read -r plugin_major plugin_minor _plugin_patch <<< "$plugin_version"
+
+fail=0
+
+# Check major.minor sync
+if [ "$pkg_major" -gt "$plugin_major" ] || { [ "$pkg_major" -eq "$plugin_major" ] && [ "$pkg_minor" -gt "$plugin_minor" ]; }; then
+  echo "ERROR: plugin version ($plugin_version) major.minor is behind package ($pkg_version)." >&2
+  fail=1
+fi
+
+# Find the most recent release tag to use as the search baseline
+last_tag=$(git describe --tags --abbrev=0 2>/dev/null || true)
+range="${last_tag:+${last_tag}..}HEAD"
+
+# Find commits in range where plugin content changed but plugin.json did NOT
+unversioned=""
+while IFS= read -r hash; do
+  changed=$(git diff-tree --no-commit-id -r "$hash" --name-only)
+  plugin_content=$(echo "$changed" | grep "^plugin/" | grep -v "^plugin/\.claude-plugin/plugin\.json$" || true)
+  plugin_json_changed=$(echo "$changed" | grep "^plugin/\.claude-plugin/plugin\.json$" || true)
+  if [ -n "$plugin_content" ] && [ -z "$plugin_json_changed" ]; then
+    subject=$(git log -1 --format="%s" "$hash")
+    unversioned="${unversioned}  ${hash:0:7} ${subject}"$'\n'
+  fi
+done < <(git log "$range" --format="%H")
+
+if [ -n "$unversioned" ]; then
+  echo "ERROR: plugin content changed without a version bump in:" >&2
+  echo "$unversioned" >&2
+  echo "Run 'bash scripts/sync-plugin-version.sh' staged with any plugin change to fix, then commit." >&2
+  fail=1
+fi
+
+if [ "$fail" -eq 1 ]; then
+  exit 1
+fi
+
+echo "Plugin version ($plugin_version) is consistent."