distribution.json is the single source of truth; scripts/generate-manifests.mjs emits the Agent Plugins, Claude Code, Codex, Cursor, and Gemini CLI manifests, and CI fails when they are stale.