[deanrie]

What

When two sub-plugins in one repository ship a component with the same file or directory name, the GitHub import now keeps both. The first occurrence keeps its slug; the later one gets its sub-plugin directory as a slug prefix, the way the hooks component already does.

Why

parseGitHubPlugin walks the repo root and every sub-plugin dir and derives component slugs from the file or directory name only (rules/<file>.mdc, skills/<dir>/SKILL.md, agents/<file>.md, commands/<file>.md). The final dedup keeps the first type:slug and silently drops every later one. In a monorepo, alpha/skills/setup/SKILL.md and beta/skills/setup/SKILL.md import as one skill; beta's copy disappears without an error.

cursor/plugins itself has two such collisions today: skills/pr-review-canvas exists in both cursor-team-kit and pr-review-canvas, and skills/thermo-nuclear-code-quality-review in both cursor-team-kit and thermos. An import of that repo, or of a fork used as a personal marketplace, loses one copy of each.

Change

parse.ts records which prefix each component came from. In the dedup, a component whose type:slug is already taken and that came from a sub-plugin dir gets slugify("<dir> <slug>") (capped at 80 by slugify); only a key that still collides after that is dropped. Components from the repo root, and every component of a single-plugin repo, keep exactly the slug they have today, so existing listings and the rescan diff keys in update-plugin.ts do not move for them.

Checked

• Probe with the real parse.ts and fetch stubbed to a fake tree: a root marketplace with sub-plugins alpha and beta, each with skills/setup/SKILL.md, rules/general.mdc and hooks/hooks.json. On main: 4 components, beta's rule and skill missing. With this change: 6 components, beta-general and beta-setup added, the other four unchanged.
• biome clean. tsc --noEmit shows the same single pre-existing error in scan.ts on main and here.
• git merge-tree clean against main and against the open PRs that touch parse.ts (Fix MCP install: preserve server name and show paste-ready config #427, chore: lint via biome, current Open Plugins links, cron-auth constant-time compare, CI token scope, single biome version #450, fix(plugins): install repo-ingested MCP servers under their submitted name and show a paste-ready config (lands #427; closes #416) #457, fix(github-plugin): retry secondary rate limits, not only primary ones #466, fix(github-plugin): treat a sub-plugin dir as a literal path when filtering the tree #467, fix(github-plugin): encode repo paths in raw.githubusercontent.com URLs #472), and against fix(scan): cap what a repository archive unpacks to before it reaches tmpfs #469 and fix(scan): show every submitter-typed value to the security agent as untrusted #475.

[vercel]

@deanrie is attempting to deploy a commit to the Anysphere Team on Vercel.

A member of the Team first needs to authorize it.