Description
The Claude marketplace package validates structurally but its install-from-anywhere promise is false: all four skills assume the repository tree, helper paths assume source-checkout layout, the listing promises an absent PDC procedure, and the manifest declares Apache-2.0 for an AGPL-3.0-only repository.
Acceptance Criteria
- #1 Marketplace docs state whether installation provides guidance only or a runnable product and establish/locate a synthkit checkout before repo commands
- #2 Plugin-owned helper scripts are invoked through a relocation-safe plugin-root mechanism while targeting the verified checkout .env
- #3 Every installed-skill reference resolves from either the installed plugin or the located checkout
- #4 Marketplace and plugin metadata use the repository’s actual license and advertise only delivered skills
- #5 Claude strict validation passes for the marketplace and plugin, and Codex repo discovery still resolves the same skills through .agents/skills
- #6 Optional Codex agents/openai.yaml metadata is added where it improves discovery and uses accurate trigger/dependency declarations
Definition of Done
- #1 make gate (build vet test race rw-proto-check spdx-check forbidden-words)
- #2 make blueprint-schema (only if a blueprint field or construct/workload config struct changed)
- #3 DRY_RUN=true go run ./cmd/synthkit -once -dump — inventory diffed against signals/
Implementation Plan
-
Reconcile marketplace/plugin metadata and installation claims with current OpenAI and Claude Code guidance.
-
Make every repository-dependent skill locate a checkout explicitly and invoke plugin helpers through relocation-safe roots.
-
Add accurate optional Codex metadata where useful, then run strict Claude validation and Codex symlink discovery checks.
Implementation Notes
Reworked the marketplace package as truthful guidance/helpers rather than a product installer. Skills locate and verify SYNTHKIT_CHECKOUT, invoke plugin helpers through CLAUDE_PLUGIN_ROOT, and resolve references within either the plugin or checkout. Metadata now declares AGPL-3.0-only and only shipped capabilities; four optional agents/openai.yaml files add accurate Codex discovery metadata. Strict Claude marketplace/plugin validation, JSON/YAML parsing, helper tests, make skills-check, stale-claim checks, and a relocated-plugin/separate-checkout exercise passed. Actual user-config installation and live deployment remain outside this integration check.
Integrated CodeRabbit review raised one minor copy/paste portability issue; fixed by making the inline terminal secret entry the primary operator command and retaining CLAUDE_PLUGIN_ROOT only for agent-owned helper execution. Wave integration make gate passed; no blueprint schema regeneration was required and the full/focused dry-run inventories passed.
Final Summary
Landed in e98411b: truthful AGPL marketplace metadata, relocation-safe plugin helpers, verified checkout routing, Codex metadata, and accurate capability claims. Verified with strict Claude validation, Codex discovery, relocation exercise, helper tests, CodeRabbit, make gate, and dry-run inventories.