Add frontend-slides, guizang-ppt-skill, html-ppt, and ppt-master as public third-party marketplace sources with localized Chinese metadata, provenance locks, and generated Codex plugin directories. The sync script now handles root-directory skills without VCS/cache artifacts and supports sparse checkout for large upstream repositories.
Constraint: Third-party plugin content is generated from config/external-sources.json and locked to the upstream commit recorded in external-sources.lock.json.
Rejected: Keeping administrator-added local copies | Stable third-party sources give clearer provenance and let KeyInfo replace duplicates consistently.
Confidence: high
Scope-risk: moderate
Directive: Re-run external source sync instead of manually editing generated plugin directories; keep ppt-master sparseCheckout scoped unless the upstream skill layout changes.
Tested: python scripts/validate_marketplace.py; python /Users/eapil/.codex/skills/.system/plugin-creator/scripts/validate_plugin.py plugins/codex/plugins/frontend-slides; python /Users/eapil/.codex/skills/.system/plugin-creator/scripts/validate_plugin.py plugins/codex/plugins/guizang-ppt-skill; python /Users/eapil/.codex/skills/.system/plugin-creator/scripts/validate_plugin.py plugins/codex/plugins/html-ppt; python /Users/eapil/.codex/skills/.system/plugin-creator/scripts/validate_plugin.py plugins/codex/plugins/ppt-master; git diff --check.
Not-tested: Codex marketplace install/remove smoke test and PowerShell sync execution were not run; pwsh/powershell is unavailable on this machine.
Constraint: Chinese users need localized plugin and skill descriptions while third-party sources must remain syncable from upstream.
Rejected: Editing third-party generated files by hand | Sync would overwrite them and make localization drift from config.
Rejected: One plugin per Three.js skill | Users should install one domain package while Codex can still select individual skills inside it.
Confidence: high
Scope-risk: moderate
Directive: Keep plugin IDs and skill names in English kebab-case; put user-facing Chinese text in manifest fields, SKILL.md descriptions, or external-source overrides.
Tested: Codex manual confirms duplicate skills are not merged; powershell sync_external_plugins.ps1 with proxy; python scripts\\validate_marketplace.py; validate_plugin.py for all plugins; codex plugin list local marketplace; codex plugin add/remove eapil-threejs.
Not-tested: Codex Desktop visual refresh after pulling the updated remote marketplace.
Constraint: The maintainer wants periodic upstream sync handled by script logic rather than Gitea workflow automation.
Rejected: Repository-owned Gitea Actions schedule | The remote Gitea runner setup is unnecessary for the current direction.
Confidence: high
Scope-risk: narrow
Directive: Treat scripts/sync_external_plugins.ps1 as the synchronization entry point unless a new scheduler is explicitly requested.
Tested: python scripts\\validate_marketplace.py; rg found no remaining Gitea Actions sync references.
Not-tested: External scheduler/container execution.
Constraint: Maintainers need repeatable ingestion for external skill repositories with different layouts.\nRejected: Git submodules as the primary mechanism | Codex marketplace installs do not reliably recurse external submodules, and adapters still need layout conversion.\nConfidence: medium\nScope-risk: moderate\nDirective: Add new upstreams through config/external-sources.json and adapter logic rather than hand-copying plugin folders.\nTested: scripts/sync_external_plugins.ps1 -Proxy http://127.0.0.1:18085; scripts/sync_external_plugins.ps1 -Only ui-ux-pro-max -Proxy http://127.0.0.1:18085; python scripts/validate_marketplace.py; validate_plugin.py for superpowers and ui-ux-pro-max; codex plugin add superpowers@eapil-skill-market; codex plugin add ui-ux-pro-max@eapil-skill-market; verified ui-ux-pro-max data/scripts directories in cache.\nNot-tested: Scheduled .gitea workflow execution on git.playones runner.
KeyInfo Bot