@reddb-io/red-skills 3.18.11 → 3.19.2

package/dist/rsp.bundle.min.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire as __cr } from 'node:module'; const require = __cr(import.meta.url);
 import{spawn as L}from"node:child_process";import{isUtf8 as te}from"node:buffer";async function _(e,n=t=>t){let t=[],r=[];return e.stdout?.on("data",i=>t.push(Buffer.from(i))),e.stderr?.on("data",i=>r.push(Buffer.from(i))),await new Promise(i=>{let c=!1,o=async(a,s)=>{if(c)return;c=!0;let l=Buffer.concat(t),u=l;if(l.length>0&&te(l))try{u=await n(l)}catch{}if(process.stdout.write(u),process.stderr.write(Buffer.concat(r)),s){process.kill(process.pid,s),i(128);return}i(a??0)};e.once("error",a=>{r.push(Buffer.from(`${a instanceof Error?a.message:String(a)}
-`)),o(127,null)}),e.once("close",(a,s)=>void o(a,s))})}var re=new Set(["dashboard","stats","gains","show","git","gh","vitest","cargo","cat","exec","wait","doctor","status","sweep","setup","mcp","shell-init","server","warm-resident","gh-api-json","hook"]);function R(e){let n=e[0];if(n==="--full"||n==="--brief"||n==="--terse")return e[1]!=="--"||!e[2]?null:{kind:"argv",argv:[...e.slice(2)],level:n.slice(2)};if(!n||n.startsWith("-"))return n!=="--"||!e[1]?null:{kind:"argv",argv:[...e.slice(1)],level:"automatic"};if(n==="proxy"){if(process.env.RSP_PROXY_FAIL_INTERNAL==="1")return null;let t=e.indexOf("--"),r=t>=0?e.slice(1,t):[];if(r.some(a=>a!=="--full"&&a!=="--brief"&&a!=="--terse"))return null;let i=t>=0?e.slice(t+1):e.slice(1);if(i.length!==1||!i[0]?.trim())return null;let c=i[0];if(ie(c))return null;let o=r.includes("--terse")?"terse":r.includes("--brief")?"brief":r.includes("--full")?"full":"automatic";return{kind:"shell",commandLine:c,level:o}}return re.has(n)?null:{kind:"argv",argv:[...e],level:"automatic"}}async function I(e,n){let t=e.kind==="argv"?L(e.argv[0],e.argv.slice(1),{stdio:["inherit","pipe","pipe"]}):L(e.commandLine,{shell:!0,stdio:["inherit","pipe","pipe"]});return await _(t,n)}function ie(e){return/(?:^|&&|\|\||[;|])\s*(?:(?:[A-Za-z_][A-Za-z0-9_]*=[^\s]+|env)\s+)*(?:git\s+(?:status|log|diff|show|blame|branch\s+-av)(?:\s|$)|gh\s+(?:pr|issue|run)\s+(?:list|view)(?:\s|$)|vitest(?:\s|$)|cargo\s+test(?:\s|$)|(?:cat|head|tail)\s+)/.test(e)}function F(e){let n={app:e,version:oe(x("__RED_BUILD_VERSION__",()=>"3.18.11")??"0.0.0-dev"),gitSha:x("__RED_BUILD_GIT_SHA__",()=>"f76a806f839e1f527e1e775fe92e720e252f4351")??"unknown",buildTime:x("__RED_BUILD_TIME__",()=>"2026-08-14T22:42:56-03:00")??"unknown",bundleAsset:x("__RED_BUNDLE_ASSET__",()=>"rsp.bundle.min.mjs")??"unknown"},t=x("__REDDB_SDK_VERSION__",()=>"1.23.1"),r=x("__REDDB_BINARY_TAG__",()=>"v1.23.1");return t&&(n.reddbSdkVersion=t),r&&(n.reddbBinaryTag=r),n}function oe(e){return e.startsWith("v")?e.slice(1):e}function N(e){return`${e.app} ${e.version} ${e.gitSha}`}function x(e,n){try{let t=n();return typeof t=="string"&&t.length>0?t:void 0}catch{return process.env[e.replace(/^__|__$/g,"")]}}var D={"=":"data",":=":{to:"data",typed:!0},":":"meta"},se=/^[a-z][a-z0-9+.-]*:\/\//i;function ce(e,n){return typeof n=="string"?{separator:e,to:n,typed:!1,prefix:!1}:{separator:e,to:n.to,typed:n.typed??!1,prefix:n.prefix??!1}}function ae(e=D){return Object.entries(e).map(([n,t])=>ce(n,t)).sort((n,t)=>t.separator.length-n.separator.length)}function ue(e){return/^-\d+(\.\d+)?$/.test(e)}function O(e){return!(!e||e.startsWith("-")&&!ue(e))}function k(e){if(e==="true")return!0;if(e==="false")return!1;if(e==="null")return null;let n=Number(e);return!Number.isNaN(n)&&Number.isFinite(n)&&e.trim()!==""?n:e}function P(e){if(e==="true")return!0;if(e==="false")return!1;if(e==="null")return null;if(e.startsWith("[")&&e.endsWith("]")||e.startsWith("{")&&e.endsWith("}"))try{return JSON.parse(e)}catch{}let n=Number(e);return!Number.isNaN(n)&&Number.isFinite(n)&&e.trim()!==""?n:e.includes(",")?e.split(",").map(t=>P(t.trim())):e}function w(e,n){switch(n){case"boolean":return le(e);case"number":return fe(e);case"array":return e.split(",").map(t=>k(t.trim()));case"string":default:return e}}function le(e){let n=e.toLowerCase().trim();return n==="true"||n==="yes"||n==="1"||n==="on"}function fe(e){if(e.trim()==="")throw new TypeError(`Cannot convert "${e}" to number`);let n=Number(e);if(Number.isNaN(n))throw new TypeError(`Cannot convert "${e}" to number`);return n}function b(e){return e.startsWith('"')&&e.endsWith('"')||e.startsWith("'")&&e.endsWith("'")?e.slice(1,-1):e}function de(e,n={}){return e.map(t=>{let r=n[t.type];return r?r(t.value):t.value}).join("")}function d(e,n){return{type:e,value:n}}function pe(e){let n=[],t=he(e);if(n.push(d("section-header","Usage:"),d("text"," "),d("usage-text",t),d("newline",`
+`)),o(127,null)}),e.once("close",(a,s)=>void o(a,s))})}var re=new Set(["dashboard","stats","gains","show","git","gh","vitest","cargo","cat","exec","wait","doctor","status","sweep","setup","mcp","shell-init","server","warm-resident","gh-api-json","hook"]);function R(e){let n=e[0];if(n==="--full"||n==="--brief"||n==="--terse")return e[1]!=="--"||!e[2]?null:{kind:"argv",argv:[...e.slice(2)],level:n.slice(2)};if(!n||n.startsWith("-"))return n!=="--"||!e[1]?null:{kind:"argv",argv:[...e.slice(1)],level:"automatic"};if(n==="proxy"){if(process.env.RSP_PROXY_FAIL_INTERNAL==="1")return null;let t=e.indexOf("--"),r=t>=0?e.slice(1,t):[];if(r.some(a=>a!=="--full"&&a!=="--brief"&&a!=="--terse"))return null;let i=t>=0?e.slice(t+1):e.slice(1);if(i.length!==1||!i[0]?.trim())return null;let c=i[0];if(ie(c))return null;let o=r.includes("--terse")?"terse":r.includes("--brief")?"brief":r.includes("--full")?"full":"automatic";return{kind:"shell",commandLine:c,level:o}}return re.has(n)?null:{kind:"argv",argv:[...e],level:"automatic"}}async function I(e,n){let t=e.kind==="argv"?L(e.argv[0],e.argv.slice(1),{stdio:["inherit","pipe","pipe"]}):L(e.commandLine,{shell:!0,stdio:["inherit","pipe","pipe"]});return await _(t,n)}function ie(e){return/(?:^|&&|\|\||[;|])\s*(?:(?:[A-Za-z_][A-Za-z0-9_]*=[^\s]+|env)\s+)*(?:git\s+(?:status|log|diff|show|blame|branch\s+-av)(?:\s|$)|gh\s+(?:pr|issue|run)\s+(?:list|view)(?:\s|$)|vitest(?:\s|$)|cargo\s+test(?:\s|$)|(?:cat|head|tail)\s+)/.test(e)}function F(e){let n={app:e,version:oe(x("__RED_BUILD_VERSION__",()=>"3.19.2")??"0.0.0-dev"),gitSha:x("__RED_BUILD_GIT_SHA__",()=>"81d715b56dbed051a6edfc3eb7f3f659acebe871")??"unknown",buildTime:x("__RED_BUILD_TIME__",()=>"2026-08-18T01:06:20-03:00")??"unknown",bundleAsset:x("__RED_BUNDLE_ASSET__",()=>"rsp.bundle.min.mjs")??"unknown"},t=x("__REDDB_SDK_VERSION__",()=>"1.23.1"),r=x("__REDDB_BINARY_TAG__",()=>"v1.23.1");return t&&(n.reddbSdkVersion=t),r&&(n.reddbBinaryTag=r),n}function oe(e){return e.startsWith("v")?e.slice(1):e}function N(e){return`${e.app} ${e.version} ${e.gitSha}`}function x(e,n){try{let t=n();return typeof t=="string"&&t.length>0?t:void 0}catch{return process.env[e.replace(/^__|__$/g,"")]}}var D={"=":"data",":=":{to:"data",typed:!0},":":"meta"},se=/^[a-z][a-z0-9+.-]*:\/\//i;function ce(e,n){return typeof n=="string"?{separator:e,to:n,typed:!1,prefix:!1}:{separator:e,to:n.to,typed:n.typed??!1,prefix:n.prefix??!1}}function ae(e=D){return Object.entries(e).map(([n,t])=>ce(n,t)).sort((n,t)=>t.separator.length-n.separator.length)}function ue(e){return/^-\d+(\.\d+)?$/.test(e)}function O(e){return!(!e||e.startsWith("-")&&!ue(e))}function k(e){if(e==="true")return!0;if(e==="false")return!1;if(e==="null")return null;let n=Number(e);return!Number.isNaN(n)&&Number.isFinite(n)&&e.trim()!==""?n:e}function P(e){if(e==="true")return!0;if(e==="false")return!1;if(e==="null")return null;if(e.startsWith("[")&&e.endsWith("]")||e.startsWith("{")&&e.endsWith("}"))try{return JSON.parse(e)}catch{}let n=Number(e);return!Number.isNaN(n)&&Number.isFinite(n)&&e.trim()!==""?n:e.includes(",")?e.split(",").map(t=>P(t.trim())):e}function w(e,n){switch(n){case"boolean":return le(e);case"number":return fe(e);case"array":return e.split(",").map(t=>k(t.trim()));case"string":default:return e}}function le(e){let n=e.toLowerCase().trim();return n==="true"||n==="yes"||n==="1"||n==="on"}function fe(e){if(e.trim()==="")throw new TypeError(`Cannot convert "${e}" to number`);let n=Number(e);if(Number.isNaN(n))throw new TypeError(`Cannot convert "${e}" to number`);return n}function b(e){return e.startsWith('"')&&e.endsWith('"')||e.startsWith("'")&&e.endsWith("'")?e.slice(1,-1):e}function de(e,n={}){return e.map(t=>{let r=n[t.type];return r?r(t.value):t.value}).join("")}function d(e,n){return{type:e,value:n}}function pe(e){let n=[],t=he(e);if(n.push(d("section-header","Usage:"),d("text"," "),d("usage-text",t),d("newline",`
 `),d("newline",`
 `)),e.positional&&e.positional.length>0){n.push(d("section-header","Arguments:"),d("newline",`
 `));for(let r of e.positional)if(r.description){let i=r.variadic?`${r.name}...`:r.name;n.push(d("indent","  "),d("positional-name",`<${i}>`)),r.required||n.push(d("positional-optional"," (optional)")),n.push(d("newline",`

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@reddb-io/red-skills",
-  "version": "3.18.11",
-  "description": "RedSkills plugin runtime bundles (dev, code-nav, memory, brain) distributed over npm — the v2 client transport (ADR 0091). Carries the platform-independent JS bundles inside the tarball plus thin bin shims; no postinstall download.",
+  "version": "3.19.2",
+  "description": "RedSkills core npm package: compatibility bin shims, marketplace manifests, host generators, and non-plugin supporting runtimes. Plugin bundles ship in @reddb-io/red-skills-<plugin> packages (ADR 0146).",
   "license": "Apache-2.0",
   "type": "module",
   "publishConfig": {
@@ -23,8 +23,20 @@
     "rsp": "bin/rsp.mjs"
   },
   "files": [
+    ".agents/plugins/marketplace.json",
+    ".claude-plugin/marketplace.json",
+    ".gemini-plugin/marketplace.json",
     "bin/",
     "dist/",
-    "README.md"
+    "README.md",
+    "scripts/generate-codex-manifests.mjs",
+    "scripts/generate-gemini-manifests.mjs",
+    "scripts/generate-pi-manifests.mjs",
+    "scripts/build-gemini-extension.mjs",
+    "scripts/validate-gemini-extension.mjs",
+    "scripts/install-hermes-skills.mjs",
+    "scripts/install-opencode.sh",
+    "scripts/install-pi.sh",
+    "scripts/lib/manifest-core.mjs"
   ]
 }

package/scripts/build-gemini-extension.mjs

@@ -0,0 +1,180 @@
+#!/usr/bin/env node
+
+import { chmod, cp, mkdir, readFile, realpath, rename, rm, stat, writeFile } from "node:fs/promises";
+import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const MCP_BUNDLES = [
+  ["navigator", "code-nav-mcp.bundle.min.mjs", ["code-nav-mcp.bundle.min.mjs", "code-nav.bundle.min.mjs"], []],
+  ["redskilled", "redskilled-mcp.bundle.min.mjs", ["redskilled-mcp.bundle.min.mjs"], []],
+  ["rsp", "rsp.bundle.min.mjs", ["rsp.bundle.min.mjs"], ["mcp"]],
+];
+
+function parseArgs(argv) {
+  const args = { root: process.cwd(), output: "" };
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === "--root" || arg === "--output") {
+      const value = argv[index + 1];
+      if (!value) throw new Error(`${arg} requires a path`);
+      args[arg.slice(2)] = value;
+      index += 1;
+      continue;
+    }
+    throw new Error(`unknown argument: ${arg}`);
+  }
+  if (!args.output) throw new Error("--output requires a path");
+  return args;
+}
+
+async function readJson(path) {
+  try {
+    return JSON.parse(await readFile(path, "utf8"));
+  } catch (error) {
+    throw new Error(`${path}: ${error instanceof Error ? error.message : String(error)}`);
+  }
+}
+
+async function requireFile(path, label) {
+  let metadata;
+  try {
+    metadata = await stat(path);
+  } catch {
+    throw new Error(`${label} not found: ${path}`);
+  }
+  if (!metadata.isFile()) throw new Error(`${label} is not a file: ${path}`);
+}
+
+function within(root, path) {
+  const rel = relative(root, path);
+  return rel !== "" && rel !== ".." && !rel.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) && !isAbsolute(rel);
+}
+
+function extensionPath(...parts) {
+  return ["${extensionPath}", ...parts].join("${/}");
+}
+
+function jsonBytes(value) {
+  return `${JSON.stringify(value, null, 2)}\n`;
+}
+
+export async function buildGeminiExtension({ root, output }) {
+  const sourceRoot = await realpath(resolve(root));
+  const pluginRoot = join(sourceRoot, "plugins", "dev");
+  const claudeManifestPath = join(pluginRoot, ".claude-plugin", "plugin.json");
+  const claude = await readJson(claudeManifestPath);
+  if (claude.name !== "dev") throw new Error(`${claudeManifestPath}: name must be dev`);
+  if (typeof claude.version !== "string" || !claude.version) {
+    throw new Error(`${claudeManifestPath}: version must be a non-empty string`);
+  }
+  if (typeof claude.description !== "string" || !claude.description) {
+    throw new Error(`${claudeManifestPath}: description must be a non-empty string`);
+  }
+  if (!Array.isArray(claude.skills) || claude.skills.length === 0) {
+    throw new Error(`${claudeManifestPath}: skills must be a non-empty array`);
+  }
+
+  const target = resolve(output);
+  const staging = `${target}.tmp-${process.pid}`;
+  await rm(staging, { recursive: true, force: true });
+  await mkdir(join(staging, "skills"), { recursive: true });
+  await mkdir(join(staging, "hooks"), { recursive: true });
+  await mkdir(join(staging, "dist"), { recursive: true });
+
+  const skillNames = new Set();
+  for (const declared of claude.skills) {
+    if (typeof declared !== "string" || !declared.startsWith("./skills/")) {
+      throw new Error(`${claudeManifestPath}: invalid skill path ${JSON.stringify(declared)}`);
+    }
+    const source = resolve(pluginRoot, declared);
+    if (!within(pluginRoot, source)) {
+      throw new Error(`${claudeManifestPath}: skill escapes plugin root: ${declared}`);
+    }
+    await requireFile(join(source, "SKILL.md"), `declared skill ${declared}`);
+    const name = basename(source);
+    if (skillNames.has(name)) {
+      throw new Error(`${claudeManifestPath}: duplicate flattened Gemini skill name: ${name}`);
+    }
+    skillNames.add(name);
+    await cp(source, join(staging, "skills", name), { recursive: true, force: true });
+  }
+
+  const guardSource = join(pluginRoot, "hooks", "command-guard.sh");
+  await requireFile(guardSource, "Gemini command guard hook");
+  await cp(guardSource, join(staging, "hooks", "command-guard.sh"), { force: true });
+  await chmod(join(staging, "hooks", "command-guard.sh"), 0o755);
+
+  const mcpServers = {};
+  for (const [name, bundle, sourceNames, trailingArgs] of MCP_BUNDLES) {
+    let source = "";
+    for (const sourceName of sourceNames) {
+      const candidate = join(sourceRoot, "dist", sourceName);
+      try {
+        await requireFile(candidate, `Gemini ${name} MCP bundle`);
+        source = candidate;
+        break;
+      } catch {
+        // Try the next canonical package-set spelling.
+      }
+    }
+    if (!source) {
+      throw new Error(`Gemini ${name} MCP bundle not found: ${sourceNames.join(", ")}`);
+    }
+    await cp(source, join(staging, "dist", bundle), { force: true });
+    mcpServers[name] = {
+      command: "node",
+      args: [extensionPath("dist", bundle), ...trailingArgs],
+      cwd: "${extensionPath}",
+    };
+  }
+
+  await writeFile(
+    join(staging, "gemini-extension.json"),
+    jsonBytes({
+      name: "dev",
+      version: claude.version,
+      description: String(claude.description)
+        .replace(/[‘’`]/g, "")
+        .replace(/[“”]/g, '"')
+        .replace(/[–—]/g, "-")
+        .replace(/…/g, "...")
+        .replace(/\s+/g, " ")
+        .trim(),
+      mcpServers,
+    }),
+  );
+  await writeFile(
+    join(staging, "hooks", "hooks.json"),
+    jsonBytes({
+      hooks: {
+        BeforeTool: [
+          {
+            matcher: "run_shell_command",
+            hooks: [
+              {
+                type: "command",
+                command: extensionPath("hooks", "command-guard.sh"),
+                description: "Enforce RedSkills command and worktree guardrails",
+              },
+            ],
+          },
+        ],
+      },
+    }),
+  );
+
+  await mkdir(dirname(target), { recursive: true });
+  await rm(target, { recursive: true, force: true });
+  await rename(staging, target);
+}
+
+async function main() {
+  await buildGeminiExtension(parseArgs(process.argv.slice(2)));
+}
+
+if (process.argv[1] === fileURLToPath(import.meta.url)) {
+  main().catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exitCode = 1;
+  });
+}

package/scripts/generate-codex-manifests.mjs

@@ -0,0 +1,291 @@
+#!/usr/bin/env node
+import { readdir, readFile } from "node:fs/promises";
+import { dirname, join, relative } from "node:path";
+import { fileURLToPath } from "node:url";
+import {
+  jsonBytes,
+  normalizeSkillEntry,
+  normalizeText,
+  parseArgs,
+  printDiffs,
+  readJson,
+  titleCaseName,
+  writeGenerated,
+} from "./lib/manifest-core.mjs";
+
+const REPO_URL = "https://github.com/reddb-io/red-skills";
+const AUTHOR = {
+  name: "reddb.io",
+  url: "https://github.com/reddb-io",
+};
+const CAPABILITIES = ["Interactive", "Read", "Write", "Shell"];
+const PREFERRED_SKILL_ROOT_ORDER = ["engineering", "knowledge", "productivity", "misc", "core"];
+
+function marketplaceDisplayName(name) {
+  if (name === "red-skills") return "RedSkills";
+  return titleCaseName(name);
+}
+
+function brandColorForPlugin(name) {
+  if (name === "brain") return "#2563EB";
+  return "#D92D20";
+}
+
+function pluginKeywords(name) {
+  const keywords = ["codex", "claude-code", "skills", "agents"];
+  if (name === "dev") return [...keywords, "github-issues", "tdd"];
+  return [...keywords, name];
+}
+
+function deriveCodexSkillRoots(skills) {
+  if (typeof skills === "string") {
+    return skills.endsWith("/") ? skills : `${skills}/`;
+  }
+  if (!Array.isArray(skills)) return undefined;
+
+  const roots = new Set();
+  for (const skill of skills) {
+    const normalized = normalizeSkillEntry(skill);
+    const match = normalized.match(/^\.\/skills\/([^/]+)/);
+    if (match) roots.add(match[1]);
+  }
+
+  const orderedRoots = [...roots].sort((left, right) => {
+    const leftIndex = PREFERRED_SKILL_ROOT_ORDER.indexOf(left);
+    const rightIndex = PREFERRED_SKILL_ROOT_ORDER.indexOf(right);
+    if (leftIndex !== -1 || rightIndex !== -1) {
+      return (leftIndex === -1 ? Number.MAX_SAFE_INTEGER : leftIndex) - (rightIndex === -1 ? Number.MAX_SAFE_INTEGER : rightIndex);
+    }
+    return left.localeCompare(right);
+  });
+
+  return orderedRoots.map((root) => `./skills/${root}/`);
+}
+
+function codexHooksPath(hooks) {
+  if (typeof hooks !== "string") return undefined;
+  return hooks.replace(/claude\.hooks\.json$/, "codex.hooks.json");
+}
+
+function defaultPromptForPlugin(name, skills) {
+  const skillEntries = Array.isArray(skills) ? skills : [];
+  const skillNames = skillEntries
+    .map((entry) => normalizeSkillEntry(entry).split("/").at(-1))
+    .filter(Boolean)
+    .slice(0, 4);
+
+  if (skillNames.length === 0) return [`Use RedSkills ${titleCaseName(name)} when this workspace needs it.`];
+  return skillNames.map((skill) => `Use $${skill} when this workspace needs it.`);
+}
+
+function maybeSet(target, key, value) {
+  if (value !== undefined) target[key] = value;
+}
+
+function parseYamlScalar(value, field, relativePath) {
+  if (value.startsWith('"')) {
+    try {
+      return JSON.parse(value);
+    } catch {
+      throw new Error(`${relativePath}: ${field} is not a valid quoted scalar`);
+    }
+  }
+  if (value.startsWith("'") && value.endsWith("'")) {
+    return value.slice(1, -1).replace(/''/g, "'");
+  }
+  return value;
+}
+
+/** Parse the three SKILL.md frontmatter fields projected into Codex's sidecar. */
+export function parseCodexSkillFrontmatter(source, relativePath = "SKILL.md") {
+  const lines = source.split(/\r?\n/);
+  if (lines[0] !== "---") throw new Error(`${relativePath}: missing YAML frontmatter`);
+  const end = lines.indexOf("---", 1);
+  if (end === -1) throw new Error(`${relativePath}: unterminated YAML frontmatter`);
+
+  const values = new Map();
+  for (let index = 1; index < end; index += 1) {
+    const match = /^([a-z][a-z0-9-]*):(?:\s*(.*))?$/.exec(lines[index]);
+    if (!match) continue;
+    const [, key, rawValue = ""] = match;
+    if (rawValue === ">-" || rawValue === ">" || rawValue === "|-" || rawValue === "|") {
+      const continuation = [];
+      while (index + 1 < end && /^(?:\s+|$)/.test(lines[index + 1])) {
+        index += 1;
+        continuation.push(lines[index].trim());
+      }
+      values.set(key, continuation.join(rawValue.startsWith(">") ? " " : "\n").trim());
+      continue;
+    }
+    values.set(key, parseYamlScalar(rawValue.trim(), key, relativePath));
+  }
+
+  const name = values.get("name");
+  const description = values.get("description");
+  if (typeof name !== "string" || name.trim() === "") {
+    throw new Error(`${relativePath}: frontmatter has no name`);
+  }
+  if (typeof description !== "string" || description.trim() === "") {
+    throw new Error(`${relativePath}: frontmatter has no description`);
+  }
+  return {
+    name,
+    description,
+    disableModelInvocation: values.get("disable-model-invocation") === "true",
+  };
+}
+
+/** Codex accepts JSON string scalars in YAML, keeping escaping dependency-free. */
+export function buildCodexSkillSidecar(frontmatter) {
+  const lines = [
+    "interface:",
+    `  display_name: ${JSON.stringify(titleCaseName(frontmatter.name))}`,
+    `  short_description: ${JSON.stringify(normalizeText(frontmatter.description))}`,
+  ];
+  if (frontmatter.disableModelInvocation) {
+    lines.push("policy:", "  allow_implicit_invocation: false");
+  }
+  return `${lines.join("\n")}\n`;
+}
+
+async function walkSkillFiles(directory) {
+  let entries;
+  try {
+    entries = await readdir(directory, { withFileTypes: true });
+  } catch (error) {
+    if (error && error.code === "ENOENT") return [];
+    throw error;
+  }
+
+  const files = [];
+  for (const entry of entries.sort((left, right) => left.name.localeCompare(right.name))) {
+    const path = join(directory, entry.name);
+    if (entry.isDirectory()) files.push(...await walkSkillFiles(path));
+    else if (entry.isFile() && entry.name === "SKILL.md") files.push(path);
+  }
+  return files;
+}
+
+/** Derive the sidecar obligation from every plugin's skills tree, never a hand-kept list. */
+export async function discoverCodexSkillFiles(root) {
+  const pluginsRoot = join(root, "plugins");
+  let plugins;
+  try {
+    plugins = await readdir(pluginsRoot, { withFileTypes: true });
+  } catch (error) {
+    if (error && error.code === "ENOENT") return [];
+    throw error;
+  }
+
+  const files = [];
+  for (const plugin of plugins.sort((left, right) => left.name.localeCompare(right.name))) {
+    if (!plugin.isDirectory()) continue;
+    files.push(...await walkSkillFiles(join(pluginsRoot, plugin.name, "skills")));
+  }
+  return files;
+}
+
+export function buildCodexMarketplace(claudeMarketplace) {
+  return {
+    name: claudeMarketplace.name,
+    interface: {
+      displayName: marketplaceDisplayName(claudeMarketplace.name),
+    },
+    plugins: claudeMarketplace.plugins.map((plugin) => {
+      const codexPlugin = {
+        name: plugin.name,
+        source: {
+          source: "local",
+          path: plugin.source,
+        },
+        policy: {
+          installation: plugin.name === "dev" ? "INSTALLED_BY_DEFAULT" : "AVAILABLE",
+          authentication: "ON_USE",
+        },
+      };
+      maybeSet(codexPlugin, "dependencies", plugin.dependencies);
+      maybeSet(codexPlugin, "description", normalizeText(plugin.description));
+      codexPlugin.category = "Developer Tools";
+      return codexPlugin;
+    }),
+  };
+}
+
+export function buildCodexPluginManifest(claudePlugin) {
+  const description = normalizeText(claudePlugin.description);
+  const manifest = {
+    name: claudePlugin.name,
+    version: claudePlugin.version,
+    description,
+    author: AUTHOR,
+    homepage: REPO_URL,
+    repository: REPO_URL,
+    license: "Apache-2.0",
+  };
+
+  maybeSet(manifest, "dependencies", claudePlugin.dependencies);
+  manifest.keywords = pluginKeywords(claudePlugin.name);
+  maybeSet(manifest, "skills", deriveCodexSkillRoots(claudePlugin.skills));
+  maybeSet(manifest, "hooks", codexHooksPath(claudePlugin.hooks));
+  maybeSet(manifest, "mcpServers", claudePlugin.mcpServers);
+  manifest.interface = {
+    displayName: `RedSkills ${titleCaseName(claudePlugin.name)}`,
+    shortDescription: description,
+    longDescription: description,
+    developerName: AUTHOR.name,
+    category: "Developer Tools",
+    capabilities: CAPABILITIES,
+    websiteURL: REPO_URL,
+    defaultPrompt: defaultPromptForPlugin(claudePlugin.name, claudePlugin.skills),
+    brandColor: brandColorForPlugin(claudePlugin.name),
+  };
+
+  return manifest;
+}
+
+export async function generateCodexManifests({ root, check = false }) {
+  const mismatches = [];
+  const claudeMarketplacePath = join(root, ".claude-plugin/marketplace.json");
+  const codexMarketplacePath = join(root, ".agents/plugins/marketplace.json");
+  const claudeMarketplace = await readJson(claudeMarketplacePath);
+  await writeGenerated(codexMarketplacePath, jsonBytes(buildCodexMarketplace(claudeMarketplace)), check, mismatches);
+
+  for (const plugin of claudeMarketplace.plugins) {
+    const pluginRoot = join(root, plugin.source);
+    const claudePlugin = await readJson(join(pluginRoot, ".claude-plugin/plugin.json"));
+    await writeGenerated(
+      join(pluginRoot, ".codex-plugin/plugin.json"),
+      jsonBytes(buildCodexPluginManifest(claudePlugin)),
+      check,
+      mismatches,
+    );
+  }
+
+  for (const skillPath of await discoverCodexSkillFiles(root)) {
+    const relativePath = relative(root, skillPath).replaceAll("\\", "/");
+    const frontmatter = parseCodexSkillFrontmatter(await readFile(skillPath, "utf8"), relativePath);
+    await writeGenerated(
+      join(dirname(skillPath), "agents/openai.yaml"),
+      buildCodexSkillSidecar(frontmatter),
+      check,
+      mismatches,
+    );
+  }
+
+  if (check && mismatches.length > 0) {
+    await printDiffs(root, mismatches, { tempLabel: "red-skills-codex-manifest-diff-" });
+    throw new Error(`Codex manifests are stale; run node scripts/generate-codex-manifests.mjs (${mismatches.length} file(s))`);
+  }
+}
+
+async function main() {
+  const args = parseArgs(process.argv.slice(2));
+  await generateCodexManifests(args);
+}
+
+if (process.argv[1] === fileURLToPath(import.meta.url)) {
+  main().catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exitCode = 1;
+  });
+}