codexkit 1.0.0

package/install/validate.sh

@@ -0,0 +1,653 @@
+#!/bin/bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+REPO_DIR="$(dirname "$SCRIPT_DIR")"
+PASS=0
+FAIL=0
+WARN=0
+GLOBAL_CODEX_DIR="${HOME}/.codex"
+GLOBAL_AGENT_BRIDGE="${HOME}/.agents/skills"
+IS_SOURCE_REPO=false
+if [ -d ".git" ] && [ -f "package.json" ]; then
+    IS_SOURCE_REPO=true
+fi
+
+check() {
+    local label="$1"
+    local result="$2"
+    if [ "$result" = "pass" ]; then
+        echo "  ✓ $label"
+        PASS=$((PASS + 1))
+    elif [ "$result" = "warn" ]; then
+        echo "  ⚠ $label"
+        WARN=$((WARN + 1))
+    else
+        echo "  ✗ $label"
+        FAIL=$((FAIL + 1))
+    fi
+}
+
+check_max_lines() {
+    local file="$1"
+    local max_lines="$2"
+    local label="$3"
+
+    if [ ! -f "$file" ]; then
+        check "$label missing" "fail"
+        return
+    fi
+
+    local lines
+    lines=$(wc -l < "$file" | tr -d ' ')
+    if [ "$lines" -le "$max_lines" ]; then
+        check "$label within budget ($lines/$max_lines lines)" "pass"
+    else
+        check "$label exceeds budget ($lines/$max_lines lines)" "warn"
+    fi
+}
+
+have_root_shared_inventory() {
+    [ -f "$GLOBAL_CODEX_DIR/config.toml" ] &&
+    [ -d "$GLOBAL_CODEX_DIR/agents" ] &&
+    [ -d "$GLOBAL_CODEX_DIR/prompts" ] &&
+    [ -d "$GLOBAL_CODEX_DIR/skills" ]
+}
+
+project_has_local_shared_inventory() {
+    [ -d ".codex/agents" ] || [ -d ".codex/prompts" ] || [ -d ".codex/skills" ] || [ -e ".agents/skills" ]
+}
+
+path_sha256() {
+    shasum -a 256 "$1" 2>/dev/null | cut -d' ' -f1
+}
+
+classify_local_shared_files() {
+    local local_root="$1"
+    local root_root="$2"
+    local fallback_root="$3"
+    local rel duplicate_count override_count unmatched_count root_file fallback_file
+    duplicate_count=0
+    override_count=0
+    unmatched_count=0
+
+    [ -d "$local_root" ] || {
+        printf '0 0 0\n'
+        return 0
+    }
+
+    while IFS= read -r local_file; do
+        rel="${local_file#$local_root/}"
+        root_file="$root_root/$rel"
+        fallback_file="$fallback_root/$rel"
+
+        if [ -f "$root_file" ]; then
+            if [ "$(path_sha256 "$local_file")" = "$(path_sha256 "$root_file")" ]; then
+                duplicate_count=$((duplicate_count + 1))
+            else
+                override_count=$((override_count + 1))
+            fi
+        elif [ -f "$fallback_file" ]; then
+            if [ "$(path_sha256 "$local_file")" = "$(path_sha256 "$fallback_file")" ]; then
+                duplicate_count=$((duplicate_count + 1))
+            else
+                override_count=$((override_count + 1))
+            fi
+        else
+            unmatched_count=$((unmatched_count + 1))
+        fi
+    done < <(find "$local_root" -type f | sort)
+
+    printf '%s %s %s\n' "$duplicate_count" "$override_count" "$unmatched_count"
+}
+
+patch_inventory_counts() {
+    local patches_dir="Codexkit_patches"
+    local enabled_count=0
+    local disabled_count=0
+    local invalid_count=0
+    local metadata enabled
+
+    [ -d "$patches_dir" ] || {
+        printf '0 0 0\n'
+        return 0
+    }
+
+    while IFS= read -r metadata; do
+        if enabled="$(python3 -c 'import json,sys; print(str(json.load(open(sys.argv[1])).get("enabled", True)).lower())' "$metadata" 2>/dev/null)"; then
+            if [ "$enabled" = "true" ]; then
+                enabled_count=$((enabled_count + 1))
+            else
+                disabled_count=$((disabled_count + 1))
+            fi
+        else
+            invalid_count=$((invalid_count + 1))
+        fi
+    done < <(find "$patches_dir" -mindepth 2 -maxdepth 2 -type f -name metadata.json | sort)
+
+    printf '%s %s %s\n' "$enabled_count" "$disabled_count" "$invalid_count"
+}
+
+ROOT_SHARED_AVAILABLE=false
+if have_root_shared_inventory; then
+    ROOT_SHARED_AVAILABLE=true
+fi
+
+PROJECT_MODE="project-only"
+if $ROOT_SHARED_AVAILABLE && project_has_local_shared_inventory; then
+    PROJECT_MODE="mixed-legacy"
+elif $ROOT_SHARED_AVAILABLE; then
+    PROJECT_MODE="root-shared"
+elif project_has_local_shared_inventory; then
+    PROJECT_MODE="full-local"
+fi
+
+echo "=== Codexkit Validation ==="
+echo ""
+
+# ─── Ownership ───────────────────────────────────────────────────────
+echo "Ownership:"
+check "Project mode: $PROJECT_MODE" "pass"
+if $ROOT_SHARED_AVAILABLE; then
+    check "Root shared inventory available at ~/.codex" "pass"
+elif $IS_SOURCE_REPO; then
+    check "Root shared inventory unavailable (expected for source-repo validation)" "pass"
+else
+    check "Root shared inventory unavailable" "warn"
+fi
+
+case "$PROJECT_MODE" in
+    root-shared)
+        echo "  · Mode guide: project keeps only project-scoped files; shared agents/prompts/skills come from ~/.codex"
+        ;;
+    full-local)
+        echo "  · Mode guide: project owns its shared inventory locally"
+        ;;
+    mixed-legacy)
+        echo "  · Mode guide: ~/.codex shared inventory exists, but project still has local shared files"
+        ;;
+    *)
+        echo "  · Mode guide: project is missing both root shared inventory and local shared inventory"
+        ;;
+esac
+
+CLASSIFY_ROOT_AGENTS="$REPO_DIR/.codex/agents"
+CLASSIFY_ROOT_PROMPTS="$REPO_DIR/.codex/prompts"
+CLASSIFY_ROOT_SKILLS="$REPO_DIR/.codex/skills"
+if $ROOT_SHARED_AVAILABLE; then
+    CLASSIFY_ROOT_AGENTS="$GLOBAL_CODEX_DIR/agents"
+    CLASSIFY_ROOT_PROMPTS="$GLOBAL_CODEX_DIR/prompts"
+    CLASSIFY_ROOT_SKILLS="$GLOBAL_CODEX_DIR/skills"
+fi
+
+read -r AGENT_DUPLICATES AGENT_OVERRIDES AGENT_UNMATCHED < <(classify_local_shared_files ".codex/agents" "$CLASSIFY_ROOT_AGENTS" "$REPO_DIR/.codex/agents")
+read -r PROMPT_DUPLICATES PROMPT_OVERRIDES PROMPT_UNMATCHED < <(classify_local_shared_files ".codex/prompts" "$CLASSIFY_ROOT_PROMPTS" "$REPO_DIR/.codex/prompts")
+read -r SKILL_DUPLICATES SKILL_OVERRIDES SKILL_UNMATCHED < <(classify_local_shared_files ".codex/skills" "$CLASSIFY_ROOT_SKILLS" "$REPO_DIR/.codex/skills")
+
+LOCAL_SHARED_DUPLICATES=$((AGENT_DUPLICATES + PROMPT_DUPLICATES + SKILL_DUPLICATES))
+LOCAL_SHARED_OVERRIDES=$((AGENT_OVERRIDES + PROMPT_OVERRIDES + SKILL_OVERRIDES))
+LOCAL_SHARED_UNMATCHED=$((AGENT_UNMATCHED + PROMPT_UNMATCHED + SKILL_UNMATCHED))
+
+if [ "$LOCAL_SHARED_DUPLICATES" -gt 0 ] && ! $IS_SOURCE_REPO; then
+    check "Legacy local shared duplicates detected ($LOCAL_SHARED_DUPLICATES files)" "warn"
+else
+    if $IS_SOURCE_REPO; then
+        check "Source repo local shared inventory is canonical (duplicate count informational: $LOCAL_SHARED_DUPLICATES)" "pass"
+    else
+        check "No legacy local shared duplicates detected" "pass"
+    fi
+fi
+
+if [ "$LOCAL_SHARED_OVERRIDES" -gt 0 ]; then
+    check "Local shared overrides detected ($LOCAL_SHARED_OVERRIDES files, consider patches)" "warn"
+else
+    check "No local shared overrides detected" "pass"
+fi
+
+if [ "$LOCAL_SHARED_UNMATCHED" -gt 0 ]; then
+    check "Unmatched local shared files detected ($LOCAL_SHARED_UNMATCHED files)" "warn"
+else
+    check "No unmatched local shared files detected" "pass"
+fi
+
+echo "  · Shared agents : duplicates=$AGENT_DUPLICATES overrides=$AGENT_OVERRIDES unmatched=$AGENT_UNMATCHED"
+echo "  · Shared prompts: duplicates=$PROMPT_DUPLICATES overrides=$PROMPT_OVERRIDES unmatched=$PROMPT_UNMATCHED"
+echo "  · Shared skills : duplicates=$SKILL_DUPLICATES overrides=$SKILL_OVERRIDES unmatched=$SKILL_UNMATCHED"
+
+read -r PATCH_ENABLED PATCH_DISABLED PATCH_INVALID < <(patch_inventory_counts)
+check "Patch inventory: enabled=$PATCH_ENABLED disabled=$PATCH_DISABLED invalid=$PATCH_INVALID" "$([ "$PATCH_INVALID" -eq 0 ] && echo pass || echo warn)"
+echo ""
+
+# ─── CLI ─────────────────────────────────────────────────────────
+echo "CLI:"
+if command -v codex &> /dev/null; then
+    version=$(codex --version 2>/dev/null || echo "unknown")
+    check "Codex CLI installed (version: $version)" "pass"
+else
+    check "Codex CLI not found" "warn"
+fi
+
+if "$REPO_DIR/bin/codexkit" help | grep -q "codexkit run" 2>/dev/null; then
+    check "codexkit help exposes run launcher" "pass"
+else
+    check "codexkit help missing run launcher" "fail"
+fi
+
+# ─── Core files ──────────────────────────────────────────────────
+echo ""
+echo "Core files:"
+
+if [ -f "AGENTS.md" ]; then
+    check "AGENTS.md exists at project root" "pass"
+else
+    check "AGENTS.md missing (must be at project root)" "fail"
+fi
+
+if [ -d ".codex" ]; then
+    check ".codex/ directory exists" "pass"
+else
+    check ".codex/ directory missing" "fail"
+fi
+
+if [ -f ".codex/config.toml" ]; then
+    if grep -q '\[profiles\.' ".codex/config.toml" 2>/dev/null; then
+        check ".codex/config.toml has [profiles.*] sections" "pass"
+    elif grep -q '\[profile\.' ".codex/config.toml" 2>/dev/null; then
+        check ".codex/config.toml uses stale [profile.*] — should be [profiles.*]" "fail"
+    else
+        check ".codex/config.toml exists but may need profiles" "warn"
+    fi
+    # Check for stale config keys
+    if grep -qE '^sandbox\s*=' ".codex/config.toml" 2>/dev/null; then
+        check "config.toml uses stale 'sandbox' key — should be 'sandbox_mode'" "fail"
+    fi
+    if grep -qE '^approval\s*=' ".codex/config.toml" 2>/dev/null; then
+        check "config.toml uses stale 'approval' key — should be 'approval_policy'" "fail"
+    fi
+else
+    check ".codex/config.toml missing" "fail"
+fi
+
+if [ -f ".codex/.env.example" ]; then
+    check ".codex/.env.example exists" "pass"
+else
+    check ".codex/.env.example missing" "fail"
+fi
+
+if [ -f ".env.example" ]; then
+    check "root .env.example exists (legacy; Codexkit uses .codex/.env.example instead)" "warn"
+else
+    check "No legacy root .env.example detected" "pass"
+fi
+
+if [ -f ".codex/.env.example" ]; then
+    for env_key in EXA_API_KEY CONTEXT7_API_KEY REF_API_KEY; do
+        if grep -q "^${env_key}=" ".codex/.env.example" 2>/dev/null; then
+            check ".codex/.env.example includes $env_key" "pass"
+        else
+            check ".codex/.env.example missing $env_key" "fail"
+        fi
+    done
+fi
+
+if [ -f ".codex/.version" ]; then
+    check ".codex/.version exists" "pass"
+else
+    check ".codex/.version missing" "fail"
+fi
+
+if [ -f ".codex/.template-manifest.json" ] || [ -f ".template-manifest.json" ]; then
+    check "template manifest exists" "pass"
+else
+    check "template manifest missing" "fail"
+fi
+
+# ─── Directories ─────────────────────────────────────────────────
+echo ""
+echo "Directories:"
+for dir in context hooks scripts mcp memory plans; do
+    if [ -d ".codex/$dir" ]; then
+        count=$(find ".codex/$dir" -maxdepth 1 -type f 2>/dev/null | wc -l | tr -d ' ')
+        check ".codex/$dir/ exists ($count files)" "pass"
+    else
+        check ".codex/$dir/ missing" "fail"
+    fi
+done
+
+for script in audit_memory_hygiene.sh prepare_worklog_archive.sh apply_worklog_archive.sh build_memory_index.sh validate_memory_docs.sh; do
+    if [ -x ".codex/scripts/$script" ]; then
+        check ".codex/scripts/$script is executable" "pass"
+    elif [ -f ".codex/scripts/$script" ]; then
+        check ".codex/scripts/$script exists but is not executable" "warn"
+    else
+        check ".codex/scripts/$script missing" "warn"
+    fi
+done
+
+if [ -f ".codex/.env" ]; then
+    check ".codex/.env exists (launcher-ready MCP secrets file)" "pass"
+elif $IS_SOURCE_REPO; then
+    check ".codex/.env missing in source repo (expected; create locally from .codex/.env.example when needed)" "pass"
+else
+    check ".codex/.env missing (create from .codex/.env.example before codexkit run for MCP auth)" "warn"
+fi
+
+for dir in agents prompts skills; do
+    if [ -d ".codex/$dir" ]; then
+        if [ "$dir" = "skills" ]; then
+            count=$(find ".codex/$dir" -mindepth 2 -maxdepth 2 -type f -name 'SKILL.md' 2>/dev/null | wc -l | tr -d ' ')
+            check ".codex/$dir/ exists locally ($count skills)" "pass"
+        else
+            count=$(find ".codex/$dir" -maxdepth 1 -type f 2>/dev/null | wc -l | tr -d ' ')
+            check ".codex/$dir/ exists locally ($count files)" "pass"
+        fi
+    elif $ROOT_SHARED_AVAILABLE; then
+        check ".codex/$dir/ provided by ~/.codex/$dir" "pass"
+    else
+        check ".codex/$dir/ missing" "fail"
+    fi
+done
+
+# Check .agents/skills discovery bridge
+if [ -L ".agents/skills" ]; then
+    check ".agents/skills symlink exists (Codex CLI discovery)" "pass"
+elif [ -d ".agents/skills" ]; then
+    check ".agents/skills exists as directory" "pass"
+else
+    if [ -d ".git" ] && [ -d ".codex/skills" ]; then
+        check ".agents/skills missing in source repo (canonical-only layout; install-project.sh creates bridge in target projects)" "pass"
+    elif [ -L "$GLOBAL_AGENT_BRIDGE" ] || [ -d "$GLOBAL_AGENT_BRIDGE" ] || $ROOT_SHARED_AVAILABLE; then
+        check ".agents/skills provided by root shared inventory" "pass"
+    else
+        check ".agents/skills missing (run install-project.sh to create discovery bridge in target projects)" "warn"
+    fi
+fi
+
+# ─── Agent roles ─────────────────────────────────────────────────
+echo ""
+echo "Agent roles:"
+for agent in planner reviewer shipper scout vision debugger refactorer builder runner general painter; do
+    agent_file=".codex/agents/$agent.toml"
+    if [ ! -f "$agent_file" ] && $ROOT_SHARED_AVAILABLE; then
+        agent_file="$GLOBAL_CODEX_DIR/agents/$agent.toml"
+    fi
+
+    if [ -f "$agent_file" ]; then
+        if grep -q 'developer_instructions' "$agent_file" 2>/dev/null; then
+            check "$agent.toml has developer_instructions" "pass"
+        else
+            check "$agent.toml missing developer_instructions" "fail"
+        fi
+    else
+        check "$agent.toml missing" "warn"
+    fi
+done
+
+# ─── Skills ──────────────────────────────────────────────────────
+echo ""
+echo "Skills:"
+SKILL_ROOT=".codex/skills"
+if [ ! -d "$SKILL_ROOT" ] && $ROOT_SHARED_AVAILABLE; then
+    SKILL_ROOT="$GLOBAL_CODEX_DIR/skills"
+fi
+skill_count=$(find "$SKILL_ROOT" -name "SKILL.md" 2>/dev/null | wc -l | tr -d ' ')
+check "Found $skill_count skills" "pass"
+
+# Check frontmatter
+missing_fm=0
+for skill_file in "$SKILL_ROOT"/*/SKILL.md; do
+    [ -f "$skill_file" ] || continue
+    if ! head -1 "$skill_file" | grep -q '^---$'; then
+        missing_fm=$((missing_fm + 1))
+    fi
+done
+if [ "$missing_fm" -eq 0 ]; then
+    check "All skills have YAML frontmatter" "pass"
+else
+    check "$missing_fm skills missing YAML frontmatter" "warn"
+fi
+
+# ─── Prompts ─────────────────────────────────────────────────────
+echo ""
+echo "Prompts:"
+PROMPT_ROOT=".codex/prompts"
+if [ ! -d "$PROMPT_ROOT" ] && $ROOT_SHARED_AVAILABLE; then
+    PROMPT_ROOT="$GLOBAL_CODEX_DIR/prompts"
+fi
+prompt_count=$(find "$PROMPT_ROOT" -name "*.md" 2>/dev/null | wc -l | tr -d ' ')
+check "Found $prompt_count prompts" "pass"
+
+# ─── Context docs ────────────────────────────────────────────────
+echo ""
+echo "Context docs:"
+for doc in index.md architecture.md conventions.md current-priorities.md decision-log.md worklog.md session-context.md; do
+    if [ -f ".codex/context/$doc" ]; then
+        check ".codex/context/$doc" "pass"
+    else
+        check ".codex/context/$doc missing" "fail"
+    fi
+done
+
+# ─── Memory ──────────────────────────────────────────────────────
+echo ""
+echo "Memory:"
+for doc in README.md session-context.md project/user.md project/tech-stack.md project/project.md project/roadmap.md project/state.md project/gotchas.md; do
+    if [ -f ".codex/memory/$doc" ]; then
+        check ".codex/memory/$doc" "pass"
+    else
+        check ".codex/memory/$doc missing" "fail"
+    fi
+done
+
+if [ -f ".codex/context/session-context.md" ]; then
+    check "Canonical session context exists at .codex/context/session-context.md" "pass"
+else
+    check "Canonical session context missing at .codex/context/session-context.md" "fail"
+fi
+
+if [ -f ".codex/memory/_templates/README.md" ]; then
+    check ".codex/memory/_templates/README.md" "pass"
+else
+    check ".codex/memory/_templates/README.md missing" "warn"
+fi
+
+if [ -f ".codex/memory/.index/memory-index.jsonl" ] && [ -f ".codex/memory/.index/memory-index.db" ]; then
+    check "Derived memory indexes present at .codex/memory/.index/{memory-index.jsonl,memory-index.db}" "pass"
+else
+    check "Derived memory indexes not fully built yet (.codex/memory/.index/)" "warn"
+fi
+
+if [ -x ".codex/scripts/validate_memory_docs.sh" ]; then
+    if ".codex/scripts/validate_memory_docs.sh" ".codex" >/dev/null 2>&1; then
+        check "Memory docs pass structural validation" "pass"
+    else
+        check "Memory docs fail structural validation" "fail"
+    fi
+fi
+
+check_max_lines ".codex/context/worklog.md" 200 "worklog.md"
+check_max_lines ".codex/context/decision-log.md" 200 "decision-log.md"
+check_max_lines ".codex/context/session-context.md" 80 "context/session-context.md"
+check_max_lines ".codex/memory/project/state.md" 120 "memory/project/state.md"
+
+if [ -f ".codex/memory/session-context.md" ]; then
+    legacy_note="Legacy compatibility file only."
+    if grep -q "$legacy_note" ".codex/memory/session-context.md" 2>/dev/null; then
+        check "Legacy .codex/memory/session-context.md is marked as compatibility-only" "pass"
+    else
+        check "Legacy .codex/memory/session-context.md is not marked as compatibility-only" "warn"
+    fi
+fi
+
+# ─── Global install ──────────────────────────────────────────────
+echo ""
+echo "Global install:"
+if [ -d "${HOME}/.codex" ]; then
+    check "~/.codex/ directory exists" "pass"
+else
+    check "~/.codex/ directory missing (run install-global.sh)" "warn"
+fi
+
+if [ -f "${HOME}/.codex/AGENTS.override.md" ]; then
+    check "~/.codex/AGENTS.override.md exists" "pass"
+else
+    check "~/.codex/AGENTS.override.md missing" "warn"
+fi
+
+if [ -f "${HOME}/.codex/config.toml" ]; then
+    check "~/.codex/config.toml exists" "pass"
+else
+    check "~/.codex/config.toml missing" "warn"
+fi
+
+for dir in agents prompts skills; do
+    if [ -d "${HOME}/.codex/$dir" ]; then
+        check "~/.codex/$dir exists" "pass"
+    elif $IS_SOURCE_REPO && [ "$dir" = "agents" ]; then
+        check "~/.codex/agents missing (acceptable when validating source repo without global shared-agent install)" "pass"
+    else
+        check "~/.codex/$dir missing" "warn"
+    fi
+done
+
+# ─── Stale pattern check ────────────────────────────────────────
+echo ""
+echo "Stale patterns:"
+stale_found=0
+
+if grep -rq '\[mcp\.' ".codex/config.toml" 2>/dev/null; then
+    # Only flag uncommented lines
+    if grep -E '^\[mcp\.' ".codex/config.toml" 2>/dev/null | grep -qv '^#'; then
+        check "config.toml has active [mcp.*] — should be [mcp_servers.*]" "fail"
+        stale_found=1
+    fi
+fi
+
+if grep -rq 'system_prompt' ".codex/config.toml" 2>/dev/null; then
+    check "config.toml has 'system_prompt' — should be 'config_file'" "fail"
+    stale_found=1
+fi
+
+if [ "$stale_found" -eq 0 ]; then
+    check "No stale patterns detected" "pass"
+fi
+
+if grep -R "YOUR_KEY_HERE" README.md docs .codex/mcp >/dev/null 2>&1; then
+    check "Docs/examples still contain hardcoded MCP secret placeholders" "fail"
+else
+    check "Docs/examples avoid hardcoded MCP secret placeholders" "pass"
+fi
+
+if grep -R "exaApiKey=" README.md docs .codex/mcp >/dev/null 2>&1; then
+    check "Docs/examples still inline Exa API keys in URLs" "fail"
+else
+    check "Docs/examples avoid inline Exa API keys in URLs" "pass"
+fi
+
+# ─── Plugins ─────────────────────────────────────────────────────
+echo ""
+echo "Plugins:"
+CODEXKIT_HOME="${CODEXKIT_HOME:-$HOME/.codexkit}"
+if [ -d "$CODEXKIT_HOME/plugins" ]; then
+    plugin_count=0
+    plugin_invalid=0
+    for plugin_dir in "$CODEXKIT_HOME/plugins"/*/; do
+        [ -d "$plugin_dir" ] || continue
+        plugin_count=$((plugin_count + 1))
+        pname=$(basename "$plugin_dir")
+        if [ ! -f "$plugin_dir/plugin.json" ]; then
+            check "Plugin '$pname' missing plugin.json" "fail"
+            plugin_invalid=$((plugin_invalid + 1))
+        else
+            # Validate required fields
+            if python3 -c '
+import json, sys
+p = json.load(open(sys.argv[1]))
+assert p.get("name"), "missing name"
+assert p.get("version"), "missing version"
+' "$plugin_dir/plugin.json" 2>/dev/null; then
+                check "Plugin '$pname' valid" "pass"
+            else
+                check "Plugin '$pname' invalid plugin.json (needs name + version)" "fail"
+                plugin_invalid=$((plugin_invalid + 1))
+            fi
+        fi
+    done
+    if [ "$plugin_count" -eq 0 ]; then
+        check "No plugins installed" "pass"
+    else
+        check "Found $plugin_count plugin(s), $plugin_invalid invalid" "$([ "$plugin_invalid" -eq 0 ] && echo pass || echo warn)"
+    fi
+else
+    check "No plugin directory (~/.codexkit/plugins/)" "pass"
+fi
+
+# ─── Templates ───────────────────────────────────────────────────
+echo ""
+echo "Custom templates:"
+if [ -d "$CODEXKIT_HOME/templates" ]; then
+    template_count=0
+    template_invalid=0
+    for tmpl_dir in "$CODEXKIT_HOME/templates"/*/; do
+        [ -d "$tmpl_dir" ] || continue
+        template_count=$((template_count + 1))
+        tname=$(basename "$tmpl_dir")
+        if [ ! -f "$tmpl_dir/template.json" ]; then
+            check "Template '$tname' missing template.json" "fail"
+            template_invalid=$((template_invalid + 1))
+        else
+            if python3 -c '
+import json, sys
+t = json.load(open(sys.argv[1]))
+assert t.get("name"), "missing name"
+assert t.get("version"), "missing version"
+' "$tmpl_dir/template.json" 2>/dev/null; then
+                check "Template '$tname' valid" "pass"
+            else
+                check "Template '$tname' invalid template.json (needs name + version)" "fail"
+                template_invalid=$((template_invalid + 1))
+            fi
+        fi
+    done
+    if [ "$template_count" -eq 0 ]; then
+        check "No custom templates installed" "pass"
+    else
+        check "Found $template_count template(s), $template_invalid invalid" "$([ "$template_invalid" -eq 0 ] && echo pass || echo warn)"
+    fi
+else
+    check "No template directory (~/.codexkit/templates/)" "pass"
+fi
+
+# ─── Registry ────────────────────────────────────────────────────
+echo ""
+echo "Registry:"
+if [ -f "$CODEXKIT_HOME/registry.json" ]; then
+    if python3 -c '
+import json, sys
+r = json.load(open(sys.argv[1]))
+assert isinstance(r.get("plugins", {}), dict)
+assert isinstance(r.get("templates", {}), dict)
+' "$CODEXKIT_HOME/registry.json" 2>/dev/null; then
+        check "registry.json valid" "pass"
+    else
+        check "registry.json invalid format" "fail"
+    fi
+else
+    check "No registry.json (created on first plugin/template install)" "pass"
+fi
+
+# ─── Summary ─────────────────────────────────────────────────────
+echo ""
+echo "=== Results ==="
+echo "  Pass: $PASS  Warn: $WARN  Fail: $FAIL"
+
+if [ "$FAIL" -gt 0 ]; then
+    echo ""
+    echo "  Run install scripts to fix failures:"
+    echo "    ./install/install-global.sh"
+    echo "    ./install/install-project.sh"
+    exit 1
+fi
+
+echo ""
+echo "✓ Validation passed"

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "codexkit",
+  "version": "1.0.0",
+  "description": "Professional configuration kit for OpenAI Codex CLI",
+  "license": "MIT",
+  "keywords": [
+    "codex",
+    "codex-cli",
+    "agent",
+    "workflow",
+    "installer"
+  ],
+  "bin": {
+    "codexkit": "bin/codexkit"
+  },
+  "files": [
+    "bin",
+    "install",
+    "templates",
+    ".codex",
+    "!.codex/memory/.index",
+    "!.codex/memory/.index/**",
+    ".template-manifest.json",
+    "AGENTS.md",
+    "AGENTS.override.md.example",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
+  "scripts": {
+    "test": "bash tests/run_release_gate.sh"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=18"
+  }
+}