chore: release 1.3.0 (#138)

- fix(codex): 修正 Codex 安装流程 — marketplace 制(README 命令错误修复)
- feat(codex): 新增 .agents/plugins/marketplace.json 仓库级 marketplace(npm 源)
- test(codex): marketplace.json 结构/版本/policy 校验测试
- 同步 .codex-plugin/plugin.json 版本 1.2.0 → 1.3.0

Author: devcxl

.agents/plugins/marketplace.json

@@ -0,0 +1,22 @@
+{
+  "name": "cabbage",
+  "interface": {
+    "displayName": "OpenCode Cabbage"
+  },
+  "plugins": [
+    {
+      "name": "opencode-cabbage",
+      "source": {
+        "source": "npm",
+        "package": "@devcxl/opencode-cabbage",
+        "version": "^1.3.0",
+        "registry": "https://registry.npmjs.org"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Developer Tools"
+    }
+  ]
+}

.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-cabbage",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "全流程开发编排插件 — 需求→设计→任务→编码→测试→审查→自动合并，支持 OpenCode 与 Codex 双平台",
   "author": {
     "name": "devcxl",

README.md

@@ -29,21 +29,24 @@ Once started, the plugin automatically injects 7 slash commands, 9 flow skills,
 
 This package also ships a Codex plugin compatibility layer (`codex-skills/` + `hooks/` + `.codex-plugin/`) so the flow skills and agent prompts work in Codex as well.
 
+The repository is a Codex marketplace: add it as a marketplace source, then install the plugin from it.
+
 ```bash
-# 1. Install the package (npm registry or git)
-npm install @devcxl/opencode-cabbage
+# 1. Add this repository as a Codex marketplace
+codex plugin marketplace add devcxl/opencode-cabbage
 
-# 2. Build first — the SessionStart hook runs from dist/
-npm run build
+# 2. Confirm the plugin is available
+codex plugin list --available
 
-# 3. Install the plugin into Codex
-codex plugins install @devcxl/opencode-cabbage
+# 3. Install the plugin (pulled from the npm package, which bundles all Codex files)
+codex plugin add opencode-cabbage@cabbage
 ```
 
 Notes:
 
-- **Build before use**: the SessionStart hook executes `dist/hooks/session-start.js`, which only exists after `npm run build`.
+- **Build artifact included**: the SessionStart hook (`dist/hooks/session-start.js`) ships inside the published npm package — no local build required.
 - **Hook trust review**: Codex requires interactive trust approval for hooks (`/hooks` command) on first run — approve the `SessionStart` hook to enable context injection.
+- **Marketplace name**: the marketplace is named `cabbage` (see `.agents/plugins/marketplace.json`); use `opencode-cabbage@cabbage` as the plugin selector.
 - **Platform differences**: the Codex layer is a pure-Prompt downgrade — no `goal` tool, no slash commands, no automatic continuation. Agents are plain skills (referenced as `@agent-*`), and flow state is tracked via GitHub Issue checklists. See `codex-skills/agent-dev-lifecycle/SKILL.md` for details.
 
 ## Command Overview

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devcxl/opencode-cabbage",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "OpenCode 全流程开发插件 — 需求→设计→任务→编码→测试→审查→自动合并，支持自动编排与并行 Subagent",
   "repository": {
     "type": "git",

test/plugin/codex-compat.test.ts

@@ -156,3 +156,39 @@ describe("codex skills drift vs assets", () => {
     }
   })
 })
+
+describe("codex marketplace (.agents/plugins/marketplace.json)", () => {
+  const marketplace = readJson(".agents/plugins/marketplace.json") as {
+    name: string
+    interface: Record<string, unknown>
+    plugins: Array<Record<string, unknown>>
+  }
+  const pkg = readJson("package.json")
+  const entry = marketplace.plugins[0]
+
+  it("is valid JSON with name, interface and plugins entries", () => {
+    expect(typeof marketplace.name).toBe("string")
+    expect(marketplace.interface).toBeTruthy()
+    expect(Array.isArray(marketplace.plugins)).toBe(true)
+  })
+
+  it("plugin entry matches manifest name and has required policy fields", () => {
+    expect(entry).toBeTruthy()
+    expect(entry.name).toBe("opencode-cabbage")
+    const policy = entry.policy as Record<string, unknown>
+    expect(policy.installation).toBe("AVAILABLE")
+    expect(policy.authentication).toBe("ON_INSTALL")
+  })
+
+  it("source points to this npm package with a valid version range", () => {
+    const source = entry.source as Record<string, unknown>
+    expect(source.source).toBe("npm")
+    expect(source.package).toBe(pkg.name)
+    expect(String(source.version)).toMatch(/^\^\d+\.\d+\.\d+$/)
+    expect(pkg.version).toMatch(new RegExp(`^${String(source.version).replace("^", "").replace(/(\d+)\.(\d+)\.\d+/, "$1.$2.")}`))
+  })
+
+  it("uses a valid category from the official enum", () => {
+    expect(["Developer Tools", "Productivity", "Utilities", "Data & Analytics"]).toContain(entry.category)
+  })
+})