Agent Plugin

The repository root is a portable Agent Plugins 1.0 package and an OpenAI plugin package. Both formats discover the existing skills/ directory, so the curated inventory workflow has one source of truth.

Package layout

• plugin.json identifies the portable package.

• mcp.json declares the hosted Streamable HTTP endpoint. OAuth discovery and credentials remain client-managed and are never stored in the package.

• .codex-plugin/plugin.json provides the OpenAI listing and component metadata.

• .app.json maps the package to the Quilombo MCP connection registered in OpenAI developer mode.

• skills/manage-quilombo-inventory/ supplies the inventory workflow and safety policy.

Run both schema and package validation before changing the package:

uv run python scripts/validate_plugin_package.py

The repository-owned validator checks both published Agent Plugins schemas and the complete OpenAI manifest contract, including companion paths and assets. During development, the package should also pass the plugin-creator validator available inside ChatGPT and Codex.

Versioning and ownership

The plugin version follows the Quilombo application version in pyproject.toml. A plugin metadata, skill, or MCP contract change is released with the application using the normal GitHub Release workflow. Martin Gaitan owns the public listing, OpenAI developer identity, domain verification, and publication from the submission portal.

The portable package can be installed by compatible clients directly from this repository. The OpenAI package can be loaded from the repository root for local testing; public ChatGPT and Codex availability begins only after OpenAI approves and the owner publishes the submission.