05-Plugins插件

codex --version
codex --help
codex plugin --help
codex mcp --help
git status --short

review-kit/
├── .codex-plugin/
│   └── plugin.json
└── skills/
    └── review/
        └── SKILL.md

release-assistant/
├── .codex-plugin/
│   └── plugin.json
├── skills/
│   ├── release-check/
│   │   ├── SKILL.md
│   │   └── references/checklist.md
│   └── change-summary/
│       └── SKILL.md
├── scripts/check-changelog.sh
├── references/release-policy.md
├── assets/icon.svg
├── .mcp.json
├── .app.json
└── hooks/hooks.json

---
name: release-check
description: 检查发布准备情况。当用户要求核对版本、changelog 和测试时使用。
---

读取版本、changelog、git status，并运行项目已有的最小测试。
输出阻塞项、已通过项和需要人工确认的项目。
不要创建 tag、推送、部署或修改远程任务，除非用户明确授权。

{
  "name": "review-kit",
  "version": "1.0.0",
  "description": "项目代码审查与发布前检查工具集",
  "skills": "./skills/"
}

{
  "name": "release-assistant",
  "version": "1.2.0",
  "description": "发布检查、变更摘要和项目管理连接器",
  "author": "Example Engineering",
  "homepage": "https://github.com/example/release-assistant",
  "license": "MIT",
  "skills": "./skills/",
  "mcpServers": "./.mcp.json",
  "apps": "./.app.json",
  "interface": {
    "displayName": "Release Assistant",
    "shortDescription": "发布前检查与变更摘要",
    "icon": "./assets/icon.svg"
  }
}

{
  "mcpServers": {
    "project-tracker": {
      "command": "npx",
      "args": ["-y", "@example/project-tracker-mcp"],
      "env": {
        "TRACKER_TOKEN": "${TRACKER_TOKEN}"
      }
    }
  }
}

{
  "mcpServers": {
    "docs": {
      "url": "https://mcp.example.com/mcp",
      "bearerTokenEnvVar": "DOCS_TOKEN"
    }
  }
}

mkdir -p release-assistant/.codex-plugin
mkdir -p release-assistant/skills/release-check
mkdir -p release-assistant/skills/change-summary
mkdir -p release-assistant/assets

{
  "name": "release-assistant",
  "version": "0.1.0",
  "description": "发布检查和变更摘要工作流",
  "skills": "./skills/"
}

find release-assistant -maxdepth 4 -type f | sort
jq empty release-assistant/.codex-plugin/plugin.json

/plugins

codex plugin marketplace add owner/repo
codex plugin marketplace list
codex plugin marketplace add owner/repo --ref main
codex plugin marketplace add ./local-marketplace-root

[plugins."release-assistant@example-market"]
enabled = false

当前项目文件 -> release-check Skill -> project-tracker MCP -> 外部服务

release-assistant/
├── .codex-plugin/plugin.json
├── skills/release-check/SKILL.md
├── skills/change-summary/SKILL.md
├── .mcp.json
├── .app.json
└── references/release-policy.md

{
  "name": "release-assistant",
  "version": "1.0.0",
  "description": "发布前检查、变更摘要和项目任务查询",
  "author": "Example Engineering",
  "homepage": "https://github.com/example/release-assistant",
  "license": "MIT",
  "skills": "./skills/",
  "mcpServers": "./.mcp.json",
  "apps": "./.app.json"
}

---
name: release-check
description: 进行发布前检查。当用户要求检查版本、changelog、测试和工作区时使用。
---

读取版本定义、changelog 和 git status，运行项目指定的最小测试。
必要时使用只读 project-tracker 查询发布任务。
输出阻塞项、已通过项和人工确认项。
不要创建 tag、推送、合并、部署或修改任务。

---
name: change-summary
description: 根据 git diff 生成发布说明和风险摘要。当用户要求整理变更或写 release notes 时使用。
---

读取 git diff --stat 和必要片段，输出功能变化、修复、配置影响、测试证据和未验证风险。
不要复制密钥、个人信息、完整日志或无关源码；没有证据时写“未验证”。

{
  "mcpServers": {
    "project-tracker": {
      "url": "https://tracker.example.com/mcp",
      "bearerTokenEnvVar": "TRACKER_READ_TOKEN"
    }
  }
}

export TRACKER_READ_TOKEN="<只读令牌>"

$env:TRACKER_READ_TOKEN = "<只读令牌>"

{
  "apps": [
    {
      "name": "github",
      "purpose": "读取发布相关的 Pull Request 和 Issue",
      "scopes": ["read:org", "repo:status"]
    }
  ]
}

/skills
/mcp

请使用 release-check 做一次只读发布前检查。不要修改文件、更新项目任务、创建 tag、推送或部署。报告每个外部工具的名称、查询范围和结果来源。

$change-summary 请根据当前 diff 生成发布说明，只读取本地文件，不要联网。

插件：release-assistant
版本：1.0.0
来源：example/release-assistant@<已审查的 ref>
Codex：<本机版本>
已验证：Skill、只读 MCP、连接器、禁用、卸载
未验证：生产部署、写入权限、长时间运行

plugin/.codex-plugin/plugin.json
plugin/.codex-plugin/skills/review/SKILL.md

plugin/.codex-plugin/plugin.json
plugin/skills/review/SKILL.md

拆分职责 -> 单独验证组件 -> 创建 manifest -> 组织目录 -> 本地安装
-> 新开线程加载 -> 检查 Skill/MCP/连接器 -> 审查权限和 hooks
-> 固定版本分发 -> 升级复验 -> 禁用、卸载和撤销授权