fix(codex): fix marketplace install and skills discovery

.agents/plugins/marketplace.json

@@ -15,9 +15,12 @@
     {
       "name": "flow",
       "description": "Unified toolkit for Context-Driven Development with spec-first planning, TDD workflow, and Beads integration",
-      "version": "0.20.2",
+      "version": "0.20.3",
       "source": { "source": "local", "path": "./plugins/flow" },
-      "policy": { "installation": "AVAILABLE" },
+      "policy": { 
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
       "category": "Development",
       "author": { "name": "cofin" }
     }

.agents/plugins/plugins/flow/.codex-plugin

@@ -0,0 +1 @@
+../../../../.codex-plugin

.agents/plugins/plugins/flow/commands

@@ -0,0 +1 @@
+../../../../commands

.agents/plugins/plugins/flow/skills

@@ -0,0 +1 @@
+../../../../skills

.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
     {
       "name": "flow",
       "description": "Unified toolkit for Context-Driven Development with spec-first planning, TDD workflow, and Beads integration",
-      "version": "0.20.2",
+      "version": "0.20.3",
       "source": "./",
       "author": {
         "name": "cofin"

.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "flow",
   "description": "Unified toolkit for Context-Driven Development with spec-first planning, TDD workflow, and Beads integration",
-  "version": "0.20.2",
+  "version": "0.20.3",
   "author": {
     "name": "cofin"
   },

.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "flow",
-  "version": "0.20.2",
+  "version": "0.20.3",
   "description": "Unified toolkit for Context-Driven Development with spec-first planning, TDD workflow, and Beads integration",
   "author": { "name": "cofin" },
   "homepage": "https://github.com/cofin/flow",

gemini-extension.json

@@ -1,7 +1,7 @@
 {
   "name": "flow",
   "description": "Unified toolkit for Context-Driven Development with spec-first planning, TDD workflow, and Beads integration",
-  "version": "0.20.2",
+  "version": "0.20.3",
   "contextFileName": "GEMINI.md",
   "plan": {
     "directory": ".agents"

package.json

@@ -1,6 +1,6 @@
 {
   "name": "flow",
-  "version": "0.20.2",
+  "version": "0.20.3",
   "description": "Unified toolkit for Context-Driven Development",
   "type": "module",
   "main": ".opencode/plugins/flow.js",

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "flow"
-version = "0.20.2"
+version = "0.20.3"
 description = "Unified toolkit for Context-Driven Development"
 authors = [
   { name = "cofin" },
@@ -26,7 +26,7 @@ dev = [
 allow_dirty = true
 commit = false
 commit_args = "--no-verify"
-current_version = "0.20.2"
+current_version = "0.20.3"
 ignore_missing_files = false
 ignore_missing_version = false
 message = "chore(release): bump to v{new_version}"

tools/install.sh

@@ -46,7 +46,7 @@ show_banner() {
     echo -e "${CYAN}"
     echo "╔══════════════════════════════════════════════════════════════╗"
     echo "║             Flow Framework - Plugin Installer                ║"
-    echo "║                       Version 0.20.2                         ║"
+    echo "║                       Version 0.20.3                         ║"
     echo "╚══════════════════════════════════════════════════════════════╝"
     echo -e "${NC}"
 

tools/validate-codex-manifest.py

@@ -53,6 +53,18 @@ def validate_marketplace(file_path: str | Path):
             if '..' in path:
                 print(f"  ERROR [plugin {name}]: path '{path}' must not contain '..'")
                 errors += 1
+
+            # 4. Path must exist relative to marketplace file and contain a plugin manifest
+            marketplace_dir = file_path.parent
+            resolved_path = (marketplace_dir / normalized).resolve()
+            if not resolved_path.is_dir():
+                print(f"  ERROR [plugin {name}]: path '{path}' does not exist or is not a directory")
+                errors += 1
+            else:
+                plugin_manifest = resolved_path / ".codex-plugin" / "plugin.json"
+                if not plugin_manifest.is_file():
+                    print(f"  ERROR [plugin {name}]: path '{path}' is missing .codex-plugin/plugin.json")
+                    errors += 1
 
     return errors == 0