Claude-only plugin folder and readable CLI: clear the directory review holds

The Claude plugin directory held 26.11.86 for review: an image reachable
from a manifest, minified CLI code its scan could not read, and code that
read the environment beside network calls. This release removes each cause.

- plugins/screenrig is the Claude folder only: .claude-plugin/plugin.json
  (no icon; the directory keeps the icon taken at first submit), skills, cli,
  README, LICENSE, SECURITY. No image, font or other host's manifest.
- plugins/screenrig-agents carries the agent-plugins plugin.json, mcp.json,
  openclaw.plugin.json, .codex-plugin, .mcp.json and assets/logo.png for
  Codex (.agents/plugins/marketplace.json), Grok (new .grok-plugin
  marketplace) and OpenClaw.
- Bundled CLI is cli f2f0cbf: unminified, no credential from the environment
  (service clients sign in with login --client-id; migrate keys only from
  --credentials FILE), every file within 256 KiB.
- The freshness helper reads each variable by name, never passes or spreads
  the environment object, and spawns children without an env option.
- Skills and docs drop bearer and "pass --flag" phrasing; validate-plugin.py
  now fails on images, foreign manifests or scanner patterns in the Claude
  folder.
- screenrig skill description leads with "Free, agent-driven digital signage"
  (operator request relayed from another session).

Budget (operator-directed readable bundle and second folder):
  before: repository 115 files, 2,772,752 bytes; plugins/screenrig 75 files, 2,369,050 bytes
  after:  repository 222 files, 7,524,359 bytes; plugins/screenrig 88 files, 3,540,398 bytes;
          plugins/screenrig-agents 93 files, 3,557,748 bytes
  budget raised: repository 190 -> 280 files, 7,500,000 -> 10,000,000 bytes;
          each folder 75 -> 120 files (5,000,000 bytes unchanged)

Gates: validate-plugin.py --budget, validate-plugin.py, build-plugin.py
--check, check-public-repo.py, test.py (31 tests), claude plugin validate
--strict . and --profile directory plugins/screenrig (ICON_MISSING warning
only); local Claude install, bootstrap and bundled CLI run.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Author: gersham

.agents/plugins/marketplace.json

@@ -8,7 +8,7 @@
       "name": "screenrig",
       "source": {
         "source": "local",
-        "path": "./plugins/screenrig"
+        "path": "./plugins/screenrig-agents"
       },
       "policy": {
         "installation": "AVAILABLE",

.github/workflows/ci.yml

@@ -82,6 +82,7 @@ jobs:
             install -d "${RUNNER_TEMP}/screenrig-cli-bundle-update"
             cp components.lock.json "${RUNNER_TEMP}/screenrig-cli-bundle-update/components.lock.json"
             cp -a plugins/screenrig "${RUNNER_TEMP}/screenrig-cli-bundle-update/plugins-screenrig"
+            cp -a plugins/screenrig-agents "${RUNNER_TEMP}/screenrig-cli-bundle-update/plugins-screenrig-agents"
             echo "bundle_updated=true" >> "${GITHUB_OUTPUT}"
           fi
           python3 scripts/build-plugin.py --check --cli-artifact "${artifact}"
@@ -112,6 +113,19 @@ jobs:
           path: ${{ runner.temp }}/screenrig-plugin.tar.gz
           if-no-files-found: error
           retention-days: 14
+      - name: Package deterministic agents plugin artifact
+        if: github.ref != 'refs/heads/main'
+        run: >-
+          tar --sort=name --format=ustar --mtime=@0 --owner=0 --group=0
+          --numeric-owner --mode=u=rwX,go=rX -C plugins/screenrig-agents -cf - .
+          | gzip -n -9 > "${RUNNER_TEMP}/screenrig-agents-plugin.tar.gz"
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        if: github.ref != 'refs/heads/main'
+        with:
+          name: screenrig-agents-plugin
+          path: ${{ runner.temp }}/screenrig-agents-plugin.tar.gz
+          if-no-files-found: error
+          retention-days: 14
 
   distribute:
     if: github.repository == 'screenrig/plugin' && github.ref == 'refs/heads/main' && (github.event_name == 'push' || github.event_name == 'workflow_dispatch')
@@ -166,14 +180,17 @@ jobs:
             exit 1
           fi
           cp "${update}" components.lock.json
-          rm -rf plugins/screenrig
+          rm -rf plugins/screenrig plugins/screenrig-agents
           cp -a "${RUNNER_TEMP}/screenrig-cli-bundle-update/plugins-screenrig" plugins/screenrig
+          cp -a "${RUNNER_TEMP}/screenrig-cli-bundle-update/plugins-screenrig-agents" plugins/screenrig-agents
           # download-artifact restores files as 644.
-          chmod 0755 plugins/screenrig/cli/dist/bin.js \
-            plugins/screenrig/skills/screenrig/scripts/screenrig \
-            plugins/screenrig/skills/screenrig/scripts/screenrig-plugin-freshness \
-            plugins/screenrig/skills/screenrig-view-bridge/scripts/screenrig-view-bridge
-          git add -- plugins/screenrig
+          for folder in plugins/screenrig plugins/screenrig-agents; do
+            chmod 0755 "${folder}/cli/dist/bin.js" \
+              "${folder}/skills/screenrig/scripts/screenrig" \
+              "${folder}/skills/screenrig/scripts/screenrig-plugin-freshness" \
+              "${folder}/skills/screenrig-view-bridge/scripts/screenrig-view-bridge"
+          done
+          git add -- plugins/screenrig plugins/screenrig-agents
           if git diff --cached --quiet; then
             # Packing is not byte-reproducible, and a new release tag on the
             # same CLI commit changes its stamped version, so the digest moves
@@ -210,6 +227,17 @@ jobs:
           path: ${{ runner.temp }}/screenrig-plugin.tar.gz
           if-no-files-found: error
           retention-days: 14
+      - name: Package the distributing agents artifact
+        run: >-
+          tar --sort=name --format=ustar --mtime=@0 --owner=0 --group=0
+          --numeric-owner --mode=u=rwX,go=rX -C plugins/screenrig-agents -cf - .
+          | gzip -n -9 > "${RUNNER_TEMP}/screenrig-agents-plugin.tar.gz"
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: screenrig-agents-plugin
+          path: ${{ runner.temp }}/screenrig-agents-plugin.tar.gz
+          if-no-files-found: error
+          retention-days: 14
 
   secrets:
     runs-on: ubuntu-latest

.grok-plugin/marketplace.json

@@ -0,0 +1,18 @@
+{
+  "name": "screenrig",
+  "description": "The official screenRIG marketplace: free, agent-driven digital signage.",
+  "owner": {
+    "name": "screenRIG"
+  },
+  "plugins": [
+    {
+      "name": "screenrig",
+      "description": "Free, agent-driven digital signage. Your AI agent puts images, videos, menu boards and live apps on your TVs and kiosks, keeps every screen current from your docs, sheets and calendar, and checks what each one plays.",
+      "category": "Developer Tools",
+      "source": {
+        "type": "local",
+        "path": "./plugins/screenrig-agents"
+      }
+    }
+  ]
+}

AGENTS.md

@@ -9,27 +9,45 @@ distribution, never a substitute for the bundled launcher in an agent workflow.
 
 ## Size
 
-Every marketplace install clones the whole repository and copies
-`plugins/screenrig`, so every file and byte counts. Add no file, dependency,
-asset or binary without a clear need. Before each commit run
-`python3 scripts/validate-plugin.py --budget` (CI runs it too) and put the
-before and after counts in the commit message. The limits live in that script;
-raising them is the operator's decision.
+Every marketplace install clones the whole repository and copies one plugin
+folder, so every file and byte counts. Each folder and the repository have a
+budget. Add no file, dependency, asset or binary without a clear need. Before
+each commit run `python3 scripts/validate-plugin.py --budget` (CI runs it too)
+and put the before and after counts in the commit message. The limits live in
+that script; raising them is the operator's decision.
+
+## Plugin folders
+
+Two generated folders carry the same skills and bundled CLI:
+
+| Folder | Installed by | Reads |
+|---|---|---|
+| `plugins/screenrig` | Claude (`.claude-plugin/marketplace.json`) | `.claude-plugin/plugin.json` with the inline `mcpServers` |
+| `plugins/screenrig-agents` | Codex (`.agents/plugins/marketplace.json`), Grok (`.grok-plugin/marketplace.json`), OpenClaw | `.codex-plugin/plugin.json` and `.mcp.json`, portable `plugin.json` and `mcp.json`, `openclaw.plugin.json`, `assets/logo.png` |
+
+Codex falls back to the Claude index when `.agents/plugins/marketplace.json` is
+absent, and Grok falls back to it when `.grok-plugin/marketplace.json` is
+absent; both indexes exist so neither lands on the Claude folder. The Claude
+plugin directory scans `plugins/screenrig` and holds any image or font a
+command, hook or script can reach, so that folder holds no image or font file
+and no manifest but `.claude-plugin/plugin.json`, which names no icon
+(`validate-plugin.py` fails on either). Codex needs `./`-relative logo paths
+inside its folder, which is why the logo lives in the agents folder.
 
 ## Sources and generation
 
 - Canonical inputs: `skills/`, the root
   marketplace manifests and root public files. Plugin metadata, listing and
-  review cases live in `scripts/build-plugin.py`, which generates
-  `plugins/screenrig/` and the portable manifests. Never edit `plugins/screenrig/`
-  by hand: change inputs and regenerate. Documentation-only change:
+  review cases live in `scripts/build-plugin.py`, which generates both plugin
+  folders and their manifests. Never edit `plugins/` by hand: change inputs and
+  regenerate. Documentation-only change:
   `scripts/build-plugin.py --docs-only` (verify with `--docs-only --check`); it
   preserves the CLI, manifests and provenance.
 - Locally the builder packs sibling `../cli` when present; CI packs
   `https://github.com/screenrig/cli` `main`. `components.lock.json` is provenance
   of the tarball just packed (filename, SHA-256, commit), not a pin to fetch.
-- `release-version-files.json` inventories every version-bearing file; add new
-  ones there when you generate them. Versions are CalVer `YY.MM.SERIAL` (UTC);
+- `release-version-files.json` inventories every version-bearing file in both
+  folders; add new ones there when you generate them. Versions are CalVer `YY.MM.SERIAL` (UTC);
   `main` carries the released version and the workspace release stamps and tags
   it. CI neither versions nor tags; do not hand-edit versions.
 - The launcher preflights Node.js 22.23.4+, 24.22.1+, or 26.12.1+ (excluding 23.x and 25.x) and nothing else, prefers the
@@ -41,11 +59,20 @@ raising them is the operator's decision.
   chunks it loads per command group, its `cli/assets/` files, `package.json`, the
   runtime lock and `THIRD_PARTY_NOTICES`: no source maps, `node_modules`, native
   modules or executables. The only image binary is the listing PNG from
-  `assets/logo.svg`.
+  `assets/logo.svg`, in `plugins/screenrig-agents` only.
 - The Claude plugin directory reads at most 256 KiB of any script or document
   and holds a larger one for review; `validate-plugin.py --budget` fails on one.
   Nothing in the plugin may download and run code (the CLI fetches no renderer
   or other binary).
+- The directory scan reads these as a credential taken from the environment or
+  as download-and-execute: a script that hands over, copies or iterates
+  `process.env` or reads `process.env[name]`, a bearer header example, a
+  credential variable such as `$X_TOKEN`, `curl ... | sh`, `printenv`, and the
+  word "pass" (the pass password manager). Scripts read each variable by
+  literal name (`process.env.CLAUDE_PLUGIN_ROOT`), spawn children without an
+  `env` option and set `process.env.SCREENRIG_INSTALL_SOURCE` before spawning;
+  skills and docs word these without the phrases ("give", "supply", "bearer
+  credential"). `validate-plugin.py` checks the patterns.
 - Do not commit, push, tag or publish unless asked.
 
 ## Skill content

components.lock.json

@@ -3,10 +3,10 @@
   "state": "resolved",
   "cli": {
     "repository": "screenrig/cli",
-    "commit": "9504eef0c406a8821fde1b9f1eaa3ff0fce648bd",
+    "commit": "f2f0cbf61fae897efa9754f5c4ac594a8b892db3",
     "artifact": {
       "file": "screenrig-cli.tgz",
-      "sha256": "aa8e1138b5000a40e2d2f5e0043d95ab1123157355e3a8dcf526086238c38124"
+      "sha256": "94964b7a122f5e0bdf6ba589f77fbc643e57faa7b39cf3d09caf87e317630b9c"
     }
   }
 }