From 2de31d5c945102c5afe146f63fb2adfb3ee00a67 Mon Sep 17 00:00:00 2001
From: Ziyi Zhang <90444077+ziyiunity@users.noreply.github.com>
Date: Wed, 9 Sep 2026 11:23:49 -0400
Subject: [PATCH] fix: declare ON_USE rather than ON_INSTALL for the Codex
 plugin policy

This plugin ships skills only: no MCP server, no API, nothing to sign in
to. ON_INSTALL is what service connectors declare, and it risks Codex
asking users for credentials we never take.

Both values are in production use, so this is not a spec question but a
semantic one, and the closest analogues settle it: OpenAI's own
skills-only local plugins -- documents, pdf, spreadsheets, presentations,
template-creator -- all declare ON_USE, while ON_INSTALL is what github,
slack, stripe, notion and figma use. 21 shipped plugins declare ON_USE.
---
 .agents/plugins/marketplace.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.agents/plugins/marketplace.json b/.agents/plugins/marketplace.json
index 1f1f1b7..a95faed 100644
--- a/.agents/plugins/marketplace.json
+++ b/.agents/plugins/marketplace.json
@@ -12,7 +12,7 @@
       },
       "policy": {
         "installation": "AVAILABLE",
-        "authentication": "ON_INSTALL"
+        "authentication": "ON_USE"
       },
       "category": "Developer Tools"
     }