chore: slim public repo to distribution-only (smoke + notify CI, remove .internal) (#19)

* chore: slim public repo to distribution-only

Remove the .internal/ manifest generator and reduce CI to smoke tests plus
the docs notification. The build/validate gate already runs upstream in the
private dev repo before each release, and the release sync never touches
.internal/, .github/, README, or LICENSE — so the public repo only needs the
vendor dot-folders + their payload, minimal CI, and hand-owned README/LICENSE.

- Delete .internal/ (generator, schemas, package.json, build scripts)
- ci.yml: drop the validate job and npm build steps; smoke-test the committed
  layout only (claude plugin validate; codex install assertion); pin Node 22;
  drop the npm cache (no lockfile)
- notify-docs.yml: add a paths filter so README/LICENSE/.github edits don't
  trigger the docs sync
- update .github/workflows/README.md and tidy .gitignore

Both Claude and Codex smoke tests pass against the committed layout.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* remove comment

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: FFawzy

.github/workflows/README.md

@@ -2,10 +2,12 @@
 
 These workflows run in this repository's CI only. They are **not** part of any installed plugin — Claude Code, Cursor, and Copilot never read this folder when a customer installs the plugin.
 
+This repository is a **distribution mirror**: its skills, commands, and vendor manifests are generated and synced in from a private source repository via automated "chore(release): publish content" PRs. There is no build tooling in this repo — CI only smoke-tests the already-synced layout.
+
 What runs here:
 
-- **`ci.yml` → Validate** — regenerates every vendor manifest from `.internal/config.json`, fails if the diff isn't already committed, and runs frontmatter + JSON Schema checks.
-- **`ci.yml` → Claude Code smoke test** — installs the Claude Code CLI on a clean runner and runs `claude plugin validate ./` against the live layout.
-- **`notify-docs.yml`** — on push to `main`, sends a `repository_dispatch` event (`event_type: skills-updated`) to `commercetools/commercetools-docs`, triggering its `sync-skills.yml` workflow.
+- **`ci.yml` → Claude Code smoke test** — installs the Claude Code CLI on a clean runner and runs `claude plugin validate ./` against the committed layout.
+- **`ci.yml` → Codex smoke test** — installs the Codex CLI and verifies the committed `.agents/` marketplace installs and enables the plugin (offline, no auth).
+- **`notify-docs.yml`** — on push to `main` that changes published content (skills, commands, vendor manifests, `skills.sh.json`), sends a `repository_dispatch` event (`event_type: skills-updated`) to `commercetools/commercetools-docs`, triggering its `sync-skills.yml` workflow. Edits to `README.md`, `LICENSE`, or this `.github/` folder do not fire it.
 
-If you're a plugin user, you can ignore this folder entirely. If you're contributing to the generator, see `.internal/README.md`.
+If you're a plugin user, you can ignore this folder entirely.

.github/workflows/ci.yml

@@ -5,43 +5,7 @@ on:
   push:
     branches: [main]
 
-defaults:
-  run:
-    working-directory: .internal
-
 jobs:
-  validate:
-    name: Validate
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version-file: .internal/.nvmrc
-          cache: npm
-          cache-dependency-path: .internal/package-lock.json
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Build manifests
-        run: npm run build
-
-      - name: Fail if build produced uncommitted changes
-        working-directory: .
-        run: |
-          if [ -n "$(git status --porcelain)" ]; then
-            echo "::error::Generated manifests are out of sync. Run 'npm run build' inside .internal/ and commit the result."
-            git status
-            git diff
-            exit 1
-          fi
-
-      - name: Validate (frontmatter + JSON Schema)
-        run: npm run validate
-
   smoke-claude-code:
     name: Claude Code smoke test
     runs-on: ubuntu-latest
@@ -51,22 +15,12 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version-file: .internal/.nvmrc
-          cache: npm
-          cache-dependency-path: .internal/package-lock.json
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Build manifests
-        run: npm run build
+          node-version: "22"
 
       - name: Install Claude Code CLI
-        working-directory: .
         run: npm install -g @anthropic-ai/claude-code
 
       - name: Validate plugin layout against Claude Code (offline)
-        working-directory: .
         run: claude plugin validate ./
 
   smoke-codex:
@@ -76,31 +30,20 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      # @openai/codex requires Node 22+, above the repo's .nvmrc (20), so this
-      # job pins its own version instead of reading the node-version-file.
+      # Codex requires Node 22+; Claude Code requires 18+. Both run on 22.
       - uses: actions/setup-node@v4
         with:
           node-version: "22"
-          cache: npm
-          cache-dependency-path: .internal/package-lock.json
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Build manifests
-        run: npm run build
 
       - name: Install Codex CLI
-        working-directory: .
         run: npm install -g @openai/codex
 
       # Codex plugin subcommands are local file ops — no auth/network. `plugin add`
       # drives resolve_plugin_source_path (openai/codex#17066): it exits non-zero
-      # if the generated source.path ever regresses to the blocked repo root ("./").
+      # if the marketplace source.path ever regresses to the blocked repo root ("./").
       # `plugin list` exits 0 even when a plugin is "not installed", so we don't
       # rely on its exit code — we assert the plugin shows up installed + enabled.
       - name: Validate plugin layout against Codex (offline, no auth)
-        working-directory: .
         env:
           CODEX_HOME: ${{ runner.temp }}/codex-home
         run: |

.github/workflows/notify-docs.yml

@@ -1,13 +1,22 @@
 name: Notify docs repo
 
 # Fires a `repository_dispatch` event (`event_type: skills-updated`) at
-# `commercetools/commercetools-docs` whenever `main` is updated here, so the
-# docs repo's `sync-skills.yml` workflow can pull the latest skills.
-# See: https://github.com/commercetools/commercetools-docs/issues/9513
+# `commercetools/commercetools-docs` whenever published content on `main`
+# changes here, so the docs repo's `sync-skills.yml` workflow can pull the
+# latest skills. Edits to README/LICENSE/.github do not trigger it.
 
 on:
   push:
     branches: [main]
+    # Only fire on published content. Keep this list mirrored with the dev repo
+    # public-release.yml `add-paths` (the source of truth for what gets synced).
+    paths:
+      - skills/**
+      - commands/**
+      - .claude-plugin/**
+      - .cursor-plugin/**
+      - .agents/**
+      - skills.sh.json
 
 jobs:
   dispatch:

.gitignore

@@ -2,8 +2,8 @@
 .DS_Store
 *.log
 
-# Defense in depth: node_modules should only exist under .internal/, but
-# guard against tools creating one at root anyway.
+# Defense in depth: this repo ships no Node project, but guard against tools
+# creating a node_modules anyway.
 node_modules/
 
 # Secrets (defense in depth — keep at root in case anything lands here)