# @holycodex/plugin

`@holycodex/plugin` is the published HolyCodex payload: Root and specialist prompts, scoped skills, agent profiles, hooks, notices, and generated workflow runtime assets. It is the product layer consumed by the `holycodex` CLI, not a standalone workflow manager. See the repository [README](../../README.md), [architecture](../../docs/ARCHITECTURE.md), and [routing policy](../../docs/ROUTING.md).

The CLI depends on this package at the exact matching version and resolves its installed asset root through the public `pluginRoot` export. Most users should install `holycodex` rather than this package directly. The payload installs no MCP server and preserves Codex's own permissions, approvals, tools, plugins, trust, and project boundaries.

The package includes the isolated workflow runtime and bundled integration assets required by the CLI. The runtime's QuickJS security boundary, App Server ownership, retained context, continuation, and refinement semantics are documented in [ARCHITECTURE.md](../../docs/ARCHITECTURE.md). Computer Use guidance is optional and Root-only when explicitly enabled by the CLI.

Repository, documentation, license, and security notices: [HolyCodex](https://github.com/davidbasilefilho/holycodex), [security advisories](https://github.com/davidbasilefilho/holycodex/security/advisories/new).