[mcoder2014]

Summary

• add the Alfred 5 Remote Upload workflow with the up keyword
• support configurable SSH hosts, filtering, MRU sorting, Finder files, clipboard images, size limits, collision-safe remote naming, and remote-path clipboard output
• force SFTP-backed scp -s, validate the remote reservation protocol before upload, and preserve clipboard/MRU state on failures
• add offline tests, real macOS pasteboard integration tests, macOS CI, release packaging/checksums, design docs, user docs, README, and AGENTS guidance

User impact

A local macOS screenshot or Finder file can be uploaded to the selected SSH host, after which the clipboard contains the remote absolute path for direct use in a remote Codex conversation.

Validation

• plugins/alfred_remote_upload/tests/run.sh
• plugins/alfred_remote_upload/tests/clipboard_integration.sh
• Shell syntax checks for workflow/build/test scripts
• plutil -lint plugins/alfred_remote_upload/workflow/info.plist
• .alfredworkflow build plus unzip -t
• GitHub Actions YAML parse and git diff --cached --check
• both Mermaid diagrams rendered with local mmdc
• real devbox E2E for clipboard image, ordinary files, collisions, SFTP metacharacter filenames, MRU, size rejection, cleanup, SHA-256 equality, and mode 0644
• formal-directory controlled smoke test under /home/jiangchaoqun.true/tmp_share, followed by test-file cleanup
• final Workflow installed locally with prefs.plist content preserved and mode 0600
• two independent read-only reviews: Ready to merge, no remaining Critical/Important/Minor findings

Release behavior

PRs only build dry-run artifacts with contents: read. Only the tag-triggered publish job receives contents: write; it explicitly sets GH_REPO before creating or updating a Release.

No release tag is created by this PR.