@atollhq/skill-codex 0.4.31 → 0.4.33

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atollhq/skill-codex",
-  "version": "0.4.31",
+  "version": "0.4.33",
   "description": "Install the Atoll project management integration for Codex CLI",
   "bin": {
     "skill-codex": "bin/install.mjs"
@@ -18,7 +18,7 @@
   ],
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/atollhq/atoll.git",
+    "url": "git+https://github.com/antons-agents/atoll.git",
     "directory": "packages/skill-codex"
   },
   "dependencies": {

package/skill/SKILL.md

@@ -36,6 +36,8 @@ Read only the references required for the current task:
   [integrations-and-api.md](references/integrations-and-api.md)
 - GitHub pull-request delivery context, required checks, and exact-head evidence:
   [api-fields.md](references/api-fields.md#external-operational-delivery-context)
+  A `plan_restricted` required-check error is actionable plan-unavailable
+  evidence; keep configured workflows separate because they remain `required: false`.
 - Cross-resource authorization, privacy, automation, attachment, feedback, and
   other platform-specific rules: [platform-rules.md](references/platform-rules.md)
 - Exact endpoint inventory: [api-endpoints.md](references/api-endpoints.md)

package/skill/references/api-endpoints.md

@@ -714,6 +714,12 @@ collection and stale, ambiguous, or missing evidence remain `unknown` and set
 enables the provider GET collection; it is disabled by default. The collector does not
 change GitHub hooks or other provider state and does not prove merge,
 deployment, production testing, or human acceptance.
+A policy endpoint returning GitHub's exact plan-limit HTTP 403 is classified
+as `plan_restricted`; other 401/403 responses remain permission failures.
+The collection is `partial` if one policy source succeeds, or `unavailable`
+if both fail, and its aggregate remains `unknown`. The first policy error
+(rulesets before classic protection) supplies `error_code` when errors differ.
+Configured workflow results remain separate evidence with `required: false`.
 The selected PR-link state is authoritative. If a same-head PR observation
 disagrees, Atoll clears its observation/provider provenance, uses the link URL
 as `source_url`, excludes it from freshness, and sets `partial`.

package/skill/references/api-fields.md

@@ -1188,6 +1188,12 @@ provider collection; disabled is the default. With reads disabled, state
 `disabled` and aggregate `none` do not set `partial`. When enabled, partial or
 unavailable collection, stale, ambiguous, or missing evidence remains `unknown`
 and sets `partial`.
+A policy endpoint returning GitHub's exact plan-limit HTTP 403 is classified
+as `plan_restricted`; other 401/403 responses remain permission failures.
+The collection is `partial` if one policy source succeeds, or `unavailable`
+if both fail, and its aggregate remains `unknown`. The first policy error
+(rulesets before classic protection) supplies `error_code` when errors differ.
+Configured workflow results remain separate evidence with `required: false`.
 
 Review aggregation keeps each reviewer's latest exact-head opinion, ignores
 comments, and removes dismissed opinions. Change requests win; `approved`

package/skill/references/integrations-and-api.md

@@ -238,6 +238,12 @@ collection or aggregate `unknown` sets `partial`. The server-only
 off by default. This evidence does not grant merge, deployment, production
 testing, or acceptance authority, and the endpoint does not change GitHub
 state. Configured Atoll workflow paths remain `required: false`.
+A policy endpoint returning GitHub's exact plan-limit HTTP 403 is classified
+as `plan_restricted`; other 401/403 responses remain permission failures.
+The collection is `partial` if one policy source succeeds, or `unavailable`
+if both fail, and its aggregate remains `unknown`. The first policy error
+(rulesets before classic protection) supplies `error_code` when errors differ.
+Configured workflow results remain separate evidence with `required: false`.
 
 ## Planning Artifacts
 

package/skill/references/local-runner.md

@@ -90,3 +90,78 @@ are blocked while a current job exists. Refresh, config validation, and Codex
 preflight are non-destructive; there is no model retry or cleanup button.
 A UI port or asset failure does not stop headless execution. Do not proxy this
 loopback interface to another host. Service installation remains separate.
+
+### macOS service and lifecycle
+
+Install an explicit user service only when unattended operation is required:
+
+```bash
+atoll-runner --profile agent-a service install
+atoll-runner --profile agent-a service install --ui --ui-port 4735
+atoll-runner --profile agent-a service status
+atoll-runner --profile agent-a service uninstall
+```
+
+The service is macOS-only. Install writes an atomic user-owned `0600` plist
+under `~/Library/LaunchAgents/` with canonical Node and runner entry paths,
+the selected profile, `run`, and optional loopback UI arguments. It contains no
+environment variables, API keys, Codex or lease tokens, shell command,
+checkout path, or worktree path. Unknown or changed plists fail closed.
+Package installation is passive and never installs or starts the service. Use
+uninstall, package upgrade, `doctor`, then install for an upgrade. Uninstall
+removes only the exact owned plist and leaves journals, tokens, logs, branches,
+and worktrees. Status and uninstall validate the local plist and do not require
+profile credentials; install remains authenticated.
+
+SIGINT/SIGTERM closes the process-local intake gate immediately. The current
+child drains for at most 30 seconds; TERM and then KILL after 10 seconds are
+sent only when the journaled PID still has the same process-start identity. A
+wall-clock event-loop gap above 30 seconds is a possible wake. The child is
+stopped, durable lease state is reconciled, and intake reopens only after that
+pass. A wake may release a worker only to finish an already durable result;
+stop never releases a worker. No hosted pause request is sent. Existing-wire
+response failures are bounded as `RUNNER_PROTOCOL_MISMATCH` and keep pending
+mutation journals available for replay.
+
+### Opt-in real local smoke
+
+This developer harness is available only from an Atoll source checkout. It is
+not included in the installed npm CLI. After deterministic checks, use a clean
+loopback fixture profile with no current or conflicting retained job, and run
+from `packages/cli`:
+
+Loopback remains the normal default. Repository owners may also run one bounded
+production validation turn from a clean Atoll source checkout. This mode requires
+an exact canonical production origin, organization, project, authenticated agent,
+issue, runner host and instance, and the live project repository mapping's opaque
+`repo_ref` plus repository full name. The supplied `repo_ref` is checked against
+live issue routing and must never be hard-coded. The smoke derives the canonical
+source root from its own script, requires a clean source checkout, rebuilds the
+candidate in the invocation, and records the source root, source `HEAD`, and
+worker-entry SHA-256 in bounded mode-`0600` evidence. Exact production admission
+performs zero presence `PUT`/upsert operations for either connected or
+disconnected targets. Registration and refresh belong to separate operator setup
+outside this invocation. The invocation reads the connected runner identity
+before claim and rechecks it immediately before the claim; a disconnected target
+fails closed. The runner does not explicitly select a model. The Codex runtime
+and local Codex configuration supply model selection. `@openai/codex` and
+`@openai/codex-sdk` are pinned to package/runtime version `0.153.4`; this
+version is not a model name. Use the internal AH-2088 production smoke
+runbook for the owner-only command and cleanup procedure.
+
+
+```bash
+cd packages/cli && bun run build
+ATOLL_RUNNER_MANUAL_SMOKE=1 bun run runner:manual-smoke -- \
+  --profile agent-a --issue issue-uuid --repository /path/to/checkout \
+  --timeout-ms 300000 --evidence /absolute/path/evidence.json
+```
+
+The smoke runs one real Codex turn through the existing runner. It creates and
+retains its owned local branch and worktree while preserving the primary
+checkout, and writes bounded fixture issue, host, generation, branch/worktree,
+base/head SHA, thread, terminal, and time evidence outside the checkout. A
+timeout is always failure; retained journal state is authoritative. It never
+pushes or deletes retained state, publishes, deploys, or installs a service.
+Codex Desktop visibility is a separate operator observation; deterministic tests
+use a fake SDK.

package/skill/references/platform-rules.md

@@ -137,6 +137,12 @@ server-only
 `ATOLL_GITHUB_REQUIRED_CHECKS_READ_ENABLED=1` flag. This namespace is separate
 from heartbeat `signals[]`, never changes provider state, and never changes
 tasks or dispatches agents.
+A policy endpoint returning GitHub's exact plan-limit HTTP 403 is classified
+as `plan_restricted`; other 401/403 responses remain permission failures.
+The collection is `partial` if one policy source succeeds, or `unavailable`
+if both fail, and its aggregate remains `unknown`. The first policy error
+(rulesets before classic protection) supplies `error_code` when errors differ.
+Configured workflow results remain separate evidence with `required: false`.
 The selected PR-link state is authoritative. If a same-head PR observation
 disagrees, Atoll clears its observation/provider provenance, falls back to the
 link URL, excludes it from freshness, and sets `partial`.