@sellable/install 0.1.227 → 0.1.229
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/bin/sellable-install.mjs
CHANGED
package/package.json
CHANGED
|
@@ -73,18 +73,26 @@ readback, and setup plan/verify results. If MCP surfaces disagree on counts or
|
|
|
73
73
|
state, record the discrepancy and resolve or explain the canonical gate before
|
|
74
74
|
reporting the command complete.
|
|
75
75
|
|
|
76
|
-
Package-backed prompt authority:
|
|
77
|
-
load
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
76
|
+
Package-backed prompt authority: this public wrapper is an installed Codex
|
|
77
|
+
skill, so the host may load the wrapper itself from the local plugin bundle as
|
|
78
|
+
the command entrypoint. That entrypoint load is allowed, but it is not proof
|
|
79
|
+
that the create-campaign workflow ran. After this wrapper is active, when this
|
|
80
|
+
command or any lane worker says to load `$sellable:create-campaign`,
|
|
81
|
+
`create-campaign-v2`, `generate-messages`, validation, or any referenced
|
|
82
|
+
workflow asset, the package-backed MCP loaders are the source of truth. Use
|
|
83
|
+
`get_subskill_prompt` and `get_subskill_asset` until `hasMore:false`.
|
|
84
|
+
Do not locate, open, read, or summarize nested workflow prompt files from repo
|
|
85
|
+
paths, installed plugin cache paths, or any filesystem shortcut. Do not use
|
|
86
|
+
repo-local, plugin-cache, or filesystem `SKILL.md` files as nested workflow
|
|
87
|
+
authority, even when a session header shows a path. If package-backed prompt or
|
|
88
|
+
asset loaders are not callable, stop with
|
|
89
|
+
`blocked: package_prompt_loader_unavailable`; nested filesystem prompt fallback
|
|
90
|
+
is a failed UAT and is not proof that the packaged workflow ran.
|
|
91
|
+
Short form: The installed wrapper can be the entrypoint; nested workflow prompts
|
|
92
|
+
must use MCP loaders.
|
|
93
|
+
Short form: Do not use repo-local, plugin-cache, or filesystem nested
|
|
94
|
+
`SKILL.md` files as workflow authority.
|
|
95
|
+
Short form: nested filesystem prompt fallback is a failed UAT.
|
|
88
96
|
|
|
89
97
|
Package-backed tool surface: use `mcp__sellable` only for workspace selection,
|
|
90
98
|
campaign/table/source/message mutations, and product-visible readbacks. Do not
|
|
@@ -211,6 +219,15 @@ written by the current worker, stop with `blocked: stale_receipt_artifact`
|
|
|
211
219
|
before parent verify or completion. A streaming worker or branch worker is
|
|
212
220
|
acceptable only when it writes a fresh durable per-lane receipt artifact as it
|
|
213
221
|
works.
|
|
222
|
+
When visible Codex app thread tools are unavailable but local Codex CLI is
|
|
223
|
+
available, the accepted durable streaming-worker command shape is:
|
|
224
|
+
`codex -a never -s danger-full-access exec -C <repo> -o <worker-final-file> -`.
|
|
225
|
+
The approval and sandbox flags must come before the `exec` subcommand for Codex
|
|
226
|
+
CLI builds that expose `-a`/`-s` only at top level. Do not use
|
|
227
|
+
`codex exec --ask-for-approval never ...` or `codex exec -a never ...`; those
|
|
228
|
+
forms fail on current customer CLI installs. Pipe the lane packet prompt on
|
|
229
|
+
stdin, require the worker to write `workerDispatch.receiptArtifactHint`, and
|
|
230
|
+
pass exactly one lane packet per worker.
|
|
214
231
|
`multi_agent_v1.spawn_agent`, raw `spawn_agent`, or any opaque Task/subagent
|
|
215
232
|
runtime that cannot expose a visible thread id or durable receipt artifact is
|
|
216
233
|
not accepted as command-level UAT proof and must not be used for mutating
|