impel-cli 0.20.22 → 0.20.24

package/README.md

@@ -190,13 +190,13 @@ impel codex --agent research-agent exec "answer this question"
 This path loads a generated, tenant-bound profile with Luna at low reasoning
 for the thin adapter turns, a read-only local sandbox, the exact fixed MCP
 binding, and only that binding's answer/run, resume, and recovery tools. It
-omits unrelated local repository, app, collaboration, permission, and
-environment prompt context; the selected Eve agent still performs the
-substantive work. The path also omits the normal parent specialist
-instructions, so there is no parent spawn, parent wait, or relay turn. Model,
-profile, developer-instruction, MCP, approval, sandbox, and feature overrides
-are rejected with `--agent`. The selected tenant and profile integrity must
-match before Codex starts. Ordinary `impel codex` passthrough is unchanged.
+omits unrelated local repository, app, collaboration, permission, environment,
+and skill-catalog prompt context; the selected Eve agent still performs the
+substantive work. The path also omits the normal parent specialist instructions,
+so there is no parent spawn, parent wait, or relay turn. Model, profile,
+developer-instruction, MCP, approval, sandbox, and feature overrides are rejected
+with `--agent`. The selected tenant and profile integrity must match before
+Codex starts. Ordinary `impel codex` passthrough is unchanged.
 
 ## Remote Fargate sessions
 

package/RELEASE_NOTES.md

@@ -1,5 +1,20 @@
 # Release notes
 
+## 0.20.24 — Keep Codex adapters silent until terminal
+
+- Explicitly forbids every collaboration tool inside active and recovery Codex
+  adapters so a compatible child cannot message its parent during a run.
+- Advances the managed profile manifest so existing CLI and Desktop adapters
+  receive the stricter terminal-only behavior immediately.
+
+## 0.20.23 — Remove skill-catalog adapter overhead
+
+- Removes the installed skill catalog from fixed-binding Codex adapter prompts;
+  these transport-only wrappers cannot use skills and the selected Eve agent
+  continues to own the substantive task.
+- Advances the managed profile manifest so existing CLI and Desktop adapters
+  refresh onto the faster wrapper immediately.
+
 ## 0.20.22 — Minimal-context Codex adapters
 
 - Returns fixed-binding adapters to Luna's deterministic direct-only MCP route

package/docs/native-agent-host-capability-matrix.md

@@ -24,6 +24,8 @@ is treated as an eager host.
   outer host deadline and resume never opens a replacement run.
 - Parent guidance permits one spawn and one blocking wait. It forbids follow-up
   nudges and independent synthesis while the child is running.
+- Codex adapters explicitly forbid every collaboration tool and communicate
+  with the compatible parent only through their terminal response.
 - Host and transport traces must never include prompts, answers, credentials, or
   decrypted provider material. Production measurements use correlation ids,
   phase timestamps, counts, durations, build identifiers, and terminal classes
@@ -35,10 +37,10 @@ is treated as an eager host.
   and re-qualified rather than receiving unknown configuration.
 - `mcp__impel_agent` is the native tool namespace. The server id
   `impel_agent` is not equivalent and does not qualify as direct exposure.
-- Generated Codex fixed-binding adapters use Luna at low reasoning for the
-  thin tool-selection and terminal-relay turns, with unrelated local host
-  context disabled. The selected Eve agent, not this wrapper model, still owns
-  the substantive task.
+- Generated Codex fixed-binding adapters use Luna at low reasoning for the thin
+  tool-selection and terminal-relay turns, with unrelated local host and skill
+  catalog context disabled. The selected Eve agent, not this wrapper model,
+  still owns the substantive task.
 
 ## Requalification
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impel-cli",
-  "version": "0.20.22",
+  "version": "0.20.24",
   "description": "Prepare isolated Claude and Codex workspaces for every accessible Impel tenant",
   "type": "module",
   "bin": {

package/src/agents.js

@@ -52,7 +52,7 @@ export const NATIVE_AGENT_RUN_TOOL = "run_native_agent";
 export const NATIVE_AGENT_RESUME_TOOL = "resume_native_agent_run";
 export const NATIVE_AGENT_RECOVER_TOOL = "recover_native_agent_runs";
 export const MANAGED_AGENT_MCP_SERVER = "impel_agent";
-export const MANAGED_AGENT_MANIFEST_VERSION = 14;
+export const MANAGED_AGENT_MANIFEST_VERSION = 16;
 
 // The host model only selects the fixed MCP tool and faithfully returns its
 // result. Luna preserves deterministic direct-only code-mode routing while the
@@ -655,7 +655,7 @@ function codexAdapterInstructions(tenantId, agent) {
   const callerGuidance = usesVerbatimRelay(agent)
     ? adapterCallerSpawnGuidance("Codex")
     : null;
-  const collaborationConstraint = `Collaboration tools are disabled. Return one final response to the caller after the native-agent transport reaches terminal.`;
+  const collaborationConstraint = `Collaboration tools are unavailable for this adapter. Never call send_message, followup_task, interrupt_agent, spawn_agent, or wait_agent. Return one final response to the caller only after the native-agent transport reaches terminal.`;
   if (usesDirectAnswer(agent)) {
     const completionGuidance = usesVerbatimRelay(agent)
       ? adapterAnswerVerbatimCompletionGuidance()
@@ -691,7 +691,7 @@ function codexAdapterInstructions(tenantId, agent) {
 function retiredAdapterInstructions(tenantId, agent) {
   return [
     `You are a recovery-only transport adapter for retired Impel native-agent binding ${JSON.stringify(agent.agentId)} in tenant ${JSON.stringify(tenantId)}.`,
-    `Collaboration tools are disabled. Return one final response to the caller after the native-agent transport reaches terminal.`,
+    `Collaboration tools are unavailable for this adapter. Never call send_message, followup_task, interrupt_agent, spawn_agent, or wait_agent. Return one final response to the caller only after the native-agent transport reaches terminal.`,
     `You cannot start new work. Never call run_native_agent and never perform or recreate the assigned task yourself.`,
     `Call ${nativeToolName(NATIVE_AGENT_RECOVER_TOOL)} with {} to obtain integrity-validated pending handles for this fixed binding, then call ${nativeToolName(NATIVE_AGENT_RESUME_TOOL)} with the intended handle until it returns a terminal result. If multiple handles cannot be safely associated with the request, report them instead of choosing.`,
     `Return successful finalText byte-for-byte. For failure, return the preserved runId, output, and error without inventing a replacement result.`,
@@ -785,6 +785,9 @@ function renderCodexConfiguration({
     "include_environment_context = false",
     `developer_instructions = ${JSON.stringify(recoveryOnly ? retiredAdapterInstructions(tenantId, agent) : codexAdapterInstructions(tenantId, agent))}`,
     "",
+    "[skills]",
+    "include_instructions = false",
+    "",
     ...(directCodeMode ? [
       "[features]",
       "multi_agent = false",