agent-collab

agent-collab publishes one collaboration plugin for Claude Code, Codex, and compatible hosts. Version 6 keeps the closed semantic coordinator and co-packaged direct native runtime while adding provider-neutral quality and effort profiles, current-portfolio routing, and truthful advisory degradation.

This public repository distributes agent-collab (v6.0.4). The v6.0.4 release prevents attempt-local provider and teardown failures from becoming false route quarantines or governance blockers. The v6.0.4 release is the governed publication target for the signed runtime, archive, checksum, SPDX evidence, and installation proof described below.

The human-first architecture handbook explains the system boundaries and lifecycle. The package reference below is the machine-operational contract for this release candidate. The mandatory final documentation closeout records the exact published artifact and installation evidence after release. The dated status and evidence snapshot keeps repository, tag, release, installation, and readiness claims separate.

What's new - v6.0.4

• Every routed skill now treats provider_error and teardown_error as attempt-local diagnostics. They invalidate that attempt's artifact and evidence without establishing provider/route unavailability or quarantining the route for later caller-authorized work.
• The no-replay invariant remains explicit: these statuses do not trigger an automatic retry. A later authorized request is a new attempt evaluated from fresh readiness.
• The public governance trace accepts an anchored OPERATOR-BYPASSED state as honest form only when operator_reserved begins with yes. The state is not reviewer convergence and never grants ordinary agent self-merge eligibility.
• Runtime 4.0.2 and its route selector are unchanged; no quarantine store, parallel registry, fallback, or release service was added.
• The 4.7 engineering-process pack remains available as three self-executed skills: decision-map, prototype, and architecture-review.
• The current code-review skill retains its spec-fidelity axis and evidence-bound Fowler smell baseline; Spec and Smell findings remain separate from defect severity and merge-blocking aggregation.
• orchestrate and teamwork retain conditional tracer-bullet and expand–contract guidance for product-feature decomposition without adding a provider route or generic orchestration layer.

What ships

• Source skill specifications in skill-specs/ and generated skills in plugins/agent-collab/skills/.
• Pinned source and license provenance for MIT-derived skill material in docs/third-party-skill-provenance.md.
• A closed semantic coordinator at plugins/agent-collab/coordinator.py.
• A direct bounded process client at plugins/agent-collab/runtime_client.py.
• Provider-neutral host observations and migration reporting.
• One schema-4 runtime manifest contract and public archive/release/export safety gates.
• A final signed native standalone bundle only when produced by the separate private build/sign workflow.

No provider executor source, provider invocation recipe, model pin, compatibility package, downloader, post-install hook, broker, socket, lane, launchd job, lifecycle setup command, or raw provider wire is public.

Install

codex plugin marketplace add sumitake/agent-collab
codex plugin add agent-collab@agent-collab

Semantic actions

Public requests select one of 12 logical actions:

architecture.conceptual
architecture.repository
codegen.repository
context.documents.extract
context.documents.intent
context.documents.reason
context.repository.extract
context.repository.reason
frontend_codegen.repository
frontend_review.repository
governance.repository
review.repository

Repository actions require a canonical absolute repo_root. Document context uses bounded inline documents. Conceptual architecture uses prompt-only source. The runtime's workspace-generated wire descriptor derives the internal 13 transport actions and 17 action/source pairs. Those projections are diagnostic contract data, not a second public request surface.

See plugins/agent-collab/README.md for the exact coordinator and runtime contract.

Source and generated files

• Edit skill-specs/<name>.md.
• Generate with python3 scripts/build_skills.py.
• Check with python3 scripts/build_skills.py --check.
• Generate marketplace metadata with python3 scripts/build_marketplace.py.
• Check it with python3 scripts/build_marketplace.py --check.

context is the sole source-grounded corpus/repository skill. No parallel size-branded source or generated skill surface is supported.

Runtime trust boundary

The canonical workspace build owns the final binary and generated manifest. The public source expects:

• manifest schema 4;
• runtime protocol 4;
• native manifest contract 4;
• provider runtime version 4.0.2;
• one top-level closed wire_contract plus canonical wire_contract_sha256; and
• no action-membership mirror in artifact entries.

The public client verifies fixed plugin-relative path, exact membership and digests, Mach-O architecture/minimum macOS, hardened Developer ID identity, team, and secure timestamp. Online notarization verification remains a release gate. One accepted request launches one process group with bounded streams, deadline, TERM/KILL/reap, and no hidden replay.

Migration status

Run the provider-free doctor:

python3 plugins/agent-collab/migration_doctor.py --json

It inventories retired packages, reports host and descriptor state, and does not invoke a provider or mutate the host. No daemon installation or runtime setup step exists.

Validation

python3 scripts/build_skills.py --check
python3 scripts/build_marketplace.py --check
python3 scripts/build-changelog.py --check
python3 -m unittest discover -s tests -t . -v
python3 -m unittest discover -s scripts -p 'test_*.py' -v
python3 scripts/check_release_consistency.py
python3 scripts/check-public-export-safety.py --active-tree
python3 scripts/secret_scan.py
git diff --check

Archive/release validation additionally requires the canonical final signed runtime artifact and generated manifest. Public source work must not rebuild, sign, notarize, or hand-edit either artifact.

Contribution and release governance

Read AGENTS.md and docs/public-governance.md. User-visible changes use a unique changelog.d/ fragment; do not commit generated CHANGELOG.md. Pull requests must include the repository compliance trace and the required independent review for their tier.

The clean-public-repository invariant applies to the active tree, reachable history, and release archive. If executor source, credentials, private paths, or suspect native bytes appear, stop publication and follow SECURITY.md.

Public CI uses distinct GitHub-hosted runners, pins every external action to a full commit SHA, runs CodeQL and Gitleaks, enables secret scanning, and uses Dependabot for dependency update review.

After every other release task finishes, complete the documentation closeout. The v6.0.1 closeout is recorded in the status and evidence snapshot. Each future closeout must likewise align the architecture handbook, this README, and generated changelog evidence with the exact release without exposing private executor recipes.

License

The public repository and distributed package use the unmodified PolyForm Strict License 1.0.0, except that the derived portions of decision-map, prototype, and architecture-review, plus the adapted spec-fidelity and smell-baseline portions of code-review, and the adapted decomposition guidance in orchestrate and teamwork, remain MIT-licensed and carry the full MIT notice in each generated skill. Their pinned upstream and per-file provenance is recorded in docs/third-party-skill-provenance.md. Commercial use of the PolyForm-licensed material requires separate, explicit written approval administered by Osumi Consulting LLC. See NOTICE and COMMERCIAL-LICENSING.md for the ownership and approval boundary.