Merge branch 'main' into fix/snapshot-symlinked-mutable-roots

Author: glifocat

.claude/skills/add-codex/REMOVE.md

@@ -18,7 +18,9 @@ ncl groups restart --id <group-id>
 Delete (do not comment out) the `import './codex.js';` line from each of:
 
 - `src/providers/index.ts`
+- `src/provider-contracts/index.ts`
 - `container/agent-runner/src/providers/index.ts`
+- `container/agent-runner/src/provider-contracts/index.ts`
 - `setup/providers/index.ts`
 
 ## 3. Delete every copied file
@@ -29,6 +31,7 @@ rm -f src/providers/codex.ts \
       src/providers/codex-registration.test.ts \
       src/providers/codex-host-contribution.test.ts \
       src/providers/codex-agents-md.test.ts \
+      src/provider-contracts/codex.ts \
       container/agent-runner/src/providers/codex.ts \
       container/agent-runner/src/providers/codex-app-server.ts \
       container/agent-runner/src/providers/exchange-archive.ts \
@@ -37,7 +40,10 @@ rm -f src/providers/codex.ts \
       container/agent-runner/src/providers/codex.factory.test.ts \
       container/agent-runner/src/providers/codex.turns.test.ts \
       container/agent-runner/src/providers/codex-app-server.test.ts \
+      container/agent-runner/src/providers/codex-contract-parity.test.ts \
+      container/agent-runner/src/providers/codex.conformance.test.ts \
       container/agent-runner/src/providers/codex-cli-tools.test.ts \
+      container/agent-runner/src/provider-contracts/codex.ts \
       setup/providers/codex.ts \
       setup/providers/codex.test.ts \
       setup/providers/codex-registration.test.ts

.claude/skills/add-codex/SKILL.md

@@ -1,6 +1,12 @@
 ---
 name: add-codex
 description: Use Codex (OpenAI's codex app-server) as a full agent provider — planning, tool orchestration, MCP tools, server-side history, session resume — alongside or instead of Claude. ChatGPT subscription or OpenAI API key, vault-only via OneCLI. Per-group via `ncl groups config update --provider codex`. Distinct from using OpenAI as an MCP tool (where Claude remains the planner).
+metadata:
+  nanoclaw-provider: codex
+  nanoclaw-provider-label: Codex
+  nanoclaw-provider-hint: OpenAI — ChatGPT subscription or API key
+  nanoclaw-provider-offered: 'true'
+  nanoclaw-provider-image: local-required
 ---
 
 # Codex agent provider
@@ -24,8 +30,8 @@ Check whether the payload is already wired (a prior apply, or a trunk that still
 
 - `src/providers/codex.ts` and `src/providers/codex-agents-md.ts`
 - `container/agent-runner/src/providers/codex.ts` and `codex-app-server.ts`
-- `setup/providers/codex.ts`
-- `import './codex.js';` in `src/providers/index.ts`, `container/agent-runner/src/providers/index.ts`, and `setup/providers/index.ts`
+- `setup/providers/codex.ts` and both `provider-contracts/codex.ts` declarations (host and container)
+- `import './codex.js';` in the three provider barrels and both contract barrels
 - an `@openai/codex` entry in `container/cli-tools.json`
 
 ### 1. Fetch and copy the payload
@@ -38,6 +44,7 @@ src/providers/codex-agents-md.ts
 src/providers/codex-registration.test.ts
 src/providers/codex-host-contribution.test.ts
 src/providers/codex-agents-md.test.ts
+src/provider-contracts/codex.ts
 container/agent-runner/src/providers/codex.ts
 container/agent-runner/src/providers/codex-app-server.ts
 container/agent-runner/src/providers/exchange-archive.ts
@@ -46,7 +53,10 @@ container/agent-runner/src/providers/codex-registration.test.ts
 container/agent-runner/src/providers/codex.factory.test.ts
 container/agent-runner/src/providers/codex.turns.test.ts
 container/agent-runner/src/providers/codex-app-server.test.ts
+container/agent-runner/src/providers/codex-contract-parity.test.ts
+container/agent-runner/src/providers/codex.conformance.test.ts
 container/agent-runner/src/providers/codex-cli-tools.test.ts
+container/agent-runner/src/provider-contracts/codex.ts
 setup/providers/codex.ts
 setup/providers/codex.test.ts
 setup/providers/codex-registration.test.ts
@@ -55,14 +65,24 @@ container/AGENTS.md
 
 ### 2. Wire the barrels
 
-Append the self-registration import to each of the three provider barrels (skipped if the line is already present). Each barrel-registration test imports its real barrel and asserts `codex` is registered — they go red the moment a barrel line is missing or drifts.
+Append the self-registration import to each provider and contract barrel (skipped if already present).
 
 ```nc:append to:src/providers/index.ts
 import './codex.js';
 ```
+
+```nc:append to:src/provider-contracts/index.ts
+import './codex.js';
+```
+
+```nc:append to:container/agent-runner/src/provider-contracts/index.ts
+import './codex.js';
+```
+
 ```nc:append to:container/agent-runner/src/providers/index.ts
 import './codex.js';
 ```
+
 ```nc:append to:setup/providers/index.ts
 import './codex.js';
 ```
@@ -88,10 +108,7 @@ pnpm exec tsc -p container/agent-runner/tsconfig.json --noEmit
 ### 5. Validate
 
 ```nc:run effect:test
-pnpm vitest run src/providers/codex-registration.test.ts src/providers/codex-host-contribution.test.ts src/providers/codex-agents-md.test.ts setup/providers/
-```
-```nc:run effect:test
-cd container/agent-runner && bun test src/providers/
+pnpm exec tsx scripts/provider-contract-verifier.ts --required-declared codex
 ```
 
 The registration tests import only the real barrels — they go red if a barrel line is missing, a barrel fails to evaluate, or the payload is broken.

.claude/skills/add-mattermost/LOCAL_SERVER.md

@@ -34,10 +34,12 @@ matches nothing, remove the dependencies:
 pnpm uninstall ws @types/ws
 ```
 
-## 5. Optional local server
+## 5. Legacy NanoClaw evaluation server
 
-The evaluation server is deliberately not removed automatically because its
-volumes contain Mattermost data. Stopping it keeps that data:
+Current NanoClaw setup does not create or manage a Mattermost server. Older
+versions could create one at `.nanoclaw/mattermost/compose.yml`. If that file
+exists, it is deliberately not removed automatically because its volumes can
+contain Mattermost data. Stopping it keeps that data:
 
 ```bash
 docker compose -f .nanoclaw/mattermost/compose.yml down

.claude/skills/add-mattermost/REMOVE.md

@@ -0,0 +1,27 @@
+# Get a Mattermost server
+
+NanoClaw connects to a Mattermost server; it does not install, upgrade, back
+up, secure, or remove the server itself. Use Mattermost's maintained guidance
+to choose the installation that fits the operator's needs.
+
+## Temporary evaluation
+
+Use Mattermost's [Quick Start Evaluation](https://docs.mattermost.com/deployment-guide/quick-start-evaluation).
+Its official Docker preview is the shortest path to a local trial and normally
+listens at `http://localhost:8065`, which NanoClaw's discovery step probes.
+Mattermost labels this path for testing and evaluation rather than production.
+
+## Persistent or production deployment
+
+Use Mattermost's [server deployment guide](https://docs.mattermost.com/deployment-guide/server/deploy-server)
+to compare its supported Kubernetes, Linux, and container paths. Mattermost's
+current guide reserves container deployments for evaluation, testing, and
+development; choose the Linux or Kubernetes guidance for a production server
+according to the required scale and availability.
+
+## Return to NanoClaw
+
+Finish the Mattermost initialization, including the first administrator and
+team. Confirm that the server is reachable from the NanoClaw host, then return
+to `/add-mattermost` with its canonical base URL. The skill verifies the URL,
+guides SiteURL configuration, and walks through bot account creation.