5 Commits

Author SHA1 Message Date
root
99352395af Forbid local artifact generation as MCP fallback
Observed behavior: when the MCP returns Auth required, Codex fell
through to "let me generate the .pptx/.xlsx myself" — probing for
python-pptx/openpyxl/xlsxwriter and then PowerPoint/Excel COM
automation. Any artifact produced that way has fabricated SKUs,
prices, and templates — worse than no artifact.

Previous guardrails forbade reconstructing the KB locally and
inventing SKUs, but did not explicitly forbid local artifact
generation. Add that rule: if the MCP is unreachable, no artifacts
are produced, full stop.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-20 14:09:18 -03:00
root
bd9d9f8521 Add workspace-boundary guardrail to SKILL.md stub
Even when MCP auth is healthy, Codex wastes tool calls reading the
local workspace (README.md, plugin.json, Get-ChildItem -Recurse)
because the canonical methodology includes pre-flight checks that
read files like `kb/CHANGELOG.md` — those exist in the skill repo
but not in the plugin repo or the plugin install directory.

New section explicitly tells the agent: all methodology and KB
content lives in MCP resources; never read local files to satisfy
methodology steps. The working directory is only relevant when the
user explicitly asks about it.

Complements the Auth-required fallback by addressing the
healthy-MCP-but-still-exploring case.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-20 14:05:03 -03:00
root
74873d831e Harden fallback in SKILL.md stub to fail fast on MCP auth failures
Previous fallback was too soft: "discover intent, pick the best tool,
confirm assumptions" was interpreted by Codex as "search the local
workspace for kb:// material" — which never exists locally and burns
context on fruitless exploration.

New fallback makes the recovery path explicit:
- STOP on Auth required / server unreachable
- surface the exact fix command (`codex mcp login oci-deal-accelerator`)
  to the user
- never reconstruct the KB from local files (server-side only)
- never invent SKUs, pricing, or service quantities
- never generate partial artifacts with inferred data

Scoped: applies only when the entire MCP session is unreachable.
Per-tool failures still follow the methodology's guidance.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-20 14:02:02 -03:00
root
e0fd1cbf6a Stub bundled SKILL.md; read canonical methodology from MCP resource
The bundled skill file was a frozen 542-line copy that only updated on
plugin re-release. Replace it with a thin pointer to the server-side
resource `skill://methodology`, so skill-content changes propagate
without requiring users to reinstall the plugin.

- skills/oci-deal-accelerator/SKILL.md: reduced to ~40-line stub that
  directs Codex to read skill://methodology first, with a minimal
  tool table and fallback behavior if the MCP is unreachable
- .codex-plugin/plugin.json: bump to 0.2.0 (breaking change in what
  the plugin ships; Codex treats new versions as new cache entries)
- .gitignore: ignore Codex CLI's local .codex state file

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-20 13:38:59 -03:00
root
cc6835fa69 Initial scaffold for OCI Deal Accelerator Codex plugin
Wraps the remote MCP server at https://mcp.tech-lad.com/deal-accelerator/mcp/
and bundles the companion skill for distribution via ai-lad.com.

- .codex-plugin/plugin.json: manifest with Oracle-red branding and 14-tool capabilities
- .mcp.json: streamable HTTP transport pointing at the production MCP URL
- skills/oci-deal-accelerator/SKILL.md: copied from the skill repo
- assets/: placeholder logo, icon, screenshot (replace before first release)
- README: install flow for Windows/macOS/Linux via ai-lad.com

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-20 11:41:25 -03:00