Fix #33: Prepare HOLO-Codex v0.1.3 release

[tizerluo]

Summary

Fixes #33.

Prepares HOLO-Codex v0.1.3 for release so npm users can install the merged work that is not present in v0.1.2.

Changes

• Bumped root package, plugin package, Codex plugin manifest, and MCP serverInfo to 0.1.3.
• Rebuilt MCP dist.
• Updated CHANGELOG.md with v0.1.3 notes for Add release doctor preflight command #16, Promote reviewer evidence to first class dashboard data #17, Automate dashboard smoke checks for release readiness #18, Add safe stale hook refresh diagnostics #19, High priority: relax hook policy for normal delivery workflows #28, and ci: allow npm token release fallback #26.
• Updated the release checklist recovery snippet so manual GitHub Release recovery uses package metadata instead of stale 0.1.2 text.
• Updated manifest packaging test expectations for 0.1.3.

Validation

• pnpm agent-loop release doctor --version 0.1.3 --tag v0.1.3 --json: expected fail on feature branch and dirty worktree before commit; version, npm, GitHub tag/release, generated dist, workflow, and entrypoint checks passed.
• pnpm build:hooks: passed.
• pnpm build:mcp: passed.
• pnpm lint: passed.
• pnpm test: passed, 36 files and 417 tests.
• npm pack --ignore-scripts --dry-run --json: passed.
• Tarball manifest/privacy check: dry-run package contents exclude .agent-loop, docs/plans, raw logs, tokens, and private state.
• pnpm agent-loop dashboard smoke --json: status warn only because CLI smoke does not drive live Browser/viewport; dashboard/API/status checks passed.
• npx gitnexus detect_changes --repo HOLO-Codex: passed, low risk.

Notes

Local non-dry-run tarball install smoke was blocked by the current hook allowlist because it requires npm pack without --dry-run. The GitHub Actions Release dry run remains the release gate for tarball install smoke before real publish.

Run id: a4ec4c30-40c1-46fe-b28e-e655ea838cfc.

[tizerluo]

Internal tester report

Result: PASS

Scope checked:

• Release metadata bumped consistently to 0.1.3 across package metadata, Codex plugin manifest, MCP source/dist, and manifest tests.
• Changelog covers the post-v0.1.2 merged work intended for this release.
• No .agent-loop/, docs/plans/, raw logs, tokens, or private local state in package dry-run output.
• Release doctor failure before merge is expected because the feature branch changes version metadata and leaves Prepare and publish HOLO-Codex v0.1.3 #33 open until the PR merges.

Findings:

• P0/P1/P2: none.
• Note: local non-dry-run tarball install smoke is deferred to GitHub Actions Release dry run due current hook allowlist.

[tizerluo]

Internal reviewer report

Result: PASS

Reviewed areas:

• Version metadata consistency.
• Changelog and release checklist accuracy.
• Generated MCP dist sync.
• Package/privacy risk.
• GitNexus impact and detect output.

Findings:

• Initial P2: docs/release-checklist.md still used stale VERSION=0.1.2 in a manual recovery snippet.
• Resolution: fixed in this PR by deriving VERSION from package metadata and clarifying that manual GitHub Release recovery is only for a publish-success/workflow-recovery path.
• Final P0/P1/P2: none open.

[tizerluo]

Owner delivery note

Run id: a4ec4c30-40c1-46fe-b28e-e655ea838cfc

Hook doctor summary:

• HOLO router installed and pointing at expected local dist.
• No legacy or unexpected router commands.
• Global agent-loop binary is outside the package path; non-blocking for this PR, will be validated after npm release/install.

Release blocker assessment:

• Before Prepare and publish HOLO-Codex v0.1.3 #33: no open issues or PRs.
• v0.1.3 npm, tag, and GitHub Release did not exist.
• release doctor --version 0.1.3 --tag v0.1.3 passed version/npm/GitHub/generated-dist/workflow/entrypoint checks; expected feature-branch fail before merge because this PR modifies release metadata.

Validation:

• pnpm build:hooks: passed.
• pnpm build:mcp: passed.
• pnpm lint: passed.
• pnpm test: passed, 36 files and 417 tests.
• npm pack --ignore-scripts --dry-run --json: passed.
• pnpm agent-loop dashboard smoke --json: status warn only because CLI smoke does not drive live Browser/viewport; dashboard/API/status checks passed.
• npx gitnexus detect_changes --repo HOLO-Codex: passed, low risk.

Local actual tarball install smoke was blocked by the current hook allowlist because non-dry-run npm pack is not allowed. The GitHub Actions Release dry run remains the required tarball install smoke before real publish.

[tizerluo]

Claude ACP review status

Status: BLOCKED by local HOLO PreToolUse allowlist before dispatch.

Attempts:

• Reading /Users/mac-mini/.codex/skills/dispatch-claude-acp/SKILL.md via sed, cat, and wc was blocked.
• Discovering ACP/Claude commands via find, rg, and which was blocked.
• Safe read-only help checks claude --help, claude acp --help, and pnpm exec claude --help were blocked.

This means the required Claude ACP review cannot be started from the current hook configuration. The release-prep diff itself is validated and internal reviews passed, but I am not marking the external Claude ACP gate complete until either the hook is temporarily disabled for dispatch or the allowlist adds the approved Claude ACP wrapper.

[tizerluo]

Final update before merge

Follow-up after #37:

• Hook run targeting was repaired and verified live.
• Restored release run a4ec4c30-40c1-46fe-b28e-e655ea838cfc to RUNNING / COMMIT_PUSH_PR.
• Committed and pushed the missing v0.1.3 changelog line: 03fe2e8 docs: update v0.1.3 changelog.

Validation after push:

• GitHub CI passed on PR Fix #33: Prepare HOLO-Codex v0.1.3 release #34 head 03fe2e8: Node 22.x and Node 24.x.
• npx gitnexus detect_changes --repo HOLO-Codex: no changes detected.
• Worktree clean.

No new UI/dashboard changes; AGY/Gemini UI review remains not required for this changelog-only follow-up.

[tizerluo]

Post-merge release result

holo-codex@0.1.3 is published.

• Release workflow dry run: https://github.com/tizerluo/HOLO-Codex/actions/runs/28003401691
• Release workflow real publish: https://github.com/tizerluo/HOLO-Codex/actions/runs/28003493153
• npm latest: 0.1.3
• GitHub Release: https://github.com/tizerluo/HOLO-Codex/releases/tag/v0.1.3
• Tag v0.1.3 points to 4366a2e.
• Registry install smoke passed.
• Actual publish path: NPM_TOKEN secret fallback.

The Node.js 20 deprecation annotations from GitHub Actions are non-blocking; both validate and publish jobs completed successfully.