feat: invoke Show Me and Retro for the originating chat

[yia-mw-agent]

Closes #60 (parent #53). Builds on merged #54/#58/#59.

What changed

• Show Me (chat or selected item) and Retro (suggestions only) requests now carry a portable skill-discovery path ($CODEX_HOME/skills, .agents/skills, plugin skills), the exact originating CODEX_THREAD_ID with stop-on-mismatch, and an explicit "report and stop, do not substitute" rule for missing skills. No private toolkit or personal path.
• Panel status separates "delivered to this chat" from skill completion; the action hint says clicks are the only trigger and the skills are optional.
• README documents optional skill setup; core Bridge is unaffected without them.
• Version 0.9.0 -> 0.10.0 (feature) via mw-version.py against main fb0e8ef; changelog entry under 0.10.0. Merged current main (Claude Show Me/Retro, feat(bridge): run installed Show Me and Retro with session or item scope #78) with the optional actions, unsupported-background gate and Claude reader/mod kept.

Verification

• node test_actions.cjs: installed-skill request, selected-item context as reference data, missing-skill/no-substitute wording, scope-mismatch instruction, no private paths, duplicate prevention, acknowledgement-vs-completion, failure preserving view, missing chat reference.
• mw-version.py check passes against fb0e8ef. scripts/verify.sh passes (real Claude Code 2.1.296 plugin validate/test).
• NOT run: the installed Codex host with real show-me/retro skills installed. That check remains for a reviewer with Codex.

[timeleft--]

The Captain has authorized one final app reopen after the complete candidate is prepared. Integrated acceptance is currently blocked: a first-officer merge probe of this exact head with PR #64 at c131de1 produces conflicts in mcp/captains-bridge/view.html, its README, and CHANGELOG.md. Installing these two independent 0.6.0 packages in turn would replace one feature with the other and repeat the rejected activation loop.

Prepare the combined candidate on this existing PR/worker branch, using the existing source and tests. Merge the exact PR #64 head above (no rebase, force-push, replacement PR, new root, or new implementation). Preserve its background preparation/cancellation/delivery lifecycle and all merged Refresh/theme/navigation fixes, together with this PR's Show Me/Retro behavior. Resolve the overlapping renderer/docs/changelog deliberately; the old 'background preparation not implemented' text must not survive. Run the repository version updater against current main with this PR's actual title, the existing combined Bridge tests and normal packaging checks, then publish the new head on PR #66.

PR #64 remains the canonical child #57 source and will receive its own exact-head review and acceptance. This is candidate integration for the already-required installed-host checks, not a waiver, new dependency graph, or publication request. The Captain will install the combined immutable head once and verify real host behavior. Existing browser evidence remains reusable where source is unchanged.

[timeleft--]

PR64 has now merged as current main dc99e4c, version 0.6.0. Its measured Codex boundary is recorded and its unsupported route ends immediately without capture, dispatch or a timer. This existing combined head e70f62d still includes the older background implementation, so it would restore the failed ten-minute wait if installed again. The mandatory version check also requires updating from the new base.

Merge this current main into the same PR66 worker branch. Preserve both the optional Show Me/Retro changes and the newly accepted unsupported-background gate, provenance/cancellation interfaces, direct Refresh, layout/theme fixes, and the shared repository changes. Resolve only real overlaps; no rebase, force-push, replacement PR/root, installed-cache edits or new implementation. Run the repository-local version updater against current main using this PR's actual feature title, and the existing regression/packaging checks, then push the same PR.

Installed-host optional-action evidence is now available: selected-item Show Me reached the exact originating chat, verified CODEX_THREAD_ID, discovered/read the installed skill, verified original source messages and returned a diagram; overview Retro likewise discovered/read its installed skill and returned source-grounded proposals without applying them or resuming project work. Existing missing-skill/foreign-chat/duplicate guards retain their source tests; final clean-host installation/update acceptance remains child61. These receipts do not establish working Codex background delivery. The Captain and first officers for #53/#55 are coordinating shared version/docs/CI changes and one integrated activation candidate; do not independently replace the marketplace or request more reloads.

[timeleft--]

PRs #75 and #74 have now merged. Actual main is 309a46a, with synchronized version 0.8.0. This exact head 3168cbd still uses the earlier dc99 base. The repository version check against the actual main fails with "branch is behind current base; update the branch and rerun the updater." Installing this head would also omit the just-merged Claude reader and mod.

Merge that actual main into the same PR66 worker branch, preserve the optional Show Me/Retro changes, accepted unsupported-background gate, direct Refresh, layout/theme/navigation, and the new Claude reader/mod. Run the existing version updater against current main using this PR's feature title, then existing regression and packaging checks; update the PR's version/verification description to match the resulting head. Do not rebase, force-push, create a replacement PR/root, edit installed caches, or add a new implementation. The #53 and #55 first officers deliberately held this request until both main merges to avoid another version-only round.

Independent source review at 3168 is otherwise clean: 65 Bridge Python tests, five JS suites, eight plugin-boundary tests, 12 public-boundary tests and three packaged-release tests pass. Actual Codex available-skill acceptance passed for selected-item Show Me and overview Retro in their originating chat, without implementation or project resumption. A native foreign-origin guard replay in another existing Codex chat verified its actual CODEX_THREAD_ID and stopped before skill discovery/execution; this is guard evidence, not MCPApp misrouting evidence. Required native missing/unavailable-skill acceptance remains open because both optional skills are installed on the active host. Do not claim that unit tests prove this absent-skill host case, invent a source defect for it, or remove user skills. The Captain owns that acceptance gap.

Return the updated head through this same PR. No independent marketplace replacement, publication or user reload request.

[timeleft--]

The optional-action implementation remains clean on c6cb507: the renderer and observe-chat source are unchanged from the independently reviewed3168 source; existing Python/JS/native positive and originating-scope guard receipts remain valid. The Captain explicitly accepted the focused missing-skill tests in #60 (comment) . Do not change installed skills or ask for another restart.

The one remaining reconciliation finding is the actual current base. PR78 has merged as fb0e8ef, version0.9.0, including Claude Show Me/Retro. This PR still incorporates309a46a and is CONFLICTING; an independent exact-head run of scripts/mw-version.py check against freshly fetched actualmain fails with 'branch is behind current base; update the branch and rerun the updater'.

Merge the actual current main into this existing branch, preserve both clients, the unsupported-background gate, optional actions, Refresh, existing tests and documentation, then run the maintained updater/check against that base and update the changelog/PR metadata. Run normal affected integration/version checks. This is a base/version reconciliation, not a new implementation or missing-skill repair. Do not rebase, force-push, open a replacement PR, touch installed caches or merge as the worker. The first officers are reserving this PR's merge before the next PR76 compatibility repair to avoid repeated version churn.

[timeleft--]

Independent current-head review is clean. This head merges actualmain fb0e8ef, preserves both clients and the unsupported Codex background boundary, and applies the maintained0.9.0→0.10.0 updater. The diff is limited to the eight expected optional-action/documentation/version files; no Claude action or core Bridge source is lost.

Independently passed: current-base version/whitespace checks,65 Bridge Python tests, five Bridge JS suites and46 plugin/public-boundary/Claude-toolchain Python tests. Existing unchanged packaging/browser receipts and native selectedShowMe/overviewRetro/originating-scope-guard receipts were reused. The Captain explicitly accepted the existing focused missing-skill tests in issue60comment6100483084; physical missing installation was not simulated on the user's live profile.

No material defects remain in this issue. Runtime-image preview/publication is a separate release-readiness item carried into61, including the scoped vendor-cli findings; inherited pinned-base CVEs are nonblocking.