Self-hosting external AI Teams Control

English | 日本語

This repository distributes the AI Teams Codex Plugin. It does not distribute or operate a scheduler, persistent queue, poller, orchestration runtime, Discord or webhook runtime, GUI, or service manager.

Operators who need persistent discovery, queued execution, recovery, or a control UI can separately install Qoo257/ai-teams-control. That project owns its runtime requirements, supported deployment shapes, persistence, credentials, installation, updates, backup, monitoring, and release lifecycle. Follow its current documentation rather than copying an old service procedure from a Plugin release.

Plugin and Control boundary

The Plugin owns product-development and Issue-delivery semantics, focused Skills, diagnostics and quality tooling, and a bounded Control MCP client. GitHub Issues, pull requests, Git refs, and hosted checks remain authoritative for GitHub delivery.

External Control may discover Issues, schedule work, persist its queue and recovery state, manage worker lifecycle, and expose optional GUI, Discord, or webhook integrations. It cannot weaken repository acceptance, effect authority, or the Plugin's bounded Issue-execution contract.

Installing or updating the Plugin starts no service and changes no Control file, configuration, credential, database, or process. Installing or updating Control is a separate operator-authorized effect and changes no Plugin release.

Integration safety

  • allowlist exact repositories and trusted operators;
  • keep Control credentials outside repositories and candidate workspaces;
  • grant only the provider permissions required by enabled effects;
  • treat queue, retry, recovery, and worker ownership as Control state, not as a second GitHub source of truth;
  • require exact candidate and hosted-check evidence before accepted delivery; and
  • stop on incompatible or unavailable Control capability instead of adding an in-Plugin runtime fallback.

Machine-facing contracts remain in the bounded Issue execution, trusted delivery, and Control integration boundary.