 Peter Steinberger
|
4b0d573437
|
feat: session permission modes with worktree-scoped defaults (#124909)
* feat(gateway): add session permission modes
* feat(agents): enforce session permission policies
* test: cover session permission modes
* docs: explain session permission modes
* fix(agents): preserve apply patch default root
* feat(codex): map session permission modes
* feat(ui): add session permission controls
* test: cover session permission surfaces
* fix(agents): enforce session permissions from entry
* fix(codex): pass params object to requirements reader
* fix(codex): honor session permission modes
* fix(codex): preserve exec approval floors
* chore: revert changelog edit (release-owned)
* test: align full-mode promotion with upstream semantics
* chore(protocol): regenerate session permission models
* docs: register session permission modes
* fix(ui): use shared permission dropdown
* fix(sessions): restore permission mode contracts
* fix(ci): record session permission startup JS growth in the budget baseline
* refactor(agents): prepare session exec mode at dispatch
Host dispatch owns permissionMode→exec override preparation; the codex
plugin consumes prepared facts and the SDK barrel export is removed,
keeping the plugin-sdk surface at its recorded budget.
* test: type exec mode fixtures as ExecMode
* fix(codex): require admin scope for yolo permissions
* test: isolate codex permission command state
* ci: refresh PR checks against current main
* ci: refresh checks after gateway test repair
* test: fix main-fallout CI suites
* chore: refresh CI merge ref
* fix(worker): fence permission-mode cloud placements
* fix(sessions): clear worktree policy on detach
* chore(protocol): generate session permission mode enum
* test(gateway): type dispatch fixtures from session entries
* fix(ui): allow clearing session permission mode
* chore: refresh CI merge ref
* fix(ci): record permission picker startup growth in the budget baseline
* fix(gateway): gate session root projections
|
2026-08-17 04:37:35 -07:00 |
|
|
Peter Steinberger
|
8885be4756
|
fix(codex): refresh session meters after /codex compact (#123640)
* fix(codex): route compact through session pipeline
Route /codex compact through host-owned manual compaction so native completion and token snapshots update session meters, and report the terminal outcome to the user.
* test(codex): cover unavailable compact outcome
* fix(plugins): fence command compaction capability
Bind compactCurrent to one command invocation and captured session generation so retained or stale callbacks fail closed without running compaction.
* fix(plugins): lazy-load command session revalidation
Keep compaction session freshness checks at the auto-reply owner without pulling the session accessor into generic plugin command module initialization.
* fix(plugins): keep session revalidation lazy
Avoid loading the session accessor through generic plugin command initialization while preserving pre-compaction session-generation checks.
* fix(compaction): fence session lifecycle admission
Revalidate the exact session id and lifecycle revision immediately before native compaction and again before accounting so resets and rebinds fail closed across awaited work.
* fix(commands): fence plugin compaction authority
* fix(compaction): require accounting commit
* test(compaction): keep regression under lint cap
* fix(codex): preserve compact admission
* fix(codex): preserve compaction target identity
* fix(compaction): bind admitted target
* fix(compaction): fence accounting commit
|
2026-08-14 09:47:43 -07:00 |
|
|
Peter Steinberger
|
fa03d9b913
|
refactor: consolidate coercion helpers (#121366)
* refactor: consolidate coercion helpers
* fix: remove duplicate coercion imports
* fix: preserve serialized coercion guard
* chore: ratchet coercion helper carve-outs
* fix(test): keep gauntlet subprocess startup lean
* fix: preserve imported session timestamp semantics
* fix: preserve catalog timestamp string semantics
* chore: align plugin SDK surface ratchet
* fix: preserve trajectory and SDK string contracts
* fix(test): preserve QA record assertion semantics
* fix: complete standalone record guard rename
* refactor(cron): use canonical string coercion
* fix(acpx): preserve Pi timestamp parsing
* test(channels): adapt custody test harnesses
* test(telegram): classify media harness as test support
* test(acpx): split timestamp contract coverage
* test(channels): support generated custody contracts
* chore: ban the full coercion helper name set
Extends the declaration guard to all eleven consolidated helper names and
renames the cron schedule-identity readNumber wrapper to readScheduleInteger
so the banned generic name cannot regrow.
* fix(scripts): repair release-validation guard drift and lint cause
Restores the renamed isJsonRecord guard in assertTrustedWorkflowHarness after
main added isRecord call sites in parallel, and attaches the caught YAML error
as the thrown error cause (preserve-caught-error was red on main).
* fix: preserve Claude timestamp string semantics
* fix: preserve persisted timestamp string semantics
* fix: preserve date-first timestamp contracts
* fix(openai): harden delegation failure formatting
* chore: close coercion helper guard gaps
* test(openai): model non-error delegation rejection
* chore: refresh plugin SDK API contract
* fix(tasks): use canonical string field reader
* fix(ai): use canonical provider error field coercion
* fix(browser): migrate native bootstrap coercion
* docs(plugin-sdk): clarify text record export compatibility
* fix(gateway): normalize approval execution identity
* test(outbound): isolate message action poll harness
|
2026-08-11 00:02:18 -07:00 |
|
|
Peter Steinberger
|
5a79d19ba1
|
fix(codex): preserve warm sessions and approvals across conversations (#120405)
|
2026-08-07 18:38:09 -07:00 |
|
|
Peter Steinberger
|
6235ea55ac
|
refactor(codex): split command handlers (#113335)
* refactor(codex): split command handlers
* refactor(codex): keep helper types private
|
2026-07-24 07:29:44 -07:00 |
|