Vincent Koc
ac3cd1a0ca
Harden Codex harness control surfaces ( #77459 )
...
* fix(scripts): find codex protocol source from worktrees
* fix(test): keep codex harness docker caches writable
* fix(test): relax live codex cache mount permissions
* test(codex): add live docker harness debug output
* fix(test): detect numeric ci env in codex docker harness
* fix(codex): skip duplicate agent-command telemetry
* fix(tooling): skip sparse-missing oxlint tsconfig
* fix(tooling): route changed checks through testbox
* fix(qa): keep coverage json source-clean
* fix(test): preflight codex docker auth
* fix(codex): validate bind option values
* fix(codex): parse quoted command arguments
* fix(codex): reject extra control args
* fix(codex): use content for blank bound prompts
* fix(codex): decode local image file urls
* fix(codex): treat local media urls as images
* fix(codex): keep windows media paths local
* fix(codex): reject malformed diagnostics confirmations
* fix(codex): reject malformed resume commands
* fix(codex): reject malformed thread actions
* fix(codex): reject malformed turn controls
* fix(codex): reject malformed model controls
* fix(codex): resolve empty user input prompts
* fix(codex): enforce user input options
* fix(codex): reject ambiguous computer-use actions
* fix(codex): ignore stale bound turn notifications
* test(gateway): close task registries in gateway harness
* test(gateway): route cleanup through task seams
* fix(codex): describe current permission approvals
* fix(codex): disclose command approval amendments
* fix(codex): preserve approval detail under truncation
* fix(codex): propagate dynamic tool failures
* test(codex): align dynamic tool block contract
* fix(codex): reject extra read-only command operands
* fix(codex): escape command readout fields
* fix(codex): escape status probe errors
* fix(codex): narrow formatted thread details
* fix(codex): escape successful status summaries
* fix(codex): escape bound control replies
* fix(codex): escape user input prompts
* fix(codex): escape control failure replies
* fix(codex): escape approval prompt text
* test(codex): narrow escaped reply assertions
* test(codex): complete strict reply fixtures
* test(codex): preserve account fixture literals
* test(codex): align status probe fixtures
* fix(codex): satisfy sanitizer regex lint
* fix(codex): harden command readouts
* fix(codex): harden bound image inputs
* fix(codex): sanitize command failure replies
* test(codex): complete rate limit fixture
* test(tooling): isolate postinstall compile cache fixture
* fix(codex): keep app-server event ownership explicit
---------
Co-authored-by: pashpashpash <nik@vault77.ai >
2026-05-05 07:23:41 +09:00
Peter Steinberger
57e4a12165
fix(release): stage codex plugin source for live docker harness
2026-05-02 15:34:59 +01:00
Peter Steinberger
81e1deade2
fix(release): restore plugin runtime loading
2026-05-02 14:28:55 +01:00
Peter Steinberger
7a100021d3
test(release): stabilize live codex gates
2026-05-02 14:08:47 +01:00
Peter Steinberger
ffc79532b8
test(release): stabilize live release gates
2026-05-02 13:06:37 +01:00
Peter Steinberger
955b4df093
fix(ci): stabilize full release validation
2026-04-28 23:54:43 +01:00
Vincent Koc
42de56cc22
fix(ci): trust live docker harness scripts
2026-04-27 20:52:37 -07:00
Vincent Koc
b1439ca527
fix(ci): keep codex live harness helpers trusted
2026-04-27 20:37:57 -07:00
Peter Steinberger
68561a8c94
ci: use trusted codex live harness
2026-04-28 04:29:35 +01:00
Peter Steinberger
0ddbae171d
test: cover codex app-server subagents
2026-04-26 03:46:30 +01:00
Peter Steinberger
6b3e4b88d6
test: update QA parity fixtures for GPT-5.5
2026-04-25 18:05:28 +01:00
Peter Steinberger
5d724863bb
test: show live Docker profile mount
2026-04-25 04:57:20 +01:00
Peter Steinberger
ed7ea75fc0
perf: speed up live Docker staging
2026-04-24 20:03:08 +01:00
Peter Steinberger
560b04d4c6
perf: avoid slow Docker live lane cleanup
2026-04-24 18:09:04 +01:00
Peter Steinberger
1e83357abe
test: harden live docker lanes
2026-04-24 05:55:27 +01:00
Peter Steinberger
e0d3256311
test(codex): cover app-server Docker flows
2026-04-24 04:24:08 +01:00
Peter Steinberger
e98331b0be
test: parallelize docker aggregate
2026-04-23 14:31:18 +01:00
Peter Steinberger
d88d6a3c8b
fix: complete codex app-server turns in docker
2026-04-23 05:35:17 +01:00
pashpashpash
ff02563c7c
feat(codex): add guardian app-server mode ( #70090 )
...
Reworks the Codex app-server Guardian change into the final landing shape:
- keep YOLO as the default local app-server mode
- add explicit `appServer.mode: "guardian"`
- remove the legacy `OPENCLAW_CODEX_APP_SERVER_GUARDIAN` shortcut
- document Guardian configuration and behavior
- add Guardian event projection and Docker live probes for approved/ask-back decisions
Co-authored-by: pashpashpash <nik@vault77.ai >
2026-04-23 00:25:43 +01:00
Peter Steinberger
047acaa176
fix: stage ACP and Codex runtime deps
2026-04-21 08:47:24 +01:00
Onur
361750775d
CI: stabilize live release lanes ( #67838 )
...
* CI: stabilize live release lanes
* CI: widen codex live exclusions
* Gateway: stop live config/auth lazy re-imports
* CI: mount writable live Docker homes
* Live: tighten retry and provider filter overrides
* CI: use API-key auth for codex live lanes
* CI: fix remaining live lanes
* CI: stop forwarding live OpenAI base URLs
* Gateway: fix live startup loader regression
* CI: stop expanding OpenAI keys in live Docker lanes
* CI: stop expanding installer secrets in Docker
* CI: tighten live secret boundaries
* Gateway: pin Codex harness base URL
* CI: fix reusable workflow runner label
* CI: avoid template expansion in live ref guard
* CI: tighten live trust gate
* Gateway: ignore empty Codex harness base URL
* CI: stabilize remaining live lanes
* CI: harden live retries and canvas auth test
* CI: extend cron live probe budget
* CI: keep codex harness lane on api-key auth
* CI: stage live Docker OpenAI auth via env files
* CI: bootstrap codex login for Docker API-key lanes
* CI: accept hosted-runner codex fallback responses
* CI: accept additional codex sandbox fallback text
* CI: accept hosted-runner live fallback variants
* CI: accept codex current-model fallback
* CI: broaden codex sandbox model fallbacks
* CI: cover extra codex sandbox wording
* CI: extend cli backend cron retry budget
* CI: match codex models fallbacks by predicate
* CI: accept configured-models live fallback
* CI: relax OpenAI websocket warmup timeout
* CI: accept extra codex model fallback wording
* CI: generalize codex model fallback matching
* CI: retry cron verify cancellation wording
* CI: accept interactive codex model entrypoint fallback
* Agents: stabilize Claude bundle skill command test
* CI: prestage live Docker auth homes
* Tests: accept current Codex models wording
* CI: stabilize remaining live lanes
* Tests: widen CLI backend live timeout
* Tests: accept current Codex model summary wording
* CI: disable codex-cli image probe in Docker lane
* Tests: respect CLI override for Codex Docker login
* Tests: accept current Codex session models header
* CI: stabilize remaining live validation lanes
* CI: preserve Gemini ACP coverage in auth fallback
* CI: fix final live validation blockers
* CI: restore Codex auth for CLI backend lane
* CI: drop local Codex config in live Docker lane
* Tests: tolerate Codex cron and model reply drift
* Tests: accept current Codex live replies
* Tests: retry more Codex cron retry wording
* Tests: accept environment-cancelled Codex cron retries
* Tests: retry blank Codex cron probe replies
* Tests: broaden Codex cron retry wording
* Tests: require explicit Codex cron retry replies
* Tests: accept current Codex models environment wording
* CI: restore trusted Codex config in live lane
* CI: bypass nested Codex sandbox in docker
* CI: instrument live codex cron lane
* CI: forward live CLI resume args
* Tests: accept interactive Codex model selection
* Tests: bound websocket warm-up live lane
* CI: close live lane review gaps
* Tests: lazy-load gateway live server
* Tests: avoid gateway live loader regression
* CI: scope reusable workflow secrets
* Tests: tighten codex models live assertion
* Tests: normalize OpenAI speech live text
2026-04-18 03:18:12 +02:00
Onur
98c681e033
CI: mount writable Docker cache homes ( #67825 )
2026-04-16 23:16:48 +02:00
Onur
3ae5d95bfd
CI: fix live Docker auth mounts ( #67812 )
...
* CI: fix live Docker auth mounts
* CI: harden live Docker auth mounts
2026-04-16 23:00:11 +02:00
Peter Steinberger
46a6746bca
docs: clarify codex harness validation
2026-04-11 00:13:08 +01:00
Peter Steinberger
bfc0889776
docs: document Codex harness plugin workflow
2026-04-10 21:22:16 +01:00
