Integrate current upstream Codex snapshot with Every Code contracts - #465

Merged

cbusillo merged 1615 commits into

mainfrom

code/upstream-snapshot-428

Jul 29, 2026

This pull request is big! We're only showing the most recent 250 commits

Commits on Jul 23, 2026

Merge trusted plugin attribution from openai/main
cbusillo
committed
482e649
ci: preserve available macOS V8 runners
shiny-code-bot
committed
90839c4
Attribute command executions to trusted plugin scripts (#35020)

kmbroai
authored and
copyberry
committed
84fa68b
Adapt keyboard event reporting to the terminal (#35021)

fcoury-oai
authored and
copyberry
committed
fe0d472
Route exec-server HTTP through configured proxy policy (#35023)

celia-oai
authored and
copyberry
committed
1ee8f49
Fix integration candidate CI checks
shiny-code-bot
committed
3c2e090
Preserve refreshed Apps tools across MCP runtime updates (#35028)

jif-oai
authored and
copyberry
committed
091e4a5
Preserve plugin attribution across command approvals (#35029)

kmbroai
authored and
copyberry
committed
9fc4e5a
Enforce writer ownership for thread archive and deletion (#35031)

owenlin0
authored and
copyberry
committed
9633165
Expose Browser Use requirements through the app server (#35033)

rafael-oai
authored and
copyberry
committed
4177555
Route environment registry requests through the shared HTTP client (#35034)

celia-oai
authored and
copyberry
committed
d45055a
Preserve Windows sandbox proxy settings in guardian sessions (#35036)

iceweasel-oai
authored and
copyberry
committed
b115de9
Track app/read request duration (#35048)

stevenlee-oai
authored and
copyberry
committed
4123bf6

Commits on Jul 24, 2026

Register the Guardian V2 feature flag (#35049)

won-openai
authored and
copyberry
committed
bb24b67
Allow disabling the update_plan tool (#35054)

tz-openai
authored and
copyberry
committed
fb4e6ba
Route exec-server WebSockets through configured proxies (#35056)

celia-oai
authored and
copyberry
committed
94ebae7
Decouple exec-server HTTP from reqwest types (#35059)

celia-oai
authored and
copyberry
committed
09241ae
Track deferred tool namespaces in world state (#35063)

aibrahim-oai
authored and
copyberry
committed
1d4b58f
Avoid duplicating deferred sources in tool search (#35065)

aibrahim-oai
authored and
copyberry
committed
3947f0d
Fix Bazel test configuration for platform-specific data (#35067)

anp-oai
authored and
copyberry
committed
f47f28c
Add WebSocket transport to the code-mode host (#35078)

cconger
authored and
copyberry
committed
0dfa778
Merge remote-tracking branch 'origin/main' into code/upstream-snapshot-428
shiny-code-bot
committed
c6c0df6
Adapt blocking CI runners for Codex Lab
shiny-code-bot
committed
fee69f9
Fix hosted Bazel CI fallbacks
shiny-code-bot
committed
e7078c4
Support remote code-mode hosts in app-server (#35098)

cconger
authored and
copyberry
committed
f61b51d
Fix keyless Windows Bazel toolchains
shiny-code-bot
committed
b9d5fd0
Keep Windows Bazel out of blocking CI
shiny-code-bot
committed
a73ce49
Support Agent Plugins manifests (#35105)

jacobzhou-oai
authored and
copyberry
committed
a28374e
Allow hosts to customize `wait_for_environment` descriptions (#35106)

TAFOYA-OAI
authored and
copyberry
committed
81da9de
Budget hosted blocking CI cold builds
shiny-code-bot
committed
29c945b
Route heavy CI to trusted postmerge runners
shiny-code-bot
committed
7c11d80
Support trusted runners without passwordless sudo
shiny-code-bot
committed
f61974b
Harden Bazel setup for trusted Linux runner
shiny-code-bot
committed
832d347
Expose bundled models to Bazel config builds
shiny-code-bot
committed
a3bb1d1
Prewarm MCP runtime updates in the background (#35144)

jif-oai
authored and
copyberry
committed
ef2d3ed
Refresh MCP runtimes when session auth changes (#35146)

jif-oai
authored and
copyberry
committed
6c729ef
Reconnect MCP servers on explicit refresh (#35151)

jif-oai
authored and
copyberry
committed
f201c30
Make Code Bridge witness helpers clippy-clean
shiny-code-bot
committed
c42e1b2
Fix restored integration clippy findings
shiny-code-bot
committed
f090bd9
Encapsulate MCP refresh coordination (#35164)

jif-oai
authored and
copyberry
committed
c8957bb
Route extension warnings to app-server threads (#35168)

felixxia-oai
authored and
copyberry
committed
5dd992a
Compact host skill paths under metadata pressure (#35172)

felixxia-oai
authored and
copyberry
committed
5a1c54f
Wait for reloaded worker completion in the resume test (#35175)

jif-oai
authored and
copyberry
committed
1a817bb
Expose executor skills through skill tools (#35184)

jif-oai
authored and
copyberry
committed
7c71783
Route trusted workflows to repository runners
shiny-code-bot
committed
06e9e59
Preserve output from hooks that exit before reading stdin (#35194)

jif-oai
authored and
copyberry
committed
634a998
Make the Apps recovery exposure test deterministic (#35196)

jif-oai
authored and
copyberry
committed
5f6a2c3
Enable resource reads for explicit executor skills (#35198)

jif-oai
authored and
copyberry
committed
fe8500c
Refresh MCP runtimes across thread startup (#35204)

jif-oai
authored and
copyberry
committed
3645a43
Merge remote-tracking branch 'origin/main' into code/upstream-snapshot-428
shiny-code-bot
committed
319c217
Use current MCP authority for elicitation reviews (#35205)

jif-oai
authored and
copyberry
committed
000d254
Refresh managed MCP requirements for active threads (#35213)

jif-oai
authored and
copyberry
committed
a177013
Refresh MCP config independently across threads (#35216)

jif-oai
authored and
copyberry
committed
58b4277
Support paginated thread forks (#35220)

owenlin0
authored and
copyberry
committed
05f0002
Avoid persisting non-local threads for hook transcripts (#35221)

rasmusrygaard
authored and
copyberry
committed
99744cf
Fix remote control reconnect races
shiny-code-bot
committed
050f352
Merge remote-tracking branch 'origin/main' into code/upstream-snapshot-428
shiny-code-bot
committed
b726506
Support the ent26 enterprise plan (#35238)

bwanner-oai
authored and
copyberry
committed
544007d
Route MCP auth discovery through runtime HTTP clients (#35239)

celia-oai
authored and
copyberry
committed
89a3b89
Support ephemeral forks of paginated threads (#35251)

owenlin0
authored and
copyberry
committed
1811b67
Expose workspace plugin publish capability (#35254)

tsarlandie-oai
authored and
copyberry
committed
32329b2
Merge origin/main while deferring package lane

cbusillo
authored and
shiny-code-bot
committed
0a8fb6b
Propagate remote plugin IDs to skill metadata (#35261)

jameswt-oai
authored and
copyberry
committed
07fd04a
Track remote plugin IDs in skill invocation analytics (#35262)

jameswt-oai
authored and
copyberry
committed
0d2a0aa
Sign bundled macOS helper binaries (#35264)

cconger
authored and
copyberry
committed
a453588

Commits on Jul 25, 2026

Allow disabling the in-process code-mode host fallback (#35266)

cconger
authored and
copyberry
committed
cba0e27
Harden network approval cancellation and concurrency (#35267)

viyatb-oai
authored and
copyberry
committed
63fe5a6
Include code-mode tool names in Responses Lite metadata (#35271)

rka-oai
authored and
copyberry
committed
25b6fc9
Trace remote exec-server connection setup (#35275)

rphilizaire-openai
authored and
copyberry
committed
c3e926e
Skip plugin MCP filtering when no allowlists are configured (#35280)

xli-oai
authored and
copyberry
committed
4c43465
Handle exec-server network policy requests in the client (#35359)

viyatb-oai
authored and
copyberry
committed
3a08af4
Include item start times in completion events (#35363)

owenlin0
authored and
copyberry
committed
af7f6f4
Bound Code Mode metadata compatibility headers (#35364)

tz-openai
authored and
copyberry
committed
5c36e86
Keep unified mention results fresh (#35365)

charliemarsh-oai
authored and
copyberry
committed
322d5b9
Merge openai/main through 4c43465133 into Codex Lab candidate
cbusillo
committed
324201d
Merge openai/main through af7f6f4d34
cbusillo
committed
5950ce2
test(app-server): include optional item start timestamp
cbusillo
committed
643e05a
Merge openai/main through 322d5b96cf
cbusillo
committed
49a0f31
chore(core): allow MCP projection argument count
cbusillo
committed
b0e2979
chore: format upstream integration changes
cbusillo
committed
0eaff10
Make the keymap action menu responsive (#35375)

fcoury-oai
authored and
copyberry
committed
20dafe2
fix(release): define Codex Lab app build profile
cbusillo
committed
dea4008
fix(mcp-server): raise optimized build recursion limit
cbusillo
committed
8ca503f
Merge remote-tracking branch 'origin/main' into code/upstream-snapshot-428
cbusillo
committed
2d78221
Merge remote-tracking branch 'openai/main' into code/upstream-snapshot-428
cbusillo
committed
83df7b8
state: preserve shipped migration versions 36-38

cbusillo
and
claude
committed
b57a27e
guard(convergence): fail refreshes that silently drop owned paths
cbusillo
committed
89255b4
ci: fork-guard R2 publishing and strip the Codex Lab engine

cbusillo
and
claude
committed
89a6cf2
fix(core): bound world-state context
shiny-code-bot
committed
9fafdcb
fix(core): restore retained world-state fragments
shiny-code-bot
committed
509b7e3
fix(runtime): preserve auth and updater isolation
cbusillo
committed
5778e58
Merge state migration compatibility for #465
cbusillo
committed
7e3790d
Merge release hardening for #465
cbusillo
committed
8e93938
Merge convergence safety guard for #428
cbusillo
committed
ced83ba
wip: restore project validation onto upstream snapshot
cbusillo
committed
2a1060c
Merge branch 'code/upstream-snapshot-428' into code/restore-auto-review-465
cbusillo
committed
87cbe72
fix(provenance): restore verified dogfood launcher
shiny-code-bot
committed
f27b248
feat(tui): expose build provenance in diagnostics
shiny-code-bot
committed
0b02c84
test(tui): refresh default command snapshot
shiny-code-bot
committed
11c469a
fix(provenance): harden launcher and convergence evidence
cbusillo
committed
a7f78ec
Ignore generated system skills in the skills watcher (#35408)

victor-openai
authored and
copyberry
committed
62fd410
fix(provenance): bound retained dogfood candidates
cbusillo
committed
6b410ab

Commits on Jul 26, 2026

fix(provenance): reap orphaned staging artifacts
cbusillo
committed
07053d7
Merge remote-tracking branch 'openai/main' into code/openai-refresh-20260726
cbusillo
committed
baab552
Raise the MCP server recursion limit (#35414)

rka-oai
authored and
copyberry
committed
61a4488
docs(convergence): record 62fd upstream refresh
cbusillo
committed
cd0c1dd
Merge remote-tracking branch 'openai/main' into code/openai-refresh-20260726
cbusillo
committed
83f80ce
docs(convergence): record 61a448 upstream refresh
cbusillo
committed
6c1db49
feat(validation): restore automatic project validation
cbusillo
committed
8ecc5fc
Merge Project Validation restoration for #428
cbusillo
committed
4fff615
Merge July 26 upstream refresh for #428
cbusillo
committed
e39b453
Forward-port SessionProvenance contract onto upstream snapshot

Chris Busillo
and
claude
committed
25a64a0
Merge SessionProvenance restoration for #428
cbusillo
committed
26ab1d4
feat: restore external integration contracts
cbusillo
committed
46b663f
fix(tui): keep provenance separate from session source
cbusillo
committed
c0e3374
Merge external integration restoration for #428
cbusillo
committed
4284cbf
test(core): cover project validation workspace sandbox
cbusillo
committed
145033f
Merge Project Validation sandbox coverage for #428
cbusillo
committed
00df387
Restore background auto review contract
cbusillo
committed
6289419
Merge Background Review restoration for #428
cbusillo
committed
78450ef
fix(state): stop shipped databases from breaking on migration rewrites

cbusillo
and
claude
committed
524107e
Bound model-visible context in bridge, external agents, and auto review

cbusillo
and
claude
committed
f6e91da
core: restore external-agent preflight and routing coverage

cbusillo
and
claude
committed
e368b0b
Restore API/CLI/config compatibility surfaces for the upstream snapshot

cbusillo
and
claude
committed
a912f9f
Cover Background Review trigger, budgets, RPC, and disposition

cbusillo
and
claude
committed
9ff0c28
Merge migration safety fixes for #428
cbusillo
committed
f656722
Merge compatibility restoration for #428
cbusillo
committed
5f7eb0b
Merge model-context hardening for #428
cbusillo
committed
c77739d
Merge external-agent integration coverage for #428
cbusillo
committed
efdbb48
Merge Background Review integration coverage for #428
cbusillo
committed
084dde0
ci: make fork release and CI publishing fail-safe

cbusillo
and
claude
committed
300e3db
Merge release and CI safety hardening for #428
cbusillo
committed
1255c7b
test(convergence): restore Code Bridge proofs and generalize the ownership guard

cbusillo
and
claude
committed
624e9b1
Merge restored integration proofs and convergence coverage for #428
cbusillo
committed
fdbc22b
fix(core): bound model-visible context sinks and recover from invalid images
cbusillo
committed
9daa317
Merge model-context safety fixes for #428
cbusillo
committed
e56dded
test: cover validation, background review control, and CLI config surfaces

Chris Busillo
and
claude
committed
cdc6321
Merge high-value behavioral coverage for #428
cbusillo
committed
fd58c87
fix: restore shipped app-server, hooks, and rollout compatibility
cbusillo
committed
25a49be
Merge external compatibility restorations for #428
cbusillo
committed
32d1d78
test(convergence): prove the environment writer and close the guard gaps
cbusillo
committed
03882cb
chore(convergence): regenerate guard and inventory artifacts
cbusillo
committed
de24f03
Merge final proof and guard coverage for #428
cbusillo
committed
0962349
Bound the remaining unbounded model-visible context items
cbusillo
committed
b14fe2f
Merge final model-context bounds for #428
cbusillo
committed
f71e701
Restore remaining external compatibility surfaces

cbusillo
and
claude
committed
31b2e76
Merge remaining compatibility fixes for #428
cbusillo
committed
ac9c95b
chore(convergence): refresh guard after final restorations
cbusillo
committed
d96308e
fix: close the final draft-publication gates for #428

cbusillo
and
claude
committed
e48f82b
Merge final draft-publication gate fixes for #428
cbusillo
committed
2fd8cf5
fix(ci): restore lint and Bazel compatibility
cbusillo
committed
2b393e5
fix(rust): annotate opaque literal arguments
cbusillo
committed
f720041
fix(ci): align sample config and docs formatting
cbusillo
committed
f59b994
fix(ci): source V8 artifacts explicitly in full CI
cbusillo
committed
4bb0ef9
fix(auto-review): compile PID liveness checks on Windows
cbusillo
committed
201bb1a
fix(ci): unblock Windows and ARM full CI
cbusillo
committed
0133594
test(core): skip POSIX agent commands on Windows
cbusillo
committed
7b0a7c4
fix(ci): allow full argument lint to finish
cbusillo
committed
3bfe89b
fix(ci): make cross-platform test failures deterministic

cbusillo
and
claude
committed
e5945d2
fix(ci): repair Windows portability across full CI

cbusillo
and
claude
committed
c3566f2
fix(auto-review): make save_run persistence O(1) in index size
cbusillo
committed
be75f60
fix: harden persistence and auth CI paths

cbusillo
and
claude
committed
a39db9f
fix(ci): close remaining cross-platform gaps
cbusillo
committed
86a844d
Stabilize hosted full CI lanes
cbusillo
committed
4ac9473
Remove stale model convergence waivers
cbusillo
committed
8a2b89e
Restore compact convergence waiver formatting
cbusillo
committed
5450eff
Merge pull request #477 from cbusillo/code/upstream-convergence-system-428

shiny-code-bot
authored and
cbusillo
committed
ce2f852
Merge pull request #478 from cbusillo/code/convergence-bootstrap-ci-428

shiny-code-bot
authored and
cbusillo
committed
5dd9b8e
Wire convergence validation into repo checks
cbusillo
committed
47047f8
Harden convergence evidence validation
cbusillo
committed
e9d4aaa
Pin guard regeneration policy
cbusillo
committed
4c93e91
Expose convergence bootstrap evidence
cbusillo
committed
8740275
Test convergence summary rendering
cbusillo
committed
165bf81
Merge PR #479: port canonical convergence controls
shiny-code-bot
authored
8ea6175
tui: assert exact kitty file-reference payload

cbusillo
and
claude
committed
add7ec6
Stabilize seatbelt metadata carveouts
cbusillo
committed
3808241
tui: compact home-relative AGENTS summary paths
cbusillo
committed
bf6bcc7
windows-sandbox: add process startup env floor

cbusillo
and
claude
committed
a51777d
Stabilize Windows process-heavy tests
cbusillo
committed
e2cb02a
Bound one-shot MCP startup recovery
cbusillo
committed
6ae6e1d

Commits on Jul 27, 2026

stabilize full CI across supported platforms
cbusillo
committed
f48579d
Merge pull request #480 from cbusillo/code/pr465-windows-ci-stability
cbusillo
authored
84daf79
ci: bound Bazel repo contents cache lifecycle
cbusillo
committed
4fea023
Merge remote-tracking branch 'origin/code/upstream-snapshot-428' into fix/bazel-run-cache-lifecycle
cbusillo
committed
eb94fd5
windows-sandbox: restore PowerShell-compatible token
cbusillo
committed
f9adf63
Merge pull request #481 from cbusillo/fix/bazel-run-cache-lifecycle
shiny-code-bot
authored
0c9ca9a
Merge pull request #482 from cbusillo/code/pr465-windows-token-compat
cbusillo
authored
a5f9dfa
Stabilize remaining full CI shards
cbusillo
committed
731cc41
Merge pull request #483 from cbusillo/code/pr465-final-ci-stability
cbusillo
authored
fcb0481
Harden Windows legacy CI fixtures
cbusillo
committed
5d467de
ci: secure and scale self-hosted runners
cbusillo
committed
dd7e9ba
Merge pull request #485 from cbusillo/code/trusted-runner-lanes
cbusillo
authored
edae67d
test(windows): fix whoami option spelling
cbusillo
committed
99d7e8a
ci: preserve stacked app validation
cbusillo
committed
1960061
test(windows): parse whoami SID directly
cbusillo
committed
6d09ba6
Merge pull request #486 from cbusillo/code/trusted-runner-pr-trigger-fix
cbusillo
authored
2157cf0
Merge pull request #484 from cbusillo/code/pr465-windows-acl-followup
cbusillo
authored
03c5eb2
ci: isolate self-hosted caches by runner
cbusillo
committed
2c19dc0
Merge pull request #487 from cbusillo/code/per-runner-cache-isolation
cbusillo
authored
2da3fa4

Commits on Jul 28, 2026

Commits on Jul 29, 2026

test(app-server): restore hermetic integration keyring
cbusillo
committed
ae68067
chore(convergence): remove restored keyring waiver
cbusillo
committed
7b966ec
test(convergence): cover restored app-server registry
cbusillo
committed
9cff6ee
Merge pull request #493 from cbusillo/code/restore-hermetic-keyring-306
cbusillo
authored
a04892b
fix: restore bounded validation contracts
cbusillo
committed
1a290ec
chore: resolve execution convergence waivers
cbusillo
committed
39cd538
fix: harden structural validation diagnostics
cbusillo
committed
18857d2
Merge pull request #494 from cbusillo/code/exec-contract-307
shiny-code-bot
authored
317d01d
fix(exec): wait safely for background reviews
shiny-code-bot
committed
6e14cb4
guard(convergence): preserve headless background review wait
shiny-code-bot
committed
13f3922
chore(convergence): resolve review suite waivers
shiny-code-bot
committed
dd231f3
Merge pull request #495 from cbusillo/code/tui-guardian-308
shiny-code-bot
authored
5ae93ae
Restore binding skill-routing contracts
shiny-code-bot
committed
c1e2902
Guard binding skill-routing ownership
shiny-code-bot
committed
842f295
Version binding skill-routing ownership
shiny-code-bot
committed
8194c1d
Regenerate versioned convergence guard
shiny-code-bot
committed
67d008c
Merge pull request #496 from cbusillo/code/skills-audit-83
shiny-code-bot
authored
b599ca2
Restore final convergence proof artifacts
cbusillo
committed
e26514d
Refresh convergence guard manifest
cbusillo
committed
bbaf982
Preserve artifact lifecycle classification contracts
cbusillo
committed
d967e45
Refresh artifact lifecycle guard entries
cbusillo
committed
7dc35cd
Merge pull request #497 from cbusillo/code/finalize-upstream-snapshot-428
cbusillo
authored
86cad52