Harden workplace fork and align Codex runtime parity#1
Draft
SlowGreek wants to merge 25 commits into
Draft
Conversation
Use one long-lived app-server connection per Codex environment, multiplex native threads and routed callbacks, preserve thread-scoped MCP credentials, and permanently disable workplace analytics, auto-update, and LAN binding paths. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Disable cloud auth, managed tunnels, Tailscale exposure, and external updater execution; enforce loopback and audited GitHub/Copilot HTTP policy; add typed MCP elicitation, dynamic tool, and granular permission callbacks; copy official-style worktree include files; and document fork operations, SBOM, and reproducible builds. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Propagate active thread archive, unarchive, delete, rename, and compact operations to Codex app-server, and add snapshot-before-remove plus restore support for managed worktrees. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Optionally apply the source checkout's tracked diff to new worktrees, snapshot orphaned worktrees before UI cleanup, and expose restore inputs for lossless recovery. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Expose a command-palette action that dispatches through orchestration to the active provider and invokes Codex thread/compact/start, while hiding the action during running turns. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Replace obsolete external-updater behavior tests with the permanent workplace-off policy and assert OTLP remains disabled despite environment input. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Keep production Git policy unchanged while making local bare-repository integration fixtures independent of the developer's safe.bareRepository setting. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Add typed uncommitted, base-branch, commit, and custom review targets with inline or detached delivery, and expose inline/detached uncommitted review actions in the command palette. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Probe collaborationMode/list on the shared app-server connection, reject unavailable requested modes, and use the documented default/plan fallback only for method-not-found legacy servers. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
github-actions
Bot
added
vouch:trusted
Add routed unknown request and notification subscriptions, visible method-not-found request fallback, a typed runtime.raw extension event, orchestration activity projection, and UI work-log coverage so future app-server methods are never silently dropped. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Preserve optionless, Other, and secret question semantics, retain mixed and multi-select forms, and render secret answers through an explicitly masked composer control. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Add a command-palette review workflow for uncommitted changes, base branches, commits, and custom instructions with inline or detached delivery. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Route typed MCP status, OAuth, resource reads, direct tool calls, reloads, and per-server enablement through the active shared app-server connection. Add a command-palette management surface with diagnostics and explicit per-invocation trust confirmation. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Document raw protocol retention, rich input handling, native review modes, and MCP management safety, and align elicitation conformance expectations with the extended question contract. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Freshen the Node test HTTP layer for each router case so concurrent tests cannot receive another case's route table and intermittently return 404 or 405 during authentication bootstrap. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Fork active conversations through app-server thread/fork, create separate T3 GUI metadata, persist the provider resume cursor through projections and migrations, and resume the native fork on its first turn. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Replace a fixed scheduler-yield count with a bounded state-based wait so the Grok interruption assertion remains deterministic under full-suite load. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Expose app-server thread/list search and archive filters, show native history in the command palette, and link inactive conversations through persisted provider cursors while leaving history authoritative in Codex. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Report generated worktrees as managed and explicit destination worktrees as permanent so cleanup callers do not rely on path heuristics; document snapshot and removal policy. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Document the deliberate no-simulation policy for settings, arbitrary metadata, and memory mutations absent from the pinned generated app-server protocol. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Resolve enabled composer skills and local file links against the active provider snapshot, preserve the original prompt text, and send native skill/mention inputs through both turn/start and turn/steer. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Add native rename, archive, unarchive, and confirmed delete actions to the app-server thread catalog so inactive conversations no longer require an active T3 provider session. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Register the HTTP router seam cases with concurrent:false so independently-provisioned test servers cannot race their route tables under full-suite load. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Assert exact skill/mention paths survive turn/steer and compile-check that generated request_user_input questions have no multi-select field while MCP array elicitation remains multi-select. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
Carry ordered skill/mention selections explicitly from the composer through orchestration to provider turns, preserve exact paths for start and steer, and surface unresolved skills or malformed mention paths before dispatch. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: f047b252-1029-4093-9a8e-53456b7dd740
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
skillandmentioninputs carried explicitly from composer selections through orchestration toturn/startandturn/steer, with unresolved-path errors.worktreeinclude, ignoredAGENTS.override.md, snapshots, restore, and explicit managed/permanent ownershipValidation
vp checkvp run typecheckvp test: 605 files passed, 2 skipped; 4,762 tests passed, 7 skippedIntentional exclusions
Targets
codex-workplace;mainremains an upstream mirror.