Repository navigation
Integrate Universal Code access and three-mode permissions - #239
Merged
Merged
Conversation
…-b-mcp-20261002-01a0f0c2
Qiyuanqiii
marked this pull request as ready for review
October 4, 2026 06:33
Replace proposal, Once, Host and Risk execution producers with current command-runtime operation authority while preserving historical evidence and exact saved-outcome continuation. Remove obsolete execution flags, review routes, UI controls, writers, wrappers and their exclusive tests. Keep background ownership independent of completed Supervisor turns without relaxing native launch or stdin authorization. Fix context compaction ordering, current Full activation wiring, terminal/UI cleanup and packaged ledger paths. Add bounded fake-transport regressions and runner-only Windows diagnostics.
Align CLI fixtures with Thread permission and resolved workspace identity; preserve exact operator confirmation and retired tool boundaries.
Use one start/wait Job for every operator command and retain its original timeout, output policy, authorization, and receipt identity. Bind the fixed PowerShell profile through existing normalization. Model checkpoint undo/redo with a real FileTool mutation boundary. Co-authored-by: Codex <codex@openai.com>
Require first lease release instead of replay and verify its stored state. Check retired Host flags against the usage response and unchanged Job ledger. Run existing fixed operator and native tests serially while retaining both results and preserving the operator-first launch order. Co-authored-by: Codex <codex@openai.com>
Remove the three remaining unreferenced Controlled native helpers. After the original fixed-operator gate fails, derive an isolated Go overlay for a 400-file raw native phase probe. Preserve the original pipeline, token, Job limits, timeout and failed gate; never write back to checkout. Co-authored-by: Codex <codex@openai.com>
Require the existing smoke startup budget to reach a native window, and accept only a successful close request followed by a natural zero exit. Preserve startup failures during cleanup and report lifecycle state. Split the failure-only fixed PowerShell overlay into the three original cmdlet stages without changing production code, privileges or budgets. Co-authored-by: Codex <codex@openai.com>
…ostics Give the two PowerShell correctness fixtures explicit 60-second requests while preserving the production 30-second default, 120-second cap, and independent timeout, isolation, output, replay and cleanup checks. Remove temporary ownership/native trace and phase-overlay wiring, retaining ownership failure behavior coverage without its diagnostic logger. Co-authored-by: Codex <codex@openai.com>
…rors Preserve existing workspace registrations, bind new roots to their canonical directory, and reuse create-if-absent instead of name-based root upserts. Correct Windows authority fixtures and propagate approval resume errors. Retain packaged sentinel scan failures with bounded redacted I/O facts without changing scan, sharing, retry, timeout or process cleanup behavior. Co-authored-by: Codex <codex@openai.com>
Keep exact default Workspace identity and location checks while accepting the canonical root now persisted by initial registration on macOS and Windows. Check that the closed CLI planning envelope leaks neither the caller root spelling nor the canonical root used by the planner. Co-authored-by: Codex <codex@openai.com>
Replace EvalSymlinks for Windows workspace registration with final-path resolution on a held directory handle, without a fallback or changes to historical registrations and execution authority. Cover direct-junction imports and historical alias descendants in the existing Windows gate. Co-authored-by: Codex <codex@openai.com>
This was referenced Oct 14, 2026
Closed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
概述
本 PR 将 portable Agent Skills、标准 Agent Plugins、MCP 协议适配 以及
ask / auto / full三档权限体系 正式接入现有的 Run / Thread 运行架构，并全面收敛命令执行、操作审批、后台任务与故障恢复路径。本轮重点是让接入能力统一复用既有的执行与权限底座，彻底退役被替代的废弃旧入口，并修复跨平台集成缺陷。本次改动属于 Universal Code 的基础底座迁移，并不代表全生态插件兼容及完整产品验收已全部就绪。
主要改动
1. Skills、Plugins 与 MCP 协议接入
2. 收敛三档权限与操作审批机制
ask / auto / full，同步拉齐 CLI、API、Desktop、Run / Thread 以及测试夹具Auto模式未引入模型自主审批机制，不声明与 Codex 或 Claude Code 同名模式完全等价3. 统一命令执行与任务生命周期
command-runtime.v2/ Job 独占 Lease 机制，通过统一账本管理进程启动、分页输出、异步等待、取消中断与资源回收4. 彻底退役旧执行通道，保留历史只读审计（落地 ADR 0165）
POST路由GET），支持对已有终态结果的精确重放与续接5. Windows 与跨平台兼容性修复
验证结果
42f1236c79f7e680e9be34f76a7ed747b4261d60已通过的检查包括：
vet以及govulncheck验证边界声明：Analyzer 检查步骤中的两项原生隔离观测因空输出
0xc0000142触发既有 CI 跳过分支，未取得实际行为通过证据；此外，签名认证与正式发布 Job 按规跳过，不代表已完成商业发布流程。代码规模
相对于
main主线分支，本 PR 共涉及 831 个文件，新增 59,291 行 / 删除 24,172 行（净增 35,119 行）。e950a41d至最终提交）：实现净减少 11,435 行（其中生产代码删除 10,214 行、新增 2,266 行，生产净减 7,948 行）已知限制与后续范围
needs_full_matrix本 PR 的验收结论限定为接入适配、执行链与权限模型的重构迁移，以及当前 Commit CI 的闭环收敛