Skip to content

fix(codex): accept bounded collaboration events - #28

Merged
Dhi13man merged 36 commits into
mainfrom
feature/codex-collaboration-protocol
Aug 7, 2026
Merged

fix(codex): accept bounded collaboration events#28
Dhi13man merged 36 commits into
mainfrom
feature/codex-collaboration-protocol

Conversation

@Dhi13man

@Dhi13man Dhi13man commented Aug 3, 2026

Copy link
Copy Markdown
Owner

Why

Codex app-server 0.146.0 emits collaboration lifecycle events when an evaluator turn delegates work. Skivolve rejected those valid child-thread events as foreign traffic, so otherwise valid provider runs could fail even when the root turn completed correctly. Runtime cleanup also needed to tolerate unreadable tool-created directories without following attacker-controlled symlinks.

Design context

flowchart TD
 Root[Root Codex turn] --> Item[Receive collaboration item]
 Item --> Validate{Schema, owner, and lifecycle valid?}
 Validate -->|No| Reject[Reject before state mutation]
 Validate -->|Yes| Track[Track bounded child lifecycle]
 Track --> RootOnly[Retain root-only result and usage]
Loading

Child traffic is validated and consumed as protocol state, never promoted into the root evaluator result.

What changed

  • Validate bounded collaboration notifications while keeping child messages, errors, and usage out of the root result.
  • Bind collaboration items to exact owners, receivers, lifecycle state, and bounded terminal history; reject reuse, malformed schemas, late traffic, and cross-thread events before state mutation.
  • Keep successful input/resume receivers outstanding until fresh child lifecycle evidence proves them terminal.
  • Preserve schema-valid retrying turn errors while terminal or malformed notifications remain fail-closed and redacted.
  • Convert provider deadlines into typed timeouts only after every runtime finalizer succeeds; cleanup failure retains precedence.
  • Clean evaluator runtime directories iteratively by descriptor with no-follow and identity checks, including unreadable and deeply nested tool-created trees.
  • Refresh the executable, runtime-bundle, and generated-protocol lock to Codex CLI 0.146.0.
  • Add focused adversarial protocol and cleanup coverage plus an Unreleased changelog entry.

Evidence

  • Exact head 21b42f2: Ruff, formatting, compile, duplicate-key JSON validation, site validation, Prettier, Markdownlint, and diff hygiene pass.
  • Exact locked Codex 0.146.0 executable SHA-256 2e863156ed35ecc5253b1e2f907a9143077b9f7cb51942070c61996471ff6e04: protocol regeneration, runtime-bundle attestation, and the real locked-producer test pass.
  • Local suites: 128 app-server tests, 417 harness tests, 74 comparator tests, and 31 shared-verifier tests pass.
  • Calibration: all 10 software cases and all 7 testing cases pass; valid variants are accepted and every bad/adversarial variant is rejected.
  • Packaging: wheel and sdist build without isolation, pass Twine and packaged-resource inspection, install in a clean virtual environment, and pass every CLI smoke test.
  • GitHub: all 11 exact-head CI, CodeQL, dependency, fuzz, package, and security checks pass; no unresolved review thread remains.
  • Two independent holistic reviews were consolidated. Codex exact-head re-review was requested again and returned its account usage-limit response; no review finding remains open.

Trust and compatibility

  • Manifest, corpus, comparator, provider, result, and package boundaries were considered.
  • Source bindings, isolation, spend accounting, blinding, and release authority remain intact; the change is confined to pinned provider transport handling and runtime cleanup.
  • Adversarial tests cover the changed protocol and filesystem trust boundaries.
  • The changelog records the user-visible provider fix.
  • No compatibility shim, legacy branch, credentials, private holdout content, live results, caches, or host-specific paths are committed.

Review guide

Start with the collaboration state machine in skivolve/codex_app_server.py, then the ownership, receiver, mutation-order, retry, timeout, bounded-memory, and cleanup tests in tests/test_codex_app_server.py. The cleanup code retains root descriptors and uses no-follow opens plus inode/device checks before traversal and removal.

Generated with Dhiman's Agentic Suite

@Dhi13man Dhi13man added the bug Something isn't working label Aug 3, 2026
@Dhi13man Dhi13man self-assigned this Aug 3, 2026
Dhi13man and others added 3 commits August 3, 2026 16:16
Bring the published PR branch onto current main without rewriting its qualified collaboration milestones.

Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
@Dhi13man

Dhi13man commented Aug 5, 2026

Copy link
Copy Markdown
Owner Author

@codex can you review this PR?

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4879268479

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread skivolve/codex_app_server.py
Dhi13man and others added 2 commits August 5, 2026 12:29
Regenerate binary, runtime-bundle, and protocol-schema attestations against the current standalone Codex release.

Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
@Dhi13man

Dhi13man commented Aug 6, 2026

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 62395d0af0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread skivolve/codex_app_server.py Outdated
Comment thread skivolve/codex_app_server.py Outdated
Reject drift from pinned model settings while keeping child failures scoped to their own turns.

Refs #28

Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
@Dhi13man

Dhi13man commented Aug 6, 2026

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 154143ca41

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread skivolve/codex_app_server.py
Keep message mandatory while accepting the protocol-defined optional error metadata. Cover omitted optional fields without weakening shape or scope validation.

Refs #28

Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
@Dhi13man

Dhi13man commented Aug 6, 2026

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 11d84dac61

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread skivolve/codex_app_server.py
Reject multiple receivers in every spawn lifecycle state before pending or child scope changes. Preserve the exactly-one invariant for successful completion.

Refs #28

Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
@Dhi13man

Dhi13man commented Aug 6, 2026

Copy link
Copy Markdown
Owner Author

@codex review

1 similar comment
@Dhi13man

Dhi13man commented Aug 6, 2026

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 07bbd5ff22

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread skivolve/codex_app_server.py Outdated
Comment thread skivolve/codex_app_server.py
Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
@Dhi13man

Dhi13man commented Aug 6, 2026

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0c929d5f29

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread skivolve/codex_app_server.py Outdated
Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
@Dhi13man

Dhi13man commented Aug 6, 2026

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 69faddd4de

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread skivolve/codex_app_server.py
Comment thread skivolve/codex_app_server.py
@Dhi13man

Dhi13man commented Aug 6, 2026

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 3046038191

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread skivolve/codex_app_server.py
Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
@Dhi13man

Dhi13man commented Aug 6, 2026

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 44f199e6e3

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread skivolve/codex_app_server.py
Comment thread skivolve/codex_app_server.py
Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
@Dhi13man

Dhi13man commented Aug 6, 2026

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: acff621c85

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread skivolve/codex_app_server.py
Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
@Dhi13man

Dhi13man commented Aug 6, 2026

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a2fe3673a3

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread skivolve/codex_app_server.py
Comment thread skivolve/codex_app_server.py
Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
@Dhi13man

Dhi13man commented Aug 6, 2026

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5c1adc5617

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread skivolve/codex_app_server.py
Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
@Dhi13man

Dhi13man commented Aug 6, 2026

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

Dhi13man and others added 2 commits August 6, 2026 10:09
Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
@Dhi13man

Dhi13man commented Aug 6, 2026

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 85c53ba203

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread skivolve/codex_app_server.py Outdated
Terminal collaboration history can accumulate model-controlled items, so retaining each raw prompt permits evaluator memory exhaustion. Store fixed-size SHA-256 digests while preserving lifecycle equality checks.

Refs #28

Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
Dhi13man added a commit that referenced this pull request Aug 6, 2026
PR #35 is stacked on #28; record the reviewed prompt-retention fix in the descendant branch without rewriting shared history.

Refs #28, #35

Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
@Dhi13man

Dhi13man commented Aug 6, 2026

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

Codex 0.146 emits partial wait completions and pre-close child states that the prior validator could reject or misclassify. Bind lifecycle fields to their starts, preserve bounded child evidence, and make runtime cleanup iterative so valid deep trees cannot strand residue.

Co-Authored-By: Dhiman's Agentic Suite <dhiman.seal@hotmail.com>
@Dhi13man

Dhi13man commented Aug 7, 2026

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

@Dhi13man
Dhi13man merged commit f29a972 into main Aug 7, 2026
11 checks passed
@Dhi13man
Dhi13man deleted the feature/codex-collaboration-protocol branch August 7, 2026 02:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant