Repository navigation
Conversation
Keep Chief proposals separate from Maintainer and Owner approval. Preserve retired role context and room history without reassigning existing Tasks or inferring worker exit.
Keep exact latest Task-role native bindings and context parts, refuse unknown exit and missing handles, and use committed role catalogs when pinning execution rights. Preserve original Workflow lifecycle and legacy DAG workspace behavior.
Keep logical identity separate from artifact responsibility and SDK read-only policy. Preserve retired active claims while blocking new work until Chief selects an active target.
Preserve structured handoff identity through native delivery and restore archived context only after committed activation. Guard the actual DSH single-resource return path and keep historical implementation evidence outside the bounded active policy.
…tted SQLite snapshots
…nd committed events
Keep original identities and histories while requiring committed legacy admission and current Project access. Preserve explicit Workflow delivery through the exact controlling Attempt and fence new state across storage rollback.
This was referenced Nov 3, 2026
Base automatically changed from
feat/2185-service-contracts
to
delivery/ai-centric-development-service
November 3, 2026 09:15
Collaborator
Author
zy95-12
marked this pull request as ready for review
November 3, 2026 09:15
zy95-12
merged commit Nov 3, 2026
362cb79
into
delivery/ai-centric-development-service
2 of 7 checks passed
zy95-12
added a commit
that referenced
this pull request
Nov 3, 2026
…2289) Written-by: Codex Replace the snapshot-specific Bash/Python setup with persistent `init`, `start`, `login`, native request, v1 command/query and SSE CLI operations. Compose the original DSH profile/host, all five FlyBot packages and existing restricted HTTP/SSE gateway; preserve native UI capabilities and keep raw Harness credentials private. Actual Store writability is required before public readiness, and init refuses an active launcher. Rewrite the concise Chinese READMEs and object/API/operations guides around the actual 24 queries and 26 commands, permissions, durable receipts, paging, events and recovery. Preserve original English/Chinese guides and their DSH pin assertions separately. Final HTTP acceptance also repairs external safe-proposal impact/scope loss before human-approved canonical publication. Refs #2189; related integration #2183. Stacked on #2285 / feat/2186-native-compatibility. No frontend/control-plane implementation, main merge, existing-service restart or production deployment. Validation at d720f8c: - Full `TZ=UTC npm run verify`: 4,726 passed, 0 failed/skipped. Includes six actual pinned DSH runtime cases plus the production-entry DSH/SQLite integration using deterministic inference. Only test-child DAC override/read-search capabilities are dropped for inherited root chmod tests. - Production-entry regression covers native CLI authentication, canonical Task persistence, completed private consultation without extra Tasks, safe FBA proposal/human approval, watch publication/token revoke, scoped SSE/member revoke, restart/exact receipt replay, active-init refusal and unsupported-storage startup refusal. Lost proposal impact is red before the field-adapter fix and green after it. - Separate fresh-home normal installer/start/login/Project/Task/stop/restart/replay acceptance: 9 checks at c5be4fe. No offline dependency fixture in that installation check and no model work requested there; later changes are history/docs and runtime-probe checkpoint timing. - JSON examples, Bash syntax, local links and the complete command/query tables are checked against source. Memory, architecture/owned subsystem docs and changelog updated; source mirrors regenerated. Original384k policy budget/source set retained, historical checkpoints archived verbatim. SQL native probe waits through the committed preparing reservation and preserves all running/protocol/context/lease/candidate assertions. - Owned validation services stopped and temporary homes cleaned. Pairing self-check complete; no independent Reviewer verdict or coverage-percentage claim. Not run: a complete real-provider Dev/Tester/Reviewer/Chief development loop on this new entry, remote HTTPS, browser/desktop acceptance, production migration/rollout or independent review. Earlier real Codex evidence remains attributed to its original source. Keep Draft until review and remaining operational acceptance; these limitations are explicit in the guides.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Written-by: Codex
Preserve personal Chief/Bots, native groups and original Task/Workflow/Session identities while closing old Project-task admission bypasses. Capture legacy work once with committed Effects proof; unknown post-cutover rows stay held. Keep explicit legacy rework continuations and exact-current-Attempt Workflow dispatch, while canonical Tasks remain under Chief/Handoff control.
Original Project-associated groups stay available through the same personal channel with both group history ACL and current Project access. Queries cannot import private history. Add a bounded scoped compatibility diagnostic and capability/entrypoint inventory. Physical JSON v4 fences new contracts across SQLite import/export/rollback and journal snapshots; same-version storage rollback cannot replay committed actions or authorize an old-code downgrade.
Fixes #2186. Stacked on #2250 / feat/2185-service-contracts. No frontend/control-plane changes, new executor/store, main merge, production rollout or service restart.
Validation at a966241:
Not run: production data migration, browser/desktop acceptance, external-vendor product adapter or real-provider complete development loop. Existing separate real Codex continuation evidence is not attributed to this new head. Remains Draft; final real backend packaging and README/API refresh follow in #2189.