feat: add codex stdio code agent session gate

This commit is contained in:
Code Queue Review
2026-05-23 13:29:22 +00:00
parent ad1383ecf7
commit f42d8d121d
20 changed files with 2105 additions and 322 deletions
+20 -10
View File
@@ -211,7 +211,10 @@ const requiredCodeAgentEvidenceTerms = Object.freeze([
"message",
"providerTrace",
"openai-responses",
"codex-stdio",
"codex-cli",
"codex-mcp-stdio-long-lived",
"repo-owned-codex-mcp-stdio-session",
"controlled-readonly-session-registry",
"not-codex-stdio",
"not-write-capable",
@@ -491,7 +494,7 @@ function runStaticSmoke() {
evidence: ["DEFAULT_API_TIMEOUT_MS=4500 for light probes", `DEFAULT_CODE_AGENT_TIMEOUT_MS=${codeAgentLongTimeoutMs}`, "sendAgentMessage passes timeoutMs"]
});
addCheck(checks, blockers, "code-agent-provider-readiness-visibility", hasCodeAgentReadinessVisibility(files), "Workbench shows provider blockers without exposing credential internals and only real completed replies can become DEV-LIVE.", {
addCheck(checks, blockers, "code-agent-provider-readiness-visibility", hasCodeAgentReadinessVisibility(files), "Workbench shows provider/stdio blockers without exposing credential internals and only long-lived Codex stdio replies can become full Code Agent completion.", {
blocker: "observability_blocker",
evidence: ["服务受阻 or legacy BLOCKED 凭证缺口", "provider_unavailable classifier", "completed -> dev-live guard", "default workspace hides credential internals"]
});
@@ -506,7 +509,7 @@ function runStaticSmoke() {
evidence: ["rail-button min-width/min-height", "state-tag wrapping", "side-tab stable labels", "mobile message evidence column"]
});
addCheck(checks, blockers, "code-agent-completed-evidence-visible", hasCodeAgentCompletedEvidenceVisibility(files), "Completed Code Agent replies expose provider/model/trace/conversation evidence and reject echo/mock/stub completions.", {
addCheck(checks, blockers, "code-agent-completed-evidence-visible", hasCodeAgentCompletedEvidenceVisibility(files), "Completed full Code Agent replies expose Codex stdio provider/model/trace/conversation/session evidence and reject echo/mock/stub, OpenAI fallback, and read-only runner completions.", {
blocker: "observability_blocker",
evidence: requiredCodeAgentEvidenceTerms
});
@@ -2228,7 +2231,7 @@ function hasCodeAgentChatContract({ html, app }) {
);
}
function hasCodeAgentReadinessVisibility({ html, app }) {
function hasCodeAgentReadinessVisibility({ html, app, liveStatus = "" }) {
const source = `${html}\n${app}`;
const userFacingBodies = [
functionBody(app, "codeAgentStatusMessage"),
@@ -2256,6 +2259,9 @@ function hasCodeAgentReadinessVisibility({ html, app }) {
/isRealCompletedChatMessage/u.test(app) &&
/isRealCompletedChatResult/u.test(app) &&
/hasRealCodeAgentEvidence/u.test(app) &&
/codeAgentBlockerDetail/u.test(app) &&
/codex_stdio_blocked_readonly_available/u.test(liveStatus) &&
/codex_stdio_supervisor_disabled/u.test(app) &&
!/status === "failed" \? "dev-live"/u.test(app) &&
!/tone:\s*state\.conversationId\s*\?\s*"dev-live"/u.test(app) &&
!/provider_unavailable[\s\S]{0,120}tone-[\w-]*dev-live/iu.test(source) &&
@@ -2297,14 +2303,18 @@ function hasCodeAgentCompletedEvidenceVisibility({ app }) {
/isTrustedCodeAgentProvider\(value\?\.provider\)/u.test(realEvidenceBody) &&
/isCodexRunnerCapableEvidence\(value\)/u.test(realEvidenceBody) &&
/CODEX_RUNNER_CAPABLE_PROVIDERS/u.test(app) &&
/controlled-readonly-session-registry/u.test(runnerEvidenceBody) &&
/read-only-session-tools/u.test(runnerEvidenceBody) &&
/CODEX_READONLY_PARTIAL_PROVIDERS/u.test(app) &&
/codex-mcp-stdio-long-lived/u.test(runnerEvidenceBody) &&
/repo-owned-codex-mcp-stdio-session/u.test(runnerEvidenceBody) &&
/long-lived-codex-stdio-session/u.test(runnerEvidenceBody) &&
/isReadOnlyRunnerPartialEvidence/u.test(app) &&
/isTextFallbackChatResult/u.test(app) &&
/value\?\.session\?\.status === "idle"/u.test(runnerEvidenceBody) &&
/value\?\.longLivedSessionGate\?\.status === "blocked"/u.test(runnerEvidenceBody) &&
/not-codex-stdio/u.test(runnerEvidenceBody) &&
/value\?\.runner\?\.codexStdio === false/u.test(runnerEvidenceBody) &&
/value\?\.runner\?\.writeCapable === false/u.test(runnerEvidenceBody) &&
/value\?\.runner\?\.durableSession === false/u.test(runnerEvidenceBody) &&
/value\?\.longLivedSessionGate\?\.status === "pass"/u.test(runnerEvidenceBody) &&
/value\?\.session\?\.codexStdio === true/u.test(runnerEvidenceBody) &&
/value\?\.runner\?\.codexStdio === true/u.test(runnerEvidenceBody) &&
/value\?\.runner\?\.writeCapable === true/u.test(runnerEvidenceBody) &&
/value\?\.runner\?\.durableSession === true/u.test(runnerEvidenceBody) &&
/TRUSTED_CODE_AGENT_PROVIDERS/u.test(app) &&
/UNTRUSTED_CODE_AGENT_PROVIDER_PATTERN/u.test(realEvidenceBody) &&
/value\?\.conversationId \|\| value\?\.sessionId/u.test(realEvidenceBody) &&