Skip to content

feat(cli): complete observation and explicit-key API workflows - #6545

Merged
lidge-jun merged 29 commits into
devfrom
codex/cli-parity-observation-api
Oct 4, 2026
Merged

lidge-jun merged 29 commits into
devfrom
codex/cli-parity-observation-api

Conversation

@lidge-jun

@lidge-jun lidge-jun commented Oct 3, 2026 •

Copy link
Copy Markdown
Owner

Summary

  • Complete the terminal observation workflows: log updates and versioned window events, bounded dashboard-style log selection, model-row usage search, saved companion filters, per-key quota observations, injection following, timeline filters, authenticated health and acknowledged key-scoped usage.
  • Add key rename and explicit-stdin data-key model/audio operations. Preserve the existing management/data-key/connected-client authority separation, safe output, cancellation and partial-result exits. Selected-key probes never substitute another credential.
  • Synchronize 328 declared capabilities, the shipped operating skill, public CLI docs and structure contracts. The GUI task inventory retains 178 rows: 163 eligible canonical task families, one account-selection alias and fourteen documented consent/native/presentation exclusions. Five rows retain human-terminal-only handoffs; one has mixed authority. These counts describe bounded task-family coverage, not unrestricted automation of every GUI affordance.

Manual stack: #6526 → #6528 → #6535 → #6539 → #6542 → this PR. Depends on #6542; review this layer only. Each branch contains its current parent and pinned dev 0818ea1812a028e1c14cd0b0511b44863407bc52. No native stack registration, PR merge, release or deployment.

Verification

Stack refresh onto dev (lane L1, 2026-10-04; re-refreshed 2026-10-05 onto dev df61d03ecc), head e95089386af389ae0e36f3c632b5dc3ce7de3588. Merged the refreshed parent; clean merge. With #6583 the test-layout fixture is 1126 lines at this head (it was 2002 against current dev without it), and every capped file the stack touches stays at or under its cap. Independent security review (gpt-6.1-sol): PASS at 9ff863704d (explicit keys only via bounded piped stdin, argv secrets rejected, redirects refused, no admission bypass, management auth retained); own diff confirmed unchanged after the refresh at 85aaeafdad; the later merged delta only carries the #6539 pool fixes, re-reviewed PASS. Local checks at this head: bun scripts/file-size-ratchet.ts (pass; test-layout fixture now well under the 2000-line threshold after #6583), tests/test-layout.test.ts + tests/test-layout-tooling.test.ts (pass), bun run typecheck (pass), bun run structure:check (pass); on the stack top additionally skill:surface:check, privacy:scan and the skill/capability/ratchet test files (all pass). The full local suite was intentionally not run per maintainer instruction; broad and platform coverage is left to exact-head hosted CI: Cross-platform CI run 37217206368 (success at this head). Earlier-head CI results below are historical. Later dev moves (#6576, #6578, #6405, #6486, #6512, #6572, #6585, #6586, #6564) were merged in the same way; test-layout fixture conflicts were resolved as key unions, and this layer now packs only its own new entries in scripts/test-layout/layout.json four per line (JSON content unchanged; the file stays clear of the 2000-line threshold for unbaselined files once the stack lands).

  • Exact commands, source identities and overlapping scopes are recorded in devlog/_fin/261003_cli_gui_parity/072_observation_verification.md, 084_acceptance_evidence.md, 085_residual_verification.md and 086_review_reconciliation.md. Historical failed runs remain identified as failures.
  • Integrated residual/compatibility tests passed: 193 tests / 1473 assertions. Repaired help/generator/provider tests passed after cascading: 197 tests / 2843 assertions. Additional real owner tests cover Lab reads, Antigravity import, Kiro login/cancel and connected-client sync; counts overlap and are not summed.
  • Independent functional and security reviews passed after actionable recovery text, nested help discovery, table rendering, completed-provider validation and connectivity exit-code corrections. The semantic ledger review verifies actual GUI/CLI/owner joins rather than command-name or hash presence alone.
  • Final archived-head source receipt passed: 663 tests / 8136 assertions across 26 files, typecheck, generated skill surface, structure ownership, privacy, file-size and both test-layout guards. The task-ledger validator and all nine negative cases passed. The fixture compaction changes whitespace only; parsed values, key order and non-whitespace token bytes remain identical. Docs build: 561 pages / 78,073 internal links.
  • Real root-CLI QA uses isolated homes and controlled transports, with stdout/stderr/exit/request/file-state and teardown evidence. Separate real-handler, DTO and native socket tests establish the owner contracts. No live user credentials, provider requests, microphone or installed-app mutations were used. Frozen archived-head CLI QA passed 73/73 invocations in 15 groups, including 37 negative cases; all owned process/sandbox/stream/signal teardown checks passed and source identity stayed unchanged. The QA validator emitted its final receipt.
  • A full local suite was disproportionate across concurrent worktrees. Focused direct/indirect consumers and owner tests supply local proof; all four hosted test shards and aggregate CI are required for this exact head. Missing, skipped, cancelled or older-head runs are not passing evidence. The first archived-head run 37160606595 found the stale /api/usage capability roster expectation. Its exact ordered list now includes companion usage; 52 focused tests passed. The later timeline review was also corrected: returned windows must match the request-time bucket or the immediate successor after an observed rollover. Independent 32-case review and five actual root-CLI window cases passed. Current-head hosted CI passed at 9ff8637: run 37161428468, pull_request event, attempt 1, all four test shards and aggregate ci succeeded. Optional platform jobs skipped by scope are not counted as executed.

Current head: 9ff863704d8247a66f56e941569a5c4976c60054.

Checklist

  • Scope stays focused and avoids unrelated cleanup.
  • Docs or release notes were updated when needed.
  • Security-sensitive changes were reviewed for secrets, auth, and unsafe defaults.

All six current manual-stack heads passed their applicable CI. The task remains open for review; no PR was merged.

@coderabbitai

coderabbitai Bot commented Oct 3, 2026 •

Copy link
Copy Markdown
Contributor

Review in Change Stack →

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration
  • Configuration used: Repository: lidge-jun/opencodex/.coderabbit.yaml
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: efb86e52-5b68-4b03-8406-198a4d59d4cb
📥 Commits

Reviewing files that changed from the base of the PR and between f14e3a3 and 5dc1ad1.

📒 Files selected for processing (112)
  • devlog/_fin/261003_cli_gui_parity/000_plan.md
  • devlog/_fin/261003_cli_gui_parity/002_terminal_ux.md
  • devlog/_fin/261003_cli_gui_parity/003_verification_strategy.md
  • devlog/_fin/261003_cli_gui_parity/004_settings_coverage.md
  • devlog/_fin/261003_cli_gui_parity/005_operations_coverage.md
  • devlog/_fin/261003_cli_gui_parity/006_target_contracts.md
  • devlog/_fin/261003_cli_gui_parity/007_architecture_decisions.md
  • devlog/_fin/261003_cli_gui_parity/008_task_ledger.json
  • devlog/_fin/261003_cli_gui_parity/009_roadmap_lock.md
  • devlog/_fin/261003_cli_gui_parity/010_discovery_foundation.md
  • devlog/_fin/261003_cli_gui_parity/011_foundation_revalidation.md
  • devlog/_fin/261003_cli_gui_parity/012_foundation_verification.md
  • devlog/_fin/261003_cli_gui_parity/020_existing_workflow_discovery.md
  • devlog/_fin/261003_cli_gui_parity/021_discovery_revalidation.md
  • devlog/_fin/261003_cli_gui_parity/022_discovery_verification.md
  • devlog/_fin/261003_cli_gui_parity/030_provider_management.md
  • devlog/_fin/261003_cli_gui_parity/031_provider_revalidation.md
  • devlog/_fin/261003_cli_gui_parity/032_provider_verification.md
  • devlog/_fin/261003_cli_gui_parity/040_models_routing.md
  • devlog/_fin/261003_cli_gui_parity/041_models_revalidation.md
  • devlog/_fin/261003_cli_gui_parity/042_models_verification.md
  • devlog/_fin/261003_cli_gui_parity/050_accounts_runtime_settings.md
  • devlog/_fin/261003_cli_gui_parity/051_accounts_revalidation.md
  • devlog/_fin/261003_cli_gui_parity/052_accounts_verification.md
  • devlog/_fin/261003_cli_gui_parity/060_integrations_maintenance.md
  • devlog/_fin/261003_cli_gui_parity/061_integrations_revalidation.md
  • devlog/_fin/261003_cli_gui_parity/062_integrations_verification.md
  • devlog/_fin/261003_cli_gui_parity/070_observation_api_tools.md
  • devlog/_fin/261003_cli_gui_parity/071_observation_revalidation.md
  • devlog/_fin/261003_cli_gui_parity/072_observation_verification.md
  • devlog/_fin/261003_cli_gui_parity/080_acceptance_publication.md
  • devlog/_fin/261003_cli_gui_parity/081_acceptance_revalidation.md
  • devlog/_fin/261003_cli_gui_parity/082_acceptance_contract.md
  • devlog/_fin/261003_cli_gui_parity/083_residual_read_workflows.md
  • devlog/_fin/261003_cli_gui_parity/084_acceptance_evidence.md
  • devlog/_fin/261003_cli_gui_parity/085_residual_verification.md
  • devlog/_fin/261003_cli_gui_parity/086_review_reconciliation.md
  • devlog/_fin/261003_cli_gui_parity/090_acceptance_closure.md
  • devlog/_plan/261003_cli_gui_parity/008_task_ledger.json
  • devlog/_plan/261003_cli_gui_parity/070_observation_api_tools.md
  • docs-site/src/content/docs/fr/reference/cli/agents.md
  • docs-site/src/content/docs/ja/reference/cli/agents.md
  • docs-site/src/content/docs/ko/reference/cli/agents.md
  • docs-site/src/content/docs/ko/reference/cli/providers-accounts.md
  • docs-site/src/content/docs/reference/cli.md
  • docs-site/src/content/docs/reference/cli/agents.md
  • docs-site/src/content/docs/reference/cli/lifecycle.md
  • docs-site/src/content/docs/reference/cli/providers-accounts.md
  • docs-site/src/content/docs/ru/reference/cli/agents.md
  • docs-site/src/content/docs/tr/reference/cli/agents.md
  • docs-site/src/content/docs/zh-cn/reference/cli/agents.md
  • docs-site/src/content/docs/zh-tw/reference/cli/agents.md
  • scripts/test-layout/layout.json
  • skills/ocx/SKILL.md
  • skills/ocx/references/01_management_surface.md
  • skills/ocx/references/01_surface_access-remote.md
  • skills/ocx/references/01_surface_accounts.md
  • skills/ocx/references/01_surface_observe-system.md
  • skills/ocx/references/02_json_shapes.md
  • skills/ocx/references/03_recipes.md
  • skills/ocx/references/04_failure_semantics.md
  • skills/ocx/references/05_remote_hub.md
  • src/cli/access-audio-input.ts
  • src/cli/access-audio-live.ts
  • src/cli/access-audio.ts
  • src/cli/access-data-client.ts
  • src/cli/access-data-plane.ts
  • src/cli/access-data-response.ts
  • src/cli/access.ts
  • src/cli/account-api.ts
  • src/cli/account-key-quota.ts
  • src/cli/account.ts
  • src/cli/capabilities-access-remote.ts
  • src/cli/capabilities-base.ts
  • src/cli/capabilities-observe-system.ts
  • src/cli/companion-timeline.ts
  • src/cli/companion-usage.ts
  • src/cli/companion.ts
  • src/cli/dispatch.ts
  • src/cli/injection-follow.ts
  • src/cli/log-follow.ts
  • src/cli/log-view-filter.ts
  • src/cli/observe-stream.ts
  • src/cli/observe.ts
  • src/cli/registry.ts
  • src/cli/runtime-api.ts
  • src/cli/system-command.ts
  • src/cli/usage-model-search.ts
  • src/cli/usage-report.ts
  • src/server/management/route-registry.ts
  • structure/cli-management.md
  • structure/runtime.md
  • tests/cli/cli-access-audio-live.test.ts
  • tests/cli/cli-access-audio.test.ts
  • tests/cli/cli-access-data-plane.test.ts
  • tests/cli/cli-access-key-guard.test.ts
  • tests/cli/cli-access-rename.test.ts
  • tests/cli/cli-account-key-quota.test.ts
  • tests/cli/cli-capabilities.test.ts
  • tests/cli/cli-capability-access-workflows.test.ts
  • tests/cli/cli-companion-timeline.test.ts
  • tests/cli/cli-companion-usage.test.ts
  • tests/cli/cli-injection-follow.test.ts
  • tests/cli/cli-log-follow.test.ts
  • tests/cli/cli-log-view-filter.test.ts
  • tests/cli/cli-observe-snapshot.test.ts
  • tests/cli/cli-system-health.test.ts
  • tests/cli/cli-usage-model-search.test.ts
  • tests/cli/cli-usage-report.test.ts
  • tests/cli/cli-usage-scope.test.ts
  • tests/fixtures/test-layout-expected.json
  • tests/server/server-cli-key-probe-admission.test.ts
 ___________________________________________________________________________________________________
< Test your software, or your users will. Test ruthlessly. Don't make your users find bugs for you. >
 ---------------------------------------------------------------------------------------------------
  \
   \   (\__/)
       (•ㅅ•)
       /   づ
✨ Finishing Touches
📝 Generate docstrings
  • Commit to this branch
  • Create a new PR
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Oct 3, 2026

Copy link
Copy Markdown
Contributor

✅ Deterministic PR hygiene checks passed.

@github-actions github-actions Bot added the enhancement New feature or request label Oct 3, 2026
@lidge-jun
lidge-jun marked this pull request as ready for review October 3, 2026 23:06
@lidge-jun
lidge-jun requested a review from Ingwannu as a code owner October 3, 2026 23:06
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 3, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-03T23:12:11.659995Z 16f27e2 Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 16f27e24f8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread src/cli/companion-timeline.ts Outdated
@Ingwannu

Ingwannu commented Oct 4, 2026 •

Copy link
Copy Markdown
Owner

Current disposition (2026-10-04, 19:23 UTC): the owner has now merged all six CLI layers, ending at dev dadc2328f107daf08cac1e99530df80ab19e0808. These were lidge-jun's integrations, not mine. Some final integration heads differ from the historical branch heads below; the earlier CI table must not be relabelled as validation of those different commits.

The outstanding D2/CLI decoder compatibility issue has moved to the still-open #6597: changes requested. Current dev's decoder is unchanged from the exercised f108061 file and does not accept the new structured refusal fields. Please fix that constrained consumer contract in the open PR before it lands. This is not a released-dev D2 failure claim, and none of this records a blanket semantic or independent-boundary approval by me.


Historical checkpoints:
Latest checkpoint (2026-10-04, 19:07 UTC): not a blanket approval.

The owner merged #6526 (e65d30c2e09da8efef5cf32d792361e2eeb2b0a5) as dev 5c645e398a1cc457fc805669e88e59935705da29. This was not my integration. #6528 is now retargeted to dev; the remaining parent links are still open.

Cross-platform CI has completed successfully at these exact branch heads:

These receipts do not complete my outstanding semantic review or authorize a required independent-boundary review waiver. Retargeted/combined diffs still need their own review.

One new combined-change issue is now reproduced, not merely a checklist concern: #6542's closed CLI decoder rejects #6597's structured superseded_store fields. The DSH path-vocabulary case passes, but a valid refusal plus supersededReason:"missing-store" / missingStoreDocument:"[]" fails. See the detailed #6542 review and the coordination review on #6597. Please resolve the constrained decoder contract before that union lands; this is not a released-dev failure claim. No scan, workflow authorization, sponsorship or merge performed here.


Earlier checkpoints below are historical:
Latest completed-CI checkpoint (2026-10-04): #6526 de7c7bb -> #6528 c28c84e -> #6535 604044d -> #6539 a5d3554 -> #6542 5e829cc -> #6545 e468022. Cross-platform CI37221609539 /37221609730 /37221609742 /37221611124 /37221610516 /37221610120 all completed success; cancelled duplicates are excluded. Dev subsequently advanced to7cf1b762 through the owner's#6556 integration, and GitHub reports a conflict on the root#6526. Author owns resolving the union and obtaining new head-bound verification if it changes.

This is CI follow-up, not completion of my substantive CLI management/data-key/consent review. No blanket approval, independent-review waiver, scan or integration from me. After a parent lands, recheck the child target and resulting diff.


Earlier checkpoint (historical):

Latest stack refresh: #6526 270c33c -> #6528 24ca58e -> #6535 adf8574 -> #6539 04a639e -> #6542 b63ced6 -> #6545 b9b6b53. Current Cross-platform CI37220126973 /37220129579 /37220129931 /37220129595 /37220129675 /37220129489 is queued at this checkpoint. Cancelled duplicates are not passing receipts. The previous six successful runs below are now old-head evidence after these pushes.

The substantive CLI management/data-key/consent review remains outstanding; no blanket approval, independent review waiver, scan or integration from me. Keep the open-parent chain and recheck the child target/resulting diff after each parent lands.


Earlier checkpoint (historical):

Latest exact-head stack checkpoint (2026-10-04): #6526 e3ff9fd -> #6528 697cc9e -> #6535 7d23f8a -> #6539 f812563 -> #6542 b6cd273 -> #6545 e950893. Cross-platform CI respectively 37217206971 /37217207354 /37217206834 /37217207247 /37217207353 /37217206368 now all completed success. The cancelled duplicate runs on these heads are not passing receipts, and their cancelled jobs do not establish a new runtime regression.

This completes the CI-status follow-up, not my substantive semantic review of the large CLI stack. That review remains outstanding; no approval, independent boundary-review waiver, scan, live CLI/account operation or integration performed. Preserve the open-parent chain and recheck the child target/resulting diff after a parent lands.


Earlier checkpoint (historical):

Latest stack checkpoint: #6526 4bcd561 → #6528 c08bbca → #6535 8a6dc57 → #6539 95868c7 → #6542 ea4b1c6 → #6545 7b1b7a4 now carries dev dabaed4 through the open-parent chain. Current-head CI37215554618 /37215553610 /37215552563 /37215553740 /37215553258 /37215553269 is queued or in progress at this checkpoint.

The previous stack's CI37213715031 /37213715562 /37213715527 /37213716123 /37213715917 /37213716090 all completed success, but these are old-head receipts after the new refresh. Cancelled duplicates are not passes. The substantive semantic review of CLI management/data-key/consent workflows remains outstanding; no blanket approval or required independent review waiver. After parent integration, recheck child target/diff and the combined help/config/fixture contracts.


Historical checkpoint:
Latest stack refresh checkpoint: #6526 6467207 → #6528 598b5c8 → #6535 dd646e4 → #6539 4fc2914 → #6542 292535a → #6545 69e42d1 now carries dev 815b1f6 through the open-parent chain. Exact-head CI runs 37213715031 / 37213715562 / 37213715527 / 37213716123 / 37213715917 / 37213716090 are queued at this observation. The successful runs in the earlier checkpoint below are OLD-HEAD evidence after these new pushes, not current passing CI. Cancelled duplicates remain excluded.

The substantial semantic review is still outstanding; no approval or independent boundary-review waiver has been issued by me. Refresh the head-bound verification and use the new completed runs when available; after parent integration, recheck the retargeted child diff/union.


Historical intake checkpoint:
Stack intake checkpoint, not approval: I verified the current six open-parent links, complete inventories (93/44/58/63/53/112 changed files respectively), latest review-thread state, and exact-head hosted CI for #6526 → #6528 → #6535 → #6539 → #6542 → #6545. Completed Cross-platform CI runs are respectively 37209715142, 37209715187, 37209716752, 37210667012, 37210666027 and 37210667979. Cancelled duplicates are not counted as successes. No unresolved review threads were returned at this checkpoint.

Current #6545 head is 146994d, base fad6f66 (open #6542). The final Current head: 9ff863704d... line and older Current-head hosted CI paragraphs are historical now; please label them that way, keeping the lane-refresh receipt current. After each parent lands/closes, retarget its child to dev and validate the resulting diff/union, including capability/help contracts and bookkeeping/DTO reconciliation. The latest dev has advanced again since the refresh.

Green CI and author-recorded independent-review receipts do not mean I have completed semantic review of all new CLI management/data-key/consent workflows. That substantive review remains outstanding; no blanket approval, boundary-review waiver, fresh scan, live CLI/account operation, integration or deployment is being claimed.

…li-parity-observation-api

Resolve test-layout registry conflict as a union: both sides only added entries.
Four entries per line for the entries this layer adds, leaving every pre-existing line untouched. scripts/test-layout/layout.json sits near the 2000-line unbaselined threshold once the whole stack lands.
Base automatically changed from codex/cli-parity-integrations-maintenance to dev October 4, 2026 19:09
@lidge-jun

Copy link
Copy Markdown
Owner Author

Maintainer integration (lidge-jun, dev only) — 2026-10-04 landing train, lane L1 stack.

  • Head: 5dc1ad1 — a tree-identical sync merge on top of 1ae0faa (merge commit of dev after the feat(cli): make existing management workflows discoverable #6526 squash / parent sync; git rev-parse <sha>^{tree} equal), so the CI evidence below covers the same content.
  • CI: Cross-platform CI run 37225570156 success at 1ae0faa.
  • Union: static check against current dev (clean merge, layout registries parse, structure-ssot and file-size ratchet pass).
  • Review: observation and explicit-key API workflows; independent sol security review PASS bound (stdin-only keys, argv secrets rejected, no redirects).
  • Landed with a merge commit (allowed by the dev ruleset) so the remaining stack stays conflict-free after the feat(cli): make existing management workflows discoverable #6526 squash.
  • Full local suite intentionally not run per maintainer instruction.
  • scripts/ci/assert-mergeable-review.sh --maintainer-integration: OK.

@lidge-jun
lidge-jun merged commit dadc232 into dev Oct 4, 2026
29 of 31 checks passed
@lidge-jun
lidge-jun deleted the codex/cli-parity-observation-api branch October 4, 2026 19:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants