Skip to content

feat(codex): enable verified native conversation rewind #533

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
rynfar merged 3 commits into from
Sep 12, 2026
Merged

feat(codex): enable verified native conversation rewind #533

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
bf719a7
feat(codex): verify native conversation snapshots for exact rollback
rynfar Sep 12, 2026
022b5eb
docs(codex): record exact rewind eligibility and native limits
rynfar Sep 12, 2026
f2b305d
fix(codex): keep native history size limit private
rynfar Sep 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 8 additions & 7 deletions .agents/upstream-review.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -120,13 +120,14 @@ All four sources in the exact range are accounted for in [#516](https://github.c

The maintainer explicitly reopened the four remaining functional exceptions on 2026-09-12, superseding the old earliest-check dates.

| Group | Sources | Outcome and remaining scope | Pylon PR / verification |
| ---------------------------------------- | -------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Sidebar project scope in search row | `d1d15c67f4a5fb82fd8d5e01e5e3b288296789c3` | Adopted with Pylon environment identity, narrow-layout scope choice and keyboard accessibility retained. No excluded behavior. | [#527](https://github.com/pylon-code/pylon/pull/527); independent review, 196 focused tests, web types and all ten final-head CI jobs. |
| DEF-7: anonymous macOS previews | `33b650a5b3b27382b35d2182dec6b22438c3da56` (#8243); Pylon #111 and `9d112329e` | Closed. Public unsigned previews require explicit `preview:mac` opt-in on same-repository PRs. Read-only builds feed trusted publication and cleanup; Pylon Alpha identity and production updater isolation remain. No preview was published during implementation. | [#528](https://github.com/pylon-code/pylon/pull/528), with trusted helper loading fixed in [#532](https://github.com/pylon-code/pylon/pull/532); independent review, helper/loader regressions, Actionlint and final-head CI. Actual publication/cleanup workflow verification is tracked in #526. |
| DEF-16: live Claude model quota windows | `19d8ab2ae9fc562ee7b216a0d72903fbfafa9572` (#9507) | Closed through bounded cached OAuth reconciliation after unscoped native hints. Named windows retain their account identity, timestamps and 30-minute retention; generation/token fences reject retired instances and switched accounts. No guessed model mapping or duplicate SDK probe. | [#530](https://github.com/pylon-code/pylon/pull/530); independent review, quota/registry/retention/ingestion regressions, server types and all ten final-head CI jobs. |
| Mobile Antigravity catalog and admission | `06336460c9988f29c71e839c4c9c840c4552e077`, `d487dfbf46be344e818725be70ee04be2436bfb4` | Closes #479's mobile exception. Account-owned defaults/aliases, unavailable saved choices, unknown-auth saved sends, bounded targeted catalog discovery at durable dispatch and post-await validation preserve account binding and queued content. No remaining requested catalog behavior. | [#529](https://github.com/pylon-code/pylon/pull/529); independent review, 140 focused tests, mobile types and all ten final-head CI jobs. Native rendered/live-account verification is not claimed. |
| OpenCode exact rollback | `fd5553f1afcef4f410a067687faa991743b5034c`, `efccda9ac9230db22b36990cffabdad218fa41b0` | Extends #513 with immutable native forks, exact idle source/target proof, idempotent selection, original-source compensation and durable restart recovery. Historical checkpoints lacking a proved snapshot, experimental native plan-file mode and externally managed servers with unobservable runtime flags remain unavailable for exact rewind; ordinary plan/history/resume stay usable. Codex and Claude portions remain in #526. | [#531](https://github.com/pylon-code/pylon/pull/531); independent adapter/service review, focused integration tests and isolated installed OpenCode 1.18.29 native fork verification. |
| Group | Sources | Outcome and remaining scope | Pylon PR / verification |
| ---------------------------------------- | -------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Sidebar project scope in search row | `d1d15c67f4a5fb82fd8d5e01e5e3b288296789c3` | Adopted with Pylon environment identity, narrow-layout scope choice and keyboard accessibility retained. No excluded behavior. | [#527](https://github.com/pylon-code/pylon/pull/527); independent review, 196 focused tests, web types and all ten final-head CI jobs. |
| DEF-7: anonymous macOS previews | `33b650a5b3b27382b35d2182dec6b22438c3da56` (#8243); Pylon #111 and `9d112329e` | Closed. Public unsigned previews require explicit `preview:mac` opt-in on same-repository PRs. Read-only builds feed trusted publication and cleanup; Pylon Alpha identity and production updater isolation remain. No preview was published during implementation. | [#528](https://github.com/pylon-code/pylon/pull/528), with trusted helper loading fixed in [#532](https://github.com/pylon-code/pylon/pull/532); independent review, helper/loader regressions, Actionlint and final-head CI. Actual publication/cleanup workflow verification is tracked in #526. |
| DEF-16: live Claude model quota windows | `19d8ab2ae9fc562ee7b216a0d72903fbfafa9572` (#9507) | Closed through bounded cached OAuth reconciliation after unscoped native hints. Named windows retain their account identity, timestamps and 30-minute retention; generation/token fences reject retired instances and switched accounts. No guessed model mapping or duplicate SDK probe. | [#530](https://github.com/pylon-code/pylon/pull/530); independent review, quota/registry/retention/ingestion regressions, server types and all ten final-head CI jobs. |
| Mobile Antigravity catalog and admission | `06336460c9988f29c71e839c4c9c840c4552e077`, `d487dfbf46be344e818725be70ee04be2436bfb4` | Closes #479's mobile exception. Account-owned defaults/aliases, unavailable saved choices, unknown-auth saved sends, bounded targeted catalog discovery at durable dispatch and post-await validation preserve account binding and queued content. No remaining requested catalog behavior. | [#529](https://github.com/pylon-code/pylon/pull/529); independent review, 140 focused tests, mobile types and all ten final-head CI jobs. Native rendered/live-account verification is not claimed. |
| OpenCode exact rollback | `fd5553f1afcef4f410a067687faa991743b5034c`, `efccda9ac9230db22b36990cffabdad218fa41b0` | Extends #513 with immutable native forks, exact idle source/target proof, idempotent selection, original-source compensation and durable restart recovery. Historical checkpoints lacking a proved snapshot, experimental native plan-file mode and externally managed servers with unobservable runtime flags remain unavailable for exact rewind; ordinary plan/history/resume stay usable. Claude portion remains in #526. | [#531](https://github.com/pylon-code/pylon/pull/531); independent adapter/service review, focused integration tests and isolated installed OpenCode 1.18.29 native fork verification. |
| Codex exact rollback | `fd5553f1afcef4f410a067687faa991743b5034c`, `efccda9ac9230db22b36990cffabdad218fa41b0` | Extends #513 with immutable native forks, complete JSONL and inactive goal proof, idempotent selection, compaction retention and same-incarnation recovery. Active/uninspectable goals, paginated forks, unsupported or oversized native histories and uncaptured old/root bindings remain ineligible; ordinary resume is preserved. | [#533](https://github.com/pylon-code/pylon/pull/533); independent native-source/adapter review, 360 focused tests, server types and integration capability checks. |

## Deferred register

Expand Down
Loading
Loading