3 commits

Author	SHA1	Message	Date
Peter Steinberger	10ee252b56	fix(codex): reap orphaned app-servers before reconnect (#132610) ... * fix(codex): reap orphaned app-servers before reconnect * style(codex): avoid returning the containment timer handle * fix(codex): inspect Linux children without requiring procps * fix(codex): tolerate processes exiting during procfs reads * test(codex): normalize socket fixture binary frames * fix(codex): preserve startup errors during process registration	2026-08-29 08:53:41 -07:00
Peter Steinberger	d65e712b28	feat(macos): enable native node session hosting (#131717) ... * feat(macos): enable native node session hosting Complete the app-owned node worker connection lifecycle and honor explicitly admitted Full access without bypassing node-local restrictions. Preserve one node identity, native capabilities, approval lifetime, and exact placement/turn authority. * test(nodes): exercise canonical exec policy flows * refactor(macos): remove obsolete node bridge serializer * fix(nodes): bind Full authority to harness execution commands	2026-08-28 07:11:12 -07:00
Peter Steinberger	1353ce0995	feat: run Codex sessions on approved paired devices (#127202) ... * feat(codex): execute paired-device sessions over node carrier * fix(node-host): preserve approved invocation session identity * fix(codex): observe paired-node execution leases before handshake * fix: fence paired-device placement and Codex execution owners * fix: satisfy paired-device placement CI ownership guards * fix(codex): reject credentialed paired-node URL parameters * fix(codex): fence nested remote HTTP session credentials * fix(codex): scrub node process URLs and preserve plaintext HTTP * test(codex): republish node inventory after capability approval	2026-08-21 12:50:26 -07:00