openclaw/.github/codeql
Peter Steinberger f94a7dc183
feat(codex): supervise native Codex sessions (#104045)
* feat(codex): add native session supervision

* fix(codex): harden supervision integration

* fix(codex): preserve locked harness ownership

* fix(codex): fence native session archive

* fix(codex): revalidate archive binding ownership

* feat(codex): integrate supervision runtime

* feat(sessions): preserve harness-owned execution

* feat(sessions): persist harness ownership invariants

* feat(gateway): enforce harness-owned sessions

* feat(setup): enable detected Codex supervision

* feat(mac): expose supervised Codex sessions

* feat(ui): make Codex sessions actionable

* docs(codex): document session supervision

* test(codex): cover integration ownership

* chore(i18n): refresh supervision inventories

* fix(setup): finalize Codex activation atomically

* test(codex): narrow binding store update

* fix(sessions): preserve legacy model locks

* test(macos): serialize Codex catalog fixtures

* fix(sessions): preserve legacy lock admission

* chore(i18n): reconcile supervision metadata

* test(sessions): mark legacy lock fixture

* fix(macos): drain final Codex catalog frame

* docs: leave supervision note to release

* style(macos): satisfy Codex catalog type length

* chore: record session accessor seam owners

* fix(macos): honor configured Codex supervision

* fix(codex): preserve harness-owned model locks

* fix(codex): satisfy supervision lint gates

* chore(i18n): refresh native supervision inventory

* fix(codex): align supervision validation contracts

* fix(codex): close supervision boundary gaps

* fix(codex): preserve supervision activation contracts

* fix(codex): dispose standalone supervision runtime

* fix(codex): pin supervised source connection

* fix(plugins): bind delegated runs to exact session target

* fix(codex): scope supervised sessions to configured agents

* fix(codex): fingerprint effective supervision home

* fix(codex): normalize supervision plugin policy

* fix(codex): keep supervised bindings stable across upgrades

* fix(codex): guard all supervised binding connections

* fix(codex): preserve catalog filters and pending CAS identity

* fix(codex): preserve supervision identity for diagnostics

* fix(codex): bind uncertain commits to supervision connection

* fix(codex): satisfy supervision type boundaries

* fix(macos): reconcile current main validation

* fix(codex): handle absent runtime config in supervision

* fix(doctor): own local audio acceleration check

* fix(codex): satisfy integration lint gates

* fix(codex): satisfy lifecycle safety guards
2026-07-11 00:12:08 -07:00
..
openclaw-boundary feat(codex): supervise native Codex sessions (#104045) 2026-07-11 00:12:08 -07:00
codeql-actions-critical-security.yml chore(ci): widen CodeQL PR guard 2026-04-29 20:06:50 -07:00
codeql-agent-runtime-boundary-critical-quality.yml refactor: internalize OpenClaw agent runtime (#85341) 2026-05-27 19:24:04 +01:00
codeql-android-critical-security.yml fix(codeql): tune Android pinning profile 2026-04-27 23:04:16 -07:00
codeql-channel-runtime-boundary-critical-quality.yml chore(channels): remove bluebubbles bundled surface 2026-05-07 12:52:48 -07:00
codeql-channel-runtime-boundary-critical-security.yml refactor: extract gateway client package (#87797) 2026-05-29 02:23:42 +01:00
codeql-config-boundary-critical-quality.yml ci: shard config codeql quality 2026-04-28 04:00:14 -07:00
codeql-core-auth-secrets-critical-quality.yml refactor: extract gateway client package (#87797) 2026-05-29 02:23:42 +01:00
codeql-core-auth-secrets-critical-security.yml refactor: extract gateway client package (#87797) 2026-05-29 02:23:42 +01:00
codeql-gateway-runtime-boundary-critical-quality.yml refactor: extract gateway client package (#87797) 2026-05-29 02:23:42 +01:00
codeql-macos-critical-security.yml fix(ci): add macOS CodeQL security shard 2026-04-27 13:40:34 -07:00
codeql-mcp-process-runtime-boundary-critical-quality.yml ci: add mcp process codeql quality shard 2026-04-28 23:36:34 -07:00
codeql-mcp-process-tool-boundary-critical-security.yml refactor: extract reusable AI runtime package (#99059) 2026-07-05 01:56:40 -04:00
codeql-memory-runtime-boundary-critical-quality.yml chore(deadcode): prune stale codeql paths 2026-06-22 08:33:19 +08:00
codeql-network-runtime-boundary-critical-quality.yml feat(codex): supervise native Codex sessions (#104045) 2026-07-11 00:12:08 -07:00
codeql-network-ssrf-boundary-critical-security.yml refactor(web): remove provider runtime facade 2026-06-18 10:21:20 +08:00
codeql-plugin-boundary-critical-quality.yml chore(deadcode): prune stale codeql paths 2026-06-22 08:33:19 +08:00
codeql-plugin-sdk-package-contract-critical-quality.yml ci: add codeql quality profile input (#74348) 2026-04-29 22:39:54 +08:00
codeql-plugin-sdk-reply-runtime-critical-quality.yml chore(ci): add Plugin SDK reply CodeQL quality shard 2026-04-29 15:56:41 -07:00
codeql-plugin-trust-boundary-critical-security.yml chore(deadcode): prune stale codeql paths 2026-06-22 08:33:19 +08:00
codeql-process-exec-boundary-critical-security.yml feat(codex): supervise native Codex sessions (#104045) 2026-07-11 00:12:08 -07:00
codeql-provider-runtime-boundary-critical-quality.yml chore(ci): add provider runtime CodeQL quality shard 2026-04-29 16:15:38 -07:00
codeql-session-diagnostics-boundary-critical-quality.yml chore(ci): add session diagnostics CodeQL quality shard 2026-04-29 15:29:03 -07:00
codeql-ui-control-plane-critical-quality.yml ci: shard control ui codeql quality 2026-04-28 20:24:19 -07:00
codeql-web-media-runtime-boundary-critical-quality.yml refactor(web): remove provider runtime facade 2026-06-18 10:21:20 +08:00