[777genius]

Genuine project discovery results

The exact source head 0d1319f has now passed TestAgentpluginsCodexNativeProjectComponentsLifecycle with pinned Codex 0.153.4 on both macOS arm64 (2.25s) and Windows amd64 (3.94s). All three required Codex tests passed on each host, with no skips. Artifact ZIPs and all 28 project sub-artifact digests per OS were independently checked; the original records are preserved in the assembly branch.

This proves fresh project A/B skills discovery and actual UAP add/update/missing-skill repair/remove, exact paths/rendered bytes and foreign-file preservation. Project MCP/trust/model/authentication remain unqualified. The Windows response did not list the separate seeded user .agents marker; its native discovery/precedence is not claimed. No native guard, trust state or activation attestation was changed.

Other client regression jobs on this PR are separate queued checks. The project feature is not released or complete for every client.

Problem

Codex project installation must own project skills and MCP configuration without changing CODEX_HOME or borrowing user plugin ownership.

Changes

• Install exact owned skills in .agents/skills and MCP entries in .codex/config.toml through the existing transaction, receipt and recovery kernel.
• Preserve foreign TOML settings/comments, exact native ownership, project A/B/user isolation, data binding and conservative prepared/installed status.
• Refuse project activation attestation as a substitute for native observation; report bounded configured skill-disable warnings using the pinned native user-selector semantics.
• Add a source-only pinned Codex app-server skills-discovery CI gate while retaining disposable-host guards and historical released/draft qualification boundaries.

Research and review

The original client plan and shared component amendment each completed two independent plan review/fix rounds before implementation. Final Codex adapter implementation has both independent reviews GO at 4f4a320b; reports are committed. Corrections include ordered user-only canonical skill selectors and all-or-nothing invalid section handling. The current tree also includes the independently reviewed Windows project identity correction.

Validation and evidence limits

Full focused codec/client/provider/domain/planner contracts, production provider project lifecycles, exact receipt/rollback/foreign preservation and architecture/lint gates pass locally. Independent final provider checks pass. The authored native discovery test and its guard/parser/Python contracts compile/pass locally; genuine hosted project discovery is pending. MCP initialization, effective policy/trust, account/model execution and release qualification are not claimed.

This is a separate client stack for #472, temporarily based on #474 until that reviewed parent merges. Remains draft pending final composed/hosted acceptance and integration.

Delivered in #499

Delivered by #499, merged into main as 3b93148c. The integrated source 3386c72a91e7e9b3574f12ce0613b399227a1ada passed all 74 check runs and 24 PR workflows; the actual merge tree is identical to that validated source.

This PR's reviewed head e630a5b0ac1cd94443cf710f93a79acb8274ac38 is preserved by ancestry in the integrated source and the main merge. Closing as incorporated; no separate merge into the earlier stacked base is needed.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}