feat(codex): add encrypted native main profiles - #863

Merged

Wibias merged 67 commits into

lidge-jun:devfrom

luvs01:feat/656-native-main-profiles

Aug 3, 2026

Commits on Aug 3, 2026

docs: design native main profile switching
luvs01
committed
efabcaa
test: model native profile crash recovery
luvs01
committed
549c81d
feat(codex): add encrypted native main profiles
luvs01
committed
0408dfd
fix(codex): harden native profile transitions
luvs01
committed
6f0f41d
docs: normalize native profile validation
luvs01
committed
9e9c7f7
fix(codex): harden native profile staging locks
luvs01
committed
474ecab
test: cover native profile route admission
luvs01
committed
884c88a
ci: verify release audit and OS keyring
luvs01
committed
c252de9
fix(codex): gate native main startup recovery
luvs01
committed
5ba1936
test(codex): cover native profile crash matrix
luvs01
committed
a56136d
fix(codex): guard native profile recovery state
luvs01
committed
8f71207
fix(ci): harden native profile platform checks
luvs01
committed
1f7fa2d
fix(codex): address native profile CLI review
luvs01
committed
047a7a2
test(codex): harden native profile review coverage
luvs01
committed
31ce02f
fix(codex): harden native profile recovery invariants
luvs01
committed
e80f29f
fix(codex): harden profile startup lifecycle
luvs01
committed
db67801
fix(codex): keep manual profile recovery gated
luvs01
committed
f3c2e9e
fix(codex): release gate after converged switch error
luvs01
committed
57ebab0
fix(server): bound restart drain by one deadline
luvs01
committed
fac61c4
fix(codex): close profile journal and cleanup gaps
luvs01
committed
ba53f1d
fix(server): cap restart cleanup orchestration
luvs01
committed
f63139d
fix(codex): close profile bounded-read races
luvs01
committed
50e0d3e
fix(codex): reconcile stale recovery gate
luvs01
committed
766071c
fix(codex): preflight profile switch layouts
luvs01
committed
7a9a17e
fix(codex): zeroize early native profile errors
luvs01
committed
2708396
fix(restart): hand off deadline restarts
luvs01
committed
405181f
fix(codex): close main gate for retained recovery
luvs01
committed
e05a717
fix(codex): scope native main profile drain
luvs01
committed
f3b81b2
fix(codex): zeroize doctor and keyring secrets
luvs01
committed
8a79d73
fix(codex): close native main drain bypasses
luvs01
committed
e68b63b
fix(codex): fence main quota priming
luvs01
committed
f280a54
test(ci): cover keyring job timeout
luvs01
committed
3989010
fix(native-profile): validate recovery journal invariants
luvs01
committed
6d4f9c5
fix(native-profile): publish recovery gate before drain release
luvs01
committed
6e96aff
test(native-profile): prove scoped recovery fence ordering
luvs01
committed
b854883
fix: claim native main credential lifetimes
luvs01
committed
929aed9
fix(server): retain sideband admission through upstream close
luvs01
committed
2469fb5
test: align startup journal timestamps
luvs01
committed
d317934
test: validate startup journal fixtures
luvs01
committed
3ef3881
fix(codex): clean staged auth on finish failure
luvs01
committed
58dee5d
fix(codex): share native profile metadata by home
luvs01
committed
48fdc3c
fix(codex): retain native-main process ownership
luvs01
committed
a80f18b
fix(cli): report effective Codex home for profile mutations
luvs01
committed
fbe4362
fix(cli): use configured Codex runtime for profile login
luvs01
committed
05bea5a
test(codex): accept removed scrubbed stage auth
luvs01
committed
1d811b8
test(codex): await native-main server lifecycle
luvs01
committed
88e3cb7
fix(codex): scrub crashed auth write residues
luvs01
committed
fca17cd
fix(codex): lease native login staging writers
luvs01
committed
1205668
test(codex): pass stage writer token in takeover
luvs01
committed
9d6ae74
fix(codex): await startup convergence on release
luvs01
committed
31951a8
test(server): budget multi-harness stream retry case
luvs01
committed
897809b
fix(codex): reject ambiguous native profile selectors
luvs01
committed
26a0f43
fix(codex): reconcile stale recovery gates after switch
luvs01
committed
46750d8
fix(server): retain sideband lease until upstream closes
luvs01
committed
5931ea8
docs(codex): clarify process-exit recovery scope
luvs01
committed
0491004
fix(codex): make native process probe nonblocking
luvs01
committed
074344f
test(codex): pin native process probe contract
luvs01
committed
c7203bd
fix(codex): fence native-main metadata reads
luvs01
committed
161a163
fix(codex): close final integration gate gaps
luvs01
committed
9273337
Merge remote-tracking branch 'upstream/dev' into fix/863-9273-followup
luvs01
committed
ce62501
fix(native-main): address review follow-ups
luvs01
committed
0f24f31
Merge remote-tracking branch 'upstream/dev' into fix/863-9273-followup
luvs01
committed
5a7d53a
fix(native-main): address final review follow-ups
luvs01
committed
6cf016f
Merge upstream dev into feat/656-native-main-profiles
luvs01
committed
a2d2524
fix(gui): update brace-expansion security override
luvs01
committed
7e6bcc1
Merge upstream dev into feat/656-native-main-profiles
luvs01
committed
42d63ef
fix(native-main): address latest review feedback
luvs01
committed
2736ae1