fix(server,config): extension CORS origin identity + symlink-safe atomic writes - #886

Closed

lidge-jun wants to merge 15 commits into

devfrom

codex/wt4-server-config

Commits on Aug 2, 2026

docs(plan): design the Codex Set prompt composer against upstream evidence
lidge-jun
committed
39abf4c
docs(plan): research API-side client-integration toggles (cc-switch reference)
lidge-jun
committed
a47a167
docs(plan): rebuild the prompt-composer design around its audit blockers
lidge-jun
committed
91b3921
docs(plan): drop the TOML dependency after measuring Bun's parser
lidge-jun
committed
921070b
docs(plan): stop journal recovery from overwriting other people's edits
lidge-jun
committed
3195c71
docs(plan): allocate 12 must-fix bugs across 5 bugfix worktrees
lidge-jun
committed
ef71180
docs(plan): make the journal one state machine and finish the WP1 contract
lidge-jun
committed
c327fdb
docs(plan): fold audit blockers into bugfix worktree units
lidge-jun
committed
470618d
docs(plan): reclassify Plugins after reading the OR it actually depends on
lidge-jun
committed
14eae93
docs(plan): close three of the four NEAR-PASS residuals before building
lidge-jun
committed
072b8df
docs(plan): design the unified Integrations surface with guaranteed rollback
lidge-jun
committed
60b417c
feat(codex): prompt-layer inventory and a TOML encoder we can trust
lidge-jun
committed
e0b15fe
docs(plan): use ~ in example paths so privacy:scan stays green
lidge-jun
committed
478354e
fix(server): match browser extension CORS origins by scheme+authority
lidge-jun
committed
24d0691
fix(config): preserve symlinked destinations in atomic writes
lidge-jun
committed
d8261a2