Brennan Benson 0c2a807c20 feat(codex): app-server trust-grant client, capability cache, and grant ledger ...

Short-lived codex app-server JSON-RPC client (hooks/list + config/batchWrite,
the same pair the Codex TUI 'Trust all' flow calls), run in a bundled
ELECTRON_RUN_AS_NODE entry so synchronous launch prep can block on it with a
hard deadline and guaranteed child reap. Capability cache modeled on
GitCapabilityCache, scoped per execution host (native vs each WSL distro),
with a narrow unknown-method/missing-subcommand unsupported predicate. The
grant ledger records verified grants so steady-state launches skip the RPC.

2026-07-14 22:41:09 -07:00

..

plain-node-entry-guard.ts

feat(codex): app-server trust-grant client, capability cache, and grant ledger

2026-07-14 22:41:09 -07:00