I3303 — Codex's hooks draw its episodes and refuse an edit no claim covers, as Claude Code's do

○PŘIPRAVENO vlna 1 · p2 · profil implementation · bezpečné paralelně

Part of a-provider-carries-the-contract-natively — Each agent client carries the contract through its own extension points, generated once and checked for drift.

Cíl

Write the Codex adapter share/providers.yaml calls `unadapted`: session events to capture session and, where Codex offers a pre-tool event, that event to guard hook --provider codex, generated like the Claude shims, with its offers evidence verified against the installed Codex.

Proč

Codex sessions work this repository daily (board p1-p3) and today join only by MCP connection (ADR 0103), so they draw no episode boundary of their own and no edit of theirs meets the claim guard. guard.rs reads only Claude Code's tool_input.file_path and notebook_path, so a Codex apply_patch would be let through as a tool that writes no file, and the recorded Codex evidence names no pre-tool event. If no such event exists, #codex-parity is narrowed to episodes. Proposed in ADR 0214 (A provider's native extension points carry the contract as generated projections; Majordomus neither embeds nor patches the worker's runtime) (proposed; it carries no authority until the owner accepts it). Sources: chatgpt-majordomus:c109#3.

Aktuální stav

share/providers.yaml codex: 'Codex shipped a hook system, and this distribution has no adapter for it'.

Cílový stav

codex lifecycle declared; case proves an unclaimed Codex edit is refused.

Rozsah

• lib/capture.sh
• share/providers.yaml
• .ai/repo/providers
• apps/majordomus-cli/src/guard.rs
• apps/majordomus-cli/src/capability/builtin/guard.rs

Mimo rozsah

• A Gemini adapter: deferred to a later intent until this adapter settles the shape; the verified Gemini evidence and its SessionEnd/PreCompress caveats in share/providers.yaml stay

Závislosti

• I2734✓HOTOVO Relace se připojí k meshi na svém začátku a opustí jej na svém konci

Co na tom čeká

• I3410✕BLOCKED A Codex prompt is captured through Codex's own UserPromptSubmit hook, and capture status stops calling Codex prompts unadapted

Kritéria přijetí

• A Codex session start and end produce episode events
• Where a Codex pre-tool hook is evidenced, a Codex edit outside every claim is refused with the guard's message
• providers.yaml codex lifecycle cites verified evidence
• Before building, share/providers.yaml records dated vendor evidence of a Codex pre-tool hook and its payload shape, or records that none exists and the issue delivers episodes only
• If a pre-tool hook exists, guard.rs parses the Codex payload and judges every path an apply_patch names, refusing the whole patch when any path is unclaimed, with a unit test on a multi-path patch
• Proof is split into a CI-runnable structural case and an opt-in end-to-end case against a dated Codex version, each with an allocated case number

Validace

• cargo test --manifest-path apps/majordomus-cli/Cargo.toml --test guard_hook
• majordomus product validate
• bash test/run.sh 170_provider_lifecycle_declared

Požadované důkazy

• case_codex_hooks_carry_the_contract

Důkazy

Nic nezaznamenáno. Za každým tokenem výše musí stát příkaz nebo artefakt, než lze tento úkol dokončit; vyprávění se odmítá.

Časová osa

zahájeno

—

ověřeno

—

dokončeno

—

Tato tři pole, důkazy výše a stav závislostí jsou vše, z čeho se stav skládá. Neexistuje žádné pole stavu, které by s nimi mohlo být v rozporu.

Canonical record: .ai/repo/project/issues/I3303.yaml. Read it back with majordomus plan show I3303.