D4: Add bounded production agent adapters - #47

Merged

mchwang merged 32 commits into

mainfrom

codex/agent-adapters-d4

Sep 25, 2026

Commits on Sep 25, 2026

Add bounded production agent adapters
mchwang
committed
09f347d
Harden adapter capture settlement
mchwang
committed
8e9f77a
Pin adapter output to dedicated tmpfs
mchwang
committed
44d1304
Close remaining adapter lifecycle races
mchwang
committed
cb6f3fb
Validate pinned output identities
mchwang
committed
0453c5d
Make cleanup and decode settlement retryable
mchwang
committed
485521d
Abort and await bounded adapter capture
mchwang
committed
a4322e8
Retain adapter cleanup ownership
mchwang
committed
963ca16
Allow loaded Docker cleanup observation
mchwang
committed
ef40f26
Secure deferred output acknowledgement
mchwang
committed
97ca736
Retain colliding cleanup recovery
mchwang
committed
1fed991
Preserve adapter setup ownership
mchwang
committed
ae99db9
Bound cancellation with monotonic deadlines
mchwang
committed
ee57917
Carry invocation ownership through settlement
mchwang
committed
fe8c11f
Guard active profile and close deadline
mchwang
committed
82dbc83
Apply adapter timeout across setup
mchwang
committed
bee7c64
Bound adapter cleanup and final stderr
mchwang
committed
0988f12
Keep decoder settlement timers alive
mchwang
committed
1f7cf36
Retain recovery profile ownership
mchwang
committed
4c1dc2e
Revalidate container at launch boundary
mchwang
committed
8b963a4
Validate profile capability before cleanup
mchwang
committed
bf65dec
Preserve cleanup cancellation reasons
mchwang
committed
27059e3
Update cleanup cancellation regression
mchwang
committed
a5dfaba
Authenticate profiles at disposal boundary
mchwang
committed
10c8d52
Skip cleanup for unauthenticated profiles and stop on late close

mchwang
and
claude
committed
d9539fb
Reject duplicate attempts without touching the active container

mchwang
and
claude
committed
cd1fc31
Keep D4 Docker suites out of the parallel CI run

mchwang
and
claude
committed
691df93
Retain captured output in fixed-size blocks

mchwang
and
claude
committed
dd0af27
Keep killed creates unsettled across cleanups and publish strict UTF-8

mchwang
and
claude
committed
8bc00da
Treat an absent container as settled once the create window passes

mchwang
and
claude
committed
6c757e1
Fail closed on a trailing incomplete UTF-8 character unless truncated

mchwang
and
claude
committed
a7a6eb9
Release only the profile when rejecting an invocation before creation

mchwang
and
claude
committed
d309dd7

Navigation Menu

D4: Add bounded production agent adapters - #47

D4: Add bounded production agent adapters#47
mchwang merged 32 commits into
mainfrom
codex/agent-adapters-d4

Commits on Sep 25, 2026

Add bounded production agent adapters

Harden adapter capture settlement

Pin adapter output to dedicated tmpfs

Close remaining adapter lifecycle races

Validate pinned output identities

Make cleanup and decode settlement retryable

Abort and await bounded adapter capture

Retain adapter cleanup ownership

Allow loaded Docker cleanup observation

Secure deferred output acknowledgement

Retain colliding cleanup recovery

Preserve adapter setup ownership

Bound cancellation with monotonic deadlines

Carry invocation ownership through settlement

Guard active profile and close deadline

Apply adapter timeout across setup

Bound adapter cleanup and final stderr

Keep decoder settlement timers alive

Retain recovery profile ownership

Revalidate container at launch boundary

Validate profile capability before cleanup

Preserve cleanup cancellation reasons

Update cleanup cancellation regression

Authenticate profiles at disposal boundary

Skip cleanup for unauthenticated profiles and stop on late close

Reject duplicate attempts without touching the active container

Keep D4 Docker suites out of the parallel CI run

Retain captured output in fixed-size blocks

Keep killed creates unsettled across cleanups and publish strict UTF-8

Treat an absent container as settled once the create window passes

Fail closed on a trailing incomplete UTF-8 character unless truncated

Release only the profile when rejecting an invocation before creation