Skip to content

fix(coverage): clarify requested scope and deferred work - #586

Merged
mldangelo-oai merged 154 commits into
mainfrom
mdangelo/codex/scoped-scan-completion
Oct 23, 2026
Merged

mldangelo-oai merged 154 commits into
mainfrom
mdangelo/codex/scoped-scan-completion

Conversation

@mldangelo-oai

@mldangelo-oai mldangelo-oai commented Aug 20, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

Show requested scan scope clearly in CLI summaries and saved history, and separate deferred requested work from optional report follow-up.

Changes

  • Merge the reviewed main snapshot while preserving its source-scan execution outcomes, exit codes, schemas, and SARIF success semantics.
  • Display included paths and both exclusion sources in completion summaries and saved scan details, distinct from the saved launch recipe.
  • Read verified historical coverage without requiring unrelated artifacts; preserve read-only support for legacy sealed scans and omit unavailable or unverifiable scope without losing saved findings.
  • Present coverage.deferred separately from optional coverage.openQuestions in reports. Keep ordinary path quoting and terminal-control escaping without adding a Unicode normalization policy.

Testing

Validated candidate e1ca3e13accb44cdb1489c45b72597a89bd05b13, integrating the reviewed #1710 refresh at d5ebdbf5f09d3c22fc2cae781313a68823eaac29 and main at 00b0ac57dc5d5878908b51e31761332f89c1a24e. Merge #1710 before this PR. The merge was clean and leaves this PR's scope/history feature diff byte-for-byte unchanged.

  • 38 focused Python cases passed for verified history coverage, recorded-target validation, and publication outcome validation; 47 unrelated cases in those files were deselected.
  • Four MCP stdio transport tests passed, covering ordinary response preservation, UTF-8 framing, oversized-response recovery, and unchanged outgoing requests and notifications.
  • All five required portable plugin checks passed in order with Ruff 0.17.1: lint, formatting, SDK build:ci, plugin source compatibility, and the source check's nine self-tests.
  • A fresh 152-file plugin bundle, MCP build/typecheck, SDK typecheck, and git diff --check passed. Independent review found no integration issue; recorded-target validation still precedes the history reader and retained-coverage helpers match their callers.

Checks ran on Linux with Node 22.23.2, Bun 1.3.14, and Python 3.12.13. Dependency installations were reused only after matching dependency maps and lockfiles. The fresh plugin build reused the verified native-universal artifact; its native source inputs are unchanged. Native binaries were not rebuilt locally.

The 23 focused SDK tests recorded for 8a142f175c7c047bc9ac558a926247281698519e, and the 261 Python and 38 SDK tests recorded for 33f55a654a269b8e8b86fb5088db97e27c800509, remain historical validation for those revisions. Full SDK suites, installed-package smoke tests, and cross-platform execution were not repeated for this focused refresh. Fresh hosted CI is required for the new head. The disclosure qualifications below are unchanged.

Risk and rollout

The change is limited to scope presentation and historical scope retrieval. It adds no commands, flags, accepted values, public environment variables, defaults, migrations, or schema versions.

The older branch's partial/unknown source-completion and unsuccessful-SARIF changes are intentionally removed to retain current main behavior. Deferred work remains visible without changing execution status. History summaries require verified artifacts, but missing unrelated files do not hide already saved findings.

Public disclosure review

The earlier published source records review of its candidate diff, branch/title/body, available commit messages and review/conversation comments, six CI log archives, 29 artifacts (including package contents and native payloads), and four CodeQL SARIF reports. The main integration diff, all 15 feature files, current public metadata, available discussion and new validation logs were reviewed again. No sensitive additions were identified. No attached screenshots or user-uploaded media were found.

The prior description records unavailable historical artifacts and log archives; those unavailable bytes are not represented as reviewed. Fresh CI artifacts must be checked after publication.

  • No customer, partner, prospect, or user identities, data, or identifying details are included.
  • No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
  • I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

@github-actions github-actions Bot added the bug Something isn't working label Aug 20, 2026
@mldangelo-oai

Copy link
Copy Markdown
Collaborator Author

@codex review

Please review the current head, f7ca16c. Keep the response suitable for this public repository and do not include private report or task links.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Aug 20, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-23T18:56:38.469533Z e1ca3e1 New commits
🔒 Security Review ✅ Completed 2026-10-23T18:58:31.710102Z e1ca3e1 New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: f7ca16c408

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@mldangelo-oai

Copy link
Copy Markdown
Collaborator Author

@codex review

Please review the current head, d384888. Keep the response suitable for this public repository and do not include private report or task links.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: d384888a9a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@mldangelo-oai

Copy link
Copy Markdown
Collaborator Author

@codex review

Please review the current head, 855e95a. Keep the response suitable for this public repository and do not include private report or task links.

@mldangelo-oai
mldangelo-oai marked this pull request as ready for review August 21, 2026 01:46

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 855e95acd6

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@mldangelo-oai mldangelo-oai changed the title fix: report completion for the requested scan scope fix: report completion within the requested scope Aug 21, 2026
@mldangelo-oai

Copy link
Copy Markdown
Collaborator Author

@codex review

Please review the exact current head, 4a377d5. Focus on runtime correctness, requested-scope coverage semantics, the merged stdin transport, and any remaining unnecessary complexity. Keep the response suitable for this public repository and do not include private report or task links.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4a377d56f9

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@alandelong-oai alandelong-oai left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed c7b7824fcc12 against its exact updated base. The full feature patch and dependency inputs are unchanged from the independently reviewed 99c8b69993a5; the intervening changes match the separately reviewed main integration. No material issue found. Thanks for the update.

Validation: exact feature/dependency comparisons support reusing the prior focused tests and reproductions with their recorded limitations; those suites were not rerun on this rebase. The shared main integration was independently reviewed and its 189 owner/configuration/CLI checks passed. This does not claim a complete current-head integration or platform run.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Something went wrong. Try again later by commenting “@codex review”.

Unknown error
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Something went wrong. Try again later by commenting “@codex review”.

Unknown error
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@mldangelo-oai
mldangelo-oai merged commit ccbf117 into main Oct 23, 2026
64 checks passed
@mldangelo-oai
mldangelo-oai deleted the mdangelo/codex/scoped-scan-completion branch October 23, 2026 19:21
@github-actions github-actions Bot mentioned this pull request Oct 23, 2026
3 tasks done
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants