Repository navigation
feat: serve the agent tree on the door's typed API - #379
Conversation
82c75ac to
ac156eb
Compare
9750aa2 to
7e9265d
Compare
ac156eb to
4151623
Compare
7e9265d to
5d4f00f
Compare
4151623 to
1aaf905
Compare
5d4f00f to
e66cdae
Compare
agentTrees.list and agentTrees.show expose the data the session commands print as read-only procedures, so the MCP server lists them as tools with no write opt-in and library consumers reach them through the door. The session lookup moves out of the command module so the door and the CLI share one implementation.
e66cdae to
7d33698
Compare
|
@codex review |
|
@codex security review |
|
You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard. |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
Security findingsAdvisory findings (1)ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
There was a problem hiding this comment.
🛡️ Codex Security Review
Here are some automated security review suggestions for this pull request.
Reviewed commit: 7d336987b3
ℹ️ About Codex security reviews in GitHub
This is an experimental Codex feature. Security reviews are triggered when:
- You comment "@codex security review"
- A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review
Once complete, Codex will leave suggestions, or a comment if no findings are found.
… grant The agent tree operations span every identity's sessions and return descriptions, task contents and project names, so a read-only MCP launch no longer exposes them. A third grant, `history`, is set with `--allow-history` or `mcp permissions allow history`; a stored permission file written before it existed reads as not allowed.
|
@codex review |
|
@codex security review |
|
You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard. |
🛡️ Codex Security ReviewSecurity review completed. No security issues were found in this pull request. Reviewed commit: Only the user who started this review can view the report in Codex. ℹ️ About Codex security reviews in GitHubThis is an experimental Codex feature. Security reviews are triggered when:
Once complete, Codex will leave suggestions, or a comment if no findings are found. |
Adds
agentTrees.listandagentTrees.showto the door's typed API as read-only procedures over the reader, so the MCP server lists them as tools without any write opt-in and library consumers reach them through the door. The session lookup moves out of the command module intosrc/agents/sessions.ts, so the door andsession list|showshare one implementation.Based on feat/session-commands; retarget once #377 merges. Closes #363.