virajrai-oai e18a20d6eb Add correlated diagnostics for Noise relay handshakes (#55498) ...

## What changed

- Record executor handshake rejections and pending-validation resets in promptly completed diagnostic spans, with classified reasons and registry HTTP status when available. Normalize stream IDs as UUIDs and cap diagnostics at 100 per minute per relay connection, followed by a suppression marker.
- Add elapsed time and connection identifiers to harness handshake diagnostics, including initialization timeouts, and classify WebSocket read failures from typed errors.
- Forward valid stream UUIDs to harness key validation requests through the `x-codex-noise-stream-id` header.

## Testing

Extend tests to cover diagnostic rate limits, timeout correlation, prompt span export, typed WebSocket error classification, and optional stream ID headers. Verify that diagnostic output excludes authorization secrets, registry response text, reset reasons, and invalid stream IDs.

GitOrigin-RevId: 2c224e2d2828b300164868b10806add410e148b2

2026-10-20 07:56:07 +00:00

..

client

Add observers for initial exec-server connection attempts (#52724)

2026-10-09 23:28:38 +00:00

discoverV2

Integrate discovery V2 with step-scoped skill catalogs (#55322)

2026-10-19 17:02:20 +00:00

environment

Acquire and cache opt-in executor capability inventories via V2 (#53736)

2026-10-13 18:15:50 +00:00

no_follow

Fix Windows 10 drive-letter opens for no-follow filesystem operations (#51511)

2026-10-06 23:20:40 +00:00

noise_relay

Add correlated diagnostics for Noise relay handshakes (#55498)

2026-10-20 07:56:07 +00:00

proto

Propagate request trace context through exec-server relays (#38690)

2026-08-15 03:00:35 +00:00

remote

Add correlated diagnostics for Noise relay handshakes (#55498)

2026-10-20 07:56:07 +00:00

sandbox_integrity

Add a sandbox integrity runner with outcome and timing metrics (#51842)

2026-10-07 21:52:20 +00:00

server

Acquire and cache opt-in executor capability inventories via V2 (#53736)

2026-10-13 18:15:50 +00:00

arg0_exec_helper.rs

Preserve custom arg0 for sandboxed exec-server processes (#34497)

2026-07-21 08:59:41 +00:00

capability_discovery_cache.rs

Integrate discovery V2 with step-scoped skill catalogs (#55322)

2026-10-19 17:02:20 +00:00

capability_discovery_v2_cache.rs

Acquire and cache opt-in executor capability inventories via V2 (#53736)

2026-10-13 18:15:50 +00:00

capability_discovery.rs

Add executor capability discovery V2 infrastructure (#47683)

2026-09-23 22:20:34 +00:00

client_api.rs

Support trusted headers for remote exec WebSockets (#42606)

2026-09-03 20:01:07 +00:00

client_error.rs

Add timeout-aware exec-server configuration reads (#52679)

2026-10-09 19:22:21 +00:00

client_inbound_request_limit_tests.rs

Bound inbound exec-server requests across client transports (#47362)

2026-09-22 21:07:20 +00:00

client_inbound_request_limit.rs

Bound inbound exec-server requests across client transports (#47362)

2026-09-22 21:07:20 +00:00

client_recovery_tests.rs

Retry transient registry failures during initial exec connection (#39777)

2026-08-20 18:48:17 +00:00

client_recovery.rs

Defer environment disconnect notifications until recovery fails (#55401)

2026-10-19 22:55:42 +00:00

client_refresh_tests.rs

Add correlated diagnostics for Noise relay handshakes (#55498)

2026-10-20 07:56:07 +00:00

client_refresh.rs

Add observers for initial exec-server connection attempts (#52724)

2026-10-09 23:28:38 +00:00

client_telemetry.rs

Add client-side exec-server RPC attempt metrics (#42883)

2026-09-04 23:06:00 +00:00

client_transport_tests.rs

Add correlated diagnostics for Noise relay handshakes (#55498)

2026-10-20 07:56:07 +00:00

client_transport.rs

Add correlated diagnostics for Noise relay handshakes (#55498)

2026-10-20 07:56:07 +00:00

client.rs

Defer environment disconnect notifications until recovery fails (#55401)

2026-10-19 22:55:42 +00:00

connection.rs

Allow large file writes over direct exec-server WebSockets (#54135)

2026-10-15 00:00:57 +00:00

environment_bootstrap_tests.rs

Enforce required environment skills before model inference (#51157)

2026-10-05 18:54:17 +00:00

environment_bootstrap.rs

Enforce required environment skills before model inference (#51157)

2026-10-05 18:54:17 +00:00

environment_config_tests.rs

Preserve the CLI MXC preference in executor config reads (#51525)

2026-10-07 00:29:04 +00:00

environment_config.rs

Preserve the CLI MXC preference in executor config reads (#51525)

2026-10-07 00:29:04 +00:00

environment_provider.rs

Enforce required environment skills before model inference (#51157)

2026-10-05 18:54:17 +00:00

environment_registry_tests.rs

feat(exec-server): add Noise rendezvous environment (#28774)

2026-06-17 17:20:53 -07:00

environment_registry.rs

feat(exec-server): add Noise rendezvous environment (#28774)

2026-06-17 17:20:53 -07:00

environment_toml.rs

Enforce required environment skills before model inference (#51157)

2026-10-05 18:54:17 +00:00

environment.rs

Defer environment disconnect notifications until recovery fails (#55401)

2026-10-19 22:55:42 +00:00

file_handle_tests.rs

Bound in-flight file opens in exec-server (#50162)

2026-10-02 03:31:52 +00:00

file_handle.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

forward_tests.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

forward.rs

Add exec-server forwarding mode (#39249)

2026-08-18 18:15:21 +00:00

fs_helper_main.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

fs_helper.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

fs_sandbox_windows_tests.rs

Add opt-in history prefix preservation for full agent forks (#52535)

2026-10-09 11:08:24 +00:00

fs_sandbox.rs

Run sandbox integrity checks before commands and filesystem operations (#51843)

2026-10-07 21:52:43 +00:00

lib.rs

Enrich V2 capability discovery with resolved plugin and skill metadata (#53763)

2026-10-13 20:40:38 +00:00

local_file_system_path_uri_tests.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

local_file_system_read_tests.rs

Make exec-server file reads cancellable between chunks (#49696)

2026-09-30 18:18:03 +00:00

local_file_system_read.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

local_file_system.rs

Add streaming file replacement to filesystem abstractions (#54505)

2026-10-16 04:42:32 +00:00

local_process.rs

Support remote credential masking with Zsh shell snapshots (#54432)

2026-10-15 22:25:58 +00:00

network_policy_decisions_tests.rs

Handle exec-server network policy requests in the client (#35359)

2026-07-25 16:03:00 +00:00

network_policy_decisions.rs

Handle exec-server network policy requests in the client (#35359)

2026-07-25 16:03:00 +00:00

noise_channel_tests.rs

exec-server: default remote transport to Noise (#26245)

2026-06-15 17:39:00 -07:00

noise_channel.rs

Size Noise handshake buffers to their messages (#34544)

2026-07-21 13:39:33 +00:00

process_sandbox_tests.rs

Enable credential masking for remote exec-server commands (#54309)

2026-10-15 14:41:16 +00:00

process_sandbox.rs

Support remote credential masking with Zsh shell snapshots (#54432)

2026-10-15 22:25:58 +00:00

process_telemetry.rs

Add exec-server RPC timing and process startup tracing (#47680)

2026-09-23 22:10:28 +00:00

process.rs

Wire the Windows MXC sandbox into command execution (#45176)

2026-09-13 06:07:03 +00:00

regular_file_tests.rs

Add a symlink-safe reader for sensitive files (#39200)

2026-08-18 13:36:16 +00:00

regular_file.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

relay_noise_tests.rs

Add correlated diagnostics for Noise relay handshakes (#55498)

2026-10-20 07:56:07 +00:00

relay_proto.rs

exec-server: default remote transport to Noise (#26245)

2026-06-15 17:39:00 -07:00

relay_writer_tests.rs

Bound relay connection attempts and handle pongs during blocked writes (#51502)

2026-10-06 23:07:25 +00:00

relay_writer.rs

Bound relay connection attempts and handle pongs during blocked writes (#51502)

2026-10-06 23:07:25 +00:00

relay.rs

Add correlated diagnostics for Noise relay handshakes (#55498)

2026-10-20 07:56:07 +00:00

remote_file_stream.rs

Define exec-server protocol types for streamed file writes (#49778)

2026-10-01 00:43:55 +00:00

remote_file_system_path_uri_tests.rs

Use a synchronous mutex for remote metadata request tracking (#54475)

2026-10-16 02:39:49 +00:00

remote_file_system.rs

Add streaming file replacement to filesystem abstractions (#54505)

2026-10-16 04:42:32 +00:00

remote_process.rs

Record normalized sandbox violation events (#36207)

2026-07-30 19:23:33 +00:00

remote.rs

Add correlated diagnostics for Noise relay handshakes (#55498)

2026-10-20 07:56:07 +00:00

resolved_capability.rs

Remove unused Rust helpers (#34345)

2026-07-20 13:45:29 +00:00

rpc_client_metrics_tests.rs

Add client-side exec-server RPC attempt metrics (#42883)

2026-09-04 23:06:00 +00:00

rpc_pending_request.rs

Clean up canceled exec-server RPC requests immediately (#49332)

2026-09-29 18:34:48 +00:00

rpc_server_requests_tests.rs

Bound inbound exec-server requests across client transports (#47362)

2026-09-22 21:07:20 +00:00

rpc_server_requests.rs

Bound inbound exec-server requests across client transports (#47362)

2026-09-22 21:07:20 +00:00

rpc_timing.rs

Add exec-server RPC timing and process startup tracing (#47680)

2026-09-23 22:10:28 +00:00

rpc.rs

Clean up canceled exec-server RPC requests immediately (#49332)

2026-09-29 18:34:48 +00:00

runtime_options.rs

Preserve the CLI MXC preference in executor config reads (#51525)

2026-10-07 00:29:04 +00:00

sandbox_selection.rs

Enable MXC selection through Windows sandbox configuration (#46271)

2026-09-17 18:20:28 +00:00

sandboxed_file_open.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

sandboxed_file_system_path_uri_tests.rs

Allow exec-server to proxy permitted private IPs upstream (#48568)

2026-09-26 23:17:41 +00:00

sandboxed_file_system.rs

Run sandbox integrity checks before commands and filesystem operations (#51843)

2026-10-07 21:52:43 +00:00

server.rs

Allow exec-server to proxy permitted private IPs upstream (#48568)

2026-09-26 23:17:41 +00:00

shell_snapshot_credentials.rs

Support remote credential masking with Zsh shell snapshots (#54432)

2026-10-15 22:25:58 +00:00

shell_snapshot_file_tests.rs

Replay exec-server shell snapshots through unnamed files (#48078)

2026-09-25 12:23:15 +00:00

shell_snapshot_file.rs

Replay exec-server shell snapshots through unnamed files (#48078)

2026-09-25 12:23:15 +00:00

shell_snapshot_process.rs

Clean up process groups for failed shell snapshot captures (#49782)

2026-10-01 00:48:08 +00:00

shell_snapshot_tests.rs

Support remote credential masking with Zsh shell snapshots (#54432)

2026-10-15 22:25:58 +00:00

shell_snapshot.rs

Support remote credential masking with Zsh shell snapshots (#54432)

2026-10-15 22:25:58 +00:00

telemetry.rs

Measure shell snapshot use and wait time per command (#51347)

2026-10-06 11:43:45 +00:00

trace_context_tests.rs

[codex] Observe remote exec-server lifecycle (#27470)

2026-06-25 13:42:40 -07:00

trace_context.rs

Propagate caller metadata to rendezvous connections (#39073)

2026-08-17 20:36:10 +00:00

websocket_pong_watchdog_tests.rs

[codex] bound Rendezvous WebSocket liveness (#30643)

2026-07-01 14:15:34 -07:00

websocket_pong_watchdog.rs

[codex] bound Rendezvous WebSocket liveness (#30643)

2026-07-01 14:15:34 -07:00