Check upstream changes from just-every/code and openai/codex

[cbusillo]

Objective

Review recent upstream changes from just-every/code and openai/codex and decide what Every Code should import, adapt, ignore, or track separately.

Current Status

State: Immediate OpenAI Codex upstream intake is complete; #214, #215, #216, and #225 are done.
Next action: Decide whether to pick up desktop remote-control compatibility (#217/#37) or continue with the in-progress manual skill discovery branch.
Blocked by: None.
Waiting for: Product choice on remote/desktop direction before starting #226/#227.
Last verified: 2026-05-30.

Completed intake:

• Port stale multi-agent slot cleanup from Codex CLI #214 stale multi-agent slot cleanup was ported and merged via PR fix(agents): reap stale active slots on cancel #220.
• Assess and port exec-server filesystem helper lifecycle hardening #215 exec-server filesystem helper lifecycle fixes were assessed as non-applicable to editable code-rs and closed after ./build-fast.sh passed in a clean worktree.
• Audit Codex CLI app-server parity for Every Code #216 app-server parity audit was completed and closed.
• Harden Every Code app-server websocket transport #225 app-server websocket hardening was implemented and merged via PR fix(app-server): harden websocket transport #228.

Remaining parked follow-ups:

• Add initial turns page to app-server thread resume #226 optional initial turns page on v2 thread/resume, waiting on desktop/app-server direction.
• Define app-server remote history redaction policy #227 remote history redaction policy, waiting on desktop/app-server direction.

Decision:
Do not port Codex CLI features just for parity. Codex desktop remote-control compatibility remains design work under #217/#37.

Scope

• In: Recent commits, workflow changes, prompt/system instruction changes, agent/model routing changes, model metadata/default changes, release/build fixes, bug fixes, and compatibility-relevant behavior from just-every/code and openai/codex.
• Out: Blind bulk merges, large tree rewrites, or adopting upstream behavior that erases intentional Every Code product differences without an explicit decision.

Acceptance Criteria

• Current refs/remotes for just-every/code and openai/codex are fetched or otherwise verified.
• A concise delta summary is produced for each upstream.
• Candidate imports are classified as import now, adapt first, defer, or reject.
• Prompt/system instruction changes are explicitly checked.
• Model metadata/default changes, including any GPT-5.6-related changes, are explicitly checked.
• Release/build workflow changes are explicitly checked.
• App-server, app-server-protocol, remote-control, session lifecycle, file-watch, and auth/server changes from Codex CLI since the fork are explicitly checked.
• The selected implementation batch is split into focused follow-up PRs or issues.
• Each selected import explains the Every Code product value or hardening value; parity alone is not sufficient.

Validation

Use git comparisons against the relevant upstream refs, inspect changed prompt/workflow/build/model files directly, and run ./build-fast.sh on any implementation PR that imports changes.

Relationships

Related to #51 for ongoing upstream alignment.
Related to #85 for Every Code product independence and import policy.
Related to #195 for GPT-5.6 model metadata readiness.
Sub-issues:

• Port stale multi-agent slot cleanup from Codex CLI #214 stale multi-agent slot cleanup.
• Assess and port exec-server filesystem helper lifecycle hardening #215 exec-server filesystem helper lifecycle hardening.
• Audit Codex CLI app-server parity for Every Code #216 Codex CLI app-server parity audit.
  Related investigation:
• Investigate Codex desktop app remote control compatibility #217 Codex desktop app remote-control compatibility.

Notes

Preserve Every Code-specific behavior unless there is a clear compatibility, safety, or maintenance reason to change it.

[cbusillo]

Upstream triage update (2026-05-29): fetched upstream/main (just-every/code) and openai/main.\n\nImplemented/imported now:\n- #202 imported/adapted the small ChatGPT auth fixes: proactive access-token refresh before expiry from 15d85ea3ca, plus the accepted OAuth login simplified-flow parameter from 76937a5ba3. Local validation passed: focused auth/login tests and ./build-fast.sh.\n\nModel/GPT-5.6 check:\n- No GPT-5.6 model metadata, aliases, or defaults found in either fetched upstream range. Keep Every Code defaulting to gpt-5.5 until official GPT-5.6 release evidence and model IDs exist; #195 remains waiting.\n\nClassified follow-ups:\n- Adapt first: service-tier request/default metadata from 16525fc108/related upstream changes. Useful, but local model UI/service-tier code has diverged and needs a focused PR.\n- Adapt first or mostly reject direct patch: provider-agent preset refresh from 76937a5ba3. Local Every Code already intentionally uses antigravity as the Google path and centers code-gpt-5.5; only alias/doc pieces should be considered, not a direct rewrite.\n- Defer: full codex-rs mirror refresh and large app-server/protocol/debug-client/package changes. Treat as deliberate mirror/import work, not a small #124 follow-up.\n- Reject direct import: just-every/code v0.6.100 release/changelog/package metadata because local Every Code main is newer and owns release/distribution state.\n\nNext recommended #124 task: open a focused service-tier metadata adaptation issue/PR, or split a deliberate codex-rs mirror refresh if we want that larger lane.