feat(codex): plan and apply a Codex CLI update from bound evidence (#2811) - #5016

Closed

luvs01 wants to merge 9 commits into

lidge-jun:devfrom

luvs01:agent/codex-cli-update-apply-20260910

Commits on Sep 21, 2026

feat(codex): plan and apply a Codex CLI update from bound evidence
luvs01
committed
a982f06
fix(codex): verify the fetched CLI tarball against the plan-bound integrity before apply
luvs01
committed
d63a4d4
fix(codex): label the plan command as indicative of the verified install
luvs01
committed
5eeb967
fix(codex): refuse non-advancing cli update targets and fail closed on missing integrity
luvs01
committed
4f8db29
fix(codex): drop the unreachable shim-repair lane from cli update apply
luvs01
committed
410be37
fix(codex): bind apply readback to the planned install location
luvs01
committed
3e0d13c
fix(codex): pin the cli update to the official registry and a cross-process lease
luvs01
committed
dd5fc5b
fix(codex): self-identifying token lease with atomic publish and heartbeat

devin-ai-integration[bot]
and
luvs01
committed
a1da737
merge upstream dev to satisfy exact-head review
devin-ai-integration[bot]
committed
41f5315