Skip to content

codex-cloud: document Railway reconnect handling and harden MCP config validation - #1625

Merged
BigSimmo merged 11 commits into
codex/cloud-mcp-hosted-boundaryfrom
codex/fix-this-issue
Aug 5, 2026
Merged

codex-cloud: document Railway reconnect handling and harden MCP config validation#1625
BigSimmo merged 11 commits into
codex/cloud-mcp-hosted-boundaryfrom
codex/fix-this-issue

Conversation

@BigSimmo

@BigSimmoBigSimmo commented Aug 5, 2026•
edited
Loading

Copy link
Copy Markdown
Owner

Summary

  • Document stale host-local railway_cloud reconnect handling for Personal Pro connected Codex Cloud tasks.
  • Harden .codex/config.toml MCP name-mismatch diagnostics so unexpected railway_cloud registrations are rejected with actionable detail.
  • Accept an explicit --hosted-app-inventory= check that rejects stale/unrecognized names and reports only allowlisted presence flags in sanitized capability output.
  • Keep this stacked branch current with codex/cloud-mcp-hosted-boundary (Fix hosted versus local MCP access boundaries #1617) so the PR can merge cleanly.

Verification

  • node scripts/run-vitest.mjs run tests/codex-cloud-setup.test.ts — 1 file, 22 tests passed.
  • git merge-tree --write-tree origin/codex/cloud-mcp-hosted-boundary HEAD — clean tree (no conflicts).
  • npm run docs:check-inventory — 217 script files, 228 npm scripts.
  • Verification not run: verify:ui — Cloud tooling and documentation only; no UI surface change.

RAG impact: no retrieval behaviour change — Cloud tooling and documentation only.

Clinical Governance Preflight

  • No clinical content, retrieval, ranking, ingestion, citation, or answer-generation behaviour changes
  • Supabase remains scoped to Clinical KB Database (sjrfecxgysukkwxsowpy) and read-only
  • No patient-identifiable row-content workflow is introduced
  • Provider credentials remain outside the repository and ordinary shell
  • No deployment or TGA SaMD behaviour change

Risk and rollout

  • Low risk: documentation plus static MCP config / hosted-inventory validation diagnostics only.
  • Rollback: revert the tip commit on codex/fix-this-issue.
  • No production deploy, credential, or clinical-output change.

@coderabbitai

coderabbitaiBot commented Aug 5, 2026•
edited
Loading

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: c9c950c4-5743-400d-92f9-2c53afa3a69d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@supabase

supabaseBot commented Aug 5, 2026

Copy link
Copy Markdown

This pull request has been ignored for the connected project sjrfecxgysukkwxsowpy because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.

Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

devin-ai-integration[bot]
devin-ai-integrationBot reviewed Aug 5, 2026
View reviewed changes

@devin-ai-integrationdevin-ai-integrationBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

Open in Devin Review

chatgpt-codex-connector[bot]

This comment was marked as resolved.

Sign in to view

cursoragentand others added 6 commits August 5, 2026 13:13
@cursoragent
merge origin/main: regenerate scripts-index inventory counts
fffaf00
@cursoragent@BigSimmo
merge origin/codex/cloud-mcp-hosted-boundary into fix-this-issue
cb26aa1
Resolve stacked-PR conflicts by keeping Personal Pro host-integration
guidance and the railway_cloud reconnect note, and by taking the base
scripts-index inventory counts (217 files / 228 entries).
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
@BigSimmo
Merge remote-tracking branch 'origin/codex/cloud-mcp-hosted-boundary'…
792e643
… into codex/fix-this-issue
@cursoragent@BigSimmo
Merge remote-tracking branch 'origin/codex/cloud-mcp-hosted-boundary'…
e5808fe
… into codex/fix-this-issue
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
@BigSimmo
fix(cloud): validate supplied hosted app inventory
5957fac
@BigSimmo
Merge remote-tracking branch 'origin/codex/fix-this-issue' into codex…
13f11d8
…/fix-this-issue
devin-ai-integration[bot]

This comment was marked as resolved.

Sign in to view

cursoragentand others added 3 commits August 5, 2026 13:36
@cursoragent@BigSimmo
fix(cloud): sanitize hosted-app inventory capability output
80cbb9d
Report only allowlisted connector presence flags and unknown counts so
operator-supplied inventory cannot echo credential-shaped strings into
the sanitized Cloud capability lines. Reject unrecognized names at
validation time.
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
@BigSimmo
fix(cloud): redact supplied app identifiers
a394d76
@BigSimmo
merge: integrate hosted inventory redaction
3f95f65
devin-ai-integration[bot]
devin-ai-integrationBot reviewed Aug 5, 2026
View reviewed changes

@devin-ai-integrationdevin-ai-integrationBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 new potential issue.

View 2 additional findings in Devin Review.

Open in Devin Review

Comment threadscripts/check-codex-cloud-setup.mjs
devin-ai-integration[bot]
devin-ai-integrationBot reviewed Aug 5, 2026
View reviewed changes

@devin-ai-integrationdevin-ai-integrationBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 new potential issue.

View 3 additional findings in Devin Review.

Open in Devin Review

Comment threadscripts/check-codex-cloud-setup.mjs
@BigSimmo
BigSimmo merged commit f1fac96 into mainAug 5, 2026
32 checks passed
@BigSimmo
BigSimmo deleted the codex/fix-this-issue branch August 5, 2026 13:58
This was referenced Aug 5, 2026
Merged
Merged
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@devin-ai-integrationdevin-ai-integration[bot]devin-ai-integration[bot] left review comments
@chatgpt-codex-connectorchatgpt-codex-connector[bot]chatgpt-codex-connector[bot] left review comments

Assignees

No one assigned

Labels

codex

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@BigSimmo@cursoragent