feat: display native app and browser icons in work logs

[Yash-Singh1]

What Changed

• Added native app icon resolution and asset access on the server.
• Updated work-log presentation across web and mobile to display native application and browser tool icons.
• Refined preview recording source acquisition and related desktop IPC behavior.
• Updated supporting orchestration, provider, client-runtime, and documentation code to match the revised activity flow.

Why

Work logs should make tool activity recognizable at a glance. Resolving and displaying native app and browser icons provides clearer visual context while simplifying preview recording source handling and keeping activity state consistent across clients.

UI Changes

The web and mobile work-log interfaces now display native application and browser icons alongside relevant tool activity. Screenshots are included in the change for visual reference.

Checklist

• This PR is small and focused
• I explained what changed and why
• I included before/after screenshots for any UI changes
• I included a video for animation/interaction changes

---

Note

Medium Risk
Introduces signed asset URLs and macOS subprocess icon resolution on the server, plus broader propagation of tool metadata through orchestration and clients; failures degrade to generic icons rather than blocking chat.

Overview
Adds provider-neutral tool presentation (toolSurface, toolIcon, toolSource) on lifecycle payloads and threads it through ingestion, work-log derivation, and collapsed-group summaries (including source-based labels like “Used Chrome integration”).

Codex now maps browser-use and computer-use MCP metadata into those fields (task titles, favicons, native app references). Server gains signed native-app-icon assets and a macOS NativeAppIconResolver (Spotlight + sips) so clients can load app icons without exposing host paths.

Web and mobile work logs render icons via a shared-style ToolActivityIconView (favicons, themed logos, native app URLs), with new browser/computer fallback glyphs and light-mode muting for image icons. Shared toolActivityFaviconUrl and extractToolActivityPresentation centralize theme-aware favicon choice and payload parsing.

^{Reviewed by Cursor Bugbot for commit 66faa80. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Display native app and browser icons in work logs

• Adds shared contracts for tool activity presentation (ToolActivitySurface, ToolActivityIcon, ToolActivitySource) and a provider-neutral extractor in extractToolActivityPresentation so lifecycle payloads can carry validated browser/computer surface, icon, and source metadata
• Adds a macOS NativeAppIconResolver service that uses mdfind/sips/plutil to locate app bundles and generate 64px PNG icons, with a 256-entry one-hour cache, and wires it into the server asset pipeline so assets.createUrl can issue signed URLs for native app icons
• Adds theme-aware favicon selection (toolActivityFaviconUrl) with site-owned GitHub light/dark variants and provider URL validation, plus BrowserAppIcon and ComputerUseAppIcon SVG fallbacks
• Updates CodexAdapter to map browser-use and computer-use MCP metadata into canonical presentation fields with action-specific titles, and updates web (MessagesTimeline, session-logic), mobile (threadActivity, ThreadFeed, thread-work-log), and shared (summarizeToolGroup) rendering to carry and display these icons through a new ToolActivityIconView dispatcher
• Risk: session-logic.ts imports the new toolPresentation module via a hyphenated path while the actual filename is camel-cased, which breaks module resolution in environments that enforce path matching and prevents session-logic.ts from compiling or loading; also, resolveAsset in AssetAccess.ts does not validate the requested relative path for native-app-icon claims before resolving the icon

Changes since #9093 opened

• Modified nativeAppSourceKey utility to prevent collisions for overlength native application identifiers by generating deterministic 512-character keys with a SHA-256 hex digest suffix instead of naive truncation [66faa80]
• Added length validation to normalizedHttpUrl utility to reject URLs whose normalized href exceeds 4096 characters [66faa80]
• Introduced browser and computer-use metadata test fixtures in lifecycle test to verify icon display functionality [66faa80]

^{Macroscope summarized 9727def.}

Muted tool icon evidence

A fully white GitHub SVG verifies that light-mode tone adjustment preserves transparency and icon detail. Dark mode retains its existing muted treatment.

Light before

Light after

Dark before

Dark after

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — This introduces a cross-platform work-log presentation capability spanning provider event translation, shared contracts, server-side macOS process/filesystem integration, signed asset delivery, and web/mobile rendering. Because it changes existing runtime presentation and adds new external and host-integrated behavior, the scope is broader than an isolated low-risk UI change.

^{You can add or adjust custom eligibility rules. Learn more.}

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

ℹ️ The exact PR base did not have a successful artifact. Baseline uses the latest successful main measurement shown below.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	12.6 KiB	13.6 KiB	+984 B (+7.6%)	15.1 KiB	✅
Codex	Thread snapshot wire	6.3 KiB	7.0 KiB	+759 B (+11.8%)	7.3 KiB	✅
Codex	Live turn WebSocket wire	6.3 KiB	6.5 KiB	+225 B (+3.5%)	7.8 KiB	✅
Codex	Live turn WebSocket decoded	51.8 KiB	57.1 KiB	+5.2 KiB (+10.1%)	66.4 KiB	✅
Codex	Live turn messages	16	10	−6 (−37.5%)	21	✅
Claude	Total thread wire	12.6 KiB	13.7 KiB	+1.1 KiB (+9.0%)	15.1 KiB	✅
Claude	Thread snapshot wire	6.3 KiB	7.0 KiB	+775 B (+12.1%)	7.3 KiB	✅
Claude	Live turn WebSocket wire	6.3 KiB	6.7 KiB	+392 B (+6.1%)	7.8 KiB	✅
Claude	Live turn WebSocket decoded	52.7 KiB	59.3 KiB	+6.6 KiB (+12.6%)	66.4 KiB	✅
Claude	Live turn messages	16	10	−6 (−37.5%)	21	✅

Baseline: bcfd485 · PR result: 66faa80 · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 113.8 KiB
• Claude decoded thread snapshot: 114.5 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want fixes drafted automatically? Bugbot Autofix can create code changes for findings. A team admin can enable Autofix in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit d1a46a0. Configure here.}

[maria-rcks]

Note

Written by gpt-5.6-sol on behalf of Maria

muted tool icon evidence

light before

light after

dark before

dark after

[Yash-Singh1]

What Changed

• Added native app icon resolution and asset access on the server.
• Updated work-log presentation across web and mobile to display native application and browser tool icons.
• Refined preview recording source acquisition and related desktop IPC behavior.
• Updated supporting orchestration, provider, client-runtime, and documentation code to match the revised activity flow.

Why

Work logs should make tool activity recognizable at a glance. Resolving and displaying native app and browser icons provides clearer visual context while simplifying preview recording source handling and keeping activity state consistent across clients.

UI Changes

The web and mobile work-log interfaces now display native application and browser icons alongside relevant tool activity. Screenshots are included in the change for visual reference.

Checklist

• This PR is small and focused
• I explained what changed and why
• I included before/after screenshots for any UI changes
• I included a video for animation/interaction changes

---

Note

Medium Risk
Introduces signed asset URLs and macOS subprocess icon resolution on the server, plus broader propagation of tool metadata through orchestration and clients; failures degrade to generic icons rather than blocking chat.

Overview
Adds provider-neutral tool presentation (toolSurface, toolIcon, toolSource) on lifecycle payloads and threads it through ingestion, work-log derivation, and collapsed-group summaries (including source-based labels like “Used Chrome integration”).

Codex now maps browser-use and computer-use MCP metadata into those fields (task titles, favicons, native app references). Server gains signed native-app-icon assets and a macOS NativeAppIconResolver (Spotlight + sips) so clients can load app icons without exposing host paths.

Web and mobile work logs render icons via a shared-style ToolActivityIconView (favicons, themed logos, native app URLs), with new browser/computer fallback glyphs and light-mode muting for image icons. Shared toolActivityFaviconUrl and extractToolActivityPresentation centralize theme-aware favicon choice and payload parsing.

^{Reviewed by Cursor Bugbot for commit 66faa80. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Display native app and browser icons in work logs

• Adds shared contracts for tool activity presentation (ToolActivitySurface, ToolActivityIcon, ToolActivitySource) and a provider-neutral extractor in extractToolActivityPresentation so lifecycle payloads can carry validated browser/computer surface, icon, and source metadata
• Adds a macOS NativeAppIconResolver service that uses mdfind/sips/plutil to locate app bundles and generate 64px PNG icons, with a 256-entry one-hour cache, and wires it into the server asset pipeline so assets.createUrl can issue signed URLs for native app icons
• Adds theme-aware favicon selection (toolActivityFaviconUrl) with site-owned GitHub light/dark variants and provider URL validation, plus BrowserAppIcon and ComputerUseAppIcon SVG fallbacks
• Updates CodexAdapter to map browser-use and computer-use MCP metadata into canonical presentation fields with action-specific titles, and updates web (MessagesTimeline, session-logic), mobile (threadActivity, ThreadFeed, thread-work-log), and shared (summarizeToolGroup) rendering to carry and display these icons through a new ToolActivityIconView dispatcher
• Risk: session-logic.ts imports the new toolPresentation module via a hyphenated path while the actual filename is camel-cased, which breaks module resolution in environments that enforce path matching and prevents session-logic.ts from compiling or loading; also, resolveAsset in AssetAccess.ts does not validate the requested relative path for native-app-icon claims before resolving the icon

Changes since #9093 opened

• Modified nativeAppSourceKey utility to prevent collisions for overlength native application identifiers by generating deterministic 512-character keys with a SHA-256 hex digest suffix instead of naive truncation [66faa80]
• Added length validation to normalizedHttpUrl utility to reject URLs whose normalized href exceeds 4096 characters [66faa80]
• Introduced browser and computer-use metadata test fixtures in lifecycle test to verify icon display functionality [66faa80]

^{Macroscope summarized 9727def.}

Muted tool icon evidence

A fully white GitHub SVG verifies that light-mode tone adjustment preserves transparency and icon detail. Dark mode retains its existing muted treatment.

Light before

Light after

Dark before

Dark after

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — This introduces a cross-platform work-log presentation capability spanning provider event translation, shared contracts, server-side macOS process/filesystem integration, signed asset delivery, and web/mobile rendering. Because it changes existing runtime presentation and adds new external and host-integrated behavior, the scope is broader than an isolated low-risk UI change.

^{You can add or adjust custom eligibility rules. Learn more.}

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

ℹ️ The exact PR base did not have a successful artifact. Baseline uses the latest successful main measurement shown below.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	12.6 KiB	13.6 KiB	+984 B (+7.6%)	15.1 KiB	✅
Codex	Thread snapshot wire	6.3 KiB	7.0 KiB	+759 B (+11.8%)	7.3 KiB	✅
Codex	Live turn WebSocket wire	6.3 KiB	6.5 KiB	+225 B (+3.5%)	7.8 KiB	✅
Codex	Live turn WebSocket decoded	51.8 KiB	57.1 KiB	+5.2 KiB (+10.1%)	66.4 KiB	✅
Codex	Live turn messages	16	10	−6 (−37.5%)	21	✅
Claude	Total thread wire	12.6 KiB	13.7 KiB	+1.1 KiB (+9.0%)	15.1 KiB	✅
Claude	Thread snapshot wire	6.3 KiB	7.0 KiB	+775 B (+12.1%)	7.3 KiB	✅
Claude	Live turn WebSocket wire	6.3 KiB	6.7 KiB	+392 B (+6.1%)	7.8 KiB	✅
Claude	Live turn WebSocket decoded	52.7 KiB	59.3 KiB	+6.6 KiB (+12.6%)	66.4 KiB	✅
Claude	Live turn messages	16	10	−6 (−37.5%)	21	✅

Baseline: bcfd485 · PR result: 66faa80 · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 113.8 KiB
• Claude decoded thread snapshot: 114.5 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want fixes drafted automatically? Bugbot Autofix can create code changes for findings. A team admin can enable Autofix in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit d1a46a0. Configure here.}

[maria-rcks]

Note

Written by gpt-5.6-sol on behalf of Maria

muted tool icon evidence

light before

light after

dark before

dark after

[Yash-Singh1]

What Changed

• Added native app icon resolution and asset access on the server.
• Updated work-log presentation across web and mobile to display native application and browser tool icons.
• Refined preview recording source acquisition and related desktop IPC behavior.
• Updated supporting orchestration, provider, client-runtime, and documentation code to match the revised activity flow.

Why

Work logs should make tool activity recognizable at a glance. Resolving and displaying native app and browser icons provides clearer visual context while simplifying preview recording source handling and keeping activity state consistent across clients.

UI Changes

The web and mobile work-log interfaces now display native application and browser icons alongside relevant tool activity. Screenshots are included in the change for visual reference.

Checklist

• This PR is small and focused
• I explained what changed and why
• I included before/after screenshots for any UI changes
• I included a video for animation/interaction changes

---

Note

Medium Risk
Introduces signed asset URLs and macOS subprocess icon resolution on the server, plus broader propagation of tool metadata through orchestration and clients; failures degrade to generic icons rather than blocking chat.

Overview
Adds provider-neutral tool presentation (toolSurface, toolIcon, toolSource) on lifecycle payloads and threads it through ingestion, work-log derivation, and collapsed-group summaries (including source-based labels like “Used Chrome integration”).

Codex now maps browser-use and computer-use MCP metadata into those fields (task titles, favicons, native app references). Server gains signed native-app-icon assets and a macOS NativeAppIconResolver (Spotlight + sips) so clients can load app icons without exposing host paths.

Web and mobile work logs render icons via a shared-style ToolActivityIconView (favicons, themed logos, native app URLs), with new browser/computer fallback glyphs and light-mode muting for image icons. Shared toolActivityFaviconUrl and extractToolActivityPresentation centralize theme-aware favicon choice and payload parsing.

^{Reviewed by Cursor Bugbot for commit 66faa80. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Display native app and browser icons in work logs

• Adds shared contracts for tool activity presentation (ToolActivitySurface, ToolActivityIcon, ToolActivitySource) and a provider-neutral extractor in extractToolActivityPresentation so lifecycle payloads can carry validated browser/computer surface, icon, and source metadata
• Adds a macOS NativeAppIconResolver service that uses mdfind/sips/plutil to locate app bundles and generate 64px PNG icons, with a 256-entry one-hour cache, and wires it into the server asset pipeline so assets.createUrl can issue signed URLs for native app icons
• Adds theme-aware favicon selection (toolActivityFaviconUrl) with site-owned GitHub light/dark variants and provider URL validation, plus BrowserAppIcon and ComputerUseAppIcon SVG fallbacks
• Updates CodexAdapter to map browser-use and computer-use MCP metadata into canonical presentation fields with action-specific titles, and updates web (MessagesTimeline, session-logic), mobile (threadActivity, ThreadFeed, thread-work-log), and shared (summarizeToolGroup) rendering to carry and display these icons through a new ToolActivityIconView dispatcher
• Risk: session-logic.ts imports the new toolPresentation module via a hyphenated path while the actual filename is camel-cased, which breaks module resolution in environments that enforce path matching and prevents session-logic.ts from compiling or loading; also, resolveAsset in AssetAccess.ts does not validate the requested relative path for native-app-icon claims before resolving the icon

Changes since #9093 opened

• Modified nativeAppSourceKey utility to prevent collisions for overlength native application identifiers by generating deterministic 512-character keys with a SHA-256 hex digest suffix instead of naive truncation [66faa80]
• Added length validation to normalizedHttpUrl utility to reject URLs whose normalized href exceeds 4096 characters [66faa80]
• Introduced browser and computer-use metadata test fixtures in lifecycle test to verify icon display functionality [66faa80]

^{Macroscope summarized 9727def.}

Muted tool icon evidence

A fully white GitHub SVG verifies that light-mode tone adjustment preserves transparency and icon detail. Dark mode retains its existing muted treatment.

Light before

Light after

Dark before

Dark after

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — This introduces a cross-platform work-log presentation capability spanning provider event translation, shared contracts, server-side macOS process/filesystem integration, signed asset delivery, and web/mobile rendering. Because it changes existing runtime presentation and adds new external and host-integrated behavior, the scope is broader than an isolated low-risk UI change.

^{You can add or adjust custom eligibility rules. Learn more.}

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

ℹ️ The exact PR base did not have a successful artifact. Baseline uses the latest successful main measurement shown below.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	12.6 KiB	13.6 KiB	+984 B (+7.6%)	15.1 KiB	✅
Codex	Thread snapshot wire	6.3 KiB	7.0 KiB	+759 B (+11.8%)	7.3 KiB	✅
Codex	Live turn WebSocket wire	6.3 KiB	6.5 KiB	+225 B (+3.5%)	7.8 KiB	✅
Codex	Live turn WebSocket decoded	51.8 KiB	57.1 KiB	+5.2 KiB (+10.1%)	66.4 KiB	✅
Codex	Live turn messages	16	10	−6 (−37.5%)	21	✅
Claude	Total thread wire	12.6 KiB	13.7 KiB	+1.1 KiB (+9.0%)	15.1 KiB	✅
Claude	Thread snapshot wire	6.3 KiB	7.0 KiB	+775 B (+12.1%)	7.3 KiB	✅
Claude	Live turn WebSocket wire	6.3 KiB	6.7 KiB	+392 B (+6.1%)	7.8 KiB	✅
Claude	Live turn WebSocket decoded	52.7 KiB	59.3 KiB	+6.6 KiB (+12.6%)	66.4 KiB	✅
Claude	Live turn messages	16	10	−6 (−37.5%)	21	✅

Baseline: bcfd485 · PR result: 66faa80 · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 113.8 KiB
• Claude decoded thread snapshot: 114.5 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want fixes drafted automatically? Bugbot Autofix can create code changes for findings. A team admin can enable Autofix in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit d1a46a0. Configure here.}

[maria-rcks]

Note

Written by gpt-5.6-sol on behalf of Maria

muted tool icon evidence

light before

light after

dark before

dark after

[Yash-Singh1]

What Changed

• Added native app icon resolution and asset access on the server.
• Updated work-log presentation across web and mobile to display native application and browser tool icons.
• Refined preview recording source acquisition and related desktop IPC behavior.
• Updated supporting orchestration, provider, client-runtime, and documentation code to match the revised activity flow.

Why

Work logs should make tool activity recognizable at a glance. Resolving and displaying native app and browser icons provides clearer visual context while simplifying preview recording source handling and keeping activity state consistent across clients.

UI Changes

The web and mobile work-log interfaces now display native application and browser icons alongside relevant tool activity. Screenshots are included in the change for visual reference.

Checklist

• This PR is small and focused
• I explained what changed and why
• I included before/after screenshots for any UI changes
• I included a video for animation/interaction changes

---

Note

Medium Risk
Introduces signed asset URLs and macOS subprocess icon resolution on the server, plus broader propagation of tool metadata through orchestration and clients; failures degrade to generic icons rather than blocking chat.

Overview
Adds provider-neutral tool presentation (toolSurface, toolIcon, toolSource) on lifecycle payloads and threads it through ingestion, work-log derivation, and collapsed-group summaries (including source-based labels like “Used Chrome integration”).

Codex now maps browser-use and computer-use MCP metadata into those fields (task titles, favicons, native app references). Server gains signed native-app-icon assets and a macOS NativeAppIconResolver (Spotlight + sips) so clients can load app icons without exposing host paths.

Web and mobile work logs render icons via a shared-style ToolActivityIconView (favicons, themed logos, native app URLs), with new browser/computer fallback glyphs and light-mode muting for image icons. Shared toolActivityFaviconUrl and extractToolActivityPresentation centralize theme-aware favicon choice and payload parsing.

^{Reviewed by Cursor Bugbot for commit 66faa80. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Display native app and browser icons in work logs

• Adds shared contracts for tool activity presentation (ToolActivitySurface, ToolActivityIcon, ToolActivitySource) and a provider-neutral extractor in extractToolActivityPresentation so lifecycle payloads can carry validated browser/computer surface, icon, and source metadata
• Adds a macOS NativeAppIconResolver service that uses mdfind/sips/plutil to locate app bundles and generate 64px PNG icons, with a 256-entry one-hour cache, and wires it into the server asset pipeline so assets.createUrl can issue signed URLs for native app icons
• Adds theme-aware favicon selection (toolActivityFaviconUrl) with site-owned GitHub light/dark variants and provider URL validation, plus BrowserAppIcon and ComputerUseAppIcon SVG fallbacks
• Updates CodexAdapter to map browser-use and computer-use MCP metadata into canonical presentation fields with action-specific titles, and updates web (MessagesTimeline, session-logic), mobile (threadActivity, ThreadFeed, thread-work-log), and shared (summarizeToolGroup) rendering to carry and display these icons through a new ToolActivityIconView dispatcher
• Risk: session-logic.ts imports the new toolPresentation module via a hyphenated path while the actual filename is camel-cased, which breaks module resolution in environments that enforce path matching and prevents session-logic.ts from compiling or loading; also, resolveAsset in AssetAccess.ts does not validate the requested relative path for native-app-icon claims before resolving the icon

Changes since #9093 opened

• Modified nativeAppSourceKey utility to prevent collisions for overlength native application identifiers by generating deterministic 512-character keys with a SHA-256 hex digest suffix instead of naive truncation [66faa80]
• Added length validation to normalizedHttpUrl utility to reject URLs whose normalized href exceeds 4096 characters [66faa80]
• Introduced browser and computer-use metadata test fixtures in lifecycle test to verify icon display functionality [66faa80]

^{Macroscope summarized 9727def.}

Muted tool icon evidence

A fully white GitHub SVG verifies that light-mode tone adjustment preserves transparency and icon detail. Dark mode retains its existing muted treatment.

Light before

Light after

Dark before

Dark after

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — This introduces a cross-platform work-log presentation capability spanning provider event translation, shared contracts, server-side macOS process/filesystem integration, signed asset delivery, and web/mobile rendering. Because it changes existing runtime presentation and adds new external and host-integrated behavior, the scope is broader than an isolated low-risk UI change.

^{You can add or adjust custom eligibility rules. Learn more.}

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

ℹ️ The exact PR base did not have a successful artifact. Baseline uses the latest successful main measurement shown below.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	12.6 KiB	13.6 KiB	+984 B (+7.6%)	15.1 KiB	✅
Codex	Thread snapshot wire	6.3 KiB	7.0 KiB	+759 B (+11.8%)	7.3 KiB	✅
Codex	Live turn WebSocket wire	6.3 KiB	6.5 KiB	+225 B (+3.5%)	7.8 KiB	✅
Codex	Live turn WebSocket decoded	51.8 KiB	57.1 KiB	+5.2 KiB (+10.1%)	66.4 KiB	✅
Codex	Live turn messages	16	10	−6 (−37.5%)	21	✅
Claude	Total thread wire	12.6 KiB	13.7 KiB	+1.1 KiB (+9.0%)	15.1 KiB	✅
Claude	Thread snapshot wire	6.3 KiB	7.0 KiB	+775 B (+12.1%)	7.3 KiB	✅
Claude	Live turn WebSocket wire	6.3 KiB	6.7 KiB	+392 B (+6.1%)	7.8 KiB	✅
Claude	Live turn WebSocket decoded	52.7 KiB	59.3 KiB	+6.6 KiB (+12.6%)	66.4 KiB	✅
Claude	Live turn messages	16	10	−6 (−37.5%)	21	✅

Baseline: bcfd485 · PR result: 66faa80 · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 113.8 KiB
• Claude decoded thread snapshot: 114.5 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want fixes drafted automatically? Bugbot Autofix can create code changes for findings. A team admin can enable Autofix in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit d1a46a0. Configure here.}

[maria-rcks]

Note

Written by gpt-5.6-sol on behalf of Maria

muted tool icon evidence

light before

light after

dark before

dark after

[Yash-Singh1]

What Changed

• Added native app icon resolution and asset access on the server.
• Updated work-log presentation across web and mobile to display native application and browser tool icons.
• Refined preview recording source acquisition and related desktop IPC behavior.
• Updated supporting orchestration, provider, client-runtime, and documentation code to match the revised activity flow.

Why

Work logs should make tool activity recognizable at a glance. Resolving and displaying native app and browser icons provides clearer visual context while simplifying preview recording source handling and keeping activity state consistent across clients.

UI Changes

The web and mobile work-log interfaces now display native application and browser icons alongside relevant tool activity. Screenshots are included in the change for visual reference.

Checklist

• This PR is small and focused
• I explained what changed and why
• I included before/after screenshots for any UI changes
• I included a video for animation/interaction changes

---

Note

Medium Risk
Introduces signed asset URLs and macOS subprocess icon resolution on the server, plus broader propagation of tool metadata through orchestration and clients; failures degrade to generic icons rather than blocking chat.

Overview
Adds provider-neutral tool presentation (toolSurface, toolIcon, toolSource) on lifecycle payloads and threads it through ingestion, work-log derivation, and collapsed-group summaries (including source-based labels like “Used Chrome integration”).

Codex now maps browser-use and computer-use MCP metadata into those fields (task titles, favicons, native app references). Server gains signed native-app-icon assets and a macOS NativeAppIconResolver (Spotlight + sips) so clients can load app icons without exposing host paths.

Web and mobile work logs render icons via a shared-style ToolActivityIconView (favicons, themed logos, native app URLs), with new browser/computer fallback glyphs and light-mode muting for image icons. Shared toolActivityFaviconUrl and extractToolActivityPresentation centralize theme-aware favicon choice and payload parsing.

^{Reviewed by Cursor Bugbot for commit 66faa80. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Display native app and browser icons in work logs

• Adds shared contracts for tool activity presentation (ToolActivitySurface, ToolActivityIcon, ToolActivitySource) and a provider-neutral extractor in extractToolActivityPresentation so lifecycle payloads can carry validated browser/computer surface, icon, and source metadata
• Adds a macOS NativeAppIconResolver service that uses mdfind/sips/plutil to locate app bundles and generate 64px PNG icons, with a 256-entry one-hour cache, and wires it into the server asset pipeline so assets.createUrl can issue signed URLs for native app icons
• Adds theme-aware favicon selection (toolActivityFaviconUrl) with site-owned GitHub light/dark variants and provider URL validation, plus BrowserAppIcon and ComputerUseAppIcon SVG fallbacks
• Updates CodexAdapter to map browser-use and computer-use MCP metadata into canonical presentation fields with action-specific titles, and updates web (MessagesTimeline, session-logic), mobile (threadActivity, ThreadFeed, thread-work-log), and shared (summarizeToolGroup) rendering to carry and display these icons through a new ToolActivityIconView dispatcher
• Risk: session-logic.ts imports the new toolPresentation module via a hyphenated path while the actual filename is camel-cased, which breaks module resolution in environments that enforce path matching and prevents session-logic.ts from compiling or loading; also, resolveAsset in AssetAccess.ts does not validate the requested relative path for native-app-icon claims before resolving the icon

Changes since #9093 opened

• Modified nativeAppSourceKey utility to prevent collisions for overlength native application identifiers by generating deterministic 512-character keys with a SHA-256 hex digest suffix instead of naive truncation [66faa80]
• Added length validation to normalizedHttpUrl utility to reject URLs whose normalized href exceeds 4096 characters [66faa80]
• Introduced browser and computer-use metadata test fixtures in lifecycle test to verify icon display functionality [66faa80]

^{Macroscope summarized 9727def.}

Muted tool icon evidence

A fully white GitHub SVG verifies that light-mode tone adjustment preserves transparency and icon detail. Dark mode retains its existing muted treatment.

Light before

Light after

Dark before

Dark after

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — This introduces a cross-platform work-log presentation capability spanning provider event translation, shared contracts, server-side macOS process/filesystem integration, signed asset delivery, and web/mobile rendering. Because it changes existing runtime presentation and adds new external and host-integrated behavior, the scope is broader than an isolated low-risk UI change.

^{You can add or adjust custom eligibility rules. Learn more.}

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

ℹ️ The exact PR base did not have a successful artifact. Baseline uses the latest successful main measurement shown below.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	12.6 KiB	13.6 KiB	+984 B (+7.6%)	15.1 KiB	✅
Codex	Thread snapshot wire	6.3 KiB	7.0 KiB	+759 B (+11.8%)	7.3 KiB	✅
Codex	Live turn WebSocket wire	6.3 KiB	6.5 KiB	+225 B (+3.5%)	7.8 KiB	✅
Codex	Live turn WebSocket decoded	51.8 KiB	57.1 KiB	+5.2 KiB (+10.1%)	66.4 KiB	✅
Codex	Live turn messages	16	10	−6 (−37.5%)	21	✅
Claude	Total thread wire	12.6 KiB	13.7 KiB	+1.1 KiB (+9.0%)	15.1 KiB	✅
Claude	Thread snapshot wire	6.3 KiB	7.0 KiB	+775 B (+12.1%)	7.3 KiB	✅
Claude	Live turn WebSocket wire	6.3 KiB	6.7 KiB	+392 B (+6.1%)	7.8 KiB	✅
Claude	Live turn WebSocket decoded	52.7 KiB	59.3 KiB	+6.6 KiB (+12.6%)	66.4 KiB	✅
Claude	Live turn messages	16	10	−6 (−37.5%)	21	✅

Baseline: bcfd485 · PR result: 66faa80 · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 113.8 KiB
• Claude decoded thread snapshot: 114.5 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want fixes drafted automatically? Bugbot Autofix can create code changes for findings. A team admin can enable Autofix in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit d1a46a0. Configure here.}

[maria-rcks]

Note

Written by gpt-5.6-sol on behalf of Maria

muted tool icon evidence

light before

light after

dark before

dark after

[Yash-Singh1]

What Changed

• Added native app icon resolution and asset access on the server.
• Updated work-log presentation across web and mobile to display native application and browser tool icons.
• Refined preview recording source acquisition and related desktop IPC behavior.
• Updated supporting orchestration, provider, client-runtime, and documentation code to match the revised activity flow.

Why

Work logs should make tool activity recognizable at a glance. Resolving and displaying native app and browser icons provides clearer visual context while simplifying preview recording source handling and keeping activity state consistent across clients.

UI Changes

The web and mobile work-log interfaces now display native application and browser icons alongside relevant tool activity. Screenshots are included in the change for visual reference.

Checklist

• This PR is small and focused
• I explained what changed and why
• I included before/after screenshots for any UI changes
• I included a video for animation/interaction changes

---

Note

Medium Risk
Introduces signed asset URLs and macOS subprocess icon resolution on the server, plus broader propagation of tool metadata through orchestration and clients; failures degrade to generic icons rather than blocking chat.

Overview
Adds provider-neutral tool presentation (toolSurface, toolIcon, toolSource) on lifecycle payloads and threads it through ingestion, work-log derivation, and collapsed-group summaries (including source-based labels like “Used Chrome integration”).

Codex now maps browser-use and computer-use MCP metadata into those fields (task titles, favicons, native app references). Server gains signed native-app-icon assets and a macOS NativeAppIconResolver (Spotlight + sips) so clients can load app icons without exposing host paths.

Web and mobile work logs render icons via a shared-style ToolActivityIconView (favicons, themed logos, native app URLs), with new browser/computer fallback glyphs and light-mode muting for image icons. Shared toolActivityFaviconUrl and extractToolActivityPresentation centralize theme-aware favicon choice and payload parsing.

^{Reviewed by Cursor Bugbot for commit 66faa80. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Display native app and browser icons in work logs

• Adds shared contracts for tool activity presentation (ToolActivitySurface, ToolActivityIcon, ToolActivitySource) and a provider-neutral extractor in extractToolActivityPresentation so lifecycle payloads can carry validated browser/computer surface, icon, and source metadata
• Adds a macOS NativeAppIconResolver service that uses mdfind/sips/plutil to locate app bundles and generate 64px PNG icons, with a 256-entry one-hour cache, and wires it into the server asset pipeline so assets.createUrl can issue signed URLs for native app icons
• Adds theme-aware favicon selection (toolActivityFaviconUrl) with site-owned GitHub light/dark variants and provider URL validation, plus BrowserAppIcon and ComputerUseAppIcon SVG fallbacks
• Updates CodexAdapter to map browser-use and computer-use MCP metadata into canonical presentation fields with action-specific titles, and updates web (MessagesTimeline, session-logic), mobile (threadActivity, ThreadFeed, thread-work-log), and shared (summarizeToolGroup) rendering to carry and display these icons through a new ToolActivityIconView dispatcher
• Risk: session-logic.ts imports the new toolPresentation module via a hyphenated path while the actual filename is camel-cased, which breaks module resolution in environments that enforce path matching and prevents session-logic.ts from compiling or loading; also, resolveAsset in AssetAccess.ts does not validate the requested relative path for native-app-icon claims before resolving the icon

Changes since #9093 opened

• Modified nativeAppSourceKey utility to prevent collisions for overlength native application identifiers by generating deterministic 512-character keys with a SHA-256 hex digest suffix instead of naive truncation [66faa80]
• Added length validation to normalizedHttpUrl utility to reject URLs whose normalized href exceeds 4096 characters [66faa80]
• Introduced browser and computer-use metadata test fixtures in lifecycle test to verify icon display functionality [66faa80]

^{Macroscope summarized 9727def.}

Muted tool icon evidence

A fully white GitHub SVG verifies that light-mode tone adjustment preserves transparency and icon detail. Dark mode retains its existing muted treatment.

Light before

Light after

Dark before

Dark after

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — This introduces a cross-platform work-log presentation capability spanning provider event translation, shared contracts, server-side macOS process/filesystem integration, signed asset delivery, and web/mobile rendering. Because it changes existing runtime presentation and adds new external and host-integrated behavior, the scope is broader than an isolated low-risk UI change.

^{You can add or adjust custom eligibility rules. Learn more.}

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

ℹ️ The exact PR base did not have a successful artifact. Baseline uses the latest successful main measurement shown below.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	12.6 KiB	13.6 KiB	+984 B (+7.6%)	15.1 KiB	✅
Codex	Thread snapshot wire	6.3 KiB	7.0 KiB	+759 B (+11.8%)	7.3 KiB	✅
Codex	Live turn WebSocket wire	6.3 KiB	6.5 KiB	+225 B (+3.5%)	7.8 KiB	✅
Codex	Live turn WebSocket decoded	51.8 KiB	57.1 KiB	+5.2 KiB (+10.1%)	66.4 KiB	✅
Codex	Live turn messages	16	10	−6 (−37.5%)	21	✅
Claude	Total thread wire	12.6 KiB	13.7 KiB	+1.1 KiB (+9.0%)	15.1 KiB	✅
Claude	Thread snapshot wire	6.3 KiB	7.0 KiB	+775 B (+12.1%)	7.3 KiB	✅
Claude	Live turn WebSocket wire	6.3 KiB	6.7 KiB	+392 B (+6.1%)	7.8 KiB	✅
Claude	Live turn WebSocket decoded	52.7 KiB	59.3 KiB	+6.6 KiB (+12.6%)	66.4 KiB	✅
Claude	Live turn messages	16	10	−6 (−37.5%)	21	✅

Baseline: bcfd485 · PR result: 66faa80 · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 113.8 KiB
• Claude decoded thread snapshot: 114.5 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want fixes drafted automatically? Bugbot Autofix can create code changes for findings. A team admin can enable Autofix in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit d1a46a0. Configure here.}

[maria-rcks]

Note

Written by gpt-5.6-sol on behalf of Maria

muted tool icon evidence

light before

light after

dark before

dark after

[Yash-Singh1]

What Changed

• Added native app icon resolution and asset access on the server.
• Updated work-log presentation across web and mobile to display native application and browser tool icons.
• Refined preview recording source acquisition and related desktop IPC behavior.
• Updated supporting orchestration, provider, client-runtime, and documentation code to match the revised activity flow.

Why

Work logs should make tool activity recognizable at a glance. Resolving and displaying native app and browser icons provides clearer visual context while simplifying preview recording source handling and keeping activity state consistent across clients.

UI Changes

The web and mobile work-log interfaces now display native application and browser icons alongside relevant tool activity. Screenshots are included in the change for visual reference.

Checklist

• This PR is small and focused
• I explained what changed and why
• I included before/after screenshots for any UI changes
• I included a video for animation/interaction changes

---

Note

Medium Risk
Introduces signed asset URLs and macOS subprocess icon resolution on the server, plus broader propagation of tool metadata through orchestration and clients; failures degrade to generic icons rather than blocking chat.

Overview
Adds provider-neutral tool presentation (toolSurface, toolIcon, toolSource) on lifecycle payloads and threads it through ingestion, work-log derivation, and collapsed-group summaries (including source-based labels like “Used Chrome integration”).

Codex now maps browser-use and computer-use MCP metadata into those fields (task titles, favicons, native app references). Server gains signed native-app-icon assets and a macOS NativeAppIconResolver (Spotlight + sips) so clients can load app icons without exposing host paths.

Web and mobile work logs render icons via a shared-style ToolActivityIconView (favicons, themed logos, native app URLs), with new browser/computer fallback glyphs and light-mode muting for image icons. Shared toolActivityFaviconUrl and extractToolActivityPresentation centralize theme-aware favicon choice and payload parsing.

^{Reviewed by Cursor Bugbot for commit 66faa80. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Display native app and browser icons in work logs

• Adds shared contracts for tool activity presentation (ToolActivitySurface, ToolActivityIcon, ToolActivitySource) and a provider-neutral extractor in extractToolActivityPresentation so lifecycle payloads can carry validated browser/computer surface, icon, and source metadata
• Adds a macOS NativeAppIconResolver service that uses mdfind/sips/plutil to locate app bundles and generate 64px PNG icons, with a 256-entry one-hour cache, and wires it into the server asset pipeline so assets.createUrl can issue signed URLs for native app icons
• Adds theme-aware favicon selection (toolActivityFaviconUrl) with site-owned GitHub light/dark variants and provider URL validation, plus BrowserAppIcon and ComputerUseAppIcon SVG fallbacks
• Updates CodexAdapter to map browser-use and computer-use MCP metadata into canonical presentation fields with action-specific titles, and updates web (MessagesTimeline, session-logic), mobile (threadActivity, ThreadFeed, thread-work-log), and shared (summarizeToolGroup) rendering to carry and display these icons through a new ToolActivityIconView dispatcher
• Risk: session-logic.ts imports the new toolPresentation module via a hyphenated path while the actual filename is camel-cased, which breaks module resolution in environments that enforce path matching and prevents session-logic.ts from compiling or loading; also, resolveAsset in AssetAccess.ts does not validate the requested relative path for native-app-icon claims before resolving the icon

Changes since #9093 opened

• Modified nativeAppSourceKey utility to prevent collisions for overlength native application identifiers by generating deterministic 512-character keys with a SHA-256 hex digest suffix instead of naive truncation [66faa80]
• Added length validation to normalizedHttpUrl utility to reject URLs whose normalized href exceeds 4096 characters [66faa80]
• Introduced browser and computer-use metadata test fixtures in lifecycle test to verify icon display functionality [66faa80]

^{Macroscope summarized 9727def.}

Muted tool icon evidence

A fully white GitHub SVG verifies that light-mode tone adjustment preserves transparency and icon detail. Dark mode retains its existing muted treatment.

Light before

Light after

Dark before

Dark after

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — This introduces a cross-platform work-log presentation capability spanning provider event translation, shared contracts, server-side macOS process/filesystem integration, signed asset delivery, and web/mobile rendering. Because it changes existing runtime presentation and adds new external and host-integrated behavior, the scope is broader than an isolated low-risk UI change.

^{You can add or adjust custom eligibility rules. Learn more.}

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

ℹ️ The exact PR base did not have a successful artifact. Baseline uses the latest successful main measurement shown below.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	12.6 KiB	13.6 KiB	+984 B (+7.6%)	15.1 KiB	✅
Codex	Thread snapshot wire	6.3 KiB	7.0 KiB	+759 B (+11.8%)	7.3 KiB	✅
Codex	Live turn WebSocket wire	6.3 KiB	6.5 KiB	+225 B (+3.5%)	7.8 KiB	✅
Codex	Live turn WebSocket decoded	51.8 KiB	57.1 KiB	+5.2 KiB (+10.1%)	66.4 KiB	✅
Codex	Live turn messages	16	10	−6 (−37.5%)	21	✅
Claude	Total thread wire	12.6 KiB	13.7 KiB	+1.1 KiB (+9.0%)	15.1 KiB	✅
Claude	Thread snapshot wire	6.3 KiB	7.0 KiB	+775 B (+12.1%)	7.3 KiB	✅
Claude	Live turn WebSocket wire	6.3 KiB	6.7 KiB	+392 B (+6.1%)	7.8 KiB	✅
Claude	Live turn WebSocket decoded	52.7 KiB	59.3 KiB	+6.6 KiB (+12.6%)	66.4 KiB	✅
Claude	Live turn messages	16	10	−6 (−37.5%)	21	✅

Baseline: bcfd485 · PR result: 66faa80 · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 113.8 KiB
• Claude decoded thread snapshot: 114.5 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want fixes drafted automatically? Bugbot Autofix can create code changes for findings. A team admin can enable Autofix in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit d1a46a0. Configure here.}

[maria-rcks]

Note

Written by gpt-5.6-sol on behalf of Maria

muted tool icon evidence

light before

light after

dark before

dark after

[Yash-Singh1]

What Changed

• Added native app icon resolution and asset access on the server.
• Updated work-log presentation across web and mobile to display native application and browser tool icons.
• Refined preview recording source acquisition and related desktop IPC behavior.
• Updated supporting orchestration, provider, client-runtime, and documentation code to match the revised activity flow.

Why

Work logs should make tool activity recognizable at a glance. Resolving and displaying native app and browser icons provides clearer visual context while simplifying preview recording source handling and keeping activity state consistent across clients.

UI Changes

The web and mobile work-log interfaces now display native application and browser icons alongside relevant tool activity. Screenshots are included in the change for visual reference.

Checklist

• This PR is small and focused
• I explained what changed and why
• I included before/after screenshots for any UI changes
• I included a video for animation/interaction changes

---

Note

Medium Risk
Introduces signed asset URLs and macOS subprocess icon resolution on the server, plus broader propagation of tool metadata through orchestration and clients; failures degrade to generic icons rather than blocking chat.

Overview
Adds provider-neutral tool presentation (toolSurface, toolIcon, toolSource) on lifecycle payloads and threads it through ingestion, work-log derivation, and collapsed-group summaries (including source-based labels like “Used Chrome integration”).

Codex now maps browser-use and computer-use MCP metadata into those fields (task titles, favicons, native app references). Server gains signed native-app-icon assets and a macOS NativeAppIconResolver (Spotlight + sips) so clients can load app icons without exposing host paths.

Web and mobile work logs render icons via a shared-style ToolActivityIconView (favicons, themed logos, native app URLs), with new browser/computer fallback glyphs and light-mode muting for image icons. Shared toolActivityFaviconUrl and extractToolActivityPresentation centralize theme-aware favicon choice and payload parsing.

^{Reviewed by Cursor Bugbot for commit 66faa80. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Display native app and browser icons in work logs

• Adds shared contracts for tool activity presentation (ToolActivitySurface, ToolActivityIcon, ToolActivitySource) and a provider-neutral extractor in extractToolActivityPresentation so lifecycle payloads can carry validated browser/computer surface, icon, and source metadata
• Adds a macOS NativeAppIconResolver service that uses mdfind/sips/plutil to locate app bundles and generate 64px PNG icons, with a 256-entry one-hour cache, and wires it into the server asset pipeline so assets.createUrl can issue signed URLs for native app icons
• Adds theme-aware favicon selection (toolActivityFaviconUrl) with site-owned GitHub light/dark variants and provider URL validation, plus BrowserAppIcon and ComputerUseAppIcon SVG fallbacks
• Updates CodexAdapter to map browser-use and computer-use MCP metadata into canonical presentation fields with action-specific titles, and updates web (MessagesTimeline, session-logic), mobile (threadActivity, ThreadFeed, thread-work-log), and shared (summarizeToolGroup) rendering to carry and display these icons through a new ToolActivityIconView dispatcher
• Risk: session-logic.ts imports the new toolPresentation module via a hyphenated path while the actual filename is camel-cased, which breaks module resolution in environments that enforce path matching and prevents session-logic.ts from compiling or loading; also, resolveAsset in AssetAccess.ts does not validate the requested relative path for native-app-icon claims before resolving the icon

Changes since #9093 opened

• Modified nativeAppSourceKey utility to prevent collisions for overlength native application identifiers by generating deterministic 512-character keys with a SHA-256 hex digest suffix instead of naive truncation [66faa80]
• Added length validation to normalizedHttpUrl utility to reject URLs whose normalized href exceeds 4096 characters [66faa80]
• Introduced browser and computer-use metadata test fixtures in lifecycle test to verify icon display functionality [66faa80]

^{Macroscope summarized 9727def.}

Muted tool icon evidence

A fully white GitHub SVG verifies that light-mode tone adjustment preserves transparency and icon detail. Dark mode retains its existing muted treatment.

Light before

Light after

Dark before

Dark after

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — This introduces a cross-platform work-log presentation capability spanning provider event translation, shared contracts, server-side macOS process/filesystem integration, signed asset delivery, and web/mobile rendering. Because it changes existing runtime presentation and adds new external and host-integrated behavior, the scope is broader than an isolated low-risk UI change.

^{You can add or adjust custom eligibility rules. Learn more.}

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

ℹ️ The exact PR base did not have a successful artifact. Baseline uses the latest successful main measurement shown below.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	12.6 KiB	13.6 KiB	+984 B (+7.6%)	15.1 KiB	✅
Codex	Thread snapshot wire	6.3 KiB	7.0 KiB	+759 B (+11.8%)	7.3 KiB	✅
Codex	Live turn WebSocket wire	6.3 KiB	6.5 KiB	+225 B (+3.5%)	7.8 KiB	✅
Codex	Live turn WebSocket decoded	51.8 KiB	57.1 KiB	+5.2 KiB (+10.1%)	66.4 KiB	✅
Codex	Live turn messages	16	10	−6 (−37.5%)	21	✅
Claude	Total thread wire	12.6 KiB	13.7 KiB	+1.1 KiB (+9.0%)	15.1 KiB	✅
Claude	Thread snapshot wire	6.3 KiB	7.0 KiB	+775 B (+12.1%)	7.3 KiB	✅
Claude	Live turn WebSocket wire	6.3 KiB	6.7 KiB	+392 B (+6.1%)	7.8 KiB	✅
Claude	Live turn WebSocket decoded	52.7 KiB	59.3 KiB	+6.6 KiB (+12.6%)	66.4 KiB	✅
Claude	Live turn messages	16	10	−6 (−37.5%)	21	✅

Baseline: bcfd485 · PR result: 66faa80 · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 113.8 KiB
• Claude decoded thread snapshot: 114.5 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want fixes drafted automatically? Bugbot Autofix can create code changes for findings. A team admin can enable Autofix in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit d1a46a0. Configure here.}

[maria-rcks]

Note

Written by gpt-5.6-sol on behalf of Maria

muted tool icon evidence

light before

light after

dark before

dark after