- 本仓用于在不修改上游
codex的前提下验证和实现cbthbackground task handler；当前主线已经完成 CLI dogfood v1 的主要能力、v0.2.6Codex 0.134 compatibility release、v0.2.5Codex 0.133 compatibility / CLI app-server diagnostics release、v0.2.4Codex app-server config propagation release、v0.2.3Codex 0.131-0.132 compatibility release、v0.2.2generation-aware app-server diagnostics / Desktop ready arm workflow / standalone review gate release，以及 Desktop bridge foundation。 - 顶层历史 tracker 已迁移到 project journal；完整旧记录保存在 legacy snapshot，完成历史摘要见 completed work archive。Legacy snapshot 是逐字归档，内部复制的旧相对链接保留历史原貌；实时导航以本文件、TODO 和 archive summary 为准。
- 当前活跃工作集中在 Desktop bridge 自动投递闭环、CLI/daemon recovery contract 的剩余收口、host-level plugin runtime / generic delivery design、C8 safe service/plugin upgrade smoke foundation 与 C9 generic plugin upgrade command，以及外部 review / output / PR polling integrations；
cbth resume的 cwd、canonical permission profile、Codex CLI version warning follow-up 已收口，Codex 0.129 request-side permission profile selection 已补齐 stable built-in exact-match 优先与 legacy fallback，Codex 0.130 accepted-turn reconcile 已优先使用thread/turns/list并保留thread/readfallback，Codex 0.131-0.134 兼容性已通过真实 app-server/TUI delivery live checks 扩展 soft validated range，CLI operator UX 已补齐 help、app-server listing 和 interactive self-update，daemon upgrade safety 已完成 PR1-PR5 并进入v0.2.0release，详见 resume follow-ups、Codex 0.129 permission selection、Codex 0.130 pagination、Codex 0.131-0.132 compatibility、Codex 0.133 compatibility、Codex 0.134 compatibility、cbth CLI operator UX、daemon upgrade safety 和 current follow-ups。 - Desktop heartbeat 已通过 no-DB helper path 验证 direct-file-read inbox 消费能力；Desktop writeback helper foundation 已有本地 fake coverage，但直接 heartbeat writeback 被
startup.lock/ local filesystem sandbox 阻断；transcript / tool-output relay 已在 interactive Desktop tool call 和 heartbeat automation run 中验证为function_call_outputcarrier，并已通过真实 heartbeat arm envelopes + non-Desktop consumer live validation 驱动既有 CAS；production scanner foundation 已补齐显式 rollout binding、marker issuance、daemon-owned bounded cursor scanning 和 replay/marker retention cleanup，并已完成真实 Desktop heartbeat live validation；ready materialization 和 two-phase bridge arm workflow 已有 fake coverage；read_transport_capability=validated，writeback_capability=validated，artifact_read_capability仍为unknown。
- Phase:
v0.2.6release is prepared for Codex 0.134 compatibility; broader CLI/Desktop follow-ups remain active. - Summary: The managed resume path now preserves native cwd behavior unless an explicit/interactive cwd is selected, parses Codex 0.129 tagged canonical permission profiles on read, pins Codex 0.129
turn/start.permissionswhen a stable built-in current active profile exactly matches the effective cap, falls back to legacysandboxPolicyotherwise, treatscodex-cli 0.130.x-0.134.xas the validated CLI range, uses Codex 0.130 paginated turn reads for accepted-turn reconcile when available, andcbthnow has clearer help, generation-awarecli app-servers --format json|humanwith-Hand--latest-generation, best-effort loaded non-bound session diagnostics,self update --interactivewith-i, daemon upgrade fail-closed/coexistence/handoff/drain support, Desktop transcript relay writeback plus production scanner validation, Desktop ready materialization and two-phase bridge arm markers, host-level plugin runtime design, C8 opt-in service/plugin upgrade smoke foundation, C9 generic plugin upgrade command, and standalone Codex review gate integration. - Next Steps:
- Continue post-
0.2.0daemon recovery follow-ups from daemon upgrade safety and current follow-ups. - Continue from the active backlog in current follow-ups.
- Desktop writeback live validation and ready/arm workflow are tracked in Desktop writeback helper live validation, Desktop writeback dropbox probe, Desktop transcript relay validation, Desktop transcript relay consumer, Desktop transcript relay consumer live validation, Desktop transcript relay production scanner, Desktop relay scanner live validation, and Desktop ready materialization and arm workflow.
- Host-level plugin runtime and generic delivery design is tracked in Host plugin runtime design; C8 safe service/plugin upgrade smoke is tracked in C8 live upgrade smoke, and C9 generic plugin upgrade command is tracked in C9 plugin upgrade command.
- Keep new workstream detail in focused journal entries instead of expanding these top-level files.
- Continue post-
- Blockers:
- Desktop automatic delivery is not yet live-validated end to end.
- Desktop direct writeback is blocked by heartbeat-owned startup-lock access and local filesystem write denial; transcript relay writeback and production scanner consumption are live-validated, while boundary crossing, binding lifecycle cleanup, artifact reads, and several daemon deadline/recovery contracts remain incomplete.
- Evidence:
- Release:
v0.2.6 - Latest completed Codex compatibility note: 2026-05-27-v026-codex-134-compatibility.md
- Latest completed CLI operator UX note: 2026-05-10-cbth-cli-operator-ux-41fb384.md
- Design docs: SHARED_CORE_ARCHITECTURE.md, DESKTOP_BRIDGE_FOUNDATION.md, DESKTOP_LIVE_PREFLIGHT_VALIDATION.md, DESKTOP_WRITEBACK_HELPER_LIVE_VALIDATION.md, DAEMON_UPGRADE_SAFETY.md, HOST_PLUGIN_RUNTIME_AND_DELIVERY.md, LIVE_E2E.en-GB.md
- Release:
- Desktop no-DB inbox reads, transcript relay writeback, and production scanner consumption are validated; artifact-read capability and the remaining Desktop automatic delivery state machine are still incomplete.
- Future
turn/steer, artifact continuation, and post-output acknowledgement paths remain explicitly out of the supported automatic v1 path until their risk and observation contracts are implemented.