Skip to content

chore(protocol): sync diagnostic API read contract - #91

Merged
frahlg merged 3 commits into
mainfrom
codex/mcp-read-api
Oct 18, 2026
Merged

frahlg merged 3 commits into
mainfrom
codex/mcp-read-api

Conversation

@frahlg

@frahlg frahlg commented Oct 18, 2026 •

Copy link
Copy Markdown
Member

Copy the canonical api.read registry operation and full diagnostic-grant description from webapp #98. Core #1723 and Cloud #35 use it for full technical troubleshooting through MCP.

All three registry copies match byte for byte. Swift and shared JVM tests pass; the Swift contract suite also checks the final wording. No native UI or session behavior changes.

Signed-off-by: Fredrik Ahlgren <fredrik@sourceful-labs.com>
@frahlg
frahlg marked this pull request as ready for review October 18, 2026 14:35
@frahlg
frahlg merged commit fafd289 into main Oct 18, 2026
1 check passed
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 18, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-18T14:37:19.456890Z 0d4e11a Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0d4e11a7d5

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread protocol/registry.yaml
- { msg: logs.get, scope: ftw.logs.read, desc: A log excerpt the box redacts }
- { msg: config.get, scope: ftw.config.read, desc: A configuration section the box redacts }
- { msg: diag.run, scope: ftw.diag.run, desc: A check that changes nothing }
- { msg: api.read, const: MsgAPIRead, scope: ftw.diag.run, desc: Read the full technical diagnostic API }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Update the owner-facing diagnostic permission text

When an agent or support offer requests ftw.diag.run, OfferFlowView displays AccessWords.scope, whose override in AccessWords.swift:96 still says only “Run checks that change nothing.” This new operation lets the same grant read the full technical diagnostic API, so owners can approve materially broader access without being told what it permits; update the localized scope wording alongside this contract change.

Useful? React with 👍 / 👎.

Comment thread protocol/registry.yaml
- { msg: logs.get, scope: ftw.logs.read, desc: A log excerpt the box redacts }
- { msg: config.get, scope: ftw.config.read, desc: A configuration section the box redacts }
- { msg: diag.run, scope: ftw.diag.run, desc: A check that changes nothing }
- { msg: api.read, const: MsgAPIRead, scope: ftw.diag.run, desc: Read the full technical diagnostic API }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Add readable audit wording for API reads

When the box records this newly recognized read as what: api.read, AccessWords.what cannot find it in auditWords (AccessWords.swift:345-366) and falls back to displaying the raw protocol token api.read in the owner’s activity log, including in Swedish. Add the corresponding English audit phrase and translation so diagnostic API access remains intelligible and localized like every other registered read.

Useful? React with 👍 / 👎.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant