Skip to content

fix(plugin): inherit Deep Scan worker service tiers - #1238

Merged
mldangelo-oai merged 6 commits into
mainfrom
mdangelo/codex/qa-worker-fast-mode
Oct 5, 2026
Merged

mldangelo-oai merged 6 commits into
mainfrom
mdangelo/codex/qa-worker-fast-mode

Conversation

@mldangelo-oai

@mldangelo-oai mldangelo-oai commented Oct 5, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

Deep Scan workers omitted an existing service_tier from the SDK-generated runtime configuration. Forward the resolved tier to fresh and resumed discovery and reducer workers.

Changes

  • Capture the tier in each executor's existing per-scan settings snapshot and pass it to the Codex child configuration.
  • Preserve the resolved tier when the SDK projection filters an embedded profile name, including dotted names.
  • Extend concurrent SDK projection and child-process launch regressions for profile precedence, an unset tier, and fresh and resumed workers.

Testing

  • At the final head merged with main at 1345ea3f: Ruff lint/format, SDK build:ci, portable plugin compatibility, and all nine compatibility checker tests passed.

  • SDK bundle, types, and formatting checks passed.

  • Final API and artifact-export regressions passed: 184 tests, four skips. Worker launch regressions passed for discovery, reduction, resumes, and concurrent tiers.

  • C++ ranking regressions passed: 212 tests. All six UTF-8 artifact-export regressions passed.

  • Three fresh native review passes and an independent verifier completed without findings.

  • Full SDK suite with seed 12345 passed: 3,570 tests, 53 skips, zero failures. Randomized full SDK order also passed with the same counts. These full orders preceded the final UTF-8 export merge; its focused checks passed above.

  • Three fresh native reviews and independent verification passed for the exact final head; git diff --check passed.

Risk and rollout

This forwards an existing setting from the SDK runtime snapshot without changing commands, flags, accepted values, or defaults. Concurrent scans retain separate snapshots. Native parent-session profile discovery and support for legacy embedded profile syntax remain upstream behavior; the dotted-profile regression verifies SDK projection and worker arguments.

Public disclosure review

  • No customer, partner, prospect, or user identities, data, or identifying details are included.
  • No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
  • I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

@github-actions github-actions Bot added the bug Something isn't working label Oct 5, 2026
…/codex/qa-worker-fast-mode

# Conflicts:
#	plugins/codex-security/mcp-app/tests/test_deep_scan_executor.ts
@mldangelo-oai
mldangelo-oai marked this pull request as ready for review October 5, 2026 14:51
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 5, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-05T16:05:28.994643Z c3eab51 New commits
🔒 Security Review ✅ Completed 2026-10-05T16:06:15.640307Z c3eab51 New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5ab806fda1

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread plugins/codex-security/mcp-app/src/deep-scan/executor.ts
Comment thread plugins/codex-security/mcp-app/src/deep-scan/executor.ts

@alandelong-oai alandelong-oai left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed the full contribution at c3eab51711d83e892c263fdc543c5625e4c2b3ab with selected base 1345ea3fa48021ef54ecc2dcc948fde43fec8d0c, including changed tests and touched context, using three independent reviews followed by root synthesis.

No supported introduced finding.

Static source review; tests were inspected but not executed. CI, mergeability and integration are separate.

@mldangelo-oai
mldangelo-oai merged commit e1f09a1 into main Oct 5, 2026
69 of 85 checks passed
@mldangelo-oai
mldangelo-oai deleted the mdangelo/codex/qa-worker-fast-mode branch October 5, 2026 19:39
@github-actions github-actions Bot mentioned this pull request Oct 5, 2026
3 tasks done
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants