feat(ci): verify agent trust and preserve generated API contracts by dodeja · Pull Request #384 · Terminal49/API

dodeja · 2026-09-27T01:08:58Z

The verifier checks registered MCP capabilities, public SDK exports, workspace toolchain ownership, and generated OpenAPI contracts. It detects missing or swapped tool implementation paths through imported handler calls and checks every page in MCP navigation, including guides outside the mcp/ prefix.

The OpenAPI contract preserves container resource discriminants, route cargo/shipment links, nullable location links, and route-location attribute IDs. A direct Containers API reference page now publishes GET /containers/{id}/route. PR #383 builds advisory policy evaluation on this verifier and must land afterward.

Local verification passed all seven agent-verify steps, 35 guard regressions, compiler-backed consumer contracts, workspace checks/builds/tests, generated-type comparison, and a 13-tool offline MCP handshake. One existing SDK live-token test is skipped.

The authenticated live preview gate currently fails because the production backend rejects the shared CI credential with HTTP 401. The MCP transport handshake passes. No sparse fixture mode, credential substitution, or gate bypass is used. Independent final review remains separate from local validation.

mintlify · 2026-09-27T01:09:02Z

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated
terminal49	🟢 Ready	View Preview	Oct 14, 2026, 4:56 AM

vercel · 2026-09-27T01:09:04Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
api	Ready	Preview	Oct 14, 2026 6:58am UTC

chatgpt-codex-connector · 2026-10-06T05:18:55Z

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-14T07:14:06.258077Z	`4241fb6`	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 8c24582a6e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 03019365fa

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 8594722586

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4bcea9bab7

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0f5312ab72

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 2245417b57

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

* feat: add stable agent verification gate Co-authored-by: Akshay Dodeja <dodeja@gmail.com> * docs: add agent paved path and P-Stack wiring Co-authored-by: Akshay Dodeja <dodeja@gmail.com> * fix: normalize exact Vite+ dependency pins Co-authored-by: Akshay Dodeja <dodeja@gmail.com> * fix: restore OpenAPI type generation Co-authored-by: Akshay Dodeja <dodeja@gmail.com> * chore: Auto-generate Postman collection from openapi.json [skip ci] * fix: describe the container route contract Co-authored-by: Akshay Dodeja <dodeja@gmail.com> * chore: Auto-generate Postman collection from openapi.json [skip ci] * fix: type the container route schema Co-authored-by: Akshay Dodeja <dodeja@gmail.com> * fix: tighten agent trust guidance and CI Co-authored-by: Akshay Dodeja <dodeja@gmail.com> * chore: Auto-generate Postman collection from openapi.json [skip ci] --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 60fd25f6be

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 9b28577641

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0ce9d7d303

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

…tory

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c6227713b6

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector · 2026-10-14T06:37:10Z

+  }
+  const temporary = mkdtempSync(join(tmpdir(), 'sdk-export-emission-'));
+  try {
+    const options = { ...parsed.options, outDir: temporary };


Preserve self-import resolution during emission verification

On a clean checkout where the ignored SDK dist/ directory does not exist, replacing the configured outDir with this temporary path breaks TypeScript's package self-reference mapping for source files that import @terminal49/sdk. I reproduced this with Node 24.15: the agent-trust step reports TS2307 for the SDK example/smoke files and exits before the workspace build can create dist, while the same gate passes once dist has been built. Capture compiler writes without changing the configured output directory (or otherwise preserve self-reference resolution) so the required full verification gate works in fresh CI checkouts.

AGENTS.md reference: AGENTS.md:L81-L82

Useful? React with 👍 / 👎.

…checks

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4241fb6b4e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector · 2026-10-14T07:14:03Z

+      ]),
+  {
+    name: 'OpenAPI SDK type generation',
+    command: ['node', 'bin/check-openapi-types.mjs'],


Verify generated MCP filter schemas in the completion gate

When an OpenAPI filter description or validation rule changes and the canonical SDK generator is run, this step verifies only the SDK artifacts; no agent-verify step regenerates and compares packages/mcp/src/generated/list-filter-schemas.ts. The workspace build and tests consume that stale file, so the required handoff gate can pass while the MCP tool schemas still expose outdated metadata or validation. Run the MCP filter generator in isolation and compare its output as part of this gate.

AGENTS.md reference: AGENTS.md:L51-L54

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-10-14T07:14:03Z

+    if (options.incremental || options.composite)
+      options.tsBuildInfoFile = join(temporary, 'build.tsbuildinfo');


Allow the temporary TypeScript build-info output

When the SDK enables incremental or composite, this assigns tsBuildInfoFile under the temporary directory, but program.emit passes that .tsbuildinfo file through the same write callback; the callback then rejects it for being outside the configured dist directory. Consequently, agent-verify fails for either otherwise-valid compiler option despite this branch attempting to support them. Handle the build-info output separately from package artifacts.

AGENTS.md reference: AGENTS.md:L82-L82

Useful? React with 👍 / 👎.

mintlify Bot deployed to staging - docs September 27, 2026 01:09 View deployment

vercel Bot deployed to Preview September 27, 2026 01:09 View deployment

cursor Bot mentioned this pull request Sep 27, 2026

feat(ci): reconcile advisory PR trust policy from current evidence #383

Open

mintlify Bot deployed to staging - docs October 6, 2026 04:56 View deployment

vercel Bot deployed to Preview October 6, 2026 04:57 View deployment

vercel Bot deployed to Preview October 6, 2026 04:59 View deployment

dodeja mentioned this pull request Oct 6, 2026

DEV-12120: document supported document type schemas #348

Open

dodeja marked this pull request as ready for review October 6, 2026 05:18

chatgpt-codex-connector Bot reviewed Oct 6, 2026

View reviewed changes

Comment thread bin/check-agent-trust.mjs Outdated

greptile-apps Bot reviewed Oct 6, 2026

View reviewed changes

Comment thread sdks/typescript-sdk/src/generated/terminal49.ts Outdated

Comment thread docs/openapi.json

Comment thread bin/check-agent-trust.mjs Outdated

mintlify Bot deployed to staging - docs October 6, 2026 05:40 View deployment

vercel Bot deployed to Preview October 6, 2026 05:41 View deployment

chatgpt-codex-connector Bot reviewed Oct 6, 2026

View reviewed changes

Comment thread sdks/typescript-sdk/src/generated/terminal49.ts Outdated

Comment thread docs/openapi.json

Comment thread bin/check-agent-trust.mjs Outdated

dodeja changed the title ~~feat: land agent trust stack on main~~ feat(ci): add and verify the agent trust foundation Oct 6, 2026

mintlify Bot deployed to staging - docs October 6, 2026 06:14 View deployment

vercel Bot deployed to Preview October 6, 2026 06:16 View deployment

dodeja changed the title ~~feat(ci): add and verify the agent trust foundation~~ feat(ci): verify agent trust and preserve generated API contracts Oct 6, 2026

chatgpt-codex-connector Bot reviewed Oct 6, 2026

View reviewed changes

Comment thread bin/agent-verify.mjs

vercel Bot deployed to Preview October 6, 2026 06:20 View deployment

vercel Bot deployed to Preview October 6, 2026 06:34 View deployment

chatgpt-codex-connector Bot reviewed Oct 6, 2026

View reviewed changes

Comment thread bin/check-agent-trust.mjs

Comment thread bin/check-agent-trust.mjs Outdated

vercel Bot deployed to Preview October 6, 2026 06:44 View deployment

chatgpt-codex-connector Bot reviewed Oct 6, 2026

View reviewed changes

Comment thread bin/check-agent-trust.mjs Outdated

vercel Bot deployed to Preview October 6, 2026 07:15 View deployment

chatgpt-codex-connector Bot reviewed Oct 6, 2026

View reviewed changes

Comment thread docs/openapi.json

Comment thread docs/openapi.json

Comment thread bin/check-agent-trust.mjs Outdated

dodeja and others added 2 commits October 13, 2026 21:40

fix(openapi): include terminals in container route responses

e60712b

dodeja added 10 commits October 13, 2026 21:40

docs: explain SDK entrypoint verification

12e032c

fix: derive trust guard inputs from workspace and Git metadata

415aba7

fix: preserve public container and route relationship contracts

8239daa

test: compile generated resource consumer contracts

acea97f

fix(ci): require every workspace in the ordered build gate

79bd249

docs: require complete ordered workspace build coverage

932a429

fix(ci): enforce workspace dependency order and config scope

cc30c66

fix(ci): reject unsupported MCP registration forms

b4e5161

fix: parse MCP registrations with the SDK compiler

594bd3a

fix(ci): preserve route fields and derive docs trust from navigation

93de765

dodeja force-pushed the cursor/land-agent-trust-main-c4b3 branch from 2245417 to 93de765 Compare October 14, 2026 04:46

chore: Auto-generate Postman collection from openapi.json [skip ci]

bfb640b

vercel Bot deployed to Preview October 14, 2026 04:47 View deployment

test(ci): exercise cross-section MCP docs drift through CLI

60fd25f

vercel Bot deployed to Preview October 14, 2026 04:49 View deployment

chatgpt-codex-connector Bot reviewed Oct 14, 2026

View reviewed changes

Comment thread docs/openapi.json

Comment thread bin/check-agent-trust.mjs

fix(ci): bind tool implementations and publish the route reference

9b28577

mintlify Bot deployed to staging - docs October 14, 2026 04:56 View deployment

vercel Bot deployed to Preview October 14, 2026 04:57 View deployment

chatgpt-codex-connector Bot reviewed Oct 14, 2026

View reviewed changes

Comment thread bin/check-openapi-types.mjs Outdated

fix(ci): bind handler symbols and verify every SDK generation output

0ce9d7d

vercel Bot deployed to Preview October 14, 2026 05:52 View deployment

chatgpt-codex-connector Bot reviewed Oct 14, 2026

View reviewed changes

Comment thread bin/check-agent-trust.mjs

fix(agent-trust): verify SDK exports from clean compiler outputs

702cd96

vercel Bot deployed to Preview October 14, 2026 06:30 View deployment

fix(agent-trust): bind emitted exports to configured SDK output direc…

c622771

…tory

vercel Bot deployed to Preview October 14, 2026 06:33 View deployment

chatgpt-codex-connector Bot reviewed Oct 14, 2026

View reviewed changes

fix(agent-trust): preserve SDK self-resolution during clean emission …

4241fb6

…checks

chatgpt-codex-connector Bot reviewed Oct 14, 2026

View reviewed changes

		if (options.incremental \|\| options.composite)
		options.tsBuildInfoFile = join(temporary, 'build.tsbuildinfo');

Conversation

dodeja commented Sep 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

mintlify Bot commented Sep 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

vercel Bot commented Sep 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

chatgpt-codex-connector Bot commented Oct 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codex Review Summary

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector Bot Oct 14, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector Bot Oct 14, 2026

dodeja commented Sep 27, 2026 •

edited

Loading

mintlify Bot commented Sep 27, 2026 •

edited

Loading

vercel Bot commented Sep 27, 2026 •

edited

Loading

chatgpt-codex-connector Bot commented Oct 6, 2026 •

edited

Loading