feat: complete Codex projection, runtime ownership and platform packages

[showxu]

Summary

Codex 0.3.0 exposes all 96 SDK-adopted stable App Server requests as typed MCP tools and retains 51 experimental methods through the explicit experimental path. swift-codex owns schemas, generated bindings and adoption metadata; this plugin derives its projection and applies host-specific risk and lifecycle policy.

Native threads, turns, requests and Exec sessions retain their original host invocation and runtime ownership. The adapter adds metadata-first history pages, safe writer handoff, exact JSON integers, generic Host Services integration and native Windows process/IPC support. Platform archives include declared entrypoints, verified runtime dependencies and provenance receipts; the vendor Codex executable and credentials remain user-owned.

Retained events preserve typed token-use and Goal counters while recursively redacting credentials, including API-key fields. Complete protocol payloads remain distinct from bounded diagnostic/event views.

Validation

• Current dependency source 4b922678370025d222220d767a88bcd38fbad65c pins swift-codex 0.4.1 and MCP 0.13.1-computer-mcp.1. All schema declaration bytes remain SDK-derived; only the provenance receipt changes.
• Strict Swift formatting, build, 267 Swift test functions, 34 Python tests (one Windows-only skip on macOS), four importer tests and schema/dependency checks pass locally. Native Codex 0.154.0 passes the standard MCP lifecycle through the exact packaged Computer MCP 1.3.0/build40 CLI with an isolated loopback model.
• Test-only 95c86760167ad9da3bc269b2968fb553a2b81ac6 strengthens the startup deadline check for cooperative and forced cleanup: actual protocol/supervisor/process-group absence, confirmed cleanup and zero retained work. A fixture directory removed by an EXIT trap is not a valid live-process ownership assertion after SIGKILL. The unchanged runtime passes the full suite and five two-case repetitions; all existing deadlines and cleanup guards remain.
• Current candidate CI has passed macOS source/Swift/package tests and is producing the platform archives. The preceding dependency-source run already passed Windows packaging and exact relocated native archive acceptance.
• Authenticated Exec/App Server turns, fresh-host continuation and exact token usage passed for the preceding released dependency combination. The trusted main package will receive the final current-combination long-thread and bounded authenticated checks. Fixtures are not authenticated model evidence.

Delivery boundary

Source promotion is authorized. Final package acceptance and Microsoft runtime redistribution eligibility remain required for public platform delivery. Vendor binaries and credentials remain user-owned. Windows scope is the native adapter and required SDK chain; it does not add a Windows Computer MCP desktop App. No published release or existing user App Server is replaced.