[Stephen Belanger (Qard)]

Codex skips untrusted plugin hooks before Braintrust receives their events. This PR makes bt trace enable codex and bt trace update codex enforce the installed-and-trusted state automatically. If the plugin is missing, setup installs it. If its packaged hook definitions are untrusted or modified, setup trusts the current Codex-reported hashes and verifies the result. Setup fails if it cannot establish that state.

Codex's /hooks UI uses config/batchWrite to upsert hooks.state entries containing the exact key and trusted_hash supplied by hooks/list. Setup verifies the complete installed hook file against this bt build, including Windows commands, before writing trust. Unrelated hook trust and configuration are preserved. Doctor no longer duplicates plugin installation and trust status.

bt trace run codex uses the same packaged definitions and invocation-scoped trust without changing persistent Codex configuration. Managed runs load all 12 packaged hook overrides, obtain their exact keys and hashes from Codex, and pass trust as a CLI-only config override. The invocation-wide --dangerously-bypass-hook-trust flag is not used.

SDK-583

Validation on macOS:

• All 45 bt-daemon pipeline integration tests passed, including managed_run_flushes_and_preserves_agent_exit_status, which failed in CI because its fake Codex executable did not implement the new app-server trust-preparation protocol. The fixture now responds to initialization and hook-list requests.
• cargo check --manifest-path bt-daemon/Cargo.toml --all-features --locked, Clippy with all targets/features and warnings denied, cargo fmt -- --check, and git diff --check passed.
• Earlier isolated Codex smoke tests confirmed automatic trust, preservation of unrelated trust, idempotent repeated setup, refusal of altered hook definitions, and invocation-only trust for all 12 run hooks.
• CI for the current commit is pending.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-20T18:52:31.418045Z	3f136c6	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "Codex (@codex) review" or "Codex (@codex) security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 3f136c6e82

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "Codex (@codex) review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "Codex (@codex) address that feedback".