feat(web): match Codex rail organization

[wolfiesch]

Summary

• match Codex Desktop rail organization with grouped/flat layouts, priority/updated/manual sorting, and drag ordering
• add local project aliases, reversible hiding, bulk read/archive actions, and direct session pin/archive controls
• ship a privacy-safe local Finder reveal command through @oh-my-pi/app-wire 0.6.2 and signed OMP appserver-7
• add the parity checklist and focused browser coverage

Verification

• pnpm check
• pnpm test (999 tests)
• pnpm build:web
• pnpm exec playwright test e2e/rail-parity.spec.ts e2e/pwa-install.spec.ts (6 tests)
• staged and verified t4code-17.0.5-appserver-7 darwin-arm64 digest and appserver entrypoint

Dependency: lyc-aon/oh-my-pi#15
Runtime: https://github.com/lyc-aon/oh-my-pi/releases/tag/t4code-17.0.5-appserver-7

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: ae72f71080

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[Copilot]

Pull request overview

Aligns the web left-rail experience with Codex Desktop parity, while updating the vendored OMP app-wire/runtime metadata to support new negotiated capabilities (notably privacy-safe local project reveal) and adding focused browser coverage.

Changes:

• Updates the rail to support grouped/flat organization, sorting, drag ordering, project aliases/hiding, bulk actions, and direct pin/archive controls.
• Introduces a negotiated, local-only project.reveal command surface (fixture + web authority helpers) and documents the safety boundary.
• Bumps vendored @oh-my-pi/app-wire to 0.6.2 and updates compatibility/release contracts, plus adds/updates e2e coverage and parity checklist.

Reviewed changes

Copilot reviewed 24 out of 27 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
vendor/app-wire/manifest.json	Bumps vendored app-wire manifest to 0.6.2 with updated provenance hashes.
THIRD_PARTY_NOTICES.md	Updates third-party notice text for the new vendored app-wire version + hashes.
scripts/check-release-consistency.test.mjs	Adjusts release consistency expectations for verified vs published runtime tracking.
provenance/t3code/imports/f1-shell-20260711.json	Updates provenance checksums for adapted/reference-only imports impacted by changes.
pnpm-lock.yaml	Updates lockfile entries to point at the 0.6.2 vendored tarball.
packages/protocol/test/distribution.test.ts	Updates protocol distribution tests for new vendored app-wire version + paths.
packages/protocol/package.json	Points protocol package dependency to the 0.6.2 vendored tarball.
packages/fixture-server/test/engine.test.ts	Extends fixture engine command catalog expectations to include project.reveal.
packages/fixture-server/src/engine.ts	Adds deterministic fixture handling for the project.reveal command.
FEATURE_MATRIX.md	Updates feature matrix entry to describe Codex-parity rail behavior and additions.
e2e/rail-parity.spec.ts	Adds Playwright coverage for organization controls, drag ordering, aliases/hiding, and actions.
e2e/pwa-install.spec.ts	Refactors to use shared built-web server helper; keeps PWA install/viewport tests.
e2e/built-web-server.ts	New shared helper to serve built web assets consistently for e2e tests.
docs/CODEX_RAIL_PARITY.md	Adds a parity checklist and explicit privacy/safety boundary documentation.
compat/omp-app-matrix.json	Updates app-wire metadata + runtime tag/build hashes; records new feature flag.
apps/web/test/workspace-store.test.ts	Adds coverage for monotonic bulk “mark read”, alias, and hidden-project persistence/sanitization.
apps/web/test/session-tree.test.ts	Extends session-tree tests for new ordering helper, hidden-project handling, and aliases in search/tiebreaks.
apps/web/test/session-management.test.ts	Adds tests for local-only negotiated project.reveal and “no path” boundary.
apps/web/test/mobile-touch-targets.test.tsx	Updates expectations for display name usage and formatting changes in rail markup.
apps/web/src/state/workspace-store.ts	Introduces persisted alias/hidden state, version bump, sanitizers, and bulk visit stamping.
apps/web/src/lib/session-tree.ts	Adds displayName/alias support, hidden-project filtering, and new drag ordering helper.
apps/web/src/features/session-runtime/session-management.ts	Adds projectRevealSupport + revealLiveProject authority helper.
apps/web/src/components/Rail.tsx	Implements parity rail UI: drag/drop, aliasing, hiding/restoring, bulk actions, reveal, direct controls.
apps/web/src/components/AppShell.tsx	Threads hidden/alias state into rail group construction; updates hidden-project handling.
apps/desktop/test/doctor.test.ts	Updates expected runtime tag/url to appserver-7.
apps/desktop/test/bundled-runtime.test.ts	Updates bundled runtime manifest tag expectations to appserver-7.

Files not reviewed (1)

• pnpm-lock.yaml: Generated file

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.