[showxu]

Summary

The plugin becomes the single owner of the Codex runtime documentation and end-to-end acceptance that the host no longer carries, and its persistence starts from one initial schema.

• Runtime documentation: Codex operations, diagnosis (through computer-mcp tools call), capability and maturity notes, troubleshooting and the plugin-specific ownership, security and gateway behavior are documented here, merged into the existing Host integration and Workflows references.
• End-to-end acceptance: Scripts/check-host.py drives an installed computer-mcp through its public serve stdio surface and standard MCP only, with isolated state, Git, vendor home and processes. Fixture mode runs the real vendor against a private loopback model; full mode additionally needs explicit vendor credentials. Copied credentials are deleted in an unconditional cleanup step, again after every receipted process has exited, and the report is still written on failure. Argument validation, evidence and cleanup paths have unit tests.
• Offline state migration removed: codex-mcp-adapter migrate-state, its implementation, tests and reference page are gone.
• Initial schema: the eight historical migrations are one codex-initial migration with the identical final schema, proven against a fixture captured from the previous code; a database with unknown migration identifiers is rejected before any change.

Validation

• swift build, Swift tests, Python and schema tests, formatting, packaging and archive checks, git diff --check.
• Schema equality test against the captured baseline.
• Full authenticated end-to-end run against an installed host 1.3.3 and Codex CLI 0.162.1 passed.
• Independent read-only review; its finding (credential cleanup not exception-safe) is fixed, with a follow-up deleting the copy again after the vendor processes exit.

Documentation

• The documentation that owns this behavior is updated, or no change is needed.