源码索引

阅读契约： 只有在叙事已经清楚后再用本页。打开 pinned links 是为了核对 owner、boundary 和 evidence class，不是从源码里重新发现故事。

固定源码证据索引：把章节论断映射到已核验 owner、公开源码锚点和审计规则 — 在正文已经提出论断之后使用源码索引：它把叙事语句映射到 subsystem owner、固定源码行和审计分类。

这个索引用于审计全书的源码依据。所有 Codex 链接都指向公开 GitHub 代码，并固定到 commit 569ff6a1c400bd514ff79f5f1050a684dc3afde3。正文应该可以独立阅读；源码索引用于验证，而不是要求读者自己补课。

审计规则：使用 anchor 是为了确认 claim class。直接展示 type、function、constant、workflow 或 test 行为的，算 verified source；从多个 anchor 组合出来的边界，算 surrounding contract inference，在正文和图中都应保持抽象。任何依赖 private service internals 的内容都是 not visible，因此不会进入本索引。

章节锚点

第 11 章：把 Patch 作为一等编辑协议

Patch handler struct 与 tool surface: ApplyPatchHandler, ToolHandler impl
Handler verification and orchestration: ApplyPatchHandler::handle
Shell interception path: intercept_apply_patch
Patch grammar 与 hunk model: codex-rs/apply-patch/src/parser.rs
Invocation verifier: maybe_parse_apply_patch_verified
Patch safety assessment: assess_patch_safety
Patch runtime: ApplyPatchRuntime::run
Hunk application and committed delta: apply_hunks_to_files
Turn diff tracker: codex-rs/core/src/turn_diff_tracker.rs

第 12 章：Hooks 与人工审批

Hook surfaces

Legacy hook payload 对照: codex-rs/hooks/src/types.rs
Protocol hook event names 与 run summaries: codex-rs/protocol/src/protocol.rs
Hook list 与 runnable handler model: codex-rs/hooks/src/engine/mod.rs
Discovery、normalized hashes 与 trust filtering: codex-rs/hooks/src/engine/discovery.rs

Runtime hook outcomes

Pre-tool hook request、preview、block 与 context recording: codex-rs/core/src/hook_runtime.rs
Pre-tool outcome parser 的 block/context 语义: codex-rs/hooks/src/events/pre_tool_use.rs
User-prompt hook 与 additional-context recording: codex-rs/core/src/hook_runtime.rs
Permission-request hook contract 与 decision fold: codex-rs/hooks/src/events/permission_request.rs

Approval、sandbox 与 Guardian 边界

Approval protocol inputs 与 requests: UserInput, EventMsg
Approval policy 与 decision enum: AskForApproval, ReviewDecision
Permission hook before Guardian/user approval: ToolOrchestrator::request_approval
Approval requirement before first sandbox attempt: ToolOrchestrator::run
Sandbox-denial retry branch: ToolOrchestrator::run
Guardian routing、fail-closed review 与 constrained review session: codex-rs/core/src/guardian/review.rs

第 13 章：Sandboxes、网络策略与平台边界

Built-in 与 custom permission profile compilation: codex-rs/core/src/config/permissions.rs, compile_permission_profile
Runtime filesystem 与 network policy vocabulary: codex-rs/protocol/src/permissions.rs
Additional permissions 与 effective profile merge: codex-rs/sandboxing/src/policy_transforms.rs, effective_permission_profile
Sandbox attempt handoff into transform: codex-rs/core/src/tools/sandboxing.rs
Sandbox type selection 与 platform choice: codex-rs/sandboxing/src/manager.rs, select_initial
Platform command transform: SandboxManager::transform
macOS Seatbelt generation 与 restricted managed-network policy: codex-rs/sandboxing/src/seatbelt.rs, create_seatbelt_command_args
Linux bwrap/seccomp execution 与 proxy routing: codex-rs/linux-sandbox/src/linux_run_main.rs, proxy_routing.rs
Windows elevated setup、legacy limitation 与 runner backend: setup.rs, legacy.rs, elevated.rs
Windows identity、ACL、firewall 与 WFP enforcement anchors: spawn_prep.rs, acl.rs, firewall.rs, wfp_setup.rs, wfp.rs, filter_specs.rs
Network proxy environment、domain rules 与 limited methods: proxy.rs, policy.rs, limited methods

第 14 章：App-Server 契约

JSON-RPC-lite envelope 与 request/notification/response/error decoding: jsonrpc_lite.rs
Transport mode parsing 与 connection normalization: transport/mod.rs, stdio.rs
Generated client request scopes 与 serialization_scope(): common.rs
Request conversion、initialize gate、experimental gate 与 scoped dispatch: message_processor.rs
Queue key mapping、FIFO draining 与 shared-read batching: request_serialization.rs
Thread state、listener commands 与 server-request resolution command routing: thread_state.rs
Listener task select loop 与 projection 前的 event tracking: thread_lifecycle.rs
Running-thread resume order、可选 history/token replay、pending request replay 与条件化 goal continuation: thread_lifecycle.rs
Stateless event-to-notification projection boundary 与代表性 item event cases: event_mapping.rs, event cases
Generated server requests 与 typed response constructors，包括 dynamic tool call requests: common.rs, server request definitions
Outgoing sender pending callbacks、response matching、unresolved request replay 与 thread cancellation cleanup: outgoing_message.rs, send_request_to_connections, pending_requests_for_thread, cancel_requests_for_thread

第 15 章：SDK、Daemon 与远程控制

把这一组锚点当作 surface map 使用，不要读成“每种 client 都暴露同一份 contract”。Transport、Python SDK、TypeScript process wrapper、daemon lifecycle 和 remote control 分别拥有 app-server boundary 的不同边缘。

Transport modes、listen URL parsing、transport events 与 connection origin: transport/mod.rs
Python SDK public facade、initialize metadata normalization 与 generated thread_start: api.py
Python SDK one-reader routing、response waiters、turn queues、pending turn replay 与 fail_all: _message_router.py
Python SDK run-result projection from stream notifications: _run.py
TypeScript SDK Codex public API: codex.ts
TypeScript SDK event parsing 与 run() collection: thread.ts
TypeScript SDK process wrapper、resume、stdin input、stdout lines 与 exit errors: exec.ts
Daemon constants、lifecycle commands、start/restart/stop/version、bootstrap、readiness polling 与 operation lock: app-server-daemon/src/lib.rs
Daemon control-socket probe 与 app-server version extraction: client.rs
PID backend reservation lock、process start、pid-file state reads、stale cleanup 与 reservation lock acquisition: backend/pid.rs
Remote-control start config、handle、initial status 与 websocket runner: remote_control/mod.rs
Remote-control client/server envelopes、chunk events、ack cursor 与 URL normalization: protocol.rs
Remote-control client tracker、stream-id fallback、remote-control connection origin 与 outbound task: client_tracker.rs
Remote-control websocket state、outbound buffer、connect/reconnect、writer replay、sequence assignment、chunk splitting 与 sequence/segment ack handling: websocket.rs
Remote-control segment limits、reassembly、out-of-order rejection 与 invalid chunk drops: segment.rs

第 16 章：TUI 作为事件渲染器

TUI ownership surface 覆盖 app state、select loop、terminal event handling、draw/resize、cursor 与 external-editor handoff: app.rs、App::run、handle_tui_event
Internal routing surface 覆盖 app event bus、dispatcher 与 runtime command boundary: app_event.rs、event_dispatch.rs、app_command.rs
Runtime crossing surface 覆盖 app-server session facade、turn start/steer、active-thread command routing 与 request resolution: app_server_session.rs、turn_start、thread_routing.rs
Conversation projection surface 覆盖 chat widget ownership、protocol notification projection、outbound command submission 与 assistant streaming: chatwidget.rs、chatwidget/protocol.rs、submit_op、flush_answer_stream_with_separator
Focus and decision surface 覆盖 bottom pane focus model、active views 与 approval overlay: bottom_pane/mod.rs、as_renderable、approval_overlay.rs
Pending request and scrollback surface 覆盖 app-server request ledger、server-event routing、source-backed message consolidation 与 resize reflow: app_server_requests.rs、app_server_events.rs、agent_message_consolidation.rs、resize_reflow.rs
Rendering 与 consolidation tests: status_and_layout.rs、exec_flow.rs