Protect loopback review sessions

[itsjling]

Closes #38

Summary

• require a per-run access value for live review data and event streams
• validate request hosts, origins, methods, and paths while keeping guarded remote binds from Make the presenter headless and automation-friendly #26
• contain handler failures, close event streams on shutdown, and apply safe cache and response headers
• let an existing protected tab receive a new run access value without opening another tab

Stack

• Base: Make the presenter headless and automation-friendly #48 (codex/issue-026-headless-presenter)
• This PR adds the review-session protection required by Protect loopback review sessions #38.

Verification

• npm run lint
• npm test (74 tests)
• npx fallow audit --base codex/issue-026-headless-presenter
• git diff --check codex/issue-026-headless-presenter...HEAD

Stack

1. Make the presenter headless and automation-friendly #48
2. Protect loopback review sessions #60 👈 current

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a45d7391cc

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[itsjling]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a45d7391cc

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[itsjling]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a3df3d5352

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".