Port upstream CodexBar v0.56.8 [review]

[Finesssee]

Scope

Review-only stacked port of the official upstream CodexBar v0.56.8 release.

• Base: review/upstream-0.56.7 / PR Port upstream CodexBar 0.56.7 [review] #441
• Upstream release base: v0.56.7 peeled commit d8f4cec19b8297debdabb88ea8f72b341ca83e5a
• Exact upstream release tag: v0.56.8
• Annotated tag object: 2f6ad4ff6f817162050eac05a4ac5c6bd696b898
• Peeled release commit: 6ef82690b4a718a21fac42b72a102df07e475509
• Upstream commits audited from v0.56.7 through v0.56.8: 24
• Windows behavior ports: 6
• Release-finalization-only commits after the original snapshot: 2
• Windows fork keeps its own package/release numbering; upstream Sparkle/appcast metadata is not copied into the Windows product version.
• Review only: do not merge yet

Ported behavior

• Claude: localized scoped-weekly quota labels using upstream-exact locale templates for all 8 Windows locales.
• Copilot: identity-first legacy account reuse using stable GitHub user IDs; label fallback only when identity cannot be verified.
• Codex: authenticated HTTP semantics preserve 401 as auth-required while 403/other failures remain terminal with status/body, including PAT paths.
• Antigravity: preserve history around valid UUID-less bookkeeping steps while keeping duplicate bot-ID/timestamp ambiguity fail-closed.
• Claude OAuth: expired default file credentials can adopt changed fresh Windows Credential Manager credentials without overriding fresh file/environment precedence.
• Kiro: usage enrichment routes only to the endpoint supported by the validated profile ARN region and fails closed for unsupported ARNs.

Upstream commit classification

Upstream	Decision	Windows evidence
0be771490	DEV_OR_RELEASE_ONLY	Starts 0.56.8 development/changelog only; no Windows product behavior.
7353c7175	ALREADY_EQUIVALENT	Native Rust Poe path already uses rolling-date aggregation; Windows has no upstream detail-row surface.
8baa6cb48	SKIP	Upstream MiMo local Python session scanner has no Windows counterpart; Windows MiMo is API-based.
31131374b	ALREADY_EQUIVALENT	Windows notification manager survives refreshes and dedupes by provider/account/window/type.
0e8ccd2bc	ALREADY_EQUIVALENT	Windows Poe parser rejects invalid/non-finite/out-of-range timestamps before aggregation.
7ddcb813f	ALREADY_EQUIVALENT	Windows centralizes pace/reset presentation in shared React helpers.
9d01d5cf0	SKIP	Upstream OpenRouter token-activity overflow surface is absent; Windows publishes spend CostSnapshot, not that token-history snapshot.
49f2dc916	PORT	Scoped Claude weekly titles now use a dedicated localized template, preserving locale word order.
3c5bc8199	PORT	Copilot stored/existing account matching is identity-first; legacy labels cannot override a verified different identity.
02c073a22	SKIP	macOS iCloud signing/provisioning only.
debe5cdfb	ALREADY_EQUIVALENT	Windows already uses one canonical session localization key.
5d585d1d7	SKIP	macOS NSScreen/status-item placement only; Windows uses tray-anchor/work-area positioning.
46b8840b2	PORT	Windows Codex previously mapped 401 and 403 both to auth-required; now matches upstream distinction across OAuth/reset-credit/PAT requests.
a4760f2d5	ALREADY_EQUIVALENT	Windows bounded catch-up advances on automatic refreshes; Low Power Mode already floors automatic ticks at 30m while manual refresh remains immediate.
a1391fc30	PORT	Windows Antigravity scanner had the same UUID-less bookkeeping/ambiguity gap; ported with focused synthetic coverage.
0863fe838	SKIP	Windows Claude cost scans JSONL directly and has no persisted Claude row cache that could retain replaced transcripts.
6b545c652	SKIP	Upstream Swift config-file watcher/cloud-sync rearm logic has no Windows watcher analogue.
cd8464f58	ALREADY_EQUIVALENT	Windows Kiro already has the same overage precedence/fallback semantics.
79d146d8c	PORT	Expired default Claude file credentials could mask a changed fresh Windows Credential Manager token.
260fb2551	SKIP	Upstream z.ai QuickJS optional-analytics validation surface does not exist in the native Rust Windows provider.
4f760cfc9	PORT	Windows Kiro enrichment was hard-coded to US East; now follows validated US-East/Frankfurt profile ARN routing.
170a4d41c	TEST_ONLY	Upstream locale-sensitive billing/spend fixture update; Windows runtime formatting is already locale-driven.
3d012282c	RELEASE_ONLY	Finalizes upstream 0.56.8 release notes only.
6ef82690b	RELEASE_ONLY	Updates macOS Sparkle appcast for v0.56.8 only.

Validation

• cargo fmt --check: PASS
• offline cargo metadata --no-deps: PASS
• git diff --check: PASS
• locale drift: 826 Rust/TS keys match
• focused new Rust regressions: PASS
• focused Claude MenuCard frontend regression: 28/28 PASS
• TypeScript typecheck: PASS
• CircleCI hosted pr-check: PASS
• CodeRabbit: PASS
• PR mergeability: clean/mergeable at last check

Thermo review found no newly-crossed production >1000-line module. The touched legacy codex/api.rs was already oversized before v0.56.8; this release adds bounded authenticated-HTTP plumbing/tests rather than a new structural concentration.

Review note

The substantive ports were authored by local Luna workers. During the final Claude locale-template review, the local Codex CLI ChatGPT refresh token became revoked; the only manual semantic-neutral correction afterward was a deterministic transcription of upstream's exact scoped-weekly locale templates into the 8 existing Windows locale files plus wiring the already-Luna-authored label path to that template. Subsequent CI fixes were test/lint-only.

[Finesssee]

Final cumulative validation

• Exact head: d543133
• Required CircleCI ci/circleci: pr-check: PASS
• Fresh Windows debug build on that exact head: PASS
• CUA on that exact binary: PASS
  • Tray renders Codex Session / Weekly / reset / Pace content coherently.
  • Claude error presentation and menu actions remain intact.
  • No settings changed.
• Latest reviewed heads of Port upstream CodexBar 0.56.4 [review] #438, Port upstream CodexBar 0.56.5 [review] #439, Port upstream CodexBar 0.56.6 [review] #440, and Port upstream CodexBar 0.56.7 [review] #441 are all ancestors of this head.
• Stack propagation and final main sync were tree-preserving; no conflict markers remain.

This cumulative 0.56.8 integration satisfies the remaining reviewed port-stack gates.