Improve Microsoft Store certification flow by fkiller · Pull Request #53 · fkiller/GnuNae

fkiller · 2026-07-07T22:46:32Z

Summary

Add Partner Center certification notes automation for Microsoft Store submissions.
Change the Windows Store release job to create a no-commit draft, patch certification notes, verify the pending APPX/MSIX version, then publish the draft.
Add manual release_mode=msstore-only dispatch so an owner-approved Microsoft Store resubmission can run from main without moving the existing v1.0.60 tag.
Make first-run signed-out browser navigation available without OpenAI sign-in and clarify Codex auth requirements.
Sync visible website/certification version references to v1.0.60 and package static login/about version display from package.json.

What I inspected

Microsoft certification report for 10.1.2.10 Functionality login/sign-up failure.
Live Partner Center submission state: CertificationFailed, empty notesForCertification, package 0.8.30.0.
Existing v1.0.60 release tag, which points to the older MAS/export-compliance commit before this Store metadata fix.
First-run login page, Codex sidebar sign-in failure handling, release Store upload workflow, certification docs, and package version paths.

Files changed

.github/workflows/release.yml, .github/workflows/store-status-watch.yml
scripts/msstore-certification.js, scripts/build-ui.js
src/ui/login.html, src/ui/components/CodexSidebar.tsx, src/ui/components/About.tsx, vite.config.ts
Store/release/user docs: README.md, AGENTS.md, docs/*

Verification

node --check scripts/msstore-certification.js - passed
node --check scripts/store-status-watch.js - passed
node --check scripts/build-ui.js - passed
node scripts/msstore-certification.js --write-notes $env:TEMP\gnunae-msstore-notes.txt --dry-run - passed
node scripts/msstore-certification.js --patch-pending --submission-id 1152921505701360268 --verify-package-version --allow-version-mismatch --dry-run - passed locally after retry; confirmed current failed Store package is 0.8.30.0 while expected is 1.0.60.0
npm run build - passed locally after adding manual MS Store dispatch mode
Local APPX package manifest inspection - passed; AppxManifest.xml identity version is 1.0.60.0
GitHub Actions CI workflow dispatch on branch - passed on Windows, macOS, and Linux: https://github.com/fkiller/GnuNae/actions/runs/28903706424
GitHub Actions Store Status Watch workflow dispatch with certification_dry_run=true - passed: https://github.com/fkiller/GnuNae/actions/runs/28903706494
PR CI/Docker checks are expected to re-run after the manual dispatch commit before merge.
Not run yet: real Microsoft Store resubmission; this PR adds the path, and resubmission should run after merge from main with release_mode=msstore-only.

Release and store impact

Release-sensitive: changes Microsoft Store submission flow in release.yml and adds manual dispatch support.
The Store path creates a draft with msstore publish --noCommit, applies certification notes through Partner Center API, verifies the pending package version against package.json, then runs msstore submission publish.
Manual release_mode=msstore-only runs only build-msstore; it does not rerun MAS, create a GitHub Release, or move an existing tag.
Current failed submission remains unchanged; dry runs did not mutate Partner Center.
Optional MSSTORE_CERTIFICATION_TEST_ACCOUNT_NOTE can be configured as a GitHub Actions secret for secure reviewer-account details.

Native and Docker impact

Native mode: signed-out browser navigation remains available; Codex features still require OpenAI/Codex authentication.
Docker/Virtual Mode: no runtime or Docker execution changes.

Stale docs or conflicts found

Store submission had empty notesForCertification despite repo certification notes describing ChatGPT Pro/Plus requirements.
Live Partner Center package was 0.8.30.0; local packaging now verifies the current branch builds APPX version 1.0.60.0.
Website/certification visible version references were stale and are updated to v1.0.60.

Manual confirmation needed

Owner review is required before merging release workflow changes.
Actual Microsoft Store resubmission requires manual dispatch of release.yml from main with release_mode=msstore-only after merge.
If Microsoft requires a reviewer account, configure MSSTORE_CERTIFICATION_TEST_ACCOUNT_NOTE in GitHub Actions secrets before resubmission.

Recommended next Codex tasks

After merge, run release.yml with release_mode=msstore-only from main and monitor build-msstore through certification.
If certification still fails, use the appeal email workflow only after reviewing the new certification report and confirming Microsoft needs clarification.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 02fbd4d9c0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector · 2026-07-08T03:23:52Z

+  await syncLocalizations(token, targetVersionResource.id, sourceVersion, whatsNew);
+  await syncReviewDetail(token, targetVersionResource.id, sourceVersion);
+
+  const build = await waitForProcessedBuild(token, appId, targetVersion, args.waitMinutes);


Refresh App Store token during MAS processing wait

When App Store processing takes longer than the 20-minute JWT lifetime created by createToken(), this 90-minute polling path keeps reusing the original token, so a normal slow build processing run starts returning 401s and the new build-mas release job aborts before attaching/submitting the build. The workflow explicitly sets MAS_SUBMIT_WAIT_MINUTES: 90, so the polling code needs to regenerate the App Store Connect token during/after waitForProcessedBuild rather than carrying a single token through the whole submission.

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-07-08T03:23:52Z

+                fallbackProcess.stdout?.on('data', (data: Buffer) => {
+                    const chunk = data.toString('utf8');
+                    output += chunk;
+                    console.log('[Codex default stdout]', chunk);
+                    senderWindow?.webContents.send('codex:output', { type: 'stdout', data: chunk });
+                });


Reuse the normal Codex output parser on fallback retries

When the configured model is rejected and this fallback process runs, stdout is only appended and forwarded to the renderer, bypassing the main stdout handler that detects [PDS_REQUEST], [PDS_STORE], [BLOCKER], captcha, 2FA, and login-block patterns. In the exact model-fallback path this adds, any retried Codex task that asks for stored user data or hits a blocker will no longer notify the UI and can hang or silently miss the requested store operation.

Useful? React with 👍 / 👎.

fkiller added 13 commits July 4, 2026 21:01

Update Codex runtime and maintenance parity

718b67f

Fix MAS universal node-pty merge

4d2b343

Broaden MAS node-pty universal rule

768c0e1

Use rolling Docker sandbox image

07b4a6b

Cover bundled native resources in MAS universal build

7db7d00

Automate Mac App Store review submission

2ba3218

Set MAS export compliance for submissions

5b321a4

Preserve Store certification report links

fd2e23d

Pin Store status CLI version

adf2b3d

Recover Store certification report links

7fb8a0d

Add Store appeal email dry-run workflow

36843a5

Improve Microsoft Store certification flow

dbcb46e

Add manual Microsoft Store resubmission mode

02fbd4d

fkiller marked this pull request as ready for review July 8, 2026 03:14

fkiller merged commit 8962eab into main Jul 8, 2026
4 checks passed

fkiller deleted the codex/runtime-docker-maintenance-docs branch July 8, 2026 03:15

chatgpt-codex-connector Bot reviewed Jul 8, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Improve Microsoft Store certification flow#53

Improve Microsoft Store certification flow#53
fkiller merged 13 commits into
mainfrom
codex/runtime-docker-maintenance-docs

fkiller commented Jul 7, 2026 •

edited

Loading

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

chatgpt-codex-connector Bot Jul 8, 2026

Uh oh!

chatgpt-codex-connector Bot Jul 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

fkiller commented Jul 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

What I inspected

Files changed

Verification

Release and store impact

Native and Docker impact

Stale docs or conflicts found

Manual confirmation needed

Recommended next Codex tasks

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector Bot Jul 8, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot Jul 8, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

fkiller commented Jul 7, 2026 •

edited

Loading