[ScriptedAlchemy]

Summary

• re-sort external issuer identities after project-relative normalization
• apply the same invariant to host-surface and MCP App AB6005 diagnostics
• add regression tests proving checkout-path-independent ordering
• add the required agent-bundle patch changeset

Root cause

The compiler audit correctly recorded sorted, unique absolute issuer paths. Diagnostic lowering converted project-owned issuers to relative paths without re-sorting, so checkout location could change diagnostic order and break the release gate.

Verification

• pnpm build
• pnpm typecheck
• pnpm lint
• pnpm test:unit (4,539 tests; 4,533 passed, 6 skipped)
• focused issuer-order integration test, 3 consecutive passes after final review fix
• pnpm test:integration:run (1,175 tests; 1,171 passed, 4 skipped)
• automatic Codex P2 fixed and thread resolved
• independent non-Grok Fable final review: no merge blockers

[changeset-bot]

🦋 Changeset detected

Latest commit: a5908c8

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages

Name	Type
agent-bundle	Patch
create-agent-bundle	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-08T09:13:57.400642Z	8c1246a	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[pkg-pr-new]

npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle@768

npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle/create-agent-bundle@768

npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle/rsc-markdown-stream@768

npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle/@agent-bundle/runtime@768

commit: a5908c8

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 8c1246a19b

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".