mweinbach2/22/2026, 9:34:14 PM

- Replace remaining manual shape checks in skill frontmatter, notebook edits, websocket event parsing, and codex oauth responses with Zod schemas.
- Make model/MCP/session-config persistence strict: runtime config updates now apply only after persistence succeeds.
- Tighten project config file loading in server startup to reject invalid/non-object JSON and surface errors to set_model callers.
- Expand tests to cover invalid notebook JSON and strict persistence/error behavior for set_model, set_enable_mcp, and set_config.

Co-authored-by: Codex <noreply@openai.com>

Parent8868230