Skip to content

Launch-harden CLI and prepare pre.74 - #1

Merged
halfaipg merged 80 commits into
mainfrom
codex/usage-dogfood-20260705
Jul 10, 2026
Merged

Launch-harden CLI and prepare pre.74#1
halfaipg merged 80 commits into
mainfrom
codex/usage-dogfood-20260705

Conversation

@halfaipg

Copy link
Copy Markdown
Contributor

Summary

  • harden first-run OAuth, usage reporting, shell permissions, and web-build continuity
  • add enforced task tracking, provenance-aware memory, reliable receipts, benchmarks, app-server code navigation, and agent UX improvements
  • prepare 2.0.0-pre.74 so the public package matches the tested launch branch and consistently points users to codebase.design

Verification

  • npm run check (131 files, 1,288 tests)
  • npm run build
  • npm run smoke:help
  • production OAuth status and usage checked with a clean HOME

Release

Merge first, then tag the merged commit v2.0.0-pre.74; the existing release workflow publishes npm with provenance and builds platform binaries.

halfaipg and others added 30 commits June 19, 2026 07:42
Phase 1 of the directors v2 redesign: classifyReversibility(tool, args)
replaces the old shell-regex isDestructive. It judges whether an action
is reversible (auto-run unattended), irreversible (escalate to the
human), or unknown (escalate by default). Key correctness wins over the
regex: checkpointed file writes are reversible (/rewind restores them),
ssh/MCP/network/the-outbound-message-itself are covered, and ambiguous
commands route to unknown instead of being waved through. Pure and
exhaustively tested; no wiring yet. Also teaches commandPrefix about helm.
Phase 2: a Director persona persisted as markdown+frontmatter (global,
reusable), and a per-project append-only activity log that is the
evidence behind graduation — it records what the director proposed and
how often the human agreed, per command family, flagging irreversible
denials as a graduation blocker. `codebase director hire|list|status|fire`
manages them; status renders the track record. Every hire starts cautious
— autonomy is earned, never chosen.
Fetches GET /api/v1/credits/balance with the OAuth token and prints credits
used/allowance, a progress bar, % and reset date, plus build turns remaining.
Distinct from /cost (session token spend). Server accepts the token's 'credits'
scope.
@halfaipg
halfaipg merged commit a1de077 into main Jul 10, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant