Checkpoint via cy-loop-tasks (iteration 11, phase B mode=tasks).

Full gate fingerprint 0aa5cdf; VC-R1..R5 and targeted lifecycle QA passed with clean teardown.

Co-Authored-By: Codex <[email protected]>

* feat: add gateway exposure foundation

* feat: Tier listeners and device authentication #2

Checkpoint via cy-loop-tasks (iteration 5, phase B mode=tasks).

Adds daemon-owned tier listeners, device authentication, secure pairing and credentials, stream tickets, live revocation, transaction mutation fencing, transport parity, generated contracts, and gateway documentation.

Co-Authored-By: Codex <[email protected]>

* feat: add connectivity provider seam

* feat: add public gateway ingress

* feat: Remote CLI profiles, operation matrix, and SSH connect #5

Checkpoint via cy-loop-tasks (iteration 11, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: add gateway self-audit and native control

* feat: Gateway operator surface and documentation #7

Checkpoint via cy-loop-tasks (iteration 15, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: QA planning for remote gateway #8

Checkpoint via cy-loop-tasks (iteration 17, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: QA execution for remote gateway #9

Checkpoint via cy-loop-tasks (iteration 19, phase B mode=tasks).

QA execution settled all reset scenarios, re-walked six fixes, passed strict evidence audit, and ended with a clean teardown. Full workstream gate remains deferred until the single final review remediation is complete.

Co-Authored-By: Codex <[email protected]>

* fix: harden remote gateway for release

Resolve the sole deep-review round across the Gateway runtime, CLI, SDKs, web UI, documentation, package boundaries, and QA evidence.

Fix nullable bridge provider configuration and preserve exact public SDK and native-tool metadata contracts.

* refactor: categorize tailscale extension under extensions/connectivity

Co-Authored-By: Claude Fable 5 <[email protected]>

* fix: final adjustments

* docs: add curated release notes for remote gateway

Co-Authored-By: Claude Fable 5 <[email protected]>

---------

Co-authored-by: Codex <[email protected]>
Co-authored-by: Claude Fable 5 <[email protected]>

* feat: Schema and worktree domain core #1

Checkpoint via cy-loop-tasks (iteration 2, phase B mode=tasks).

Focused evidence: worktree race unit suite, real-Git lifecycle integration, migration integrity/equivalence, and 80.8% package coverage. Heavy gates remain deferred to the QA tail by workflow direction.

Co-Authored-By: Codex <[email protected]>

* feat: Worktree public surface: API, CLI, native tools, streams #2

Checkpoint via cy-loop-tasks (iteration 3, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: Session binding, containment, spawn inheritance, fork #3

Checkpoint via cy-loop-tasks (iteration 4, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: Environment policies: task worktree policy + loop environment #4

Checkpoint via cy-loop-tasks (iteration 5, phase B mode=tasks).

Validated task and Loop worktree placement across queue snapshots, lease-fenced session binding, public contracts, real Git journeys, and generated artifacts.

Co-Authored-By: Codex <[email protected]>

* feat: Assisted exit, forge.provider surface, bundled GitHub extension #…

Checkpoint via cy-loop-tasks (iteration 6, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: add web worktree navigation and lifecycle

* feat: Web: environment surfaces and assisted exit #7

Checkpoint via cy-loop-tasks (iteration 10, phase B mode=tasks).

Focused Go race suites, web tests, typecheck, and lint passed. Browser and visual evidence remain assigned to the QA tail.

Co-Authored-By: Codex <[email protected]>

* docs: document Worktree operations and agent surfaces #8

* feat: QA Plan and Session Charters #9

Checkpoint via cy-loop-tasks (iteration 14, phase B mode=tasks).

Adds the durable Worktree QA plan and closes lint, optional-state, native-tool metadata, and bundled-skill inventory gaps exposed by the full gate.

Co-Authored-By: Codex <[email protected]>

* fix: preserve operator global config at daemon boot

* fix: mount desktop shell context before projection reads

* docs: record autonomous observer mismatch replay

* fix: preserve pending worktree creation state

* fix: expose worktree config lifecycle

* fix: reject invalid worktree bases before acceptance

* fix: preserve task fanout intent identity

* fix: start native task claims in bound sessions

* test: complete worktree real-user QA

* fix: keep worktree exit menu mounted

* fix: complete worktree review remediation

* fix: reconcile main rebase contracts

* fix: lint

* docs: update design

* fix: a lot of adjustments

---------

Co-authored-by: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 13, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 13, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 13, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: P0 cleanup: hash_fields deletion, predicate policy, per-gate coun…

Checkpoint via cy-loop-tasks (iteration 2, phase B mode=tasks).

Focused race, integration, codegen, web test, and web/site typecheck evidence passed. Full gate and QA remain deferred to the loop tail by user instruction.

Co-Authored-By: Codex <[email protected]>

* feat: P1 router: route node + gate verdict routing #2

Checkpoint via cy-loop-tasks (iteration 3, phase B mode=tasks).

Focused verification includes route planner/linter race suites, migration integrity, web codec/typecheck, and E2E-008 loop status route causes; heavy project gates and QA remain deferred by the accepted loop instructions.

Co-Authored-By: Codex <[email protected]>

* feat: P2 requests core: ask node, respond plane, ResponderPolicy #3

Checkpoint via cy-loop-tasks (iteration 4, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: P3 per-lane addressing, review gate, amend overlay #4

Checkpoint via cy-loop-tasks (iteration 5, phase B mode=tasks).

Focused race verification and codegen checks passed; batch gate and live QA remain deferred by the controlling loop plan.

Co-Authored-By: Codex <[email protected]>

* feat: add fan-out strategy settlement

* feat: window wide fan-out execution

* feat: P7+P8 time travel: diff, rerun, fork + cross-cutting suites #7

Checkpoint via cy-loop-tasks (iteration 11, phase B mode=tasks).

Focused verification passed; full gate, live QA, review, and frontend work remain deferred to the post-task tail.

Co-Authored-By: Codex <[email protected]>

* fix: adjustments

* fix: errors

* docs: graph eng design

* feat: P9 web run-page surfaces (S1–S8, S10–S12) + visual contract #8

Checkpoint via cy-loop-tasks (iteration 13, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: compose loop requests into attention

* test: plan graph completion QA

* fix: close graph QA regressions

* fix: preserve update contract after rebase

* fix: deep review

* fix: ci fixes

* fix: graph engineering request

* feat: add entity-backed typed Loop inputs

* docs: record typed Loop input QA fixes

* fix: resolve typed Loop input review findings

* fix: preserve composed request schemas in snapshots

* refactor: satisfy strict branch lint

* test: record typed Loop remediation QA

* fix: preserve workspace in native Loop config writes

* fix: satisfy React compiler checks after rebase

---------

Co-authored-by: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

#490)

* feat: Terminal core and PTY substrate #1

Checkpoint via cy-loop-tasks (iteration 2, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: Wire protocol and transport #2

Checkpoint via cy-loop-tasks (iteration 3, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: Persistence, journal and observability #3

Checkpoint via cy-loop-tasks (iteration 4, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: Agent surfaces exec tools and write path #4

* feat: Web terminal system #5

Checkpoint via cy-loop-tasks (iteration 6, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: Public activation tranche #6

Checkpoint via cy-loop-tasks (iteration 7, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* feat: render agent-reported terminal output

* feat: Windows ConPTY adapter #8

Checkpoint via cy-loop-tasks (iteration 9, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* fix: satisfy integrated terminal gate policies

* fix: normalize local gate classification

* fix: resolve integrated terminal review findings

* feat: QA Plan and Session Charters #9

Checkpoint via cy-loop-tasks (iteration 10, phase B mode=tasks).

Co-Authored-By: Codex <[email protected]>

* fix: preserve terminal workspace registration identity

* fix: complete integrated terminal QA remediation

* refactor: remove unused terminal exports

* fix: ui improvements

* fix: improvs

* fix: complete rebase integration

* fix: align product language

* fix: resolve Windows terminal executables

* test: stabilize Windows terminal reads

* test: drain Windows terminal startup output

* test: align reported terminal E2E contract

* fix: bind terminal browser ownership

* fix: stabilize terminal browser attachments

* fix: retry empty Windows terminal reads

* fix: preserve terminal sessions after creation

* fix: preserve terminal clipboard shortcuts

* test: align daemon harness profile resolution

* fix: harden terminal process shutdown

* fix: harden terminal approvals and agent guidance

* fix: harden terminal runtime lifecycle

* fix: unify terminal transport contracts

* fix: complete integrated terminal lifecycle

* build: regenerate integrated terminal contracts

* feat: rebuild integrated terminal window

Co-authored-by: Cursor <[email protected]>

* feat: rebuild integrated terminal journal

Co-authored-by: Cursor <[email protected]>

* feat: rebuild terminal input attention

Co-authored-by: Cursor <[email protected]>

* feat: rebuild terminal approval surfaces

Co-authored-by: Cursor <[email protected]>

* feat: rebuild session terminal blocks

Co-authored-by: Cursor <[email protected]>

* feat: rebuild terminal quote and settings

Co-authored-by: Cursor <[email protected]>

* docs: clarify estimated terminal journal boundaries

Co-authored-by: Cursor <[email protected]>

* fix: close integrated terminal host gaps

Co-authored-by: Cursor <[email protected]>

* fix: complete integrated terminal remediation

* fix: final review

* fix: close integrated terminal QA gaps

* fix: repair integrated terminal CI

* fix: stabilize integrated terminal CI

* fix: close integrated terminal web CI gaps

* fix: stabilize terminal detach chord

* test: stabilize loop event resume E2E

* ci: parallelize e2e lanes

* fix: close final web e2e races

* fix: close exact-head web e2e races

* fix: close exact-head e2e races

* test: stabilize terminal e2e fixtures

* fix: preserve semantic identity during retarget

* test: stabilize loop read E2E

* fix: stabilize integrated terminal and remove in-app tabs

Close is idempotent (exited terminals answer their recorded exit), the
stream client settles as closed instead of reconnecting a dead terminal,
size votes made before the socket opened are delivered on open, and the
fish shim rides vendor_conf.d without hiding the user's config. The web
terminal is window-native: one terminal per OS window, an id-less route
that adopts or creates, head-level Journal/New/Close verbs, and window
close never signals the PTY.

Co-Authored-By: Claude Fable 5 <[email protected]>

* fix: repair zsh markers and resolve terminals from fresh catalog truth

The zsh marker hooks shadowed zsh's read-only status parameter, killing the
precmd hook on every prompt and dropping every finish marker; a live zsh test
now pins the clean hook. The id-less terminal route waits for a catalog fetch
from this mount before adopting or creating, so a terminal opened moments
before the window cannot be missed and duplicated. Browser journeys walk the
window-native flow end to end, and the QA tracker records the walked verdicts.

Co-Authored-By: Claude Fable 5 <[email protected]>

* fix: dedupe worktrees spec imports after rebase

Co-Authored-By: Claude Fable 5 <[email protected]>

* fix: split protocol client wiring and align desktop terminal flow

Co-Authored-By: Claude Fable 5 <[email protected]>

* test: assert reattach liveness on the focused restored terminal

Co-Authored-By: Claude Fable 5 <[email protected]>

* fix: terminal fonts

* fix: render agent-internal commands as plain session output

Pull ADR-012 door 3 (`_meta.terminal_output`): the daemon no longer opts
into agent-reported terminal output, and the whole reported pipeline goes
with it — ACP ingestion and suppression, the `agent_reported` origin,
contract/stream payload fields, transcript codec/replay, acpmock steps,
and the web "reported by agent" xterm blocks. Agent-internal commands
render as plain command output again; the deliberate S3 supervised block
and the ACP pipe door stay untouched.

Co-Authored-By: Claude Fable 5 <[email protected]>

* feat: materialize agent-opened terminals as desktop windows

A daemon bridge observes terminal opened events and, for agent-actor
interactive PTY terminals (terminal_open, terminal_exec visible:true),
opens a managed Terminal window in the workspace window model — on the
desktop showing the bound session, never moving focus, one-shot per
terminal, deduped by instance key, and never failing the tool call.
Pipe terminals and human actors materialize nothing.

The transcript now recognizes real agent traffic: hosted-MCP tool names
(mcp__<server>__compozy__*) normalize to their native ids for the S3
supervised block and row labels, MCP string envelopes decode so
terminal_id reaches the block, and the remaining terminal tools carry
registered labels. E2E-003 asserts the window materializes without
stealing focus.

Co-Authored-By: Claude Fable 5 <[email protected]>

* fix: steer agents to the integrated terminal and refresh its truth surfaces

Terminal tool descriptors now lead with the desktop-window capability,
the official skill documents the windows contract and the
write-wait-read loop, and the site docs replace the agent-reported
block section with the plain-output and window-materialization truth.
QA tracker updated for ADR-019: the reported-terminal scenario is
deleted, affected scenarios were reset and re-walked with a real Haiku
agent in an isolated lab, and a new materialization scenario records
the walk (docs/qa/reports/2026-09-01-terminal-rework.md).

Co-Authored-By: Claude Fable 5 <[email protected]>

* ci: retrigger PR checks for the terminal rework head

Co-Authored-By: Claude Fable 5 <[email protected]>

* fix: renumber terminal migration and settle generated artifacts after rebase

Main's loop work took 00098/00099, so the workspace-deletion-intents
migration moves to the next gap-free version (00100), atlas.sum is
rehashed for the unpublished tail, and the SDK contract chunks
regenerate to the merged truth.

Co-Authored-By: Claude Fable 5 <[email protected]>

* fix: reconcile pointer actor and ahead sentinel after second rebase

Main's new loop tests construct ActionExecutionInput with a value actor
while this branch moved the field to *task.ActorContext; the merged call
sites now take the pointer. The global ahead-schema fixtures pinned
version 100, which the renumbered terminal migration just occupied —
they use the 999 sentinel the other streams already use.

Co-Authored-By: Claude Fable 5 <[email protected]>

* docs: increase deep review limits

* fix: remediate integrated terminal review

* test: align rebased suites with main contracts

* fix: repair rebased CI regressions

* fix: skill triggering

---------

Co-authored-by: Codex <[email protected]>
Co-authored-by: Cursor <[email protected]>
Co-authored-by: Claude Fable 5 <[email protected]>

* feat: establish unified marketplace catalog and extension data contracts

* feat: add unified marketplace browse and installed views

* fix: reconcile unified marketplace reads and retained links

* feat: One marketplace surface on today's catalog #1

Checkpoint via cy-loop-tasks (iteration 6, phase B mode=tasks).

Focused routing tests34, Web typecheck and changed-file lint pass. Final QA, visual evidence and heavy gates remain pending under the user-directed final validation boundary.

Co-Authored-By: Codex <[email protected]>

* refactor: remove marketplace installer compatibility workarounds

Remove requested runtime names and manual MCP secret imports; require explicit owners for extension management and diagnostics. Preserve automatic allocation rollback, existing references and discovered resource execution. Consolidate CLI preflight selection and keep canonical catalog requests on their source.

* refactor: remove fallback to retired marketplace feeds

* refactor: remove retired MCP catalog installer

* refactor: remove remote skill acquisition surfaces

* refactor: use canonical marketplace discovery for native tools

* refactor: use canonical marketplace routes in CLI

* refactor: remove kind-based marketplace APIs

* refactor: remove retired marketplace feed decoders

* refactor: address marketplace storage and refresh by source

* refactor: remove marketplace source kind selectors

* refactor: remove marketplace kind identity and storage

* refactor: retire remote skill acquisition settings

* feat: Client plugin grammars load through adapters #6

Checkpoint via cy-loop-tasks (iteration 20, phase B mode=tasks).

Client grammar adapters preserve authored bytes and record layout through managed and HTTP install. Focused race/integration, direct syntax lint and generated Web typecheck pass. Live QA, heavy gates and final review remain deferred by session instruction.

Co-Authored-By: Codex <[email protected]>

* docs: align marketplace migration and configuration guidance

* feat: publish only the current marketplace feed

Checkpoint via cy-loop-tasks (iteration 22, phase B mode=tasks).

Remove production v2 adapter/decoder and preserve existing extension artifact identities. Publisher, real CLI publication and approved 17-package conformance pass focused checks. Site root-feed consumers and remaining task02 contracts stay in progress.

Co-Authored-By: Codex <[email protected]>

* feat: switch site catalog data and routes to v3

Checkpoint via cy-loop-tasks (iteration 22, phase B mode=tasks).

Data boundary and public index tests pass. Retired root feeds, kind schemas and kind routes are removed. UI consumers are the next assigned Fable slice; full site rendering/typecheck is still pending and no compatibility aliases are added.

Co-Authored-By: Codex <[email protected]>

* feat: publish one extension catalog on the public site

* refactor: name current extension input behavior directly

* feat: preserve requested scope during managed package acquisition

* feat: bind extension installs to requested workspace and profile

* feat: honor manifest defaults when selecting install scope

* feat: preserve scoped inputs through extension updates

* feat: reinstall published extensions through the update transaction

* fix: pin extension confirmation to the previewed artifact

* fix: require fresh confirmation when marketplace artifacts change

* feat: expose candidate input definitions for extension recovery

* feat: wire marketplace input forms and update recovery

* feat: complete marketplace input configuration UI

* fix: isolate MCP publication for unconfigured profiles

* test: verify catalog secret inputs through public transports

* fix: preserve direct extension update origins and rollback

* test: verify curated install update and artifact integrity

* test: verify v3 publication through the daemon

* fix: start extension runtimes in their workspace profiles

* fix: run published workspace extensions with scoped ownership

* fix: restore profile runtimes across overlay transitions

* fix: compensate package allocations across workspace updates

* test: verify complete marketplace upgrade preservation

* fix: require logical names for public extension MCP operations

* fix: reuse owner registration for MCP token refresh

* fix: remove runtime aliases from MCP detail lookup

* fix: preserve scoped extension attachment lifecycle

* feat: prepare owner-scoped MCP management controllers

* feat: expose extension-owned MCP management

* feat: add verified marketplace package cache

* feat: read bounded plugin marketplace documents

* feat: pin GitHub marketplace reads to commits

* feat: retain verified Git checkouts for acquisition

* feat: share canonical tar serialization for marketplace packages

* feat: install verified canonical tar packages

* feat: capture confined marketplace packages in cache

* feat: acquire pinned marketplace repository snapshots

* feat: acquire Git and folder marketplace snapshots

* feat: resolve and acquire pinned marketplace packages

* feat: project marketplace plugins through install loaders

* feat: install marketplace plugin acquisitions through lifecycle

* feat: configure marketplace plugin sources and preset choices

* feat: persist marketplace source identity and diagnostics

* feat: compose marketplace plugin source refreshes

* feat: aggregate marketplace sources with transactional refresh fences

* refactor: retire embedded Marketplace skill MCP authorization

* feat: compose plugin catalog sources and persist feed presets

* feat: install and update pinned marketplace plugins

* feat: retain marketplace packages and source identities

* feat: manage marketplace sources across agent surfaces

* feat: Sources surface: routes, CLI, tool, Settings page, sections #8

Checkpoint via cy-loop-tasks (iteration 74, phase B mode=tasks).

Source management UI and current Marketplace scenarios. Focused checks passed; live QA and final delivery gates remain task_10 by user direction.

Co-Authored-By: Codex <[email protected]>

* fix: peer-review round 1 remediation

Checkpoint via cy-loop-tasks (iteration 81, phase D review round 1).

Co-Authored-By: Codex <[email protected]>

* fix: repair marketplace scope and final validation failures

* test: complete retired MCP selector removal

* test: enforce scoped inventory and retain restart diagnostics

* fix: remove Repository Orientation from the official catalog

* fix: address marketplace catalog review findings

* ci: verify marketplace publication integrations on Linux

* test: align marketplace fixtures with required install references

* fix: preserve marketplace error and hook scope contracts

* fix: resolve remaining marketplace lint findings

* fix: prepare all plugin layouts for development reload

* fix: rewrite configured credential references on profile rename

* fix: reject invalid MCP credential owners before replacement

* fix: allow MCP repairs when prior authentication fails

* fix: align profile credential repairs with CI style checks

* docs: record completed marketplace review QA

* refactor: resolve marketplace React Doctor diagnostics

* fix: return the selected skills scope label

---------

Co-authored-by: Codex <[email protected]>