Public hardening followups (Codex CLI docs, Slice 3, capability evidence, auto-block, vault v3 design)#1

Merged

ARHAEEM merged 15 commits into

mainfrom

codex/public-hardening-followups

Apr 28, 2026

Commits on Apr 27, 2026

feat(mcp-server): startup vault pre-flight + actionable locked-vault error

A.R.
and
claude
committed
docs(codex): add CLI setup guide

A.R.
and
claude
committed
fix(mcp-server): drop --disable-web-security; route ASI downloads via APIRequestContext

A.R.
and
claude
committed
docs(smoke): codex-cli loopback template + capability evidence index

A.R.
and
claude
committed
fix(auto-config): include all 14 tools in PERPLEXITY-MCP rules block

A.R.
and
claude
committed
docs(vault): v3 KDF-stretch design spec (scrypt)

A.R.
and
claude
committed
fix(mcp-server): drop unjustified IsolateOrigins / site-isolation-trials stealth flags

A.R.
and
claude
committed
feat(vault): v3 KDF stretching with scrypt

A.R.
and
claude
committed
ci: raise NODE_OPTIONS heap to 4GB for tsup DTS worker

A.R.
and
claude
committed
ci: force-install tailwind oxide native binding (npm/cli#4828)

A.R.
and
claude
committed
chore(webview): track 15 mcp-tool-icons SVGs imported by webview

A.R.
and
claude
committed
ci: skip browser-backed integration tests + fix per-OS test paths

A.R.
and
claude
committed
ci: platform-aware path validator + tighter VSIX grep + CI-skip flaky test

A.R.
and
claude
committed
ci: VSIX clean check — ignore vendored .ts under node_modules

A.R.
and
claude
committed

Commits on Apr 28, 2026

fix(extension): catch 'already registered' webview error on reload

A.R.
and
claude
committed