Fixel v1.2.0 — Never Fail Twice

Never Fail Twice

Fixel can now turn reviewed pull-request feedback into version-controlled repository lessons without allowing an agent to approve its own guidance.

Highlights

• fixel learn --repo owner/repo --pr N captures PR, review, comment, and failed-check evidence as an inert draft.
• Only human-reviewed lessons with status: approved are loaded into future runs.
• Drafts, malformed files, symlinks, and oversized lesson sets are ignored.
• Approved lessons cannot override credential, sandbox, network, git, or human-review boundaries.
• Includes the first real lesson derived from PR #11 and a reproducible gate benchmark.

Verification

• 18 automated tests passed on Node.js 20 and 22.
• Never Fail Twice gate benchmark passed 1/1.
• Package dry-run and syntax checks passed.

See the workflow: https://github.com/AmIrRX0/Fixel/blob/v1.2.0/docs/never-fail-twice.md

Fixel v1.1.0 — local Codex provider

Local Codex support

Fixel can now use an existing ChatGPT-authenticated Codex CLI session for local issue-to-PR runs, without ANTHROPIC_API_KEY:

codex login
export GITHUB_TOKEN="your-minimum-permission-token"
node src/cli.js --repo owner/repo --provider codex --issue 42 --verbose

Security

• Issue text is sent to Codex through stdin, not shell interpolation.
• Codex runs ephemerally without user config or exec-policy rules.
• A granular permission profile allows project writes while explicitly denying Codex, SSH, Git, cloud, Docker, npm, and related credential paths.
• Agent shell network access is restricted to required GitHub/package domains.
• GitHub/API/package secrets are excluded from the Codex process environment.

The bundled GitHub Action remains explicitly on Claude and still requires ANTHROPIC_API_KEY; local ChatGPT authentication must not be copied to a hosted runner.

Proof

This release was dogfooded on issue #10: Fixel used Codex to open PR #11 without an Anthropic key. Node.js 20 and 22 CI passed, and the PR was security-reviewed before merge.

Fixel v1.0.0 — Secure launch foundation

Highlights

• Turns a labeled GitHub issue into a reviewable pull request with Claude
• Supports GitHub Actions, CLI, fork mode, label filters, and dry runs
• Runs agent commands in a fail-closed filesystem and network sandbox
• Keeps GitHub, registry, cloud, and local credentials outside the agent environment
• Adds security-boundary tests on Node.js 20 and 22, CI, Dependabot, and a security policy
• Pins the Claude Agent SDK and documents the Node.js 20+ requirement

Install

- uses: AmIrRX0/Fixel@v1.0.0
  with:
    anthropic-api-key: ${{ secrets.ANTHROPIC_API_KEY }}
    github-token: ${{ secrets.GITHUB_TOKEN }}
    issue-number: ${{ github.event.issue.number }}

Important

Fixel creates a proposed code change; it never auto-merges. Review the diff and CI before merging. For unfamiliar repositories, prefer fork mode or a dry run and use the minimum token permissions documented in the README.

See CHANGELOG.md and SECURITY.md for details.

Fixel - Fix Every Issue !

🔧 Fixel v1.0.0 — first release!

Label an issue → get a pull request. Fixel reads your GitHub issues, fixes them with Claude, and opens a PR for each one.

Highlights

• ⚡ GitHub Action: add the fixel label to any issue and a PR shows up — zero servers, zero setup
• 🌙 Nightly mode: fix up to N labeled issues on a schedule while you sleep
• 💻 Full CLI: --fork mode for repos you can't push to, --dry-run to preview diffs, label filters, model selection
• 🔒 Safe by design: token never leaks into URLs/argv, the agent works in an isolated clone and can't push by itself

Quickstart

Copy examples/label-trigger.yml to .github/workflows/fixel.yml, add the ANTHROPIC_API_KEY secret, label an issue fixel. Done. 🎉