v3.0.0 — Codex-style coding agent (repo intelligence, safe patching, tests, review, planner, policy)

The biggest release yet — Local Coding Agent grows from a file/command tool into a Codex-style local coding agent: it can understand a repo fast, edit safely with undo, run the right tests, review its own diff, remember work across chats, and enforce a permission policy. 58 tools total.

Not a replacement for Codex/CLIs — a free, open-source MCP server you drive from ChatGPT Web (or any MCP client). Not affiliated with OpenAI/Anthropic. AGPL-3.0.

✨ What's new in 3.0

🧠 Repo intelligence (understand a repo in 1–2 calls)

• repo_map — tree + manifests + package scripts + project profile in one call (cached 5 min)
• project_profile — detects languages/frameworks/package managers (Node/React/Next/Nest, Flutter, Python, Go, Rust, .NET, Java…)
• important_files — README, tsconfig, CI workflows, Dockerfile, env examples…
• repo_symbols — functions/classes/routes via fast regex scan
• index_status — cache freshness

🩹 Safe patch engine + undo

• preview_patch (dry-run), validate_patch (conflict check), undo_last_patch
• Every write (write_file / replace_in_file / apply_patch / move / delete) now backs up first → mistakes are reversible

🧪 Smart test/build runner

• detect_test_commands, run_tests, run_build, run_lint, run_changed_tests (maps changed files → nearby tests) — with structured failure summaries

🔍 Review mode

• review_diff (P1/P2/P3 findings + PASS/WARN/BLOCK verdict), security_scan (secret/dangerous-call detection), todo_scan, change_summary

🗺️ Planner / thread memory

• task_plan, task_state, decision_log saved under .agent/state/; checkpoints snapshot the plan → open a fresh chat, resume, keep going

🛡️ Permission / approval layer

• AGENT_POLICY = strict | balanced | full (default balanced) on top of safe/full mode
• policy_status, explain_risk, request_approval, approve_request, deny_request — dangerous actions are classified and never run silently

🧩 Workspace profiles

• profile_status, reload_profile — auto-loads <workspace>/.agent/profile.json (mode, test commands, conventions…)

✅ Quality

• New eval suite (npm run eval, 20 scenarios). CI runs functional + security + eval.
• Tests this release: test:agent 23/23 · test:security 6/6 · eval 20/20 (all re-verified).

Notes

• The Windows tray app is unchanged in this release (server-side only). It still launches/manages v3.0.0.
• Carries forward all prior hardening (realpath root confinement, raw-git lockdown, recursive audit redaction, catastrophic-command blocklist, loopback-only bind).