v0.1.10 — PowerShell and repository hardening

Fixed

• Recognize PowerShell commands that use the & call operator with quoted Codex executable paths while preserving the configured shell command unchanged.
• Clarify shell-specific Windows configuration examples and the issue-report version prompt.

Added

• Add a deterministic GitHub social preview and regression coverage for release metadata and repository-only packaging.

Changed

• Refine the GitHub and Marketplace presentation with direct installation links, a quick start, visible trust boundaries, and an explicit compatibility matrix.
• Remove unverified Cursor and Windsurf compatibility claims from Marketplace metadata.
• Document signed-tag creation and verification for future release environments with a configured signing key.

Security

• Update transitive development dependencies to resolve the fast-uri, js-yaml, and undici advisories in the packaging toolchain.
• Preserve Workspace Trust enforcement, machine-scoped CLI configuration, bounded missing-command diagnostics, and no output capture for custom commands.

Verification

• 41 tests passed with no failures or skips.
• The VS Code 1.103.0 Extension Host smoke test passed.
• CI passed on Windows and Ubuntu; CodeQL passed.
• npm audit reports zero vulnerabilities and GitHub reports zero open Dependabot alerts.
• The VSIX contains 14 files and excludes sources, tests, workflows, .github/, source maps, and local artifacts.
• VSIX SHA-256: 272DDAC4520070777BF411B92769F3FBD784E03F1E99494C711A7AC60426C3E2.

Marketplace and Open VSX publication remain owner-managed.

v0.1.9 — Launch-session lifecycle hardening

Fixed

• Give each launch its own disposal scope so shell-integration listeners and fallback timers are released when the launch completes or its terminal closes.
• Stop reading terminal shell output for custom CLI commands; output capture remains limited to the default Codex missing-command check.

Added

• Unit tests for launch-session disposal and source-level regression tests for activation lifecycle behavior.

Changed

• Move launch-session lifecycle helpers into the testable command utility module.
• Document activation-scoped versus launch-scoped resources in the architecture and repository guidance.

Removed

• Remove the unused placeholder icon generator and its script. Published artwork remains unchanged.

Verification

• 39 tests passed with no failures or skips.
• Minimum-version VS Code Extension Host smoke test passed.
• CI passed on Windows and Ubuntu; CodeQL passed.
• npm audit reports zero vulnerabilities; Gitleaks reports no leaks.
• VSIX SHA-256: 3FC77C1F300778558767ADEA8CF5B2E2FFEBC7CD19B373F697C6401E42492723.

Marketplace and Open VSX publication remain owner-managed.

v0.1.8 — Security and repository hardening

Highlights

• Updated the missing-CLI link to the current official Codex CLI documentation.
• Added repository-specific agent, architecture, release, ownership, and contributor guidance.
• Hardened CI with immutable action pins, concurrency cancellation, timeouts, dependency auditing, and minimum-version compatibility checks.

Security

• Bounded terminal shell-output capture and disabled output collection for custom CLI commands.
• Updated transitive development dependencies to resolve the brace-expansion denial-of-service advisory.

Distribution

Published to the Visual Studio Marketplace and Open VSX.

VSIX SHA-256: c2009952818bdc1d0b0e79add25de719042fc03ef3659387c64da9878d944cdc

v0.1.7 — Remove guided installer

Highlights

• Replaced the missing-Codex guided npm installer with a single external link to the official Codex CLI installation documentation.
• Removed temporary installer script creation, installer child-process/shell execution, the autoInstall setting, and obsolete installer utilities and tests.
• Preserved normal side-terminal launching and VS Code Workspace Trust protections.

Verification

• Full compile, unit, metadata, regression, integration, and VSCE package-list checks passed.
• Microsoft Defender found no threats in the packaged VSIX.
• SHA-256: 4ceefaf8950292cf3d133976d53f2d883c1cad3f5099ef77b4da69e0f74d7340

v0.1.4 — Require VS Code 1.93+

Raised the minimum required VS Code version to ^1.93.0 — the actual floor for the terminal shell integration APIs the launcher uses (previously declared ^1.86.0, where those APIs are unavailable).

v0.1.3

Unified the LICENSE copyright holder to Michael Gasperini (Mikesoft). No functional changes.

v0.1.2

Marketplace SEO (AI/Chat categories, sharper title/summary, keywords), Open VSX + Sponsor badges, and a pointer to Super CLI as the all-in-one launcher. No functional changes.

v0.1.1

Release 0.1.1 refreshes the Marketplace icon and editor toolbar launcher artwork, updates documentation and metadata, and includes a rebuilt VSIX package with the new visual assets.

v0.1.0

Initial release of the Codex CLI Launcher extension. Adds the editor toolbar launcher, side terminal startup, guided npm install prompt for @openai/codex, settings, documentation, tests, and packaged VSIX.