v0.53.0 - Observable Agent Trajectory

Observable Agent Trajectory

This release adds optional, privacy-preserving trajectory observability for Codex sessions.

Added

• Optional Codex lifecycle hook installation:
  • init-agent trajectory status
  • init-agent trajectory install-codex
  • init-agent trajectory uninstall-codex
• Lightweight fail-open init-agent-hook collector.
• Local SQLite storage for sessions and observable events.
• Tool duration pairing, outcomes, errors and subagent lifecycle tracking.
• Deduplication, concurrent-write handling and bounded retention.
• New read-only Trajectory section in the web dashboard.
• Updated README, security documentation, command reference and Codex skill.

Privacy

Trajectory collection stores redacted metadata only.

It does not store prompts, full commands, patches, tool output, source snippets, secrets or model reasoning. Paths
outside the repository are redacted.

Usage

init-agent trajectory install-codex

Then review and trust the hooks through /hooks inside Codex and restart the session.

### Validation

- 229 tests passing
- Concurrent hook ingestion tested
- Payload and SQLite secret-redaction tested
- Existing MCP core surface remains unchanged