v3.3.1 Luxor Released (v3.3.0 promoted to stable)

[amrmelsayed]

The Luxor line is now stable. v3.3.0, soaking on the @next channel since August 9, is promoted to @latest, and v3.3.1 ships alongside it carrying everything merged during the soak.

Gate approvals now relay through your architect (v3.3.1). Clicking Approve in VS Code delivers your decision to the builder's owning architect under a [USER via VS Code] header, and the approval runs where the project state lives — your agents see every decision you make instead of discovering it later. Offline or unknown owners get an explicit refusal, never a silent reroute.

Tower authenticates every request to its local API (v3.3.1). Every non-public HTTP route and WebSocket upgrade requires the shared local key, failing closed, with CORS pinned to a fixed allowlist. First-party clients send the key automatically — nothing to configure beyond restarting Tower after upgrading.

The always-on prompt surface is rewritten around judgment rather than rules (v3.3.0, Spec 1280). The surface every builder and architect carries in context drops 47% in size, with content relocated to on-demand skills rather than deleted.

Inter-agent messaging is corruption-proof (v3.3.0, Spec 1313). afx send is mailbox-first: every message is persisted before the send returns and only written onto a prompt a render gate proves is empty. Held mail is visible in afx inbox, the dashboard, and VS Code.

Spec and plan review grows a full toolset (v3.3.1). Batched review comments on builder diffs, horizontal (newspaper-column) reading mode, title-bar zoom, and one-keystroke forwarding of the symbol under your cursor.

The Stream Deck becomes a two-page cockpit (v3.3.1). A builders board with one smart key per builder and phase-following review dials, an architects board with a tile per live architect, hands-free review comment dictation, and a Scroll dial that scrolls the document under review. The bundled SD+ profile ships the finished two-page board.

Tunnel security and resilience (v3.3.0). A path bypass that let remote requests reach tower-management endpoints is closed, and a flaky uplink no longer strands the tower offline.

Breaking changes

• Direct, unauthenticated calls to Tower's local API now fail with 401. First-party clients are unaffected; hand-rolled scripts read ~/.agent-farm/local-key and send it in the codev-tower-key header.
• @cluesmith/codev-sdk's ./controller subpath no longer exports TowerClient; controllers use createControllerClient(...), hosts import from @cluesmith/codev-sdk/tower-client.
• afx reset is renamed afx refresh; the old spelling survives one release as a deprecated alias.

Install

npm install -g @cluesmith/codev@latest
afx tower stop && afx tower start

Full notes: v3.3.0 · v3.3.1

Contributed by Amr Elsayed, Waleed Kadous, and Mohid Makhdoomi, with the Codev architect seats and builder fleet working under the SPIR, ASPIR, PIR, AIR, and BUGFIX protocols.