v3.3.0 Luxor

v3.3.0 Luxor

Released: 2026-08-08 · Promoted to @latest: 2026-08-18 (after soaking on @next since 2026-08-09)

Summary

Luxor is a foundations release: the always-on prompt surface is rewritten around judgment
rather than rules (Spec 1280), inter-agent messaging moves to corruption-proof mailbox-first
delivery (Spec 1313), and the cloud tunnel gets both a security fix (a path bypass that let
remote requests deregister a tower) and self-healing reconnection. It ships on @next to
soak: the prompt-surface change touches what every builder and architect sees in context, so
behavioral regressions get a controlled bake before reaching @latest.

Headlines

• 1280 — Prompt surface: judgment not rules: the always-on builder surface drops from
  34,231 to 18,233 words (−47%) across both trees, with content relocated to on-demand
  skills rather than deleted. All scar-rule canonicals preserved byte-identically (new T4
  guard); every gate/check/signal in the frozen capability inventory verified surviving.
• 1313 — afx send mailbox-first delivery: every message is persisted before the send
  returns and only ever written to a prompt a headless render-gate proves is empty — no
  force path, no fused drafts, no silent loss. Held mail is visible everywhere: held(...)
  send responses, afx inbox, dashboard held-count badge, VS Code status bar + escalation
  toast.
• #1374 — Tunnel security: closed a path bypass (/workspace/<id>/api/tunnel/…) that
  let tunnel-borne requests reach tower-management endpoints — including remote
  deregistration; added via=tunnel/local attribution logging, confirmation dialogs on all
  disconnect surfaces, and a mid-flap click guard.
• #1373 — Tunnel resilience: connect-attempt watchdog, half-open retry on auth failure,
  per-transition failure reasons, and client rebuild after instant-failure loops — a flaky
  uplink no longer strands the tower offline until manual intervention.

New Features

• 1307 — /arch-save: packaged save→clear→re-init cycle for architect context refresh,
  plus afx send --delay (Tower-side delayed delivery).
• 1286 — Configurable consultation: per-lane model selection and per-review-type lane
  selection (porch.consultation.byProtocol), with fail-fast validation.
• 1189/1357 — @cluesmith/codev-sdk: environment-agnostic client SDK for Tower with
  enforced server/client dependency isolation; controller subpath re-exports wire types.
• 1273 — Per-session submission lock: an awaited afx send now means submitted.
• 1233 — Crash-restart resume: builder crash-restarts resume the pinned session instead
  of respawning fresh.

Improvements & Fixes

• Bounded shellper replay buffer and Tower ring partial (#1205 — memory-safety class fix).
• Build closure derived from the pnpm graph instead of a hand-list (#1352).
• Gemini CLI retired as a builder harness (#1338); agy is the Gemini lane.
• artifact-canvas: keyboard-first navigation and pointer polish (#1237).
• afx send surfaces Tower's descriptive errors instead of bare NOT_FOUND (#1333).
• Cron conditions get exitCode; condition-true failure runs deliver alerts (#1142).
• Test isolation: sandboxed agy + metrics DB in every suite (#1323).

Breaking Changes

• None expected. SendBuffer force-delivery semantics are replaced by mailbox-first
  (delivered | held) — scripts that assumed fire-and-forget "ok" now see honest holds.

Migration Notes

• Install from the soak channel: npm install -g @cluesmith/codev@next.
• Held-mail surfaces are new: check afx inbox if a message seems delayed.

Contributors

• Waleed Kadous (@waleedkadous) — the prompt-surface rewrite (Spec 1280), tunnel security and resilience (#1374, #1373), /arch-save (Spec 1307), configurable consultation (Spec 1286), the per-session submission lock (Spec 1273), and the release cut itself.
• Amr Elsayed (@amrmelsayed) — the @cluesmith/codev-sdk client package (#1189, #1357), builder crash-restart resume (#1233), the bounded replay buffer (#1205), and the annotation viewer's keyboard-first navigation (#1237).
• Mohid Makhdoomi (@mohidmakhdoomi) — afx send mailbox-first delivery (Spec 1313, PR #1330), descriptive afx send errors (#1333, PR #1334), and retiring the Gemini CLI as a builder harness (Spec 1338, PR #1342).
• Builders working under the SPIR, ASPIR, AIR, PIR, and BUGFIX protocols across the release's PRs.