WebCodex v0.3.7

WebCodex 0.3.7 is a V1 reliability and orchestration release focused on safer hosted project lifecycle, more durable Job behavior, bounded coding/validation tooling, and clearer MCP setup.

Highlights

• Hosted project disconnect. webcodex disconnect is the exact inverse of hosted webcodex connect: live project unregister uses Runner-side structured lifecycle fencing, preserves the source repository and .git, and fails closed on uncertain outcomes rather than blindly retrying or deleting local registration state.
• Managed Runner authorization hardening. Ordinary project unregister now enforces the managed Runner owner boundary before project visibility and active-Job fencing, with cross-owner regression coverage.
• Job reliability under backpressure. Promoted Job output capture is decoupled from transport backpressure while retained output remains bounded and terminal reconciliation stays durable.
• Bounded coding tools. Batch project-text search retries only transient dropped read-only Agent requests under the existing shared deadline/concurrency slot, while git_diff_hunks gains source-fenced bounded continuation.
• Focused Go validation. Structured Go validation supports a bounded list of project-relative package patterns while continuing to use machine-readable go test -json evidence and rejecting arbitrary flags, environment overrides, shell control, and caller-selected executables.
• Workflow and closeout evidence. The coding workflow separates bootstrap/session continuity from behavioral guidance and authority, while closeout evidence distinguishes historical failures from currently actionable unexpected failures without discarding raw history.
• Operator dogfood. The Windows Runner deployment helper is hardened around exact-process replacement, rollback, and interactive Scheduled Task behavior.
• MCP/OAuth setup. Grok Custom MCP Connector OAuth configuration is documented, including authorization-code flow, PKCE S256, client_secret_post, redirect URI registration, scopes, and common failure modes.

Compatibility and upgrade notes

There is no intentional breaking protocol change. New Runner/tool capabilities remain capability-fenced and fail closed when a peer does not support them.

webcodex disconnect requires a Server and Runner that implement structured project unregister. A newer CLI pointed at an older Server can fail closed with an unsupported/uncertain unregister result, so upgrade Server and Runner together before relying on the new lifecycle command.

Known limitations

• macOS x64 is not a published native artifact.
• The npm wrapper requires Node.js 18+ independently of native binary compatibility.
• webcodex disconnect manages hosted registrations created by webcodex connect; it is not a generic user-facing cleanup command for arbitrary pre-existing agent_registered projects.

Validation

• Release source: 44c1400542e9bda55ddffe89cf9dd45009f2ea88 at immutable annotated tag v0.3.7.
• Final source release gates, full workspace tests, and focused validation/handoff/coding-task lanes passed.
• WebSocket zero-config E2E: 111 passed / 0 failed.
• Polling zero-config E2E: 111 passed / 0 failed.
• Coding-loop comparison eval: 6 passed / 0 failed.
• Authoritative release-build run 31788623881 produced all five native targets successfully: Linux x64/ARM64, macOS ARM64, Windows x64/ARM64.
• Both Linux targets passed the manylinux2014 ABI gate; x64 requires at most GLIBC 2.16 and ARM64 at most GLIBC 2.17, with only the reviewed dynamic dependencies.
• Both native Windows targets passed the release workflow's npm artifact/install smoke.
• The staged npm package passed manifest, self-test, prepublish, pack, wrapper, and temporary-install checks using the exact CI-produced Linux x64 binaries; installed native files were byte-identical to the retained candidate.