All notable changes to this project will be documented in this file.
git-scopecan print staged changes with index-aware output.git-opencan normalize scp-style remote URLs without a user.- Linux tool list now includes
libnotify.
git-scopetracked file filtering refactored to use arrays for improved performance.- CI check workflow extended for broader coverage.
- Hardened plugin id parsing to reject unsafe plugin ids.
git-scopesupports./prefixes in tracked filters and adds amktempfallback.git-toolsavoids grep warnings ingdbs.bundle-wrappersyncs from codex-kit and adds a docblock for the sources parser.- Git scope lookups treat empty results as success.
progress-barprefers an explicit locale environment order.git-opentrims trailing slashes in normalized remotes.git-lock listguards timestamp parsing to avoiddate -don macOS.
codex-workspace start/codex-workspace stopfor managing existing workspaces.codex-workspace rsynccommand for syncing host workspaces into containers.git-toolsshorthand aliases (gt*) and refreshedgit-treealiases.
codex-workspacedelegatesls/rmand tunnel management to the codex-kit workspace launcher.- Codex secrets module renamed to
codex-secret.zshand alias wiring centralized. - Starship container module config simplified.
codex-workspaceno longer persistsGH_TOKENinto workspace container env during setup.git-openremote normalization handles non-https remotes and strips userinfo.chrome-devtools-rdpprofile pruning and wait-for-exit logic.- Plugin fetcher guards invalid plugin entries.
open-changed-filesrespects code disable in dry-run.fzf-historypreserves backslash-escaped spaces.- Test harness no longer auto-opens VS Code during runs.
- Safer temp directory creation in tooling.
codex-workspace authsubcommand with--codex-profilesupport.codex-workspacecan import GPG signing keys during workspace setup.codex-workspacesupports VS Code clickable links and shell-native hex encoding.git-tools git-pick cihelper for selecting CI branches.codex-usecompletion can display Codex secret rate limits.
codex-toolsCLI is reorganized into command groups.- Default auth file path is now
~/.codex/auth.json. codex-secret rate-limitsdisplay always uses the secret filename.- Workspace workflow enforces stricter
typesetinitializers and updates tooling.
codex-workspaceauth sync reliability and git credential helper handling.codex-rate-limits-asyncstability plus stderr/hotkey handling.git-lockparses tag arguments correctly.progress-baravoids wrapped updates.fzf-toolsuses the correct awk preview shebang.GPG_TTYdetection is more reliable.- Workspace launcher tests no longer auto-open VS Code.
codex-workspace: Dev Containers workspace management helper (create/ls/exec/tunnel/rm/reset) with completion (ZSH_FEATURES=codex-workspace).docker-toolsfeature module (docker-tools,docker-aliases) plus cached completion fordockeranddocker-compose(ZSH_FEATURES=docker).- Completion lint/check:
tools/check.zsh --completions(runstools/check-completions.zsh). git-tools commit context-json(alias:gccj) to generate a JSON manifest + staged patch for commit context.- Linux tool lists for
install-tools(config/tools.linux*.list+config/tools.linux.apt.list).
- Bootstrap supports structured debug levels and optional feature summary at startup.
- Commit helper tooling adds git validation and improved auto-staging flows.
- Starship prompt includes the container module.
- Optional tool lists include image processing tools.
codex-workspace resetsupports resetting repos at any depth up to--depth(default: 3) and keeps stdin attached for container scripts.CODEX_SECRET_DIRoverride handling is more robust across Codex helpers.- Completion coverage and flag sets are more consistent (including alias coverage and
git pushflags). - Async worker pool now waits reliably for worker PIDs (
scripts/async-pool.zsh).
- Async rate limits checker for all Codex secrets:
codex-rate-limits-async(alias:crla). - Generic async worker pool utility:
scripts/async-pool.zsh(async_pool::map). - ANSI/color helper utilities:
scripts/ansi-utils.zsh.
codex-tools rate-limitssupports--async/--jobsand ANSI-colored percent cells (TTY default; respectsNO_COLOR).bundle-wrapper.zshdetects already-bundled inputs (copy fast-path) and parses wrappersourcesarrays more robustly.- Homebrew bootstrap no longer uses
eval "$(brew shellenv)". fzf-toolsdefault file search depth (FZF_FILE_MAX_DEPTH) is now 10.
- Default
ZDOTDIRwhen unset to keep scripts working in minimal environments. git-back-checkoutnow handles branch names with slashes when parsing reflog history.git-open prpasses the branch selector togh pr viewfor more reliable PR opening.- Builtin
cdoverride now returns success even if the directory listing tool fails (and falls back tols). git-commit-contextuses more portablemktemphandling and reliably cleans up temp files.
- Boolean env audit tooling:
tools/audit-env-bools.zshandtools/check.zsh --env-bools(runs in--all). - Shared strict boolean parser helper:
zsh_env::is_true(inbootstrap/00-preload.zsh). codex-starship --is-enabledfor Starshipwhengating.
- Project-owned boolean env flags accept only
true|false(case-insensitive); invalid values warn to stderr and behave asfalse. - Project-owned boolean env flags are standardized to
*_ENABLEDnaming (no legacy aliases). - Builtin overrides env flag is now
SHELL_UTILS_BUILTIN_OVERRIDES_ENABLED(default:true).
- Avoid stderr during smoke-load when
bootstrap/00-preload.zshis sourced multiple times. - Avoid env-bools audit false positives when scanning the audit script itself.
- Support for legacy boolean vocab (
0/1,yes/no,on/off) for project-owned boolean env flags. - Legacy env flag names listed in
docs/progress/archived/20260116_env-bool-flags.md.
- Semgrep integration with repo-local rules (
.semgrep.yaml) viatools/semgrep-scan.zshandtools/check.zsh --semgrep(writes JSON output underout/semgrep/). - Raw prompt mode for
codex-toolsandopencode-tools(use--orpromptto force). -a|--auto-stageoption forcodex-tools commit-with-scopeandopencode-tools commit-with-scopeto runsemantic-commit-autostage.
- Hardened bootstrap/tooling by removing
eval(wrapper bundler, plugin loader, andinstall-tools.zsh) and safely parsingplugins.listKEY=VALUEextras (including quoted values). - Homebrew PATH setup in
.zprofilenow avoidseval, preserves existing entries, and prioritizes Homebrewbin/sbin. git-opennow dedupes GitHub CLI PR view attempts to reduce redundantgh pr viewcalls.
open-changed-filesnow no-ops cleanly whenOPEN_CHANGED_FILES_CODE_PATHpoints to a missing/non-executable override.git-scopefile lists and commit context paths are now more stable.codex-starshiplock stale default now matches docs.
- Zsh progress bar utilities (
progress_bar::*) for long-running commands. - Progress bar documentation (
docs/guides/progress-bar.md). - Progress bar tests to assert non-TTY silence and
--enabledrendering.
- Show progress output while fetching Codex rate limit usage (TTY-only; stderr).
- Sort
codex-rate-limits --alloutput byReset (UTC)(soonest first).
- Resolve progress bar module path when
ZDOTDIRis unset (bootstrap preload).
- CI test to fail when dotenv files are tracked by Git.
- Ignore
.envand.env.*by default (while allowing.env.example,.env.sample,.env.template).
- Prevent accidental commits of dotenv files (potential secrets) by enforcing a tracked-file guard.
- Modular, self-contained Zsh environment with ordered bootstrap loading and a structured
scripts/layout. - Git-powered plugin system with declarative config and auto-clone / update support.
- Built-in CLI tools:
fzf-tools,git-open,git-scope,git-lock,git-tools,git-summary. - Optional feature modules via
ZSH_FEATURES, including Codex CLI helpers and OpenCode prompt helpers.
- First-party code released under the MIT license (vendored plugins remain under upstream licenses).
- Codex helper commit workflows delegate to the
semantic-commitskill for consistency.
- Improved Codex rate limit display reliability and stale lock cleanup in starship integration.
- Enhanced
fzf-toolsgit status preview and selection behavior for staged/unstaged changes.