diff --git a/BOOTSTRAP_FOR_AGENTS.md b/BOOTSTRAP_FOR_AGENTS.md index 1bea8ebd9..e64d587b0 100644 --- a/BOOTSTRAP_FOR_AGENTS.md +++ b/BOOTSTRAP_FOR_AGENTS.md @@ -1,4 +1,4 @@ - + diff --git a/CHANGELOG.md b/CHANGELOG.md index 373a69866..613ef7ddd 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,24 @@ All notable changes to GBrain will be documented in this file. +## [0.45.3.0] - 2026-08-12 + +**Codex installs stop asking a question Codex can't honor.** The bootstrap used to offer every install a choice of MCP scope — this folder only, or the whole machine — but Codex has no per-folder registrations, so picking "this folder" led to a confusing round-trip where the agent asked permission to keep what it had already done. Now each harness gets the honest version: Claude Code records your scope choice during the interview (where it actually sticks), and Codex simply tells you the truth — its registration reaches the whole machine, read and write — along with the exact commands to narrow or remove it. + +### Added +- CI tripwires pin the harness-scoping language in the runbook and question bank, so the dead question can't quietly come back in a future edit. +- `gbrain bootstrap status` hints now carry the scope rule on both the interview and wiring phases, so an agent resuming from a stale runbook still sees it. + +### Changed +- The workspace's ACCESS_POLICY.md now describes MCP reach per harness — the project/user tradeoff on Claude Code, the always-machine-wide reality on Codex — and states plainly that reach means read and write, not just queries. +- The Claude Code scope consent is asked and recorded during the interview, before the answer read-back, so your confirmation covers it and the wiring step just consumes it. + +### Fixed +- A hand-damaged answer file no longer crashes `gbrain bootstrap hooks` — and no longer silently grants anything: an unreadable consent answer is treated as declined, with a note telling you how to re-record it. +- A leftover "this folder only" answer on a Codex machine (for example, carried over from a paired Claude Code machine) now gets a clear explanation and a safe way to clear it, instead of a silent mismatch between what you chose and what got registered. + +To take advantage of v0.45.3.0: upgrade with `bun install -g github:garrytan/gbrain#latest-stable`. New installs pick everything up automatically. Existing Codex-door workspaces keep their previously rendered policy files; refresh the two that changed with `gbrain bootstrap render --force --only ACCESS_POLICY.md --only CLAUDE.md` (originals are backed up first), or leave them — the CLI's own notes and status hints carry the correction either way. + ## [0.45.2.0] - 2026-08-11 **Make your agent's repo yourself, then let it move in.** If you'd rather own the GitHub repo up front, create a new empty private repo under your own account, clone it, open it in Claude Code or Codex, and paste the bootstrap block — bootstrap now detects your empty repo and adopts it instead of creating one, verifying it is private before anything is pushed. The default (open an empty folder and let bootstrap make the repo) is unchanged and now stated plainly in the docs. Either way, the folder you open becomes your agent's durable, private body. diff --git a/VERSION b/VERSION index 5f1db1c23..b07440c08 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -0.45.2.0 +0.45.3.0 diff --git a/package.json b/package.json index 04b1331c8..757595bdd 100644 --- a/package.json +++ b/package.json @@ -152,7 +152,7 @@ "bun": ">=1.3.10" }, "license": "MIT", - "version": "0.45.2.0", + "version": "0.45.3.0", "overrides": { "@hono/node-server": "^2.0.5", "fast-uri": "^3.1.5", diff --git a/templates/bootstrap/template-repo/README.md b/templates/bootstrap/template-repo/README.md index af249968c..60524c963 100644 --- a/templates/bootstrap/template-repo/README.md +++ b/templates/bootstrap/template-repo/README.md @@ -1,6 +1,6 @@ # gbrain agent workspace — template - + This repository is the **"Use this template"** distribution artifact for a [gbrain](https://github.com/garrytan/gbrain) personal-agent workspace — the same