Modernization foundation (Phases 0-3, 5, 8): reliability, safety, and tested local-first privacy#62

Merged

Pterjudin merged 80 commits into

mainfrom

modernize-agentic-editor-foundation

Jun 11, 2026

Commits on Jun 6, 2026

phase0(config): register the cortexide.* settings services actually read

Tajudeen
and
claude
committed
phase0(honesty): fix the false "27 built-ins" onboarding claim (real count is 35)

Tajudeen
and
claude
committed
phase0(honesty): correct overstated/false claims in comparison docs

Tajudeen
and
claude
committed
phase0(deadcode): remove 11 confirmed-orphaned files + dead telemetry dir

Tajudeen
and
claude
committed
phase0(docs): record Phase 0 results + audit corrections in baseline note

Tajudeen
and
claude
committed
phase1(safety): enforce read-only (gather) mode at tool DISPATCH, not just the prompt

Tajudeen
and
claude
committed
phase1(safety): terminal danger detection now BLOCKS, doesn't just warn

Tajudeen
and
claude
committed
phase1(safety): atomic (temp-file+rename) writes in ApplyEngineV2

Tajudeen
and
claude
committed
phase1(safety): enforce Workspace Trust at tool dispatch

Tajudeen
and
claude
committed
phase1(docs): record Phase 1 progress + audit corrections in baseline note

Tajudeen
and
claude
committed
build(test): delete broken test/common/ssrfGuard.test.ts (browser import crashed node suite)

Tajudeen
and
claude
committed
phase1(safety): terminal cwd containment — commands escaping the workspace need approval

Tajudeen
and
claude
committed
phase1(docs): record build verification + cwd containment in baseline note

Tajudeen
and
claude
committed
build(test): drop pre-existing unused import (FileEditOperation) flagged by tsgo

Tajudeen
and
claude
committed
test(smoke): add live Phase 1 safety verification harness (CDP)

Tajudeen
and
claude
committed

Commits on Jun 10, 2026

test(smoke): gather-block-e2e selects a capable coder (7B) before driving

Tajudeen
and
claude
committed
test(smoke): isolated gather + trust E2E; CX_KEEP_TRUST launch toggle

Tajudeen
and
claude
committed
phase1(docs): record live agent-driven verification (gather gate PROVEN end-to-end)

Tajudeen
and
claude
committed
phase1(#1): atomic writes on the agent edit path (saveModel)

Tajudeen
and
claude
committed
phase1(docs): record #1 agent-path atomic writes DONE + live-validated

Tajudeen
and
claude
committed
phase1(#2): durable checkpoint rollback — recreate deleted / remove created / persist edits

Tajudeen
and
claude
committed
phase1(#2): durable EDIT rollback too — journal 'modify' before-content

Tajudeen
and
claude
committed
phase1(docs): record #2 done + Phase 1 functionally complete (all 6 items, 263/0, live-validated)

Tajudeen
and
claude
committed
phase2(testable-runtime): extract agent-loop decision logic into a pure, tested module
Tajudeen
committed
phase2(docs): record testable-decision-module increment + remaining roadmap

Tajudeen
and
claude
committed
docs: fresh-session handoff + Phase 2 wiring plan

Tajudeen
and
claude
committed
phase2(wire A): delegate tool-error cap to pure updateConsecutiveToolErrors

Tajudeen
and
claude
committed
phase2(wire D): delegate compaction + overflow to pure computeCompactionOverflowDecision

Tajudeen
and
claude
committed
phase2(wire B): delegate iteration-cap escalation gate to pure shouldEscalateModel

Tajudeen
and
claude
committed
phase2(docs+probe): record Edits A/D/B wired + live-validated; add cap/escalation probe

Tajudeen
and
claude
committed
phase2(split): extract pure tested toolCallRecognition (text tool-call parse + preamble-trim)

Tajudeen
and
claude
committed
phase2(docs): record Edit E deferral + ToolCallParser-core extraction; next = module split

Tajudeen
and
claude
committed
phase2(split): extract pure tested toolSynthesisDecision (whether to fabricate a tool call)

Tajudeen
and
claude
committed
phase2(docs): record toolSynthesisDecision extraction (split increment 2)

Tajudeen
and
claude
committed
phase2(split): extract decideHowManySearch (2nd synthesis trigger) -> ToolCallParser complete

Tajudeen
and
claude
committed
phase2(docs): record decideHowManySearch extraction; ToolCallParser complete

Tajudeen
and
claude
committed
phase2(split): extract pure ModelSelectionEngine (runtime caps + failover candidate build)

Tajudeen
and
claude
committed
phase2(docs): record ModelSelectionEngine extraction; pure decision surface complete

Tajudeen
and
claude
committed
phase2(B1): treat an unparseable structured tool-call attempt as an agent error (not silent success)

Tajudeen
and
claude
committed
phase2(docs): record the B1 fix (first behavior change) + the malformed-toolcall probe

Tajudeen
and
claude
committed
phase3(providers): extract node-testable tool-call parse + message sanitize from the dispatch

Tajudeen
and
claude
committed
phase3(docs): record providerToolFormat extraction; Phase 3 started

Tajudeen
and
claude
committed
phase3(registry): test getModelCapabilities + fix mixed-case resolution & deepseek reasoning

Tajudeen
and
claude
committed
phase3(docs): record registry tests/fixes + the confirmed audit backlog

Tajudeen
and
claude
committed
phase3(registry): fix the 3 last-match-wins modelOptionsFallback orderings

Tajudeen
and
claude
committed
phase3(docs): record the fallback-ordering fixes; update remaining audit backlog

Tajudeen
and
claude
committed

Commits on Jun 11, 2026

phase3(providers): fix + node-test toOpenAICompatibleTool (typed tool params)

Tajudeen
and
claude
committed
phase3(registry): fix llama fallback shadowing (clears the provider audit backlog)

Tajudeen
and
claude
committed
phase3(docs): provider/capability audit backlog fully cleared

Tajudeen
and
claude
committed
docs: add continuous next-session prompt (keep doing recommended, test+confirm each step)

Tajudeen
and
claude
committed
phase3(providers): extract + test the OpenAI-compatible streaming accumulator

Tajudeen
and
claude
committed
phase3(docs): record the OpenAI-compatible streaming accumulator extraction

Tajudeen
and
claude
committed
phase3(providers): extract + test the Gemini rate-limit error formatter

Tajudeen
and
claude
committed
phase3(docs): record the Gemini rate-limit error formatter extraction

Tajudeen
and
claude
committed
phase2(agentloop): extract + test the file-read gate (first keystone-loop seam)

Tajudeen
and
claude
committed
phase2(docs): record the first keystone-loop seam + AgentLoopController bug backlog

Tajudeen
and
claude
committed
phase2(agentloop): extract + test the rate-limit error classifier

Tajudeen
and
claude
committed
phase2(docs): record the rate-limit classifier seam + backlog re-verification

Tajudeen
and
claude
committed
phase5(apply): extract + test SR matcher; fix silent non-unique exact-match edit

Tajudeen
and
claude
committed
phase5(apply): fix TDZ ReferenceError crash in multi-block Fast-Apply overlap check

Tajudeen
and
claude
committed
phase5(docs): record SR-uniqueness fix + multi-block TDZ crash fix

Tajudeen
and
claude
committed
phase5(apply): extract + test the instant SR multi-edit transaction

Tajudeen
and
claude
committed
phase5(docs): record the instant SR multi-edit transaction extraction

Tajudeen
and
claude
committed
phase8(privacy): add pure egressPolicy module (local-only egress decision) + tests

Tajudeen
and
claude
committed
phase8(privacy): gate remote model-catalog fetches under local-only

Tajudeen
and
claude
committed
phase8(privacy): block remote vector store under local-only

Tajudeen
and
claude
committed
phase8(privacy): block remote embeddings under local-only (replace fake gate)

Tajudeen
and
claude
committed
phase8(privacy): cloud-LLM dispatch defense-in-depth under local-only

Tajudeen
and
claude
committed
phase8(privacy): block remote MCP server connect under local-only

Tajudeen
and
claude
committed
phase8(privacy): skip update check under local-only

Tajudeen
and
claude
committed
phase8(privacy): retire fake OfflinePrivacyGate -> honest OfflineGate

Tajudeen
and
claude
committed
phase8(privacy): 'what can leave my machine' egress posture report + guarantee test

Tajudeen
and
claude
committed
phase8(privacy): add 'Show Privacy Report' command (what can leave my machine)

Tajudeen
and
claude
committed
phase8(docs): record genuine local-only egress enforcement (Inc 0-7c)

Tajudeen
and
claude
committed
Wire CortexIDE brand logo into empty-editor watermark

Tajudeen
and
claude
committed
branding: render the empty-editor watermark logo as a circle

Tajudeen
and
claude
committed
phase5(apply): pure apply-verification core (introduced-vs-preexisting diagnostics diff)

Tajudeen
and
claude
committed
phase5(apply): wire apply-verification into edit_file/rewrite_file/multi_edit

Tajudeen
and
claude
committed
phase5(docs): record apply-verification (core+wiring) + the stale comment-branch note

Tajudeen
and
claude
committed
phase5/8(review): apply adversarial pre-PR review fixes

Tajudeen
and
claude
committed