codex-mvp: Codex CLI dual-harness working in dotfiles

First confirmed-working snapshot of the Codex harness running alongside
Claude Code in this repo. From a fresh shell:

  cx codex-max-1          → Codex v0.130 starts, model gpt-5.5, picks up
                            ~/.codex-max-1/{AGENTS.md, config.toml}, hooks
                            adapter projects apply_patch into the shared
                            unified-polish.ts quality gate
  cx mcp login ref        → OAuth flow at ref.scalekit.com succeeds, creds
                            cached under CODEX_HOME; subsequent sessions
                            authenticate without re-prompting
  cx mcp list             → ref enabled
  cx <anything else>      → passthrough to codex with default account env
  cc max-1                → unchanged, Claude Code harness untouched

Shipped commits on main (chronological from codex bootstrap):
  bc06042  feat(codex): add cx multi-account launcher + brew cask install
  884fd20  fix(codex): pass cx args via {{args}} so non-interactive dispatch works
  6d8f812  chore(codex): drop codex-max-2 from cx picker (single-account for now)
  405e865  feat(codex-harness): land Phase B foundation (T3 + T4 + T7 + ADR-015)
  4dc0357  fix(codex): add cx shell alias mirroring cc
  50087dc  feat(codex-harness): land Phase B batch 1 (T5 + T8 + T9)
  2101055  feat(codex-harness): expand codex.nix with symlinks + config deploy (T6)
  ceb9aa3  feat(codex-harness): wire codex stdin adapter + docs (T10 + T11b/c)
  a5d014a  chore(codex): treefmt nix formatting
  cdbecd6  fix(codex-harness): apply audit follow-ups (delimiter bug + stale docs)
  16dae55  refactor(codex-harness): land CC-74/75/76 audit follow-ups
  9d0ed88  feat(codex-harness): multi-sgconfig ast-grep support (CC-84)
  b6b50dd  fix(codex): rename [features].codex_hooks to hooks, bump model to gpt-5.5 (CC-85)
  3aea730  fix(codex): export REF_API_KEY user-wide so codex works without cx
  0075285  fix(wrappers): cc/cx passthrough unknown $1 to default account
  e17cd5b  chore(codex): treefmt nix formatting
  b5b226d  fix(codex): switch ref MCP from bearer-token to OAuth-only auth
  189dbc6  fix(codex): deploy hook depends on generateQuality (was: writeBoundary)

Linear: project "Codex Harness Parity" (CC team) — 16 Done / 7 Canceled.
Open: CC-80 + CC-82 + CC-83 (Told-side parity work — separate repo).

Outstanding in this MVP (intentional, by-design):
- "3 hooks need review before they can run" prompts on first session —
  to be reviewed in /hooks separately.
- codex-max-2 account is gated, not restored — flip on demand.
- told-codex-pack marketplace plugin (T13, CC-73) parked until Codex's
  plugin_hooks feature stabilizes.

ADR-015 documents the architecture. AGENTS.md is the canonical Codex
instruction set; CLAUDE.md cross-references the dual-harness model.

fix: claude-glm auth (ANTHROPIC_AUTH_TOKEN + AWS SM)

fix(shell): pull Z.ai key from AWS SM directly instead of Pulumi ESC

Release v1.0.0: Quality System 4.1.0

- 23 consolidated engineering memories (was 17)
- Stack versions synced with Ember production
- New patterns: XState, BetterAuth, Docker Compose, E2E-first, NX monorepo, Drizzle
- Renamed pulumi-esc-only → dynamic-credentials (ESC + OIDC)
- All tests passing (124/124)

Release v0.9.1

v0.9.0 - Evolution System Modernization

Milestone release: Complete Effect-TS migration of evolution system.

Highlights:
• All shell scripts converted to TypeScript with Effect patterns
• Self-evolution feedback loop closed with reflect.ts
• Dashboard (evolve.ts) with colored output and trend analysis
• Regression detection (trend-alert.ts) with configurable thresholds
• Session hooks (init/stop) orchestrate lesson extraction and grading
• Semantic versioning via git tags with justfile commands

This version represents a modern, type-safe evolution system
that is incidentally working and brings joy to use.