v0.9.12: milestone tracker — start here (pick order)

[Hmbown]

Current status

Working branch: codex/v0912-integration-20260823. Ship target: a released v0.9.12 with the must-fix set below, all verified, full release chain green (docs/tag/assets/npm/website).

P0 — must-fix before release (money & safety)

Issue	Item	Size
#5566	R1: bound runaway spend (finite max_steps + wall-clock) — decision needed	M
#5567	R6: fleet cost/token ceiling	M
#5568	S1: sandbox full-disk read deny-list	M
#5569	S2: hard-link write escape guard	S
#5552	/doctor --fix	M
#5557	/import-claude	M
#5543	durable child approval receipts	M

P1 — trust & legibility

| #5569-adj | #5572 (MCP OAuth refresh) | #5553 (/context cost attribution) | #4394 (compaction visibility, T2) |

P2 — cache & polish

| #5570 (C4 ephemeral breakpoint) | #5571 (C5 extension invariant) | #5554 (OSC 12) | #5551 (block actions) | #5556 (/tutorial) | #5550 (line ranges half-2: picker toggle) | #5549 (named-kill half) |

Already landed on the branch (0.9.12)

Stale write-claim fix + coordinate release (#5562), verifier honesty, REBRAND docs (#5564), R2 approval scope, R3 SSE errors, R4 read timeouts, R5 fleet per-task timeout, R7 worker self-reap, R9 typed parallel/pipeline errors, C1 order-sensitive fingerprint, C3 /context hit rate, T1 meter alignment, #5548 web coverage, #5550 (ranges), #5555 (last-copy), and the /workflow confirm gate fix (dogfood).

Contribution

Every self-contained item is open and labeled v0.9.12. Pick the top available item, open a PR off main (branch codex/v0912-*), land it with focused tests. Credit: canonical identities per .github/AUTHOR_MAP commit trailer.

[Hmbown]

Progress update (2026-08-23 late): branch now carries 25 commits — added since creation: S2 hard-link guard (a7561d9), C5 extension-invariant assert (492a3c6), C4 verified already implemented, double/triple-click composer selection (c87b3f3), activity-shaped underwater (a9c8fe8), cost-unknown footer chip (748ac7e). Still open in P0: #5566 (decision), #5567, #5568, #5572, #5543, #5552, #5557.

[Hmbown]

R1 decision landed: #5566 closed — unbounded stays the default (harness survey recorded in the issue); follow-up added: A1/A2 soft-landing + report-on-exhaustion for opted-in finite budgets. T4 landed (a1fc9ca: reactive 401/403 OAuth refresh + recovery hint). MCP QA checkpoint: the loopback wire test (tests.rs:4494 harness) is still to add — tracked, not claimed.

[Hmbown]

Status reconciliation from the integration branch codex/v0912-integration-20260823 (head 63b6d318c, 2026-08-24):

P0 table updates

• /import-claude: migrate ~/.claude permissions, env vars, MCP servers, hooks, and paths #5557 /import-claude: landed earlier this cycle (receipts synced).
• Persist child tool approvals through the durable receipt path #5543 durable child approval receipts: community PR fix(subagents): persist child approval receipts #5584 (cyq1017, DRAFT) is up — still needs review/land.
• R1: bound runaway spend — finite max_steps + cumulative wall-clock defaults #5566/R6: fleet-wide cost/token ceiling — accumulator, admission gate, alert #5567/S1: sandbox reads full disk in every posture — opt-in deny-list #5568/S2: hard-link write escape — workspace-write tools must resolve links #5569/codewhale doctor --fix: offer and apply automatic repairs with consent #5552: unchanged (per the R1 note above, R1: bound runaway spend — finite max_steps + cumulative wall-clock defaults #5566 closed with follow-ups).

Fixed this session (verification on the branch)

• Test setup_confirm_toast_names_secret_store_and_global_scope dies by stack overflow #5585 (stack overflow in the setup-confirm toast test): root-caused via crash-report symbolication — the dispatcher-side ConfigToml parses (ConfigStore::load, project-config probe) were unsheltered on 2MiB worker stacks, same class as the shipped ConfigFile fix. Both now parse on a dedicated 16MiB thread; the test itself runs its runtime on 16MiB with rationale documented. 63b6d318c, closes Test setup_confirm_toast_names_secret_store_and_global_scope dies by stack overflow #5585 when merged.
• Fleet config view: Enter loops back to the same screen, model switching is buried and unclear #5589 (fleet roster edit discoverability): Isabel Wu's focused slice taken into the branch via PR feat(tui): make Fleet roster editing discoverable #5604 (merge commit 5f97c2413, authorship preserved). The Fleet/subagent role posture has no single source of truth (the verifier contradiction was a symptom) #5575 single-source-of-truth design work remains open.
• /context: attribute token cost to tool definitions and each MCP server announcement #5553 (/context cost attribution): display-only slice taken via PR feat(tui): show tool and MCP schema costs #5603 (merge commit 3451c0f58).

#5586 decomposition progress (one mechanical move per commit, suite green between, normalized-diff verified):

• client/wire.rs (SSE line layer + parse_usage + tests) — 6fb3172b4; client.rs 11,443 → 10,879.
• config/merge.rs (load/merge pipeline) — 0d2dcbde67; config.rs 12,399 → 11,818.
• cli_args.rs (clap surface + CLI-input helpers) — ef3775c6a; doctor_cli.rs (doctor report layer, ~3.3k lines) — 523a4ac1f; lib.rs 18,772 → 14,088.
• runtime_threads/agent_mail.rs (8 Agent Mail helpers) — local, in the 63b6d318c push.
• Remaining for Decompose the mega files: lib.rs (18.7k), config.rs (12.3k), client.rs (11.1k), runtime_threads.rs (9.3k) #5586: lib.rs engine-config assembly slice, config.rs persistence region, client.rs body/header regions, runtime_threads.rs bulk.

Flake watch: #5605 filed — two distinct fs/async tests (remote_control recovery-turn ids, runtime_threads agent-mail queue) each failed once across 6 full local suite runs, both pass 3/3 isolated; parallel-load sensitivity, not extraction fallout. CI legs unaffected so far.

Housekeeping: #5600 spam closed. Dependabot tower-http 0.6→0.7 (#5387) still needs real review. #5576 GitGuardian findings await Hunter's dashboard.