happy-stacks 0.4.0 → 0.5.0

package/docs/commit-audits/happy/leeroy-wip.commit-manual-review.md

@@ -0,0 +1,1452 @@
+# leeroy-wip manual review notes (priority queue)
+
+Generated: 2026-01-24
+Source queue: docs/commit-audits/happy/leeroy-wip.manual-review-queue.md
+
+Rule: only fill sections when you have actually read the diff (`git show <sha>`).
+
+---
+
+## 001 2026-01-17 58528a7c37d3 `crypto`
+
+- Subject: chore(crypto): patch react-native-libsodium
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+- Adds an iOS pods patch for `@more-tech/react-native-libsodium` (`react-native-libsodium.podspec`).
+- Change: when `ENV['RCT_USE_RN_DEP'] != '1'`, the podspec no longer blindly uses `folly_version` (which can be undefined during evaluation in some Expo / RN >= 0.81 setups). It now:
+  - uses `folly_version` when defined
+  - otherwise falls back to an unpinned `s.dependency 'RCT-Folly'`
+- Purpose: prevent pod install / podspec evaluation failures caused by an undefined `folly_version`.
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: keep, but likely squash with other libsodium/postinstall patching commits in the same topic (to keep “patch-package maintenance” cohesive).
+- Depends on: expo iOS build pipeline uses `expo-app/patches/*` (patch-package or equivalent); ensure the patch is applied in postinstall.
+
+### Rewrite Commit Message
+
+- Keep as-is: `chore(crypto): patch react-native-libsodium`
+
+---
+
+## 004 2026-01-17 4890a471df31 `auth`
+
+- Subject: fix(auth): harden tokenStorage web persistence
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+- Adds web-focused hardening for token persistence and aligns native token storage with storage scoping:
+  - Web `getCredentials()` now reads `localStorage` once and guards JSON parsing in a `try/catch`, returning `null` on invalid JSON instead of throwing.
+  - Web `setCredentials()` / `removeCredentials()` now guard `localStorage.setItem/removeItem` errors (quota/security errors) and return `false` on failure.
+  - Native path now uses a scoped key via `scopedStorageId(AUTH_KEY, scope)` (scope read from env) and caches credentials **per key** (`credentialsCacheKey`) to avoid returning stale data if the scope changes.
+  - Cache JSON parsing is guarded; cache parse errors fall through to SecureStore read.
+- Adds focused vitest coverage for the web behavior:
+  - invalid JSON → `null`
+  - set/remove exceptions → `false`
+  - single `getItem` call per `getCredentials()`
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: keep; belongs in an “auth storage / storage scoping” topic (likely near other storage-scope commits).
+- Depends on: `readStorageScopeFromEnv` + `scopedStorageId` semantics; verify ordering so the utility exists before this commit in the rewritten history.
+
+### Rewrite Commit Message
+
+- Keep as-is: `fix(auth): harden tokenStorage web persistence`
+
+---
+
+## 005 2026-01-17 4adc41d92af0 `sync`
+
+- Subject: feat(sync): add permission mode types and mapping
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+- Introduces shared permission-mode primitives and cross-agent mapping:
+  - Adds `PermissionMode` union containing Claude modes (`default`, `acceptEdits`, `plan`, `bypassPermissions`) and Codex/Gemini modes (`default`, `read-only`, `safe-yolo`, `yolo`).
+  - Adds validators/normalizers:
+    - `isPermissionMode`
+    - `normalizePermissionModeForAgentFlavor` (clamps incompatible modes to `default`)
+    - `normalizeProfileDefaultPermissionMode` (profile defaultPermissionMode is restricted to Claude modes; codex-like values clamp to `default`)
+  - Adds `mapPermissionModeAcrossAgents(mode, from, to)` to map between Claude ↔ Codex/Gemini permission sets (and preserve Codex↔Gemini modes).
+  - Adds `MODEL_MODES` and `isModelMode` with tests (note: this couples model-mode validation to this commit; consider whether it belongs in the same topic or a separate “model modes” commit).
+- Adds tests that cover:
+  - the mapping table between agents
+  - normalization/clamping behavior
+  - basic `isPermissionMode` / `isModelMode` validation
+- Coherence: all changes are in `expo-app/sources/sync/*` and are tightly related to permissions/modes, but the model-mode validation is adjacent rather than strictly permission-specific.
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: keep; foundational for later permission-mode persistence and UI toggles. Consider splitting out `MODEL_MODES/isModelMode` into its own commit if it ends up being used broadly outside permission-mode work.
+- Depends on: `expo-app/sources/sync/modelOptions` `AgentType` definition; any later commits that persist/restore permission modes should come after this.
+
+### Rewrite Commit Message
+
+- Suggested tweak (optional): `feat(permission): add permission mode types and cross-agent mapping` (current `feat(sync): ...` is acceptable since files live under `sync/`).
+
+---
+
+## 017 2026-01-17 65bae55a0b61 `i18n`
+
+- Subject: refactor(i18n): separate translation types and content
+- Reasons: diff summary skipped (large change (+1756/-1006))
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 018 2026-01-17 2993b5c860ff `new-session`
+
+- Subject: fix(new-session): restore standard modal flow
+- Reasons: diff summary skipped (large change (+3142/-1629))
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 019 2026-01-17 9e08047d2478 `profiles`
+
+- Subject: fix(profiles): harden routing, grouping, and editing
+- Reasons: diff summary skipped (large change (+1319/-857))
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 020 2026-01-17 8d9f56e85e5a `ui`
+
+- Subject: refactor(ui): unify list selectors and modal primitives
+- Reasons: diff summary skipped (too many files (28)); safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 022 2026-01-17 2d4675a5d051 `agent-input`
+
+- Subject: fix(agent-input): use compact permission badges
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 027 2026-01-18 7899bbd8433e `profiles`
+
+- Subject: feat(profiles): add API key requirements flow
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 028 2026-01-18 0023ba1ea5aa `i18n`
+
+- Subject: refactor(i18n): update translations and tooling
+- Reasons: diff summary skipped (large change (+2913/-143))
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 033 2026-01-18 daa0b4527d7f `new-session`
+
+- Subject: feat(new-session): add api key selection and wizard extraction
+- Reasons: diff summary skipped (large change (+1719/-1116))
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 036 2026-01-18 97ca69e0a735 `i18n`
+
+- Subject: refactor(i18n): replace remaining UI literals
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 038 2026-01-18 7976b877259c `experiments`
+
+- Subject: feat(experiments): gate Zen, file viewer, and voice auth flow
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 039 2026-01-21 6ed379f82c34 `ui`
+
+- Subject: refactor(ui): add modal + popover overlay primitives
+- Reasons: diff summary skipped (too many files (43))
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 040 2026-01-21 f0787de5308e `sync`
+
+- Subject: feat(sync): add secrets + terminal settings primitives
+- Reasons: diff summary skipped (too many files (60)); safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 041 2026-01-21 66ee1eaf88a6 `secrets`
+
+- Subject: feat(secrets): add secrets management + requirement resolver
+- Reasons: diff summary skipped (too many files (29)); safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 043 2026-01-21 bc779e4f7909 `new-session`
+
+- Subject: refactor(new-session): integrate secrets + terminal spawn options
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 049 2026-01-21 2e956f32f220 `new`
+
+- Subject: fix(new): keep pick screens above iOS modal
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 057 2026-01-21 ff7bec72358f `secrets`
+
+- Subject: fix(secrets): tighten callback deps and fix indentation
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 058 2026-01-21 1bb65f5dd494 `new-session`
+
+- Subject: fix(new-session): avoid stuck secret requirement modal guard
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 060 2026-01-22 bb09f91de715 `settings`
+
+- Subject: fix(settings): keep valid secrets when one entry is invalid
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 061 2026-01-22 765423af52b4 `agent-input`
+
+- Subject: fix(agent-input): cycle permission mode from normalized state
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 063 2026-01-22 2ed3100311c7 `secrets`
+
+- Subject: fix(secrets): hide values when using secret vault
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 064 2026-01-22 e5848c480522 `ui`
+
+- Subject: fix(ui): harden overlays and permission cycling
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 065 2026-01-13 69fdcff96a4c `sync`
+
+- Subject: fix(sync): restore session permission mode from last message
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 066 2026-01-13 9b499c5dccce `sync`
+
+- Subject: fix(sync): persist permission mode timestamp for restart-safe arbitration
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 067 2026-01-13 def8852509d0 `sync`
+
+- Subject: fix(sync): persist permission mode reliably across devices
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 069 2026-01-06 c06b6202b5d4 `expo-app`
+
+- Subject: Add copy-to-clipboard button to message blocks
+- Reasons: non-Conventional-Commits subject
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 072 2026-01-21 82d74454c3c4 `typecheck`
+
+- Subject: fix(typecheck): restore permission imports and Popover web styles
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 086 2026-01-13 86330e263595 `security`
+
+- Subject: fix(security): redact spawn secrets from daemon logs
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 089 2026-01-13 ef418bc4dda3 `pr107`
+
+- Subject: fix(pr107): redact profile secrets in doctor + align tmux tmpDir
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 096 2026-01-15 2973f7fe6861 `codex`
+
+- Subject: fix(codex): harden MCP command detection
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 099 2026-01-15 c52227082c2b `tmux`
+
+- Subject: fix(tmux): correct env, tmpdir, and session selection
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 113 2026-01-21 51782fdbfbcd `codex`
+
+- Subject: test(codex): reset transport instances between tests
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 124 2026-01-13 8b88dcd73d40 `claude`
+
+- Subject: fix(claude): carry permission mode across remote/local switches
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 125 2026-01-13 8f0e10c9428b `claude`
+
+- Subject: fix(claude): publish permission mode in session metadata
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 126 2026-01-13 ffad20faa406 `cli`
+
+- Subject: fix(cli): publish permission mode for codex/gemini sessions
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 137 2026-01-12 68a6ba4bc244 `fork`
+
+- Subject: feat(fork): enable Codex inactive-session resume via codex-reply
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 140 2026-01-22 9c40c54018c2 `cli`
+
+- Subject: Revert "fix(tools): support Windows arm64 tool unpacking"
+- Reasons: non-Conventional-Commits subject; revert commit
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 141 2026-01-22 ab35b47ff699 `resume`
+
+- Subject: fix(resume): make inactive resume reliable; gate Codex resume
+- Reasons: multiple major areas: cli, expo-app; safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 144 2026-01-22 0140ae276869 `codex`
+
+- Subject: refactor(codex): install mcp resume server via install-dep
+- Reasons: multiple major areas: cli, expo-app; safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 146 2026-01-22 e1deb6db8ddb `codex`
+
+- Subject: refactor(codex): add dep-status and drop codex-resume RPCs
+- Reasons: multiple major areas: cli, expo-app
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 148 2026-01-22 8bebf04aca92 `cli`
+
+- Subject: refactor(cli): modularize capabilities and env preview
+- Reasons: diff summary skipped (large change (+1296/-908)); safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 150 2026-01-22 a5cac698f15b `cli`
+
+- Subject: feat(cli): harden session queue, switching, and lifecycle
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 151 2026-01-22 3fc704424e8d `app`
+
+- Subject: feat(app): add pending queue, discard markers, and capabilities
+- Reasons: diff summary skipped (too many files (44))
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 156 2026-01-22 8c16ee8f9cef `auth`
+
+- Subject: fix(auth): surface auth failures and gate unauth routes
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 158 2026-01-22 3b3609fed434 `rpc`
+
+- Subject: fix(rpc): add structured code for missing RPC methods
+- Reasons: multiple major areas: expo-app, server
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 160 2026-01-22 7fbe1f1cc727 `permission`
+
+- Subject: fix(permission): avoid no-op permissionModeUpdatedAt bumps
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 162 2026-01-22 ee0bec2a0b90 `resume`
+
+- Subject: Delete INACTIVE_SESSION_RESUME.md
+- Reasons: non-Conventional-Commits subject
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 165 2026-01-23 8b3f39f22664 `cli`
+
+- Subject: feat(cli): add interaction.respond for AskUserQuestion
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 166 2025-12-24 ed4bc007308a `codex`
+
+- Subject: feat: add execpolicy approval option for Codex
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 167 2025-12-24 78adc9c58811 `codex`
+
+- Subject: feat(codex): support execpolicy approvals and MCP tool calls
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 168 2026-01-22 9dfa09bef8d8 `i18n`
+
+- Subject: fix(i18n): add Codex execpolicy button text
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 169 2026-01-22 559d39da116d `reducer`
+
+- Subject: fix(reducer): keep permission messages idempotent
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 171 2026-01-19 d06d5a833f8e `claude`
+
+- Subject: Add signal forwarding to claudeLocal.ts
+- Reasons: non-Conventional-Commits subject
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 174 2025-12-24 e956463db3e2 `codex`
+
+- Subject: fix: use runtime execPath for MCP bridge
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 175 2026-01-23 f0a7d8d0b40c `codex`
+
+- Subject: fix(codex): use mcp tool call id for approvals
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 176 2026-01-22 da620b6865ad `server`
+
+- Subject: feat(server): add full/light flavors with sqlite migrations
+- Reasons: diff summary skipped (too many files (38))
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 183 2026-01-23 46186162ae14 `happy-cli`
+
+- Subject: test(happy-cli): fix timer cleanup and MCP schema mocks
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 208 2026-01-23 61a18ac95e17 `tools`
+
+- Subject: fix(tools): require permission id for ExitPlanMode actions
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 209 2026-01-23 5b36c9bf91c1 `tools`
+
+- Subject: test(tools): avoid null permission in ExitPlanToolView tests
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 211 2026-01-23 55428fb0253c `tools`
+
+- Subject: fix(tools): alert when AskUserQuestion permission id is missing
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 212 2026-01-23 dc6955f88abd `terminal`
+
+- Subject: fix(terminal): prevent sessionId path traversal in attachment info
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 226 2026-01-23 c461ed1cb4ef `permission`
+
+- Subject: feat(permission): add permission mode option helpers
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 228 2026-01-23 523989b4de8e `server-light`
+
+- Subject: fix(server-light): avoid master secret race
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 237 2026-01-23 241f0ae24b1d `cli`
+
+- Subject: test(cli): prevent legacy sessionId path traversal
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 238 2026-01-23 a1e4a6dd3fbd `cli`
+
+- Subject: fix(cli): block legacy sessionId path traversal
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 241 2026-01-23 1464402758bf `codex`
+
+- Subject: fix(codex): preserve falsy MCP tool results
+- Reasons: safety/security-sensitive area
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 247 2026-01-23 24b607abfa07 `server`
+
+- Subject: Refactor schema sync and centralize Prisma types
+- Reasons: non-Conventional-Commits subject; diff summary skipped (too many files (29))
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 248 2026-01-23 bf3027799623 `expo-app`
+
+- Subject: Set EXPO_UNSTABLE_WEB_MODAL env var in Expo scripts
+- Reasons: non-Conventional-Commits subject
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---
+
+## 249 2026-01-23 c803115dcbdc `expo-app`
+
+- Subject: Improve postinstall script for symlinked paths and patching
+- Reasons: non-Conventional-Commits subject
+
+### Manual Review Notes
+
+TODO
+
+### Verdict
+
+- Keep/squash/split/drop/reorder: TODO
+- Depends on: TODO
+
+### Rewrite Commit Message
+
+TODO
+
+---