This is the short current-state handover. Older implementation logs are archived
in docs/archive/HANDOVER-history-2026-04.md and should be opened only when a
specific historical detail is needed.
Default read order:
AGENTS.md- this file
- the directly relevant repo README, handover, manifest, or source files
cache/context/.../entry.mdonly when a generated side-load packet is useful
Avoid loading full archived handover logs, ref/, screenshots/, cache/,
shared/mempalace/, generated reports, or deep search results unless the task
explicitly needs them.
Workspace memory is temporarily disabled. Do not run tools/bin/workspace-memory
or use Hub memory command actions until the pause is explicitly lifted.
- workspace release tag:
v1.2.2 repos/workspace-hubversion:1.2.2- latest local release-readiness gate passed on
mainon2026-05-10 - current release URL:
https://github.com/RichardGeorgeDavis/Codex-Workspace/releases/tag/v1.2.2
The workspace foundation is in place:
docs/,repos/,tools/,cache/, andshared/are the expected top-level folders- helper scripts live under
tools/scripts/ - templates live under
tools/templates/ - installable abilities and core services are tracked in
tools/manifests/workspace-capabilities.json - TomeVault-publishable skills are mirrored into root
.agents/skills/fromtools/manifests/tomevault-skills.json; keep this claim-only and do not install Relay unless explicitly requested - optional abilities live under
repos/abilities/ tools/ref/is reference-only and can remain empty unless a reviewed snapshot is explicitly refreshed- launcher commands coordinate ports through
cache/runtime/ports/
On 2026-05-10, Workspace Hub was hardened after a comprehensive audit:
- PR #12 was merged into
mainas commit2a0169345dbd1e2af0b7fb1a258f51f3a5b15bab - unsafe API methods now require the local Hub intent header and reject foreign browser origins before body parsing or any write, install, open, or runtime action runs; mapped-host Hub origins must be explicitly allowlisted
- Hub client POST helpers now send the intent header consistently
- repo activity, metadata, and event writes use canonical discovered
repo.relativePathvalues instead of raw request payload paths - core service payloads now include
maintenancePausedandmaintenancePausedReasonso UI disablement and server rejection share the same service-level contract - MemPalace install/start/restart/sync controls are disabled or relabeled while workspace memory remains paused, and the API rejects paused MemPalace maintenance and command calls directly
- Workspace Hub README smoke commands now use the intent header and avoid paused MemPalace command POSTs
- stale-information handling now keeps tracked docs and manifests canonical, treats generated cache as optional evidence, and requires live verification before recording external service status as current
tools/scripts/cleanup-sync-noise.shnow defaults to dry-run and requires--runbefore removing macOS or sync-client noise files- tracked vendor-specific mapped-host docs, setup checks, and Hub API/UI naming were removed; the old vendor token has no tracked hits, and mapped-host remains the generic preview mode
- verification covered
pnpm typecheck,pnpm test,pnpm lint,pnpm build, live API smoke, in-app browser smoke, andtools/scripts/release-readiness.sh - after merge,
tools/scripts/release-readiness.shpassed onmainwith 51 Hub tests passing; the only remaining warning is the optional missingomxcommand
Keep agent context small by default:
- read short current docs before historical logs
- use generated
entry.mdpackets beforeabstract.mdoroverview.md - keep Workspace Hub search in
thinmode unless a task needs deep results - keep
WORKSPACE_HUB_SEARCH_INCLUDE_ARTIFACTSunset or false - treat
ref/,screenshots/, archives, large generated HTML,cache/, andshared/mempalace/as opt-in evidence paths - summarize findings from large files instead of pasting or loading entire files into chat
repos/workspace-hub/ is independently runnable and is the stable local
dashboard baseline.
Implemented:
- repo discovery under
repos/ - conservative repo classification
.workspace/project.jsonmanifest support- repo-local agent tooling detection for
AGENTS.md,.codex/,.agents/skills,.opencode/, and.omx - repo intake scaffolding for README, cover placeholders, and conditional manifests
- repo open actions, direct previews, runtime controls, and health checks
- live event streaming, local indexed search, and structured failure reports
- capability and core-service surfacing from the tracked manifest
- base-summary refresh with selected-repo detail hydration
- side-load freshness visibility for generated context packets
- guarded local-only mutating API actions for writes, opens, installs, and runtime controls
- canonical repo-relative path persistence for repo activity, metadata, and workspace events
Workspace memory UI exists, but command actions are paused because
tools/bin/workspace-memory is disabled.
Practical next work:
- TomeVault distribution mirror is implemented and pushed in commit
5186120. Verify the public TomeVault profile state live before documenting scan counts or skill totals as current. Claim the profile and ask Oli to rescan rootAGENTS.mdplus.agents/skills/*/SKILL.md. Do not install Relay unless explicitly requested. - keep future changes end-to-end and update this file plus
docs/CHANGELOG.md - keep public surfaces aligned when workspace-wide behavior changes:
README.md,docs/README.md,docs/CHANGELOG.md, and relevant repo-local docs - decide whether optional
omxsupport should stay as an informational warning or be removed in a separate focused cleanup - sweep ignored or local repo manifests if any still use old vendor-specific mapped-host fields; tracked templates now use generic mapped-host fields
- apply managed MCP profiles only on machines that need them
- keep
safe-readonlyversusdefault-fullMCP usage intentional - extend cross-stack dependency detection only if operators need broader readiness checks
- deepen Memory Graph only after the disabled workspace-memory path has been reviewed
tools/bin/workspace-memory exits immediately with a disabled message. This
pauses MemPalace closeout, ingest, search, wake-up, export, and graph commands.
Current closeout behavior:
- record repo closeout in tracked repo docs such as
README.md,HANDOVER.md, orDESIGN.md - record workspace closeout here and in
docs/CHANGELOG.md - use generated side-load summaries under
cache/context/only as optional local context - do not leave MemPalace closeout as a manual reminder while the pause is active
Reason for the pause: repeated repo closeout attempts hit the MemPalace write
lock while a live save-repo embedded a large mirrored reference corpus. The
wrapper has broader excludes and better diagnostics, but the service stays
paused until the closeout contract is reviewed.
Repo intake should stay conservative:
- create or normalize
README.md - add a Workspace Hub cover block and placeholder image when helpful
- write
.workspace/project.jsononly when runtime behavior is not obvious - do not auto-install dependencies or auto-start runtimes during intake
- do not run MemPalace closeout while workspace memory is paused
For public site reference copies:
- record source URL, capture date, and acquisition method in repo docs
- prefer
tools/scripts/capture-site-reference.sh --run <url> <target-dir>whenhttrackis available - store fallback assets in repo-local
ref/with source notes - create a separate rebuild repo if maintainable editing is the real goal
Workspace-level:
tools/scripts/bootstrap-workspace.sh --run
tools/scripts/doctor-workspace.sh
tools/scripts/doctor-agent-tooling.sh
tools/scripts/release-readiness.sh
tools/scripts/sync-tomevault-skills.sh
tools/scripts/manage-workspace-capabilities.sh list
tools/scripts/update-all.sh --list-groupsWorkspace Hub:
pnpm --dir "repos/workspace-hub" lint
pnpm --dir "repos/workspace-hub" typecheck
pnpm --dir "repos/workspace-hub" test
pnpm --dir "repos/workspace-hub" buildContext side-load, when useful:
tools/scripts/generate-context-cache.sh --workspace --run
tools/scripts/generate-context-cache.sh --repo workspace-hub --rundocs/08-first-run-and-updates.mddocs/09-new-repo-baseline.mddocs/10-release-readiness.mddocs/11-core-memory-and-reference-promotion.mddocs/12-maintainer-runbook.mddocs/14-git-and-github-workflow.mddocs/20-ai-context-side-load.mddocs/21-agent-token-budget.mdrepos/workspace-hub/README.md