feat: Cursor-grade onboarding + token isolation (Epic 7, Stream 3)#68

Merged

2witstudios merged 20 commits into

mainfrom

feat/handoff-prep

Jun 22, 2026

Commits on Jun 22, 2026

feat(env): isolate auth token from the agent process env (security)
2witstudios
committed
test: add live E2E proof of token isolation through the bash-tool env path
2witstudios
committed
feat(creds): add global credential store + pagespace login command
2witstudios
committed
feat(onboarding): first-run flow instead of missing-config exit
2witstudios
committed
feat(onboarding): drive the full first-run flow — drives, models, materialize
2witstudios
committed
feat(doctor): upgrade pagespace status into reusable doctor + remediation
2witstudios
committed
feat(doctor): wire onboarding to the shared doctor (cross-surface reuse)
2witstudios
committed
fix(bin): launcher imports shared src/doctor.ts (no mirroring)
2witstudios
committed
fix(bin): call main() after declarations (TDZ on PAGESPACE_AGENT_DIR)
2witstudios
committed
docs(readme): rewrite install + first-run docs for Cursor-grade onboarding
2witstudios
committed
docs(readme): explicitly demote .mcp.json to optional override
2witstudios
committed
feat(config): multi-drive config — PAGESPACE_DRIVES drive set + single default
2witstudios
committed
fix(bin): wire launcher to shared pure modules — eliminate all mirroring
2witstudios
committed
fix(onboarding): address review findings — coherent machine driving
2witstudios
committed
fix(onboarding): delete the dead validate-recovery branch (Finding 1)
2witstudios
committed
fix(security): resolve auth token from credential store — isolation without amputating auth
2witstudios
committed
fix(security): block .env secret injection into pi env + drop false hidden-input claim
2witstudios
committed
fix(bin): resolve effective token in statusDoctor + fix main() indentation
2witstudios
committed
fix(review): valid inline-comment findings — whitespace, type guards, env dedup
2witstudios
committed
fix(doctor): token check must not false-green when credential file exists but token is unusable

2witstudios
and
claude
committed