feat: Cursor-grade onboarding + token isolation (Epic 7, Stream 3) - #68

Merged

2witstudios merged 20 commits into

mainfrom

feat/handoff-prep

Jun 22, 2026

Commits on Jun 22, 2026

feat(env): isolate auth token from the agent process env (security)
2witstudios
committed
6cd9998
test: add live E2E proof of token isolation through the bash-tool env path
2witstudios
committed
32559bc
feat(creds): add global credential store + pagespace login command
2witstudios
committed
90b4389
feat(onboarding): first-run flow instead of missing-config exit
2witstudios
committed
526900a
feat(onboarding): drive the full first-run flow — drives, models, materialize
2witstudios
committed
cc2fe54
feat(doctor): upgrade pagespace status into reusable doctor + remediation
2witstudios
committed
7bc68eb
feat(doctor): wire onboarding to the shared doctor (cross-surface reuse)
2witstudios
committed
b5b6315
fix(bin): launcher imports shared src/doctor.ts (no mirroring)
2witstudios
committed
7e65635
fix(bin): call main() after declarations (TDZ on PAGESPACE_AGENT_DIR)
2witstudios
committed
bf85d81
docs(readme): rewrite install + first-run docs for Cursor-grade onboarding
2witstudios
committed
c24b65e
docs(readme): explicitly demote .mcp.json to optional override
2witstudios
committed
15d4459
feat(config): multi-drive config — PAGESPACE_DRIVES drive set + single default
2witstudios
committed
c2f6bf0
fix(bin): wire launcher to shared pure modules — eliminate all mirroring
2witstudios
committed
3df38e5
fix(onboarding): address review findings — coherent machine driving
2witstudios
committed
06b0827
fix(onboarding): delete the dead validate-recovery branch (Finding 1)
2witstudios
committed
71e913e
fix(security): resolve auth token from credential store — isolation without amputating auth
2witstudios
committed
112489b
fix(security): block .env secret injection into pi env + drop false hidden-input claim
2witstudios
committed
bfb4724
fix(bin): resolve effective token in statusDoctor + fix main() indentation
2witstudios
committed
1d3fcc5
fix(review): valid inline-comment findings — whitespace, type guards, env dedup
2witstudios
committed
015512e
fix(doctor): token check must not false-green when credential file exists but token is unusable

2witstudios
and
claude
committed
be94446