Decision log and roadmap context (through 2026-08-03)#

A dated record of what has shipped and what is decided-but-pending, so new
contributors and agents don't re-derive it. Shipped items are verifiable in
git history; pending items name where the working docs live.

Shipped#

• 2026-07-04 — Rust/Elixir/Swift → TypeScript cutover merged (PR #20 +
  #22). See the "Rust → TypeScript cutover" page.
• 2026-07-06 — Release/distribution decisions: repo public at first
  release; npm @dosu/decant with trusted publishing (OIDC) and the
  platform-package pattern; tag-driven (v*) releases; Homebrew via the
  existing dosu-ai/homebrew-dosu tap; Windows deferred; unscoped decant
  npm name deliberately unclaimed.
• 2026-07-27 — Supply-chain hardening: PR #64 (CodeQL security-extended,
  fast-check property tests, sigstore attestation bundles as release assets;
  Scorecard 6.2 → 7.0) and PR #65 (the four real CodeQL findings fixed —
  single-fd open→fstat→read patterns, no-clobber writes, 0600 temp files).
• 2026-07-28 — UX/analytics overhaul (PR #72, 13 workstreams).
• 2026-07-29 — Hardening wave PRs #73–#80: schema-fingerprint drift gate +
  migration 19 repair (#73), orphan-subagent tombstones (#77), local API
  documented + hardened (#79), migration 21 drift repair (#80). Archive
  baseline settled at v21.
• 2026-07-29+ — v0.2.0 distribution/docs wave (#81–#83): README refresh,
  embedded worker entrypoints, Homebrew 6 tap-trust instructions.
• 2026-08-03 — Agent/knowledge wave: #84 (Dosu library documented in
  AGENTS.md), #85 (two skills + reflect-on-stop Stop hook), #86 (.mcp.json
  gitignored, project-scoped Dosu wiring), #87 (add-source workflow made
  canonical, goldens regeneration documented), #88 (worker origin guards for
  CodeQL). Dosu knowledge library bootstrapped; ENG-759/ENG-760 filed from
  dogfooding.

Decided, not yet shipped#

• Cursor source — Phase 0 probes done 2026-07-06; decisions locked:
  staged stream-json dir via DECANT_CURSOR_DIR (no default) plus native
  ~/.cursor ingestion behind an off-by-default feature-preview toggle;
  Composer pricing seeded at ingest; no schema change required; one PR built
  in a worktree. Working doc: Taylor's local plan file.
• Context-window UX — session views showing context-window fill and
  compaction markers. Research + Phase 1 implemented on a local branch
  (2026-07-17): Claude curves are recoverable read-path-only (per-message
  token columns already persisted, just never selected); Codex needs a parser
  change + archive rebuild; design decisions locked (equal-width turn slots,
  turn numbering mirrors session.turn_count). Not merged; the stray-column
  incident in the schema-history page came from this work.
• Token-economics activity buckets (planning/communicating/context/code)
  — additive build over existing columns, no re-ingest; pure read-time
  classification. Scoped 2026-07-04, unbuilt.
• Dosu CTAs in the UI — 6-PR plan (2026-07-28): UI-only, agent allowlist
  (dosu, claude_ai_Dosu), savings claims gated. Pending.
• Product framing — decant as a Dosu growth wedge; go/no-go and the
  wedge-feature fork (A/B/C) pending as of the 2026-07-17 product review.

Conventions for this page#

Working plan documents intentionally stay out of the repo (local convention:
plans/specs are uncommitted). When a pending item ships, move it up with its
PR number; when one is abandoned, say so rather than deleting it.