release: codewith 0.1.79

[andrei-hasna]

Scope

Prepare the Codewith 0.1.79 patch release from live main
93b3682cc283c1a5963925076a197af248512860.

• Bump the root npm wrapper and Rust workspace to 0.1.79.
• Regenerate the Cargo lockfile's 129 workspace-local package versions.
• Add release notes for exactly rust-v0.1.78...93b3682: fix(tools): enforce reserved namespace boundary #424, feat: A tool for the agent to see all accounts' usage/rate-limits (like /profile) to pick/switch profile; low-usage system-pro #418,
  feat(goals): track line changes per goal #415, fix(cli): make cwd snapshot tests portable on Windows #431, fix(ci): repair non-app-server Rust lint failures #432, fix(goals): harden line change accounting #433, fix(app-server): stabilize cross-platform CI regressions #434, test(git-utils): verify snapshot object isolation semantically #435, ci: resolve full Rust toolchain from manifest #430, fix(app-server-daemon): gate idle timeout constant on Unix #436, and fix(core): gate Unix-only exec-policy test items #447.
• Preserve the @hasna/codewith fork and explicit-release policy.

Changed files:

• CHANGELOG.md
• codex-cli/package.json
• codex-rs/Cargo.toml
• codex-rs/Cargo.lock

No publish, tag, merge, or unrelated cleanup is included.

Preflight

• @hasna/codewith@0.1.79 and all six platform package coordinates returned
  npm E404 before editing and again before commit.
• No release/0.1.79 branch, rust-v0.1.79 tag, or matching PR existed before
  this branch was pushed.
• origin/main and the requested base both resolve to
  93b3682cc283c1a5963925076a197af248512860.

Validation

Manifest and package checks:

• cargo metadata --locked --format-version 1 --no-deps - pass; all 129
  workspace packages resolve to 0.1.79.
• python3 .github/scripts/verify_cargo_workspace_manifests.py - pass.
• just bazel-lock-check - pass.
• just fmt-check - pass.
• python3 -m unittest discover -s scripts/codex_package -p 'test_*.py' -
  11 tests pass.
• python3 -m unittest codex-cli/scripts/test_build_npm_package.py -
  5 tests pass.
• CODEWITH_SMOKE_STRICT=1 python3 -m unittest -v codex-cli/scripts/test_install_smoke.py - npm and Bun clean-prefix smokes
  pass; the registry-only case is intentionally skipped because no registry
  URL was supplied.

Release build:

• CARGO_PROFILE_RELEASE_CODEGEN_UNITS=16 CARGO_TARGET_DIR=/tmp/codewith-0.1.79-target cargo build --release --locked --bin codewith - pass in 51m42s on Linux ARM64.
• Direct binary reports codewith 0.1.79; --help is non-empty.
• Binary size: 321914760 bytes.
• Binary SHA-256:
  27491e117cbbeed7d5b4a61aa4d7b2682a080ce13061173b6bf581baa07f1a9e.

Tarball smoke:

• Built the actual root wrapper with build_npm_package.py --package codex
  and current platform tarball with --package codex-linux-arm64.
• Root manifest is @hasna/codewith@0.1.79 with exactly six optional platform
  dependencies, all pinned to 0.1.79.
• Platform manifest is @hasna/codewith-linux-arm64@0.1.79 with
  os=["linux"] and cpu=["arm64"].
• Root contents contain only the wrapper, manifest, and required license/readme
  files. Platform contents additionally contain
  vendor/aarch64-unknown-linux-musl/bin/codewith.
• Isolated offline npm and Bun installs each installed two packages and both
  wrappers report codewith 0.1.79 with non-empty help.
• Packaged native binary SHA-256 matches the direct release binary.
• Root tarball: 20312 bytes,
  SHA-256 85e0a793e97301b43e3732f3022960be95eee4a39192ebd4b0fb9392a5170fbe.
• Linux ARM64 tarball: 122546610 bytes,
  SHA-256 3b9e46d915697127cf18101607523a9a1e815357398d73b5ad0e4012d0c47a92.

Safety and review:

• git diff --cached --check - pass.
• gitleaks git --staged --no-banner --redact --verbose . - no leaks.
• gitleaks git --log-opts='origin/main..HEAD' --no-banner --redact --verbose . - one commit scanned, no leaks.
• Independent read-only adversarial review - GO; no P0/P1 findings.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[andrei-hasna]

Release-preparation handoff at exact head 39756f0c4c6da37d59320aa2ef0c6f62e28bc828:

• 38 standard checks passed, 0 failed, 3 skipped.
• Blacksmith Testbox 30406271278 passed the x64 release build, current root/platform staging, both tarballs, isolated offline npm install, codewith 0.1.79, help output, and artifact hashes.
• Local ARM64 release build plus isolated npm and Bun installs passed; staged/range/push gitleaks were clean.
• Sole bounded adversarial reviewer returned GO with P0/P1/P2/P3 none.
• Root plus all six platform npm versions and tag rust-v0.1.79 remain unoccupied.

The exact-main backstop found a reproducible Windows test-cleanup failure after this PR opened. It was fixed and merged separately in #449 as f3fa151683ddc7e3053cfe0fc4626df66bd86b8a, after exact Windows x64 archive/all-shards proof and reviewer GO. This PR intentionally retains its already-reviewed head one test-only commit behind current main; the merge goal should reconcile that base advancement without relitigating the unchanged release diff.