v3.3.7 Luxor released

[amrmelsayed]

v3.3.7 Luxor is out: a single, focused patch on top of 3.3.6.

Open the IDE from the local dashboard (#1869, PR #1872). Until now a browser on the same machine was refused at Tower's /ide/ route, and the Codev IDE was reachable only through Codev Cloud or a hand-built URL. Each workspace card on Tower's home page now leads with an IDE row whose Open IDE action opens the workbench for that folder in a new tab, through Tower on port 4100, with no cloud session. Tower accepts an origin-guarded session cookie for the /ide/ prefix, routes the workbench and its WebSockets through itself, keeps the IDE server's connection token out of the browser's cookie jar, and regenerates that token on every IDE server start. The change had a dedicated security review of both the plan and the implementation; the trust notes in the afx ide reference describe the cookie and why the Open IDE path is for single-user machines.

The VS Code extension is unchanged; the Marketplace listing stays at 3.3.6.

Upgrade:

npm install -g @cluesmith/codev@3.3.7
afx tower stop && afx tower start
afx ide stop && afx ide start

Full notes: https://github.com/cluesmith/codev/releases/tag/v3.3.7