The agent-native release. Phelix becomes a controlled execution layer for coding agents: a built-in MCP adapter, a fail-closed execution-authorization boundary with plan-bound approvals, durable agent execution sessions, and a versioned --json machine contract on every core command. An agent proposes what to deploy; Phelix decides whether this caller may execute that exact plan; a human decides who signs it off.
Release highlights
Controlled execution for agents
A built-in MCP adapter exposes read tools plus two-step plan create and apply to Claude Code, Codex, and any MCP client over local stdio, the same pipeline as the CLI.
Execution authorization
An optional, fail-closed boundary between a validated plan and the engine: plan-bound, approval-gated, off by default, and never degrading to allow-everything once configured.
Plan-based execution
Immutable, content-addressed plans: the thing that was planned is the thing that gets executed, or execution fails closed on a hash mismatch.
Plan-bound approvals
Approvals bind a plan's id and content hash, so a human signs off that exact plan. An agent can never approve its own action.
Agent execution sessions
Durable, auditable tracking of one unit of agent work across inspect, plan, apply, and verify, so an interrupted agent resumes by reading state. Tracking only: it executes nothing.
Machine contract (--json)
Every core command emits one versioned JSON envelope on stdout, with stable error codes, exit codes, and operation correlation for scripts and agents.
Install or upgrade
The installer selects the correct prebuilt binary and configures the Linux monitor service. Running it again upgrades an existing installation.
Terminal
curl -fsSL https://phelix.anophel.com/install.sh | bashphelix version
Compatibility
Area
v1.1.0 support
Host
Linux primary; Windows experimental
Languages
Go and Rust
Agent clients
MCP over local stdio (Claude Code, Codex, any MCP client)
Authorization
Off by default (legacy_local); opt-in enforced policy with plan-bound approvals
Machine output
--json on every core command (schema_version 1, additive-only)