Prepare Guardex 7.0.42 release (#474)

The npm registry is still at 7.0.41 while main contains the agent-session and cockpit work from PRs #451 through #473, so this assigns the next patch version and records release notes for that payload.

Constraint: Release work must keep package metadata and README release notes in sync.

Rejected: Retag or republish 7.0.41 | npm versions are immutable and the registry already reports 7.0.41.

Confidence: high

Scope-risk: narrow

Directive: Do not publish without confirming npm still lacks 7.0.42.

Tested: node --test test/metadata.test.js

Tested: node --check bin/multiagent-safety.js

Tested: npm pack --dry-run

Tested: openspec validate --specs

Tested: git diff --check

Not-tested: Full npm test; current baseline is known red outside this release metadata lane.

Co-authored-by: NagyVikt <nagy.viktordp@gmail.com>

Author: NagyVikt

README.md

@@ -301,6 +301,18 @@ Being honest about where this still has issues:
 <details open>
 <summary><strong>v7.x</strong></summary>
 
+### v7.0.42
+- Bumped `@imdeadpool/guardex` from `7.0.41` to `7.0.42` so the current
+  `main` payload can publish under a fresh npm version after `7.0.41` reached
+  the registry.
+- Improves the agent-session and cockpit workflow: `gx agents start/status`
+  now share canonical session storage, agent lanes can be previewed, claimed,
+  finished by session, and launched through safer supported-agent metadata,
+  and cockpit can render live session state through tmux-backed panes.
+- Hardens setup and status hygiene by ignoring local `.codex/` state during
+  setup/doctor, avoiding generic OpenSpec dirty-worktree reuse, and pruning
+  stale agent sessions from user-facing status surfaces.
+
 ### v7.0.41
 - Bumped `@imdeadpool/guardex` from `7.0.40` to `7.0.41` so the current
   `main` payload can publish under a fresh npm version after the `v7.0.40`

openspec/changes/agent-codex-bump-npm-version-7-0-42-release-2026-04-29-22-36/.openspec.yaml

@@ -0,0 +1,2 @@
+schema: spec-driven
+created: 2026-04-29

openspec/changes/agent-codex-bump-npm-version-7-0-42-release-2026-04-29-22-36/notes.md

@@ -0,0 +1,36 @@
+# agent-codex-bump-npm-version-7-0-42-release-2026-04-29-22-36 (minimal / T1)
+
+Branch: `agent/codex/bump-npm-version-7-0-42-release-2026-04-29-22-36`
+
+Bump `@imdeadpool/guardex` to `7.0.42` and cut a matching GitHub release so
+the merged Guardex changes after `v7.0.41` have a fresh npm package version.
+
+Scope:
+- Bump `package.json` and `package-lock.json` from `7.0.41` to `7.0.42`.
+- Add a `README.md` release note for `v7.0.42` covering PRs `#451` through
+  `#473`.
+- Verify package metadata and tarball contents before finish.
+
+Verification:
+- `node --check bin/multiagent-safety.js`
+- `npm pack --dry-run`
+- `openspec validate --specs`
+- `git diff --check`
+- `npm test` when the current baseline allows it
+
+Known baseline:
+- Full `npm test` was red before this release edit on unrelated agent launch,
+  agent session, and CLI args assertions. Keep release verification scoped to
+  metadata, release notes, and package tarball unless those baseline failures
+  are fixed separately.
+
+## Handoff
+
+- Handoff: change=`agent-codex-bump-npm-version-7-0-42-release-2026-04-29-22-36`; branch=`agent/codex/bump-npm-version-7-0-42-release-2026-04-29-22-36`; scope=`package.json, package-lock.json, README.md, openspec/changes/agent-codex-bump-npm-version-7-0-42-release-2026-04-29-22-36/*`; action=`finish this sandbox via PR merge + cleanup after targeted verification`.
+- Copy prompt: Continue `agent-codex-bump-npm-version-7-0-42-release-2026-04-29-22-36` on branch `agent/codex/bump-npm-version-7-0-42-release-2026-04-29-22-36`. Work inside the existing sandbox, review `openspec/changes/agent-codex-bump-npm-version-7-0-42-release-2026-04-29-22-36/notes.md`, continue from the current state instead of creating a new sandbox, and when the work is done run `gx branch finish --branch agent/codex/bump-npm-version-7-0-42-release-2026-04-29-22-36 --base main --via-pr --wait-for-merge --cleanup`.
+
+## Cleanup
+
+- [ ] Run: `gx branch finish --branch agent/codex/bump-npm-version-7-0-42-release-2026-04-29-22-36 --base main --via-pr --wait-for-merge --cleanup`
+- [ ] Record PR URL + `MERGED` state in the completion handoff.
+- [ ] Confirm sandbox worktree is gone (`git worktree list`, `git branch -a`).

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@imdeadpool/guardex",
-  "version": "7.0.41",
+  "version": "7.0.42",
   "description": "Guardian T-Rex for your multi-agent repo. Isolated worktrees, file locks, and PR-only merges stop parallel Codex & Claude agents from overwriting each other's work. Auto-wires Oh My Codex, Oh My Claude, OpenSpec, and Caveman.",
   "license": "MIT",
   "preferGlobal": true,