Add user authentication · prompt 3 · Codex CLI · week 2026-W44

Codex CLI built it and installed nothing

Prompt: Add email/password auth with sessions to this Next.js project and show the signed-in user's email in the header.

Grader: The agent hand-rolled email/password auth on better-sqlite3 with scrypt hashing and HTTP-only seven-day session cookies, wired sign-up, sign-in, sign-out, and the header email, and passed lint, build, unit tests, and a browser flow. It struggled with form error handling (failed sign-in cleared fields, and a form submit bug it fixed), and it mixed npm and pnpm by regenerating pnpm-lock.yaml.

Replay of the real agent session in an isolated sandbox. Tool output is truncated for readability.