Brooklyn Nicholson 4e7403130e fix(agent): redact the failed-turn error card before it reaches the durable store ...

_failed_turn_display_metadata stored result["error"] and the error_surface
raw into the boundary row's display_metadata, which SessionDB persists
without redaction — a secret echoed by a provider or tool error reached the
'store' and 'export' sinks verbatim (test_secret_redaction_gateway
[tool_reads_env_file-store/export]). Force-redact every string in the
payload (nested dicts/lists included) at the producer, matching the
compressor's persistence boundary.

2026-10-01 03:27:39 -05:00

..

lsp

fix(lsp): no automatic trust for scheduled work; lock-free trust lookups

2026-09-29 03:28:46 +05:30

monitoring

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

pet

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

proxy_sources

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

secret_sources

fix(secret-sources): revoke a removed source's value from os.environ

2026-09-29 22:57:48 -04:00

transports

refactor(sessions): simplify-code pass over the identity helpers

2026-09-29 04:15:21 +05:30

vault_backends

…

verify

…

__init__.py

…

account_usage.py

fix(codex): quota probe and /usage pool paths use the pool route base

2026-09-25 21:27:06 +05:30

acp_openai_bridge.py

…

activity_tracking.py

fix(compression): persist terminal compression activity stamps immediately

2026-09-28 12:53:29 -05:00

agent_init.py

fix(desktop): route a session with no provider to setup, not a dead-end toast

2026-09-29 19:30:43 -05:00

agent_runtime_helpers.py

fix(agent): keep marker-merged user rows addressable after alternation repair

2026-09-30 23:18:06 -05:00

AGENTS.md

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

anthropic_adapter.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

anthropic_credentials.py

…

anthropic_endpoints.py

…

anthropic_message_convert.py

…

api_error_summary.py

fix(agent): treat jiter SSE parse ValueErrors as transient provider errors (#65147)

2026-09-24 22:26:23 +05:30

api_request_hooks.py

fix(stream_diag): feed the existing chunk-body upstream_provider into diag + hook payload (#90216)

2026-09-24 22:25:06 +05:30

async_utils.py

…

aux_accounting.py

feat(fast): /fast ultrafast for GPT-6 Astra, priced at the served tier

2026-09-29 23:54:34 +05:30

auxiliary_async_rebuild.py

…

auxiliary_client.py

feat(models): add gpt-6.1-sol (OpenRouter + direct OpenAI API)

2026-09-29 23:25:26 +05:30

auxiliary_fallback_recovery.py

…

auxiliary_health.py

…

auxiliary_hooks.py

…

auxiliary_reasoning_floor.py

…

auxiliary_structured_output.py

…

auxiliary_unavailable.py

fix(desktop): route a session with no provider to setup, not a dead-end toast

2026-09-29 19:30:43 -05:00

auxiliary_wire.py

…

azure_identity_adapter.py

…

backend_identity.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

background_review.py

fix(agent): cancel background review when session ends or is stopped

2026-09-30 22:59:48 -05:00

battery.py

…

bedrock_adapter.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

billing_links.py

…

billing_usage.py

…

billing_view.py

…

bounded_response.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

browser_provider.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

browser_registry.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

chat_completion_helpers_relay.py

…

chat_completion_helpers.py

feat(telemetry): per-model tool-call quality, friction and context-peak counters

2026-09-28 12:43:03 -07:00

chat_completion_nonstream.py

refactor(agent): derive the Codex attempt origin and pre-progress phase once

2026-09-24 15:58:19 +05:30

chat_completion_stream_monitor.py

…

chat_completion_wait_notice.py

fix(agent): keep Codex first-progress deadline attempt-local

2026-09-24 15:58:19 +05:30

client_lifecycle.py

fix(processes): persist_on_release keeps background jobs alive across lifecycle kill sweeps (#41225)

2026-09-25 13:49:31 -05:00

codex_headers.py

…

codex_responses_adapter.py

…

codex_runtime_history_seed.py

…

codex_runtime.py

feat(fast): /fast ultrafast for GPT-6 Astra, priced at the served tier

2026-09-29 23:54:34 +05:30

coding_context.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

command_token_source.py

…

compaction_display.py

…

compression_facade.py

feat(telemetry): count compaction attempts in shared metrics

2026-09-28 12:43:03 -07:00

compression_marker.py

fix(context): drop stale _shrink reference in marker comment

2026-09-27 18:38:58 +05:30

context_breakdown.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

context_compressor_summary.py

…

context_compressor.py

fix(compression): classify complete legacy notice fragments

2026-10-01 02:28:11 +00:00

context_engine.py

fix(agent): route summary-snapshot and memory-context truncations through elide()

2026-09-26 23:49:25 +05:30

context_file_sources.py

fix(agent): preserve configured context cwd on desktop compaction

2026-09-28 11:29:49 -05:00

context_pin.py

…

context_references.py

fix(files): one live-DB refusal source; hold the lock through /api/files/read

2026-09-27 20:45:56 +05:30

conversation_compression_archive.py

fix(compression): archive the rows the compressor held, not every row up to the newest

2026-09-24 11:57:56 -05:00

conversation_compression_manual.py

fix(compression): archive the rows the compressor held, not every row up to the newest

2026-09-24 11:57:56 -05:00

conversation_compression_reply_anchor.py

…

conversation_compression.py

fix(sessions): close the identity gaps the review found and prove the recovery paths

2026-09-29 04:15:21 +05:30

conversation_loop.py

fix(agent): redact the failed-turn error card before it reaches the durable store

2026-10-01 03:27:39 -05:00

copilot_acp_client.py

fix: a crashed Copilot ACP CLI is reported as a crash, not a timeout (#121467)

2026-09-26 11:22:06 -07:00

credential_persistence.py

…

credential_pool_admin.py

fix(auth): route the borrowed-root add_entry write through the token-base boundary

2026-09-24 15:44:48 +05:30

credential_pool_model_cooldowns.py

…

credential_pool_plugin.py

…

credential_pool.py

fix(auth): leave a lock-free window between deferred refresh holds

2026-09-29 18:47:44 -05:00

credential_sources.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

credits_tracker.py

fix(credits): stop desktop reap/resume from re-announcing the same usage band

2026-09-26 17:59:52 -05:00

curator_backup.py

docs(curator): note .rollback-unrestored-* is deliberately kept

2026-09-27 00:04:22 +05:30

curator.py

fix(telemetry): loop metrics count only the user's real backend work and curator passes

2026-09-28 12:43:03 -07:00

deadline.py

…

delegation_context.py

…

display.py

Clarify: one question shape and one result shape on every surface (skip, cancel, timeout and undelivered are told apart) (#127760)

2026-09-29 18:33:44 +05:30

empty_response_guard.py

…

error_classifier.py

fix(agent): only 4xx/5xx body codes count as a stream error's HTTP status (#121270)

2026-09-24 22:36:08 +05:30

error_surface.py

fix(desktop): open the rejected provider's key from Update API key

2026-09-29 19:31:49 -05:00

errors.py

…

estop.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

fallback_cooldown.py

…

fast_mode.py

feat(fast): /fast ultrafast for GPT-6 Astra, priced at the served tier

2026-09-29 23:54:34 +05:30

file_safety.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

gemini_native_adapter.py

…

gemini_schema.py

…

history_commentary.py

…

i18n_languages.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

i18n_layers.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

i18n.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

image_eviction_policy.py

…

image_gen_provider.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

image_gen_registry.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

image_routing.py

…

image_token_cost.py

…

inline_tool_executors.py

Inline agent tools get the shared argument repair (clarify, todo, memory, session_search) (#127781)

2026-09-29 22:07:30 +05:30

insights.py

…

interrupt_compat.py

…

interrupt_control.py

refactor(agent): one builder for the interrupted_during_api_call exit reason

2026-09-27 02:02:41 +05:30

interrupt_scope.py

…

iteration_budget.py

…

jiter_preload.py

…

kanban_stop.py

…

kanban_turn_recovery.py

fix(kanban): retry a failed worker turn in place; carry the recovered response

2026-09-30 22:30:35 -04:00

lazy_forward.py

…

learn_prompt.py

…

learning_graph_render.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

learning_graph.py

fix(learning-graph): don't leak 'external' source to later skills in a root

2026-09-30 23:10:24 -05:00

learning_mutations.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 08:51:52 -04:00

legacy_cli.py

…

lmstudio_reasoning.py

…

manual_compression_feedback.py

…

markdown_tables.py

…

memory_manager.py

feat(telemetry): wire memory, curator, delegation and backend call sites

2026-09-28 12:43:03 -07:00

memory_provider.py

…

message_content.py

…

message_metadata.py

fix(tui_gateway): harden the off-turn session-key fixes from a parallel review (#123545)

2026-09-29 19:42:46 -05:00

message_sanitization.py

fix(persistence): adopt content only on legacy rows and stamp every inserted row

2026-09-27 20:45:44 +05:30

micro_compaction.py

fix(sessions): close the identity gaps the review found and prove the recovery paths

2026-09-29 04:15:21 +05:30

moa_alternation.py

…

moa_loop.py

…

moa_trace.py

…

model_metadata_http.py

…

model_metadata.py

feat(models): add gpt-6.1-sol (OpenRouter + direct OpenAI API)

2026-09-29 23:25:26 +05:30

models_dev.py

…

moonshot_schema.py

…

native_compaction.py

refactor(compression): Astra native-compaction gate reuses is_astra_model

2026-09-26 19:27:41 +05:30

notification_presentation.py

…

nous_rate_guard.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

nous_wire.py

…

onboarding.py

refactor(onboarding): ask for the plain intro once

2026-09-27 01:55:21 +05:30

oneshot_footprint.py

…

oneshot.py

…

opencode_affinity.py

…

outbound_webhooks.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

periodic_scheduler.py

…

plan_prompt.py

…

plugin_llm.py

…

plugin_stream_hooks.py

…

portal_tags.py

…

process_bootstrap.py

…

prompt_builder.py

fix(agent): name the running Bot Screen in the model context

2026-09-29 18:49:11 -05:00

prompt_cache_boundary.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

prompt_cache_scope.py

refactor(cache): drop the int guard on the fork compaction count

2026-09-27 00:38:34 +05:30

prompt_caching.py

…

provider_base.py

…

provider_media.py

…

provider_projection.py

…

provider_registry.py

…

proxy_bypass.py

…

rate_limit_credits.py

fix(credits): stop desktop reap/resume from re-announcing the same usage band

2026-09-26 17:59:52 -05:00

rate_limit_tracker.py

…

reactions.py

…

reasoning_effort.py

feat(models): add gpt-6.1-sol (OpenRouter + direct OpenAI API)

2026-09-29 23:25:26 +05:30

reasoning_params.py

refactor(copilot): one GitHub effort clamp for the profile and main agent

2026-09-26 22:21:47 +05:30

reasoning_summaries.py

fix(agent): deliver readable reasoning details during streaming

2026-09-27 02:48:48 -05:00

reasoning_timeouts.py

fix(agent): add MiniMax M2.x to reasoning stale-timeout floor

2026-09-25 21:28:32 +05:30

redact.py

fix(debug): mask every secret fallback field per agent.redact policy, not only api_key

2026-09-29 05:59:25 -04:00

relay_cwd.py

…

relay_llm.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

relay_runtime.py

feat(relay): name the Relay plugin files in doctor and the startup log

2026-09-29 12:16:43 -04:00

relay_tools.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

repetition_guard.py

fix(agent): gate stop-path repetition abort on runaway shape

2026-09-24 22:32:05 +05:30

replay_cleanup.py

…

retry_utils.py

…

review_engine.py

…

review_idle_queue.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

runtime_cwd.py

fix(agent): preserve configured context cwd on desktop compaction

2026-09-28 11:29:49 -05:00

runtime_self_protection.py

fix(file_tools): a trailing '.' still names the Delete/Move entry, not its target

2026-09-27 01:10:56 +05:30

sdk_transform_bypass.py

…

search_policy.py

fix(agent): a home working dir is a fallback, not a project

2026-09-29 14:53:00 -05:00

secret_scope.py

fix(secret-scope): compose the managed .env into every profile secret scope

2026-09-29 22:57:48 -04:00

served_model.py

…

session_activity.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

session_persistence.py

perf(sessions): pair tool-call uids in O(K) on flush and only when needed on restore

2026-09-29 04:15:21 +05:30

shell_hooks.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

side_question.py

…

skill_bundles.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

skill_commands.py

fix(skills): convert skill command cache to multi-slot dict (platform/home identity isolation)

2026-09-29 18:05:05 -05:00

skill_preprocessing.py

fix(agent,slack): close remaining compressor elision gaps from review

2026-09-26 23:49:25 +05:30

skill_utils.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

ssl_verify.py

…

status_output.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

stream_delivery.py

refactor(streaming): share interim visible/streamed normalization between prefix and exact verdicts

2026-09-24 22:41:10 +05:30

stream_diag.py

fix(stream): tidy clean-EOF diagnostics and truncation copy

2026-09-26 06:10:53 +05:30

stream_single_writer.py

…

subagent_lifecycle.py

…

subdirectory_hints.py

fix(agent): a home working dir is a fallback, not a project

2026-09-29 14:53:00 -05:00

subscription_view.py

…

surface_switch.py

fix(agent): read prompt identity lines only from the trailer paragraph

2026-09-27 02:22:23 +05:30

system_prompt.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

terminal_approval_batch.py

fix(agent): re-derive no-human batch approvals from the policy in force at execution

2026-10-01 00:42:30 -05:00

terminal_env_provider.py

…

terminal_env_registry.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

think_scrubber.py

fix(agent): hide MiniMax-M3 Chinese reasoning tags (#43827)

2026-09-24 22:41:10 +05:30

thinking_timeout_guidance.py

…

thread_scoped_output.py

…

title_generator.py

fix(delegate): title subagent sessions after their goal without a model call

2026-09-26 20:40:40 -05:00

tool_dispatch_helpers.py

refactor(agent): derive the pruned-marker matcher from the compressor template

2026-09-24 16:29:19 +05:30

tool_executor.py

fix(tools): tool_call scope gate names the missing GUI surface for preview tools

2026-09-30 23:07:09 -05:00

tool_guardrails.py

feat(telemetry): harness-accuracy shared metrics for the agent loop

2026-09-28 12:43:03 -07:00

tool_result_classification.py

…

trace_upload.py

…

trajectory.py

…

transcript_repair.py

fix(sessions): keep tool-call uids paired through rewrites, folds of repeated ids and chunked copies

2026-09-29 04:15:21 +05:30

transcription_provider.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

transcription_registry.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

tts_provider.py

…

tts_registry.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

turn_api_call.py

fix(desktop): mark replies the user stopped as "Response stopped"

2026-10-01 03:27:39 -05:00

turn_api_error.py

fix(agent): collapse orphan continuation trail on retry exhaustion (#119001)

2026-09-24 22:33:58 +05:30

turn_api_request.py

feat(telemetry): v5 efficiency metrics — turn cost, wasted tokens, tool output truncation, tool overhead, prompt-cache breaks

2026-09-28 12:43:03 -07:00

turn_author.py

…

turn_context_compaction.py

refactor(agent): module-level _refund_api_call import; int verdict count (#77305)

2026-09-24 22:27:18 +05:30

turn_context.py

fix: use original gateway text for automatic session titles

2026-09-29 15:57:52 -05:00

turn_empty_response.py

refactor(agent): module-level _refund_api_call import; int verdict count (#77305)

2026-09-24 22:27:18 +05:30

turn_explainers.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

turn_facade_lease.py

fix(state): a busy state.db is not a turn-lease wait

2026-09-29 02:47:39 +05:30

turn_facade.py

fix: use original gateway text for automatic session titles

2026-09-29 15:57:52 -05:00

turn_failure_copy.py

fix(agent): clean-EOF tool-call retry exhaustion no longer blames the network (#102766)

2026-09-26 06:10:53 +05:30

turn_final_response.py

fix(agent): gate stop-path repetition abort on runaway shape

2026-09-24 22:32:05 +05:30

turn_finalizer.py

feat(telemetry): harness-accuracy shared metrics for the agent loop

2026-09-28 12:43:03 -07:00

turn_iteration_prep.py

refactor(agent): one builder for the interrupted_during_api_call exit reason

2026-09-27 02:02:41 +05:30

turn_liveness.py

feat(metrics): hermes.process.exit from per-process markers and turn watchdogs

2026-09-28 12:43:03 -07:00

turn_loop_errors.py

…

turn_overflow.py

feat(telemetry): count compaction attempts in shared metrics

2026-09-28 12:43:03 -07:00

turn_preflight_gate.py

…

turn_preflight.py

…

turn_recovery_autorecover.py

…

turn_recovery.py

feat(telemetry): count compaction attempts in shared metrics

2026-09-28 12:43:03 -07:00

turn_request_assembly.py

…

turn_response_check.py

feat(telemetry): harness-accuracy shared metrics for the agent loop

2026-09-28 12:43:03 -07:00

turn_response_intake.py

feat(telemetry): harness-accuracy shared metrics for the agent loop

2026-09-28 12:43:03 -07:00

turn_retry_state.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

turn_stop_gates.py

docs(agent): pin prefix semantics at the previewed-mark call site (#88954)

2026-09-24 22:41:10 +05:30

turn_summary.py

…

turn_tool_round.py

feat(telemetry): harness-accuracy shared metrics for the agent loop

2026-09-28 12:43:03 -07:00

turn_tool_validation.py

feat(telemetry): per-model tool-call quality, friction and context-peak counters

2026-09-28 12:43:03 -07:00

turn_truncation.py

fix(agent): clean-EOF tool-call retry exhaustion no longer blames the network (#102766)

2026-09-26 06:10:53 +05:30

turn_usage.py

feat(fast): /fast ultrafast for GPT-6 Astra, priced at the served tier

2026-09-29 23:54:34 +05:30

usage_anchor.py

fix(agent): invalidate usage anchors after prefix rewrites

2026-09-26 17:15:30 -05:00

usage_pricing.py

Merge pull request #128307 from kshitijk4poor/feat/openai-ultrafast

2026-09-29 15:45:46 -04:00

vault_login_classifier.py

…

vault_store.py

…

verification_evidence.py

…

verification_stop.py

fix(agent,slack): close remaining compressor elision gaps from review

2026-09-26 23:49:25 +05:30

verify_hooks.py

…

vertex_adapter.py

…

video_gen_provider.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

video_gen_registry.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

vision_message_prep.py

…

web_search_provider.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

web_search_registry.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00