Repository navigation

fix: residuals of the 2026-10-13 bug hunt (classifier runners, redaction, telegram media, CLI) - #323

Merged

jkyberneees merged 67 commits into

mainfrom

fix/residuals-2026-10-14

Oct 14, 2026

Merged

fix: residuals of the 2026-10-13 bug hunt (classifier runners, redaction, telegram media, CLI)#323
jkyberneees merged 67 commits into
mainfrom
fix/residuals-2026-10-14

Commits on Oct 14, 2026
- fix(loop): argv0 ends at the first unquoted command operator
  
  jkyberneees
  and
  claude
  committed
  c5f807c
- fix(loop): verifier prompt wraps tool-call arguments as untrusted data
  
  jkyberneees
  and
  claude
  committed
  9abb857
- fix(llmclient): empty Anthropic finish reason is not a complete answer
  
  jkyberneees
  and
  claude
  committed
  3ae7b18
- fix(serve): escape control and bidi characters in clarify questions
  
  jkyberneees
  and
  claude
  committed
  bf7ca6c
- fix(serve): apply per-prompt model switch only after session token check
  
  jkyberneees
  and
  claude
  committed
  01346f2
- fix(serve): requires_confirmation reflects the enforced REST friction setting
  
  jkyberneees
  and
  claude
  committed
  3e43e7c
- fix(tools): tree skips dependency directories and caps total entries
  
  jkyberneees
  and
  claude
  committed
  b7b7ccc
- fix(tools): artifact_read errors via encoding/json and non-blocking open
  
  jkyberneees
  and
  claude
  committed
  337bdd8
- fix(session): reserve store-owned file names as session ids
  
  jkyberneees
  and
  claude
  committed
  85a5669
- fix(sandbox): reject image names docker would parse as options
  
  jkyberneees
  and
  claude
  committed
  244926d
- fix(maintenance): sweep orphaned schedule-host heartbeat files
  
  jkyberneees
  and
  claude
  committed
  6d84f05
- fix(subagent): parse the inherited key FD number strictly
  
  jkyberneees
  and
  claude
  committed
  389c145
- fix(upgrade): bound downloads by idle time instead of a 60s whole-request timeout
  
  jkyberneees
  and
  claude
  committed
  def886d
- fix(cli): make -h/--help exit 0 for every command
  
  jkyberneees
  and
  claude
  committed
  2f18e6f
- fix(repl): redact secrets before persisting REPL history
  
  jkyberneees
  and
  claude
  committed
  70727bc
- fix(subagent): engine tool filter follows the profile filter
  
  jkyberneees
  and
  claude
  committed
  6294c9f
- docs(cli): budgets apply to continue; help, upgrade and REPL history behavior
  
  jkyberneees
  and
  claude
  committed
  47218b8
- fix(telegram): scope read_file, vision and transcribe to the chat's own media
  
  jkyberneees
  and
  claude
  committed
  2697c60
- fix(telegram): run media downloads and voice transcription off the update loop
  
  jkyberneees
  and
  claude
  committed
  c43ba83
- fix(telegram): deliver the /resume return-after-break summary to the next turn
  
  jkyberneees
  and
  claude
  committed
  ac3278d
- fix(telegram): extract a memory episode for the conversation /resume replaces
  
  jkyberneees
  and
  claude
  committed
  3120695
- test(telegram): cover media read scope spellings
  
  jkyberneees
  and
  claude
  committed
  f8a84a2
- fix(memory): CLI episode promote binds approval to the reviewed text
  
  jkyberneees
  and
  claude
  committed
  14449d1
- fix(memory): wrapper-safe anaphora, ordered follow-up delivery, locked associations
  
  jkyberneees
  and
  claude
  committed
  5ec3c37
- fix(redact): end JSON-encoded credential values at line escapes and string ends
  
  jkyberneees
  and
  claude
  committed
  75f3406
- fix(redact): redact a password through an escaped quote
  
  jkyberneees
  and
  claude
  committed
  250aa84
- fix(redact): redact cookie values whatever the cookie name
  
  jkyberneees
  and
  claude
  committed
  d5567df
- test(redact): cover JSON-encoded value edges and keep escaped-quote scan linear
  
  jkyberneees
  and
  claude
  committed
  77cd39e
- fix(redact): judge escaped-quoted bare-key values in JSON-encoded text
  
  jkyberneees
  and
  claude
  committed
  c0e90d8
- fix(danger): void read licences after more writers that name no files
  
  jkyberneees
  and
  claude
  committed
  c431aac
- fix(danger): treat code-loading package-manager settings as persistence
  
  jkyberneees
  and
  claude
  committed
  b2d5b75
- fix(danger): judge a nameref by its own target
  
  jkyberneees
  and
  claude
  committed
  8fd0c3f
- fix(danger): classify the command a runner runs behind its global options
  
  jkyberneees
  and
  claude
  committed
  291e743
- fix(danger): gate the script a project runner hands to its interpreter
  
  jkyberneees
  and
  claude
  committed
  b4e5779
- fix(danger): treat Maven and Gradle home credential files as sensitive
  
  jkyberneees
  and
  claude
  committed
  4c2d398
- fix(danger): classify printing a registry credential as a credential read
  
  jkyberneees
  and
  claude
  committed
  e035cac
- fix(loop): argv0 never reports an assignment-shaped word as the program
  
  jkyberneees
  and
  claude
  committed
  02ce816
- fix(memory): association removal marks clear on restore/link; exists only false on not-found
  
  jkyberneees
  and
  claude
  committed
  2ce63cf
- fix(serve): apply model switch only after handlePrompt accepts the prompt
  
  jkyberneees
  and
  claude
  committed
  d87fc1f
- fix(session): match reserved store file names case-insensitively
  
  jkyberneees
  and
  claude
  committed
  5285cb1
- fix(cli): help flag anywhere in a command's flags prints that command's usage and exits 0
  
  jkyberneees
  and
  claude
  committed
  b7a5d0b
- fix(telegram): order text turns, commands and resets behind a chat's pending media job
  
  jkyberneees
  and
  claude
  committed
  aa75a89
- fix(telegram): scope every path-taking native tool to the chat's own media
  
  jkyberneees
  and
  claude
  committed
  2cb8c4d
- fix(danger): runner verb prefixes, post-verb options and directory options
  
  jkyberneees
  and
  claude
  committed
  16d0d7e
- fix(danger): scope code-loading package-manager options and parse yarn leading options
  
  jkyberneees
  and
  claude
  committed
  59bc57b
- fix(danger): void read licences after cloud/container fetchers; spare interactive editors
  
  jkyberneees
  and
  claude
  committed
  021ad18
- fix(danger): a target-less nameref declaration alone reads no secret
  
  jkyberneees
  and
  claude
  committed
  088840f
- test(redact): pin loginHint/tokenType cookie values as redacted
  
  jkyberneees
  and
  claude
  committed
  b03f8e4
- fix(redact): parse cookie headers pair by pair with quotes and escapes
  
  jkyberneees
  and
  claude
  committed
  cfb3456
- fix(redact): keep quoted keys and JSON structure when redacting values
  
  jkyberneees
  and
  claude
  committed
  1067b65
- fix(redact): judge unclosed or doubly escaped quoted cookie values
  
  jkyberneees
  and
  claude
  committed
  071448e
- fix(subagent): engine tool filter never exceeds the parent's filter
  
  jkyberneees
  and
  claude
  committed
  37c4808
- fix(cleanup): dry run lists orphaned scheduler heartbeats
  
  jkyberneees
  and
  claude
  committed
  5d774ee
- fix(telegram): cancel pending media jobs, skip other chats' media in listings, per-invocation checksum context
  
  jkyberneees
  and
  claude
  committed
  bf0670f
- fix(danger): void read licences after ftp/tftp/fetch downloads and batch emacs
  
  jkyberneees
  and
  claude
  committed
  512f848
- fix(redact): cover escaped-key JSON-in-JSON and Set-Cookie arrays and calls
  
  jkyberneees
  and
  claude
  committed
  b0ff7e2
- fix(danger): gate scripts in a package runner's directory
  
  jkyberneees
  and
  claude
  committed
  4bd147a
- fix(danger): judge a runner script operand with a path through the ledger
  
  jkyberneees
  and
  claude
  committed
  0fafe50
- style(maintenance): drop redundant type in heartbeat sweep
  
  jkyberneees
  and
  claude
  committed
  2d34022
- fix(telegram): cancelled media turns never run after a slot wait; cheap per-entry media skip
  
  jkyberneees
  and
  claude
  committed
  6867778
- fix(danger): void read licences after emacsclient evals and emacs visit/chdir runs
  
  jkyberneees
  and
  claude
  committed
  8cde379
- fix(danger): find package-manager run and publish verbs past option values
  
  jkyberneees
  and
  claude
  committed
  c8479b1
- fix(redact): scan pretty-printed and escaped Set-Cookie arrays; bound escaped JSON values
  
  jkyberneees
  and
  claude
  committed
  3bca486
- fix(telegram): resolve parent directories in the media listing skipper; no nil context sentinel
  
  jkyberneees
  and
  claude
  committed
  69b876e
- fix(danger): resolve emacs/emacsclient long-option abbreviations for the read ledger
  
  jkyberneees
  and
  claude
  committed
  eb23201
- fix(danger): resolve package-manager verbs and implicit scripts like the tools
  
  jkyberneees
  and
  claude
  committed
  bbc6a9c
- docs(agents): list the Telegram media read scope file
  
  jkyberneees
  and
  claude
  committed
  24747a6

Commits

Commits on Oct 14, 2026