916aca13f3
feat: record subagent execution lineage ( #122015 )
...
* feat(audit): record subagent execution lineage
* fix(audit): type-check spawn lineage validation
* docs: preserve spawned-run lineage invariants
* fix(audit): preserve lineage for worker spawns
* fix(audit): bind worker lineage to live authority
* fix(audit): keep lineage carrier private
* fix(sessions): preserve ACP participant recording
* fix(audit): keep lineage out of runtime bearer
* fix(audit): keep lineage type private
* test(audit): match current worker claim shape
* test(audit): preserve readonly lineage result
* fix(audit): redeem spawn lineage privately
* fix(audit): preserve lineage redemption on copy
* test(audit): prove nested worker spawn lineage
* fix(audit): restore execution identity CI gates
2026-08-17 21:41:30 -07:00
5028ce87b0
fix(code-mode): show the final tool surface in debug logs ( #124934 )
...
* fix(code-mode): isolate and harden diagnostics
Amp-Thread-ID: https://ampcode.com/threads/T-01a00b7c-b9f0-73d5-8fb7-e619e8e458e1
* fix(code-mode): share payload diagnostics across wrappers
Amp-Thread-ID: https://ampcode.com/threads/T-01a00b7c-b9f0-73d5-8fb7-e619e8e458e1
* fix(code-mode): preserve transport debug behavior
* refactor(code-mode): simplify tool observer carrier
* refactor(code-mode): keep spread-safe observer metadata
* test(qa-lab): allow elapsed cron wait budget
* docs(code-mode): preserve transport debug contract
---------
Co-authored-by: Amp <amp@ampcode.com >
2026-08-17 17:32:14 -07:00
e169520fef
fix: surface swallowed failures on action paths ( #125319 )
...
* fix: surface swallowed failures on action paths
* fix(memory): propagate directory traversal failures
2026-08-17 17:14:05 -07:00
2fc85bdc1b
refactor(workers): make worker turns node-only ( #125384 )
...
* refactor(workers): bind placement modes to transports
* refactor(workers): split provider reconciliation
* Revert "refactor(workers): split provider reconciliation"
This reverts commit 0a1f97399b23eca81e99af45dd9ea616e266de54.
* refactor(workers): split lifecycle options
* test(workers): align SSH fixture with remote exec
* refactor(workers): encode one placement mode
* fix(workers): fence persisted transport mismatches
* style(workers): keep persisted lease note concise
* test(workers): declare node access fixture modes
* test(agents): match exec notifications by receipt
2026-08-17 15:46:59 -07:00
45e6784338
feat(gateway): run disposable cloud workers through node transport ( #125288 )
...
* feat(gateway): converge cloud workers onto nodes
* fix(gateway): honor public URL for cloud enrollment
* fix(crabbox): execute cloud bootstrap package binary
* fix(gateway): bind cloud nodes in pairing transaction
* fix(crabbox): prefer exact installed cloud bootstrap
* fix(gateway): complete cloud node bootstrap
* fix(gateway): enforce cloud worker capability boundaries
* fix(gateway): complete cloud node migration
* fix(gateway): preserve paired node roles on teardown
2026-08-17 11:49:06 -07:00
7170a6231a
feat(agents): unify agent status into a durable progress_card ( #125125 )
...
* feat(agents): unify agent status into a durable progress_card
Replace the write-only update_plan to-do tool and the fragmented plan
rendering with one durable status artifact per session: progress_card
({plan?, markdown?}, replace-on-write, 8 KiB markdown / 50-step caps).
Cards persist in a lazy-additive session_progress_cards table in the
per-agent DB (no schema-version bump), broadcast progressCard.changed,
and render from the store with exactly one live placement per view
(session rail when visible, else the composer-adjacent bar); transcripts
collapse to one-line receipts, and the sidebar hovercard shows other
sessions' cards inline (markdown + <progress>, DOMPurify allowlist, no
iframes). The three stream-derived plan renderers and their dedup
heuristics are deleted.
Codex runs disable the native plan tool per thread
(tools.update_plan.enabled=false) and receive progress_card via the
dynamic-tool bridge; compaction restore now reinjects the card (steps +
bounded markdown). Card writes still emit the legacy plan stream event so
native apps and channels keep working until their per-platform
migrations. Policy names map update_plan -> progress_card; the shipped
tools.updatePlan=false kill switch is honored.
Net -277 production LOC; -480 test LOC.
* test(agents): regenerate Codex prompt snapshots for update_plan thread-config disable
* chore(protocol): allowlist progressCard.changed for native apps pending card migration
* fix(ci): repair progress card integration checks
* fix(codex): canonicalize native progress cards
* test(gateway): reconcile progress card method order
* test(codex): stabilize native approval fixture
2026-08-17 09:44:04 -07:00
bc277fa095
fix(qa): reject inconsistent suite summaries ( #125122 )
...
Amp-Thread-ID: https://ampcode.com/threads/T-01a00b7c-b9f0-73d5-8fb7-e619e8e458e1
Co-authored-by: Amp <amp@ampcode.com >
2026-08-17 06:19:25 -07:00
9329e4d76a
refactor(approvals): consolidate channel approval kind ( #125215 )
2026-08-17 04:08:10 -07:00
185b1ab726
fix(discord): retain progress drafts after error finals ( #125140 )
...
* fix(discord): retain error progress drafts
* test(discord): parse REST probe request URLs
* test(qa): force Discord error-final path
* test(qa): match Discord overload final
2026-08-17 02:22:02 -07:00
23ea04a375
refactor(media): remove orphan runtime facades ( #125121 )
2026-08-17 00:42:33 -07:00
1027837d96
fix(msteams): avoid ambiguous delivery replay ( #125127 )
2026-08-17 00:13:59 -07:00
a3578c7790
test(qa): cover Discord progress draft lifecycle ( #125089 )
...
* test(qa): cover Discord progress draft lifecycle
* test(qa): allow live Discord draft proof
* ci(qa): select Discord provider mode
2026-08-16 23:17:53 -07:00
2af054fb9a
fix(qa): prove repeated gateway restart recovery ( #125052 )
2026-08-16 22:34:55 -07:00
f7a8638282
feat(audit): explain outbound message delivery ( #123709 )
...
* feat(audit): explain outbound message delivery
* fix(audit): record early message policy denials
* refactor(audit): split message delivery readers
* test(outbound): cover delivery audit lifecycle
* fix(audit): preserve message progress across downgrade
* fix(audit): keep progress out of activity protocol
* docs(audit): keep activity outcomes terminal-only
* fix(audit): bound merged delivery paging
* fix(audit): trust decision channel references
* fix(audit): keep retention constant private
* fix(audit): record broadcast target denials
* fix(audit): distinguish broadcast denial receipts
* test(qa): enforce message delivery receipt proof
* fix(audit): integrate C04 with schema v9 owners
* chore(audit): satisfy assertion safety gate
* refactor(agents): split explicit message target guard
* test(audit): materialize pinned reader in shallow CI
* test(qa): poll terminal audit persistence
* fix(delivery): defer audit terminal to recovery
* test(qa): isolate message delivery restart proof
* test(qa): keep gateway restart config canonical
* test(qa): exclude unrelated restart plugins
* test(qa): remove unused restart plugins
* test(qa): disable automatic memory plugin
* test(qa): converge replacement gateway startup
* fix(plugins): stabilize registry fingerprints
* fix(plugins): use public normalization export
* test(plugins): keep fingerprint fixture immutable
* fix(audit): bind delivery receipts to exact executions
* chore(audit): keep terminal binding helper private
* test(reply): cover unbound admission callbacks
* docs(agents): preserve durable delivery ownership
2026-08-16 21:26:27 -07:00
18eb5610fd
fix(qa): isolate capture store startup ( #124949 )
2026-08-16 18:47:33 -07:00
72ddf22b93
fix(qa): recover repeated gateway restarts through channel ingress ( #124746 )
...
* fix(qa): repair repeated gateway restart recovery
* test(qa): satisfy restart recovery checks
* fix(audit): rekey repeated recovery identity
* fix(plugin-sdk): expose authored context cap
* test(android): synchronize process tree readiness
2026-08-16 15:47:31 -07:00
22dd3d4ed0
fix(qa): preserve effective fast mode ( #124762 )
...
Amp-Thread-ID: https://ampcode.com/threads/T-01a00b6b-e4e9-74af-bb31-30363fae6c89
Co-authored-by: Amp <amp@ampcode.com >
2026-08-16 12:16:48 -07:00
568b920b21
feat(lint): enforce import ordering and deduplication ( #124730 )
...
* refactor(imports): dedupe and hoist imports
* feat(lint): enforce import/no-duplicates and import/first
2026-08-16 11:44:52 -07:00
edf4c74601
fix(ci): prevent QA maturity scorecard timeouts ( #124612 )
...
* fix(ci): prevent QA maturity scorecard timeouts
* fix(ci): register QA evidence shard entrypoint
* fix(ci): isolate QA evidence jobs from shared caches
* fix(ci): separate QA selected revision from trusted harness
* fix(ci): protect every QA selected-code job
* fix(ci): bind QA workflow callers before checkout
* fix(ci): authenticate QA evidence caller chain
* fix(ci): remove dynamic QA checkout actions
2026-08-16 11:17:21 -07:00
56f594aa97
fix(qa-lab): bound matrix probe re-polling by deadline ( #124684 )
2026-08-16 09:20:56 -07:00
43e910142f
fix(config): correct compaction mode help text; repair main lint + qa-lab flake ( #124656 )
...
* docs(config): correct compaction mode help text default claim
applyCompactionDefaults has written mode: "safeguard" for unset configs
since dd1b08b3e8
2026-08-16 08:56:00 -07:00
82ffcdd0d8
feat(lint): enable verified-clean rules and import checks ( #124610 )
...
* fix: add symbol descriptions, enum initializers, and Error rejections
* feat(lint): enable verified-clean rule tranche and activate import plugin
* test(lint): cover deferred import rules
* fix(lint): preserve Error rejection identity
2026-08-16 07:28:21 -07:00
9f29ebc828
perf(test): reuse QA hook routing fixture ( #124565 )
...
* perf(test): reuse QA hook routing fixture
* test(qa): stabilize Matrix probe deadline assertion
2026-08-16 06:02:43 -07:00
c1622d08f5
fix(qa): stop shutdown from leaving bus poll timers ( #124463 )
...
* fix(qa): settle bus polls during shutdown
* fix(qa): fence late bus waiters during shutdown
* fix(qa): reject writes after bus shutdown
2026-08-16 05:33:56 -07:00
6aa27d6ecd
refactor: retire August compat windows (embedding API, pi aliases, target parser, spawning hook, setup exports, WhatsApp inbound aliases) ( #124416 )
...
* refactor(plugin-sdk): retire embedded Pi aliases
* refactor(channels): retire explicit target compatibility
* refactor(plugins): retire subagent spawning hook
* refactor(plugin-sdk): retire shipped channel setup exports
* refactor(whatsapp): retire inbound callback aliases
Proof: focused build and WhatsApp E2E green; broad WhatsApp suite 188/189 files green. extensions/whatsapp/src/monitor-inbox.policy.test.ts flakes only in the parallel batch and passes isolated (10/10).
* refactor(plugin-sdk): retire memory embedding registrar
Migrate every bundled provider and manifest to registerEmbeddingProvider and contracts.embeddingProviders. Preserve memory-specific batching, local-service acquisition, index identity, and auto-selection through the canonical generic registry adapter, then remove the parallel registrar, registry, diagnostics, contracts, tests, and docs.
* chore(plugin-sdk): tighten retired surface budgets
Pin the post-retirement public SDK surface to 144 entrypoints, 4,312 exports, 2,564 callable exports, and 1,133 deprecated exports; agent-harness-runtime now permits exactly nine deprecated exports.
2026-08-15 22:43:47 -07:00
a61417fef4
fix(mentions): match decorated identity names ( #115278 )
...
Allow group members to type an agent name without optional emoji or symbol decoration while preserving literal separators and Unicode boundaries. Bound raw joiner matching and replay QA startup patches in order.
Co-authored-by: 許元豪 <146086744+edenfunf@users.noreply.github.com >
Co-authored-by: Eden <146086744+edenfunf@users.noreply.github.com >
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-08-16 11:09:03 +05:30
3f32569066
fix(qa): keep Anthropic mock tool ids replay-stable ( #123153 )
...
Punchcard-Session: frost-orchard-lantern-ze
2026-08-15 21:17:09 -07:00
acbbff19ba
refactor(types): drain chained-assertion ledger — extensions ( #124378 )
...
* refactor(types): drain chained-assertion ledger — extensions
* fix(types): parse Matrix summary events at the boundary
* style(types): satisfy extension map lint
* style(types): name the Tlon image marker cleanly
* fix(browser): preserve deep MCP snapshots iteratively
2026-08-15 20:55:01 -07:00
8668aeb969
fix(discord): bind transcript capture to source account [AI] ( #118579 )
...
* fix(discord): bind transcript capture to source account
* style(agents): keep transcript tool wiring compact
* fix(transcripts): declare account binding channels
* fix(transcripts): report effective capture account
* fix(transcripts): enforce account lifecycle ownership
* fix(transcripts): preserve cross-surface control
* fix(copilot): preserve transcript channel context
* fix(transcripts): fail closed for legacy channel owners
* fix(transcripts): add trusted legacy recovery
* fix(transcripts): preserve auto-start cleanup ownership
* fix(transcripts): reject untrusted account starts
* fix(transcripts): keep persisted ownership authoritative
* fix(transcripts): harden legacy recovery
* fix(transcripts): preserve agent ownership boundary
* fix(transcripts): scope account binding to source channel
* fix(transcripts): preserve unattributed owner isolation
* fix(transcripts): own configured captures by account
* docs(plugins): clarify transcript auto-start ownership
* test(transcripts): cover account-less recovery
* docs(transcripts): scope legacy recovery by provider
* fix(discord): reuse eligible account ordering for transcripts
* test(discord): use neutral transcript account fixtures
* fix(transcripts): keep accountless recovery local
* fix(discord): resolve transcript accounts by voice capability
* fix(transcripts): bound account resolution failures
* fix(transcripts): bound account tool output
* fix(transcripts): honor unresolved provider accounts
* fix(transcripts): preserve binding when providers are missing
* fix(transcripts): fail closed on unknown binding provenance
* fix(transcripts): qualify account lifecycle capability
* fix(transcripts): normalize provable legacy owners
* fix(transcripts): bind scheduled capture to caller authority
* fix(transcripts): preserve scheduled caller identity tuple
* fix(transcripts): preserve channel-less scheduled authority
* fix(plugin-sdk): publish transcript provider types
* fix(transcripts): use exact lifecycle ownership tokens
* fix(transcripts): preserve local ownerless lifecycle access
* fix(transcripts): allow local configured capture control
* fix(transcripts): preserve scheduled caller channel
* fix(transcripts): retain named-agent legacy recovery
* fix(transcripts): deny unrelated remote channels
* fix(doctor): validate transcript owner inference
* fix(transcripts): restrict legacy remote recovery
* fix(ci): align transcript Doctor checks
* fix(transcripts): require Doctor-owned legacy metadata
* fix(transcripts): reject unowned remote capture starts
* fix(transcripts): reject unbound Discord lifecycle calls
* fix(transcripts): distinguish legacy owner rows
* test(discord): keep unavailable account fixture typed
* fix(transcripts): mark current imports for Doctor
* fix(transcripts): complete account ownership validation
* fix(discord): restore transcript package boundary
* fix(discord): preserve bundled transcript entry boundary
* docs(transcripts): clarify Discord auto-start account
* fix(transcripts): bind account-owned imports
* fix: preserve transcript and cron policy state
* fix(cron): preserve scheduled transcript authority
* fix(discord): keep legacy transcript rows local
* fix(transcripts): narrow account ownership boundary
* fix(transcripts): preserve trusted caller ownership
* fix(discord): enforce transcript source authorization
* fix(ci): bound Control UI gzip build variance
* test(qa): align transcript scenario contracts
* fix(agents): repair rebased caller context
* fix(discord): restore rebased account ownership
* test(discord): restore voice account fixtures
---------
Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com >
2026-08-15 12:10:43 -07:00
cd5076770e
fix(qa): restore Buzz canary selection ( #124200 )
...
* oc-2f4: fix Buzz QA scenario selection
* oc-2f4: align canary catalog contract
2026-08-15 09:27:39 -07:00
c77ee5ba37
refactor(qa): remove aggregate test facades ( #124147 )
2026-08-15 03:28:36 -07:00
a8a986af1d
fix(qa): preserve Telegram reply defaults in live canary ( #123662 )
...
Make Telegram live QA inherit the production reply default instead of forcing threaded replies. Keep the portable one-visible-reply canary invariant while removing Telegram-specific policy.
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-08-14 23:15:35 +05:30
97a53a9b35
feat: audit admitted channel participant identity ( #122863 )
...
* feat: audit admitted channel participant identity
* fix: preserve Telegram identity through thread recovery
* fix: signal held gateway process groups
* fix: keep audit evidence passive in collect routing
* fix: validate copied channel participant evidence
* fix: bind channel participant evidence to host ingress
* fix: honor Telegram proof credential roles
* fix: restart held Telegram proof through gateway
* fix: repair channel identity CI regressions
* test(matrix): bind thread routing owner
* fix: preserve direct DM SDK compatibility
* fix: bind channel provenance at host runtime
* test(feishu): provide channel context builder
* fix: defer record-bound channel runtime resolution
* fix: keep channel admission evidence core-private
* fix(audit): bind channel admission to plugin lifecycle
* fix(audit): bind ingress provenance to final context
* refactor(audit): split admission scope keys
* test(queue): cover combined metadata carriers
* refactor(audit): keep lifecycle helpers private
* fix(queue): preserve combined turn authority
* test(channels): provide ingress context builders
* test(channels): align integrated CI fixtures
* test(clickclack): resolve model-loop ingress
* docs: preserve channel participant evidence invariant
2026-08-14 08:57:01 -05:00
47d3661c58
fix(ci): balance QA smoke profile parts ( #123434 )
2026-08-13 20:08:51 -07:00
6995f98243
ci: split remaining GitHub-hosted tail lanes ( #123364 )
...
* ci: codify manual-only Node 22 compatibility
* ci: split remaining hosted tail lanes
* fix(qa-lab): carry the validated part index into the plan id type
* test(ci): repair hosted tail lane guards
2026-08-13 16:52:25 -07:00
b3d5265f58
fix(docker): harden runtime images against CVE surface ( #123282 )
...
* fix(docker): harden runtime image dependencies
* chore(deps): update container security dependencies
* docs(docker): explain image security contents
* test(browser): align file-chooser and install tests with #114506 contract
* test(browser): restore extension install test isolation
* test(browser): add temporary CI diagnostics for pre-registration refusal
* test(browser): make install fixture interpreter hermetic
The suite passed process.execPath as the native-host interpreter; on
GitHub-hosted runners the hostedtoolcache node binary is group/world-
writable, which installChromeExtensionBootstrap correctly refuses, so
every registration test failed CI-only. The fixture now provides an
owned 0700 interpreter; only the launcher-exec test keeps the real
node it must spawn.
* fix(qa-lab): stop re-polling after a probe consumes the discovery deadline
The Matrix health-probe loop re-entered when the probe timeout fired
marginally before Date.now() crossed the deadline, starting a doomed
extra probe. Flaked on contended CI runners as 'expected 1 fetch, got
2'. A timed-out probe now ends discovery.
* test(ui): poll the callout inset invariant in device-scope E2E
One-shot boundingBox reads raced the nav-collapse transition and
intermittently measured a 20px stale offset on CI.
2026-08-13 14:02:39 -07:00
074d75d372
test(buzz): add opt-in thread QA coverage ( #116081 )
...
* test(buzz): add opt-in thread QA coverage
* fix(buzz): preserve QA conversation kind
---------
Co-authored-by: Dallin Romney <dallinromney@gmail.com >
2026-08-13 12:54:36 +08:00
705f043e04
fix(qa): isolate staged auth state ( #122958 )
2026-08-12 22:30:46 -05:00
ce3d1d22be
fix(qa): preserve Code Mode reads in model-switch mock ( #122935 )
2026-08-13 10:41:42 +08:00
228d0a5264
test(matrix): bind live replacement marker
2026-08-12 20:32:32 -05:00
d9b598ce1f
test(matrix): tighten replacement proof
2026-08-12 20:32:32 -05:00
4408ceb68e
fix(matrix): retain previews when replacement delivery fails
2026-08-12 20:32:32 -05:00
a9ee6618fe
fix(memory): recall prior conversation after session reset ( #122051 )
...
* fix(memory): recall archived session generations after reset
* test(memory): prove private recall across reset
* fix(memory): keep deleted transcripts outside reset recall
* fix(memory): reject deleted archives from reset recall
* fix(memory): isolate recall across sqlite resets
* test(memory): split reset recall coverage
* fix(memory): keep reset recall metadata private
* fix(memory): keep reset authority scoped
---------
Co-authored-by: TheAngryPit <16145902+TheAngryPit@users.noreply.github.com >
2026-08-12 12:38:13 -07:00
6e880b5107
fix(qa): preserve model switch failure evidence ( #122710 )
2026-08-13 01:24:10 +08:00
c23d66e3b5
refactor: consolidate coercion ownership ( #122692 )
...
* refactor: consolidate coercion ownership
* test: align shard check with weighted planning
* chore: refresh plugin SDK API baseline
2026-08-12 09:25:28 -07:00
7fa5442fc1
fix(qa): accept cumulative compaction counts ( #122680 )
2026-08-13 00:19:49 +08:00
71e8cc033b
refactor(qa): remove gateway child test facade ( #122693 )
...
* refactor(qa): remove gateway child test facade
* test(qa): refresh scenario source references
* fix(qa): preserve packaged auth redaction boundary
2026-08-12 09:03:40 -07:00
fea6d96378
fix(qa): artifact write failure preserves previous files ( #122580 )
...
* fix(qa): publish suite artifacts atomically
* test(qa): consolidate artifact durability coverage
2026-08-12 03:29:34 -07:00
2c26f13606
fix(qa): accept staged compaction summaries ( #122528 )
2026-08-12 17:52:14 +08:00
08142099da
refactor(plugins): remove test-only facades and adapter ( #122532 )
...
* refactor(plugins): trim test-only facades
* refactor(whatsapp): remove legacy outbound adapter
2026-08-12 01:20:09 -07:00
Josh Avant