David Gageot 2c5e4de390 fix(safety): make the classified command the one the handlers execute ...

shell and run_background_job now resolve cmd/command via
safety.CommandArg over an exact-key map instead of encoding/json struct
tags, whose case-insensitive last-wins matching let
{"cmd":"ls","CMD":"rm -rf x"} run a command the runtime never
classified.

Permission rules and session grants for command tools are matched
against args with the executed command mirrored under the canonical
"cmd" key, so a `shell:cmd=sudo*` deny can no longer be dodged with the
"command" alias and "always allow" grants keep matching alias calls.

Assisted-By: Claude

2026-09-04 13:58:08 +02:00

..

compactor

feat: add X-Cagent-Compacting header for session-compaction LLM calls

2026-07-21 22:16:18 +02:00

jscommands

test,docs: guard the opt-in loader features and document them

2026-09-04 09:23:24 +02:00

toolexec

fix(safety): make the classified command the one the handlers execute

2026-09-04 13:58:08 +02:00

wire

feat(runtime/wire): cap request bodies with http.MaxBytesReader

2026-05-11 11:42:38 +02:00

after_llm_call_test.go

fix(runtime): sanitize malformed tool call names before persisting to session

2026-08-13 17:43:24 +02:00

agent_delegation_test.go

feat: safely gate embedded skill commands

2026-09-01 13:14:37 +02:00

agent_delegation.go

feat: safely gate embedded skill commands

2026-09-01 13:14:37 +02:00

agent_inspector_test.go

feat(tools): non-blocking StartableToolSet status check (#4073)

2026-09-03 22:29:18 +00:00

agent_router_test.go

refactor(runtime): extract agentRouter and clean up lint nits across the testability series

2026-04-27 18:57:26 +02:00

agent_router.go

docs: fix stale comment on agentRouter (mutex → atomic)

2026-06-30 17:14:10 +02:00

agent_tools_test.go

feat(tui): add right-click Agent Inspector with live + configured details

2026-06-18 10:48:59 +02:00

before_llm_call_test.go

refactor(tools): replace context-smuggled emitters with explicit tools.Runtime handle

2026-07-04 09:37:25 +00:00

budget_test.go

fix(pkg/runtime/budget_test.go): updating up some parts for price formatting

2026-07-19 19:20:09 +03:30

budget_wiring_test.go

fix(eval): preserve budget termination outcomes

2026-07-28 15:47:36 +02:00

budget.go

fix(eval): preserve budget termination outcomes

2026-07-28 15:47:36 +02:00

cache_test.go

feat: add tool-based structured output mode

2026-08-12 15:42:26 +02:00

cache.go

feat: add tool-based structured output mode

2026-08-12 15:42:26 +02:00

client_test.go

test: address review feedback on sleep-free synchronization

2026-07-02 01:06:11 +02:00

client.go

Merge pull request #3883 from EronWright/contrib/sse-large-events

2026-08-04 11:29:53 +02:00

clock_test.go

refactor(runtime): require context for runtime construction and title generators

2026-06-29 10:17:44 +02:00

close_test.go

enable t.Parallel() across the test suite, drop the TestParallel lint cop

2026-06-30 16:17:13 +02:00

commands_test.go

refactor(runtime): make the JS command evaluator pluggable to drop goja

2026-07-21 15:02:51 +02:00

commands.go

test,docs: guard the opt-in loader features and document them

2026-09-04 09:23:24 +02:00

compaction_context_limit_test.go

fix: clamp max_tokens to the context window for OpenAI-compatible providers

2026-07-01 19:42:28 +02:00

compaction_model_integration_test.go

feat(runtime): attribute capped context limit to dedicated compaction model

2026-07-23 18:31:52 +02:00

compaction_scenarios_test.go

fix: treat a whitespace-only compaction summary as a no-op

2026-07-06 09:51:03 +02:00

compaction_trigger_test.go

feat(compaction): reconcile token estimator with provider-reported usage

2026-07-03 15:33:21 +02:00

context_breakdown_test.go

feat(tui): show compaction summary in context dialog

2026-07-31 14:06:29 +02:00

context_breakdown.go

fix: security and robustness hardening for add_prompt_files_depth

2026-09-01 23:10:00 +02:00

contract_test.go

fix(runtime): reliable, correlation-safe, non-blocking elicitation delivery (#3584)

2026-07-13 16:39:20 +02:00

cooldown_manager_test.go

refactor(runtime): extract cooldownManager from fallback.go

2026-04-27 18:57:26 +02:00

cooldown_manager.go

refactor(runtime): drop pass-through wrappers and constructor double-build

2026-04-27 18:57:27 +02:00

cost_test.go

feat(config): declare explicit per-model token pricing with cost

2026-07-15 18:32:56 +02:00

defaults.go

fix(runtime): deliver StreamStopped with a bounded blocking send

2026-09-03 17:53:33 +00:00

dmr_models_test.go

fix: don't cache context-cancelled errors; allow custom providers in model picker

2026-06-27 15:56:37 +02:00

dmr_models.go

lint: add defer mutex unlock cop

2026-06-29 10:50:40 +02:00

elicitation_concurrency_test.go

fix(runtime): reliable, correlation-safe, non-blocking elicitation delivery (#3584)

2026-07-13 16:39:20 +02:00

elicitation_test.go

fix(runtime): deliver StreamStopped with a bounded blocking send

2026-09-03 17:53:33 +00:00

elicitation.go

fix(runtime): notify only for genuine user input waits

2026-08-20 15:34:08 +02:00

errors.go

feat(runtime): introduce ErrUnsupported sentinel for remote runtime gaps

2026-05-09 09:00:50 +02:00

event_sink.go

fix(runtime): deliver StreamStopped with a bounded blocking send

2026-09-03 17:53:33 +00:00

event_test.go

fix(eval): preserve budget termination outcomes

2026-07-28 15:47:36 +02:00

event.go

fix(runtime): deliver StreamStopped with a bounded blocking send

2026-09-03 17:53:33 +00:00

fallback_test.go

test: replace time.Sleep with deterministic synchronization

2026-07-02 00:48:45 +02:00

fallback.go

refactor(runtime): pass stream idle timeout as a parameter

2026-06-30 18:09:39 +02:00

force_handoff_test.go

refactor(runtime): require context for runtime construction and title generators

2026-06-29 10:17:44 +02:00

gateway_models_test.go

fix(models): unify gateway model discovery

2026-07-27 14:26:29 +02:00

gateway_models.go

fix(models): unify gateway model discovery

2026-07-27 14:26:29 +02:00

harness_provider_test.go

refactor(runtime): run harness agents through a registered driver

2026-09-04 09:23:11 +02:00

harness_provider.go

refactor(runtime): run harness agents through a registered driver

2026-09-04 09:23:11 +02:00

harness_test.go

refactor(runtime): run harness agents through a registered driver

2026-09-04 09:23:11 +02:00

harness.go

refactor(runtime): run harness agents through a registered driver

2026-09-04 09:23:11 +02:00

hooks_wiring_test.go

Merge pull request #3290 from rumpl/truncate-large-tool-results

2026-06-29 10:58:37 +02:00

hooks.go

fix(app): synthesize StreamStopped when the runtime stream closes without one

2026-09-03 18:33:30 +00:00

instruction_observation_test.go

Add opt-in cache-stable dynamic prompts

2026-07-15 17:24:08 +02:00

lazy_model_store_test.go

fix(paths): preserve native Windows home directory

2026-07-31 16:32:05 +02:00

lazy_model_store.go

feat: add Ctrl+R force-refresh to the model picker

2026-07-09 20:32:52 +02:00

live_sessions_test.go

Merge pull request #3669 from awschmeder/fix/3668-bare-eof-content-turn-reentry-loop

2026-07-29 15:34:13 +02:00

live_sessions.go

feat(tui): surface compaction cap in /context and sidebar

2026-07-23 18:31:52 +02:00

loop_steps_test.go

refactor(runtime): require context for runtime construction and title generators

2026-06-29 10:17:44 +02:00

loop_steps.go

fix(runtime): notify only for genuine user input waits

2026-08-20 15:34:08 +02:00

loop.go

fix(runtime): deliver StreamStopped with a bounded blocking send

2026-09-03 17:53:33 +00:00

message_queue.go

feat: add shell background job recall

2026-07-04 09:30:04 +00:00

model_hook.go

refactor: make toolsets and providers explicit

2026-06-20 12:27:49 +02:00

model_picker.go

feat: safely gate embedded skill commands

2026-09-01 13:14:37 +02:00

model_switcher_test.go

fix(models): unify gateway model discovery

2026-07-27 14:26:29 +02:00

model_switcher.go

feat: forward the encrypted agent config to the Docker models gateway

2026-09-04 11:16:08 +02:00

oauth_noninteractive_test.go

refactor(runtime): require context for runtime construction and title generators

2026-06-29 10:17:44 +02:00

observer_test.go

Merge pull request #3288 from dgageot/worktree-board-f22a7d0fabad4f46

2026-06-29 11:03:56 +02:00

observer.go

refactor(runtime): trim observer + approval-source ceremony

2026-04-28 09:47:03 +02:00

on_agent_switch_test.go

refactor(runtime): require context for runtime construction and title generators

2026-06-29 10:17:44 +02:00

on_session_resume_test.go

refactor(runtime): require context for runtime construction and title generators

2026-06-29 10:17:44 +02:00

on_tool_approval_decision_test.go

feat: three-mode safety policy (strict / balanced / autonomous) with native shell classification

2026-07-27 10:10:48 +02:00

on_user_input_test.go

fix(runtime): notify only for genuine user input waits

2026-08-20 15:34:08 +02:00

ontoolschanged_race_test.go

fix(runtime): guard onToolsChanged with toolsChangedMu like onBackgroundEvent (#3594)

2026-07-11 18:28:46 +02:00

overflow_compaction_test.go

refactor(runtime): require context for runtime construction and title generators

2026-06-29 10:17:44 +02:00

pause_test.go

test: address review feedback on sleep-free synchronization

2026-07-02 01:06:11 +02:00

pause.go

feat(tui): show pausing/paused state for /pause

2026-06-17 15:48:13 +02:00

payload_test.go

fix(runtime): drop omitempty on CreateSessionRequest booleans

2026-05-11 11:42:31 +02:00

payload.go

feat(config): add YAML safety mode defaults

2026-07-28 15:35:55 +02:00

persistence_observer_error_test.go

enable t.Parallel() across the test suite, drop the TestParallel lint cop

2026-06-30 16:17:13 +02:00

persistence_observer_summary_test.go

fix: attribute compaction summary costs to the model that generated them

2026-07-20 13:32:57 +02:00

persistence_observer.go

Persist compaction state atomically

2026-08-27 12:23:40 +02:00

plan_events_test.go

fix(plans): harden host plan management

2026-07-28 21:38:07 +02:00

pre_tool_use_approval_test.go

refactor(tools): replace context-smuggled emitters with explicit tools.Runtime handle

2026-07-04 09:37:25 +00:00

rag.go

refactor(runtime): thread context through Runtime interface methods

2026-06-29 10:16:55 +02:00

remote_client.go

refactor: address review feedback on compaction cost attribution

2026-07-20 13:46:59 +02:00

remote_contract_test.go

refactor: address review feedback on compaction cost attribution

2026-07-20 13:46:59 +02:00

remote_runtime_test.go

fix(runtime): decode remote MCP prompts instead of type-asserting

2026-07-21 16:17:27 +02:00

remote_runtime.go

Persist compaction state atomically

2026-08-27 12:23:40 +02:00

restart_test.go

feat: foundation for hot-reload + /toolset-restart slash command

2026-04-28 18:23:42 +02:00

resume_test.go

feat: three-mode safety policy (strict / balanced / autonomous) with native shell classification

2026-07-27 10:10:48 +02:00

resume.go

feat: three-mode safety policy (strict / balanced / autonomous) with native shell classification

2026-07-27 10:10:48 +02:00

runtime_response_api_test.go

enable t.Parallel() across the test suite, drop the TestParallel lint cop

2026-06-30 16:17:13 +02:00

runtime_test.go

feat: safely gate embedded skill commands

2026-09-01 13:14:37 +02:00

runtime.go

Merge pull request #4153 from docker/fix/4136-bounded-stream-stopped-delivery

2026-09-04 08:59:52 +02:00

sampling_test.go

Merge remote-tracking branch 'origin/main' into sampling-tools

2026-07-08 14:32:07 +02:00

sampling.go

Merge remote-tracking branch 'origin/main' into sampling-tools

2026-07-08 14:32:07 +02:00

session_compaction_test.go

Persist compaction state atomically

2026-08-27 12:23:40 +02:00

session_compaction.go

Persist compaction state atomically

2026-08-27 12:23:40 +02:00

session_messages_race_test.go

fix(runtime): route hot-path Messages reads through locked accessors

2026-07-11 17:55:43 +02:00

sessioncontext_handlers.go

feat: safely gate embedded skill commands

2026-09-01 13:14:37 +02:00

sessionplan_handlers.go

feat: safely gate embedded skill commands

2026-09-01 13:14:37 +02:00

skill_runner_test.go

feat: safely gate embedded skill commands

2026-09-01 13:14:37 +02:00

skill_runner.go

feat: safely gate embedded skill commands

2026-09-01 13:14:37 +02:00

startupinfo_race_test.go

fix(runtime): make startupInfoEmitted an atomic.Bool guarded by CAS (#3593)

2026-07-11 18:30:06 +02:00

stream_stopped_delivery_test.go

fix(runtime): deliver StreamStopped with a bounded blocking send

2026-09-03 17:53:33 +00:00

streaming_test.go

fix(runtime): stop content-only turns that end with a bare EOF

2026-07-29 15:23:40 +02:00

streaming.go

fix(runtime): address Sayt-0 review: tool-call turns for boundary coverage, rename stoppedNoToolCalls

2026-07-29 15:23:40 +02:00

strip_modalities.go

refactor: introduce modelsdev.ID for provider-qualified model identity

2026-05-12 12:17:32 +02:00

structured_output_test.go

feat: add tool-based structured output mode

2026-08-12 15:42:26 +02:00

structured_output.go

fix: resolve golangci-lint v2.13.1 / gofumpt v0.11.0 findings after linter bump

2026-08-23 09:35:55 +00:00

telemetry_test.go

refactor(runtime): require context for runtime construction and title generators

2026-06-29 10:17:44 +02:00

telemetry.go

refactor(runtime): introduce Telemetry interface for testable observability

2026-04-27 18:54:21 +02:00

tool_dispatch.go

feat: safely gate embedded skill commands

2026-09-01 13:14:37 +02:00

toolsetstatus_test.go

feat(tools): non-blocking StartableToolSet status check (#4073)

2026-09-03 22:29:18 +00:00

transforms_test.go

refactor(runtime): require context for runtime construction and title generators

2026-06-29 10:17:44 +02:00

transforms.go

refactor(logging): pass context to all slog calls for correlation

2026-05-06 16:42:35 +03:00

turn_end_test.go

refactor(tools): replace context-smuggled emitters with explicit tools.Runtime handle

2026-07-04 09:37:25 +00:00

user_prompt_submit_test.go

refactor(runtime): require context for runtime construction and title generators

2026-06-29 10:17:44 +02:00

with_agent_model_test.go

refactor: introduce modelsdev.ID for provider-qualified model identity

2026-05-12 12:17:32 +02:00

xml_tool_calls_test.go

enable t.Parallel() across the test suite, drop the TestParallel lint cop

2026-06-30 16:17:13 +02:00

xml_tool_calls.go

parse XML tool calls

2026-05-09 19:04:38 +03:00