Leo Zhang b6debb4382 fix(agent): close remaining internal-context leak paths (#59649) ...

* fix(status): strip internal runtime context from task detail surfaces

* fix(agent): narrow legacy internal-context stripping

* fix(tasks): sanitize user-facing task status surfaces

* fix(agent): close remaining internal-context leak paths

* fix(agent): harden internal context delimiter sanitization

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>

2026-04-02 23:45:06 +09:00

..

commands-acp

fix(agent): close remaining internal-context leak paths (#59649)

2026-04-02 23:45:06 +09:00

commands-subagents

fix(agent): close remaining internal-context leak paths (#59649)

2026-04-02 23:45:06 +09:00

exec

fix(exec): default implicit target to auto

2026-03-30 06:03:08 +09:00

export-html

…

queue

fix: queue model switches behind busy runs

2026-04-01 16:14:10 +09:00

test-fixtures

…

abort-cutoff.runtime.ts

…

abort-cutoff.ts

…

abort-primitives.ts

…

abort.runtime.ts

…

abort.test.ts

…

abort.ts

…

acp-projector.test.ts

…

acp-projector.ts

…

acp-reset-target.ts

…

acp-stream-settings.test.ts

…

acp-stream-settings.ts

…

agent-runner-auth-profile.ts

…

agent-runner-execution.runtime.ts

…

agent-runner-execution.test.ts

feat: add agents.defaults.compaction.notifyUser config option (default: false) [Fix #54249] (#54251)

2026-04-01 12:29:17 -07:00

agent-runner-execution.ts

feat: add agents.defaults.compaction.notifyUser config option (default: false) [Fix #54249] (#54251)

2026-04-01 12:29:17 -07:00

agent-runner-helpers.test.ts

…

agent-runner-helpers.ts

…

agent-runner-memory.dedup.test.ts

…

agent-runner-memory.runtime.ts

…

agent-runner-memory.ts

fix(agents): fail closed on silent turns (#52593)

2026-03-29 17:40:20 +09:00

agent-runner-payloads.test.ts

fix(agents): fail closed on silent turns (#52593)

2026-03-29 17:40:20 +09:00

agent-runner-payloads.ts

fix(agents): fail closed on silent turns (#52593)

2026-03-29 17:40:20 +09:00

agent-runner-reminder-guard.ts

…

agent-runner-usage-line.ts

…

agent-runner-utils.test.ts

Matrix: restore ordered progress delivery with explicit streaming modes (#59266)

2026-04-01 19:35:03 -04:00

agent-runner-utils.ts

refactor: add provider replay runtime hook surfaces (#59143)

2026-04-01 13:45:41 -07:00

agent-runner.media-paths.test.ts

…

agent-runner.misc.runreplyagent.test.ts

…

agent-runner.runreplyagent.e2e.test.ts

fix(agents): fail closed on silent turns (#52593)

2026-03-29 17:40:20 +09:00

agent-runner.runtime.ts

…

agent-runner.ts

fix(agents): fail closed on silent turns (#52593)

2026-03-29 17:40:20 +09:00

audio-tags.ts

…

auto-topic-label-config.ts

…

auto-topic-label.test.ts

…

auto-topic-label.ts

…

bash-command.stop.test.ts

Replace killProcessTree references to shell-utils with process/kill-tree (#55213)

2026-03-27 11:25:56 +00:00

bash-command.ts

Replace killProcessTree references to shell-utils with process/kill-tree (#55213)

2026-03-27 11:25:56 +00:00

block-reply-coalescer.ts

…

block-reply-pipeline.test.ts

…

block-reply-pipeline.ts

…

block-streaming.test.ts

…

block-streaming.ts

…

body.ts

…

btw-command.ts

…

channel-context.ts

…

command-gates.ts

…

commands-acp.test.ts

fix(agent): close remaining internal-context leak paths (#59649)

2026-04-02 23:45:06 +09:00

commands-acp.ts

…

commands-allowlist.ts

…

commands-approve.ts

Exec approvals: unify effective policy reporting and actions (#59283)

2026-04-01 22:02:39 -04:00

commands-bash.ts

…

commands-btw.test.ts

…

commands-btw.ts

…

commands-compact.ts

…

commands-config.ts

…

commands-context-report.test.ts

fix: /context detail severely underestimates token count (#28391)

2026-04-01 12:11:08 -07:00

commands-context-report.ts

fix: /context detail severely underestimates token count (#28391)

2026-04-01 12:11:08 -07:00

commands-context.test.ts

…

commands-context.ts

…

commands-core.runtime.ts

…

commands-core.test.ts

fix(gateway): emit before_reset on session reset (#53872)

2026-04-01 12:46:53 -07:00

commands-core.ts

fix(gateway): emit before_reset on session reset (#53872)

2026-04-01 12:46:53 -07:00

commands-export-session.ts

…

commands-filesystem.test-support.ts

…

commands-handlers.runtime.ts

feat(tasks): add chat-native task board (#58828)

2026-04-01 16:48:36 +09:00

commands-info.tools.test.ts

…

commands-info.ts

…

commands-mcp.test.ts

…

commands-mcp.ts

…

commands-models.telegram.ts

refactor(channels): route core through registered plugin capabilities

2026-03-30 01:03:42 +01:00

commands-models.ts

refactor(channels): route core through registered plugin capabilities

2026-03-30 01:03:42 +01:00

commands-plugin.ts

fix: pass session identity to plugin commands (#59044)

2026-04-01 13:07:17 -07:00

commands-plugins.install.test.ts

…

commands-plugins.test.ts

…

commands-plugins.toggle.test.ts

feat(plugins): surface imported runtime state in status tooling (#59659)

2026-04-02 22:50:17 +09:00

commands-plugins.ts

feat(plugins): surface imported runtime state in status tooling (#59659)

2026-04-02 22:50:17 +09:00

commands-session-abort.ts

…

commands-session-lifecycle.test.ts

feat(matrix): thread-isolated sessions and per-chat-type threadReplies (#57995)

2026-03-30 22:45:32 -04:00

commands-session-store.ts

…

commands-session.ts

refactor(channels): route core through registered plugin capabilities

2026-03-30 01:03:42 +01:00

commands-setunset-standard.ts

…

commands-setunset.test.ts

…

commands-setunset.ts

…

commands-slash-parse.ts

…

commands-spawn.test-harness.ts

…

commands-status.runtime.ts

…

commands-status.test.ts

fix(agent): close remaining internal-context leak paths (#59649)

2026-04-02 23:45:06 +09:00

commands-status.thinking-default.test.ts

fix: use runtime model and per-agent thinking defaults in status (thanks @scoootscooob, @xaeon2026, @ysfbsf) (#55425)

2026-03-26 17:49:21 -07:00

commands-status.ts

fix: escalate to model fallback after rate-limit profile rotation cap (#58707)

2026-04-01 17:54:10 +09:00

commands-subagents-focus.test.ts

feat(matrix): thread-isolated sessions and per-chat-type threadReplies (#57995)

2026-03-30 22:45:32 -04:00

commands-subagents-spawn.test.ts

…

commands-subagents.test-mocks.ts

test: finish reply seam cleanup

2026-03-27 16:22:27 +00:00

commands-subagents.ts

…

commands-system-prompt.test.ts

refactor: route plugin runtime through bundled seams

2026-03-27 16:40:27 +00:00

commands-system-prompt.ts

…

commands-tasks.test.ts

fix(agent): close remaining internal-context leak paths (#59649)

2026-04-02 23:45:06 +09:00

commands-tasks.ts

fix(agent): close remaining internal-context leak paths (#59649)

2026-04-02 23:45:06 +09:00

commands-tts.test.ts

feat(tts): add structured provider diagnostics and fallback attempt analytics (#57954)

2026-03-30 22:55:28 -05:00

commands-tts.ts

feat(tts): add structured provider diagnostics and fallback attempt analytics (#57954)

2026-03-30 22:55:28 -05:00

commands-types.ts

…

commands.runtime.ts

…

commands.test-harness.ts

…

commands.test.ts

fix(agent): close remaining internal-context leak paths (#59649)

2026-04-02 23:45:06 +09:00

commands.ts

…

config-commands.ts

…

config-value.ts

…

config-write-authorization.ts

…

conversation-binding-input.ts

refactor(acp): extract generic current conversation binding store

2026-03-28 05:53:07 +00:00

debug-commands.ts

…

directive-handling.auth-profile.ts

…

directive-handling.auth.test.ts

…

directive-handling.auth.ts

…

directive-handling.defaults.ts

…

directive-handling.fast-lane.ts

…

directive-handling.impl.ts

fix: queue model switches behind busy runs

2026-04-01 16:14:10 +09:00

directive-handling.levels.test.ts

…

directive-handling.levels.ts

…

directive-handling.model-picker.test.ts

fix(regression): normalize model picker provider endpoint aliases

2026-03-27 22:01:39 -05:00

directive-handling.model-picker.ts

fix(regression): normalize model picker provider endpoint aliases

2026-03-27 22:01:39 -05:00

directive-handling.model-selection.ts

…

directive-handling.model.test.ts

fix: queue model switches behind busy runs

2026-04-01 16:14:10 +09:00

directive-handling.model.ts

refactor(channels): route core through registered plugin capabilities

2026-03-30 01:03:42 +01:00

directive-handling.params.ts

fix(regression): honor internal provider auth for directives

2026-03-27 16:15:09 -05:00

directive-handling.parse.ts

fix(exec): default implicit target to auto

2026-03-30 06:03:08 +09:00

directive-handling.persist.runtime.ts

…

directive-handling.persist.ts

fix(regression): honor internal provider auth for directives

2026-03-27 16:15:09 -05:00

directive-handling.queue-validation.ts

…

directive-handling.shared.ts

fix(regression): honor internal provider auth for directives

2026-03-27 16:15:09 -05:00

directive-handling.ts

…

directive-parsing.ts

…

directives.ts

…

discord-parent-channel.ts

…

dispatch-acp-delivery.test.ts

Gateway: track background task lifecycle (#52518)

2026-03-29 12:48:02 +02:00

dispatch-acp-delivery.ts

Gateway: track background task lifecycle (#52518)

2026-03-29 12:48:02 +02:00

dispatch-acp.runtime.ts

…

dispatch-acp.test.ts

reply: enforce ACP attachment roots (#57690)

2026-03-30 14:04:02 +01:00

dispatch-acp.ts

reply: enforce ACP attachment roots (#57690)

2026-03-30 14:04:02 +01:00

dispatch-from-config.test.ts

Matrix: keep partial previews aligned with block streaming (#59384)

2026-04-02 03:39:27 -04:00

dispatch-from-config.ts

Matrix: keep partial previews aligned with block streaming (#59384)

2026-04-02 03:39:27 -04:00

dispatcher-registry.ts

…

elevated-allowlist-matcher.ts

…

elevated-unavailable.ts

…

exec.ts

…

followup-runner.test.ts

fix: queue model switches behind busy runs

2026-04-01 16:14:10 +09:00

followup-runner.ts

…

get-reply-directives-apply.ts

fix(regression): honor internal provider auth for directives

2026-03-27 16:15:09 -05:00

get-reply-directives-utils.ts

…

get-reply-directives.ts

fix(auto-reply): thread per-agent tools.exec defaults into reply directives (#57689)

2026-03-30 16:46:54 +01:00

get-reply-from-config.runtime.ts

…

get-reply-inline-actions.skip-when-config-empty.test.ts

fix(reply): stop mention-wrapped status double replies

2026-04-01 06:32:34 +09:00

get-reply-inline-actions.ts

fix(reply): stop mention-wrapped status double replies

2026-04-01 06:32:34 +09:00

get-reply-run.media-only.test.ts

perf: optimize cold import paths

2026-03-26 23:11:00 +00:00

get-reply-run.ts

refactor: add provider replay runtime hook surfaces (#59143)

2026-04-01 13:45:41 -07:00

get-reply.before-agent-reply.test.ts

feat(plugins): add before_agent_reply hook (claiming pattern) (#20067)

2026-04-01 13:31:11 -07:00

get-reply.config-override.test.ts

…

get-reply.imports.test.ts

perf: optimize cold import paths

2026-03-26 23:11:00 +00:00

get-reply.message-hooks.test.ts

…

get-reply.reset-hooks-fallback.test.ts

…

get-reply.test-mocks.ts

perf: optimize cold import paths

2026-03-26 23:11:00 +00:00

get-reply.test-runtime-mocks.ts

…

get-reply.ts

feat(plugins): add before_agent_reply hook (claiming pattern) (#20067)

2026-04-01 13:31:11 -07:00

group-id.test.ts

fix: restore Telegram forum-topic routing (#56060) (thanks @one27001)

2026-03-31 10:18:09 +05:30

group-id.ts

fix: restore Telegram forum-topic routing (#56060) (thanks @one27001)

2026-03-31 10:18:09 +05:30

groups.runtime.ts

fix(plugin-sdk): narrow groups runtime discord seam (#59623)

2026-04-02 19:51:36 +09:00

groups.test.ts

perf: optimize cold import paths

2026-03-26 23:11:00 +00:00

groups.ts

perf: optimize cold import paths

2026-03-26 23:11:00 +00:00

history.ts

…

inbound-context.ts

…

inbound-dedupe.test.ts

…

inbound-dedupe.ts

…

inbound-meta.test.ts

feat(slack): add scoped prompts and mrkdwn hints (#59100)

2026-04-02 11:23:43 +09:00

inbound-meta.ts

feat(slack): add scoped prompts and mrkdwn hints (#59100)

2026-04-02 11:23:43 +09:00

inbound-text.ts

…

line-directives.ts

…

matrix-context.ts

…

mcp-commands.ts

…

memory-flush.ts

…

mentions.test.ts

…

mentions.ts

perf: optimize cold import paths

2026-03-26 23:11:00 +00:00

message-preprocess-hooks.test.ts

…

message-preprocess-hooks.ts

…

model-selection.test.ts

Fix: move bootstrap session grammar into plugin-owned session-key surfaces (#58400)

2026-03-31 19:41:01 -04:00

model-selection.ts

Fix: move bootstrap session grammar into plugin-owned session-key surfaces (#58400)

2026-03-31 19:41:01 -04:00

normalize-reply.ts

fix(auto-reply): suppress JSON-wrapped NO_REPLY payloads before channel delivery (#56612)

2026-03-28 22:07:24 +01:00

origin-routing.test.ts

…

origin-routing.ts

…

plugins-commands.ts

…

post-compaction-context.test.ts

…

post-compaction-context.ts

…

provider-dispatcher.ts

…

queue-policy.test.ts

…

queue-policy.ts

…

queue.ts

…

reply-delivery.test.ts

…

reply-delivery.ts

…

reply-directives.ts

fix(auto-reply): suppress JSON-wrapped NO_REPLY payloads before channel delivery (#56612)

2026-03-28 22:07:24 +01:00

reply-dispatcher.ts

infra: harden identifier entropy and delay jitter (#57744)

2026-03-30 16:57:30 +01:00

reply-elevated.test.ts

…

reply-elevated.ts

…

reply-flow.test.ts

infra: harden identifier entropy and delay jitter (#57744)

2026-03-30 16:57:30 +01:00

reply-inline-whitespace.test.ts

…

reply-inline-whitespace.ts

…

reply-inline.test.ts

…

reply-inline.ts

…

reply-media-paths.runtime.ts

…

reply-media-paths.test.ts

…

reply-media-paths.ts

…

reply-payloads-base.ts

…

reply-payloads-dedupe.runtime.ts

…

reply-payloads-dedupe.ts

…

reply-payloads.runtime.ts

…

reply-payloads.test.ts

…

reply-payloads.ts

…

reply-plumbing.test.ts

fix(agent): close remaining internal-context leak paths (#59649)

2026-04-02 23:45:06 +09:00

reply-reference.ts

…

reply-state.test.ts

…

reply-tags.ts

…

reply-threading.ts

…

reply-utils.test.ts

fix(exec): default implicit target to auto

2026-03-30 06:03:08 +09:00

reply.test-helpers.ts

…

response-prefix-template.ts

…

route-reply.runtime.ts

…

route-reply.test.ts

test: move extension-owned coverage into plugins

2026-03-27 15:11:33 +00:00

route-reply.ts

…

routing-policy.test.ts

Gateway: track background task lifecycle (#52518)

2026-03-29 12:48:02 +02:00

routing-policy.ts

Gateway: track background task lifecycle (#52518)

2026-03-29 12:48:02 +02:00

session-delivery.test.ts

…

session-delivery.ts

…

session-fork.runtime.ts

…

session-fork.ts

…

session-hooks-context.test.ts

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

session-hooks.ts

…

session-reset-model.runtime.ts

perf: optimize cold import paths

2026-03-26 23:11:00 +00:00

session-reset-model.test.ts

…

session-reset-model.ts

…

session-reset-prompt.test.ts

…

session-reset-prompt.ts

…

session-run-accounting.ts

…

session-system-events.ts

Gateway: harden node event trust boundaries (#57691)

2026-03-30 14:22:15 +01:00

session-updates.runtime.ts

…

session-updates.ts

…

session-usage.ts

…

session.heartbeat-no-reset.test.ts

fix(session): prevent heartbeat/cron/exec events from triggering session reset (#58605)

2026-03-31 21:10:24 -04:00

session.imports.test.ts

perf: optimize cold import paths

2026-03-26 23:11:00 +00:00

session.test.ts

Gateway: harden node event trust boundaries (#57691)

2026-03-30 14:22:15 +01:00

session.ts

fix(session): prevent heartbeat/cron/exec events from triggering session reset (#58605)

2026-03-31 21:10:24 -04:00

slack-directives.ts

style: apply formatter cleanups

2026-03-30 16:20:27 +01:00

stage-sandbox-media.runtime.ts

perf: optimize cold import paths

2026-03-26 23:11:00 +00:00

stage-sandbox-media.ts

…

streaming-directives.ts

…

strip-inbound-meta.test.ts

refactor: migrate more boundary parsing to zod

2026-03-27 05:07:50 +00:00

strip-inbound-meta.ts

refactor: migrate more boundary parsing to zod

2026-03-27 05:07:50 +00:00

subagents-utils.test.ts

…

subagents-utils.ts

fix(agent): close remaining internal-context leak paths (#59649)

2026-04-02 23:45:06 +09:00

telegram-context.test.ts

…

telegram-context.ts

refactor(channels): route core through registered plugin capabilities

2026-03-30 01:03:42 +01:00

test-ctx.ts

…

test-helpers.ts

…

typing-mode.ts

…

typing-persistence.test.ts

…

typing-policy.test.ts

…

typing-policy.ts

…

typing.ts

…

untrusted-context.ts

…

usage-cost.runtime.ts

…