fix: self-test findings across adapters, engine, graph, commands and handoff - #5

Merged

datj9 merged 39 commits into

mainfrom

fix/self-test-findings

Aug 26, 2026

Commits on Aug 23, 2026

fix(adapters): kill the process group so timeoutSec actually aborts a run

datj9
and
claude
committed
f002e08
fix(adapters): abort agent runs at the timeout, name a missing binary, clamp costs

datj9
and
claude
committed
f5bfb9d
fix: catch the auth-header, .netrc and auth.json shapes the scanner missed

datj9
and
claude
committed
c811511
fix(graph): reject adapter on command and human nodes

datj9
and
claude
committed
8776e78
fix(codex): fail a verifier whose sandbox is broken, and validate the sandbox env

datj9
and
claude
committed
1927463
fix(resume): reject --answer for unknown or non-paused node ids

datj9
and
claude
committed
5d54914
fix: treat a bare `key` assignment as a credential

datj9
and
claude
committed
e001823
fix(graph): reject unknown template node references at validate time

datj9
and
claude
committed
fb84b9d
fix: make the assignment rule linear and stop it firing on prose

datj9
and
claude
committed
f65f410
fix(engine): L4 match verifier pass string on word boundaries
datj9
committed
f370042
fix: rewrite the machine hostname out of a handoff bundle

datj9
and
claude
committed
a433872
fix(report): publish only the report, not its parent directory

datj9
and
claude
committed
2377004
fix(budget): H3 make the three ceilings exclusive
datj9
committed
53d6c15
fix(engine): C2 gate the node-run ceiling before every dispatch
datj9
committed
8b8f388
fix(report): validate --visibility at runtime, not just in the type

datj9
and
claude
committed
568d2dd
fix(engine): C2 budget-check every retry attempt
datj9
committed
6b82da5
fix(report): declare charset and language in the report HTML

datj9
and
claude
committed
bbe7b3a
fix(engine): M2 fail the run when a template reference cannot be resolved
datj9
committed
25b4fbf
fix(engine): M5 interpolate a human node's question
datj9
committed
bf27ea1
fix(events): reject an unknown --kind instead of printing nothing

datj9
and
claude
committed
92270fa
test(engine): M4 pin cumulative node runs and spend across a resume
datj9
committed
b302e67
fix(handoff): make files.txt repo-relative only, and never drop silently

datj9
and
claude
committed
87abd90
fix(handoff): exit 1 when push cannot find the bundle directory

datj9
and
claude
committed
95c65b6
fix(handoff): validate --expires as a real date, not just a shape

datj9
and
claude
committed
3fa7200
docs: match the README to the fixes the other slices landed

datj9
and
claude
committed
078465b
Merge branch 's2-budget-engine' into fix/self-test-findings
datj9
committed
1075b90
Merge branch 'worktree-agent-a64700a37af50f2df' into fix/self-test-findings
datj9
committed
b04018f
Merge branch 's4-graph-validation' into fix/self-test-findings
datj9
committed
d4ef5a7
Merge branch 'worktree-agent-a816f0becffdc8c37' into fix/self-test-findings
datj9
committed
4c7682e
Merge branch 'worktree-agent-a8b1b2acee9ce8e06' into fix/self-test-findings
datj9
committed
80d9a67
fix(handoff): wire the machine hostname through redaction so the rewrite is not inert
datj9
committed
8669e3c
fix(handoff): close three credential-scan bypasses

datj9
and
claude
committed
b28774c
fix(handoff): redact the metadata block, not just the session

datj9
and
claude
committed
046a4e8
fix(adapters): stop orphaning agent CLIs, and force-kill a stubborn group

datj9
and
claude
committed
df263ea
fix(core): make the node-run ceiling hold across a concurrent batch

datj9
and
claude
committed
2af3e1e
fix(engine): stop a budget stop from burying a genuine node failure

datj9
and
claude
committed
dc7f7d9
fix(handoff): bound the url-credentials scheme so a long hyphen run cannot stall the scan

datj9
and
claude
committed
3e60c13
fix(handoff): let the scan check for the identity it just redacted

datj9
and
claude
committed
3a5b6de

Commits on Aug 26, 2026

test(handoff): bound the hostname assertion so a single-label host cannot self-collide
datj9
committed
82e2e9e