737 Commits
Author SHA1 Message Date
ciregenzandClaude Opus 5 0f2543db65 [eric] agents: a finished turn always leaves the user something to read
Every silent-stop fix so far was a detector for a shape somebody had already
found in the field, which is why the class kept coming back wearing a new hat.
turn_spoke.py moves the question down a tier: at the one exit every terminal
path passes through, ask whether anything readable appeared since the user last
spoke, and if not, say the honest line. Cause no longer has to be enumerated for
the user to be answered.

proactive_prune.py is the hermes trigger we were missing. Their own tests say
our bug out loud: on a large window, a percentage-of-window compaction check
almost never fires, so aged tool output rides in history and is re-sent verbatim
every turn. Measured here, our shaping cut 0.0% at every session size; with a
fixed 60K-token cost trigger it cuts 88% at 12 turns, 93% at 30, 94% at 60. The
prompt-cache contract is load-bearing rather than optional, because our prune is
a rebuild: it commits only when it reclaims enough to pay for the busted prefix,
then disarms until history has regrown a full runway.

Also: lane preflight now treats only 401/403 as a dead credential, since
testStatus=="unavailable" conflated a throttled lane with a revoked one and told
users to reconnect a merely rate-limited Gemini; and awaiting_reconnect is
cleared when the retry budget is spent, so a stale flag can no longer muzzle the
floor and end an ask in total silence.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014wtspwSFzZmjCx9UNPAorQ
2026-08-20 11:36:34 -07:00
ciregenzandClaude Opus 5 9a7570092f [eric] agents: never spend a turn on a lane the router gave up on, and stop our own retries stacking cards
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014wtspwSFzZmjCx9UNPAorQ
2026-08-20 09:20:46 -07:00
ciregenzandClaude Opus 5 58e376496e [eric] agents: an outage parks the turn and resumes when the provider answers; OAuth connects survive a backend restart
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014wtspwSFzZmjCx9UNPAorQ
2026-08-20 08:39:41 -07:00
ciregenzandClaude Opus 5 d5934b1da1 [eric] agents: no turn ends silent, and a codex 401 waits out the rotation window
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014wtspwSFzZmjCx9UNPAorQ
2026-08-20 07:21:00 -07:00
ciregenz 7a4af2c419 [eric] workflows: the restart-loop-guard pause notice called a nonexistent broadcast; it never reached the user (linter catch) 2026-08-19 17:24:23 -07:00
ciregenz 4be2f10d02 [eric] agents: every sub lane self-heals a mid-run token expiry before any card; codex retries wait out the rotation window instead of burning the one shot inside it 2026-08-19 17:24:23 -07:00
ciregenz cf7790ca3b [eric] agents: status flips to running BEFORE the user-message snapshot; a stale completed on disk hid follow-up-turn crashes from the boot detector (exp.19 drill catch) 2026-08-19 16:51:35 -07:00
ciregenz 455b8fa4d3 [eric] agents: MCP responses over the CLI's silent output ceiling get shrunk instead of dropped; a 340KB result line was written and never resolved, the lost-delegation class (ENG-327 root) 2026-08-19 16:43:38 -07:00
ciregenz cbfb8ea9b6 [eric] agents: the error path dispatches an armed self-heal continuation; the recap-free policy retry armed and then rotted because only the success path had a dispatcher (exp.19 drill catch) 2026-08-19 16:39:32 -07:00
ciregenz 7e3a98e315 [eric] agents: a turn cut off by a dirty exit auto-resumes at boot, gated by a consecutive-crash breaker; a clean Cmd+Q keeps the manual chip (hermes #30719 pairing) 2026-08-19 15:36:01 -07:00
ciregenz 8c482aa351 [eric] agents: the session recap moves to the SYSTEM channel; history-as-user-text was the anti-distillation filter's exact target shape and no rewording made it safe (ENG-358 structural fix) 2026-08-19 15:29:09 -07:00
ciregenz da3c1be6ca [eric] agents: the recap-free policy retry arms on ANY fresh-session recap, not just post-compaction; the packaged drill caught the gate firing never (ENG-358) 2026-08-19 15:10:51 -07:00
ciregenz 108287eda4 [eric] agents: provider content-policy blocks are terminal (no snag flicker), recap-bearing sessions get ONE recap-free retry, and the recap reads first-person instead of a User:/Assistant: transcript that trips distillation filters (Alex's bricked chats) 2026-08-19 14:07:29 -07:00
ciregenz 6a1dbc4212 [eric] agents: recap ages history hermes-style instead of dropping it; stubs keep the re-runnable command, duplicates collapse, newest results survive verbatim (ENG-354 endgame) 2026-08-19 13:40:47 -07:00
ciregenz 39d8da2697 [eric] agents: a vanishing quit (nothing persisted) on a session that already silent-quit is claimed and compacted; the poke-storm hole the one-for-one repro exposed (ENG-354) 2026-08-19 11:41:02 -07:00
ciregenz a66b0b0eaa [eric] agents: a REPEAT silent quit compacts from a 40% floor; Haik's opus-5 quits at ~149K, under the 180K trigger, so the band fix alone missed his storms (ENG-354) 2026-08-19 11:32:29 -07:00
ciregenz 8ae3f94d20 [eric] browser: fast path refuses multi-page sweeps (3+ URLs deterministic + classifier rule); a grabbed sweep answered INSUFFICIENT from one read (ENG-355) 2026-08-19 08:00:40 -07:00
ciregenz e6d05dfb1b [eric] agents: RunToolScript (PTC): scripts chain allowlisted tools in one turn and only printed output enters context (hermes code_execution lift, ENG-354 lever) 2026-08-18 23:41:38 -07:00
ciregenz 16b8f21177 [eric] agents: a silent quit at high context compacts history and goes fresh before the nudge; re-sending the bloat just burned a nudge (ENG-354) 2026-08-18 21:17:57 -07:00
ciregenz 4f3e68c7ac [eric] agents: the 25s unwedge verifies the sidecar is actually wedged (heartbeat file) before shooting it; alive-but-slow gets 120s (ENG-353) 2026-08-18 21:13:47 -07:00
ciregenz 123f71b8cb [eric] browser: RequestUserSignIn is a first-class tool; auth walls hand off to the user in place instead of killing the run (ENG-351) 2026-08-18 19:06:38 -07:00
ciregenz 82a9860eaa [eric] agents: pip installs stop no-oping (bundle PYTHONPATH shadow stripped from agent env) and agents self-serve deps instead of nagging (ENG-347) 2026-08-18 19:04:56 -07:00
ciregenz 182409c2ac [eric] agents: every git exec rides a non-prompting availability check; the CLT shim's install dialog fired at session start on clean Macs (ENG-344) 2026-08-18 19:04:56 -07:00
ciregenz ce2989ea1b [eric] agents: CanvasCommand lets an agent move, collapse, tile, tidy and close its own cards after spawn (ENG-334) 2026-08-17 16:04:21 -07:00
ciregenz d45e2b3731 [eric] browser: a failed navigation now fails loudly; a reused card that cannot move is replaced instead of answering from the old page 2026-08-17 15:48:49 -07:00
ciregenz 8185e3b52a [eric] browser: a hard login wall with nothing to borrow hands off to the user at the card and resumes itself when the wall clears (ENG-279) 2026-08-17 08:25:18 -07:00
ciregenz ced541997d [eric] agents: the unwedge watchdog runs on daemon threads, sealing the suite's flaky hang at interpreter exit 2026-08-16 22:20:46 -07:00
ciregenz ab4d7b2db7 [eric] streaming: stream frames stop riding the dashboard socket and the backgrounded chat batches to 1Hz (ENG-329) 2026-08-16 20:52:51 -07:00
ciregenz 69569c8079 [eric] agents: delegation watchdog only counts children born after its own tool call, ending the mid-run sidecar shootings (ENG-327) 2026-08-16 19:23:23 -07:00
ciregenz f92b920e4e [eric] agents: hidden harness messages self-identify, so a misfired nudge can never become 'the user told me to stop' (field report) 2026-08-16 18:49:50 -07:00
ciregenz 2d0fc643f1 [eric] browser: refusal and ghost runs clear the card's cached transcript instead of poisoning every later dispatch; CreateBrowserAgent gains fresh=true (Haik's report) 2026-08-16 18:22:34 -07:00
ciregenz b9afcae6ac [eric] router: a completed subscription connect bounces 9Router so its dispatch state rebuilds; new subs no longer dead until app restart (ENG-315) 2026-08-16 08:11:09 -07:00
ciregenz a81958acb9 [eric] agents: first expired-token failure heals itself (fresh CLI + one hidden retry); the reconnect banner is the second rung (ENG-294) 2026-08-16 02:06:33 -07:00
ciregenz 11784a9083 [eric] settings: the UPLOAD_DIR rename left the browser upload tool importing a deleted name; upload_dir()/legacy roots wired everywhere (ENG-312) 2026-08-16 01:53:48 -07:00
ciregenz 628fc5521a [eric] web: startpage leaves the keyless race; every endpoint now serves an Anubis wall to POST too, 0/22 answered (ENG-302) 2026-08-16 01:53:48 -07:00
ciregenz 92a05ad36a [eric] agents: stage-3 recovery ends a turn whose CLI never noticed the lost delegation result, then redoes the step 2026-08-15 23:45:43 -07:00
ciregenz 5ff16b47a5 [eric] agents: a delegated run whose result is lost recovers instead of hanging the parent forever 2026-08-15 23:38:32 -07:00
ciregenz 0f29b9a7bb [eric] agents: a session reaches disk the moment you send, so a backend death can no longer erase the conversation (ENG-313) 2026-08-15 22:13:52 -07:00
ciregenz 7853884d75 [eric] agents: a custom system prompt bites on the FIRST reply; it was delivered but buried mid-prompt and ignored 2026-08-15 20:48:12 -07:00
ciregenz 47ee5d72d5 [eric] settings: SettingsWrite gets a real switch, refused at the route so the toggle is a boundary not a label (ENG-284) 2026-08-14 23:13:12 -07:00
ciregenz 86e3df51c3 [eric] agents: a core MCP server that never connects rebuilds the session instead of leaving it toolless (ENG-303) 2026-08-14 17:35:27 -07:00
ciregenz c11df8eea3 [eric] agents: a frozen core tool recovers in 25s and the agent retries the step it lost 2026-08-14 17:03:53 -07:00
ciregenz d1244eaf8b [eric] agents: a QA base-url override seam so provider faults can be injected at the wire 2026-08-14 12:45:06 -07:00
ciregenz c4059b5469 [eric] agents: a frozen MCP sidecar gets unwedged after 75s so the CLI's own respawn heals it, blocking tools exempt (ENG-303) 2026-08-14 11:47:34 -07:00
ciregenz 156c6092a3 [eric] agents: an auth blip mid-run refreshes and resumes once instead of dying at the reconnect banner 2026-08-14 10:40:20 -07:00
ciregenz 60da51f3c9 [eric] browser: a run reports its call counts beside the prose, so a caller can check instead of trust (ENG-297) 2026-08-13 11:34:50 -07:00
ciregenz 223e1f547a [eric] browser: a summary built from faked tool-call markup fails instead of reaching the user (ENG-297) 2026-08-13 11:28:24 -07:00
ciregenz b161f19efe [eric] browser: reading cannot complete a task that asked for a change (ENG-297) 2026-08-13 11:19:50 -07:00
ciregenz 67f787e5c7 [eric] client-pool: seal the boot fingerprint against object identity, so a future opaque option cannot respawn every turn (ENG-179) 2026-08-13 04:07:14 -07:00
ciregenz 9f14a924dd [eric] agents: an agent is told how far behind its checkout is, so it stops diagnosing from a stale tree (ENG-280) 2026-08-13 02:28:43 -07:00