Safety hardening: unsafe docs, async I/O, recursion and read budgets - #2

Closed

AdityaVG13 wants to merge 24 commits into

mainfrom

fix/safety-hardening

Commits on Sep 17, 2026

feat(tui): mode, status, session and file pickers navigate on the shared vocabulary (#6290 step 2)
CodeWhale Bot
committed
1ec7106
test(tui): provider health test records against the row's own route model
CodeWhale Bot
committed
341151f
fix(plugins): a marketplace catalog is its source, not the name an add happened to use
CodeWhale Bot
committed
751ea33
refactor(plugins): catalog entries carry their kind; skills never enter the plugin pool
CodeWhale Bot
committed
c191943
refactor(goal): the model decides goals; the host stops guessing from verb lists
CodeWhale Bot
committed
4de9e9e
refactor: delete three host-side semantic classifiers (determinism audit batch 1)
CodeWhale Bot
committed
b04713c
refactor(reasoning): auto tier is a declared default, not a prompt classification (determinism audit batch 2, #1)
CodeWhale Bot
committed
bf1b209
refactor(routing): Auto fallback is the declared default, not a content heuristic (determinism audit batch 2, #2)
CodeWhale Bot
committed
72b028e
refactor(goal): delete the natural-language /goal prose parser (determinism audit batch 2, #3)
CodeWhale Bot
committed
27ae676
refactor(plugins): delete the dead proactive score gate (determinism audit batch 2, #5)
CodeWhale Bot
committed
ff15f95
refactor(progress): footer keys off structured routine_wait, not message text (determinism audit batch 2, #9)
CodeWhale Bot
committed
ac070a0

Commits on Sep 18, 2026

feat(read): every read response carries size, truncated, line_count (#6283)
CodeWhale Bot
committed
f6fb5f4
refactor(subagent): move delivery git work off the manager write lock (#6210)
CodeWhale Bot
committed
3475d03
feat(runtime): cancel queued Agent Mail before delivery (#6176)
CodeWhale Bot
committed
6286136
refactor(tui): adopt the shared list_nav vocabulary in model/slash/fleet views (#6290)
CodeWhale Bot
committed
dc0b38e
perf(fleet): wake SSE streams on ledger append instead of 250ms polling (#6211 R7b)
CodeWhale Bot
committed
d1175fd
fix(review): too-large diffs degrade to a named partial review instead of failing closed (#6285)
CodeWhale Bot
committed
bb1c3a5
perf(client): decode Anthropic SSE straight into the tagged event enum (#6213 T7)
CodeWhale Bot
committed
24c97b9
perf(mcp): reap stdio children off-thread; authority checks leave the executor (#6211 R4/R7a)
CodeWhale Bot
committed
531cddb
docs(unsafe): add SAFETY contracts for undocumented unsafe blocks
AdityaVG13
committed
da17a5e
fix(async): use tokio::fs for blocking calls in async code
AdityaVG13
committed
d80a871
fix(resource): bound recursion in value walkers
AdityaVG13
committed
30b7d4a
docs(policy): establish lock-poison posture as fail-stop
AdityaVG13
committed
4bb01cb
fix(resource): budget unbounded file and stdin reads
AdityaVG13
committed
780e214