feat: architecture hardening — agent contract, pricing truth, wizard engine, timeouts, MCP, verified updates - #57

Merged

hi-lei merged 19 commits into

mainfrom

feat/arch-hardening

Aug 9, 2026

Commits on Aug 9, 2026

fix(agent-mode): prompt safety net, --yes gates, prompt-error propagation
hi-lei
committed
2e21055
test(contract): hermetic black-box contract suite (mock API + agent-mode guarantees)
hi-lei
committed
2ecc63a
fix(vm): agent-mode create must not hang on default --wait
hi-lei
committed
16679db
fix(pricing): price_per_hour is a total; restore correct burn math
hi-lei
committed
1a0ce4c
fix(wizard): race-free bus, rewind guard, cancel sentinels, inline validation
hi-lei
committed
45e0f54
fix(http): drop client-level timeout; scope contexts to control plane
hi-lei
committed
e224c5f
fix(debug): redact form-encoded OAuth fallback + full secret key coverage
hi-lei
committed
7b00260
fix(registry): resolve source-registry credentials per host
hi-lei
committed
cd7e9cc
fix(mcp): init race, confirm gates, honest action semantics, strict args
hi-lei
committed
3fb5f68
fix(update): verify checksums fail-closed on self-update and installer
hi-lei
committed
6db023c
fix(vm): template/flags precedence, truthful wizard, delete-volume semantics
hi-lei
committed
f0cb18e
fix(objectstorage): resume adoption pins size of covered bytes
hi-lei
committed
29cb468
fix(options): env credentials must beat stored profile
hi-lei
committed
c366554
fix(cli): prompts honor IO streams; agent validation errors exit 2
hi-lei
committed
81b85ed
chore: doc drift, test tempdirs, CI pins
hi-lei
committed
86d656a
chore: green up CI security/lint lanes
hi-lei
committed
a091cf8
chore: annotate remaining G204 launch sites for CI's pinned gosec
hi-lei
committed
228f689
docs(skills): sync runbooks with hardening behavior changes; manifest 1.1.0
hi-lei
committed
1df3286
feat(skills): install targets for Kimi Code, OpenCode, Pi
hi-lei
committed
87c0dbf

Navigation Menu

Uh oh!

feat: architecture hardening — agent contract, pricing truth, wizard engine, timeouts, MCP, verified updates - #57

feat: architecture hardening — agent contract, pricing truth, wizard engine, timeouts, MCP, verified updates#57
hi-lei merged 19 commits into
mainfrom
feat/arch-hardening

Commits on Aug 9, 2026

fix(agent-mode): prompt safety net, --yes gates, prompt-error propagation

test(contract): hermetic black-box contract suite (mock API + agent-mode guarantees)

fix(vm): agent-mode create must not hang on default --wait

fix(pricing): price_per_hour is a total; restore correct burn math

fix(wizard): race-free bus, rewind guard, cancel sentinels, inline validation

fix(http): drop client-level timeout; scope contexts to control plane

fix(debug): redact form-encoded OAuth fallback + full secret key coverage

fix(registry): resolve source-registry credentials per host

fix(mcp): init race, confirm gates, honest action semantics, strict args

fix(update): verify checksums fail-closed on self-update and installer

fix(vm): template/flags precedence, truthful wizard, delete-volume semantics

fix(objectstorage): resume adoption pins size of covered bytes

fix(options): env credentials must beat stored profile

fix(cli): prompts honor IO streams; agent validation errors exit 2

chore: doc drift, test tempdirs, CI pins

chore: green up CI security/lint lanes

chore: annotate remaining G204 launch sites for CI's pinned gosec

docs(skills): sync runbooks with hardening behavior changes; manifest 1.1.0

feat(skills): install targets for Kimi Code, OpenCode, Pi