feat(sandbox): name credential failures, retry lost refresh races, and start every candidate fresh - #72

Open

KE7 wants to merge 22 commits into

mainfrom

feat/per-candidate-agent-state

Commits on Aug 26, 2026

feat(sandbox): give each candidate its own agent-CLI state

KE7
and
claude
committed
10bee38
feat(evolution): warm the shared credential once per generation, and name credential failures
KE7
committed
3af85bd

Commits on Sep 10, 2026

fix(merge): route a credential failure through the merge gate the way mutate() does

KE7
and
claude
committed
18a19fb
fix(sandbox): bound the per-generation credential warm and stop its container on timeout

KE7
and
claude
committed
c69ff7c
fix(mutator): retry once on a lost refresh race instead of reporting a dead login

KE7
and
claude
committed
0f66bc7
fix(sandbox): create the per-candidate agent-state tree mode 0700

KE7
and
claude
committed
ac9da92
test: deselect docker_integration tests from a bare pytest run

KE7
and
claude
committed
18fd2a0

Commits on Sep 11, 2026

Merge origin/main into feat/per-candidate-agent-state

Karim Elmaaroufi
and
claude
committed
5556dbd
Cover the agy backend in per-candidate agent state and credential warm

Karim Elmaaroufi
and
claude
committed
fb59a13
Drop per-candidate agent state relocation

Karim Elmaaroufi
and
claude
committed
9a84db4
Start every candidate with a fresh agent session

Karim Elmaaroufi
and
claude
committed
b046fd2
sandbox: create the per-candidate OpenCode state dir in the workspace copy

Karim Elmaaroufi
and
claude
committed
eda879f
mutator: read credential failures from structured events; retry a lost race from a fresh worktree

Karim Elmaaroufi
and
claude
committed
586e6b3
backends: run auth commands with sh -c, not a login shell

Karim Elmaaroufi
and
claude
committed
3469217
sandbox: verify the codex credential is fresh after the warm; pass operator env to the warm

Karim Elmaaroufi
and
claude
committed
c5cc056
evolution: gate the warm on concurrency, escape container output, one credential diagnosis per site

Karim Elmaaroufi
and
claude
committed
a6c6794
docs: soften the fresh-session and warm claims

Karim Elmaaroufi
and
claude
committed
587b758
refactor(sandbox): drop the per-generation credential warm

Karim Elmaaroufi
and
claude
committed
a174eaf
feat(cli): bound the non-interactive sandbox auth probes

Karim Elmaaroufi
and
claude
committed
ca43dc2
Merge origin/main into feat/per-candidate-agent-state

Karim Elmaaroufi
and
claude
committed
34ee4fc
fix(mutator): read a rate limit from the backend, not the transcript

Karim Elmaaroufi
and
claude
committed
afa7acd
fix(budget): charge a lost refresh race's wasted spend under its own source

Karim Elmaaroufi
and
claude
committed
bd4c734