Repository navigation

feat(workflow): enforce scoped requirements and execution limits - #1303

Merged

SaulMoro merged 68 commits into

Tencent:mainfrom

nateEc:feat/1082-workflow-limits

Oct 24, 2026

Merged

feat(workflow): enforce scoped requirements and execution limits#1303
SaulMoro merged 68 commits into
Tencent:mainfrom
nateEc:feat/1082-workflow-limits

Commits on Oct 23, 2026
- feat(workflow): enforce scoped requirements and execution limits
  nateEc
  committed
  a42a1f0
- fix(workflow): enforce limits throughout preparation and persistence
  nateEc
  committed
  3160977
Commits on Oct 24, 2026
- Merge remote-tracking branch 'origin/main' into wip/1303-merge
  dev
  committed
  a1fcdf4
- fix(workflow): adapt requirements and limits to main's snapshot rules and tool guard
  dev
  committed
  5e2e901
- refactor(workflow): start #1082 over from main
  dev
  committed
  c8db102
- test(workflow): share the conformance interpreter between both runners
  dev
  committed
  89385cd
- feat(workflow): hold interactive steps for a driver with hitl
  dev
  committed
  96abce2
- feat(workflow): declare network and isolation with requires
  dev
  committed
  db777af
- feat(workflow): scope team env to the steps that require it
  dev
  committed
  43b1586
- feat(workflow): mask known secrets in run files, records, and envelopes
  dev
  committed
  3d85011
- feat(workflow): end steps and runs at their timeout
  dev
  committed
  9b65893
- feat(workflow): stop a workflow that spent its token budget
  dev
  committed
  04a8282
- feat(workflow): pass max_turns only to a driver that can cap turns
  dev
  committed
  3974235
- fix(workflow): leave fan-out items to their for_each step's deadline
  dev
  committed
  d58e014
- refactor(workflow): drop needless casts on budget and max_turns diagnostics
  dev
  committed
  7ac2385
- feat(workflow): run setup in each workspace a driver creates
  dev
  committed
  90b569e
- fix(workflow): stop staging and setup when the attempt is cancelled
  dev
  committed
  2655f61
- fix(workflow): give a reopened run a fresh timeout window
  dev
  committed
  e8b044c
- test(workflow): pin that a step staged past its timeout does not start
  dev
  committed
  08f32b8
- test(workflow): pin that a step cancelled during its checkout does not start
  dev
  committed
  2c3eba9
- docs(workflow): document requirements, setup, and limits
  dev
  committed
  84d6eae
- test(workflow): check requirements and limits through the real CLI
  dev
  committed
  423389f
- fix(workflow): mask secrets in the result file each attempt keeps
  dev
  committed
  d397c00
- docs(workflow): list every driver.can key in the next --json help
  dev
  committed
  c249e57
- Merge remote-tracking branch 'origin/main' into feat/1082-workflow-limits
  dev
  committed
  d8fcf74
- fix(workflow): count an interactive prompt's tokens as best effort under a budget
  dev
  committed
  e7007ca
- fix(workflow): mask every attempt result file when the local driver stops
  dev
  committed
  94c3749
- fix(workflow): keep an environment secret known when the team value differs
  dev
  committed
  cb94d2c
- fix(workflow): do not start setup stopped while it read the workspace
  dev
  committed
  1f72fa2
- fix(workflow): give a held hand-back's new copy a branch another driver can take
  dev
  committed
  42a3415
- fix(workflow): count a run's timeout and budget, and a workflow step's budget, from where they start
  dev
  committed
  bb38149
- fix(workflow): keep what a lease did not enforce when the engine stops it
  dev
  committed
  0e8f947
- fix(workflow): fail env_conflict only for a step env that shadows a secret or a required key
  dev
  committed
  4b777b4
- fix(workflow): count the tokens a stopped attempt's driver reports
  dev
  committed
  e9a2a6e
- fix(workflow): let a workflow spend exactly its token budget
  dev
  committed
  ab83dde
- fix(workflow): attach setup only to a lease that may create its workspace
  dev
  committed
  dd8477c
- fix(workflow): name workflows.allow in the reason a policy hold gives
  dev
  committed
  830e745
- fix(workflow): warn when masking cannot read the team's secret values
  dev
  committed
  2bd6bb3
- test(workflow): take the reconciliation digests that record a stopped lease's driver
  dev
  committed
  313dcf7
- refactor(workflow): resolve the team env once per workflow operation
  dev
  committed
  cdb4603
- refactor(workflow): move run deadlines and budgets into limits.ts
  dev
  committed
  5423a93
- refactor(workflow): move worktree snapshots into worktree-snapshot.ts
  dev
  committed
  fc7f07d
- refactor(workflow): give the limits scenarios and the conformance interpreter their own files
  dev
  committed
  dc8e1f5
- docs(workflow): say where the local driver masks attempt result files
  dev
  committed
  78003f8
- fix(workflow): stop setup at the step deadline for every caller
  dev
  committed
  bfb1070
- fix(workflow): run setup normally when the step deadline is beyond a timer's range
  dev
  committed
  285e0d9
- fix(workflow): decide setup and a held hand-back's copy from whether a step ran in it
  dev
  committed
  4512f27
- fix(workflow): mask the value of every key a run requires, whatever its name
  dev
  committed
  d97fa1f
- fix(workflow): keep masking a value the local driver saw after it changes mid-attempt
  dev
  committed
  acd9fe7
- fix(workflow): keep one ledger of stopped attempts for their late tokens
  dev
  committed
  fd3cd3e
- fix(workflow): mask attempt result files even when the driver's cleanup throws
  dev
  committed
  e94c16f
- refactor(workflow): pass the command's resolved secrets to start and the run controls
  dev
  committed
  4bde95c
- refactor(workflow): give conformance runners one scenario list
  dev
  committed
  990c833
- Merge remote-tracking branch 'origin/main' into feat/1082-workflow-limits
  dev
  committed
  008f00e
- fix(workflow): mask the values the team declares secret, not every required value
  dev
  committed
  693c065
- fix(workflow): carry setup on every lease of a copy and let the driver decide
  dev
  committed
  3f82d2b
- fix(workflow): keep a copy's owner while the owner still holds a lease in it
  dev
  committed
  010b321
- refactor(workflow): stop passing the run's secrets back to withRun's operation
  dev
  committed
  c395a30
- fix(workflow): 在进程组退出后及时结束停止等待
   nateEc
  committed
  0a17b96
- fix(workflow): record attempts a hand-back stops in the stopped-attempts ledger
  dev
  committed
  3a1386a
- test(workflow): hold a hand-back while the owner's other lease in the copy still runs
  dev
  committed
  7fee3ab
- fix(workflow): 遮蔽 JSON 键名及被覆盖的个人秘密
   nateEc
  committed
  c474193
- Merge remote-tracking branch 'nateec/feat/1082-workflow-limits' into wip/1303-r3
  dev
  committed
  d2a3c16
- test(workflow): keep a lease whose checkout path is the value of a required key
  dev
  committed
  fb5784a
- Merge remote-tracking branch 'origin/main' into wip/1303-r3
  dev
  committed
  f76ff20
- Merge remote-tracking branch 'origin/main' into wip/1303-r3
  SaulMoro
  committed
  654028f
- fix(workflow): spend a for_each step's budget over all its items
  SaulMoro
  committed
  13640f6
- fix(workflow): stop setup on a terminal Ctrl-C before the step starts
  SaulMoro
  committed
  1abe9c9

Commits

Commits on Oct 23, 2026

Commits on Oct 24, 2026