3 Commits

Include renames

Author	SHA1	Message	Date
dev_agentandClaude Opus 5.5	db0835342f	Bound ai_runs saves and redact every stored column ... - runOnce no longer saves with an unbounded context.WithoutCancel. Work that ended in time must write its row before the skill deadline; if the writer is not free by then the run fails with llm.ErrTimeout and its row records the timeout. A failed run's row is written within runSaveTimeout (5s); if that write fails too, the run returns both errors and no row is stored. A stored row's status now always matches what the caller received. The row ID is fixed per run, so a second save attempt can never add a second row. - skill, provider and model are redacted with the same redactor as the bodies; TestRunRowsHoldNoSecrets seeds the API key and a webhook URL into the model value. - guard_test: "row saved late" now expects a provider_error timeout row; new "writer blocked" case proves Run returns ErrTimeout within the bound and stores no row. - Purge doc and ARCHITECTURE: the daily purge is owned by Feature 20's scheduler, which must call harness.Purge. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-05 10:52:42 -04:00
dev_agent	a8b0c7894f	Concurrency guards: single-flight, semaphore and timeouts (#61) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-05 10:42:18 -04:00
dev_agent	87316d8b70	ai_runs logging, redaction and retention (#60) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-05 09:55:06 -04:00