liuxinyang.lxy f861daba45 fix: harden agent command layer (render sanitize, nil-safety, arrays) ...

Review follow-up on the agent command tree. A batch of low-risk hardening
fixes; no behavior change for the shipped example provider.

- Terminal-injection: pretty/TSV renderers now sanitize the agent-controlled
  State / UpdatedAt / CreatedAt fields (kvValue on pretty rows, stripANSI on
  TSV), matching the id/summary/title fields — a malicious provider can no
  longer inject CSI/OSC escapes via a forged state or timestamp.
- Nil-safety: `task get --watch` and artifact download return a typed
  invalid_response error when a provider hook yields (nil, nil) (a legitimate
  Call[*T] result on an empty "data") instead of panicking; an artifact with
  neither inline bytes nor a URL no longer writes a 0-byte file.
- Array convention: task/context/agent list normalize a nil slice to [] so an
  empty list serializes as [] not null, matching Card.Parameters.
- Error hint: unknown-agent errors keep LookupSpec's scheme-scoped
  `agent list <scheme>` hint instead of being flattened to the generic one.
- agent list <scheme> (online path) sets the resolved identity on its
  envelope, consistent with the other leaves.
- Comment/doc drift: drop references to the removed Deps probe / Discoverer /
  ProviderInfo / resolveProvider symbols; rename Supports(cap) -> capKey.
- Tests: cross-agent isolation in the example store, empty-list [] contract,
  State/timestamp sanitization regression, and a real stdout assertion for
  context list --jq.

2026-07-09 12:59:53 +08:00

..

agent_test.go

feat: add provider-neutral agent command tree

2026-07-08 11:48:37 +08:00

agent.go

refactor: move agent providers to top-level agent/ package

2026-07-08 12:35:57 +08:00

card_test.go

feat: add provider-neutral agent command tree

2026-07-08 11:48:37 +08:00

card.go

refactor: inject a Runtime into provider hooks; declarative Provider/AgentSpec

2026-07-08 22:03:05 +08:00

common_test.go

feat: enrich task/context summaries for triage (updated_at, summary, active_task)

2026-07-08 23:59:41 +08:00

common.go

fix: harden agent command layer (render sanitize, nil-safety, arrays)

2026-07-09 12:59:53 +08:00

context_test.go

fix: harden agent command layer (render sanitize, nil-safety, arrays)

2026-07-09 12:59:53 +08:00

context.go

fix: harden agent command layer (render sanitize, nil-safety, arrays)

2026-07-09 12:59:53 +08:00

format_test.go

feat: enrich task/context summaries for triage (updated_at, summary, active_task)

2026-07-08 23:59:41 +08:00

format.go

fix: harden agent command layer (render sanitize, nil-safety, arrays)

2026-07-09 12:59:53 +08:00

list_test.go

refactor: inject a Runtime into provider hooks; declarative Provider/AgentSpec

2026-07-08 22:03:05 +08:00

list.go

fix: harden agent command layer (render sanitize, nil-safety, arrays)

2026-07-09 12:59:53 +08:00

next_contract_test.go

feat: add provider-neutral agent command tree

2026-07-08 11:48:37 +08:00

preflight_test.go

refactor: align agent scope preflight with event (bot + user)

2026-07-09 00:17:01 +08:00

preflight.go

fix: harden agent command layer (render sanitize, nil-safety, arrays)

2026-07-09 12:59:53 +08:00

register_test.go

refactor: inject a Runtime into provider hooks; declarative Provider/AgentSpec

2026-07-08 22:03:05 +08:00

runtime_test.go

refactor: typed Runtime.Call[T]/CallUpload[T] over raw data JSON

2026-07-09 00:36:29 +08:00

runtime.go

refactor: typed Runtime.Call[T]/CallUpload[T] over raw data JSON

2026-07-09 00:36:29 +08:00

scripted_provider_test.go

refactor: inject a Runtime into provider hooks; declarative Provider/AgentSpec

2026-07-08 22:03:05 +08:00

send_test.go

feat: add provider-neutral agent command tree

2026-07-08 11:48:37 +08:00

send.go

refactor: inject a Runtime into provider hooks; declarative Provider/AgentSpec

2026-07-08 22:03:05 +08:00

task_test.go

fix: harden agent command layer (render sanitize, nil-safety, arrays)

2026-07-09 12:59:53 +08:00

task.go

fix: harden agent command layer (render sanitize, nil-safety, arrays)

2026-07-09 12:59:53 +08:00

unsupported_test.go

feat: enrich task/context summaries for triage (updated_at, summary, active_task)

2026-07-08 23:59:41 +08:00