- Rules first in logging.md: R1-R12 plus a 27-event registry, every
site validated against the source before implementation.
- DebugLog: file/stdout/stderr sinks, sentence/json formats,
wipe-on-first-write for roots, append for TAI_CHILD, per-row
commit, prune to 20000 rows, never raises.
- Vault logs table with six indexes plus FTS triggers, sealed at
rest, read back through Store.log_query.
- Hooks: turns, completions (backend, model, ms, tokens, texts),
tool dispatch, approvals, vault mutations, scheduler, serve,
CAP turns, telegram updates, uncaught exceptions.
- Secrets never logged: redact plus LOG_MASKED_ARGS.
- 13 new tests (1222 + 16 green).
- Plexer: always-active terminal multiplexing. NativePlexerController/
TmuxPlexerController share one interface, chosen by which env var is
already set (TAI_PLEXER_SOCKET vs TMUX_PANE); NativePlexerBackend is
the pty.fork()-based wrapper (raw mode, SIGWINCH resize forwarding,
a Unix-socket control protocol, continuous session logging, a
Ctrl+A prefix key distinct from tmux's own Ctrl+B). Auto-wraps new
interactive shells via a .bashrc hook mirroring the existing
command-not-found install pattern, gated on $TMUX/$TAI_PLEXER_ACTIVE/
a $HOME/.tai-no-plexer bypass. New plexer_send/read/type/status
tools, env-gated on a detected controller.
- tests/container.py + docker-compose.yml + tests/docker/Dockerfile:
a disposable podman/docker image for the tests that must never touch
a real machine (installing the plexer hook into a real ~/.bashrc, a
live tmux session). Required suite (test_seal.py, test_tai.py,
tests/plexer.py, tests/bashrc.py) gates the result; tests/rag.py
runs as best-effort since its real-LLM dependency can't be satisfied
inside a disposable container with no nested engine.
- tests/bashrc.py: real end-to-end hook install + bash -i auto-wrap,
anti-recursion, tmux-active skip, non-interactive skip, a live
TmuxPlexerController test, and an install/uninstall round-trip.
- tests/plexer.py: NativePlexerBackend under a real pty, plus a
dedicated robustness pass (file permissions, >64KB payload framing,
a malformed control request, a genuine self-deadlock fix in the
write-to-child path).
- tai_test.py: the shared async process-driving framework (pipe/pty
transport, group-wide kill-and-reap, a StdinBridge for --interactive)
both test files build on.
- ChatClient last-resort backend: when there's no local opencode CLI
but the sandbox box is already running, install opencode into it
(official Node tarball, not apt -- apt's nodejs/npm pull in
webpack/babel/jest as transitive deps) and route through it instead
of giving up. Only reachable after the first retry round already
failed everything else; never creates the box itself. TmuxPlexerController.status()
fixed to use `list-panes` instead of `display-message -p`, which
silently fell back to the default pane instead of erroring against
a dead target.
- Fix 4 pre-existing test_tai.py bugs surfaced by running it in a
clean environment for the first time: two stale mock signatures
(subprocess.run's stdout= kwarg, Chat.complete's deadline= kwarg),
one $TMUX-dependent catalog assertion, one tty-dependent color
assertion.
- research/: a sourced research archive (Source Dossier/Citation
Card/Conclusion tiers) backing the above design decisions, with its
own audit.py consistency checker.
- .gitignore: fix a blanket *.md rule that was about to silently drop
the entire research/ archive from version control; add __pycache__/
and the one-off debug transcript this session started from.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
retoor
