Skip to content

fix(T12106): verify warns when session-free; complete's session error names the remedy - #1204

Merged
kryptobaseddev merged 2 commits into
mainfrom
task/T12106-verify-no-session-warning
Aug 20, 2026
Merged

fix(T12106): verify warns when session-free; complete's session error names the remedy#1204
kryptobaseddev merged 2 commits into
mainfrom
task/T12106-verify-no-session-warning

Conversation

@kryptobaseddev

Copy link
Copy Markdown
Owner

Closes #1194cleo verify accepts evidence with no active session by design (T9505 crash-recovery re-attestation: the override-cap block explicitly falls back to a 'global' bucket for session-less callers), but nothing signalled that cleo complete would then refuse with E_CLEO_SESSION_REQUIRED. The reporter burned a cycle re-checking gate state, misreading a session problem as an evidence problem.

Kept verify session-free; fixed the signaling on both sides:

  • Verify side: warnIfNoActiveSession pushes a W_NO_ACTIVE_SESSION warning through the canonical envelope meta.warnings[] channel (stdout JSON stays pure) — strict-enforcement mode only, naming the remedy and that gates are preserved.
  • Complete side: requireActiveSession gained an optional remedy note; complete's error now names cleo session start and states recorded gates do not need re-verification — recovery is "start a session, re-run complete" (idempotent per T12102).

Verification (targeted only)

  • session-enforcement.test.ts 6/6 · gate-verify-no-session-warning.test.ts 3/3
  • Regression: gate-verify-hint + parent-matrix + sessions 27/27 · dispatch check.test 2/2
  • tsc --noEmit clean · biome clean

Task: T12106

kryptobaseddev and others added 2 commits August 19, 2026 18:36
… names the remedy

gh#1194: verify is session-free by design (T9505 crash-recovery
re-attestation), but nothing signalled that complete would refuse with
E_CLEO_SESSION_REQUIRED, so agents misread the failure as an evidence
problem. Verify now emits W_NO_ACTIVE_SESSION through the envelope
meta.warnings channel (stdout stays pure), and requireActiveSession
takes a remedy note — complete's error names 'cleo session start' and
states recorded gates are preserved and need no re-verification.

Closes #1194.
@kryptobaseddev
kryptobaseddev merged commit 7892ba5 into main Aug 20, 2026
76 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]:cleo complete requires an active session but cleo verify does not, so gates pass and completion fails misleadingly

1 participant