Skip to content

fix: preserve child routing and restore nested resume credentials - #340

Merged
Brian Krabach (bkrabach) merged 6 commits into
mainfrom
fix/session-warning-cleanup
Sep 11, 2026
Merged

Brian Krabach (bkrabach) merged 6 commits into
mainfrom
fix/session-warning-cleanup

Conversation

@bkrabach

Copy link
Copy Markdown
Collaborator

What changed

Preserves child routing and restores nested resume credentials across the full resume chain:

  • preserves child routing provenance and routing mappings
  • refreshes mapping-shaped nested secrets safely
  • restores credentials without leaking identity data
  • keeps missing-provider diagnostics quiet and actionable

The lockfile also pins released amplifier-core 1.6.1 and merged amplifier-foundation commit e210edabd947af82d5121a240d6934283ac540b9.

Dependency

Foundation PR #386 is merged as e210edabd947af82d5121a240d6934283ac540b9:
microsoft/amplifier-foundation#386

The core patch is explicitly excluded; this branch targets PyPI amplifier-core 1.6.1.

Evidence

  • New released-core DTU CLI evidence: 2279 passed, 4 skipped, 13 deselected, 1 xfailed.
  • POSIX seam evidence: 13 passed.
  • Real cold-resume, credential-restoration, and role-pin seam checks pass.
  • No real API wire claim is made.
  • Fresh lockfile CI is pending; results will be reported against the pushed commit.

Scope notes

Existing PRs #232 and #233 may overlap. This PR does not claim to supersede either one; neither is being closed.

Breaking changes

None expected.

Canonicalize effective caller preferences before child mounts, retain caller provenance across cold resumes, and restore only redacted nested secret leaves from matching live settings. Consume Foundation resolution diagnostics when available so fallback reporting is singular and truthful.

Generated with Amplifier

Co-Authored-By: Amplifier <240397093+microsoft-amplifier@users.noreply.github.com>
Prove a no-parent cold resume preserves a persisted concrete Anthropic Sonnet model when its caller preference is a matching glob, with no fallback event or unresolved-preference warning.

Generated with Amplifier

Co-Authored-By: Amplifier <240397093+microsoft-amplifier@users.noreply.github.com>
Add safe preference warnings and honest legacy diagnostics, match secret refreshes by stable identity, and cover the cold-resume regression.

Generated with Amplifier

Co-Authored-By: Amplifier <240397093+microsoft-amplifier@users.noreply.github.com>
Generated with Amplifier

Co-Authored-By: Amplifier <240397093+microsoft-amplifier@users.noreply.github.com>
Generated with Amplifier

Co-Authored-By: Amplifier <240397093+microsoft-amplifier@users.noreply.github.com>
Generated with Amplifier

Co-Authored-By: Amplifier <240397093+microsoft-amplifier@users.noreply.github.com>
@bkrabach
Brian Krabach (bkrabach) merged commit 5050b75 into main Sep 11, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants