Repository navigation
Harden SQLite fail-closed reads, model families, and audit overrides - #52
Merged
Merged
Conversation
Map unreadable Codex databases to the existing UNSUPPORTED health state, fall back from state_5.sqlite to the newest state_*.sqlite, and derive Model dial families from models_cache.json. Patch the brace-expansion override and fast-uri so audits pass, and keep test:fast free of native helper spawns. Co-authored-by: Todd Dailey <twidtwid@users.noreply.github.com>
Keep Guardian sub-session SQL filtering from #51 together with the read-only open/query fail-safe and state_*.sqlite fallback. Co-authored-by: Todd Dailey <twidtwid@users.noreply.github.com>
twidtwid
marked this pull request as ready for review
October 8, 2026 13:28
twidtwid
added a commit
that referenced
this pull request
Oct 8, 2026
<!-- CURSOR_AGENT_PR_BODY_BEGIN --> ## Summary Prepare the v0.2.5 release from current `main` (`42f8ffe`), following the v0.2.4 version-bump pattern. No feature work in this PR. - Bump `0.2.4` → `0.2.5` in `package.json` and both top-level `package-lock.json` version fields - Bump plugin `manifest.json` `"Version"` to `"0.2.5.0"` (`SDKVersion` 3, Node.js 24, `MinimumVersion` 7.1 unchanged) - Fold the Unreleased notes from #51 (Guardian/subagent session filter) and #52 (SQLite fail-safe, model families, audit overrides) plus Dependabot bumps including `@elgato/streamdeck` 3.0.1 into `## 0.2.5 — 2026-10-08` This PR does not include Claude provider / draft PR #33 work. Do not merge from that beta line. Do not tag or create a GitHub Release here; tag after merge so `.github/workflows/release.yml` can pack and publish. ## Validation - [x] Linux-allowed `release:verify` subset: `audit:full`, `audit:production`, and `docs:check` (macOS-only native/`qa:design` steps skipped on Linux) - [x] `test:fast`, `build:bundle`, `streamdeck validate`, `generated:check` - [ ] Full `npm run check` on macOS CI - [x] Relevant connected-device checks, or an explanation of why they do not apply — version bump and changelog only; no device interaction - [x] No private data, credentials, proprietary Codex assets, or copied third-party source ## User impact - Agent Status and the native helper no longer show or try to resume Codex Guardian reviewer / subagent sub-sessions (reported by Paweł Lipkowski; fixes "cannot resume a live Guardian reviewer"). A user chat titled Guardian still shows. - Unreadable Codex SQLite state fails closed; Health and doctor report the store. - Model dial families come from the Codex models cache. - Stream Deck SDK 3.0.1 and security overrides (`brace-expansion`, `fast-uri`) ship with this release. - Install from the GitHub Release created when v0.2.5 is tagged after merge. <!-- CURSOR_AGENT_PR_BODY_END --> <div><a href="https://cursor.com/agents/bc-c9c04dac-37cf-56af-9592-63ee0b0b2bbf?cursor_ref=pr_footer&cursor_cta=open_in_web"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-web-light.png"><img alt="Open in Web" width="114" height="28" src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a> <a href="https://cursor.com/background-agent?bcId=bc-c9c04dac-37cf-56af-9592-63ee0b0b2bbf&cursor_ref=pr_footer&cursor_cta=open_in_cursor"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img alt="Open in Cursor" width="131" height="28" src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a> </div> Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: Todd Dailey <twidtwid@users.noreply.github.com>
![https://cursor.com/assets/images/open-in-web-dark.png"><source](https://cursor.com/assets/images/open-in-web-dark.png"><source){kind=link}
![https://cursor.com/assets/images/open-in-web-light.png"><img](https://cursor.com/assets/images/open-in-web-light.png"><img){kind=link}
![https://cursor.com/assets/images/open-in-web-dark.png"></picture></a> <a](https://cursor.com/assets/images/open-in-web-dark.png"></picture></a> <a){kind=link}
![https://cursor.com/assets/images/open-in-cursor-dark.png"><source](https://cursor.com/assets/images/open-in-cursor-dark.png"><source){kind=link}
![https://cursor.com/assets/images/open-in-cursor-light.png"><img](https://cursor.com/assets/images/open-in-cursor-light.png"><img){kind=link}
![https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a> </div](https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a> </div){kind=link}
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Maintenance work on
mainonly (not the Claude/v0.3.0-beta provider work). No version bump, tag, or deploy.brace-expansionoverride to>=5.0.12(resolves 5.0.12) and pinfast-urito 3.1.8. Leaveopentype.jsat 1.3.4.#open()and queries now map missing DB, WAL/open failures, and schema mismatches tounsupported-schema(UNSUPPORTED) instead of throwing. Health and doctor surface astorecomponent. Path discovery still prefersstate_5.sqlite(CODEX_SQLITE_HOME/config.toml sqlite_homeunchanged) and falls back to the highest-numberedstate_*.sqlitewhenstate_5is absent.models_cache.jsonwith the existing slug/reasoning allow-list (including stripping cache-onlymax), falling back to Luna/Terra/Sol/Astra when the cache is missing.test/astra-picker.fixture.test.tsintointegrationTestssotest:fastis native-free. Update MARKETPLACE.md (@elgato/streamdeck3.0.1) and add a CHANGELOG Unreleased section (no version bump).Merged
origin/mainatf0ed9f4(#51 Guardian/subagent SQL filter). Conflict resolution keeps both: #51's schema-awarerecentThreads/focusedThreadSQL (thread_source,source.subagent,agent_path, spawn-edge exclusion, archived, DISTINCT/MAX(status), column detection) and this PR's fail-safe#open()wrapper plusstate_*.sqlitefallback. Does not editnative/ComposerControls.swift. Native Targeting/Fixtures changes come from #51.Validation
npm run check(macOS-14 CI on this PR, after merge)npm audit --omit=dev --audit-level=highandnpm run audit:full(0 vulnerabilities;brace-expansion@5.0.12,fast-uri@3.1.8,opentype.js@1.3.4)Linux after the merge:
public:check,generated:check,format:check,typecheck,docs:check,test:fast(323 passed, 1 skipped, including #51subsession-filterand this PR's store/model tests), non-native integration (17 passed),build:bundle,validate. Connected-device checks do not apply.User impact
UNSUPPORTED.