cloudagent-daemon 0.5.2__tar.gz → 0.5.3__tar.gz

{cloudagent_daemon-0.5.2 → cloudagent_daemon-0.5.3}/CHANGELOG.md

@@ -4,6 +4,30 @@ All notable changes to the local daemon. Format follows
 [Keep a Changelog](https://keepachangelog.com/); versions are
 [PEP 440](https://peps.python.org/pep-0440/). Release with `scripts/release.sh`.
 
+## [0.5.3] — 2026-08-22
+
+### Fixed
+- A wake that dies because the model's context window is full now drops the
+  oversized session and re-spawns WITHOUT `--resume`, instead of replaying the
+  same history after an 8s backoff. Replaying could never fit, so the retry was
+  guaranteed to fail; three of them in a row crossed the crash threshold and
+  quarantined the agent — silently, since a quarantined agent stops being woken
+  (#114). The cleared session id is persisted, so later wakes do not resume the
+  oversized thread either.
+- The engine's own error text is now carried on the spawn result. Previously
+  only a bare `had_api_error` boolean survived, so the retry layer could not
+  tell a transient rate-limit (retry with resume) from a permanent
+  context-window overflow (start a new thread) and treated both the same.
+- A context-exhausted wake reports `context_exhausted` rather than the generic
+  `upstream_api_error`, so the cause is visible without reading daemon logs.
+
+### Notes
+- Detection matches an apostrophe-free substring: the engine writes "the
+  model's context window", and a smart-quote rewrite upstream would otherwise
+  silently disable the whole fix. A test pins that invariant.
+- No 0.5.2 entry exists in this file; 0.5.2 was published manually and its
+  changelog entry was never written.
+
 ## [0.5.1] — 2026-08-20
 
 ### Added

{cloudagent_daemon-0.5.2 → cloudagent_daemon-0.5.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: cloudagent-daemon
-Version: 0.5.2
+Version: 0.5.3
 Summary: Local daemon for cloudagent — bridges Claude Code, Codex, and Qoder CLI agents to the cloudagent backend.
 Project-URL: Homepage, https://cloudagent.chat
 Project-URL: Repository, https://codeup.aliyun.com/69bd0a4d29ad98af4065ce71/cloudagent

{cloudagent_daemon-0.5.2 → cloudagent_daemon-0.5.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "cloudagent-daemon"
-version = "0.5.2"
+version = "0.5.3"
 description = "Local daemon for cloudagent — bridges Claude Code, Codex, and Qoder CLI agents to the cloudagent backend."
 authors = [{name = "chaoyin", email = "tudoucyx@gmail.com"}]
 readme = "README.md"

cloudagent_daemon-0.5.3/src/cloudagent_daemon/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.5.3"

{cloudagent_daemon-0.5.2 → cloudagent_daemon-0.5.3}/src/cloudagent_daemon/claude_runner.py

@@ -338,6 +338,13 @@ class _SpawnAttempt:
     # M8 — set True when claude emitted an ``isApiErrorMessage:true``
     # event during the wake (upstream API error swallowed by the CLI).
     had_api_error: bool = False
+    # #114 — the engine's OWN explanation for that error. codex reports
+    # upstream failures as a ``turn.failed``/``error`` stdout event whose
+    # message previously reached only the log, so the retry layer saw a
+    # bare boolean and could not tell a transient rate-limit apart from a
+    # permanent context-window overflow — and retried both the same way.
+    # Keeping the text is what lets the wake layer branch on the cause.
+    api_error_text: str | None = None
 
 
 def _build_lazy_identity(agent_id: str, payload: dict) -> dict:
@@ -467,6 +474,22 @@ class ClaudeRunner:
         "no rollout found for thread",
     )
 
+    #: #114 — 上下文窗口撑满。这是**永久性**前提失败,不是瞬时错误:退避几秒
+    #: 再把同一份历史送一次,必然再次溢出。codex 自己给出的处置就是 "Start a
+    #: new thread or clear earlier history",与 stale-session 的补救动作完全
+    #: 一致(清掉会话、免 resume 重跑),故复用同一条路径而非退避重试。
+    #: 匹配按**小写子串**做,同时覆盖 codex 的自然语言提示和 OpenAI API 的
+    #: 标准错误码,避免只认一种措辞。
+    #: 刻意**不含撇号**:codex 的原文是 "the model's context window",但撇号是
+    #: 最容易被改写成弯引号(’)的字符,一旦不匹配整个修复就静默失效——而这个修复
+    #: 存在的意义正是消除静默失败。去掉撇号后的子串依然足够specific。
+    CONTEXT_EXHAUSTED_MARKERS: tuple[str, ...] = (
+        "ran out of room in the model",
+        "context_length_exceeded",
+        "maximum context length",
+        "context window",
+    )
+
     #: 会产生外部副作用的工具（发消息/建任务类）。瞬时错误重试只在本次 wake
     #: **没**调过这些工具时才做 —— 只读工具（list_messages 等）重跑无害。
     SIDE_EFFECT_TOOLS: frozenset[str] = frozenset({
@@ -662,10 +685,22 @@ The daemon discards stdout — only the mcp tool call reaches the channel.
                 self._qoder_lane_session(ws, stale_conv)
                 if stale_is_qoder and stale_conv else None
             )
+            # #114 — 上下文撑满与 stale-session 是同一类问题：**当前会话已经
+            # 不能再用了**，区别只在于一个是引擎不认识它、另一个是它太大。补救
+            # 动作完全相同（清掉会话、免 resume 重跑一次），所以走同一条路径，
+            # 而不是掉进下面的瞬时退避重试——那会带着同一份撑满的历史重放，
+            # 注定再次失败，白烧一轮唤醒和一次计费，然后累计成 crash 进隔离。
+            context_exhausted = self._is_context_exhausted(attempt)
             if (
                 self._run_mode_for(payload) != "read_analyze"
                 and attempt.exit_code != 0
-                and any(m in attempt.stderr_tail for m in self.STALE_SESSION_STDERR_MARKERS)
+                and (
+                    any(
+                        m in attempt.stderr_tail
+                        for m in self.STALE_SESSION_STDERR_MARKERS
+                    )
+                    or context_exhausted
+                )
                 and (ws.last_session_id() is not None or qoder_lane_sid is not None)
             ):
                 stale_sid = qoder_lane_sid or ws.last_session_id()
@@ -673,11 +708,12 @@ The daemon discards stdout — only the mcp tool call reaches the channel.
                 if stale_is_qoder and stale_conv:
                     self._qoder_set_lane(ws, stale_conv, None)
                 logger.warning(
-                    "claude_runner: resume rejected stale "
-                    "session_id=%s (stderr: %r). Clearing and "
-                    "retrying without resume.",
+                    "claude_runner: dropping unusable session_id=%s "
+                    "(cause=%s, detail=%r). Clearing and retrying "
+                    "without resume.",
                     stale_sid,
-                    attempt.stderr_tail[-160:],
+                    "context_exhausted" if context_exhausted else "stale_session",
+                    (attempt.api_error_text or attempt.stderr_tail)[-160:],
                 )
                 try:
                     ws.clear_last_session_id()
@@ -697,6 +733,12 @@ The daemon discards stdout — only the mcp tool call reaches the channel.
                 attempt.exit_code != 0
                 and attempt.had_api_error
                 and not attempt.timeout_hit
+                # #114 — 永久性失败不走瞬时重试。退避 8 秒不会让上下文变小，
+                # 带 resume 重放同一份历史必然再次撑满；上面那条路径已经用
+                # "清会话 + 免 resume" 处理过它了。注意这里重新判定的是**重试
+                # 之后**的 attempt：若换新会话仍然撑满（例如注入的正文本身过
+                # 大），同样不该再退避重放。
+                and not self._is_context_exhausted(attempt)
                 and not any(
                     t.rsplit("__", 1)[-1] in self.SIDE_EFFECT_TOOLS
                     for t in attempt.tool_uses
@@ -1004,7 +1046,13 @@ The daemon discards stdout — only the mcp tool call reaches the channel.
             and parent_for_abort not in (None, "")
         ):
             if attempt.had_api_error:
-                reason = "upstream_api_error"
+                # #114 — 把永久性的"会话撑满"和笼统的上游错误区分开：否则频道
+                # 里那条 wake_aborted 只说"上游错误"，真实原因只能靠翻日志。
+                reason = (
+                    "context_exhausted"
+                    if self._is_context_exhausted(attempt)
+                    else "upstream_api_error"
+                )
             elif timeout_hit:
                 reason = "wake_timeout"
             else:
@@ -1465,6 +1513,7 @@ The daemon discards stdout — only the mcp tool call reaches the channel.
             final_text,
             result_usage,
             had_api_error,
+            api_error_text,
         ) = await self._consume_stdout(
             proc,
             parse_mode=(
@@ -1495,12 +1544,34 @@ The daemon discards stdout — only the mcp tool call reaches the channel.
             final_result_text=final_text,
             result_usage=result_usage,
             had_api_error=had_api_error,
+            api_error_text=api_error_text,
         )
 
     # ------------------------------------------------------------------
     # Internal helpers
     # ------------------------------------------------------------------
 
+    def _is_context_exhausted(self, attempt: _SpawnAttempt) -> bool:
+        """#114 — True iff *attempt* failed because the model's context
+        window is full.
+
+        A **permanent** premise failure, not a transient upstream error:
+        the same history replayed after any backoff overflows the window
+        again, so retrying with ``--resume`` burns a wake and a billing
+        cycle to reach the identical failure. The remedy is the one the
+        engine itself prints — start a new thread — which is exactly what
+        the stale-session path already does, so both share it.
+
+        Reads only :attr:`_SpawnAttempt.api_error_text` (the engine's own
+        message). An attempt that carried no explanation returns False:
+        unknown cause keeps the previous, more conservative handling
+        rather than silently discarding a session that may be fine.
+        """
+        text = (attempt.api_error_text or "").lower()
+        if not text:
+            return False
+        return any(m in text for m in self.CONTEXT_EXHAUSTED_MARKERS)
+
     #: 1i Bug E — the daemon-injected ``cloudagent`` MCP toolset MUST run
     #: unattended in ``--print`` headless mode (otherwise claude prompts
     #: the user for permission, the prompt is never answered, and the
@@ -2286,7 +2357,7 @@ TASKS (频道任务板) — 频道里的分工协作走任务认领原语，纪
         *,
         partial_session_id: str | None = None,
         partial_agent_id: str | None = None,
-    ) -> tuple[str | None, list[str], str | None, dict | None, bool]:
+    ) -> tuple[str | None, list[str], str | None, dict | None, bool, str | None]:
         """Consume ``codex exec --json`` NDJSON.
 
         Codex emits ``thread.started`` with ``thread_id`` and one or more
@@ -2304,13 +2375,16 @@ TASKS (频道任务板) — 频道里的分工协作走任务认领原语，纪
         # codex 把上游 API 错误（模型 at capacity / 限流）作为 turn.failed/error
         # 事件吐在 stdout —— 记为 had_api_error，wake 层据此做瞬时错误重试。
         had_api_error = False
+        # #114 — 同时留下引擎给的原因文本。只有一个布尔时，"限流"和"上下文
+        # 撑满"在 wake 层无法区分，于是永久性失败被当成瞬时错误反复重放。
+        api_error_text: str | None = None
         publish_enabled = bool(
             self._partial_publisher
             and partial_session_id
             and partial_agent_id
         )
         if proc.stdout is None:
-            return None, tool_uses, None, None, False
+            return None, tool_uses, None, None, False, None
 
         async def _emit(event_type: str, payload: "dict[str, Any]") -> None:
             if (
@@ -2468,9 +2542,12 @@ TASKS (频道任务板) — 频道里的分工协作走任务认领原语，纪
                     msg = raw if isinstance(raw, str) else None
                 logger.warning("CodexRunner: stdout error event=%s msg=%r", evt_type, msg)
                 had_api_error = True
+                # 第一条为准：后续事件通常是同一个失败的级联噪声，首条才是根因。
+                if api_error_text is None and isinstance(msg, str) and msg:
+                    api_error_text = msg
 
         final_text = "\n\n".join(final_chunks) if final_chunks else None
-        return captured, tool_uses, final_text, result_usage, had_api_error
+        return captured, tool_uses, final_text, result_usage, had_api_error, api_error_text
 
     async def _consume_stdout(
         self,
@@ -2479,7 +2556,7 @@ TASKS (频道任务板) — 频道里的分工协作走任务认领原语，纪
         parse_mode: str = "stream_json",
         partial_session_id: str | None = None,
         partial_agent_id: str | None = None,
-    ) -> tuple[str | None, list[str], str | None, dict | None, bool]:
+    ) -> tuple[str | None, list[str], str | None, dict | None, bool, str | None]:
         """Stream NDJSON; return ``(session_id, tool_uses, result_text, result_usage, had_api_error)``.
 
         Accepts BOTH session-init event shapes for forward/backward
@@ -2531,6 +2608,8 @@ TASKS (频道任务板) — 频道里的分工协作走任务认领原语，纪
         # M8 — set True when claude emits a synthetic isApiErrorMessage
         # assistant event (upstream API error swallowed by the CLI).
         had_api_error: bool = False
+        # #114 — 与 codex 侧同构：保留引擎自己的错误文本供 wake 层判定原因。
+        api_error_text: str | None = None
         # 1k74 — running buffer for token-level streaming. claude emits
         # one ``stream_event`` per content_block_delta (~80 chars at a
         # time); we concatenate them and forward the running total to
@@ -2570,7 +2649,7 @@ TASKS (频道任务板) — 频道里的分工协作走任务认领原语，纪
                 )
 
         if proc.stdout is None:
-            return None, tool_uses, final_text, result_usage, had_api_error
+            return None, tool_uses, final_text, result_usage, had_api_error, api_error_text
 
         async for line_b in proc.stdout:
             line = line_b.decode("utf-8", errors="replace").strip()
@@ -2685,6 +2764,8 @@ TASKS (频道任务板) — 频道里的分工协作走任务认领原语，纪
                                 if isinstance(t, str):
                                     err_text = t[:200]
                                     break
+                    if api_error_text is None and err_text:
+                        api_error_text = err_text
                     logger.warning(
                         "ClaudeRunner: stdout isApiErrorMessage event — "
                         "wake will be marked crashed (text=%r)",
@@ -2824,7 +2905,7 @@ TASKS (频道任务板) — 频道里的分工协作走任务认领原语，纪
                 "claude_runner: cache metrics publish failed", exc_info=True
             )
 
-        return captured, tool_uses, final_text, result_usage, had_api_error
+        return captured, tool_uses, final_text, result_usage, had_api_error, api_error_text
 
     async def _wait_with_timeout(
         self, proc: asyncio.subprocess.Process

{cloudagent_daemon-0.5.2 → cloudagent_daemon-0.5.3}/tests/unit/test_claude_runner.py

@@ -3310,3 +3310,283 @@ async def test_qoder_stale_resume_clears_only_that_lane(
     assert "--resume" not in a1
     lanes = json.loads((tmp_path / ".meta" / "qoder-sessions.json").read_text())
     assert lanes == {"conv_A": "new_A", "conv_B": "keep_B"}
+
+
+# ---------------------------------------------------------------------------
+# #114 — context-window exhaustion is a PERMANENT failure, not a transient one
+# ---------------------------------------------------------------------------
+
+
+_CTX_FULL_MSG = (
+    "Codex ran out of room in the model's context window. "
+    "Start a new thread or clear earlier history before retrying."
+)
+
+
+def _codex_turn_failed(msg: str) -> str:
+    """One codex NDJSON stdout event reporting a failed turn."""
+    return json.dumps({"type": "turn.failed", "error": {"message": msg}})
+
+
+def _codex_ok(thread_id: str = "thread_fresh") -> list[str]:
+    return [
+        json.dumps({"type": "thread.started", "thread_id": thread_id}),
+        json.dumps({
+            "type": "item.completed",
+            "item": {"type": "agent_message", "text": "ok"},
+        }),
+    ]
+
+
+def _codex_runner(fake: str, ws: FakeWorkspace, outbound: FakeOutbound):
+    return ClaudeRunner(
+        outbound=outbound,
+        workspace=ws,
+        runtime_binaries={"codex": fake},
+        single_wake_timeout=10.0,
+    )
+
+
+async def test_context_exhausted_starts_a_fresh_session_instead_of_replaying(
+    stateful_fake_claude, tmp_path
+):
+    """#114 — a wake that dies because the context window is full must drop
+    the oversized session and re-spawn WITHOUT resume.
+
+    This is the failure that took Dex down on 2026-08-21: the runner treated
+    "ran out of room in the model's context window" as a transient upstream
+    error and replayed the *same* oversized history, which cannot ever fit.
+    Three of those in a row crossed the crash threshold and the agent was
+    quarantined — silently, since a quarantined agent stops being woken.
+    """
+    mcp_cfg = tmp_path / "mcp.json"
+    mcp_cfg.write_text("{}")
+    agent_ws = FakeAgentWorkspace(mcp_path=mcp_cfg, last_session="thread_big")
+    ws = FakeWorkspace(agent_ws)
+    outbound = FakeOutbound()
+
+    fake = stateful_fake_claude([
+        {"stdout": [_codex_turn_failed(_CTX_FULL_MSG)], "stderr": [], "exit_code": 1},
+        {"stdout": _codex_ok("thread_fresh"), "stderr": [], "exit_code": 0},
+    ])
+    runner = _codex_runner(fake, ws, outbound)
+
+    result = await runner.run_one(
+        "agent-A", {**_make_payload(), "runtime_engine": "codex"}
+    )
+
+    argv0 = _read_argv_n(tmp_path, 0)
+    argv1 = _read_argv_n(tmp_path, 1)
+    # The first attempt resumed the oversized thread…
+    assert "resume" in argv0 and "thread_big" in argv0
+    # …and the retry must abandon it entirely — resuming it again is the bug.
+    assert "resume" not in argv1, (
+        "retry replayed the oversized history; that can only fail again"
+    )
+    assert "thread_big" not in argv1
+
+    # The poisoned id is cleared, so LATER wakes don't resume it either —
+    # without this the agent recovers for one wake and dies on the next.
+    assert agent_ws.clear_last_session_calls == 1
+    assert agent_ws.set_calls == ["thread_fresh"]
+
+    assert result.exit_code == 0
+    final_status = [c for c in outbound.calls if c[0] == "agent_status"][-1]
+    assert final_status == ("agent_status", "agent-A", "idle", 0)
+
+
+async def test_context_exhausted_is_not_retried_as_a_transient_error(
+    stateful_fake_claude, tmp_path
+):
+    """#114 — when even the fresh session overflows, STOP.
+
+    The transient path backs off 8s and re-spawns *with* resume. Waiting does
+    not shrink a context window, so letting an exhausted wake fall through to
+    it burns a third spawn (and a third bill) to reach the same failure.
+    Exactly two spawns may happen: the original and the fresh-session retry.
+    """
+    mcp_cfg = tmp_path / "mcp.json"
+    mcp_cfg.write_text("{}")
+    agent_ws = FakeAgentWorkspace(mcp_path=mcp_cfg, last_session="thread_big")
+    ws = FakeWorkspace(agent_ws)
+    outbound = FakeOutbound()
+
+    fake = stateful_fake_claude([
+        {"stdout": [_codex_turn_failed(_CTX_FULL_MSG)], "stderr": [], "exit_code": 1},
+        {"stdout": [_codex_turn_failed(_CTX_FULL_MSG)], "stderr": [], "exit_code": 1},
+        {"stdout": _codex_ok(), "stderr": [], "exit_code": 0},
+    ])
+    runner = _codex_runner(fake, ws, outbound)
+
+    await runner.run_one("agent-A", {**_make_payload(), "runtime_engine": "codex"})
+
+    assert (tmp_path / "argv-1.json").exists(), "fresh-session retry must happen"
+    assert not (tmp_path / "argv-2.json").exists(), (
+        "a permanently-failing wake was retried a third time via the "
+        "transient-error backoff path"
+    )
+
+
+async def test_transient_upstream_error_still_backs_off_and_resumes(
+    stateful_fake_claude, tmp_path, monkeypatch
+):
+    """#114 regression guard — narrowing the retry must not disarm it.
+
+    A genuine transient upstream error (rate limit / model at capacity) still
+    has to take the original path: back off, then retry WITH resume so the
+    conversation keeps its history. If this goes red, the fix over-matched.
+    """
+    mcp_cfg = tmp_path / "mcp.json"
+    mcp_cfg.write_text("{}")
+    agent_ws = FakeAgentWorkspace(mcp_path=mcp_cfg, last_session="thread_ok")
+    ws = FakeWorkspace(agent_ws)
+    outbound = FakeOutbound()
+
+    slept: list[float] = []
+
+    async def _no_sleep(seconds: float) -> None:
+        slept.append(seconds)
+
+    monkeypatch.setattr(claude_runner_module.asyncio, "sleep", _no_sleep)
+
+    fake = stateful_fake_claude([
+        {
+            "stdout": [_codex_turn_failed("stream error: model is at capacity")],
+            "stderr": [],
+            "exit_code": 1,
+        },
+        {"stdout": _codex_ok("thread_ok"), "stderr": [], "exit_code": 0},
+    ])
+    runner = _codex_runner(fake, ws, outbound)
+
+    await runner.run_one("agent-A", {**_make_payload(), "runtime_engine": "codex"})
+
+    assert slept == [8], "transient error must still back off before retrying"
+    argv1 = _read_argv_n(tmp_path, 1)
+    assert "resume" in argv1 and "thread_ok" in argv1, (
+        "a transient failure must keep the session — only exhaustion drops it"
+    )
+    # The session was NOT thrown away for a merely transient hiccup.
+    assert agent_ws.clear_last_session_calls == 0
+
+
+async def test_read_analyze_context_exhaustion_never_clears_the_owner_session(
+    stateful_fake_claude, tmp_path
+):
+    """§7.4 + #114 — a read_analyze wake must not touch the owner's lane.
+
+    read_analyze never resumes, so its own overflow says nothing about the
+    owner's session. Clearing it here would let a read-only round destroy
+    state it is explicitly forbidden to write.
+    """
+    mcp_cfg = tmp_path / "mcp.json"
+    mcp_cfg.write_text("{}")
+    agent_ws = FakeAgentWorkspace(mcp_path=mcp_cfg, last_session="thread_owner")
+    ws = FakeWorkspace(agent_ws)
+    outbound = FakeOutbound()
+
+    fake = stateful_fake_claude([
+        {"stdout": [_codex_turn_failed(_CTX_FULL_MSG)], "stderr": [], "exit_code": 1},
+        {"stdout": _codex_ok(), "stderr": [], "exit_code": 0},
+    ])
+    runner = _codex_runner(fake, ws, outbound)
+
+    await runner.run_one("agent-A", _ra_payload(runtime_engine="codex"))
+
+    assert agent_ws.clear_last_session_calls == 0
+    assert agent_ws.set_calls == []
+
+
+async def test_context_exhausted_survives_a_curly_apostrophe(
+    stateful_fake_claude, tmp_path
+):
+    """#114 — a pretty-quoted variant of the message is still handled.
+
+    End-to-end guard only: it asserts the wake recovers, without pinning WHICH
+    marker matched. The apostrophe-free property itself is pinned by
+    :func:`test_context_markers_avoid_rewritable_punctuation` — reverse mutation
+    showed this test alone passes via the generic ``context window`` marker, so
+    on its own it does NOT prove the hardening.
+    """
+    mcp_cfg = tmp_path / "mcp.json"
+    mcp_cfg.write_text("{}")
+    agent_ws = FakeAgentWorkspace(mcp_path=mcp_cfg, last_session="thread_big")
+    ws = FakeWorkspace(agent_ws)
+
+    curly = (
+        "Codex ran out of room in the model’s context window. "
+        "Start a new thread or clear earlier history before retrying."
+    )
+    fake = stateful_fake_claude([
+        {"stdout": [_codex_turn_failed(curly)], "stderr": [], "exit_code": 1},
+        {"stdout": _codex_ok("thread_fresh"), "stderr": [], "exit_code": 0},
+    ])
+    runner = _codex_runner(fake, ws, FakeOutbound())
+
+    await runner.run_one("agent-A", {**_make_payload(), "runtime_engine": "codex"})
+
+    assert agent_ws.clear_last_session_calls == 1, (
+        "a curly apostrophe defeated the marker — detection is punctuation-fragile"
+    )
+    assert "resume" not in _read_argv_n(tmp_path, 1)
+
+
+async def test_rate_limit_mentioning_tokens_is_not_read_as_exhaustion(
+    stateful_fake_claude, tmp_path, monkeypatch
+):
+    """#114 — pins the deliberately-broad ``context window`` marker.
+
+    Detection is intentionally generous (a missed exhaustion costs a crash
+    loop; a false positive only costs one session's history). "Generous" must
+    still exclude the common transient that talks about tokens and limits —
+    a quota error must keep its session and take the backoff path.
+    """
+    mcp_cfg = tmp_path / "mcp.json"
+    mcp_cfg.write_text("{}")
+    agent_ws = FakeAgentWorkspace(mcp_path=mcp_cfg, last_session="thread_ok")
+    ws = FakeWorkspace(agent_ws)
+
+    async def _no_sleep(seconds: float) -> None:
+        return None
+
+    monkeypatch.setattr(claude_runner_module.asyncio, "sleep", _no_sleep)
+
+    quota = (
+        "Rate limit reached: limit 30000 tokens per minute. "
+        "Please try again later."
+    )
+    fake = stateful_fake_claude([
+        {"stdout": [_codex_turn_failed(quota)], "stderr": [], "exit_code": 1},
+        {"stdout": _codex_ok("thread_ok"), "stderr": [], "exit_code": 0},
+    ])
+    runner = _codex_runner(fake, ws, FakeOutbound())
+
+    await runner.run_one("agent-A", {**_make_payload(), "runtime_engine": "codex"})
+
+    assert agent_ws.clear_last_session_calls == 0, (
+        "a rate-limit error was misread as context exhaustion — marker too broad"
+    )
+    assert "resume" in _read_argv_n(tmp_path, 1)
+
+
+def test_context_markers_avoid_rewritable_punctuation():
+    """#114 — no marker may hinge on a character that gets auto-rewritten.
+
+    Straight apostrophes and quotes are exactly what smart-quote passes
+    rewrite. A marker containing one can be silently defeated by a cosmetic
+    transformation upstream, switching the whole fix off with no signal — the
+    opposite of what this fix is for. Markers must also stay lowercase because
+    matching lowercases the text first; an uppercase marker can never match.
+    """
+    for marker in ClaudeRunner.CONTEXT_EXHAUSTED_MARKERS:
+        assert "'" not in marker and "\u2019" not in marker, (
+            f"marker {marker!r} hinges on an apostrophe — a smart-quote pass "
+            f"upstream would silently disable context-exhaustion detection"
+        )
+        assert '"' not in marker and "\u201c" not in marker, (
+            f"marker {marker!r} hinges on a quote character"
+        )
+        assert marker == marker.lower(), (
+            f"marker {marker!r} is not lowercase; _is_context_exhausted "
+            f"lowercases the text, so this marker can never match"
+        )

{cloudagent_daemon-0.5.2 → cloudagent_daemon-0.5.3}/uv.lock

@@ -122,7 +122,7 @@ wheels = [
 
 [[package]]
 name = "cloudagent-daemon"
-version = "0.5.2"
+version = "0.5.3"
 source = { editable = "." }
 dependencies = [
     { name = "h2" },

cloudagent_daemon-0.5.2/src/cloudagent_daemon/__init__.py

@@ -1 +0,0 @@
-__version__ = "0.5.2"