Skip to content

fix(orchestration): prevent duplicate secret prompt after timeout denial#1477

Closed
bug-ops wants to merge 1 commit intomainfrom
secret-dedup-timeout
Closed

fix(orchestration): prevent duplicate secret prompt after timeout denial#1477
bug-ops wants to merge 1 commit intomainfrom
secret-dedup-timeout

Conversation

@bug-ops
Copy link
Owner

@bug-ops bug-ops commented Mar 9, 2026

Summary

  • Track (handle_id, secret_key) pairs denied during plan execution in a new Agent::denied_secrets set
  • When a sub-agent re-requests an already-denied secret, process_pending_secret_requests silently re-denies it without prompting the user again
  • The denial set is cleared at the start of each handle_plan_confirm so previous run denials do not carry over

Test plan

  • Verify all existing tests pass (cargo nextest run --workspace --features full --lib --bins)
  • Manual test: start a plan with a sub-agent that requests a secret, let it time out (120 s), confirm the sub-agent re-requests the same secret on next tick — no second prompt should appear

Closes #1455

Track denied (handle_id, secret_key) pairs in Agent::denied_secrets for the
duration of the current plan execution. When a sub-agent re-requests a secret
that was already denied (timeout or explicit rejection), process_pending_secret_requests
silently re-denies it without prompting the user again.

The set is cleared at the start of each handle_plan_confirm so denials from a
previous run do not carry over.

Closes #1455
@github-actions github-actions bot added documentation Improvements or additions to documentation rust Rust code changes core zeph-core crate bug Something isn't working size/S Small PR (11-50 lines) labels Mar 9, 2026
@bug-ops bug-ops enabled auto-merge (squash) March 9, 2026 18:53
@bug-ops
Copy link
Owner Author

bug-ops commented Mar 9, 2026

Superseded by #1476.

@bug-ops bug-ops closed this Mar 9, 2026
auto-merge was automatically disabled March 9, 2026 18:59

Pull request was closed

@bug-ops bug-ops deleted the secret-dedup-timeout branch March 10, 2026 18:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working core zeph-core crate documentation Improvements or additions to documentation rust Rust code changes size/S Small PR (11-50 lines)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

fix(orchestration): duplicate secret prompt shown after 120s timeout in plan confirm

1 participant