Release v0.2.6

Author: dxcodeagent

RELEASE.json

@@ -1,14 +1,14 @@
 {
-  "version": "0.2.5",
+  "version": "0.2.6",
   "license": "FSL-1.1-ALv2",
   "baselineSha256": "7847f65a9b20b366a60d52d19ca3cd6bdd1bb09b8cb506659a270f27a21d8877",
   "e2b": {
     "recipeSha256": "761809ee2efa2b6c750451ace29283cbb8e55b6ce3b5b14c2bb4509df71df801",
     "profileSha256": "414dbecee2d47de36016ea05c736e2edff3a0deb298babf923887ea184a01c10"
   },
   "dxd": {
-    "url": "https://github.com/dxcode-dev/dxcode/releases/download/v0.2.5/dxd-linux-x64",
-    "sha256": "810626730c00c4bbe3952566b2ebfdc92bf375fd87446fb61d6c0a8041e65bac"
+    "url": "https://github.com/dxcode-dev/dxcode/releases/download/v0.2.6/dxd-linux-x64",
+    "sha256": "2e3408e65cad33ccea13ba9f95321693cb22beb7944d5e02438184921190c700"
   },
   "toolchain": {
     "node": ">=22.19.0",

apps/core/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@dx/core",
   "private": true,
-  "version": "0.2.5",
+  "version": "0.2.6",
   "license": "FSL-1.1-ALv2",
   "type": "module",
   "scripts": {
@@ -20,7 +20,7 @@
     "@dx/api": "workspace:^",
     "@dx/domain": "workspace:^",
     "@effect/sql-d1": "4.0.0-rc.110",
-    "@flue/runtime": "file:../../third-party/flue/runtime-11963758a85ad512c317d4d3ea7d8955bde01432.tgz",
+    "@flue/runtime": "file:../../third-party/flue/runtime-86c9c05b22514ea646aedff869d1579a99d8eab9.tgz",
     "@jitl/quickjs-wasmfile-release-sync": "0.32.0",
     "@logtape/logtape": "2.3.1",
     "@modelcontextprotocol/client": "2.0.0",
@@ -41,8 +41,8 @@
     "@cloudflare/vitest-plugin": "1.0.0",
     "@cloudflare/workers-types": "5.20260820.1",
     "@earendil-works/pi-ai": "0.85.1",
-    "@flue/sdk": "file:../../third-party/flue/sdk-11963758a85ad512c317d4d3ea7d8955bde01432.tgz",
-    "@flue/vite": "file:../../third-party/flue/vite-11963758a85ad512c317d4d3ea7d8955bde01432.tgz",
+    "@flue/sdk": "file:../../third-party/flue/sdk-86c9c05b22514ea646aedff869d1579a99d8eab9.tgz",
+    "@flue/vite": "file:../../third-party/flue/vite-86c9c05b22514ea646aedff869d1579a99d8eab9.tgz",
     "@msw/cloudflare": "^0.0.1",
     "@types/ws": "8.18.1",
     "@valibot/to-json-schema": "1.7.1",

apps/core/src/execution/dxd/protocol.ts

@@ -24,7 +24,7 @@ import {
 } from "../../thread-changes/candidate.js";
 
 export const DXD_PROTOCOL_MAJOR = 2;
-export const DXD_RELEASE = "0.8.0";
+export const DXD_RELEASE = "0.8.1";
 export const DXD_TERMINAL_VERSION = 1;
 export const DXD_WORKLOAD_IDENTITY_VERSION = 1;
 export const DXD_HEARTBEAT_INTERVAL_MS = 2_000;

apps/core/src/observability/flue.test.ts

@@ -226,6 +226,55 @@ describe("Flue observation", () => {
     );
   });
 
+  it("logs compaction start and outcome without the summary or error", () => {
+    subscriber(
+      observation({
+        type: "compaction_start",
+        agentName: "dx-agent",
+        instanceId: "thr_test",
+        submissionId: "sub_test",
+        reason: "threshold",
+        estimatedTokens: 251_000,
+      }),
+      {} as never,
+    );
+    subscriber(
+      observation({
+        type: "compaction",
+        agentName: "dx-agent",
+        instanceId: "thr_test",
+        submissionId: "sub_test",
+        messagesBefore: 120,
+        messagesAfter: 9,
+        durationMs: 4_200,
+        isError: true,
+        error: { message: "secret summary failure" },
+      }),
+      {} as never,
+    );
+
+    const correlation = {
+      agentName: "dx-agent",
+      threadId: "thr_test",
+      submissionId: "sub_test",
+    };
+    expect(mocks.modelInfo).toHaveBeenCalledWith("Flue compaction started.", {
+      event: "compaction_start",
+      ...correlation,
+      reason: "threshold",
+      estimatedTokens: 251_000,
+    });
+    expect(mocks.modelInfo).toHaveBeenCalledWith("Flue compaction completed.", {
+      event: "compaction",
+      ...correlation,
+      isError: true,
+      messagesBefore: 120,
+      messagesAfter: 9,
+      durationMs: 4_200,
+    });
+    expect(JSON.stringify(mocks.modelInfo.mock.calls)).not.toContain("secret");
+  });
+
   it("maps tool outcome without arguments or results", () => {
     subscriber(
       observation({

apps/core/src/observability/flue.ts

@@ -197,6 +197,24 @@ const observeFlueEvent = (
       });
       return persistence;
     }
+    case "compaction_start":
+      agentModelLogger.info("Flue compaction started.", {
+        event: event.type,
+        ...correlations(event),
+        reason: event.reason,
+        estimatedTokens: event.estimatedTokens,
+      });
+      return persistence;
+    case "compaction":
+      agentModelLogger.info("Flue compaction completed.", {
+        event: event.type,
+        ...correlations(event),
+        isError: event.isError,
+        messagesBefore: event.messagesBefore,
+        messagesAfter: event.messagesAfter,
+        durationMs: event.durationMs,
+      });
+      return persistence;
     case "tool_start":
       agentToolLogger.info("Flue tool execution started.", {
         event: event.type,

apps/core/src/source-control/bitbucket/git-gateway.ts

@@ -100,9 +100,15 @@ bitbucketGitGatewayRoutes.all("/*", async (context) => {
     )
       return failure(403);
     if (write && lease.operation !== "contents-push") return failure(403);
-    if (context.req.header("content-encoding")) return failure(403);
-    const body =
+    // Git gzips smart-HTTP request bodies over 1 KiB, so any non-shallow
+    // fetch of a repository with a few refs sends one. Forward it decoded.
+    const encoding = context.req.header("content-encoding")?.toLowerCase();
+    const gzip = encoding === "gzip" && context.req.method === "POST" && !lfs;
+    if (encoding !== undefined && !gzip) return failure(403);
+    const raw =
       context.req.method === "POST" ? context.req.raw.body : undefined;
+    const body =
+      gzip && raw ? raw.pipeThrough(new DecompressionStream("gzip")) : raw;
     const control = await bitbucketControlPlaneFor(db, context.env);
     const response = await control.withConnection(
       lease.actor_user_id,

apps/core/src/source-control/bitbucket/lifecycle.test.ts

@@ -864,11 +864,44 @@ describe("Bitbucket OAuth and source lifecycle with migrated SQLite", () => {
                 .status,
             ).toBe(200);
             expect(upstream[1]?.body).toBe(body);
+            // Git gzips upload-pack bodies over 1 KiB; Bitbucket gets them decoded.
+            const wants = `0032want ${"c".repeat(40)}\n`.repeat(40);
+            const gzipped = new Response(
+              new Blob([wants])
+                .stream()
+                .pipeThrough(new CompressionStream("gzip")),
+            ).body;
+            const decoded = await app.request(
+              "https://dx.example/api/source/bitbucket/git/space/repo.git/git-upload-pack",
+              {
+                method: "POST",
+                body: gzipped,
+                headers: { ...headers, "content-encoding": "gzip" },
+                duplex: "half",
+              } as RequestInit,
+              { ...bindings, DB: f.db },
+            );
+            expect(decoded.status).toBe(200);
+            expect(upstream[2]?.body).toBe(wants);
+            expect(upstream[2]?.headers.get("content-encoding")).toBeNull();
+            expect(
+              (
+                await app.request(
+                  "https://dx.example/api/source/bitbucket/git/space/repo.git/git-upload-pack",
+                  {
+                    method: "POST",
+                    body: wants,
+                    headers: { ...headers, "content-encoding": "br" },
+                  },
+                  { ...bindings, DB: f.db },
+                )
+              ).status,
+            ).toBe(403);
             allowed = false;
             expect(
               (await request("info/refs?service=git-upload-pack")).status,
             ).toBe(403);
-            expect(upstream).toHaveLength(2);
+            expect(upstream).toHaveLength(3);
             expect((await readBitbucketConnection(f.db, userId))?.status).toBe(
               "active",
             );

apps/core/src/threads/terminal-object.ts

@@ -79,6 +79,7 @@ import {
 } from "../settings/environment-variables/execution.js";
 import { resolveExecutionSigningPlan } from "../settings/keys/execution.js";
 import { signGitPayload } from "../settings/keys/ssh-ed25519.js";
+import { bitbucketControlPlaneFor } from "../source-control/bitbucket/control-plane.js";
 import {
   BITBUCKET_GIT_PATH,
   bitbucketRuntimeBroker,
@@ -2038,8 +2039,8 @@ export class ThreadExecutionObject extends DurableObject<Bindings> {
     );
     // Independent D1 reads: a wake waits for the slowest, not their sum.
     const db = await Effect.runPromise(decodeD1Binding(this.env.DB));
-    // Every bitbucket.org remote routes through the dx gateway while the
-    // Thread owner has an active Bitbucket connection.
+    // While the Thread owner has an active Bitbucket connection, SSH
+    // bitbucket.org remotes use HTTPS so the native credential helper applies.
     const [snapshot, signing, bitbucketConnection] = await Promise.all([
       Effect.runPromise(resolveExecutionEnvironment(this.env, threadId)),
       Effect.runPromise(resolveExecutionSigningPlan(this.env, threadId)),
@@ -2426,6 +2427,22 @@ export class ThreadExecutionObject extends DurableObject<Bindings> {
       });
       return { username: "x-access-token", password };
     }
+    if (host === "bitbucket.org") {
+      const control = await bitbucketControlPlaneFor(db, this.env);
+      const password = await control.withConnection(
+        thread.owner_user_id,
+        undefined,
+        async (token) => token,
+      );
+      threadDaemonLogger.info("Native Bitbucket credential issued.", {
+        event: "native_git_credential",
+        threadId,
+        actorUserId: thread.owner_user_id,
+        provider: "bitbucket",
+      });
+      return { username: "x-token-auth", password };
+    }
+    // dxd releases that still rewrite bitbucket.org remotes to the gateway.
     const gateway = new URL(this.env.DX_AUTH_URL as string);
     if (
       host !== gateway.host.toLowerCase() ||

apps/docs/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@dx/docs",
   "private": true,
-  "version": "0.2.5",
+  "version": "0.2.6",
   "license": "FSL-1.1-ALv2",
   "type": "module",
   "scripts": {