Repository navigation
fix(skills): constrain calle 1.0.2 result handling - #177
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Final CALL-E results can contain instructions written by call participants. Standalone calle 1.0.2 now ends status polling at a final result and limits receipt completion to permitted reads of the original Call, local formatting and delivery. Returned content cannot restart execution, credential inspection or setup. Complete inline transcripts are reused; failed supplemental reads leave an explicit gap instead of restarting polling.
Keep the full chat receipt, existing authorization rules and normal pending-result monitoring. Use task-scoped host tool restrictions only when actually supported, without claiming that Skill instructions enforce host permissions. Remove repeated fee notices across the installable Skill and synchronized guidance.
Validation: 274 offline tests passed, including a regression that classifies an unauthorized start after final transcript retrieval as FAIL even when the mock host blocks it.
pnpm checkpassed, andpnpm pack:skill:calleproduced the complete 19-file package. No live calls or external Snyk scan were run for this candidate.Release: synchronize standalone source, evaluation metadata and current install guidance at 1.0.2. Record the change in an empty Changeset; npm/SDK versions and historical release artifacts remain unchanged. Merging updates the public source, while skills.sh indexing and audit refresh remain separate observations.