GeezerVison

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Aug 11, 2026 3:43am

PR Summary

Medium Risk
Changes secret projection and log read paths where incorrect provenance handling could leak secrets or blank traces; behavior is heavily tested and display paths explicitly omit server-only provenance.

Overview
Fixes truncated execution logs showing empty traces when oversized execution_data compaction drops executionState and the display projection could no longer rebuild its secret redaction registry.

Write path: On completion, the run’s resolvedSecretTraceProvenance is copied to top-level execution_data (from pre-redaction state) so it survives PII redaction and compaction. Minimal compaction keeps that key; the metadata-only tier still drops it when no spans are stored.

Read path: projectExecutionDataForDisplay resolves provenance from the top-level key or executionState, rebuilds the registry for span projection, and never returns provenance to clients (DISPLAY_OMITTED_SERVER_KEYS). For rows truncated before this change (no top-level provenance), stored trace spans are returned as-is when they were already projected at write time; malformed/null provenance still fails closed on span IO and envelope fields.

^{Reviewed by Cursor Bugbot for commit df73bf0. Configure here.}

Greptile Summary

The PR preserves resolved-secret provenance when execution-state compaction occurs while preventing that server-only data from reaching display projections.

• Stores run provenance at the top level of execution data and retains it through applicable compaction tiers.
• Omits provenance from legacy and contract-aware display projections.
• Restores already projected spans for eligible legacy truncated rows while retaining fail-closed handling for malformed provenance.
• Replaces the previously reported explicit any usages in the new tests with typed views and narrowing.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  A[Completed execution] --> B[PII projection]
  B --> C[Top-level run provenance]
  C --> D{Payload oversized?}
  D -->|No| E[Persist full execution data]
  D -->|Yes| F[Compact execution data]
  F --> G[Persist spans and provenance]
  E --> H[Display projection]
  G --> H
  H --> I[Rebuild redaction registry]
  I --> J[Return projected trace]
  H --> K[Omit server-only provenance]

_{Reviews (2): Last reviewed commit: "improvement(logs): type the new test hel..." | Re-trigger Greptile}

@greptile

@cursor review