* chore(deps): upgrade @sentry/node to 11.9.0 (M-14)
* fix(sentry): omit hostname from sanitized error reports
* test(sentry): cover nonessential-traffic opt-out on its own
* fix(sentry): bound Sentry flush before shutdown exit
* fix(sentry): leave tracesSampleRate unset so spans stay disabled
* fix(shutdown): include Sentry drain in failsafe budget and test pending-flush exits
* chore(deps): upgrade undici to 8.12.3 (M-12)
* fix(proxy): honor lowercase no_proxy precedence and refresh cached bypass rules
* docs(proxy): clarify TLS options for NO_PROXY bypasses and CONNECT targets
* fix(proxy): clear CA and mTLS caches on structured I/O bypass updates
Also close the global test dispatcher in undiciFetch cleanup and document lowercase-first no_proxy precedence for fetch/undici.
* fix(proxy): refresh TLS and proxy state on certificate-only environment updates
* chore(deps): replace cli-highlight with a highlight.js ANSI renderer
* fix(highlight): key fallback highlight cache by Chalk level
Also correct the CONTRIBUTING highlighting note and move the qrcode
retention test and note out of this change.
* fix(proxy): pass runtime CA and mTLS options to the target TLS connection behind CONNECT proxies
* test(proxy): isolate CONNECT tests from leaked axios mocks
* chore(deps): update https-proxy-agent to 9.1.0
* test(proxy): isolate CONNECT test from leaked axios mocks
* test(proxy): avoid global axios module registration
* test(proxy): exercise createAxiosInstance in CONNECT test
The custom-gateway lifecycle case initializes the process-global model string table with OpenAI aliases. Teardown did not clear it, so later getAgentModel haiku and fast-mode Opus tests in the same serial process resolved stale gpt-4o aliases. Reset the table in lifecycle setup and teardown.
Capture detached real module exports before mocking and restore secure
storage and device-flow modules after each refresh-on-401 test. This
prevents shared-process credential mocks from breaking provider setup and
saved-profile startup tests in randomized serial runs.
* test: synchronize retention policy phases
* test: verify cleanup policy hook ordering
Record the rejecting policy hook and threshold phase in the cleanup fixture,
and assert that the hook runs first while the throttle lock is held.
Preserve existing policy outcome and snapshot assertions.
* test: prove cleanup reruns remove newly completed sessions
JATMN
