feat(execute_code): stdout spillover — recover truncated output instead of re-running

[teknium1]

Maintainer-directed. execute_code's 50KB head(40%)/tail(60%) truncation DISCARDED the middle forever — unlike web_extract, which stores full text to cache/web with a read_file recipe in its footer. This ports that recover-don't-rerun pattern to execute_code, at both layers where clipping happens:

Host-side (_truncate_stdout_text — kernel results + remote per-call fallback)

Full stdout spilled to cache/exec/stdout-<digest>.txt (content-keyed, so identical reruns coalesce; spill_safety.write_text_exclusive, same hardening as cache/web). Result gains stdout_spill_path, and the truncation warning now teaches the recipe: "FULL output saved to … — page it with read_file(path=…, offset=…) instead of re-running." 5MB spill ceiling mirrors web_tools' MAX_STORED_TEXT_CHARS rationale.

Cell-side (kernel runner — clips in the CHILD before replying, so host-side alone can't see the middle)

Runner's _bounded() spills full text to the kernel tmpdir (HERMES_KERNEL_SPILL_DIR, set at spawn) before clipping; reply carries stdout_spill_path; host surfaces it with the same recipe plus the kernel-specific hint that variables still exist ("printing a narrower slice next call is often cheaper"). Best-effort at both layers: a failed spill degrades to today's plain clipping, never blocks the result.

Verified live (real kernel, temp HERMES_HOME)

~400KB output with a unique needle at the midpoint (inside the discarded window):

• inline output: needle absent (clipped, as before) → spill file: needle recovered, 500,026 bytes
• warning carries the read_file recipe; small outputs produce zero spill artifacts; kernel reuse unaffected

One pre-existing test updated: the remote-truncation contract now also asserts the spill path exists and the file holds both HEAD and TAIL (stronger than the old warning-text pin). Per-call remote wording kept path-neutral — the kernel-state hint appears only on the kernel path where it's true.

Suites: 86 passed / 1 pre-existing failure (TestRpcTokenAuthorization). Refs #94647/#96787/#96991 (kernel arc), web_tools _store_full_text (pattern source).

[github-actions]

૮ >ﻌ< ა ci review

_{ran on bc09d3e — feat(execute_code): stdout spillover — truncated output's fu}

⚠️ Warnings

OSV vulnerability scan · View job

6 known vulnerabilities found in pinned dependencies.

• CVE-2026-67213 in website/package-lock.json
• CVE-2026-71554 in uv.lock
• CVE-2026-70608 in package-lock.json
• CVE-2026-56876 in package-lock.json
• CVE-2026-70606 in package-lock.json
• CVE-2026-71554 in uv.lock

How to fix:

Review the findings in the Security tab. Update the affected dependencies if a patched version is available.

---

debug info

CI timings

CI timings · View report · View job

Wall time 4m3s vs 4m6s (-1.2%). 8 job(s) slower, 3 faster, 1 unchanged.

• Check no committed infographics / check-no-committed-infographics: +108.0s
• OS-specific tests / Windows-only tests: -9.0s
• OS-specific tests / macOS-only tests: +7.0s
• OSV scan / Scan lockfiles / osv-scan: +6.0s
• Python tests / Run tests: -4.0s