fix(tracing): classify durable HITL pauses and gate raw diagnostics

[huhoo]

Summary

• close durable HITL activations as suspended instead of treating a valid pause as an aborted run
• keep provider, turn, MCP, one-shot, and stream raw diagnostic content behind record_content=True
• preserve typed error classes and lifecycle/status metadata when content recording is disabled
• make MCP provider registration and one-shot cancellation cleanup fail-safe and deterministic
• document the suspended tracing lifecycle and privacy contract

Why

A durable HITL activation ends with AgentSuspendedEvent, not AgentEndEvent. The recorder previously ignored that event, so the required detach cleanup closed the still-open spans as cubepi.aborted=true. A valid pause was therefore indistinguishable from cancellation.

Separately, several error paths could retain raw provider/tool diagnostics even when the tracer was constructed with record_content=False. That made the privacy switch incomplete.

Behavior

• completed activations remain completed
• cancelled activations remain explicitly aborted
• durable HITL pauses now end with cubepi.run.outcome=suspended and are not marked aborted
• record_content=False retains operational IDs, enums, model/tool names, counts, timings, token usage, and typed error classes, but excludes raw messages, arguments/results, provider descriptions, exception messages, and stack traces
• record_stream=False continues to disable raw stream files

Validation

• tests/tracing: 224 passed
• full suite: 1780 passed, 90 skipped
• Ruff check/format: passed
• mypy: passed across 98 source files
• independent adversarial review: 0 BLOCKER / 0 IMPORTANT
• targeted mutations confirmed coverage for suspended-vs-aborted lifecycle, MCP registration cleanup, stream privacy, one-shot cancellation, and typed exception retention

Commits

• 5e51086 — durable HITL pauses are suspended, not aborted
• 550f56f — provider/turn raw errors follow content opt-in
• 019a261 — MCP/one-shot/stream diagnostics follow content opt-in

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[xfgong]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Keep it up!

Reviewed commit: f947b373d0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".