2433 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
freemo	4c419d48f5	fix(Python 3.13): replace deprecated asyncio.get_event_loop() and datetime.utcnow() calls ... - Replace all src/ loop = asyncio.get_event_loop() with get_running_loop() + exception-safe fallback pattern - Replace source-level asyncio.get_event_loop().run_until_complete( with context-managed event loop creation and proper cleanup - Replace route_bridge.py asyncio.get_event_loop().time() call with time.time() import to avoid creating event loops just for timestamp access - Add loop.close() in langgraph_bridge_steps tests to prevent resource leak from unclosed event loops (reviewed feedback #7) - Move Python 3.13 changelog entry from ### Added to ### Fixed section per CONTRIBUTING.md style guidelines (review feedback #6) Files modified: src/cleveragents/agents/base.py - replace get_event_loop().run_until_complete() src/cleveragents/langgraph/bridge.py - replace loop = get_event_loop() src/cleveragents/langgraph/nodes.py - replace both get_event_loop() calls src/cleveragents/reactive/route_bridge.py - replace with time.time(), remove unused asyncio import features/steps/langgraph_bridge_steps.py - add loop.close() for resource cleanup features/steps/reactive_application_coverage_steps.py - fix event loop patterns, add import time features/steps/route_bridge_coverage_steps.py - fix multiple get_event_loop/run_until_complete patterns, proper import ordering CHANGELOG.md - move Python 3.13 entry to ### Fixed ISSUES CLOSED: #11134	2026-05-13 04:42:53 +00:00
freemo	daee737934	fix(Python 3.13): replace deprecated asyncio.get_event_loop() and datetime.utcnow() calls ... - Replace all asyncio.get_event_loop() with get_running_loop() + safe fallback - Replace datetime.utcnow() with datetime.now(timezone.utc) - Add PYTHONWARNINGS safety net in nox session for remaining deprecations - Fix 7 failing BDD test scenarios under Python 3.13 ISSUES CLOSED: #11134	2026-05-12 12:04:30 +00:00
freemo	d1328e562f	Fix validation bypass for code longer than 10 characters — the length fallback was overriding LLM-based FAIL verdicts and rendering validation ineffective	2026-05-12 02:16:48 +00:00
hurui200320	b4a514e0f4	fix(cli): add spec-required --data-dir, --config-path, and -v global options to main_callback ... Implements ADR-021 §Global CLI Flags and ADR-024 §Resolution Chain. All three global options were missing from main_callback(), causing any invocation with these flags to crash with 'No such option'. Changes: - src/cleveragents/cli/main.py * Add _VERBOSITY_LOG_LEVELS tuple mapping verbose count to log levels (0=CRITICAL/silent, 1=ERROR, 2=WARNING, 3=INFO, 4=DEBUG, 5+=DEBUG) * Add --data-dir PATH option: validates path is a directory if it exists, sets CLEVERAGENTS_DATA_DIR env var, resets Settings singleton * Add --config-path PATH option: validates file exists and is a file, sets CLEVERAGENTS_CONFIG_PATH env var for ConfigService to pick up * Add -v (count=True) option: wires verbose count to configure_structlog * Store all three values in ctx.obj for subcommand access * Update _print_basic_help() to include the three new global options so 'cleveragents --help' (fast path) also lists them * In the catch-all Exception handler, print the original exception type+message directly to err_console so actionable details remain visible even when log level is CRITICAL (e.g. 'No such option') - src/cleveragents/application/services/config_service.py * ConfigService.__init__ now checks CLEVERAGENTS_CONFIG_PATH env var when no explicit config_path is passed, completing the resolution chain for --config-path CLI override Tests (all passing): - features/cli_global_options.feature (21 Behave scenarios) - features/steps/cli_global_options_steps.py - robot/cli_global_options.robot (8 Robot Framework integration tests) - robot/helper_cli_global_options.py Quality gates: lint ✓ typecheck ✓ unit_tests ✓ integration_tests ✓ Coverage: 96.52% (threshold 96.5% ✓) ISSUES CLOSED: #6785	2026-05-12 01:05:10 +00:00
CoreRasurae	e8d2f76466	feat(ci): implement TDD bug tag quality gate for bug fix PRs ... Add an automated quality gate that enforces TDD bug fix workflow rules on pull requests. The gate parses PR descriptions for bug-closing keywords (Closes/Fixes/Resolves #N, ISSUES CLOSED: #N), searches the codebase for corresponding TDD tests tagged @tdd_bug_N, and verifies that @tdd_expected_fail tags have been removed. Key components: - scripts/tdd_quality_gate.py: Main quality gate script with PR description parsing, TDD test discovery, and tag removal verification. All public functions validate arguments fail-fast and are statically typed. - noxfile.py: New tdd_quality_gate session that reads PR_DESCRIPTION from the environment and runs the quality gate script. - .forgejo/workflows/ci.yml: New tdd_quality_gate CI job that runs only on pull_request events, passing the PR body as PR_DESCRIPTION. - features/tdd_quality_gate.feature: 46 Behave scenarios covering PR parsing, TDD test search, tag removal verification, full gate logic, robot diff handling, edge cases, argument validation, bool guards, co-located bug false-positive guard, and main() CLI entry point. - features/steps/tdd_quality_gate_steps.py: Step definitions for all Behave scenarios using temporary directories for isolation. - robot/tdd_quality_gate.robot: 15 Robot Framework integration tests exercising the gate end-to-end via a helper subprocess. - robot/helper_tdd_quality_gate.py: Helper script for Robot tests with sentinel-based sub-commands. Review-round fixes applied: - check_expected_fail_removed now uses _contains_tag_token for word-boundary matching (avoids false positives on partial tag names) - Diff expected-fail removal detection tracks flags at file level instead of per-hunk (fixes false negatives when tags span hunks) - parse_bug_refs filters out issue number zero - Redundant double error reporting eliminated (file-level check short-circuits the diff-level check) - run_quality_gate returns (errors, bug_refs) tuple to avoid redundant re-parsing in main() - Regex compilation cached via functools.lru_cache - Nox session no longer installs the full project (stdlib only) - CI checkout uses fetch-depth: 0 for reliable merge-base resolution Review-round 2 fixes applied: - _diff_has_expected_fail_removal_for_bug now requires the removed line to contain both the expected-fail tag and the specific bug tag (fixes false positives when two bugs share the same test file) - check_expected_fail_removed error messages use the correct tag prefix per file type (@tdd_bug_N for .feature, tdd_bug_N for .robot) - bool values rejected by bug-number validation guards in find_tdd_tests, check_expected_fail_removed, and _diff_has_expected_fail_removal_for_bug - File-read error handling catches UnicodeDecodeError alongside OSError (root-safe unreadable-file handling via invalid-UTF-8 test fixture) - Temp directory cleanup added to after_scenario hook in environment.py - 8 new Behave scenarios: bool type guards (2), co-located bug false-positive regression (1), run_quality_gate argument validation (3), and main() CLI entry point exit codes (2) Review-round 3 fixes applied: - Synthetic PR diff helper (_default_pr_diff_for_bug_refs) now auto-detects .robot vs .feature file type from the temp search tree and generates the matching diff format (fixes under-tested robot-format diff code path in multi-bug integration scenarios) - check_expected_fail_removed test step now filters files by bug tag via find_tdd_tests before checking (matches production path in run_quality_gate) - after_scenario temp directory cleanup no longer sets context.temp_dir = None (fixes cleanup conflict with cli_init_yes_flag_steps.py cleanup functions that run after hooks) - 2 new Behave scenarios: multi-line PR description parsing, and non-string pr_diff type guard for run_quality_gate ISSUES CLOSED: #629	2026-05-12 00:22:49 +01:00
clever-agent	dd763f50d9	build: moved e2e tests to master only yaml	2026-05-11 17:35:41 -04:00
clever-agent	81229422f2	Revert "ci(docker): Ensure CI uses CT docker proxy to workaround Docker ratelimit issues" ... This reverts commit 9c5f19854d.	2026-05-11 17:22:45 -04:00
HAL9000	b692894c88	fix(tests): remove AmbiguousStep conflict in security_pyyaml_dependency_steps ... Duplicate step definitions for 'the pyproject.toml file exists at', 'I read the project dependencies from pyproject.toml', 'I attempt to import the module', and 'the import should succeed without errors' were present in both security_pyyaml_dependency_steps.py and tdd_a2a_sdk_dependency_steps.py, causing a behave.AmbiguousStep error that failed the unit_tests CI gate. Removed the 4 duplicate step definitions from security_pyyaml_dependency_steps.py, keeping only the 3 PyYAML-specific step definitions. The shared steps are now exclusively provided by tdd_a2a_sdk_dependency_steps.py. Also resolved merge conflicts from master in CONTRIBUTORS.md: preserved all master additions (database resource types entry) alongside the existing PyYAML upgrade entry. ISSUES CLOSED: #9055	2026-05-11 08:59:08 +00:00
HAL9000	2f01e7d625	fix(tests): resolve lint format failure and harden pyyaml BDD step path resolution ... - Move _flatten_toml_dict to module level: eliminates nested function definition that ruff format reformats unexpectedly; makes the helper independently testable and clearly documented. - Rename helper to _flatten_toml_dict (was _flatten) for unambiguous module-level identity and improved readability. - Add _PROJECT_ROOT constant computed from __file__ so pyproject.toml is always resolved via an absolute path regardless of the process working directory — fixes brittle relative-path lookup that fails when behave-parallel forks workers whose cwd differs from the repo root. - Fix ruff format violations: wrap long assert message, normalise decorator quote style, ensure trailing newline, fix import ordering (behave imports before packaging). - All quality gates pass: lint, format --check, security_scan, dead_code. ISSUES CLOSED: #9055	2026-05-11 08:59:08 +00:00
HAL9000	63746b4d30	fix(pyyaml): address CI review feedback from PR #11012 ... - Fix ruff lint F541 error: remove unnecessary f-string prefix - Remove dead step_uv_lock_specifier step (never called by BDD scenarios) - Update CONTRIBUTORS.md to reference correct PR number (#11012 not #9244) ISSUES CLOSED: #9055	2026-05-11 08:59:08 +00:00
HAL9000	05acc26c40	chore(deps): upgrade PyYAML to address known security vulnerability ... - Added `pyyaml>=6.0.3` dependency constraint to pyproject.toml after aiohttp to prevent installation of vulnerable older versions with known YAML parsing security issues. - Updated uv.lock package dependencies and requires-dist to include pyyaml entry with specifier '>=6.0.3'. - Added changelog Security section entry under [Unreleased] documenting the upgrade for issue #9055. - Updated CONTRIBUTORS.md with contribution note (PR #9244). - Added BDD test scenario verifying PyYAML security dependency constraint. ISSUES CLOSED: #9055	2026-05-11 08:59:08 +00:00
HAL9000	a1ea40d2e7	feat(plans): implement agents plan rollback command for checkpoint-based rollback ... Documents the agents plan rollback command (CLI entry at src/cleveragents/cli/commands/plan.py) that was integrated into master under Epic #8493. The command provides checkpoint-based plan state restoration, allowing plans to be restored to a previous checkpoint and resuming execution from that point. CHANGELOG.md entry added under [Unreleased] > ### Added section; CONTRIBUTORS.md updated with HAL 9000's contribution for this checkpoint-based rollback feature. ISSUES CLOSED: #8557 Epic: #8493	2026-05-11 06:54:32 +00:00
hurui200320	87a7ce35d7	feat(session): implement real LLM actor invocation in session tell ... Replace the M3 stub in `agents session tell` with real orchestrator actor invocation via `SessionWorkflow.tell()`. The stub echoed a canned `Acknowledged: ...` response without calling any LLM or actor; this commit wires up the full pipeline: Architecture: - New `SessionWorkflow` (Application layer) orchestrates LLM invocation for session tell. Accepts a `ProviderRegistry` and `ToolRegistry`; falls back to `FakeListLLM` when no provider is configured. - `LangChainSessionCaller` implements the `LLMCaller` protocol, building history-aware LangChain message lists from the session conversation and invoking the LLM via `ToolCallingRuntime.run_tool_loop()`. - `TellResult` (Pydantic BaseModel) carries the assistant response plus token usage (input_tokens, output_tokens, cost_usd, duration_ms). Domain / service layer: - `SessionActorNotConfiguredError` added to the session domain model; raised when tell is invoked with no actor on the session and no `--actor` override. Clear message; CLI exits with code 1. - `SessionService.get_messages()` abstract method added (+ implementation in `PersistentSessionService`) to load ordered message history. A2A facade: - `A2aLocalFacade` gains `message/send` and `message/stream` standard A2A operation handlers that route to `SessionWorkflow.tell()`. Total supported operations count: 42 → 44. CLI: - `session tell` command delegates to `_build_session_workflow()` (patchable factory) instead of directly calling `SessionService`. - Non-streaming: `SessionWorkflow.tell()` returns `TellResult`; output includes a Usage panel (Rich/Plain) or a `usage` object (JSON/YAML). - Streaming: `SessionWorkflow.tell_stream()` yields tokens; CLI prints them via `console.print` (not raw `sys.stdout.write`). - Token usage recorded via `SessionService.update_token_usage()` in both paths. Tests: - New Behave feature `session_tell_llm.feature` (4 scenarios): real LLM response persisted; streaming yields tokens; no-actor exits code 1; `--actor` override resolves correctly. - New Robot suite `session_tell_llm.robot` (4 tests): end-to-end with stub LLM injected via monkey-patching `_resolve_llm`. - Updated all existing `session tell` test steps to patch `_build_session_workflow` returning a mock `TellResult` so tests remain isolated from the LLM layer. - Updated operation-count assertions (42 → 44) in `a2a_cli_facade_integration`, `consolidated_misc`, `m6_autonomy_acceptance` feature files and steps. Cycle 7 (Review ID 8088) fixes: - Blocker 4: Split `session_workflow.py` (was 801 lines) into two files: `session_workflow.py` (467 lines) and `session_caller.py` (318 lines). Extracted: `LangChainSessionCaller`, `extract_content`, `extract_token_usage`, `estimate_cost`, `estimate_tokens`, `history_to_langchain_messages`, and stub classes. - Blocker 5: Route CLI streaming path through `_facade_dispatch("message/stream", ...)` instead of directly calling `workflow.tell_stream()`. The facade's `_handle_message_stream` falls back to non-streaming with `streamed: false` (acceptable for this milestone per the spec). - Updated streaming test assertion to validate full response presence (no longer checks token-by-token word positions, since the facade fallback returns a complete message). ISSUES CLOSED: #5784	2026-05-11 04:39:29 +00:00
CoreRasurae	78be08870c	fix(cli): validate actor provider field at correct config nesting level ... - Actor configuration in V3 is now obtained from the nested configuration parameter, according to the specification. - Removed the legacy V2 fallback support and the tests affected by that removal. Mocked existing steps to allow remaining V2 features to be covered/tested. - Fix add() to pass unsafe flag to add_v3() for proper unsafe actor handling - Add _extract_nested_v3_config() to extract provider/model from nested actors.<name>.config block before v3 schema validation - Remove v2 extraction test scenarios from consolidated_actor.feature that call removed _extract_v2_actor() and _extract_v2_options() methods - Update test YAML in actor_registry_spec_yaml_steps.py to exercise nested type detection (no top-level type field) - Add @tdd_issue_4300 regression test tag to existing spec-compliant actors map scenario ISSUES CLOSED: #4300	2026-05-09 23:13:33 +01:00
HAL9000	5ee08ea946	fix(plan): remove TDD expected fail tag and fix format violations ... - Remove @tdd_expected_fail from Tree with json format scenario in plan_explain.feature (bug is now fixed by the envelope implementation) - Update scenario assertions to verify new spec-required envelope format instead of old bare-array format - Add step_tree_json_valid_envelope step definition in plan_explain_steps.py - Fix ruff format violation in plan_explain_cli_coverage_steps.py ISSUES CLOSED: #9163	2026-05-09 12:23:24 +00:00
HAL9000	6e1646d565	fix(plan): wrap plan tree JSON/YAML output in spec-required command envelope.\n\nISSUES CLOSED: #9163 ... # Conflicts: # CONTRIBUTORS.md	2026-05-09 12:23:24 +00:00
HAL9000	815f546bd2	fix(plan): wrap plan tree JSON/YAML output in spec-required command envelope.	2026-05-09 12:23:24 +00:00
HAL9000	f78c1c2c98	docs(resources): correct CHANGELOG entry to accurately describe DatabaseResourceHandler ... Replace the factual inaccuracy claiming a PostgreSQL resource subclass with accurate description of the unified DatabaseResourceHandler design. The PR description and all code use a unified handler pattern with type-specific routing via PostgreSQL, MySQL, SQLite, and DuckDB type definitions - there is no PostgreSQLResource subclass anywhere in the codebase. This fix was requested in review #8172.	2026-05-09 10:01:20 +00:00
HAL9000	3f0ce3d20a	feat(resources): add CHANGELOG and CONTRIBUTORS entries for PR #10591 ... - Add CHANGELOG.md entry under [Unreleased] / Database resource types (PostgreSQL, SQLite) with transaction-based sandbox strategy (issues #8608, Epic #8568) - Update CONTRIBUTORS.md with HAL 9000 contribution note for database resource types implementation ISSUES CLOSED: #8608	2026-05-09 10:01:20 +00:00
HAL9000	2cba7d41bc	chore(agents): fix bug-hunt-pool-supervisor tracking prefix AUTO-BUG-POOL to AUTO-BUG-SUP (complete fix) ... Replace all remaining AUTO-BUG-POOL references with correct AUTO-BUG-SUP in agent-system-specification.md, automation-tracking.md documentation and agent-system-specification.md spec document, replaced with correct `AUTO-BUG-SUP` prefix used by the bug-hunt-pool-supervisor agent (#7875). ISSUES CLOSED: #7875	2026-05-09 00:05:17 +00:00
HAL9000	57881a075b	docs(spec): update specification — validation gate blocks on empty validation summary	2026-05-08 19:14:24 +00:00
HAL9000	af6e54f0b2	fix(tests): reformat pr_compliance_pool_supervisor_steps.py and fix pre-existing lint errors ... - ruff format: multiline AGENT_DEF_PATH assignment, compress all() comprehension, add blank line before decorator block — fixes CI / unit_tests lint failure - ruff --fix: remove unused imports from tests/actor/test_registry_builtin_yaml.py (pre-existing F401 errors on master) ISSUES CLOSED: #9824	2026-05-08 18:50:33 +00:00
HAL9000	addbc51dc4	fix(tests): fix lint violation UP035 and match feature file step text to Pool: prefixes ... - B5 (lint): changed 'from typing import Any, Callable' to 'from collections.abc import Callable' per ruff UP035 rule - B7 (step mismatch): added 'Pool: ' prefix to all Then/And steps in pr_compliance_pool_supervisor.feature to match step definition decorators ISSUES CLOSED: #9824	2026-05-08 18:50:33 +00:00
HAL9000	96670720f0	fix(tests): resolve Behave AmbiguousStep conflict in pool-supervisor steps ... The pr_compliance_pool_supervisor_steps.py file defined @then step texts identical to those in the pre-existing pr_compliance_checklist_steps.py, causing Behave's ambiguous-step detection to reject the test run. Fix: prefix all pool-supervisor @then decorators with 'Pool:' so they're uniquely identifiable by Behave while reusing the same validator logic. Also fix PROJECT_ROOT from parents[3] -> parents[2] for correct repo root resolution in step files located at features/steps/. ISSUES CLOSED: #9824	2026-05-08 18:50:33 +00:00
HAL9000	fbe6308200	feat(agents): add mandatory PR compliance checklist to implementation-pool-supervisor ... Add a new implementation-pool-supervisor agent definition with an embedded 8-item PR Compliance Checklist. Workers dispatched by the pool supervisor must complete all 8 items before creating any PR: CHANGELOG.md update, CONTRIBUTORS.md update, commit footer (ISSUES CLOSED: #N), CI verification, BDD tests, Epic reference, label application via forgejo-label-manager, and milestone assignment. Includes concrete markdown examples for each subsection and compliance verification pseudocode. Also adds BDD test coverage (pr_compliance_pool_supervisor.feature + steps) to verify the pool supervisor agent definition contains all 8 checklist items. Parent Epic: #9779 ISSUES CLOSED: #9824	2026-05-08 18:50:33 +00:00
HAL9000	e8996d66d7	test(core): fix ASV benchmark timing methodology and remove unused imports ... - Remove unused `from typing import Any` import from core_retry_patterns_bench.py - Refactor CircuitBreakerStateTransitionBench into three separate benchmark classes (CircuitBreakerClosedToOpenTransitionBench, CircuitBreakerOpenToHalfOpenTransitionBench, CircuitBreakerHalfOpenToClosedTransitionBench), each with a proper setup() method that pre-creates the CircuitBreaker in the correct initial state so only the transition itself is measured - Move open-state CircuitBreaker creation for async fast-fail benchmark into setup() in CircuitBreakerAsyncBench, eliminating instance creation overhead from the timed method Addresses reviewer feedback on PR #10961.	2026-05-08 14:21:41 +00:00
HAL9000	9aa966cdaa	fix(bench): correct API usage and formatting in core ASV benchmark files ... - Fix get_retry_decorator() calls to use category string instead of keyword arguments (max_attempts, base_delay, etc.) - Fix retry_on_result() calls to pass required predicate argument - Fix retry_service_operation() to use circuit_breaker= (CircuitBreaker instance) instead of use_circuit_breaker= (bool), and backoff_strategy= instead of wait_strategy= - Fix is_read_only_plan_operation() calls to pass dict instead of string - Fix RetryContext() to use operation_name= instead of service_name=, remove non-existent use_circuit_breaker and attempt_count constructor params - Fix retry_auto_debug() to use max_debug_attempts= instead of service_name=/operation_name= (which are not valid parameters) - Remove unused Any import from core_circuit_breaker_bench.py - Apply ruff format to all three benchmark files to fix CI format check	2026-05-08 14:21:41 +00:00
HAL9000	ffd83e8712	test(core): add ASV performance benchmarks for core module ... Added three new ASV benchmark suites for the core module: 1. core_circuit_breaker_bench.py - Benchmarks for CircuitBreaker class: - Closed state call overhead - Open state fast-fail latency - State transition overhead (closed→open, open→half-open, half-open→closed) - Async operations - Initialization overhead 2. core_retry_patterns_bench.py - Benchmarks for retry decorators: - Decorator construction overhead for exponential backoff, jitter, timeout, and result-based retry - Happy-path invocation overhead - Async decorator operations - Decorator usage with function arguments - Factory function performance - Various configuration scenarios 3. core_retry_service_patterns_bench.py - Benchmarks for service-level retry: - retry_service_operation decorator construction and invocation - retry_auto_debug decorator performance - RetryContext operations - is_read_only_plan_operation utility - Different wait strategies (exponential, linear, fixed, jitter) These benchmarks ensure latency regressions in core resilience primitives are caught early. ISSUES CLOSED: #1921	2026-05-08 14:21:41 +00:00
HAL9000	3f8f8eb0bf	docs(agents): add State/In Review and Priority labels to pr-creator ... ISSUES CLOSED: #8520	2026-05-08 13:22:11 +00:00
hamza.khyari	a79d22642a	docs(tui): document MULTILINE limitation and spec reference in _PromptSymbolMixin ... The spec (§29257) refers to 'PromptTextArea' implying a multi-line TextArea widget, but TextArea.__init__() dropped the placeholder kwarg in textual >=1.0. This implementation uses Input (single-line) as a workaround. MULTILINE mode detection works via content inspection but the widget cannot display multiple lines. Document this gap and reference the spec sections for future migration.	2026-05-08 11:15:36 +00:00
HAL9000	b588de18d6	fix(tui): rebase onto master and add CHANGELOG entry for prompt symbol fix (#6431) ... Rebases the TUI prompt symbol fix onto the latest master, resolving conflicts with the TextArea→Input refactor and the dollar-prefix shell mode addition. Adds the missing CHANGELOG.md entry for #6431 and removes the now-obsolete tui_prompt_textarea feature/steps that tested the old TextArea-based implementation. ISSUES CLOSED: #6431	2026-05-08 11:15:36 +00:00
HAL9000	a130d63357	docs(timeline): update schedule adherence Day 101 (2026-04-12) (#7858)	2026-05-08 10:21:23 +00:00
HAL9000	a15b77f6a6	fix(acms): normalize context path matching for absolute paths in _path_matches ... Fixes issue #10972 where _path_matches() used PurePath.full_match()/match() which requires the entire path to match. Since fragment metadata stores absolute paths (e.g. /app/.opencode/skills/SKILL.md) while project context --exclude-path/--include-path settings produce relative globs (.opencode/*, docs/*), include/exclude filters were silently ineffective. Added _matches_any() static helper in execute_phase_context_assembler.py that: - Tries full_match(pattern) as-is for relative paths and anchored patterns - Auto-prefixes relative patterns with **/ so they match absolute paths Updated _matches_pattern() in context_phase_analysis.py with same logic plus zero-depth compatibility shim. Added 7 new BDD regression scenarios with @tdd_issue tags: - 5 in execute_phase_context_assembler_coverage.feature (absolute path matching) - 1 extra trailing ** glob exclusion test - 1 in project_context_phase_analysis.feature (phase analysis exclusion) ISSUES CLOSED: #10972	2026-05-08 09:57:18 +00:00
HAL9000	5b6224daa8	fix(plugins): prevent arbitrary code execution in PluginLoader.validate_protocol() ... - Add guard in TypeError fallback path: raise ProtocolMismatchError when issubclass raises TypeError and protocol has no inspectable members, preventing silent True return for unverifiable protocols - Update test scenario descriptions to accurately reflect the new implementation (no instantiation occurs at any point) - Update step definition comments to remove references to old instantiation-based code paths ISSUES CLOSED: #7418	2026-05-08 09:32:29 +00:00
HAL9000	c58ceb7918	fix(plugins): strengthen validate_protocol structural check and satisfy linter	2026-05-08 09:32:29 +00:00
freemo	c84ae3bb96	fix(plugins): prevent arbitrary code execution in PluginLoader.validate_protocol() ... Fixes #7418 - Security vulnerability where PluginLoader.validate_protocol() instantiated arbitrary plugin classes with no-arg constructor, allowing arbitrary code execution during validation. Changes: - Reversed validation order: use issubclass() first (safe, no instantiation) - Only instantiate if structural check is insufficient - Prevents constructor code execution from untrusted plugins - Maintains protocol validation functionality This prevents RCE attacks via malicious plugin constructors during the validation phase.	2026-05-08 09:32:29 +00:00
HAL9000	883ec872e2	fix(CI): resolve remaining lint/format violations in PR #8722 ... - Apply ruff format to features/steps/strategize_decision_recording_steps.py: expanded single-line set literal to multi-line canonical form (PEP 87) This was the sole remaining CI lint blocker per review cycle 14. - Remove unused imports from tests/actor/test_registry_builtin_yaml.py: removed 'Settings' and 'ProviderRegistry' to fix F401 errors. These were pre-existing violations caught by ruff check. ISSUES CLOSED: #8522 Closes: #8722	2026-05-08 06:24:23 +00:00
HAL9000	e7fb7168b4	feat(decisions): implement decision recording hook in Strategize phase ... Implement the StrategizeDecisionHook class for recording decisions during the Strategize phase. The hook captures every decision point with question, chosen_option, alternatives_considered, confidence_score, rationale, and full context_snapshot (hot_context_hash, actor_state_ref, relevant_resources). Supports four decision types: strategy_choice, resource_selection, subplan_spawn, and invariant_enforced. Includes a DecisionRecorder protocol port for decoupled persistence and capture_context_snapshot utility function. Comprehensive BDD test suite with 40+ scenarios covering all decision types, context snapshot validation, error handling, and tree structure tracking. ISSUES CLOSED: #8522	2026-05-08 06:24:23 +00:00
HAL9000	85473d894d	ci: retrigger CI after docker infrastructure recovery	2026-05-08 06:09:11 +00:00
HAL9000	253768f886	fix(database/migration_runner): add check_same_thread=False to get_current_revision() SQLite engine ... Pass connect_args={'check_same_thread': False} when creating the SQLite engine in get_current_revision(), consistent with init_or_upgrade() which already does this for all SQLite engines. Without this flag, calling get_current_revision() from a thread other than the one that created the engine raises a ProgrammingError. Add a Behave scenario to verify the connect_args are passed correctly. ISSUES CLOSED: #10952	2026-05-08 06:09:11 +00:00
HAL9000	241c2602b0	fix(quality-gates): resolve ruff formatting and missing type annotations ... Fix two lint blockers identified in PR review: 1. Collapsible list comprehension format (ruff RUF015): Collapse the "projects" list comprehension in _build_strategize_context_snapshot() from 3 lines to a single line within the 88-character limit. 2. Missing type annotations on 13 new BDD step functions: All existing step functions use explicit `context: Context` and `-> None` return type annotations per project style. The 13 new step functions added for issue #9056 were missing these declarations, causing lint warning RUF012 (missing type annotations on function arguments). Verified: - nox -s lint passes (ruff check + ruff format --check) - nox -s typecheck passes (pyright 0 errors) - Pre-existing unit_tests/CI timeouts are infrastructure-related ISSUES CLOSED: #9056	2026-05-08 05:14:03 +00:00
HAL9000	8ed8c25652	fix(plan-lifecycle): record full context snapshots in Strategize phase ... The Strategize phase was recording decisions with minimal context snapshots (only a hash of question+chosen_option), violating the v3.2.0 acceptance criterion that decisions must include full context snapshots sufficient to replay the decision. Changes: - Add _build_strategize_context_snapshot() helper that builds a full ContextSnapshot from plan metadata (description, action_name, strategy_actor, project_links) - Update _try_record_decision() to accept an optional context_snapshot parameter and forward it to DecisionService - Update start_strategize() to build and pass a full context snapshot - Add 3 BDD scenarios in decision_recording.feature verifying that hot_context_hash, hot_context_ref, actor_state_ref, and relevant_resources are all populated for Strategize-phase decisions ISSUES CLOSED: #9056	2026-05-08 05:11:47 +00:00
HAL9000	0ce2e14f2d	style: fix ruff format violations in devcontainer_autodiscovery_wiring_steps.py ... Apply ruff auto-format to resolve CI lint failure: long lines in subprocess.run() calls and list comprehensions were not wrapped to the project's line-length limit.	2026-05-07 23:49:20 +00:00
HAL9000	3d7afb4378	fix(resource): wire discover_devcontainers() into git-checkout and fs-directory handlers ... GitCheckoutHandler.discover_children() and FsDirectoryHandler.discover_children() now call discover_devcontainers() after scanning for fs-directory children. Any .devcontainer/devcontainer.json or root-level .devcontainer.json found at the resource location is registered as a devcontainer-instance child resource with provisioning_state: discovered. Named configurations are also discovered and carry the configuration name in the config_name property. This wires the previously-isolated discover_devcontainers() function into the production code path, enabling the spec's zero-configuration devcontainer experience. ISSUES CLOSED: #4740	2026-05-07 23:49:20 +00:00
Luis Mendes	15e72b8407	fix(events): log full exception details in ReactiveEventBus.emit() error handler ... Add exc_info=True to the _logger.warning() call in the per-handler exception block of ReactiveEventBus.emit(). The handler already logged error=str(exc) (the exception message text), but omitted the traceback. With exc_info=True structlog now forwards the full traceback to the configured log output, giving developers the diagnostic detail needed to debug subscriber failures in production. Remove the @tdd_expected_fail tag from the traceback scenario in features/tdd_event_bus_exception_swallow.feature so that both TDD scenarios (#988) run as normal regression guards. Fix TDD tags in robot/tdd_e2e_implicit_init.robot: replace incorrect tdd_bug/tdd_bug_1023 tags with the canonical tdd_issue/tdd_issue_1023/ tdd_expected_fail tags so the tdd_expected_fail_listener properly inverts results while bug #1023 remains open. ISSUES CLOSED: #988	2026-05-07 23:39:08 +01:00
Dev User	23e9848f95	fix(cli): make actor NAME argument optional, derive from YAML config ... Implement NAME argument as optional with derivation from config file when not provided. Changes: - actor.py: NAME argument changed from required 'str' to optional 'str | None = None' - Added help text explaining NAME can be omitted and derived from config - Added logic to derive name from config_blob.get('name') when name arg is None - Raises BadParameter if neither name argument nor config 'name' field is provided - Updated docstring signature to reflect optional NAME: 'agents actor add [--config|-c <FILE>] [<NAME>]' - Updated examples to show config-only usage ISSUES CLOSED: #4186	2026-05-07 20:05:33 +00:00
CoreRasurae	d47d560a2e	test(behave): Fix failing tests after rebase on master	2026-05-07 20:05:33 +00:00
CoreRasurae	ac84f314ff	test(behave): Fix concurrent BDD tests failures	2026-05-07 20:05:33 +00:00
CoreRasurae	272821028f	test(behave): Remove tdd_expected fail for issue #2609 ... Issue is already implemented in master via commits b6959aeff and 491781714	2026-05-07 20:05:33 +00:00
Dev User	6b5568af1d	fix(tests): update PlanModel step texts to match renamed base step ... The base step 'I create a plan in strategize phase' was renamed to 'I create a PlanModel in strategize phase' to avoid AmbiguousStep collision. This commit updates compound step definitions that use the base step: - 'I create a plan in strategize phase with errored state' - 'I create a plan in strategize phase with processing state' - 'I create a plan in strategize phase with cancelled state'	2026-05-07 20:05:33 +00:00