Wire PlanExecutionACMSIntegration into PlanExecutor and RuntimeExecuteActor
via dependency injection. PlanExecutor now accepts an optional acms_integration
parameter and passes it to RuntimeExecuteActor, which uses it to assemble
context via ACMS policies before LLM calls instead of passing raw file dumps.
Added BDD tests verifying the DI wiring and context assembly integration.
Updated CHANGELOG to document the plan execution engine integration.
ISSUES CLOSED: #9584
The CI lint job runs both ruff check and ruff format --check. The format
check was failing because 5 files had formatting inconsistencies. Applied
ruff format to fix the CI lint failure.
ISSUES CLOSED: #9584
Implemented a new context policy configuration loader and integrated plan execution context assembly for ACMS. Key additions include:
- New module: src/cleveragents/acms/context_policy_loader.py
- ContextPolicyConfigurationLoader class for loading YAML/TOML configurations
- Data models: PolicyScope and ContextPolicyConfig dataclasses
- ViewPolicyConfiguration for per-view policy management
- Schema validation to ensure policy configurations adhere to expected structure and constraints
- Supports loading configurations from both files and strings, with robust error reporting
- New module: src/cleveragents/acms/plan_execution_integration.py
- ACMSContextAssembler for assembling runtime context based on policy-driven decisions
- PlanExecutionACMSIntegration to connect with the plan execution engine
- Flexible policy loading from files or strings, allowing runtime configurability
- BDD tests
- features/acms_context_policy_loader.feature (20 scenarios) validating loader behavior and policy scoping
- features/acms_plan_execution_integration.feature (8 scenarios) validating end-to-end plan-context integration
- features/steps/acms_context_policy_loader_steps.py (step definitions)
- features/steps/acms_plan_execution_integration_steps.py (step definitions)
- Tests cover YAML/TOML parsing, validation errors, per-view policy application, and plan integration flows
- Updated exports
- Updated src/cleveragents/acms/__init__.py to export the two new modules, enabling easier imports and usage
ISSUES CLOSED: #9584
Add threading.RLock to InvariantService to protect shared state
(_invariants dict, _enforcement_records list) from concurrent access
by multiple threads during parallel plan execution. Prevents
RuntimeError: dictionary changed size during iteration and data
corruption in multi-threaded environments.
Changes:
- Added self._lock = RLock() in __init__
- Wrapped all public methods (add_invariant, list_invariants,
remove_invariant, get_effective_invariants, enforce_invariants)
with lock acquisition via context managers
- Added helper read methods: get_enforcement_records(), get_invariant(),
get_invariants_snapshot() -- all thread-safe
- Added BDD tests for concurrent access patterns
- Updated CHANGELOG.md and CONTRIBUTORS.md
ISSUES CLOSED: #7524
- Use @dataclass(slots=True) on BudgetViolation, ContextFile, BudgetEnforcer
so the features/architecture.feature "Type hints are used throughout"
scenario passes (the AST check only flags bare @dataclass decorators,
consistent with the project-wide convention used elsewhere in src/).
- Re-format features/steps/acms_budget_enforcement_steps.py and
robot/helper_acms_budget_enforcement.py via ruff format to clear the
lint gate's ruff format --check failure.
ISSUES CLOSED: #9583
Restore explicit 'from cleveragents.acms.uko import (...)' block in __init__.py so that acms_skeleton_compressor.py can import CODE_DETAIL_LEVEL_MAP etc.
Fix invalid dict[str, callable] annotation in robot helper to use
collections.abc.Callable[[], None].
Remove unused noqa directives (E501, C901) now that ruff rules are stricter.
ISSUES CLOSED: #9583
- Fix BDD test state leakage by unconditionally resetting BudgetEnforcer
in step_create_budget_enforcer_with_max_total_size instead of using
conditional if/else reconstruction that skipped the first Background
step's max_file_size from being preserved.
- Add explicit type annotations (context: object) to all Behave step
function signatures for Pyright compliance.
- Fix ruff format compliance by standardizing decorator string
formatting in acms_budget_enforcement_steps.py.
- Correct __init__.py exports: renamed _uks_exports -> _uko_exports
typo and fixed the __all__ reference to use the corrected variable.
- Add Robot Framework integration test helper using inline imports
(from cleveragents.acms.budget_enforcement import BudgetEnforcer)
instead of sys.path manipulation, and update robot tests to use
python3 and ${WORKSPACE} paths for CI compatibility.
ISSUES CLOSED: #9583
- Rename _uks_exports to _uko_exports for consistency with import alias
- Move BudgetEnforcer reconstruction out of if/else branch in
step_create_budget_enforcer_with_max_total_size so it always creates
a fresh instance, eliminating cross-scenario state leakage
The root cause was that the second Background step unconditionally
overwrote the enforcer only when hasattr existed — but the enforcer
from the previous scenario carried over stale constraints. Now both
Background steps run in a well-defined sequence: step_one sets
max_file_size, step_two reconstructs with that preserved value and
new max_total_size, before every scenario.
ISSUES CLOSED: #9583
Fix a critical concurrency bug in A2aEventQueue.publish() where the method
iterates over _subscriptions without holding a lock. This causes RuntimeError:
dictionary changed size during iteration when subscribe_local/unsubscribe are
called concurrently from other threads.
The fix introduces a threading.Lock to protect all state mutations and
dictionary access in the A2aEventQueue class, while carefully ensuring callbacks
are invoked outside the lock to prevent potential deadlocks.
Changes:
- src/cleveragents/a2a/events.py: Added _lock attribute, protected
__init__, is_closed, publish, subscribe_local, unsubscribe, get_events,
and close methods with threading.Lock snapshot pattern for callbacks.
- features/a2a_event_queue_concurrency.feature: BDD feature file with 6
scenarios covering concurrent publish/subscribe/unsubscribe safety.
- features/steps/a2a_event_queue_concurrency_steps.py: Step definitions
implementing multi-threaded concurrency test harness.
ISSUES CLOSED: #7604
The DEFAULT_MAX_TOKENS_HOT was 8000 (should be 16000),
DEFAULT_MAX_DECISIONS_WARM was 500 (should be 100), and
DEFAULT_MAX_DECISIONS_COLD was 5000 (should be 500). These values in context_tier_settings.py did not match the canonical defaults defined in TierBudget model (tiers.py) or Settings class defaults, causing incorrect budget enforcement when settings were None.
ISSUES CLOSED: #1443
The empty-session_id guard at the top of _cleanup_session_devcontainers
became unreachable when _handle_session_close was hardened to raise
ValueError on missing/empty session_id before any cleanup runs. The
two dead lines were the only path through this method that the prior
"empty session_id and no service returns ok" coverage scenario
exercised; once that scenario was rewritten to assert the new
"error" verdict, the guard stopped being hit and the coverage gate
regressed below threshold.
Removing the dead branch restores coverage. The remaining body of
_cleanup_session_devcontainers is always called with a non-empty
session_id (both call sites in _handle_session_close run after the
entry-level ValueError guard), and the docstring now records that
invariant for future readers.
ISSUES CLOSED: #9250
The session_id validation guard added to _handle_session_close in
A2aLocalFacade raises ValueError when session_id is empty. The prior
commit aligned the Behave .feature scenarios but missed the Robot
helper at robot/helper_m6_autonomy_acceptance.py, which still
dispatched session.close with empty params and tripped the new
guard — causing the M6 A2A Facade Session Lifecycle integration
test to fail.
Pass the session_id returned by the preceding session.create call
so the close round-trip succeeds end-to-end.
ISSUES CLOSED: #9250
The session_id validation guard added to _handle_session_close in
A2aLocalFacade now raises ValueError when session_id is empty or
missing. Update three pre-existing smoke scenarios that previously
dispatched session.close with empty params to pass an explicit
session_id, aligning the smoke contract with the security fix.
The negative-path scenarios (@tdd_issue_9250) in
a2a_facade_coverage.feature continue to verify the ValueError path
with empty/missing session_id.
ISSUES CLOSED: #9250
- Fix 2-space -> 4-space indentation on _handle_session_close in
facade.py; this single error caused every CI gate to fail
(lint, typecheck, unit_tests, integration_tests, e2e_tests, security)
- Add @tdd_issue @tdd_issue_9250 tags to the three session_id
validation scenarios in a2a_facade_coverage.feature per the mandatory
bug-fix TDD workflow requirement
- Fix CONTRIBUTORS.md entry: was PR #11053 / issue #9094, corrected to
PR #11098 / issue #9250
ISSUES CLOSED: #9250