Epic #8477: added ExecutePhaseDecisionHook as the Execute-phase mirror of
StrategizeDecisionHook. Provides six recording methods for implementation
choices, tool invocations, error recovery, validation responses, subplan
spawn, and resource selection during execution contexts. Captures full
context snapshots with SHA-256 hashes and persists decisions atomically
via DecisionService. Includes comprehensive Behave test coverage.
ISSUES CLOSED: #8477
- Added `pyyaml>=6.0.3` dependency constraint to pyproject.toml after
aiohttp to prevent installation of vulnerable older versions with known
YAML parsing security issues.
- Updated uv.lock package dependencies and requires-dist to include pyyaml
entry with specifier '>=6.0.3'.
- Added changelog Security section entry under [Unreleased] documenting the
upgrade for issue #9055.
- Updated CONTRIBUTORS.md with contribution note (PR #9244).
- Added BDD test scenario verifying PyYAML security dependency constraint.
ISSUES CLOSED: #9055
Add a2a-sdk>=0.3.0 to [project.dependencies] in pyproject.toml.
The specification mandates that both local (stdio) and server (HTTP)
transports use the A2A Python SDK (ADR-047). Previously the package
was absent from pyproject.toml and uv.lock, making the project
non-compliant with the spec requirement.
Changes:
- Add 'a2a-sdk>=0.3.0' to [project.dependencies] in pyproject.toml
- Regenerate uv.lock to include a2a-sdk 0.3.25 and its transitive deps
- Add Behave scenarios confirming a2a is importable as a project dependency
- Add step definitions for the new TDD scenarios
ISSUES CLOSED: #2922
CleverAgents Bot
freemo
HAL9000