2116 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
HAL9000	deed7acbb2	style(tui): apply ruff format to tdd_slash_overlay_keyboard_nav_steps ... Remove unnecessary parentheses around f-string assert messages to satisfy ruff format --check in CI lint job.	2026-04-23 18:29:11 +00:00
HAL9000	a74c495a1f	test(tui): add BDD keyboard navigation for SlashCommandOverlay (#10442) ... Implements keyboard navigation support for SlashCommandOverlay: - navigate_up(): move selection up, clamped to index 0 - navigate_down(): move selection down, clamped to last command - select_current(): return the currently highlighted SlashCommandSpec - dismiss(): clear overlay and reset state (Escape key action) - selected_index: tracks current highlighted position Adds BDD feature file and step definitions covering all navigation scenarios including boundary conditions (clamp at 0 and max index). Closes #10442	2026-04-23 18:29:11 +00:00
hurui200320	f829e68911	fix(actor): resolve registry.add() rejection of spec-compliant actor YAML ... The ActorRegistry.add() method rejected spec-compliant YAML that uses the actors: map format with nested config: blocks because it only looked for provider/model at the top level of the blob. Four changes fix this: 1. _extract_v2_actor() now handles both the spec-canonical actors: key and the legacy agents: key, with actors: taking precedence. It also supports the combined actor field format (e.g. "openai/gpt-4") from the spec. 2. _extract_v2_options() mirrors the same actors:/agents: support. 3. registry.add() now unconditionally calls _extract_v2_actor() so that nested unsafe flags and graph descriptors are always captured — even when top-level provider/model are present. This eliminates the behavioural asymmetry with from_blob(). 4. The unsafe confirmation gate now runs before the duplicate-actor check, and the graph_descriptor resolution uses explicit is-not-None checks to distinguish "not set" from "set to empty dict". Review fixes (cycle 4): - Added 9 new Behave scenarios: _extract_v2_options edge cases (empty map, None, list, missing options key), _extract_v2_actor with unsafe=True, add() with missing name field, top-level unsafe: true (rejection + acceptance), and multi-actor unsafe limitation documentation. - Added graph descriptor assertions to all _extract_v2_actor direct scenarios that were missing them. - Fixed unsafe field coercion to use explicit boolean check (is True or == 1) instead of bool() to prevent truthy non-boolean values like "no" from being treated as unsafe. - Added legacy graph key fallback (blob.get("graph")) in add() for consistency with from_blob(). - Fixed _StubActorService.upsert_actor to handle set_default parameter and pass non-None config_blob to Actor.compute_hash(). - Updated stale CLI comment about registry.add() capabilities. - Applied ruff format to step definitions. Review fixes (cycle 5 — external review): - T1/T2/T3: Added unsafe coercion edge-case tests for 1.0 (float→True), 2 (int>1→False), and 0 (int zero→False). - T4/T5/T6: Added _extract_v2_options tests for non-dict first entry, missing config block, and actors: preference over agents:. - T7: Added integration test for top-level graph_descriptor key. - T8: Added integration tests for top-level provider_type/model_id aliases. - T9: Added integration tests for top-level unsafe string coercion ("yes"/"no"). - S1: effective_unsafe now includes unsafe/allow_unsafe params to match from_blob() and spec rule. - S2: CHANGELOG entry expanded with multi-actor rejection, options preservation, and coercion fix. - B1: Changed v2_options guard from truthiness to is-not-None check. - P1: _extract_v2_options() now returns a shallow copy. - P2: Nested options overwrite non-dict top-level options values. - Q3: Fixed comment variable name (unsafe_raw → top_unsafe_raw). - S3: Added spec-extension comment for provider_type/model_id aliases. - S4/B3: Cached actors_raw in multi-actor guard; added cross-ref comment. - Q5: Added TODO(#10832) to _StubActorService duplicate. - Q6: Replaced misleading (M2) label with (unsafe coercion). Review fixes (cycle 6 — agent review): - MAJ-1: Removed allow_unsafe from effective_unsafe computation. allow_unsafe is a permission flag, not an assertion; it should not mark a non-unsafe actor as unsafe. Updated docstring to clarify the semantic difference between unsafe and allow_unsafe. - MIN-1: Changed provider/model alias resolution in _extract_v2_actor() from or-based to is-not-None checks for consistency with _resolve_actors_map() and add(). - MIN-2: Added test scenario for allow_unsafe=True on non-unsafe YAML. - MIN-3: Added test scenarios for top-level unsafe: 1 (integer) rejection without flag and acceptance with flag. - MIN-4: Added test scenario for graph descriptor additional keys loop (routes key propagation). - MIN-5: Added test scenario for non-dict top-level options with nested options. - MIN-9: Applied ruff format to step file (removed unnecessary parens). - NIT-1: Differentiated redundant scenario to test graph descriptor agent key value instead of duplicating assertions. - NIT-2: Added test scenario verifying config_blob source: "yaml" default. - NIT-5: Changed _resolve_actors_map() return type to use Literal["actors", "agents"] for stronger type safety. Includes 78 Behave scenarios covering spec-compliant actors: map, legacy agents: map, top-level fields, rejection of missing provider/model, combined actor field edge cases, update=True path, schema_version and compiled_metadata forwarding, actors-as-list edge case, empty actors dict blocking agents fallback, malformed actor field parts, reverse precedence for the combined actor field, _extract_v2_options edge cases, unsafe=True detection, missing name rejection, top-level unsafe, multi-actor rejection, unsafe coercion edge cases (1.0, 2, 0, "yes", "no"), top-level graph_descriptor, provider_type/model_id aliases, _extract_v2_options structural parity with _extract_v2_actor, allow_unsafe on non-unsafe YAML, top-level unsafe: 1 (integer), graph descriptor additional keys, non-dict top-level options, and config_blob source default. ISSUES CLOSED: #4466	2026-04-23 16:15:49 +00:00
HAL9000	44fc7411f9	ci: move benchmark regression job out of default PR workflow ... Extract the benchmark-regression job from the default PR CI workflow into a dedicated scheduled workflow (.forgejo/workflows/benchmark-scheduled.yml). The benchmark job was blocking PR feedback for 99-132 minutes even when lint/typecheck/tests passed in under 20 minutes. The new workflow runs: - Nightly regression tests (2 AM UTC) comparing HEAD against master - Weekly full benchmark suite (3 AM UTC Sundays) for trend analysis - Manual dispatch trigger for ad-hoc benchmark validation AWS S3 integration stores benchmark results for historical trend analysis. Documentation updated in docs/development/ci-cd.md. CONTRIBUTORS.md updated with benchmark workflow separation contribution. ISSUES CLOSED: #9040 # Conflicts: # CONTRIBUTORS.md # Conflicts: # CONTRIBUTORS.md	2026-04-23 14:24:09 +00:00
HAL9000	0e130e39c3	chore(ci): trigger CI re-run for transient e2e_tests failure ... The e2e_tests CI job failed transiently on the previous push. All other CI gates pass. This empty commit triggers a new CI run. ISSUES CLOSED: #9074	2026-04-23 12:19:50 +00:00
HAL9000	6d0622c698	test(schema): add BDD scenarios for uncovered server-qualified name validator branches ... Add rejection scenarios for actor names with empty server prefix and server prefix without namespace slash to cover all error branches in the updated validate_name method. Add skill rejection scenario for server-qualified names with multiple slashes for parity with actor tests. ISSUES CLOSED: #9074	2026-04-23 12:19:50 +00:00
HAL9000	8738d6b921	fix(schema): add provider field to actor name test template for master compatibility ... The merge with master introduced a new 'provider' field requirement for LLM and GRAPH actors. Updated the step_given_actor_with_name test template to include 'provider: openai' so server-qualified name acceptance scenarios pass with the new validation rule. ISSUES CLOSED: #9074	2026-04-23 12:19:50 +00:00
HAL9000	ed1dc48128	fix(schema): fix actor validator error message and add changelog for server-qualified name support ... Fixed the error message in ActorConfigSchema.validate_name for the server-qualified name with multiple slashes case to include the word "namespaced", matching the BDD test assertion expectation. Added CHANGELOG.md entry documenting the server-qualified name format fix (#9074). ISSUES CLOSED: #9074	2026-04-23 12:19:50 +00:00
HAL9000	86525a4ba4	fix(schema): add BDD scenarios and fix lint for server-qualified name validators ... Add BDD test scenarios for server-qualified name acceptance in: - features/actor_schema.feature: Accept/reject scenarios for server:namespace/name format - features/skill_schema.feature: Accept scenarios for server:namespace/name format - features/consolidated_tool.feature: Accept scenarios for server:namespace/name format Also fix lint issues in the previous commit: - Remove trailing whitespace from actor/schema.py docstring - Split long NAMESPACED_NAME_RE line in skills/schema.py ISSUES CLOSED: #9074	2026-04-23 12:19:50 +00:00
HAL9000	8e7e3cdfc2	fix(schema): update actor, skill, and tool name validators to accept [[server:]namespace/]name format ... - Updated ActorConfigSchema.validate_name to accept optional server prefix - Updated NAMESPACED_NAME_RE in skills/schema.py to support server-qualified names - Updated _TOOL_NAME_PATTERN in tool.py to support server-qualified names - All validators now accept both 'namespace/name' and 'server:namespace/name' formats - Maintains backward compatibility with existing non-server-qualified names - Fixes spec compliance issue where server-qualified names were incorrectly rejected ISSUES CLOSED: #9074	2026-04-23 12:19:50 +00:00
HAL9000	3b66bf08f5	feat(acms): implement context analysis engine with tier distribution and budget utilization metrics ... Introduces a new ContextAnalysisEngine service to unify ACMS context analysis across tiered storage. It computes and exposes key observability metrics and provides flexible formatting for tooling and dashboards. Metrics include: - entry_count(): total entries across all tiers - tier_distribution(): per-tier counts and sizes (hot, warm, cold) - budget_utilization(): current total size vs. configured max, as a percentage - top_files(n): top-N entries by access_count in descending order - analyze(top_n): combined analysis result aggregating the above metrics - format_json() and format_text() static formatters for machine- and human-friendly output A new CLI command context analyze has been added at src/cleveragents/cli/commands/context.py to surface the feature from the command line. Unit tests live under features/acms_context_analysis_engine.feature (29 scenarios) with step definitions in features/steps/acms_context_analysis_engine_steps.py. The commit wires the new command into the CLI, enables test-driven validation of the metrics, and lays the groundwork for integration with dashboards. ISSUES CLOSED: #9984	2026-04-23 11:46:36 +00:00
HAL9000	4f23ece138	style: apply ruff formatting to lsp_path_containment_steps.py ... Fix CI lint failure by running ruff format on the step definitions file that was missing auto-formatting before the PR was submitted.	2026-04-23 09:22:33 +00:00
HAL9000	d08084236a	fix(lsp/runtime): add workspace path containment check to _read_file ... LspRuntime._read_file had no check that the requested file path was contained within the workspace directory, allowing path traversal attacks to read arbitrary files on the filesystem. Changes: - Add _workspace_paths dict to LspRuntime to track per-server workspace roots - start_server now stores the resolved workspace path for each server - stop_server and stop_all clean up workspace path entries - _read_file now accepts an optional workspace_path parameter; when provided, it resolves both paths and raises LspError if the file is outside the workspace (prevents ../../etc/passwd style attacks) - get_diagnostics, get_completions, get_hover, get_definitions all pass the registered workspace path to _read_file - Add features/lsp_path_containment.feature with 10 BDD scenarios - Add features/steps/lsp_path_containment_steps.py step definitions ISSUES CLOSED: #10490	2026-04-23 09:22:33 +00:00
HAL9000	fe5989b686	fix(autonomy-guardrail): add CHANGELOG entry and resolve merge conflicts ... Added CHANGELOG.md entry under [Unreleased] > Fixed for issue #7504 documenting the atomic load_from_metadata fix. Resolved merge conflict in pyproject.toml by combining both B010 and I001 ruff ignore rules for Behave step files. Rebased on latest master to resolve mergeable status. ISSUES CLOSED: #7504	2026-04-23 09:08:11 +00:00
HAL9000	47b37c43f0	fix(autonomy-guardrail): fix BDD test assertions and error handling ... - Replace no-op assertions in step_assert_in_sync and step_assert_both_in_sync with meaningful state validation checks - Set context.error in addition to context.load_error so generic validation error steps work correctly - Add missing step definition for "I have metadata with valid guardrails" - Store plan_id in context during load steps for use in assertion steps All atomic load BDD tests now pass with proper validation of guardrail and audit trail state.	2026-04-23 09:08:11 +00:00
HAL9000	ef532c5302	fix(autonomy-guardrail): make load_from_metadata atomic ... Refactor load_from_metadata() to validate both AutonomyGuardrails and GuardrailAuditTrail models before writing either to state. This ensures atomicity: if any validation fails, no state is modified. Previously, guardrails were written before audit trail validation, leaving the system in an inconsistent state if the second validation failed. Changes: - Validate both models in Phase 1 before any writes - Write both models atomically in Phase 2 only after validation succeeds - Add comprehensive BDD tests for atomic load behavior - Update pyproject.toml to ignore import sorting in features/steps ISSUES CLOSED: #7504	2026-04-23 09:08:11 +00:00
HAL9000	532d7a1ddc	Merge pull request 'docs(timeline): update schedule adherence Day 104 (2026-04-14)' (#9024) from docs/timeline-day-104 into master	2026-04-23 07:11:48 +00:00
HAL9000	46748701b8	ci: retrigger CI pipeline ... Previous CI run had transient failures: - e2e_tests: disk I/O error in SQLite template creation (infrastructure) - benchmark-regression: timeout (infrastructure) - unit_tests: flaky TDD inversion race in parallel runner All quality gates pass locally (lint, typecheck, unit_tests, integration_tests, coverage_report at 97.0%). ISSUES CLOSED: N/A (standalone operational fix)	2026-04-23 04:26:06 +00:00
HAL9000	2cf84ed078	docs(changelog): update CHANGELOG and CONTRIBUTORS for bug-hunt non-blocking tracking fix ... Document the bug-hunt-pool-supervisor non-blocking tracking change in CHANGELOG.md under [Unreleased] > Fixed, and add a contribution note in CONTRIBUTORS.md for HAL 9000.	2026-04-23 00:57:09 +00:00
HAL9000	7523a50db8	refactor(tui): PromptInput uses TextArea instead of Input ... Replaced the PromptInput base widget from textual.widgets.Input to textual.widgets.TextArea and updated related code to use the multi-line TextArea API. This includes switching from .value to .text, adjusting consume_text(), and updating all callers and tests accordingly. Also added UI test coverage for multi-line input, including new feature and steps files. ISSUES CLOSED: #10410	2026-04-22 14:06:42 +00:00
freemo	a70eeb952f	chore(agents): improve ca-uat-tester — enforce comment-based progress reports	2026-04-22 13:12:38 +00:00
hamza.khyari	4b972941f1	fix(plan): wire cleanup_stale into _create_sandbox_for_plan ... The cleanup_stale() call before sandbox.create() was lost during the rebase of PR #10798. Without it, re-executing a plan still crashes with 'fatal: a branch named ... already exists'. ISSUES CLOSED: #7271	2026-04-22 11:51:33 +00:00
HAL9000	b3bfbc1d55	feat(a2a): implement A2A stdio transport for local mode	2026-04-22 08:21:28 +00:00
hurui200320	58fa90b1b5	Merge branch 'master' into bugfix/m3-node-stream-on-next-noop	2026-04-22 07:33:46 +00:00
HAL9000	0e8de95c60	bug(uko): add missing layer 2 indexing scenario to uko_runtime.feature ... CHANGELOG.md: Added UKO Runtime Layer 2 (Paradigm) Indexing fix entry (#9351). CONTRIBUTORS.md: Added attribution note for HAL 9000 related to the UKO layer 2 indexing fix. This commit addresses reviewer feedback on PR #9965 by ensuring the changelog is updated and contributor attribution is included.	2026-04-22 06:48:43 +00:00
HAL9000	d194ee0d95	bug(uko): add missing layer 2 indexing scenario to uko_runtime.feature ... Add layer 2 (paradigm/OO) triple emission to PythonAnalyzer and add the missing Scenario for layer 2 indexing in uko_runtime.feature. - PythonAnalyzer._extract_class() now emits a rdf:type uko-oo:Class triple (layer 2) in addition to rdf:type uko-py:Class (layer 3), ensuring UKOIndexer emits layer 2 triples when indexing Python OOP constructs (classes). - Added Scenario: Indexing a Python file populates layer 2 (paradigm) to features/uko_runtime.feature, completing the four-layer guarantee verification (layers 0, 1, 2, 3) at the runtime/indexing level. ISSUES CLOSED: #9351	2026-04-22 06:37:17 +00:00
freemo	655947c8ba	fix(cli): add <REGEX> positional argument to agents plan list command ... The <REGEX> positional argument was already implemented in the CLI code (src/cleveragents/cli/commands/plan.py) in a prior commit. This commit adds the missing Robot Framework integration test that verifies the argument is accepted and correctly filters plan names by regex pattern. Changes: - robot/helper_plan_cli_spec.py: Add list_regex() helper function that creates two mock plans (local/smoke-plan and local/other-plan), invokes 'agents plan list --format json smoke.*', and verifies that only the matching plan appears in the output. - robot/plan_cli_spec.robot: Add 'Plan Lifecycle List Accepts Regex Positional Argument' test case that calls the list-regex helper and asserts the plan-cli-list-regex-ok sentinel is printed. The Behave unit test scenario ('Plan list with regex filter') already existed in features/plan_cli_spec_alignment.feature and the step definition in features/steps/plan_cli_spec_alignment_steps.py. Closes #3436	2026-04-22 03:26:49 +00:00
brent.edwards	56e9f86749	fix(e2e): relax wf10 batch apply assertion from == 3 to >= 2 ... The CI run showed that one of the three healthy plans occasionally fails during the apply phase (LLM-generated changes can cause merge conflicts or produce empty changesets). The assertion `success_count == 3` was therefore too strict for a real-LLM E2E test. Change to `>= 2`: still verifies the batch apply mechanism works (at least two of three plans reach `applied` state) while tolerating one transient LLM-related apply failure. ISSUES CLOSED: #756	2026-04-22 02:35:13 +00:00
hurui200320	66b42eed0e	test(e2e): workflow example 10 — full-auto batch formatting and linting (full-auto profile) ... Add E2E Robot Framework test for Workflow Example 10: Full-Auto Batch Operations. The test creates a temporary monorepo with 3 badly-formatted Python packages (pkg_auth, pkg_common, pkg_billing), registers a formatting action with full-auto automation profile and whitespace-only invariants, creates git-checkout resources and projects for each package, launches plans in full-auto mode, executes plans through the strategize+execute pipeline, applies changes via `plan apply --yes` (which runs and completes the apply phase), and verifies batch completion via `plan list --state applied` and `--state errored` filters. Error handling is demonstrated via a deliberately broken action using a non-existent LLM actor (nonexistent/model-xyz-404). Plans created with this action fail during execution, and the test verifies the specific broken plan ID is absent from successfully-executed plans or present in the errored list. Key design decisions: - Explicit execution pipeline: plan use creates plans, plan execute auto-advances strategize+execute with full-auto profile, and `plan apply --yes` performs the actual application and completes the apply phase. Note: `plan lifecycle-apply` only transitions the plan INTO the apply phase (apply/queued) without completing it. - Dynamic actor selection: uses ANTHROPIC_API_KEY if available, falls back to openai/gpt-4o. - Canonical ULID regex with Crockford Base32 for plan ID extraction. - Per-test teardown resets automation profile to manual. - 25-minute timeout covers worst-case 4-plan batch execution. Zero mocking — exercises the real CLI with real LLM API keys. Tagged E2E and skips gracefully when API keys are absent. ISSUES CLOSED: #756	2026-04-22 02:35:13 +00:00
brent.edwards	689dedfc8b	fix(system): limit _check_database ancestor walk to one level ... The unbounded while-loop in _check_database() walked all the way up to the filesystem root ("/") when a database path had multiple missing ancestor directories. In CI (running as root), "/" is always writable, so the function incorrectly returned CheckStatus.OK for completely invalid paths like "sqlite:////nonexistent/parent/dir/test.db". The original intent was to tolerate at most one missing intermediate directory (e.g. .cleveragents/ before "agents init" runs). Replace the while loop with a single conditional step up: check the immediate parent, and if that doesn't exist, check only its parent (the grandparent). This restores CheckStatus.ERROR for paths whose grandparent also does not exist, while still returning CheckStatus.OK for the legitimate case of CLEVERAGENTS_HOME/.cleveragents/db.sqlite where .cleveragents/ hasn't been created yet. ISSUES CLOSED: #1024	2026-04-22 01:33:52 +00:00
brent.edwards	7355e59682	fix(config): don't resolve explicitly-set database URLs; update a2a test ... Two unit test failures on the PR branch: 1. settings_configuration.feature:200 — CLEVERAGENTS_DATABASE_URL env var overrides the default The _resolve_database_urls model validator applied _resolve_sqlite_url() to ALL database_url values, including values explicitly provided by the user via CLEVERAGENTS_DATABASE_URL. When a user set a relative SQLite path (e.g. sqlite:///custom/path/mydb.db), the validator converted it to an absolute CWD-based path, breaking the assertion. Fix: skip resolution when the corresponding env var is set to a non-empty value. Only DEFAULT values (generated by the default_factory when no env var is present) are resolved against CLEVERAGENTS_HOME / CWD. 2. tdd_a2a_sdk_dependency.feature:21 — a2a SDK provides the A2AClient class In a2a-sdk >=1.0.0 the A2AClient class was renamed to Client. a2a.client no longer exports A2AClient, so getattr(a2a.client, 'A2AClient', None) returns None and the test fails. Fix: update the scenario to check for Client (the current canonical name). Also update settings_steps.py so the 'no environment variables are set' step clears CLEVERAGENTS_DATABASE_URL, CLEVERAGENTS_TEST_DATABASE_URL, and CLEVERAGENTS_HOME. Previously these were left in the environment, meaning tests that set them explicitly had to contend with whatever before_scenario injected, making the scenarios harder to reason about. ISSUES CLOSED: #1024	2026-04-22 00:45:09 +00:00
HAL9000	069ed786a9	fix(config): update database_url default to use CLEVERAGENTS_HOME when set ... When CLEVERAGENTS_HOME is set, the Settings database_url default now resolves to CLEVERAGENTS_HOME/cleveragents.db instead of ~/.cleveragents/cleveragents.db. This ensures test isolation when CLEVERAGENTS_HOME points to a temp directory. Also update coverage_boost_steps.py to remove CLEVERAGENTS_HOME before creating Settings instances so the test uses the true default path.	2026-04-22 00:45:09 +00:00
freemo	8e8825ae13	fix(config): preserve special SQLite URLs in database path resolution ... The _resolve_sqlite_url function and _ensure_sqlite_parent_dir helper incorrectly treated special SQLite connection strings (e.g. :memory:) as relative file paths, resolving them to absolute filesystem paths like sqlite:////app/:memory:. This broke all tests using in-memory databases via Settings(database_url='sqlite:///:memory:'). Changes: - Guard _resolve_sqlite_url against paths starting with ':' (special SQLite URLs like :memory:) - Guard _ensure_sqlite_parent_dir against the same pattern - Wrap mkdir in _ensure_sqlite_parent_dir with try/except OSError so invalid absolute paths (e.g. /nonexistent_root/...) fail gracefully instead of crashing before the engine has a chance to raise - Update test for invalid session factory URL to use an absolute path that cannot be created, rather than a relative path that _ensure_sqlite_parent_dir would now successfully create	2026-04-22 00:45:09 +00:00
freemo	2b6ac00263	fix(config): resolve database_url relative to CLEVERAGENTS_HOME, not CWD ... Ensure that when database_url is a relative path (like sqlite:///cleveragents.db), it resolves relative to CLEVERAGENTS_HOME instead of the current working directory. This fixes E2E test isolation where data from previous runs persisted across runs at CWD, causing UNIQUE constraint failures. Changes: - Added _resolve_database_urls model validator in Settings to rewrite relative SQLite paths to absolute paths under CLEVERAGENTS_HOME - Updated get_database_url() in container.py to use CLEVERAGENTS_HOME as base directory and create parent directories when CLEVERAGENTS_HOME is explicitly set - Updated _check_database() in system.py to walk up directory tree for writable ancestor check, handling cases where intermediate directories have not yet been created - Removed @tdd_expected_fail from TDD test (now passes genuinely) ISSUES CLOSED: #1024	2026-04-22 00:45:09 +00:00
HAL9000	00d12c844d	[AUTO-TIME-2] Day 103 Timeline Update — Cycle 3 (2026-04-13 ~22:02 UTC) ... Update docs/timeline.md with Cycle 3 milestone status: - ALERT: Scope expanding faster than closing (+110 open in 60 min, only +2 closed) - M2 v3.1.0: 5 open (was 3) — scope expanding in closed milestone - M3 v3.2.0: 802 open (was 776), 269 closed — 25.1% completion - M4 v3.3.0: 157 open (was 148), 109 closed — 41.0% completion - M5 v3.4.0: 242 open (was 233), 139 closed — 36.5% completion - M6 v3.5.0: 1052 open (was 1032), 212 closed — 16.8% completion - M7 v3.6.0: 314 open (was 296), 152 closed — 32.6% completion - M8 v3.7.0: 574 open (was 548), 427 closed — 42.6% completion Added scope expansion alert section and Cycle 3 schedule adherence entries.	2026-04-21 20:32:34 +00:00
CoreRasurae	e19af527e6	revert 4e86ffe596 ... revert docs: document LLM provider fallback behavior (Anthropic Sonnet fallback) [AUTO-DOCS-7]	2026-04-21 19:44:48 +00:00
CoreRasurae	aaf7625c18	build(docker): Fix entrypoint start-up user directory to /app	2026-04-21 19:21:24 +01:00
HAL9000	4e86ffe596	docs: document LLM provider fallback behavior (Anthropic Sonnet fallback) [AUTO-DOCS-7]	2026-04-21 17:26:19 +00:00
CoreRasurae	f8233000cc	fix(db): add missing link_type, FK constraints, and partial index per spec DDL ... Align resource_links, checkpoint_metadata, and decisions schema behavior with the spec DDL. Add SQLite runtime trigger guards for checkpoint foreign-key semantics and migration-focused Behave/Robot checks that orphan checkpoint references are rejected. ISSUES CLOSED: #922	2026-04-21 16:53:08 +00:00
CoreRasurae	7f29874156	fix: address code review findings from PR #1175 (issue #10267) ... Implement comprehensive fixes for all P2:should-fix and P3:nit findings from the Strategy Actor code review: Update 5 step functions that were calling the private _execute_with_llm() method directly to instead use the new strategy_tree field from StrategizeResult: - step_execute_and_inspect_tree (line 619) - step_parse_self_dep (line 877) - step_parse_duplicate_step_numbers (line 968) - step_parse_non_sequential_steps (line 1075) - step_parse_non_sequential_steps_and_inspect (line 1755) - step_build_decisions_from_llm_tree (line 1299) - also added execute() call This eliminates the fragile double-execution pattern that produced divergent ULIDs and couples tests to private implementation details. Tests now use the public StrategizeResult.strategy_tree field. P2:should-fix Fixes: - Move json import to module level in plan_executor_coverage_steps.py - Remove redundant Exception clause in plan_executor.py exception handler - Add logging to silent config service fallback in plan.py - Improve structured content block handling in _extract_content() to properly extract text from LangChain MessageContent dicts - Remove duplicated _DEFAULT_ACTOR_NAME constant and import from canonical source (strategy_resolution.py) - Add strategy_tree field to StrategizeResult to expose tree for test inspection without coupling to private _execute_with_llm() method P3:nit Fixes: - Improved docstrings and code clarity Refs: #10267	2026-04-21 15:36:09 +01:00
hamza.khyari	5d8bbf22b5	test(plan): add Behave scenarios for stale worktree cleanup (#7271) ... Add 3 Behave scenarios covering GitWorktreeSandbox.cleanup_stale(): - Removes existing branch and worktree directory - Idempotent when no branch exists (returns False) - create() succeeds after cleanup_stale removes stale branch ISSUES CLOSED: #7271	2026-04-21 11:56:19 +00:00
hamza.khyari	d91332f4a9	Merge pull request 'feat(plan): implement plan diff using git worktree branch' (#10002) from feature/plan-diff-worktree into master ... Reviewed-on: #10002 Reviewed-by: Brent Edwards <brent.edwards@cleverthis.com>	2026-04-21 11:51:58 +00:00
hamza.khyari	814a5167ef	feat(plan): implement plan diff using git worktree branch ... plan diff now detects the worktree branch cleveragents/plan-<id> created during plan execute and runs git diff HEAD...<branch> to display actual file changes. Falls back to changeset-based diff when no worktree branch exists. Infrastructure layer: - GitWorktreeSandbox.diff_against_head() classmethod: checks branch existence via rev-parse, runs git diff, returns diff text or None - Uses _run_git() helper (existing) for subprocess calls with proper CalledProcessError/TimeoutExpired handling CLI layer: - _get_worktree_diff() thin wrapper: resolves plan -> project -> resource via DI container, delegates to GitWorktreeSandbox.diff_against_head() - Specific exception handling (NotFoundError, CleverAgentsError) with structlog debug logging - Input validation: empty plan_id returns None early - Called in plan_diff() before changeset fallback (spec §13225) Tests: - 4 Behave scenarios covering: branch exists with diff, no branch, service resolution path, no linked resources fallback Fixes: - CheckpointRepository prune test: use shared session so flush() in create() is visible to prune() within the same scenario ISSUES CLOSED: #9231	2026-04-21 11:31:15 +00:00
hurui200320	b56abc4fac	fix(ci): correct invalid workflow configuration in master.yml ... Five issues were identified and fixed in .forgejo/workflows/master.yml: 1. Added 'pull_request' trigger to the 'on:' block so the benchmark-regression job (which conditions on pull_request events) can actually execute. Previously only 'push' was listed, making the job permanently unreachable. 2. Removed the 'needs: [lint, typecheck, security, quality]' dependency from benchmark-regression. Those jobs are defined in ci.yml, not in master.yml, so referencing them here made the workflow structurally invalid and would be rejected by Forgejo Actions at parse time. 3. Fixed malformed YAML in benchmark-publish: the ASV_S3_BUCKET expression had a line break inside '${{ ... }}', which is invalid YAML and caused a parse error. 4. Fixed 'rentention-days' typo to 'retention-days' in both the benchmark-regression and benchmark-publish upload-artifact steps. The misspelling caused the retention policy to be silently ignored. 5. Fixed step name typo 'Run asv ia nox' -> 'Run asv via nox' in the benchmark-publish job. ISSUES CLOSED: #10804	2026-04-21 18:17:38 +08:00
HAL9000	482eaf559b	fix(error-handling): _handle_file_edit() now respects encoding parameter ... - Update encoding scenario to use latin-1 with non-ASCII content (café → naïve) to properly test the encoding parameter fix - Add CONTRIBUTORS.md entry for PR #8258 / issue #7559 ISSUES CLOSED: #7559	2026-04-21 08:45:06 +00:00
HAL9000	2e3e116b42	fix(error-handling): _handle_file_edit() now respects encoding parameter ... Remove duplicate step function definition in tool_builtins_steps.py that was shadowing the decorated @when handler, causing the Behave step to be orphaned at runtime. Add CHANGELOG entry documenting the encoding fix for issue #7559. ISSUES CLOSED: #7559 # Conflicts: # CHANGELOG.md	2026-04-21 08:45:06 +00:00
HAL9000	fca440a62c	fix(error-handling): _handle_file_edit() now respects encoding parameter ... - Fixed _handle_file_edit() to use encoding=inputs.get("encoding", "utf-8") for both read_text() and write_text() calls, ensuring encoding is explicit and not dependent on the platform default. - Added encoding field to the FILE_EDIT_SPEC schema to surface encoding choices to callers. ISSUES CLOSED: #7559	2026-04-21 08:45:06 +00:00
brent.edwards	fda5f463ac	fix(persistence): handle corrupt JSON in _to_domain/_from_domain with CorruptRecordError ... Wrapped bare json.loads() and model constructor calls in AutomationProfileRepository._to_domain() and ._from_domain() with try/except guards that catch json.JSONDecodeError, TypeError, and AttributeError and re-raise as a new CorruptRecordError (a DatabaseError subclass). This prevents raw JSONDecodeError from leaking to callers when the safety_json or guards_json columns contain malformed data, and provides structured context (record_name, field, detail) for diagnostics. The fix covers both deserialization paths in _to_domain (safety_json and guards_json) and the serialization path in _from_domain (safety and guards model_dump). Three Behave scenarios tagged @tdd_issue @tdd_issue_989 verify the corrected behavior. The @tdd_expected_fail tag is not present because the fix is included in this commit. Also excluded tool/wrapping.py from the semgrep no-exec and no-compile-exec rules since it uses exec/compile intentionally in a controlled sandbox (this was a pre-existing false positive that blocked pre-commit hooks on master). All 11 nox sessions pass; coverage is 97.0%. ISSUES CLOSED: #989	2026-04-21 06:42:10 +00:00
hurui200320	0d267934a7	fix(langgraph): wire node stream on_next handlers to registered executors ... Replace the no-op on_next handlers in _setup_node_stream_subscriptions with factory-created callbacks that look up and invoke the per-node sync_executor registered by _register_node_executor. The previous code silently discarded every message delivered to node streams. Key changes: - Wire on_next to executor via _make_on_next_handler factory method - Store executors in _node_executors dict (not setattr on stream_router) - Shared ThreadPoolExecutor with proper lifecycle (start/stop/restart) - Prefer run_coroutine_threadsafe when scheduler loop is running; fall back to thread pool with deadlock prevention - Thread-safe StateManager: Lock on all mutation methods, deep-copy emission inside lock for immutable subscriber snapshots - replace_state() and reset() deep-copy input to prevent external mutation bypassing the lock (review cycle 5 M1 fix) - Best-effort cancellation documented on timed-out futures (cycle 5 M2) - CancelledError catch in thread pool path with "graph stopping" message - is_running guard on both sync_executor and execute() entry point - Checkpoint filenames include update_count to prevent collisions - _save_checkpoint docstring warns against calling while _lock is held - on_next handler distinguishes TimeoutError (warning) from other exceptions (exception log) for clearer diagnostics - TODO comment for deferred downstream propagation to successor nodes - __del__ safety net for executor pool cleanup - File I/O outside lock for checkpoint save/load - Bounded execution_history via collections.deque(maxlen=1000) See PR !10795 for the full change log across 5 review cycles. ISSUES CLOSED: #6511	2026-04-21 05:14:07 +00:00
HAL9000	e17a6ddec7	fix(arch): route CLI project create through NamespacedProjectService ... Introduce NamespacedProjectService in the application layer to encapsulate all NamespacedProject domain model construction. The agents project create CLI command previously imported NamespacedProject and parse_namespaced_name directly from cleveragents.domain.models.core.project, violating Architectural Invariant #3 (CLI layer must only call application services). Changes: - Add NamespacedProjectService with create_project(), get_project(), list_projects(), delete_project(), parse_project_name(), validate_project_name(), and project_to_dict() methods - Wire NamespacedProjectService into the DI container as namespaced_project_service provider - Refactor cli/commands/project.py to use NamespacedProjectService for all project operations (create, list, show, delete, link-resource, unlink-resource) - Add BDD feature file and step definitions for NamespacedProjectService (25 scenarios covering all service methods and edge cases) - Narrow exception handling in get_project() to catch only ProjectNotFoundError instead of bare Exception, preventing infrastructure errors from being masked as NotFoundError - Update CHANGELOG.md with both #7464 and #8232 entries - Update CONTRIBUTORS.md with PR #8297 contribution entry ISSUES CLOSED: #7464	2026-04-21 03:38:05 +00:00