cleveragents/cleveragents-core

Fork 3

Epic: Automation Profile & Safety Profile CLI — Cost Budgets, Guard Enforcement, and Profile Management #3370

New issue

Open

opened 2026-04-05 14:40:40 +00:00 by freemo · 2 comments

freemo commented

2026-04-05 14:40:40 +00:00

Owner

Metadata

Branch Naming Convention: feat/v3.6.0/automation-safety-profiles
Milestone: v3.6.0

Background and Context

The v3.6.0 milestone scope includes "Cost/session budgets, safety profiles." The specification defines SafetyProfile as a composed sub-model of AutomationProfile that groups all hard safety constraints: require_sandbox, require_checkpoints, allow_unsafe_tools, require_human_approval, allowed_skill_categories, max_cost_per_plan, max_retries_per_step, and max_total_cost.

Multiple UAT issues have identified gaps:

agents safety-profile CLI command is missing (#3276)
AutomationGuard denylist, budget caps, and tool call limits are never enforced (#3294, #3346)
PlanLifecycleService.should_auto_progress() ignores AutonomyController (#3333)
AutomationProfileService.get_effective_profile() maps default_profile to wrong precedence tier (#3130)
agents session create missing --max-cost budget flag (#3226)

This Epic groups all work required to implement the full Automation Profile and Safety Profile CLI management, guard enforcement, and cost budget integration.

Child Issues

#3371 — feat(cli): implement agents safety-profile CLI command group (add/list/show/remove)
#3372 — fix(guards): wire AutomationGuard enforcement into plan execution pipeline
#3373 — feat(cli): add --max-cost budget flag to agents session create and wire CostBudgetService

Definition of Done

All child issues are closed
agents safety-profile CLI command group fully implemented
agents automation-profile CLI command group fully implemented
Guard enforcement (denylist, budget caps, tool call limits) wired into execution pipeline
Cost budget tracking integrated into session and plan lifecycle
All nox stages pass
Coverage >= 97%

Automated by CleverAgents Bot
Supervisor: Unknown | Agent: ca-epic-planner

## Metadata - **Branch Naming Convention**: `feat/v3.6.0/automation-safety-profiles` - **Milestone**: v3.6.0 ## Background and Context The v3.6.0 milestone scope includes "Cost/session budgets, safety profiles." The specification defines `SafetyProfile` as a composed sub-model of `AutomationProfile` that groups all hard safety constraints: `require_sandbox`, `require_checkpoints`, `allow_unsafe_tools`, `require_human_approval`, `allowed_skill_categories`, `max_cost_per_plan`, `max_retries_per_step`, and `max_total_cost`. Multiple UAT issues have identified gaps: - `agents safety-profile` CLI command is missing (#3276) - `AutomationGuard` denylist, budget caps, and tool call limits are never enforced (#3294, #3346) - `PlanLifecycleService.should_auto_progress()` ignores `AutonomyController` (#3333) - `AutomationProfileService.get_effective_profile()` maps `default_profile` to wrong precedence tier (#3130) - `agents session create` missing `--max-cost` budget flag (#3226) This Epic groups all work required to implement the full Automation Profile and Safety Profile CLI management, guard enforcement, and cost budget integration. ## Child Issues - [ ] #3371 — feat(cli): implement `agents safety-profile` CLI command group (add/list/show/remove) - [ ] #3372 — fix(guards): wire AutomationGuard enforcement into plan execution pipeline - [ ] #3373 — feat(cli): add `--max-cost` budget flag to `agents session create` and wire CostBudgetService ## Definition of Done - [ ] All child issues are closed - [ ] `agents safety-profile` CLI command group fully implemented - [ ] `agents automation-profile` CLI command group fully implemented - [ ] Guard enforcement (denylist, budget caps, tool call limits) wired into execution pipeline - [ ] Cost budget tracking integrated into session and plan lifecycle - [ ] All nox stages pass - [ ] Coverage >= 97% --- **Automated by CleverAgents Bot** Supervisor: Unknown | Agent: ca-epic-planner

freemo added this to the v3.6.0 milestone

2026-04-05 14:40:47 +00:00

freemo referenced this issue

2026-04-05 14:40:59 +00:00

feat(cli): implement agents safety-profile CLI command group (add/list/show/remove) #3371

freemo referenced this issue

2026-04-05 14:41:10 +00:00

fix(guards): wire AutomationGuard enforcement into plan execution pipeline — denylist, budget caps, tool call limits #3372

freemo referenced this issue

2026-04-05 14:41:21 +00:00

feat(cli): add --max-cost budget flag to agents session create and wire CostBudgetService #3373

freemo added a new dependency

2026-04-05 14:41:46 +00:00

#3371 feat(cli): implement agents safety-profile CLI command group (add/list/show/remove)

freemo added a new dependency

2026-04-05 14:41:47 +00:00

#3372 fix(guards): wire AutomationGuard enforcement into plan execution pipeline — denylist, budget caps, tool call limits

freemo added a new dependency

2026-04-05 14:41:52 +00:00

#3373 feat(cli): add --max-cost budget flag to agents session create and wire CostBudgetService

freemo commented

2026-04-05 14:42:10 +00:00

Author

Owner

Child Issues Created

The following child issues have been created for this Epic:

#	Title	Status
#3371	feat(cli): implement `agents safety-profile` CLI command group (add/list/show/remove)	Open
#3372	fix(guards): wire AutomationGuard enforcement into plan execution pipeline	Open
#3373	feat(cli): add `--max-cost` budget flag to `agents session create` and wire CostBudgetService	Open

All child issues block this Epic via Forgejo dependency links.

Dependency Chain:

#3371 (safety-profile CLI) ──┐
#3372 (guard enforcement)  ──┤──▶ #3370 (Epic: Automation & Safety Profiles)
#3373 (cost budget)        ──┘

Automated by CleverAgents Bot
Supervisor: Unknown | Agent: ca-epic-planner

## Child Issues Created The following child issues have been created for this Epic: | # | Title | Status | |---|-------|--------| | #3371 | feat(cli): implement `agents safety-profile` CLI command group (add/list/show/remove) | Open | | #3372 | fix(guards): wire AutomationGuard enforcement into plan execution pipeline | Open | | #3373 | feat(cli): add `--max-cost` budget flag to `agents session create` and wire CostBudgetService | Open | All child issues block this Epic via Forgejo dependency links. **Dependency Chain:** ``` #3371 (safety-profile CLI) ──┐ #3372 (guard enforcement) ──┤──▶ #3370 (Epic: Automation & Safety Profiles) #3373 (cost budget) ──┘ ``` --- **Automated by CleverAgents Bot** Supervisor: Unknown | Agent: ca-epic-planner

freemo referenced this issue

2026-04-05 16:19:03 +00:00

[Automated] CleverAgents Build Session - 2026-04-05 #3377

freemo commented

2026-04-05 16:21:48 +00:00

Author

Owner

Issue triaged by project owner:

State: Verified
Priority: Critical — The v3.6.0 milestone explicitly scopes "Cost/session budgets, safety profiles." This Epic directly addresses that scope. Multiple UAT issues (#3276, #3294, #3346, #3333, #3130, #3226) have identified these gaps as blocking acceptance criteria.
Milestone: v3.6.0 (already set)
Story Points: 13 — XXL — This Epic encompasses 3 child issues spanning CLI implementation, guard enforcement wiring, and cost budget integration across multiple modules. Estimated 1+ week of total effort.
MoSCoW: Must Have — The specification defines SafetyProfile and AutomationGuard as required components. Guard enforcement is an explicit v3.5.0 acceptance criterion that remains unmet. Cost/session budgets are explicitly scoped to v3.6.0. This Epic cannot be deferred.
Child Issues: #3371, #3372, #3373

Automated by CleverAgents Bot
Supervisor: Project Owner | Agent: ca-project-owner

Issue triaged by project owner: - **State**: Verified - **Priority**: Critical — The v3.6.0 milestone explicitly scopes "Cost/session budgets, safety profiles." This Epic directly addresses that scope. Multiple UAT issues (#3276, #3294, #3346, #3333, #3130, #3226) have identified these gaps as blocking acceptance criteria. - **Milestone**: v3.6.0 (already set) - **Story Points**: 13 — XXL — This Epic encompasses 3 child issues spanning CLI implementation, guard enforcement wiring, and cost budget integration across multiple modules. Estimated 1+ week of total effort. - **MoSCoW**: Must Have — The specification defines SafetyProfile and AutomationGuard as required components. Guard enforcement is an explicit v3.5.0 acceptance criterion that remains unmet. Cost/session budgets are explicitly scoped to v3.6.0. This Epic cannot be deferred. - **Child Issues**: #3371, #3372, #3373 --- **Automated by CleverAgents Bot** Supervisor: Project Owner | Agent: ca-project-owner

Rows
Columns