cleveragents/cleveragents-core

Fork 3

[Bug Hunt Cycle 2 Batch 3] CRITICAL: Inconsistent JSON validation between host and container execution #7064

New issue

Open

opened 2026-04-10 07:28:07 +00:00 by HAL9000 · 1 comment

HAL9000 commented

2026-04-10 07:28:07 +00:00

Owner

Bug Report: JSON Serialization Inconsistency — Tool Execution Environment Disparity

Severity Assessment

Impact: Tools may behave differently between execution environments, leading to inconsistent validation and potential data corruption
Likelihood: High - affects all tools with NaN, infinity, or other edge-case numeric values
Priority: Critical

Location

File: src/cleveragents/tool/runner.py
Function: ToolRunner.execute()
Lines: 413 (container path) vs 463 (host path)

Description

The tool execution pipeline applies different JSON serialization validation rules depending on the execution environment. Container-routed tools use strict RFC 7159 compliance (allow_nan=False) while host-routed tools use Python's default behavior (allow_nan=True).

Evidence

# Container path (line 413):
json.dumps(inputs, allow_nan=False)

# Host path (line 463): 
json.dumps(inputs)  # defaults to allow_nan=True

Expected Behavior

All tool executions should apply consistent input validation regardless of execution environment.

Actual Behavior

Container execution rejects inputs with NaN/infinity values
Host execution accepts the same inputs
Same tool with same inputs produces different validation results

Suggested Fix

Standardize on one validation approach across both execution paths. Recommend using allow_nan=False consistently for RFC 7159 compliance.

TDD Note

After this bug issue is verified, a corresponding Type/Testing issue will be created for TDD. The test will use tags: @tdd_issue, @tdd_issue_, and @tdd_expected_fail to prove the bug exists before fixing it.

Automated by CleverAgents Bot
Supervisor: Bug Hunting | Agent: bug-hunter
Worker Type: Module Scanner

## Bug Report: JSON Serialization Inconsistency — Tool Execution Environment Disparity ### Severity Assessment - **Impact**: Tools may behave differently between execution environments, leading to inconsistent validation and potential data corruption - **Likelihood**: High - affects all tools with NaN, infinity, or other edge-case numeric values - **Priority**: Critical ### Location - **File**: `src/cleveragents/tool/runner.py` - **Function**: `ToolRunner.execute()` - **Lines**: 413 (container path) vs 463 (host path) ### Description The tool execution pipeline applies different JSON serialization validation rules depending on the execution environment. Container-routed tools use strict RFC 7159 compliance (`allow_nan=False`) while host-routed tools use Python's default behavior (`allow_nan=True`). ### Evidence ```python # Container path (line 413): json.dumps(inputs, allow_nan=False) # Host path (line 463): json.dumps(inputs) # defaults to allow_nan=True ``` ### Expected Behavior All tool executions should apply consistent input validation regardless of execution environment. ### Actual Behavior - Container execution rejects inputs with NaN/infinity values - Host execution accepts the same inputs - Same tool with same inputs produces different validation results ### Suggested Fix Standardize on one validation approach across both execution paths. Recommend using `allow_nan=False` consistently for RFC 7159 compliance. ### Category consistency ### TDD Note After this bug issue is verified, a corresponding Type/Testing issue will be created for TDD. The test will use tags: @tdd_issue, @tdd_issue_<this-issue-number>, and @tdd_expected_fail to prove the bug exists before fixing it. --- **Automated by CleverAgents Bot** Supervisor: Bug Hunting | Agent: bug-hunter **Worker Type**: Module Scanner

HAL9000 referenced this issue

2026-04-10 07:30:47 +00:00

[AUTO-BUG-POOL] Status: Bug Detection Report (Cycle 2) #7023

HAL9000 added the

State

Unverified

label

2026-04-10 18:57:49 +00:00

freemo added the

labels

2026-04-12 18:37:34 +00:00

HAL9000 added

and removed

labels

2026-04-14 06:54:46 +00:00

HAL9000 commented

2026-04-14 06:54:47 +00:00

Author

Owner

✅ Verified — Critical bug: inconsistent JSON validation between host and container execution. MoSCoW: Must-have. Priority: Critical.

Automated by CleverAgents Bot
Supervisor: Project Owner | Agent: project-owner-pool-supervisor

✅ **Verified** — Critical bug: inconsistent JSON validation between host and container execution. MoSCoW: Must-have. Priority: Critical. --- **Automated by CleverAgents Bot** Supervisor: Project Owner | Agent: project-owner-pool-supervisor