Files
cleveragents-core/CONTRIBUTORS.md
T

36 KiB

Contributors

Details

  • HAL 9000 has contributed spec clarifications for layer boundary DI exception, ULID scope, ACMS pipeline contracts, and TUI component interfaces (PR #10451): documented architectural invariants including the DI container exception, clarified ULID identifier scope distinguishing domain entities from internal implementation details, added per-stage protocol contracts for all 10 ACMS pipeline stages with storage tier definitions, budget enforcement protocol, and context assembly output format, and defined public interfaces with verifiable checks for 8 TUI components.

Below are some of the specific details of various contributions.

  • HAL 9000 has contributed the project switch CLI command (PR #8675 / issue #8675): added agents project switch <namespaced-name> to allow switching between registered projects in the NamespacedProject registry without changing filesystem directories. The command validates project existence, persists CLEVERAGENTS_PROJECT via a shell session helper file, and supports rich/json/yaml/plain/table output formats with confirmation prompts (bypassable with --yes). Includes full BDD test coverage.

  • Jeffrey Phillips Freeman has acted as Lead Developer, daily contributor, and Project Owner.

  • Jeffrey Phillips Freeman has contributed the invariant merge precedence fix (#9126): restored the missing ACTION scope in merge_invariants() and InvariantSet.merge(), corrected all module docstrings from plan > project > global to the spec-compliant plan > action > project > global, and added comprehensive BDD test coverage for four-tier merge precedence.

  • Brent E. Edwards has contributed quality assurance, test coverage, and CI pipeline improvements.

  • HAL 9000 has contributed automated implementation, bug fixes, and feature development as part of the CleverAgents automation pool, including fix for PermissionsScreen base class (#10744 / #10488): converted PermissionsScreen from a Static widget to a proper Textual Screen subclass with full keyboard bindings and action methods.

  • HAL 9000 has contributed concurrency safety improvements, including thread-safe context tier management (issue #7547) for parallel plan execution.

  • HAL 9000 has contributed the configurable agent limits refactor (#9246/#9050): replaced hardcoded deps[:10] in ContextAnalysisAgent and contexts[:5] in PlanGenerationGraph with validated constructor parameters max_dependencies (default: 10) and max_context_files (default: 5), including 12 BDD scenarios covering defaults, custom values, edge cases, and invalid-input error handling.

  • HAL 9000 has contributed the plan concurrency race-condition fix (#7989): wired LockService into the plan lifecycle, guarding execute_plan() and apply_plan() with plan-level advisory locks and unique per-invocation owner identities to prevent silent concurrent state corruption.

  • HAL 9000 has contributed the plan artifacts JSON completeness fix (#9084): ensured validation_summary and apply_summary are correctly included in _build_artifacts_dict, removing stale @tdd_expected_fail tags from Behave scenarios to enable full regression test coverage.

  • Jeffrey Phillips Freeman has contributed the InvariantService database persistence fix (PR #11166 / issue #8573): implemented SQLAlchemy-backed InvariantRepository, added InvariantModel to the database models layer, created Alembic migration for the standalone invariants table, updated InvariantService with optional database_url parameter for cross-invocation persistence, and wired it into the application container (ADR-007 compliant).

  • HAL 9000 has contributed the bug-hunt-pool-supervisor non-blocking tracking fix (#7875 / PR #7957): updated step 5 to be best-effort and added rule 9 to prevent the automation-tracking-manager call from blocking the main supervisor loop.

  • Jeffrey Phillips Freeman has contributed the complete AUTO-BUG-SUP tracking prefix fix across agent-system-specification.md, automation-tracking.md documentation, replacing the incorrect AUTO-BUG-POL prefix with the correct AUTO-BUG-SUP prefix used by the bug-hunt-pool-supervisor agent (#7875).

  • HAL 9000 has contributed thread safety to InvariantService (issue #7524): added threading.RLock protection for all shared mutable state (_invariants dict, _enforcement_records list) across add, list, remove, effective-set computation, and enforcement operations, preventing RuntimeError: dictionary changed size during iteration in multi-threaded parallel plan execution environments.

  • HAL 9000 has contributed the plugin entry point security hardening fix (#7476): enforced entry point allowlist validation before importing plugin modules to prevent malicious plugin loading.

  • HAL 9000 has contributed the benchmark workflow separation (#9040): moved the benchmark-regression job out of the default PR workflow into a dedicated scheduled workflow, reducing median PR CI turnaround time from 99-132 minutes to under 30 minutes.

  • HAL 9000 has contributed the plan tree JSON/YAML command envelope fix (#9163): wrapped agents plan tree --format json/yaml output in the spec-required command envelope structure, added summary statistics, decision_ids mapping, child_plans list, and accurate timing measurement.

  • HAL 9000 contributed Structural Component Output Validation (PR #11161 / issue #8164): implemented validate_plan_tree, validate_decision_dict, validate_structured_output, and validate_structured_component_output validators that replace exact-character matching with structural schema checking for plan tree nodes, decision CLI dictionaries, and structured session output envelopes.

  • HAMZA KHYARI has contributed the ACMS execute-phase context assembler project-level hot_max_tokens fix (PR #11036 / issue #11035): added _resolve_effective_budget() method that reads each linked project's settings.hot_max_tokens and uses the maximum override value as the pipeline budget instead of the hardcoded global 16K default.

  • HAL 9000 has contributed the automated CLI docstring example validation (#9106): added DocstringExampleValidator to enforce positional-before-option ordering in CLI Examples: sections, with Behave test coverage and CONTRIBUTING.md documentation.

  • HAL 9000 has contributed the AutoDebugAgent prompt injection mitigation fix (#9110): sanitized user-provided error_message and code_context fields in all three agent methods using PromptSanitizer boundary markers, added graceful PromptInjectionDetected exception handling, and added BDD and Robot Framework integration tests for the security fix.

  • HAL 9000 has contributed the PureGraph BDD coverage suite (PR #9601 / issue #9531): wired the previously orphaned features/steps/pure_graph_coverage_steps.py definitions through the existing features/consolidated_langgraph.feature (topological ordering, function execution, missing function fallback, and non-functional node handling); created Robot Framework integration tests in robot/langgraph/pure_graph.robot backed by the robot/langgraph/pure_graph_lib.py Python library; and implemented ASV benchmarks in benchmarks/pure_graph_bench.py measuring execution throughput across varying node counts.

  • HAL 9000 has contributed comprehensive milestone documentation for v3.2.0 (Decisions + Validations + Invariants) and v3.3.0 (Corrections + Subplans + Checkpoints), including CLI command reference, decision system guide, and subplan/checkpoint documentation (PR #9796).

  • Rui Hu has contributed the v3 actor YAML schema validation fix (#5869): added ActorConfigSchema validation to the agents actor add --config CLI command, covering cycle detection, required field validation, and enum validation for v3 YAML actor definitions.

  • HAL 9000 has contributed the ACP → A2A BDD test suite (#10995 / issue #8615): added a2a_module_rename_standardization.feature with 3 scenarios validating all 22 exported symbol exports, zero legacy ACP references across the a2a module, and documentation accuracy per ADR-047 naming conventions.

  • HAL 9000 has contributed the agent-evolution-pool-supervisor PR metadata assignment (#7888): the supervisor now automatically looks up the Type/Automation label and earliest open milestone before dispatching improvement PR creation workers, ensuring all generated improvement PRs have correct Type labels and milestone assignments.

  • HAL 9000 has contributed the decision recording hook for the Strategize phase (issue #8522): captures every decision point with question, chosen option, alternatives, confidence, rationale, and full context snapshot for replay and correction.

  • HAL 9000 has contributed the ContextStrategy protocol and StrategyRegistry plugin registration system (PR #10590 / issue #8616): implemented the pluggable context assembly strategy protocol with proper type-safe method signatures, created the central thread-safe StrategyRegistry supporting registration, lookup, entry-point discovery, and per-strategy configuration (timeout, fragments limits, workers, circuit breaker threshold). Six built-in strategies implemented and documented: simple-keyword, semantic-embedding, breadth-depth-navigator, arce, temporal-archaeology, and plan-decision-context. Full BDD test coverage including thread safety, boundary validation, and error handling tests. (Part of Epic #8505)

  • HAL9000 has contributed automated implementation of ACMS context policy configuration loader and plan execution integration.

  • This project was made possible thanks to considerable donation of time, money, and resources by CleverThis, Inc.

  • HAL 9000 has contributed automated bug fixes, CLI output formatting improvements, and ongoing maintenance as part of the CleverAgents automation system.

  • HAL 9000 has contributed the pr-review-pool-supervisor tracking prefix documentation fix (#7891): aligned all documentation references from the outdated AUTO-REV-POOL prefix to the correct AUTO-REV-SUP prefix used in production.

  • HAL 9000 has contributed the LSP transport header injection security fix (PR #10608): added strict ASCII validation to the _read_one_message() header parser to enforce US-ASCII-only headers per LSP specification, preventing malicious servers from injecting arbitrary Content-Length values that could cause the transport to read and parse unauthorized data as JSON-RPC messages.

  • HAL 9000 has contributed the file edit encoding parameter fix (PR #8258 / issue #7559).

  • HAL 9000 has contributed the architecture-pool-supervisor milestone assignment feature (PR #8188 / issue #7521): added forgejo_update_pull_request permission and documented the PR workflow for major spec changes, enabling automatic milestone assignment for specification PRs.

  • HAL 9000 has contributed the git worktree TOCTOU race condition fix (PR #8178 / issue #7507): replaced the unsafe mkdtemp() + rmdir() pattern with a parent-directory approach to eliminate the race window in concurrent git worktree operations.

  • HAL 9000 has contributed CLI documentation for version, info, and diagnostics commands (PR #4211 / issue #7592): created a beginner-friendly showcase walkthrough covering fast-path eager flags, rich format output with Rich panels, machine-readable JSON envelope structure, and CI-friendly diagnostics health checks.

  • HAL 9000 has contributed automated bug fixes, thread-safety improvements, and concurrency hardening including the A2aEventQueue threading.Lock guard (#7604).

  • HAL 9000 has contributed the git_tools TOCTOU race condition fix (PR #8255 / issue #7619): eliminated the Time-Of-Check-To-Time-Of-Use race in _get_base_env() by adding double-checked locking with a module-level threading.Lock, preventing concurrent threads from writing conflicting environment snapshots.

  • HAL 9000 has contributed the ActorLoader.list_actors TOCTOU race condition fix (PR #8660 / issue #8588): moved the namespace filter inside the with self._lock: block in list_actors() so that dictionary reads and filtering are atomic, eliminating stale results and potential RuntimeError under concurrent access. Added concurrency BDD coverage via Behave test scenarios using threading.Barrier.

  • HAL 9000 has contributed the mandatory PR compliance checklist to implementation-supervisor.md (#9824): added an 8-item checklist to the worker prompt body with concrete items covering CHANGELOG.md, CONTRIBUTORS.md, commit footer, CI verification, BDD tests, Epic reference, labels, and milestone assignment to eliminate systemic PR merge blockers.

  • HAL 9000 has contributed the PlanResult.success derivation fix (PR #8214 / issue #7501): replaced the incorrect error_message is None heuristic with a dedicated result_success column in the plans table, ensuring plans with historical build errors are not incorrectly marked as failed after a successful apply.

  • HAL 9000 has contributed the mandatory PR compliance checklist to implementation-pool-supervisor.md (#9824): created a new agent definition with an embedded 8-item checklist ensuring workers always update CHANGELOG.md, CONTRIBUTORS.md, include commit footers (ISSUES CLOSED: #N), verify CI passes, add BDD tests, reference the parent Epic, apply labels via forgejo-label-manager, and assign milestones before creating PRs. Includes concrete examples for each subsection and compliance verification pseudocode.

  • HAL 9000 has contributed comprehensive milestone documentation for v3.6.0 (Advanced Concepts & Deferred Features) and v3.7.0 (TUI Implementation) (PR #9903): split into sub-documents covering context strategies, LLM backends, resource types, A2A rename, container tool execution, scope chain resolution, cost/safety budgets, E2E workflow tests, code review examples, plugin architecture, TUI layout, persona system, reference/command input, session management, configuration, and TuiMaterializer integration.

  • HAL 9000 has contributed the concurrent ValidationPipeline stdout/stderr restoration fix (PR #7811 / issue #7623): introduced a reference-counted shared stream wrapper manager so concurrent ValidationPipeline.run() calls correctly restore the true sys.stdout/sys.stderr after all pipelines finish, preventing permanent stream wrapping under concurrent execution.

  • HAL 9000 has contributed the LLMTraceRepository data-integrity fix (PR #8185 / issue #7505): replaced the unconditional session.commit() in LLMTraceRepository.save() with a dual-path implementation that respects the UnitOfWork pattern — flushing only when an external session is provided, and flushing + committing + closing when operating standalone. This eliminates premature transaction commits, loss of rollback capability, and a docstring/implementation mismatch.

  • HAL 9000 has contributed the ACMS Index Data Model and File Traversal Engine (PR #9664 / issue #9579): foundational data structures for indexed context entries with hot/warm/cold/archive storage tier classification, tag system, and a timeout-safe chunked file traversal engine for large projects with 10,000+ files.

  • HAL 9000 has contributed the TuiMaterializer A2A integration layer (PR #10589 / issue #5326): implemented the TuiMaterializer class bridging the Output Rendering Framework to Textual UI widgets, implementing the MaterializationStrategy protocol, mapping all element types (Panel, Table, Status, Progress, Tree, Code, Diff, Separator, ActionHint, Text) to plain-text renderings, adding A2A routing for PermissionRequest and ThoughtBlock events, with comprehensive Behave BDD test coverage including thread-safety verification.

  • HAL 9000 has contributed the error-suppression removal fix (PR #9247 / issue #9060): removed both try...except Exception: blocks in register_registry_agents() that silently suppressed errors from actor_registry.list_actors() and the route bridge refresh, enabling exceptions to propagate per CONTRIBUTING.md fail-fast policy. Added three Behave scenarios verifying RuntimeError, AttributeError, and TypeError propagation.

  • HAL 9000 has contributed the Strategize phase full context snapshot fix (issue #9056): added _build_strategize_context_snapshot() helper to PlanLifecycleService, updated _try_record_decision() to accept and forward a ContextSnapshot parameter, and added BDD test coverage verifying all four ContextSnapshot fields (hot_context_hash, hot_context_ref, actor_state_ref, relevant_resources) are populated during the Strategize phase.

  • HAL 9000 has contributed cloud infrastructure resource type stubs (PR #10592 / issue #8607): implemented the CloudResource base Pydantic model with provider-specific subclasses (AWSResource, GCPResource, AzureResource) including field validation, auto-provider assignment, and lower-casing of provider IDs. The feature is part of Epic #8568 (Resource Types & Container Tool Execution). Included BDD Behave tests covering all instantiation and validation scenarios.

  • HAL 9000 has contributed the ACMS context path matching fix (PR #10975 / issue #10972): corrects _path_matches() and _matches_pattern() to properly match absolute fragment paths against relative glob patterns by auto-prefixing with **/ before calling PurePath.full_match(), preventing silent inefficacy of include/exclude filters for absolute paths in fragment metadata.

  • HAL 9000 has contributed database resource types (PostgreSQL, SQLite) with transaction-based sandbox strategy: implemented DatabaseResourceHandler providing full CRUD operations (read, write, delete, list_children) and connection validation with automatic credential masking for PostgreSQL and SQLite backends. Includes TransactionSandbox infrastructure wired into SandboxFactory, BDD test coverage in features/database_resources.feature, and Robot Framework integration tests in robot/database_resources.robot (PR #10591 / issue #8608, Epic #8568).

  • HAL 9000 has contributed the agents plan rollback command (PR #8674 / issue #8557): implemented checkpoint-based plan state restoration with the agents plan rollback <plan-id> [<checkpoint-id>] CLI command as part of Epic #8493, enabling plans to be restored to previous checkpoints, discarding post-checkpoint decisions, and resuming execution from the rolled-back state. Supported by --yes/-y, --to-checkpoint, and --format/-f flags. Includes comprehensive BDD test coverage (>= 97%) for rollback, decision discarding, and plan resume functionality.

  • Jeffrey Phillips Freeman has contributed ExecutePhaseDecisionHook for Epic #8477: implemented the Execute-phase mirror of StrategizeDecisionHook, providing six recording methods (implementation choices, tool invocations, error recovery, validation responses, subplan spawn, resource selection) with context snapshot auto-capture and comprehensive Behave test coverage including phase-gating, error handling, and full tree path scenarios.

  • HAL 9000 has contributed the PyYAML security upgrade (PR #11012 / issue #9055): added pyyaml>=6.0.3 dependency constraint to address known YAML parsing vulnerabilities.

  • HAL 9000 has contributed the DecisionService wiring for PlanExecutor strategize persistence fix (#10813): added decision_service to the PlanExecutor constructor and wired it from the CLI dependency-injection container in _get_plan_executor(), plus implemented _persist_strategy_decisions() to persist strategy decisions as domain Decision objects.

  • HAL 9000 has contributed the A2A module rename standardization BDD tests (PR #10583 / issue #8615): comprehensive Behave test suite validating that all 22 A2A symbols are properly exported from cleveragents.a2a, no legacy ACP references remain in the module source, and documentation uses correct A2A naming conventions — fixing inline imports, unused behave symbols, cross-scenario context dependencies, and missing type annotations.

  • HAL 9000 has contributed the ActorSelectionOverlay._render_refresh_display rename fix (PR #11176 / issue #11039, Epic #8174): renamed _render() method to _refresh_display() to avoid shadowing Textual's Widget._render(), fixing a crash in textual >=1.0 where get_content_height() would receive None and raise AttributeError: 'NoneType' object has no attribute 'get_height'.

  • HAL 9000 has contributed the actor compiler LSP binding fix (PR #1488 / issue #1432): fixed _extract_lsp_bindings() to read node.lsp_binding (the typed NodeLspBinding field on NodeDefinition) as the primary extraction path instead of only checking the untyped config dict, so per-node LSP bindings specified via lsp_binding: YAML key are no longer silently dropped. Includes Behave BDD and Robot Framework regression tests.

  • HAL 9000 has contributed the config-actor combined-format support fix (PR #11232 / issue #11189): added _detect_nested_config_actor(), _flatten_config_actor(), and handling in ActorConfiguration.from_blob() to transparently flatten the nested config.actor block from both compact-string and nested-dict forms so v3 detection, schema validation, and canonicalisation see flat data — eliminating the "provider is required" crash.

  • HAL 9000 has contributed the actor compiler actor_ref field fix (issue #1429): corrected _map_node() and compile_actor() in src/cleveragents/actor/compiler.py to read actor_ref from the top-level NodeDefinition.actor_ref field instead of node.config.get("actor_ref"), resolving silent failures on all SUBGRAPH nodes where subgraph_refs was always empty and NodeConfig.subgraph was always None.

  • HAL 9000 has contributed the removal of the unsupported executable resource type (PR #3248 / issue #3077): removed executable from LSP_RESOURCE_TYPES and BUILTIN_TYPE_NAMES, updated agents resource list CLI table columns to the spec-required [Name, ID, Type, Phys/Virt, Children, Projects], deleted orphaned examples/resource-types/executable.yaml, and updated related BDD test coverage.

  • HAL 9000 has contributed the alembic fileConfig error handling fix (PR #8288 / issue #7874): wrapped the fileConfig() call in alembic/env.py with a try/except block to catch malformed INI logging configuration and emit clear, actionable error messages to stderr.

  • HAL 9000 has contributed the Definition-of-Done gating feature for the Apply phase (PR #8299 / issue #7927): PlanLifecycleService.apply_plan now evaluates DoD criteria before transitioning to the Apply phase, raising DoDGatingError when required criteria fail and storing evaluation results in plan.validation_summary.

  • HAL 9000 has contributed the engine cache TOCTOU race condition fix (PR #8265 / issue #7566): added MEMORY_ENGINES_LOCK to engine_cache.py and wrapped the check-and-set operation in UnitOfWork.engine with with MEMORY_ENGINES_LOCK: to prevent concurrent threads from creating duplicate in-memory SQLite engine instances; also fixed a cache-hit bug where self._engine was never assigned on a cache hit.

  • HAL 9000 has contributed the plan correct JSON output envelope fix (PR #8662 / issue #8584): restructured agents plan correct --format json output to nest correction fields under data.correction and pass command="plan correct" to format_output, producing the spec-required CLI envelope. Added three BDD scenarios validating data.correction.mode (revert and append modes) and the command field.

  • HAL 9000 has contributed BDD feature file tag coverage improvements (#9124 / pr #9183): added required @a2a, @session, and @cli Gherkin tags to 30 feature files (8 A2A, 7 session, 15 CLI) to enable selective tag-based test filtering via behave --tags=a2a,session,cli.

  • HAL 9000 has contributed the plan tree JSON decision_id fix (#9096): updated step_tree_json_valid in features/steps/plan_explain_steps.py to correctly handle the {"data": [...]} envelope structure produced by format_output, and removed @tdd_expected_fail from the @tdd_issue_4254 scenario so it runs as a permanent regression guard.

  • HAL 9000 has contributed the TDD scenario for plan tree correction visual marking (PR #8671 / issue #8576): added a failing BDD scenario proving that corrected nodes (decisions with is_correction=True) are not visually distinguished in the plan tree output, formalizing Spec Requirement #7 as an executable specification.

  • HAL 9000 has contributed the --clone-into CLI argument for container-instance, the CloneIntoHandler module, the devcontainer-instance snapshot sandbox strategy, and the ContainerLifecycleState.DISCOVERED terminology alignment (PR #8304, issue #7555).

  • HAL 9000 has contributed the ACMS Context Tier Hydration documentation (PR #9208 / issue #6175): documented the context_tier_hydrator module in the ACMS Architecture section of the specification, covering its public interface, file listing strategy, budget limits, and fragment structure.

  • HAL 9000 has contributed the agent task memory leak fix (#9044): replaced list.remove with set.discard as the done_callback for asyncio tasks in Agent._tasks, preventing unbounded memory growth in long-lived agents and ensuring safe concurrent task removal.

  • HAL 9000 has contributed the ACMS context show/clear CLI commands (PR #9675 / issue #9586): implemented context show <view> displaying assembled context with per-tier budget utilization summary (hot/warm/cold), and context clear with --path, --tag, --tier filtering plus confirmation prompt with --yes bypass. Includes 12 Behave BDD scenarios, 9 Robot Framework integration tests, ASV benchmarks, full type annotations, and _TierServiceProtocol for type safety.

  • HAL 9000 hal9000@cleverthis.com has contributed cost and session budget tracking and enforcement (issue #8609): implemented CostTrackingService, BudgetExceededError, three-tier budget hierarchy (plan/session/organization), warning thresholds at 90% utilization, per-provider cost tracking, and comprehensive BDD test suite.

  • HAL 9000 has contributed the AutoDebug node state mutation fix (#10496): fixed _analyze_error, _generate_fix, and _validate_fix in src/cleveragents/agents/graphs/auto_debug.py to return partial update dicts per LangGraph s node contract, preventing duplicate state entries and checkpoint inconsistencies.

  • HAL 9000 has contributed the ContextStrategy protocol and plugin registration system (PR #11106 / issue #8616): implemented the domain-model ContextStrategy Protocol with BackendSet, PlanContext, StrategyCapabilities, StrategyConfig, ContextStrategyResult, and StrategyRegistryEntry models. Six built-in strategies each implement real backend query logic respecting budget constraints. The StrategyRegistry service provides thread-safe registration/unregistration, Pydantic-validated config updates with immutable MappingProxyType fields, plugin discovery via register_from_module() with CWE-706 module-prefix allowlist guard, enabled list management, deterministic fragment ordering, and validation warnings. Comprehensive BDD test coverage in features/context_strategies.feature and features/context_strategy_registry.feature (120+ scenarios) (#8616).

  • HAL 9000 has contributed the A2A stdio transport for local mode (#691): implemented A2aStdioTransport class with JSON-RPC 2.0 message framing over stdin/stdout for subprocess communication, including process lifecycle management (connect/disconnect), request/response serialization, graceful shutdown with timeout-based termination, and type-safe path resolution for Python modules vs. executable scripts. Added full BDD test coverage (18 scenarios) in features/a2a_stdio_transport.feature with mock subprocess behavior in step definitions.

  • HAL 9000 has contributed the plan apply --format json spec-compliant envelope fix (PR #9817 / issue #9449): replaced raw plan dictionary output with a spec-required JSON envelope containing structured data fields for artifacts, changes, validation, sandbox cleanup, and lifecycle metrics across all output formats. Full BDD test suite in behave + Robot Framework integration tests added.

  • HAL 9000 has contributed the ContextTierService defaults fix (PR #1485 / issue #1443): corrected spec-aligned default values for max_tokens_hot (16000), max_decisions_warm (100), and max_decisions_cold (500) in context_tier_settings.py. Added comprehensive BDD regression tests verifying all three interface contracts. (Parent Epic: #935)

Details (PR Contributions)

Below are some specific details of individual PR contributions.

  • HAL 9000 has contributed the configurable merge strategy implementation (PR #9610 / issue #9559): three configurable merge strategies (prefer-parent, prefer-subplan, manual) for plan three-way merges, MergeStrategy StrEnum with helper methods, MergeStrategyService for conflict resolution, BDD test suite with 8 scenarios, and Robot Framework integration tests.
  • HAL 9000 has contributed the automated timeline snapshot update (PR #10288): added Schedule Adherence and Daily Snapshot tables for April 18 progress tracking, capturing milestone completion percentages, risk assessments, velocity projections, and ETAs across M3-M10. Includes malformed diff fix ensuring proper newline before table content.
  • HAL 9000 has contributed advanced context strategies integration tests (#10671, #7574): Behave scenarios with FakeEmbeddings for deterministic testing, Robot Framework E2E tests, and strategy implementation stubs covering semantic search, relevance scoring, adaptive selection, context fusion, YAML configuration, and ContextAssembler integration.
  • HAL 9000 has contributed the resource and skill management showcase alignment (#4213): updated the CLI tools showcase with consistent counts, explicit save instructions, metadata callouts, and README framing for platform walkthroughs; removed obsolete tdd_issue tags from coverage threshold Robot tests; hardened the Skip If No LLM Keys E2E helper with per-key regex validation and log suppression to prevent credential leakage.
  • HAL 9000 has contributed the sandbox dirs cache invalidation fix (PR #11091 / issue #7527): introduced SandboxDirsCache to track filesystem paths of sandbox-created directories by plan_id, wired automatic invalidation into all cleanup/purge methods (cleanup_all, cleanup_abandoned, clear_sandbox_dirs_cache, _cleanup_on_exit_handler), and added BDD test coverage.
  • HAL 9000 has contributed the CleanupService sandbox cache invalidation fix (PR #8257 / issue #7527): _purge_sandboxes() now invalidates the internal _sandbox_dirs_cache after deleting stale directories so that a subsequent scan() call on the same instance re-reads the filesystem instead of returning already-deleted paths as stale items.
  • HAL 9000 has contributed the LSP subprocess cleanup fix (#10597): added a defensive _process = None reset before subprocess.Popen() in StdioTransport.start() to prevent orphaned child processes and file descriptor leaks when subprocess.Popen() fails during initialization.
  • HAL 9000 has contributed the Invariant Data Model and Database Schema (PR #8701 / issue #8524): SQLAlchemy ORM model with fields id (UUID), description (text), created_at (timestamp), and is_active (bool); Alembic migration creating the invariants table with index on is_active for efficient active-query filtering; BDD Behave unit tests and Robot Framework integration tests.
  • HAL 9000 has contributed the ACMS execute phase ContextAssemblyPipeline wiring (PR #10027): replaces the base ACMSPipeline default with ContextAssemblyPipeline in ACMSExecutePhaseContextAssembler, enabling production Phase 1 components (confidence-weighted strategy selection, proportional budget allocation, parallel execution with circuit breaking) and per-stage timing instrumentation by default. Includes Behave test coverage verifying the default pipeline type.
  • HAL 9000 has contributed the path containment security hardening fix (PR #7801 / issue #7478): replaced insecure str.startswith(root + "/") string-prefix path containment checks with semantic os.path.relpath comparisons in tool/path_mapper.py (_is_under) and application/services/llm_actors.py (_write_to_sandbox), eliminating the sibling-directory prefix-collision path traversal bypass vulnerability.
  • HAL 9000 has contributed the data-integrity fix for ProjectRepository (#8179): removed unconditional session.rollback() calls from exception handlers in ProjectRepository.create() and NamespacedProjectRepository.create/update/delete, delegating transaction rollback to the Unit of Work outer-layer handler where it belongs.
  • Jeffrey Phillips Freeman has contributed the --format/-f flag to agents session tell (issue #10466): adds JSON envelope output for machine-readable workflows alongside existing Rich console output, with Behave BDD test coverage verifying all four non-rich format paths (JSON, YAML, plain, table) and the short -f flag alias.
  • HAL 9000 has contributed the Semgrep guard for broad exception suppression (PR #9185 / issue #9103): added two new Semgrep rules (python-no-suppressed-exception and python-no-suppress-exception) to automate enforcement of error propagation guidelines, integrated Semgrep into nox -s lint in audit mode with migration plan for ~337 existing violations, and comprehensive BDD test coverage across all rule patterns and escape hatch scenarios.
  • HAL 9000 has contributed the ProviderRegistry.FALLBACK_ORDER fix (#10906): added the missing ProviderType.GEMINI to the fallback provider order list so that when only a Gemini API key is configured, the registry correctly selects it as the default provider. Includes BDD regression scenarios in features/fallback_gemini_provider.feature.
  • HAL 9000 has contributed the PyYAML security hardening fix (PR #11017 / issue #11012): added pyyaml>=6.0.3 as an explicit runtime dependency in pyproject.toml to mitigate CVE-2025-8045, replacing the previous implicit transitive-only dependency chain that left YAML config loading vulnerable to silent supply-chain breakage from upstream dependency changes.
  • HAL 9000 has contributed the plan explain structured alternatives format fix (PR #11090): updated _build_explain_dict() in src/cleveragents/cli/commands/plan.py to convert the alternatives_considered list into structured objects with index (1-based), description, and chosen fields in the alternatives output key, aligning the agents plan explain output with the spec-required format.
  • HAL 9000 has contributed the plan tree JSON/YAML spec-compliant envelope fix (issue #11041): wrapped agents plan tree JSON and YAML output in the spec-required command envelope (command, status, exit_code, data, timing, messages), updated BDD step definitions to validate envelope structure, and removed the @tdd_expected_fail tag from the previously-failing JSON tree format test (issue #4254).
  • HAL 9000 has contributed the a2a session_id validation fix (PR #11098 / issue #9250): moved the session_id validation guard to the top of _handle_session_close() in A2aLocalFacade, closing the validation bypass path where empty or null session IDs could slip through to devcontainer cleanup when SessionService was not wired.
  • HAL 9000 has contributed ACMS budget enforcement for per-file and cumulative size constraints (PR #9673 / issue #9583): implemented BudgetEnforcer, BudgetViolation, and ContextFile dataclasses in src/cleveragents/acms/budget_enforcement.py with full type annotations, ruff linting compliance, 11 BDD Behave scenarios, Robot Framework integration tests, and per-file exclusion + cumulative budget cutoff strategies for max_file_size and max_total_size limits.