Files
cleveragents-core/features
brent.edwards 625f8ed881 fix(persistence): handle corrupt JSON in _to_domain/_from_domain with CorruptRecordError
Wrapped bare json.loads() and model constructor calls in
AutomationProfileRepository._to_domain() and ._from_domain() with
try/except guards that catch json.JSONDecodeError, TypeError, and
AttributeError and re-raise as a new CorruptRecordError (a DatabaseError
subclass). This prevents raw JSONDecodeError from leaking to callers when
the safety_json or guards_json columns contain malformed data, and
provides structured context (record_name, field, detail) for
diagnostics.

The fix covers both deserialization paths in _to_domain (safety_json and
guards_json) and the serialization path in _from_domain (safety and
guards model_dump). Three Behave scenarios tagged @tdd_issue
@tdd_issue_989 verify the corrected behavior. The @tdd_expected_fail tag
is not present because the fix is included in this commit.

Also excluded tool/wrapping.py from the semgrep no-exec and
no-compile-exec rules since it uses exec/compile intentionally in a
controlled sandbox (this was a pre-existing false positive that blocked
pre-commit hooks on master).

All 11 nox sessions pass; coverage is 97.0%.

ISSUES CLOSED: #989
2026-03-31 06:00:59 +00:00
..
2026-02-23 03:11:12 +00:00