Files
roboco/tests/unit/gateway/test_choreographer_dev.py
T
06682f33c6 Fix: agent workflow hardening (#70)
* fix(gateway): push the branch before QA handoff so reviewers see the latest commits

The commit content tool commits locally without pushing; only open_pr pushed
the branch. On the first submission that was fine, but a fix committed while
addressing needs_revision never reached origin (open_pr is skipped once the PR
exists), so QA — which reviews the remote PR branch — re-reviewed the stale
remote and re-failed the task on every cycle, a loop that never converged.

i_am_done now pushes the task branch (idempotent; a no-op when nothing is
unpushed) as part of the shared submit gate, covering both the normal and
resume-from-verifying paths. A push failure blocks the handoff with a clear
remediation rather than parking the task in awaiting_qa with commits that exist
only in the developer's local workspace.

* fix(orchestrator): don't reap a stale claim while the agent's container is alive

The stale-claim reaper released any claimed/in_progress task whose
last_heartbeat_at exceeded the TTL. The heartbeat only updates on certain
gateway calls, so a developer deep in a long edit/test cycle outran the TTL and
had its claim reaped mid-work — churning the task and risking a double spawn
against the still-running container.

The reaper now skips a task whose assignee still holds a live (ACTIVE) agent
instance, trusting container liveness — the ground truth — over the heartbeat
proxy. The check is defensive on missing fields so a heartbeat-only caller (and
the reaper's existing unit tests) behave exactly as before.

* fix(gateway): refuse to unblock a task while a dependency is unfinished

A PM unblock on a dependency-gated task moved it straight to in_progress,
overriding the dependency — letting a dependent proceed without its upstream's
work (e.g. a frontend task built before its UX design lands). A dependency
block is meant to clear on its own via _unblock_dependents the moment the
upstream reaches a terminal state.

unblock now refuses while any dependency is still non-terminal, returning a
clear remediation that the block resolves automatically. Manual unblock remains
available for genuine, non-dependency blockers.

* fix(gateway): release a dependency-blocked claim to pending instead of looping

A task that reached claimed/in_progress with an unfinished dependency was left
in that state when the claim guard rejected, so the orchestrator's respawn loop
kept reviving its assignee — which could make no progress — burning work for
nothing.

The claim guard now releases such a task back to pending. claimed -> blocked is
not a legal transition, so pending — held by the dispatch dependency filter — is
the lifecycle-correct resting state: the respawn loop ignores pending tasks, and
_unblock_dependents re-dispatches it once the upstream reaches a terminal state.
release_dependency_blocked_claim shares a _force_unclaim_to_pending core with
unclaim_for_reaper so both record a truthful work-session abandon reason.

* feat(security): warn at startup in header-trust mode + document the auth posture

When ROBOCO_AGENT_AUTH_REQUIRED is not enabled the API accepts the X-Agent-Id /
X-Agent-Role headers without a signed token, so any client that can reach it may
act as any role (including 'ceo'). The API now logs a clear warning at startup
in this mode, and the README gains a Security section documenting the auth
posture and how to harden it. Acceptable only on a trusted private network — do
not expose the API to untrusted networks.

* fix(workspace): scope the refresh fetch to current + default branch

ensure_workspace's healthy short-circuit ran an all-refs 'git fetch origin' to
keep every origin/<branch> ref current. On a monorepo with many accumulated
feature/* branches that exceeds the refresh timeout, the fetch silently fails,
and the workspace keeps a stale base — so an agent builds on an out-of-date
branch.

The refresh now fetches only the workspace's current branch and the repo's
default branch (resolved via origin/HEAD), with --no-tags --prune: it transfers
near-nothing and can't time out. Readers need their own branch and the default;
the integration branch is refreshed at branch-creation time.

* fix(git): refresh a dependency-blocked task's branch off the current integration tip

A cross-cell dependent (e.g. a frontend task waiting on the UX design) was
branched off a base captured before its upstream merged into the integration
branch, and the branch was never re-synced — so the agent built on a stale
snapshot with none of the upstream's work.

Two changes close the gap:
- release_dependency_blocked_claim now clears branch_name, so the re-claim
  (after the dependency clears) re-runs branch creation.
- create_branch, when the branch is already on disk with no commits of its own,
  resets it onto the freshly-pulled base — the dependent now builds on the
  current integration tip. A branch carrying real commits is left untouched, so
  no work is discarded; the cell->leaf cascade carries the upstream down to the
  dev branch automatically.

* refactor(gateway): drop the sibling-sequence claim guard

Sibling sequence no longer gates a claim. Cross-cell ordering is
enforced by task dependencies — a cell task that depends on another is
held until its upstream reaches a terminal state, a stronger,
status-aware gate than the sequence-number check. That check was
dormant in practice anyway: every fan-out child carries sequence 0, on
which the guard short-circuited. `sequence` stays a sibling-ordering /
dispatch-priority field (list_pending ordering and the panel).

Removes sibling_sequence_guard and its _earlier_blocking_sibling
helper, the now-unused skip_sequence parameter threaded through the
claim verbs, and the sibling fetch that fed it.

* feat(gateway): sort a cross-cell dependent after its upstream

When the frontend cell task is wired to depend on its UX/UI sibling, set
its sequence to the upstream's sequence + 1 so it sorts after the design
it waits on — list_pending ordering and the panel now show UX ahead of
the implementation it gates, in either delegation order.

Adds TaskService.set_sequence (the sibling-ordering field is a service
write; it carries no claim-gating semantics — dependencies gate claims).

* feat(gateway): make the backend cell depend on UX too

UX/UI design defines the screens and API contracts both implementation
cells build against, so the backend cell — not just the frontend — waits
on the UX/UI cell task in a product fan-out and sorts after it. Wires in
either delegation order: a backend task delegated after UX gets the
dependency directly; a UX task delegated after a still-pending backend
sibling retro-wires it.

Mirrors the existing frontend wiring (_depend_backend_on_ux and
_depend_pending_backends_on_ux). Backend is held by the same dependency
gate, so it costs no extra dispatch churn.

* fix(websocket): forward notification acks instead of logging them incomplete

The bridge handler serves both notification.sent and notification.acked,
but acked events carry `agent_id` (the acking agent) rather than
`recipient_id`, so every acknowledgement tripped the missing-field guard
and logged "Incomplete notification event" instead of reaching the panel.
Accept either field as the recipient.

* feat(api): hint the full UUID when a truncated task id fails validation

Agents copy the 8-character task prefix the system shows them (the commit
prefix, task summaries) and send it as task_id, which fails UUID
validation with an opaque "invalid length" 422 and wastes a call. The
request-validation handler now detects a task_id UUID error and attaches
a `remediate` hint telling the agent to retry with the full 36-character
UUID from its task envelope.

* fix(audit): record the blocked transition when a task is escalated

Escalation sets a task to blocked by writing task.status directly, which
bypassed the validated transition helper and so never emitted a
task.blocked audit row — the lifecycle moved but the Auditor saw nothing.
Extract the audit emit from the central transition helper into
_emit_status_transition_audit and call it from the escalate path,
capturing the prior status and outgoing owner before reassignment so the
row is attributed correctly.

* fix(docs): stop doubling the docs path so design specs index into RAG

The documenter sometimes hands a doc path already rooted at docs/, and
joining it onto DOCS_BASE_PATH (/app/docs) produced /app/docs/docs/...,
so the file was never found and the spec never indexed — the frontend
cell could not retrieve the UX design over RAG. Normalize the path
before joining: trust an absolute path, otherwise strip a single
redundant leading docs/ segment.

* feat(security): let the control panel authenticate in secure mode

With ROBOCO_AGENT_AUTH_REQUIRED=true every request must carry a valid
HMAC token, which locked the human control panel out — it sends role
headers but no token. nginx, the only trusted hop between the browser
and the API, now injects the CEO token on /api and /ws, so the browser
never holds the signing secret. The injected value is just the existing
per-agent token issued for the CEO identity (issue_panel_token), so the
token-verification path is unchanged. An empty value (dev/header-trust
mode) renders to no header.

`make panel-token` prints the value; set it as ROBOCO_PANEL_AGENT_TOKEN
in .env before enabling secure mode. .env.example and the README
Security section document the flow.

* chore(compose): consolidate the two compose files into one

docker-compose.yml and docker-compose.yaml had diverged: .yml — the file
Docker actually uses — carried ROBOCO_PUBLIC_BASE_URL but was missing the
/app/manifests bind-mount, while .yaml had the manifests mount but not
the base URL. Merge the union into docker-compose.yml and delete the
duplicate so there is one source of truth and no "multiple config files"
warning.

This activates the manifests mount in the deployed file: without it the
orchestrator writes per-agent tool manifests to its ephemeral container
fs, they never reach the host for the daemon to bind-mount, and agents
fall back to all-verbs registration. Drop the stale .yaml reference from
the config.py docstring, the labeler, and the CI path filters.

---------

Co-authored-by: Renn F <rennf93@users.noreply.github.com>
2026-06-05 16:35:22 +02:00

787 lines
27 KiB
Python

"""Tests for the developer-facing Choreographer methods."""
from __future__ import annotations
from datetime import UTC, datetime
from typing import Any
from unittest.mock import AsyncMock, MagicMock
from uuid import uuid4
import pytest
from roboco.services.gateway.choreographer import Choreographer, ChoreographerDeps
# #172: a developer fresh claim must carry a substantive step checklist.
_STEPS = [
{
"title": "Implement the change",
"description": (
"edit the target file, add tests, run them, and stage the "
"change for commit on the task branch"
),
}
]
# Full parity: a fresh dev claim authors the same rich plan a PM does.
# These satisfy _dev_plan_gate (plan/approach >= 150 chars,
# technical_considerations, risks).
_GOOD_PLAN = (
"Append the timestamp HTML comment to the very bottom of README.md without "
"touching any other line, then commit it on the task branch and open a PR. "
"Verify the diff is a single-line addition before submitting for QA."
)
_GOOD_TC = ["Use a trailing newline so the comment sits on its own line."]
_GOOD_RISKS = [
{
"risk": "An accidental reformat of README.md balloons the diff.",
"mitigation": "Append only; assert the diff touches one line pre-commit.",
}
]
def _make_deps(**overrides: AsyncMock) -> ChoreographerDeps:
task = overrides.get("task", AsyncMock())
# VerbRunner uses task.session.begin_nested() as a savepoint context
# manager. AsyncMock auto-attributes any access (so hasattr always
# returns True); we always overwrite session to a MagicMock with the
# correct async-context-manager protocol.
task.session = MagicMock()
task.session.begin_nested = MagicMock(
return_value=MagicMock(
__aenter__=AsyncMock(return_value=None),
__aexit__=AsyncMock(return_value=False),
)
)
work_session = overrides.get("work_session", AsyncMock())
git = overrides.get("git", AsyncMock())
a2a = overrides.get("a2a", AsyncMock())
journal = overrides.get("journal", AsyncMock())
audit = overrides.get("audit", AsyncMock())
evidence_repo = overrides.get("evidence_repo", AsyncMock())
# Ensure evidence_repo returns empty lists by default
for method in (
"list_unread_a2a",
"list_unread_mentions",
"list_pending_notifications",
"task_metadata_gaps",
"recent_team_activity",
"blockers_in_lane",
):
getattr(evidence_repo, method).return_value = []
return ChoreographerDeps(
task=task,
work_session=work_session,
git=git,
a2a=a2a,
journal=journal,
audit=audit,
evidence_repo=evidence_repo,
)
@pytest.mark.asyncio
async def test_give_me_work_returns_assigned_task() -> None:
agent_id = uuid4()
task_obj = MagicMock(id=uuid4(), status="pending", title="t1")
task_svc = AsyncMock()
task_svc.list_pending_for_agent.return_value = []
task_svc.list_assigned_for_agent.return_value = [task_obj]
deps = _make_deps(task=task_svc)
c = Choreographer(deps)
env = await c.give_me_work(agent_id)
body = env.as_dict()
assert body["status"] == "pending"
assert body["task_id"] == str(task_obj.id)
assert "i_will_work_on" in body["next"]
@pytest.mark.asyncio
async def test_give_me_work_returns_paused_when_no_assigned() -> None:
agent_id = uuid4()
paused_obj = MagicMock(id=uuid4(), status="paused")
task_svc = AsyncMock()
task_svc.list_pending_for_agent.return_value = []
task_svc.list_assigned_for_agent.return_value = []
task_svc.list_paused_for_agent.return_value = [paused_obj]
deps = _make_deps(task=task_svc)
c = Choreographer(deps)
env = await c.give_me_work(agent_id)
body = env.as_dict()
assert body["task_id"] == str(paused_obj.id)
assert "resume" in body["next"]
@pytest.mark.asyncio
async def test_give_me_work_returns_idle_when_no_work() -> None:
agent_id = uuid4()
task_svc = AsyncMock()
task_svc.list_pending_for_agent.return_value = []
task_svc.list_assigned_for_agent.return_value = []
task_svc.list_paused_for_agent.return_value = []
deps = _make_deps(task=task_svc)
c = Choreographer(deps)
env = await c.give_me_work(agent_id)
body = env.as_dict()
assert body["status"] == "idle"
assert "i_am_idle" in body["next"]
@pytest.mark.asyncio
async def test_i_will_work_on_pending_with_plan() -> None:
agent_id = uuid4()
task_id = uuid4()
pending_task = MagicMock(
id=task_id,
status="pending",
plan=None,
assigned_to=None,
parent_task_id=None,
sequence=0,
task_type="code",
commits=[],
pr_number=None,
branch_name="feature/backend/abc",
quick_context=None,
)
in_progress_task = MagicMock(
id=task_id, status="in_progress", plan={"text": "do x"}, assigned_to=agent_id
)
task_svc = AsyncMock()
task_svc.get.return_value = pending_task
task_svc.agent_for.return_value = MagicMock(
id=agent_id, role="developer", team="backend", slug=None
)
task_svc.list_in_progress_for_agent.return_value = []
task_svc.list_paused_for_agent.return_value = []
task_svc.get_subtasks.return_value = []
task_svc.claim.return_value = MagicMock(
id=task_id, status="claimed", plan=None, assigned_to=agent_id
)
task_svc.set_plan.return_value = MagicMock(
id=task_id, status="claimed", plan={"text": "do x"}, assigned_to=agent_id
)
task_svc.start.return_value = in_progress_task
deps = _make_deps(task=task_svc)
c = Choreographer(deps)
env = await c.i_will_work_on(
agent_id,
task_id,
plan=_GOOD_PLAN,
steps=_STEPS,
technical_considerations=_GOOD_TC,
risks=_GOOD_RISKS,
)
assert env.error is None
assert env.status == "in_progress"
task_svc.claim.assert_awaited_once_with(task_id, agent_id)
task_svc.set_plan.assert_awaited_once()
task_svc.start.assert_awaited_once_with(task_id, agent_id)
@pytest.mark.asyncio
async def test_i_will_work_on_pending_no_plan_returns_tracing_gap() -> None:
agent_id = uuid4()
task_id = uuid4()
pending_task = MagicMock(
id=task_id,
status="pending",
plan=None,
assigned_to=None,
description="task description",
parent_task_id=None,
sequence=0,
task_type="code",
commits=[],
pr_number=None,
branch_name="feature/backend/abc",
quick_context=None,
)
task_svc = AsyncMock()
task_svc.get.return_value = pending_task
task_svc.agent_for.return_value = MagicMock(
id=agent_id, role="developer", team="backend", slug=None
)
task_svc.list_in_progress_for_agent.return_value = []
task_svc.list_paused_for_agent.return_value = []
task_svc.get_subtasks.return_value = []
task_svc.claim.return_value = MagicMock(
id=task_id, status="claimed", plan=None, assigned_to=agent_id
)
deps = _make_deps(task=task_svc)
c = Choreographer(deps)
env = await c.i_will_work_on(agent_id, task_id, plan=None)
body = env.as_dict()
assert body["error"] == "tracing_gap"
assert "plan" in body["missing"]
@pytest.mark.asyncio
async def test_i_will_work_on_needs_revision_re_starts() -> None:
"""needs_revision dev path: spec composes (claim, set_plan, start), so
claim now runs even when the task is already assigned to the dev (the
spec source-status for claim includes NEEDS_REVISION). Migration
behavior change vs. the pre-spec verb body, which skipped claim if
already assigned."""
agent_id = uuid4()
task_id = uuid4()
nr_task = MagicMock(
id=task_id,
status="needs_revision",
assigned_to=agent_id,
plan={"x": 1},
task_type="code",
commits=[],
pr_number=None,
branch_name="feature/backend/abc",
quick_context=None,
parent_task_id=None,
sequence=0,
team="backend",
)
claimed = MagicMock(
id=task_id, status="claimed", assigned_to=agent_id, plan={"x": 1}
)
in_progress_task = MagicMock(
id=task_id, status="in_progress", assigned_to=agent_id, plan={"x": 1}
)
task_svc = AsyncMock()
task_svc.get.return_value = nr_task
task_svc.agent_for.return_value = MagicMock(
id=agent_id, role="developer", team="backend", slug=None
)
task_svc.list_in_progress_for_agent.return_value = []
task_svc.list_paused_for_agent.return_value = []
task_svc.get_subtasks.return_value = []
task_svc.claim.return_value = claimed
task_svc.set_plan.return_value = claimed
task_svc.start.return_value = in_progress_task
deps = _make_deps(task=task_svc)
c = Choreographer(deps)
env = await c.i_will_work_on(
agent_id,
task_id,
plan=_GOOD_PLAN,
steps=_STEPS,
technical_considerations=_GOOD_TC,
risks=_GOOD_RISKS,
)
assert env.status == "in_progress"
task_svc.start.assert_awaited_once_with(task_id, agent_id)
@pytest.mark.asyncio
async def test_i_will_work_on_task_not_found_returns_not_found() -> None:
agent_id = uuid4()
task_id = uuid4()
task_svc = AsyncMock()
task_svc.get.return_value = None
deps = _make_deps(task=task_svc)
c = Choreographer(deps)
env = await c.i_will_work_on(agent_id, task_id)
body = env.as_dict()
assert body["error"] == "not_found"
@pytest.mark.asyncio
async def test_i_will_work_on_invalid_state_returns_invalid_state() -> None:
"""Completed task: spec rejects via can_invoke_action on the first
composed action (claim) — completed is not in claim's source_statuses,
so the message comes from the spec, not the verb body."""
agent_id = uuid4()
task_id = uuid4()
completed_task = MagicMock(
id=task_id,
status="completed",
assigned_to=agent_id,
task_type="code",
commits=[],
pr_number=None,
branch_name="feature/backend/abc",
quick_context=None,
parent_task_id=None,
sequence=0,
team="backend",
)
task_svc = AsyncMock()
task_svc.get.return_value = completed_task
task_svc.agent_for.return_value = MagicMock(
id=agent_id, role="developer", team="backend", slug=None
)
deps = _make_deps(task=task_svc)
c = Choreographer(deps)
env = await c.i_will_work_on(agent_id, task_id)
body = env.as_dict()
assert body["error"] == "invalid_state"
# Spec produces "task is in 'completed', 'claim' requires: ..."
assert "completed" in body["message"]
@pytest.mark.asyncio
async def test_i_will_work_on_blocks_when_journal_note_at_claim_missing() -> None:
"""Pre-gateway parity P1: i_will_work_on requires a journal:note at claim.
The composed (claim, set_plan, start) sequence runs first — the claim
sticks. Then the post-claim tracing gate fires because no journal:note
exists for (agent, task), and the agent gets a tracing_gap with a
remediation hint to write a note and retry.
"""
agent_id = uuid4()
task_id = uuid4()
pending_task = MagicMock(
id=task_id,
status="pending",
plan=None,
assigned_to=None,
parent_task_id=None,
sequence=0,
task_type="code",
commits=[],
pr_number=None,
branch_name="feature/backend/abc",
quick_context=None,
)
in_progress_task = MagicMock(
id=task_id,
status="in_progress",
plan={"text": "do x"},
assigned_to=agent_id,
)
task_svc = AsyncMock()
# `get` is called twice: once at verb entry, once by _post_claim_journal_gate.
task_svc.get.side_effect = [pending_task, in_progress_task]
task_svc.agent_for.return_value = MagicMock(
id=agent_id, role="developer", team="backend", slug=None
)
task_svc.list_in_progress_for_agent.return_value = []
task_svc.list_paused_for_agent.return_value = []
task_svc.get_subtasks.return_value = []
task_svc.claim.return_value = MagicMock(
id=task_id, status="claimed", plan=None, assigned_to=agent_id
)
task_svc.set_plan.return_value = MagicMock(
id=task_id, status="claimed", plan={"text": "do x"}, assigned_to=agent_id
)
task_svc.start.return_value = in_progress_task
journal_svc = AsyncMock()
journal_svc.has_note_for_task.return_value = False
deps = _make_deps(task=task_svc, journal=journal_svc)
c = Choreographer(deps)
env = await c.i_will_work_on(
agent_id,
task_id,
plan=_GOOD_PLAN,
steps=_STEPS,
technical_considerations=_GOOD_TC,
risks=_GOOD_RISKS,
)
body = env.as_dict()
assert body["error"] == "tracing_gap"
assert "journal:note_at_claim" in body["missing"]
assert "note(scope='note'" in body["remediate"]
# The composed action ran — claim+set_plan+start were called even though
# the post-claim gate failed.
task_svc.claim.assert_awaited_once_with(task_id, agent_id)
task_svc.start.assert_awaited_once_with(task_id, agent_id)
# test_i_am_done_with_catchup_full_chain removed (audit P2-5/D-16):
# i_am_done_with_catchup verb deleted. submit_for_qa now does push + PR
# explicitly; i_am_done auto-runs submit_verification + submit_qa.
@pytest.mark.asyncio
async def test_i_am_done_blocks_when_acceptance_criteria_unaddressed() -> None:
"""Without a reflect note, unaddressed criteria block i_am_done.
The reflect note is treated as the addressing artifact for any
criterion not explicitly cited via acceptance_criteria_status —
so this test deliberately omits reflect to surface the criterion
rejection.
"""
agent_id = uuid4()
task_id = uuid4()
t = MagicMock(
id=task_id,
status="in_progress",
assigned_to=agent_id,
plan={"x": 1},
branch_name="feature/backend/abc",
work_session_id=uuid4(),
self_verified=False,
progress_updates=[{"message": "p"}],
acceptance_criteria=["AC1", "AC2"],
acceptance_criteria_status=[
{"criterion": "AC1", "referencing_artifact_id": "c1"}
],
# Spec's PRECONDITION_COMMITS now runs before the tracing gate;
# supply a commit so the tracing gap (acceptance criteria) is
# the load-bearing rejection.
commits=[{"sha": "abc"}],
pr_number=8,
pr_url="https://x/pr/8",
team="backend",
documents=[],
dev_notes="",
)
task_svc = AsyncMock()
task_svc.get.return_value = t
task_svc.agent_for.return_value = MagicMock(
id=agent_id, role="developer", team="backend", slug=None
)
journal_svc = AsyncMock()
journal_svc.has_reflect_for_task.return_value = False
# JOURNAL_DURING_WORK_AT_LEAST_ONE is satisfied so the load-bearing
# rejection here is the unaddressed AC2 criterion, not the new
# mid-flight cadence gate.
journal_svc.has_decision_for_task.return_value = True
journal_svc.latest_decision_at.return_value = datetime.now(UTC)
journal_svc.has_learning_for_task.return_value = False
journal_svc.has_struggle_for_task.return_value = False
deps = _make_deps(task=task_svc, journal=journal_svc)
c = Choreographer(deps)
env = await c.i_am_done(agent_id, task_id, "done")
body = env.as_dict()
assert body["error"] == "tracing_gap"
assert any("AC2" in m for m in body["missing"])
@pytest.mark.asyncio
async def test_i_am_done_reflect_note_addresses_acceptance_criteria() -> None:
"""A reflect note clears the acceptance-criteria gate.
Per `_check_acceptance_criteria`, the reflect note is the agent's
attestation that the work meets every criterion; once it's present,
unaddressed criteria no longer block the submission. The other
tracing requirements (commits, PR, progress) still apply.
"""
agent_id = uuid4()
task_id = uuid4()
t = MagicMock(
id=task_id,
status="in_progress",
assigned_to=agent_id,
plan={"x": 1},
branch_name="feature/backend/abc",
work_session_id=uuid4(),
self_verified=False,
progress_updates=[{"message": "p"}],
acceptance_criteria=["AC1", "AC2"],
acceptance_criteria_status=[], # nothing cited explicitly
commits=[{"sha": "abc"}],
pr_number=8,
pr_url="https://x/pr/8",
team="backend",
documents=[],
dev_notes="",
qa_notes="",
)
task_svc = AsyncMock()
task_svc.get.return_value = t
task_svc.agent_for.return_value = MagicMock(
id=agent_id, role="developer", team="backend", slug=None
)
task_svc.submit_verification.return_value = t
task_svc.submit_for_qa.return_value = t
journal_svc = AsyncMock()
journal_svc.has_reflect_for_task.return_value = True
# Satisfy JOURNAL_DURING_WORK_AT_LEAST_ONE so the test's narrow assertion
# (criteria-gap cleared) isn't masked by an unrelated tracing failure.
journal_svc.has_decision_for_task.return_value = True
journal_svc.latest_decision_at.return_value = datetime.now(UTC)
journal_svc.has_learning_for_task.return_value = False
journal_svc.has_struggle_for_task.return_value = False
deps = _make_deps(task=task_svc, journal=journal_svc)
c = Choreographer(deps)
env = await c.i_am_done(agent_id, task_id, "done")
body = env.as_dict()
# criteria gate is cleared by reflect; if anything else fails, it
# must NOT be the AC2 criterion.
if body.get("error") == "tracing_gap":
assert not any("AC2" in m for m in body.get("missing", []))
@pytest.mark.asyncio
async def test_i_am_done_blocks_when_journal_reflect_missing() -> None:
"""Tracing-gate (journal:reflect) fires after the spec gate accepts."""
agent_id = uuid4()
task_id = uuid4()
t = MagicMock(
id=task_id,
status="in_progress",
assigned_to=agent_id,
plan={"x": 1},
branch_name="feature/backend/abc",
work_session_id=uuid4(),
self_verified=False,
progress_updates=[{"message": "p"}],
acceptance_criteria=["AC1"],
acceptance_criteria_status=[
{"criterion": "AC1", "referencing_artifact_id": "c1"}
],
# Spec's PRECONDITION_COMMITS runs before the tracing gate; supply
# a commit so the missing journal:reflect is the load-bearing gap.
commits=[{"sha": "abc"}],
pr_number=8,
pr_url="https://x/pr/8",
team="backend",
documents=[],
dev_notes="",
)
task_svc = AsyncMock()
task_svc.get.return_value = t
task_svc.agent_for.return_value = MagicMock(
id=agent_id, role="developer", team="backend", slug=None
)
journal_svc = AsyncMock()
journal_svc.has_reflect_for_task.return_value = False # no reflect
# Satisfy JOURNAL_DURING_WORK_AT_LEAST_ONE so journal:reflect is the
# load-bearing gap surfaced to the assertion.
journal_svc.has_decision_for_task.return_value = True
journal_svc.latest_decision_at.return_value = datetime.now(UTC)
journal_svc.has_learning_for_task.return_value = False
journal_svc.has_struggle_for_task.return_value = False
deps = _make_deps(task=task_svc, journal=journal_svc)
c = Choreographer(deps)
env = await c.i_am_done(agent_id, task_id, "done")
body = env.as_dict()
assert body["error"] == "tracing_gap"
assert "journal:reflect" in body["missing"]
@pytest.mark.asyncio
async def test_i_am_done_not_assigned_returns_tracing_gap() -> None:
"""Spec's PRECONDITION_OWNERSHIP rejects with tracing_gap (owns_task).
Pre-spec migration the verb returned not_authorized via an inline
ownership check; that's now driven by the spec's extra precondition
so the rejection_kind is tracing_gap.
"""
agent_id = uuid4()
other_agent = uuid4()
task_id = uuid4()
t = MagicMock(
id=task_id,
status="in_progress",
assigned_to=other_agent,
commits=[{"sha": "abc"}],
team="backend",
quick_context=None,
)
task_svc = AsyncMock()
task_svc.get.return_value = t
task_svc.agent_for.return_value = MagicMock(
id=agent_id, role="developer", team="backend", slug=None
)
deps = _make_deps(task=task_svc)
c = Choreographer(deps)
env = await c.i_am_done(agent_id, task_id, "x")
body = env.as_dict()
assert body["error"] == "tracing_gap"
assert "owns_task" in body["missing"]
@pytest.mark.asyncio
async def test_i_am_done_skill_resolution_picks_existing_skill() -> None:
"""Resolver picks first matching skill.
Falls back to the first preference entry when no match is found.
"""
deps = _make_deps()
c = Choreographer(deps)
qa = MagicMock(id=uuid4(), skills=[{"id": "qa_review"}, {"id": "test_validation"}])
skill = c._resolve_skill(qa, ["code_review", "qa_review"])
assert skill == "qa_review"
qa_with_canonical = MagicMock(id=uuid4(), skills=[{"id": "code_review"}])
skill2 = c._resolve_skill(qa_with_canonical, ["code_review", "qa_review"])
assert skill2 == "code_review"
qa_with_neither = MagicMock(id=uuid4(), skills=[{"id": "other_skill"}])
skill3 = c._resolve_skill(qa_with_neither, ["code_review", "qa_review"])
assert skill3 == "code_review" # fallback to first
@pytest.mark.asyncio
async def test_i_am_blocked_escalates_and_journals() -> None:
agent_id = uuid4()
task_id = uuid4()
t = MagicMock(
id=task_id,
status="in_progress",
assigned_to=agent_id,
pre_block_state=None,
task_type="code",
team="backend",
)
after = MagicMock(id=task_id, status="blocked", assigned_to=agent_id)
task_svc = AsyncMock()
task_svc.get.return_value = t
task_svc.agent_for.return_value = MagicMock(
id=agent_id, role="developer", team="backend", slug=None
)
task_svc.escalate.return_value = after
journal_svc = AsyncMock()
deps = _make_deps(task=task_svc, journal=journal_svc)
c = Choreographer(deps)
env = await c.i_am_blocked(agent_id, task_id, "external API down")
assert env.error is None
assert env.status == "blocked"
journal_svc.write_struggle.assert_awaited_once()
task_svc.escalate.assert_awaited_once()
@pytest.mark.asyncio
async def test_i_am_blocked_task_not_found_returns_not_found() -> None:
agent_id = uuid4()
task_id = uuid4()
task_svc = AsyncMock()
task_svc.get.return_value = None
deps = _make_deps(task=task_svc)
c = Choreographer(deps)
env = await c.i_am_blocked(agent_id, task_id, "x")
body = env.as_dict()
assert body["error"] == "not_found"
@pytest.mark.asyncio
async def test_i_am_idle_with_unread_a2a_soft_blocks() -> None:
agent_id = uuid4()
deps = _make_deps()
deps.evidence_repo.list_unread_a2a.return_value = [{"from": "x", "task_id": "t1"}]
c = Choreographer(deps)
env = await c.i_am_idle(agent_id)
body = env.as_dict()
assert body["status"] == "idle_with_unread"
assert "address" in body["next"].lower()
@pytest.mark.asyncio
async def test_i_am_idle_with_unread_mentions_soft_blocks() -> None:
agent_id = uuid4()
deps = _make_deps()
deps.evidence_repo.list_unread_mentions.return_value = [
{"channel": "#x", "from": "y"}
]
c = Choreographer(deps)
env = await c.i_am_idle(agent_id)
body = env.as_dict()
assert body["status"] == "idle_with_unread"
@pytest.mark.asyncio
async def test_i_am_idle_clean_returns_idle() -> None:
agent_id = uuid4()
task_svc = AsyncMock()
deps = _make_deps(task=task_svc)
# All evidence_repo lists are already empty per _make_deps default
c = Choreographer(deps)
env = await c.i_am_idle(agent_id)
assert env.status == "idle"
task_svc.mark_agent_idle.assert_awaited_once_with(agent_id)
def _passing_i_am_done_task(agent_id: Any, task_id: Any) -> Any:
"""A task that clears every i_am_done gate (so the flow reaches the push)."""
return MagicMock(
id=task_id,
status="in_progress",
assigned_to=agent_id,
plan={"x": 1},
branch_name="feature/backend/abc",
work_session_id=uuid4(),
self_verified=False,
progress_updates=[{"message": "p"}],
acceptance_criteria=["AC1"],
acceptance_criteria_status=[
{"criterion": "AC1", "referencing_artifact_id": "c1"}
],
commits=[{"sha": "abc"}],
pr_number=8,
pr_url="https://x/pr/8",
team="backend",
documents=[],
dev_notes="",
qa_notes="",
)
def _passing_i_am_done_deps(task: Any, **overrides: AsyncMock) -> ChoreographerDeps:
"""Task + journal mocks set up so i_am_done passes through to the push."""
task_svc = AsyncMock()
task_svc.get.return_value = task
task_svc.agent_for.return_value = MagicMock(
id=task.assigned_to, role="developer", team="backend", slug=None
)
task_svc.submit_verification.return_value = task
task_svc.submit_qa.return_value = task
task_svc.submit_for_qa.return_value = task
journal_svc = AsyncMock()
journal_svc.has_reflect_for_task.return_value = True
journal_svc.has_decision_for_task.return_value = True
journal_svc.latest_decision_at.return_value = datetime.now(UTC)
journal_svc.has_learning_for_task.return_value = False
journal_svc.has_struggle_for_task.return_value = False
return _make_deps(task=task_svc, journal=journal_svc, **overrides)
@pytest.mark.asyncio
async def test_i_am_done_pushes_branch_before_qa_handoff() -> None:
"""i_am_done pushes the task branch so QA reviews the latest commits.
A fix committed during a revision cycle is local-only until pushed; without
this push QA re-reviews the stale remote and re-fails the task every cycle.
"""
agent_id = uuid4()
task_id = uuid4()
git_svc = AsyncMock()
git_svc.push_task_branch.return_value = 1
deps = _passing_i_am_done_deps(
_passing_i_am_done_task(agent_id, task_id), git=git_svc
)
c = Choreographer(deps)
env = await c.i_am_done(agent_id, task_id, "done")
assert env.error is None
git_svc.push_task_branch.assert_awaited_once_with(agent_id, task_id)
@pytest.mark.asyncio
async def test_i_am_done_blocks_when_branch_push_fails() -> None:
"""A failed push aborts i_am_done — a task must not reach awaiting_qa with
commits that live only in the developer's local workspace."""
agent_id = uuid4()
task_id = uuid4()
git_svc = AsyncMock()
git_svc.push_task_branch.side_effect = RuntimeError("fetch timed out")
deps = _passing_i_am_done_deps(
_passing_i_am_done_task(agent_id, task_id), git=git_svc
)
c = Choreographer(deps)
env = await c.i_am_done(agent_id, task_id, "done")
body = env.as_dict()
assert body["error"] == "invalid_state"
assert "push" in body["message"].lower()
# The QA transition must not have run.
deps.task.submit_qa.assert_not_awaited()
deps.task.submit_for_qa.assert_not_awaited()