mirror of
https://github.com/rennf93/roboco.git
synced 2026-08-03 07:23:24 +02:00
* release-manager: fencing-token mutex + executor/readiness hardening
Closes the release-mutex TTL race (#17, HIGH) and the remaining
release-manager gaps (#88, #89, #201, #202):
- #17: the release mutex is now acquired with a uuid4 fencing token and
released via Lua compare-and-del; a background asyncio heartbeat
compare-and-expires the TTL ~every 60s while the execute owns the lock,
so a live execute no longer expires and a crashed one auto-releases
<=3000s. A second approve after TTL expiry cannot usurp and rm -rf the
in-flight clone — the fenced first-finally keeps its lock.
- #89: a Redis outage during acquire stays fail-closed (the execute never
runs) but now returns a distinct redis_unavailable result + log so the
CEO sees the cause instead of a false already_in_progress.
- #88: commit_and_push RuntimeError is wrapped into a structured
ReleaseResult(commit_failed) instead of a 500.
- #201: first-release fallback still emits untracked version-ref files as
gaps (no longer silenced by the first-release branch).
- #202: _await_proc awaits proc.wait() after kill() so a timeout cannot
leak a zombie.
TDD: tests/unit/services/test_release_proposal_concurrency.py extends
_FakeRedis with eval/get/expire and pins the fencing/heartbeat/usurper
invariants + the redis_unavailable result.
* PM/code-task creation guard + main_pm coverage + issue carve-out
Closes the creation-time role x task_type gap (the user's explicit example)
and the main_pm delegate hole:
- New pure helper `pm_cannot_own_code(role, task_type, is_issue_resolution)`
in foundation/policy/batch.py — single source of truth. Both PM roles
(cell_pm + main_pm) coordinate; a `code` task assigned/claimed by a PM is
a structural mismatch, EXCEPT a PM taking a code task in needs_revision to
resolve review/QA issues directly (the carve-out).
- Creation-time guard: TaskService.create calls the helper (closes the
create-with-cell-PM-assignee hole the team-based check misses).
- Delegate path + spec claim gate consult the same helper.
`_validate_assignee_task_type` / `_task_type_hint_for` now key on the
Role (CELL_PM OR MAIN_PM), not the cell-PM slug set — closes the
delegate-to-main-pm-as-code hole.
- identity.role_for_uuid_or_none is None-tolerant (treats None as "not a
PM" and proceeds) so a malformed/missing assignee cannot crash the guard.
- prompter.create_task_from_draft reuses the guard at draft-create.
TDD: test_batch.py (helper matrix + carve-out), test_main_pm_code_guard.py
(main_pm coverage), test_delegate_assignee_task_type.py (delegate parity),
test_lifecycle_spec.py (claim gate: rejects PM claiming code from pending,
allows from needs_revision + PM claiming planning + dev claiming code).
* task-service: completion hooks + escalation/cancel/audit hardening
Closes the task-service cluster (#21/#98, #99, #100, #101, #103, #216; #102
verified already-covered, #217 verified already-guarded):
- #21/#98: ceo_approve now closes the work session + triggers completion
hooks before worktree removal (no-op when work_session_id is None), so a
CEO-approved task lands the same close-path as PM-completed.
- #99: apply_escalation routes through the transition validator with an
enumerated escalation exemption (_ESCALATABLE_TO_BLOCKED) instead of an
arbitrary source->BLOCKED write; BACKLOG is refused.
- #100: branchless ceo_reject awaiting_ceo_approval->pending gets a real
spec edge (ceo_reject_to_pool ActionSpec + _STATUS_TRANSITIONS entry) so
future admin-override tightening can't wedge the path.
- #101: revision_count bump is documented as the single chokepoint, with
the pre-block RESTORE path undoing it when restoring a snapshotted
needs_revision (same cycle resuming, not a new rejection).
- #103: cancel cascade surfaces non-terminal orphans instead of swallowing
the role violation.
- #216: _remove_task_worktree_on_terminal escalates recurring FS/permission
failure (audit/notify after N) instead of silent-failing forever.
- #102: pinned in test_verb_runner_midverb_invalid_state.py (committed with
the choreographer cluster) — verb-runner savepoints already surface a
concurrent mid-verb state change as INVALID_STATE.
- #217: submit_for_qa claimed_by guard verified intact.
TDD: test_task.py, test_worktree_cleanup_on_complete.py,
test_escalation_board_guard.py (#99), test_task_service_* integration,
test_lifecycle_spec.py.
* choreographer: gate-claim guards + pr-gate hardening + fail-open logging
Closes the choreographer cluster (#5/#222, #29, #30, #82, #188, #189,
#192; #157/#187 verified already-fixed/pinned; #102 pin lives here):
- #5/#222: the unchanged-PR guard's fail-open head_sha lookup now logs
(warning) on a slug-resolver/git-helper error so a regression cannot
silently turn the pr_fail re-submit loop-stopper into a no-op. Stays
fail-open (never wedges the PM).
- #29: pinned (REFUTED-with-pin) — _lane_claim_guard already returns the
error envelope without releasing the claim on a transient lookup error.
- #30: pinned (REFUTED-with-negative-pin) — a non-batch branchless main_pm
root cannot bypass the complete spec gate (is_batch_umbrella requires
batch_id set).
- #82: _post_gate_review_to_pr wraps the slug-resolution call in try/except
(mirrors _capture_pr_head_sha) so a malformed cell_map AttributeError no
longer 500s the reviewer after a committed gate transition.
- #188: _is_hand_formatted_verdict anchors the header regex to line-start,
so a quoted (> ## Summary) or inline (mid-prose) header mention no longer
false-refuses a hand-formatted verdict.
- #189: pr_fail re-captures the PR head SHA after the transition commits and
re-stamps the verdict note only when it advanced (closes the stale-SHA
false-allow loop-hole); no-advance stays a single note write.
- #192: claim_gate_review skips the dev claim guards (already_active/paused/
lane) via a new skip_dev_guards param — a pr_reviewer inspecting an
assembled PR does not start work, so the single-active-task / code-lane
invariants do not apply; the dependency guard is kept, and QA's
claim_review parity is preserved.
- #157/#187: verified in tree — pr_review-only handoff is intentionally
prior-work-worth-resuming; self_review_block wiring (reviewer != dev)
holds on assembled tasks with 4 existing pin tests.
TDD: test_choreographer_*, test_pr_gate_posts_review (#82),
test_pr_review_hand_format_guard (#188), test_submit_root_unchanged_pr_guard
(#189), test_claim_gate_review_guards (#192), test_verb_runner_midverb
_invalid_state (#102 pin).
* playbook curate: guard the gating commit against a poisoned session (#55)
The explicit `session.commit()` that gates the RAG index (commit-before-index
so an uncommitted playbook cannot land in the corpus) raised PendingRollbackError
when a prior mid-verb failure had rolled the caller's session back — 500ing the
whole curation verb instead of returning a clean envelope, and (worse) risking a
fall-through to index an uncommitted playbook. Wrap the commit: on
PendingRollbackError, log + return invalid_state with a re-fetch/retry remediate
and skip the index. The happy path still commits exactly once then indexes.
TDD: test_playbook_verbs.py — poisoned-session returns a clean invalid_state and
does NOT index; clean-session still commits once + indexes (pins no fail-closed
inversion / no double-commit).
* [chore] gateway: atomic activate merge — preserve probe_failures across re-park (#156)
activate() was a blind SET that reset probe_failures to 0, so a probe-failure
increment that just landed (or was in flight) could be wiped by a concurrent
re-park — resetting the give-up / CEO-notify count mid-episode. Route activate
through a server-side Lua merge (roboco:activate_rate_limit) that refreshes the
episode metadata (kind / activated_at / retry_after / affected_agents) while
carrying over the previous probe_failures count. Indivisible w.r.t. the
increment/reset scripts (Redis single-threads an EVAL).
#56 (notify to prompter/secretary refused) verified SAFE — the pin tests
(test_notify_rejects_prompter_recipient / _secretary_recipient /
_allows_ceo_recipient) already cover the only human notify target invariant;
no legitimate send is dropped, no code change.
* [chore] foundation/policy: spec gates + QA retry-key pin (Cluster F)
#50 sync_branch composes=() so the spec gate accepted a terminal/paused/
blocked task and the handler rebased a dead/parked branch — add a
PRECONDITION_SYNC_BRANCH_STATE (claimed/in_progress/verifying/needs_revision
only), rejection_kind=invalid_state. TDD: 28 spec tests.
#148 submit_root's prose asserts 'a Main-PM root is planning-typed, never
code' but only the creation path (main_pm_cannot_own_code) backed it — add
PRECONDITION_ROOT_NOT_CODE on the submit_root IntentSpec (defense in depth),
scoped to submit_root only so the shared submit_for_review action keeps
cell_pm+code submit_up parity. Graceful on Mock/None task_type so the
choreographer Mock-task tests don't crash. TDD: 2 spec tests.
#150 VERB_RETRY_LIMITS is keyed by the MCP-exposed names (pass/fail), not
the IntentSpec-internal pass_review/fail_review — already correct; add a
pin test so a one-sided rename can't silently drop the QA-handoff cap.
#142 main_pm_cannot_own_code/pm_cannot_own_code already normalize casing
(.lower()) — no-op, pin test test_main_pm_cannot_own_code_is_case_insensitive
already in tree.
* [chore] worksession-git: 405 merge-method fallback + non-destructive close (Cluster W)
#108 _merge_with_retry hardcoded 'squash' and raised MergeConflictError on a
405 with no method fallback — wedging the PM on an open, mergeable PR whose
repo merely had the squash button off. Add a 405 fallback to a permitted
method (via _first_allowed_merge_method, exclude='squash'), mirroring the CEO
merge_pull_request path. A 405 with no permitted fallback (or a second 405)
still falls through to the already-merged disambiguation / MergeConflictError.
TDD: 2 new tests (fallback-success, no-permitted-method-raises).
#109 close_pull_request defaulted delete_branch=True, so the choreographer
supersede path deleted a superseded PR's branch while the orchestrator
supersede path explicitly preserved it — the two disagreed, and the
destructive default ran on the 'close the dead PR' path where the branch may
still be referenced / useful for audit. Flip the default to False (opt-in
deletion) and make the choreographer caller explicit (parity with the
orchestrator). TDD: 1 new test (default preserves branch); existing
deletion-when-requested test now passes delete_branch=True explicitly.
Dispositions verified against current code (no silent drops):
- #27 REFUTED/FIXED-UNDEPLOYED: work_session.merge_pr resolves by session_id
(no global pr_number lookup); the real cross-repo collision fix
(project_id scoping on pr_merge/close_pull_request/rebase_pr_for_task/
pr_target) is already in tree + tested (test_pr_merge_scopes_task_lookup_
by_project_id, test_close_pull_request_scopes_task_lookup_by_project_id,
test_git_pr_target_scoping). Verify-only.
- #106 REFUTED: a guard exists (rev-list --count {base_ref}..{branch} == 0)
before reset --hard + base_ref falls back to default_branch; tests lock
the safety (test_create_branch_never_repoints_branch_with_real_work,
test_create_branch_does_not_reset_or_checkout_shared_clone).
- #218 BY-DESIGN: the merge_pr idempotent guard intentionally preserves the
audit trail (docstring + test_merge_pr_idempotent_on_already_completed_
preserves_audit_trail); a COMPLETED session always carries attribution
(COMPLETED only via merge_pr), so the NULL-COMPLETED case is unreachable.
- #104 BY-DESIGN: agents never merge to the repo default branch in RoboCo's
model (root→master is CEO-only); the guard is a correct CEO-only rail,
locked by test_pr_merge_into_default_branch_is_ceo_only.
* [chore] llm: surface disabled-provider downgrade + scrub probe log (#20/#3/#211)
#20/#3 resolve_for_agent silently fell through to the legacy Anthropic path
when a configured provider was disabled — indistinguishable from 'no
assignment', so the operator got no signal that spawns bypassed the
provider. Surface the bypass with a warning (graceful degradation stays the
default — a stalled spawn is worse than a routing miss) and add an opt-in
ROBOCO_ROUTING_STRICT (default-off) that fail-closes instead. Wired into the
panel Feature Flags card. TDD: 3 unit tests (warn-on-disabled, strict-raises,
no-assignment-stays-silent).
#211 probe_ollama_tags logged str(exc) raw on the generic-exception branch —
structured log could carry connection internals / stack traces. Log the
exception class name only. TDD: existing generic-branch test strengthened to
assert the log kwargs don't leak the raw text.
* [chore] support/stream/optimal/playbook/comms hardening (Cluster S)
Logical-gaps sweep, Cluster S (TDD, red→green per item):
#64 notification_delivery.acknowledge published the NOTIFICATION_ACKED bus
event directly (bypassing the outbox) — a rollback left a phantom ACK. Route
it through defer_bus_publish (after_commit), mirroring deliver.
#76 playbook.archive()/reject() stamped the archiver into approved_by/
approved_at, overwriting approval provenance (and fabricating approval for a
rejected draft). Add archived_by/archived_at (migration 053 + table + model)
and write those on archive/reject, leaving approval attribution intact.
#181 vector_store.replace_chunks wiped existing index rows even when every
chunk lacked an embedding (embedder failure). Skip the wipe when chunks is
non-empty but records is empty — preserve good rows for nothing.
#182/#183 optimal.record_learning recomputed a learn-{md5(full_content)}
tracking source that never matched the URI the plugin embedded chunks under
(roboco://learnings/{doc_id}, doc_id=lrn-{hash100}). Use the plugin's
returned doc_id so de-index/lookup-by-source finds the chunk rows.
#96/#97 transcription periodic flush only peeked ready buffers (unbounded
map growth) and ran sync callbacks on the event loop (a slow callback
blocked the flush task). Flush (remove) each ready buffer after notifying,
and offload each callback to a thread.
#212 _TEAM_SCOPED_ROLES was duplicated across communications/agents_config/
seeds. Single-source it in foundation.policy.communications; consumers
reference that object (identity-tested).
#19 stream_bus._dispatch_event re-ran already-succeeded handlers on a
recover_pending replay (duplicate side effects). Add a per-(event.id,
handler) SET-NX idempotency guard: skip on a hit, clear the key on handler
failure so a replay re-runs it, fail-open when redis is unavailable.
Dispositions (no code change): #77 approve() index-write pair asserted
BY-DESIGN; #62/#63 notification DB-dedup verified pinned; #184/#185 REFUTED;
#214 REFUTED; #215 BY-DESIGN.
* [chore] db/migrations: graph-integrity guard + conftest unreachable-DB warning (Cluster D)
Logical-gaps sweep, Cluster D (TDD + real alembic upgrade head verification):
#16/#37 add tests/unit/test_migration_graph_integrity.py — a static guard that
the alembic migration graph has exactly one head, every down_revision resolves,
every revision is reachable from a root, and no revision id is duplicated. The
suite builds its DB via Base.metadata.create_all (not alembic upgrade head), so
a forked head / dangling down_revision / duplicate id would otherwise ship
silently and break a real deploy mid-stream.
Caught a real bug in the process: migration 053's revision id
"053_playbook_archived_attribution" (33 chars) exceeded alembic's
alembic_version.version_num VARCHAR(32) — a fresh `alembic upgrade head` raised
"value too long for type character varying(32)" at the 053 stamp. Renamed to
"053_playbook_archived_attr" (26 chars). Verified end-to-end on a scratch PG:
upgrade head stamps 053, downgrade -1 returns to 052. (The pre-existing
test_every_migration_revision_id_fits_the_alembic_version_column guard is now
green too; it had been red on the 33-char id.)
#90 conftest silently pytest.skip'd every DB test when Postgres was unreachable
— a non-Docker box reported a green run of all-skips. Extract the warning into
_warn_if_pg_unavailable and fire it at import so the operator sees the DB is
down (the per-test skip path is unchanged). Test: warns when unavailable, silent
when reachable (verified under -W error::UserWarning).
Dispositions (verified against real code + a fresh alembic upgrade head, no code
change): #6 REFUTED — sa.Enum(create_type=False) at 001:119/304 does NOT break a
fresh upgrade head (001→052 applied cleanly on a scratch DB); #8 REFUTED — the
upgrade passed 030/031 (RAG chunk tables) without pgvector installed; pgvector is
a runtime concern handled by roboco/db/base.py, not a migration prerequisite;
#40 REFUTED — the `|| echo` mask was already removed and partial-schema drift
reports exit 1 (only by-design unreachable/unmigrated skips remain); #204 REFUTED
— the property walk seed IS pinned (random.Random(20260504), line 97); #205/#206
REFUTED — the smoke-trace fixture IS wired via
test_lifecycle_smoke_replay.py (8 passed); no shell smoke scripts exist in the
tree to wire; #137 BY-DESIGN — pyproject version 0.14.0 is an operational note,
no code gate.
* [chore] panel: admin-override force flag + kanban subtask_count + ws cleanup + ui-store dedupe (Cluster P)
#13: kanban admin-override into a hatch state (completed / awaiting_qa /
awaiting_pm_review) now requires an explicit force=true from the panel and
emits a dedicated task.admin_override audit row server-side; non-hatch
overrides need no force. Backend gate in tasks route + admin_set_status;
panel kanban-board sends force for hatch targets; TaskUpdate carries force.
#198: kanban service threads the real subtask_count (one grouped query) into
dev + priority-swimlane + main-pm-flat boards instead of a hardcoded 0.
#79: useWebSocket cleanup clears messages/lastMessage/state on unmount or
endpoint change so a dep-change (navigating to another stream) can't leak the
prior subscription's stale snapshot as live.
#186: disambiguate the duplicate ui-store modules -- the session/scroll store
in lib/stores renamed to useScrollRestorationStore / scroll-restoration-store
(barrel + 2 consumers updated); the sidebar/theme useUIStore in @/store is now
the sole useUIStore.
#12: verified already in-tree (release-proposal-card surfaces non-404 errors
with retry; getProposal maps only 404->null). #80 by-design (handleTransportError
already resets isSending on a no-payload SSE drop). #81 docs (streamUrl docstring
records that live-intake SSE auth is session-id-based bearer-style).
Backend: ruff+mypy clean, 278 tests green. Panel: lint+typecheck clean, 159 tests.
* orchestrator: park/reaper/readopt/a2a hardening + self-heal/ci-watch dedupe (Cluster O)
Closes the orchestrator-side logical gaps from the sweep:
- #75 a2a human-only drop surfaced: _dispatch_a2a_work logs the skip
("a2a request targets a human-only role; left as a notification for the
human (not spawned)") instead of silently dropping the target — the
CEO/secretary/prompter still see the notification; only the spawn is
suppressed. (orchestrator.py)
- #72 readopt liveness: _readopt_running_agents requires a non-stale live
claim (via _agent_holds_live_claim) and skips a zombie container so a
reaped-but-restart-readopted agent isn't double-counted as active.
- #74 shutdown drain: stop() calls _flush_respawn_tracker so the durable
respawn counter write-throughs aren't lost on a clean stop.
- #71 resolve_wait active-guard + deferred liveness: a rate_limit_lifted
WaitingRecord is only confirmed-live after a _confirm_resume_liveness
probe (deferred deletion _resume_confirm_delay=30.0), and an
already-active agent short-circuits the repark. Scoped to
rate_limit_lifted records (the only ones at risk of a false lift).
- #73 stuck-Claude kill: _maybe_kill_stuck_claude + _claude_stuck_kill_ttl
(config.claude_stuck_kill_seconds) — a live container whose heartbeat is
stale past the grace AND whose gateway probe is broken is killed+evicted,
not protected forever by the reaper's live-skip.
- #230 verified FIXED-UNDEPLOYED: _gateway_broken_past_grace already
requires N consecutive false-broken probes (not one flaky streak); no
change, test added to pin the N-consecutive invariant.
- #43 self-heal per-observation dedupe: a fingerprint collapses repeat
CEO notifications for the same CI regression.
- #44 ci_watch dedupe by (git_url, workflow): a monorepo's multiple
workflows each get their own fix task (was collapsed by git_url alone).
- #49 identity.role_for_slug_or_none None-hardening: a stale/malformed
slug resolves to None and the human-only skip falls through to the safe
"not spawnable" path instead of crashing.
- #193 strategy engine: notify the CEO on a persistent assess failure
instead of failing silently in the background loop.
TDD: test_no_spawn_human_roles (a2a skip surfaced), test_orchestrator_
shutdown_drain (#74), test_provider_overload_break (#71), test_readopt_
running_agents (#72), test_resolve_wait_repark (#71), test_stale_claim_
reaper (#73/#230), test_strategy_engine_loop (#193, new),
test_self_heal_engine (#43), test_ci_watch_engine (#44), test_identity
(#49). All red->green.
* chore: make-quality green — xenon complexity refactors + mypy test fixes + lifecycle regen
No behavior changes. Brings the tree to a fully green `make quality` (the
base branch never passed the xenon B-rank gate on several blocks; the
lifecycle artifacts had drifted from the committed ceo_reject_to_pool edge).
Xenon B-rank refactors (extract a helper; preserve semantics exactly):
- api/routes/tasks.py: _apply_forced_status_override + _StatusOverride
dataclass bundle (update_task override block).
- services/task.py: _enforce_no_pm_code_on_create (create guards) +
_escalation_diverts_to_pool (collapses the two board/advisory +
main_pm+code divert branches into one predicate).
- services/prompter.py: _coerce_pm_code_to_planning (create_task_from_draft).
- services/notification.py: _duplicate_unacked_exists (_create_notification
purpose-based dedup query + ACK_REQUIRED_BY_TYPE gate).
- services/sequencing.py: _same_assignee_lane_edges (the undeclared-surface
same-assignee lane fallback at the tail of dev_task_collision_edges).
- gateway/choreographer/_impl.py: _pm_task_type_error static helper
(_validate_assignee_task_type compound PM guard).
- gateway/choreographer/pr_gate.py: _gate_review_event_verdict +
_gate_review_body static helpers (_post_gate_review_to_pr).
mypy test fixes (no type:ignore — banned; use typing.cast with quoted
strings per TC006):
- test_task_update_completeness: TaskUpdate(acceptance_criteria=None).
- test_bus: cast("Redis", _FakeRedis()); Redis import under TYPE_CHECKING.
- test_pr_merge_concurrency: capture AsyncMocks into locals before asserting.
- test_notification_delivery_phantom: cast("UUID", to_agents[0]).
Lifecycle artifact regen (owed from Cluster T #100 — the
awaiting_ceo_approval -> pending `ceo_reject_to_pool` edge was added to the
spec in 3d633084 without regenerating the derived artifacts the
foundation-check gate diffs against): docs/rag/lifecycle/intent-verbs.md,
docs/rag/lifecycle/status-transitions.md, panel/lib/lifecycle.json.
services/kanban.py: ruff format only (collapses the _load_subtask_counts
signature that drifted unformatted from Cluster P).
* [chore] logical-gaps sweep — Cluster I (intake/product/pitch)
#57/#58 prompter: preserve a top-level product_id with a 1-cell map
(prompter.py create_task_from_draft — top-level target wins over a
redundant 1-cell map instead of dropping product_id); reject — not
silently skip — a malformed project_id in the_work cell entries
(prompter.py _draft_cell_map raises ValidationError).
#59/#159 prompter: create_task_from_draft now operates on a copy
(_copy_draft) so _validate_and_coerce_draft / _clean_list never mutate
the caller's draft dict.
#160 prompter: _resolve_owning_team consults product/board routing
before forcing MAIN_PM on a multi-cell map (product root stays Board,
product+assignee-is-board stays Board).
#83/#84 github_provisioning: create_repo is idempotent by GitHub name
— a 422 "name already exists" (orphaned repo from a rolled-back prior
approval) is fetched and reused instead of erroring; pitch re-approval
now reuses the orphaned repo end-to-end.
#196 kanban: flat main-PM board has a "coordination" column for
non-cell teams (MAIN_PM/Board) instead of dropping their cards.
#197 project update: an explicit null in the PATCH body now clears the
stored field, distinct from an absent field (leave unchanged).
ProjectService.update drops exclude_none so explicit-None applies; the
PATCH route uses ProjectUpdate.model_validate(data.model_dump(
exclude_unset=True)) to preserve the request's unset-tracking (the old
field-by-field construction marked every field set and defeated the
distinction — nulling NOT-NULL git_url).
TDD: prompter 47, github_provisioning+pitch 16, kanban+project 67,
project routes 37 — all green; ruff + mypy clean.
* [chore] logical-gaps sweep — Cluster M (mcp-servers)
#60 flow_server/do_server: the circuit-breaker substitution no longer
erases the fixable rejection — the original envelope (kind/message/
remediate) is nested as inner on a copy of the SDK's circuit_open
envelope (the SDK dict is not mutated in place). The agent still sees
WHY the verb failed, not just that the breaker tripped.
#61 flow_server/do_server: a 404 carrying a *descriptive* detail
(not FastAPI's bare default {"detail":"Not Found"}) is now a
real resource not_found, surfaced as not_found so the agent
re-fetches state — instead of a misleading "server-side wiring gap"
invalid_state. The bare default and unparseable 404s still synthesize
the wiring-gap envelope; a 404 with a real Envelope (error field)
is still surfaced as-is.
#161 flow_server/do_server: dict error.code classification now uses
an exact-code map (authoritative for the codes the handlers emit) with
a substring fallback for unknown codes. Fixes the real regression:
AUTHENTICATION_REQUIRED carries no AUTHORIZED/DENIED/PERMISSION
substring, so the old substring-only rule dropped it to invalid_state
instead of not_authorized — an auth storm attributed as a state storm.
The fallback also adds AUTH so future AUTH-prefixed codes classify.
#162 flow_server/do_server: _register_tools gains a
ROBOCO_ALLOW_FULL_TOOLSET env override (default-off) so a missing
manifest falls back to the full tool set instead of raising — a
dev/test escape hatch. Production fail-loud behaviour is unchanged.
#163 intake_server: propose_batch accepts name as well as
title (intake drafts in the wild have used both), normalizing a
name-only draft onto a copy as title (caller's dict never mutated),
and reports the dropped count + reason in the return instead of
silently vanishing malformed drafts. The empty-batch hint now names
name as an alternative.
TDD: 123 mcp_servers tests green (14 new + 2 updated); ruff + mypy clean.
* [chore] Cluster N — conventions/docs logical-gaps sweep
#33: _create_new_doc/_update_existing_doc now resolve via
_resolve_contained_path (the RAG-returned update path was not containment-
checked — an escaping source could write/overwrite outside the docs dir).
#34: _commit_doc_to_repo returns committed/skipped/failed instead of
swallowing all exceptions; surfaced on DocRef.commit_status, the write
response, and the docs MCP guidance so a failed repo commit is fail-loud.
#35: write_doc only updates the similar doc when its filename matches — a
different filename creates a new file instead of collapsing onto the
similar doc's path (the dedup-overwrite defect codified by the old tests).
#129: a custom rule scoped to a language the validator never reports (a
typo) is surfaced as a warn finding on .roboco/conventions.yml via the
runner's once-per-run validation; #32 (tsx->typescript dialect) stays
BY-DESIGN.
#130: _cache_put only swallows a UNIQUE violation (23505) as a concurrent
duplicate; a non-unique IntegrityError (FK/NOT NULL/check) is log-errored
and re-raised instead of being silently misattributed.
#132: health re-reads the live file status (a cached degraded row hid an
in-place repair at a stale head key); get_map skips cached degraded rows
and stops caching degraded so a repaired file re-derives. #134 BY-DESIGN.
#133: _DB_METHODS gains stream/stream_scalars (SQLAlchemy 2.0 streaming
constructs are data access too — a route calling them is not thin).
#199: regenerate_verb_tables._annot_str strips Annotated[...] metadata
(BeforeValidator) before rendering; regenerated verbs.md + per-role
prompts so the BeforeValidator(func=...) repr (with a memory address) no
longer leaks into agent-facing prompt text.
TDD: 206 conventions/docs tests green (incl. 5 new files / appended
cases); ruff + mypy clean.
* [chore] Cluster 16 — cross-cutting hygiene logical-gaps sweep
Disposition + fix the 10 cross-cutting-hygiene gaps, TDD. make quality green
(ruff, mypy 944 files, pytest, xenon, vulture, foundation-check, enum-parity).
FIX:
- #24 /ws/system now gated by _require_panel_token (matches every sibling
/ws/* stream); rejects a missing token in strict mode and a forged token
even in dev. (roboco/api/websocket.py)
- #25 two drifted _require_ceo implementations (orchestrator router vs release
handler) unified on a single require_ceo_role helper in deps — same 403,
same role set, accepts Role/AgentRole/"ceo". (roboco/api/deps.py,
routes/orchestrator.py, routes/release.py)
- #11 a spawn session for a delivery role (developer/qa/documenter) with no
task_id now logs an unattributed-usage warning via is_unattributed_delivery_spawn.
(roboco/runtime/orchestrator.py)
- #65 pricing returns a structured CostResult(cost_usd, unpriced, is_anthropic)
so an unpriced Anthropic model (real spend we'd undercount) is flagged
instead of silently $0; calculate_cost stays a thin float wrapper.
(roboco/billing/pricing.py, billing/__init__.py)
- #67 blocker-metrics "blocked since" reads the task.blocked audit transition
(indexed on target_id/event_type/timestamp), not updated_at — which
over-counted when a blocked task was touched for a non-blocking reason.
Falls back to updated_at/created_at only with no audit row.
(roboco/services/metrics.py)
- #94 grok refresh_if_stale uses double-checked locking (_refresh_lock +
_recheck_or_refresh) so two concurrent callers don't both POST the
single-use refresh grant and burn the credential. (grok_auth.py)
DOCS (fix the doc, behavior already correct/pinned by tests):
- #66 get_summary docstring corrected — it sums raw agent_spawn_sessions rows
(sub-day precise); daily_usage_rollups/get_today_summary can diverge for
"today" until the sweeper catches up. (roboco/services/usage.py)
- #68 DashboardStorage is a documented in-memory stub; added a test pinning
that auditor flags are lost on storage reset (persisting = a migration +
service refactor, out of scope as a half-implementation).
(tests/integration/test_dashboard_service.py)
BY-DESIGN (no code change, with file:line evidence):
- #28 dashboard reads are open to the authenticated operator (dashboard.py:36
documents this); mutating auditor routes already gate via
_require_auditor_or_ceo. Role-gating reads would break the panel (no
X-Agent-ID on dashboard reads) and CEO-token-gating the router would block
the Auditor (auditor token != CEO token). nginx is the prod boundary.
REFUTED (narrowing would reintroduce a documented hang):
- #93 the ~/.grok directory mount (vs a single auth.json file) is load-bearing
— a single-file bind mount pins the inode so the atomic tmp.replace refresh
doesn't propagate to running containers (they hang at grok's login prompt).
Already documented in grok.py:161 and locked by
test_intake_grok_mounts_subscription_auth_when_present.
Incidental gate-greening (mypy errors a stale .mypy_cache had hidden in
earlier-cluster test files; xenon refactors for the new B-threshold):
- tests/unit/test_regenerate_verb_tables.py: type the dynamic-module loader.
- tests/unit/services/test_prompter.py: annotate the draft dict as dict[str,Any].
- tests/unit/services/test_conventions_cache_put.py: _FakeOrig is a real Exception
(IntegrityError's orig arg requires BaseException).
- metrics._blocked_since_map extracted from get_blocker_metrics (complexity).
- intake_server._normalize_batch_drafts extracted from propose_batch (complexity).
* Docs update
* [bug] spawn: self-heal vanished clone + branch ref before worktree ensure (be-dev-1 fatal loop)
A vanished clone_root (disk loss / /data/workspaces wipe / manual cleanup)
fatal-looped the resume path: _ensure_worktree_before_spawn ran
`git -C <missing>` and released the claim, but the reaper-style release
preserves assigned_to + branch_name so the next dispatch is a RESUME
(create_branch never re-runs to re-clone) and the same missing clone failed
every ~30s.
- workspace.py: ensure_worktree_self_heal re-attaches a present worktree +
symlinks the shared .venv; on a missing local branch ref it fetches from
origin (create_branch pushes at claim time, so pushed work survives) and
re-creates the ref, falling back to -b origin/HEAD only when the branch
was never pushed. _fetch_branch_ref is the token-aware fetch helper.
- orchestrator.py: _ensure_worktree_before_spawn health-checks the clone
and re-clones via ensure_workspace BEFORE the worktree self-heal. Fatal
git-state (WorkspaceError) still releases the claim + aborts; transient
failures abort without releasing (a fresh claim wouldn't help and
re-cloning is destructive).
TDD: 21 new + 61 related worktree/git/cancel/cleanup tests green; ruff +
mypy clean.
---------
Co-authored-by: Renn F <rennf93@users.noreply.github.com>
1202 lines
38 KiB
Python
1202 lines
38 KiB
Python
"""TaskService coverage — activate, branch creation, work session, indexing.
|
|
|
|
Focuses on lifecycle methods that interact with branches, work sessions,
|
|
and the proactive-context background hook.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import asyncio
|
|
import contextlib
|
|
import uuid
|
|
from typing import TYPE_CHECKING, Any, cast
|
|
from unittest.mock import AsyncMock, MagicMock
|
|
from uuid import uuid4
|
|
|
|
import pytest
|
|
import pytest_asyncio
|
|
from roboco.db.tables import (
|
|
AgentTable,
|
|
ChannelTable,
|
|
GroupTable,
|
|
ProjectTable,
|
|
SessionTable,
|
|
SessionTaskTable,
|
|
WorkSessionTable,
|
|
)
|
|
from roboco.exceptions import TaskLifecycleError
|
|
from roboco.models import AgentRole, AgentStatus, Team
|
|
from roboco.models.base import (
|
|
ChannelType,
|
|
Complexity,
|
|
SessionStatus,
|
|
SubstituteReason,
|
|
TaskNature,
|
|
TaskStatus,
|
|
TaskType,
|
|
)
|
|
from roboco.models.permissions import AgentContext
|
|
from roboco.models.task import TaskCreateRequest
|
|
from roboco.models.work_session import WorkSessionCreate, WorkSessionStatus
|
|
from roboco.services.task import (
|
|
SoftBlockInfo,
|
|
SoftBlockInput,
|
|
TaskService,
|
|
)
|
|
from roboco.services.work_session import WorkSessionService
|
|
from sqlalchemy import select
|
|
|
|
if TYPE_CHECKING:
|
|
from collections.abc import AsyncIterator
|
|
|
|
from sqlalchemy.ext.asyncio import AsyncSession
|
|
|
|
|
|
@pytest_asyncio.fixture
|
|
async def task_setup(
|
|
db_session: AsyncSession,
|
|
) -> AsyncIterator[dict]:
|
|
agent = AgentTable(
|
|
id=uuid4(),
|
|
name="Dev",
|
|
slug=f"be-dev-{uuid4().hex[:8]}",
|
|
role=AgentRole.DEVELOPER,
|
|
team=Team.BACKEND,
|
|
status=AgentStatus.ACTIVE,
|
|
model_config={},
|
|
system_prompt="dev",
|
|
capabilities=[],
|
|
permissions={},
|
|
metrics={},
|
|
)
|
|
db_session.add(agent)
|
|
await db_session.flush()
|
|
project = ProjectTable(
|
|
id=uuid4(),
|
|
name="P",
|
|
slug=f"p-{uuid4().hex[:8]}",
|
|
git_url="https://example.com/r.git",
|
|
default_branch="main",
|
|
assigned_cell=Team.BACKEND,
|
|
created_by=agent.id,
|
|
)
|
|
db_session.add(project)
|
|
await db_session.flush()
|
|
yield {
|
|
"svc": TaskService(db_session),
|
|
"agent_id": agent.id,
|
|
"project_id": project.id,
|
|
"project_slug": project.slug,
|
|
"db": db_session,
|
|
}
|
|
|
|
|
|
def _req(setup: dict, **overrides: Any) -> TaskCreateRequest:
|
|
return TaskCreateRequest(
|
|
title=overrides.pop("title", "t"),
|
|
description=overrides.pop("description", "d"),
|
|
acceptance_criteria=overrides.pop("acceptance_criteria", ["ac"]),
|
|
team=overrides.pop("team", Team.BACKEND),
|
|
created_by=setup["agent_id"],
|
|
project_id=setup["project_id"],
|
|
task_type=overrides.pop("task_type", TaskType.CODE),
|
|
nature=overrides.pop("nature", TaskNature.TECHNICAL),
|
|
estimated_complexity=overrides.pop("estimated_complexity", Complexity.MEDIUM),
|
|
**overrides,
|
|
)
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# activate
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_activate_raises_when_task_missing(task_setup: dict) -> None:
|
|
svc = task_setup["svc"]
|
|
with pytest.raises(ValueError, match="not found"):
|
|
await svc.activate(uuid4(), agent_role="cell_pm")
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_activate_raises_when_not_in_backlog(task_setup: dict) -> None:
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup)) # PENDING
|
|
with pytest.raises(ValueError, match="not in BACKLOG"):
|
|
await svc.activate(task.id, agent_role="cell_pm")
|
|
|
|
|
|
async def _seed_session_for_task(
|
|
db_session: AsyncSession, task_id: Any, agent_id: Any, *, is_primary: bool
|
|
) -> Any:
|
|
"""Seed a Channel/Group/Session/Link for a task to satisfy FK constraints."""
|
|
|
|
channel = ChannelTable(
|
|
id=uuid4(),
|
|
name="c",
|
|
slug=f"c-{uuid4().hex[:8]}",
|
|
type=ChannelType.CELL,
|
|
)
|
|
db_session.add(channel)
|
|
await db_session.flush()
|
|
group = GroupTable(
|
|
id=uuid4(),
|
|
name="g",
|
|
channel_id=channel.id,
|
|
members=[agent_id],
|
|
)
|
|
db_session.add(group)
|
|
await db_session.flush()
|
|
session = SessionTable(
|
|
id=uuid4(),
|
|
group_id=group.id,
|
|
status=SessionStatus.ACTIVE,
|
|
)
|
|
db_session.add(session)
|
|
await db_session.flush()
|
|
link = SessionTaskTable(
|
|
session_id=session.id,
|
|
task_id=task_id,
|
|
is_primary=is_primary,
|
|
relationship_type="primary",
|
|
added_by=agent_id,
|
|
)
|
|
db_session.add(link)
|
|
await db_session.flush()
|
|
return session
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_activate_succeeds_when_session_linked(
|
|
task_setup: dict, db_session: AsyncSession
|
|
) -> None:
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup, status=TaskStatus.BACKLOG))
|
|
await _seed_session_for_task(
|
|
db_session, task.id, task_setup["agent_id"], is_primary=True
|
|
)
|
|
out = await svc.activate(task.id, agent_role="cell_pm")
|
|
assert out.status == TaskStatus.PENDING
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# _inherit_parent_session — primary case
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_inherit_parent_session_with_primary_creates_link(
|
|
task_setup: dict, db_session: AsyncSession
|
|
) -> None:
|
|
svc = task_setup["svc"]
|
|
parent = await svc.create(_req(task_setup))
|
|
session = await _seed_session_for_task(
|
|
db_session, parent.id, task_setup["agent_id"], is_primary=True
|
|
)
|
|
# Create the child — _inherit_parent_session is called during create
|
|
child = await svc.create(_req(task_setup, parent_task_id=parent.id))
|
|
# Verify a link was created for child
|
|
result = await db_session.execute(
|
|
select(SessionTaskTable).where(SessionTaskTable.task_id == child.id)
|
|
)
|
|
inherited = result.scalar_one_or_none()
|
|
assert inherited is not None
|
|
assert inherited.session_id == session.id
|
|
assert inherited.is_primary is False
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# _inject_proactive_context
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_inject_proactive_context_skips_when_claim_rolled_back(
|
|
task_setup: dict, monkeypatch: pytest.MonkeyPatch
|
|
) -> None:
|
|
"""When fresh re-read shows task gone or unassigned, skip without error."""
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
|
|
# Force the inner fresh-read to return a task whose assigned_to is None.
|
|
# The simplest path is to NOT reassign after create. The task fixture has
|
|
# assigned_to = None from create_request defaults.
|
|
assert task.assigned_to is None
|
|
|
|
@asynccontextmanager_async # Helper below
|
|
async def _factory() -> None:
|
|
return None
|
|
|
|
# Build a fake session_factory whose context returns the test session
|
|
db = task_setup["db"]
|
|
|
|
class _SessionFactory:
|
|
def __call__(self) -> _Ctx:
|
|
return _Ctx(db)
|
|
|
|
class _Ctx:
|
|
def __init__(self, session: Any) -> None:
|
|
self._session = session
|
|
|
|
async def __aenter__(self) -> Any:
|
|
return self._session
|
|
|
|
async def __aexit__(self, exc_type: Any, exc: Any, _tb: Any) -> None:
|
|
return None
|
|
|
|
factory_instance = _SessionFactory()
|
|
monkeypatch.setattr("roboco.db.base.get_session_factory", lambda: factory_instance)
|
|
# Now the fresh-read returns the task with assigned_to == None,
|
|
# mismatching agent_id passed in
|
|
await svc._inject_proactive_context(task, task_setup["agent_id"])
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_inject_proactive_context_swallows_errors(
|
|
task_setup: dict, monkeypatch: pytest.MonkeyPatch
|
|
) -> None:
|
|
"""Errors in proactive service should be logged + swallowed."""
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
|
|
# Make get_session_factory raise to force the except branch
|
|
def _fail_factory() -> Any:
|
|
raise RuntimeError("factory broken")
|
|
|
|
monkeypatch.setattr("roboco.db.base.get_session_factory", _fail_factory)
|
|
# Should not raise
|
|
await svc._inject_proactive_context(task, task_setup["agent_id"])
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_inject_proactive_context_writes_when_context_nonempty(
|
|
task_setup: dict, db_session: AsyncSession, monkeypatch: pytest.MonkeyPatch
|
|
) -> None:
|
|
"""Full happy path — fresh re-read sees the assignment, proactive returns
|
|
non-empty context, write is performed.
|
|
"""
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.assigned_to = task_setup["agent_id"]
|
|
await db_session.flush()
|
|
|
|
class _Ctx:
|
|
def __init__(self, session: Any) -> None:
|
|
self._session = session
|
|
|
|
async def __aenter__(self) -> Any:
|
|
return self._session
|
|
|
|
async def __aexit__(self, exc_type: Any, exc: Any, _tb: Any) -> None:
|
|
return None
|
|
|
|
class _Factory:
|
|
def __init__(self, session: Any) -> None:
|
|
self._session = session
|
|
|
|
def __call__(self) -> _Ctx:
|
|
return _Ctx(self._session)
|
|
|
|
factory = _Factory(db_session)
|
|
monkeypatch.setattr("roboco.db.base.get_session_factory", lambda: factory)
|
|
|
|
fake_context = MagicMock()
|
|
fake_context.is_empty = MagicMock(return_value=False)
|
|
fake_context.to_dict = MagicMock(return_value={"k": "v"})
|
|
fake_context.similar_tasks = []
|
|
fake_context.relevant_learnings = []
|
|
fake_context.code_patterns = []
|
|
|
|
fake_proactive = MagicMock()
|
|
fake_proactive.on_task_claimed = AsyncMock(return_value=fake_context)
|
|
|
|
async def _get_proactive() -> Any:
|
|
return fake_proactive
|
|
|
|
monkeypatch.setattr(
|
|
"roboco.services.proactive.get_proactive_service", _get_proactive
|
|
)
|
|
# Patch session.commit so it doesn't really commit
|
|
original_commit = db_session.commit
|
|
|
|
async def _no_commit() -> None:
|
|
await db_session.flush()
|
|
|
|
monkeypatch.setattr(db_session, "commit", _no_commit)
|
|
try:
|
|
await svc._inject_proactive_context(task, task_setup["agent_id"])
|
|
finally:
|
|
monkeypatch.setattr(db_session, "commit", original_commit)
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# _create_work_session_if_needed
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_create_work_session_skips_for_qa(
|
|
task_setup: dict, db_session: AsyncSession
|
|
) -> None:
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.branch_name = "feature/backend/x"
|
|
await db_session.flush()
|
|
out = await svc._create_work_session_if_needed(task, task_setup["agent_id"], "qa")
|
|
assert out is None
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_create_work_session_skips_when_no_branch(
|
|
task_setup: dict, db_session: AsyncSession
|
|
) -> None:
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
# No branch
|
|
await db_session.flush()
|
|
out = await svc._create_work_session_if_needed(
|
|
task, task_setup["agent_id"], "developer"
|
|
)
|
|
assert out is None
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_create_work_session_creates_new(
|
|
task_setup: dict, db_session: AsyncSession
|
|
) -> None:
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.branch_name = "feature/backend/abc"
|
|
await db_session.flush()
|
|
out = await svc._create_work_session_if_needed(
|
|
task, task_setup["agent_id"], "developer"
|
|
)
|
|
assert out is not None
|
|
assert out.branch_name == "feature/backend/abc"
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_create_work_session_returns_existing_session(
|
|
task_setup: dict, db_session: AsyncSession
|
|
) -> None:
|
|
"""When a WorkSession already exists, returns None (no double-create)."""
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.branch_name = "feature/backend/abc"
|
|
await db_session.flush()
|
|
existing = WorkSessionTable(
|
|
id=uuid4(),
|
|
project_id=task_setup["project_id"],
|
|
task_id=task.id,
|
|
agent_id=task_setup["agent_id"],
|
|
branch_name="feature/backend/abc",
|
|
base_branch="main",
|
|
target_branch="main",
|
|
status=WorkSessionStatus.ACTIVE,
|
|
)
|
|
db_session.add(existing)
|
|
await db_session.flush()
|
|
out = await svc._create_work_session_if_needed(
|
|
task, task_setup["agent_id"], "developer"
|
|
)
|
|
assert out is None
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_create_work_session_uses_parent_branch(
|
|
task_setup: dict, db_session: AsyncSession
|
|
) -> None:
|
|
"""Subtask's work session targets parent branch, not project default."""
|
|
svc = task_setup["svc"]
|
|
parent = await svc.create(_req(task_setup))
|
|
parent.branch_name = "feature/backend/PARENT"
|
|
await db_session.flush()
|
|
child = await svc.create(_req(task_setup, parent_task_id=parent.id))
|
|
child.branch_name = "feature/backend/PARENT--CHILD"
|
|
await db_session.flush()
|
|
out = await svc._create_work_session_if_needed(
|
|
child, task_setup["agent_id"], "developer"
|
|
)
|
|
assert out is not None
|
|
assert out.target_branch == "feature/backend/PARENT"
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_create_work_session_no_project_returns_none(
|
|
task_setup: dict, db_session: AsyncSession, monkeypatch: pytest.MonkeyPatch
|
|
) -> None:
|
|
"""When project lookup yields None, returns None (logs warning)."""
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.branch_name = "feature/backend/x"
|
|
await db_session.flush()
|
|
|
|
# Patch session.execute to return scalar_one_or_none=None for ProjectTable
|
|
fake_result = MagicMock()
|
|
fake_result.scalar_one_or_none.return_value = None
|
|
|
|
real_execute = db_session.execute
|
|
|
|
async def _exec_stub(stmt: Any, *a: Any, **kw: Any) -> Any:
|
|
compiled = str(stmt)
|
|
if "FROM projects" in compiled:
|
|
return fake_result
|
|
return await real_execute(stmt, *a, **kw)
|
|
|
|
monkeypatch.setattr(db_session, "execute", _exec_stub)
|
|
out = await svc._create_work_session_if_needed(
|
|
task, task_setup["agent_id"], "developer"
|
|
)
|
|
assert out is None
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_create_work_session_delegates_to_service_create(
|
|
task_setup: dict, db_session: AsyncSession, monkeypatch: pytest.MonkeyPatch
|
|
) -> None:
|
|
"""The claim path must create the WorkSession via ``WorkSessionService.create``
|
|
(single source of truth) rather than constructing a ``WorkSessionTable``
|
|
directly, so service-layer validation (existing-active check, supersede
|
|
invariant) is not bypassed."""
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.branch_name = "feature/backend/delegate"
|
|
await db_session.flush()
|
|
|
|
captured: dict[str, Any] = {}
|
|
original_create = WorkSessionService.create
|
|
|
|
async def _spy_create(_self: Any, data: WorkSessionCreate) -> Any:
|
|
# Record the WorkSessionCreate the claim path handed to the service,
|
|
# then run the real create so the row persists (the FK on
|
|
# tasks.work_session_id requires a real work_sessions row).
|
|
captured["data"] = data
|
|
return await original_create(_self, data)
|
|
|
|
monkeypatch.setattr(WorkSessionService, "create", _spy_create)
|
|
|
|
out = await svc._create_work_session_if_needed(
|
|
task, task_setup["agent_id"], "developer"
|
|
)
|
|
|
|
assert out is not None
|
|
assert "data" in captured
|
|
sent = captured["data"]
|
|
assert isinstance(sent, WorkSessionCreate)
|
|
assert sent.project_id == task_setup["project_id"]
|
|
assert sent.task_id == task.id
|
|
assert sent.agent_id == task_setup["agent_id"]
|
|
assert sent.branch_name == "feature/backend/delegate"
|
|
# Root task targets the project default branch.
|
|
assert sent.target_branch == sent.base_branch
|
|
# The claim path links the session back onto the task.
|
|
assert task.work_session_id == out.id
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# unclaim_for_reaper / unclaim_for_agent — work-session abandon paths
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_unclaim_for_reaper_abandons_work_session(
|
|
task_setup: dict,
|
|
db_session: AsyncSession,
|
|
monkeypatch: pytest.MonkeyPatch,
|
|
) -> None:
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.status = TaskStatus.CLAIMED
|
|
task.assigned_to = task_setup["agent_id"]
|
|
ws = WorkSessionTable(
|
|
id=uuid4(),
|
|
project_id=task_setup["project_id"],
|
|
task_id=task.id,
|
|
agent_id=task_setup["agent_id"],
|
|
branch_name="feature/backend/x",
|
|
base_branch="main",
|
|
target_branch="main",
|
|
status=WorkSessionStatus.ACTIVE,
|
|
)
|
|
db_session.add(ws)
|
|
await db_session.flush()
|
|
task.work_session_id = ws.id
|
|
await db_session.flush()
|
|
|
|
fake_ws_svc = MagicMock()
|
|
fake_ws_svc.abandon = AsyncMock()
|
|
|
|
monkeypatch.setattr(
|
|
"roboco.services.work_session.WorkSessionService",
|
|
lambda _s: fake_ws_svc,
|
|
)
|
|
await svc.unclaim_for_reaper(task.id)
|
|
fake_ws_svc.abandon.assert_awaited_once()
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_unclaim_for_agent_abandons_work_session(
|
|
task_setup: dict,
|
|
db_session: AsyncSession,
|
|
monkeypatch: pytest.MonkeyPatch,
|
|
) -> None:
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.status = TaskStatus.CLAIMED
|
|
task.assigned_to = task_setup["agent_id"]
|
|
ws = WorkSessionTable(
|
|
id=uuid4(),
|
|
project_id=task_setup["project_id"],
|
|
task_id=task.id,
|
|
agent_id=task_setup["agent_id"],
|
|
branch_name="feature/backend/x",
|
|
base_branch="main",
|
|
target_branch="main",
|
|
status=WorkSessionStatus.ACTIVE,
|
|
)
|
|
db_session.add(ws)
|
|
await db_session.flush()
|
|
task.work_session_id = ws.id
|
|
await db_session.flush()
|
|
|
|
fake_ws_svc = MagicMock()
|
|
fake_ws_svc.abandon = AsyncMock()
|
|
|
|
monkeypatch.setattr(
|
|
"roboco.services.work_session.WorkSessionService",
|
|
lambda _s: fake_ws_svc,
|
|
)
|
|
out = await svc.unclaim_for_agent(task.id, agent_id=task_setup["agent_id"])
|
|
assert out is not None
|
|
fake_ws_svc.abandon.assert_awaited_once()
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Lifecycle event indexing — soft_block / unblock / pause / resume
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_soft_block_spawns_blocker_index(
|
|
task_setup: dict,
|
|
db_session: AsyncSession,
|
|
monkeypatch: pytest.MonkeyPatch,
|
|
) -> None:
|
|
"""soft_block fires _index_blocker_background as a bg task."""
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.status = TaskStatus.IN_PROGRESS
|
|
task.assigned_to = task_setup["agent_id"]
|
|
await db_session.flush()
|
|
|
|
fake_optimal = MagicMock()
|
|
fake_optimal.index_error = AsyncMock()
|
|
|
|
async def _get_optimal() -> Any:
|
|
return fake_optimal
|
|
|
|
monkeypatch.setattr("roboco.services.optimal.get_optimal_service", _get_optimal)
|
|
out = await svc.soft_block(
|
|
task.id,
|
|
SoftBlockInfo(reason="r", blocker_type="ext", what_needed="w"),
|
|
)
|
|
assert out is not None
|
|
# Wait for background task by yielding control
|
|
# Allow background tasks to settle
|
|
await asyncio.sleep(0.05)
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_pause_spawns_lifecycle_index(
|
|
task_setup: dict,
|
|
db_session: AsyncSession,
|
|
monkeypatch: pytest.MonkeyPatch,
|
|
) -> None:
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.status = TaskStatus.IN_PROGRESS
|
|
await db_session.flush()
|
|
fake_optimal = MagicMock()
|
|
fake_optimal.index_journal_entry = AsyncMock()
|
|
|
|
async def _get_optimal() -> Any:
|
|
return fake_optimal
|
|
|
|
monkeypatch.setattr("roboco.services.optimal.get_optimal_service", _get_optimal)
|
|
out = await svc.pause(task.id)
|
|
assert out is not None
|
|
await asyncio.sleep(0.05)
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_resume_spawns_lifecycle_index(
|
|
task_setup: dict,
|
|
db_session: AsyncSession,
|
|
monkeypatch: pytest.MonkeyPatch,
|
|
) -> None:
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.status = TaskStatus.PAUSED
|
|
await db_session.flush()
|
|
fake_optimal = MagicMock()
|
|
fake_optimal.index_journal_entry = AsyncMock()
|
|
|
|
async def _get_optimal() -> Any:
|
|
return fake_optimal
|
|
|
|
monkeypatch.setattr("roboco.services.optimal.get_optimal_service", _get_optimal)
|
|
out = await svc.resume(task.id)
|
|
assert out is not None
|
|
await asyncio.sleep(0.05)
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_unblock_spawns_lifecycle_index(
|
|
task_setup: dict,
|
|
db_session: AsyncSession,
|
|
monkeypatch: pytest.MonkeyPatch,
|
|
) -> None:
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.status = TaskStatus.BLOCKED
|
|
await db_session.flush()
|
|
fake_optimal = MagicMock()
|
|
fake_optimal.index_journal_entry = AsyncMock()
|
|
|
|
async def _get_optimal() -> Any:
|
|
return fake_optimal
|
|
|
|
monkeypatch.setattr("roboco.services.optimal.get_optimal_service", _get_optimal)
|
|
out = await svc.unblock(task.id)
|
|
assert out is not None
|
|
await asyncio.sleep(0.05)
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# block: blocker reverse-link not duplicated
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_block_does_not_duplicate_reverse_link(
|
|
task_setup: dict, db_session: AsyncSession
|
|
) -> None:
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.status = TaskStatus.IN_PROGRESS
|
|
task.assigned_to = task_setup["agent_id"]
|
|
await db_session.flush()
|
|
blocker = await svc.create(_req(task_setup))
|
|
# Pre-set reverse link
|
|
blocker.blocker_ids = [task.id]
|
|
await db_session.flush()
|
|
blocked = await svc.block(task.id, blocker_task_id=blocker.id)
|
|
assert blocked is not None
|
|
assert blocker.blocker_ids.count(task.id) == 1
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# submit_for_qa happy path
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_submit_for_qa_clears_assignment_and_records_dev(
|
|
task_setup: dict, db_session: AsyncSession
|
|
) -> None:
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.status = TaskStatus.VERIFYING
|
|
task.assigned_to = task_setup["agent_id"]
|
|
task.claimed_by = task_setup["agent_id"]
|
|
await db_session.flush()
|
|
out = await svc.submit_for_qa(task.id, agent_role="developer")
|
|
assert out is not None
|
|
assert out.status == TaskStatus.AWAITING_QA
|
|
assert out.assigned_to is None
|
|
assert (out.orchestration_markers or {}).get("original_developer")
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# fail_qa — full path with original developer, including bg indexing
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_fail_qa_with_indexing_runs(
|
|
task_setup: dict,
|
|
db_session: AsyncSession,
|
|
monkeypatch: pytest.MonkeyPatch,
|
|
) -> None:
|
|
svc = task_setup["svc"]
|
|
dev_id = task_setup["agent_id"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.status = TaskStatus.AWAITING_QA
|
|
task.orchestration_markers = {"original_developer": str(dev_id)}
|
|
await db_session.flush()
|
|
fake_optimal = MagicMock()
|
|
fake_optimal.record_review = AsyncMock()
|
|
fake_optimal.index_error = AsyncMock()
|
|
|
|
async def _get_optimal() -> Any:
|
|
return fake_optimal
|
|
|
|
monkeypatch.setattr("roboco.services.optimal.get_optimal_service", _get_optimal)
|
|
failed = await svc.fail_qa(task.id, notes="needs work")
|
|
assert failed is not None
|
|
await asyncio.sleep(0.1)
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# pass_qa — full path with bg indexing
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_pass_qa_with_indexing_runs(
|
|
task_setup: dict,
|
|
db_session: AsyncSession,
|
|
monkeypatch: pytest.MonkeyPatch,
|
|
) -> None:
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.status = TaskStatus.AWAITING_QA
|
|
task.pr_number = 1
|
|
task.pr_url = "u"
|
|
await db_session.flush()
|
|
fake_optimal = MagicMock()
|
|
fake_optimal.record_review = AsyncMock()
|
|
|
|
async def _get_optimal() -> Any:
|
|
return fake_optimal
|
|
|
|
monkeypatch.setattr("roboco.services.optimal.get_optimal_service", _get_optimal)
|
|
passed = await svc.pass_qa(task.id, notes="all good", agent_role="qa")
|
|
assert passed is not None
|
|
await asyncio.sleep(0.1)
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# cancel — full cascade with branch deletion + work session abandon
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_cancel_with_branch_and_work_session(
|
|
task_setup: dict,
|
|
db_session: AsyncSession,
|
|
monkeypatch: pytest.MonkeyPatch,
|
|
) -> None:
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.branch_name = "feature/backend/x"
|
|
await db_session.flush()
|
|
ws = WorkSessionTable(
|
|
id=uuid4(),
|
|
project_id=task_setup["project_id"],
|
|
task_id=task.id,
|
|
agent_id=task_setup["agent_id"],
|
|
branch_name="feature/backend/x",
|
|
base_branch="main",
|
|
target_branch="main",
|
|
status=WorkSessionStatus.ACTIVE,
|
|
)
|
|
db_session.add(ws)
|
|
await db_session.flush()
|
|
task.work_session_id = ws.id
|
|
await db_session.flush()
|
|
|
|
fake_ws = MagicMock()
|
|
fake_ws.abandon = AsyncMock()
|
|
monkeypatch.setattr(
|
|
"roboco.services.work_session.get_work_session_service",
|
|
lambda _s: fake_ws,
|
|
)
|
|
fake_git = MagicMock()
|
|
fake_git.delete_task_branch = AsyncMock()
|
|
monkeypatch.setattr("roboco.services.git.get_git_service", lambda _s: fake_git)
|
|
out = await svc.cancel(task.id, agent_role="cell_pm")
|
|
assert out is not None
|
|
fake_ws.abandon.assert_awaited()
|
|
fake_git.delete_task_branch.assert_awaited()
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_cancel_descendants_cascades_for_authorized_pm(
|
|
task_setup: dict, db_session: AsyncSession
|
|
) -> None:
|
|
"""A `cell_pm` cancel cascades through descendants in any non-terminal state.
|
|
|
|
Predecessor test asserted CEO-only authority over
|
|
`awaiting_ceo_approval` cancels (legacy table behavior). The
|
|
canonical spec (`roboco.foundation.policy.lifecycle`) authorizes
|
|
cancel from every non-terminal source for {CELL_PM, MAIN_PM, CEO}
|
|
uniformly, so a PM cancel now sweeps the whole subtree — including
|
|
descendants parked in `awaiting_ceo_approval`.
|
|
"""
|
|
svc = task_setup["svc"]
|
|
parent = await svc.create(_req(task_setup))
|
|
child = await svc.create(_req(task_setup, parent_task_id=parent.id))
|
|
child.status = TaskStatus.AWAITING_CEO_APPROVAL
|
|
await db_session.flush()
|
|
out = await svc.cancel(parent.id, agent_role="cell_pm")
|
|
assert out is not None
|
|
refreshed_child = await svc.get(child.id)
|
|
assert refreshed_child is not None
|
|
# Child cascades to cancelled along with the parent.
|
|
assert refreshed_child.status == TaskStatus.CANCELLED
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_cancel_refuses_when_descendant_role_forbidden(
|
|
task_setup: dict, db_session: AsyncSession, monkeypatch: pytest.MonkeyPatch
|
|
) -> None:
|
|
"""#103: a non-terminal descendant the caller's role can't cancel refuses
|
|
the whole cancel — never silently skips the descendant and leaves an
|
|
orphaned subtree under a cancelled parent.
|
|
|
|
The current spec gates every cancel edge to {cell_pm, main_pm, ceo}
|
|
uniformly, so a PM cancel won't naturally hit a role-forbidden
|
|
descendant. Simulate the future-regression shape (a per-edge role gate
|
|
that re-excludes a state) by stubbing ``_validate_and_set_status`` to
|
|
raise ``TaskLifecycleError`` for the descendant only — the parent's
|
|
cancel stays valid. The broad ``except Exception`` swallow used to
|
|
skip the descendant and cancel the parent anyway (orphan); it must
|
|
now refuse.
|
|
"""
|
|
svc = task_setup["svc"]
|
|
parent = await svc.create(_req(task_setup))
|
|
child = await svc.create(_req(task_setup, parent_task_id=parent.id))
|
|
await db_session.flush()
|
|
|
|
real_validate = svc._validate_and_set_status
|
|
|
|
def stub_validate(task: Any, new_status: Any, agent_role: Any) -> Any:
|
|
if task.id == child.id:
|
|
raise TaskLifecycleError(
|
|
current_status=task.status.value,
|
|
target_status=new_status.value,
|
|
message="simulated per-edge role gate excludes this descendant",
|
|
)
|
|
return real_validate(task, new_status, agent_role)
|
|
|
|
monkeypatch.setattr(svc, "_validate_and_set_status", stub_validate)
|
|
|
|
with pytest.raises(TaskLifecycleError, match="orphaned subtree"):
|
|
await svc.cancel(parent.id, agent_role="cell_pm")
|
|
|
|
refreshed_parent = await svc.get(parent.id)
|
|
assert refreshed_parent is not None
|
|
assert refreshed_parent.status != TaskStatus.CANCELLED
|
|
refreshed_child = await svc.get(child.id)
|
|
assert refreshed_child is not None
|
|
assert refreshed_child.status != TaskStatus.CANCELLED
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Helper: simple async context manager
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
def asynccontextmanager_async(func: Any) -> Any:
|
|
"""Stub decorator — actual implementation lives in std lib."""
|
|
return contextlib.asynccontextmanager(func)
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# soft_block_task_for_agent notification path
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_soft_block_task_for_agent_full_flow(
|
|
task_setup: dict,
|
|
db_session: AsyncSession,
|
|
monkeypatch: pytest.MonkeyPatch,
|
|
) -> None:
|
|
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.assigned_to = task_setup["agent_id"]
|
|
task.status = TaskStatus.IN_PROGRESS
|
|
await db_session.flush()
|
|
agent_ctx = AgentContext(
|
|
agent_id=task_setup["agent_id"],
|
|
role=AgentRole.DEVELOPER,
|
|
team=Team.BACKEND,
|
|
slug="x",
|
|
)
|
|
fake_delivery = MagicMock()
|
|
fake_delivery.notify_pm_of_block = AsyncMock()
|
|
monkeypatch.setattr(
|
|
"roboco.services.notification_delivery.get_notification_delivery_service",
|
|
lambda _s: fake_delivery,
|
|
)
|
|
|
|
# Bypass the explicit commit() on session
|
|
async def _no_commit() -> None:
|
|
await db_session.flush()
|
|
|
|
monkeypatch.setattr(db_session, "commit", _no_commit)
|
|
|
|
req = SoftBlockInput(
|
|
blocker_type="external",
|
|
reason="r",
|
|
what_needed="w",
|
|
resolver_type_raw="agent",
|
|
)
|
|
out = await svc.soft_block_task_for_agent(task.id, agent_ctx, req)
|
|
assert out is not None
|
|
fake_delivery.notify_pm_of_block.assert_awaited_once()
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# docs_complete_for_task — notification path
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_docs_complete_for_task_invokes_notification(
|
|
task_setup: dict, db_session: AsyncSession, monkeypatch: pytest.MonkeyPatch
|
|
) -> None:
|
|
|
|
svc = task_setup["svc"]
|
|
doc = AgentTable(
|
|
id=uuid4(),
|
|
name="Doc",
|
|
slug=f"be-doc-{uuid4().hex[:8]}",
|
|
role=AgentRole.DOCUMENTER,
|
|
team=Team.BACKEND,
|
|
status=AgentStatus.ACTIVE,
|
|
model_config={},
|
|
system_prompt="d",
|
|
capabilities=[],
|
|
permissions={},
|
|
metrics={},
|
|
)
|
|
db_session.add(doc)
|
|
await db_session.flush()
|
|
task = await svc.create(_req(task_setup))
|
|
task.status = TaskStatus.AWAITING_DOCUMENTATION
|
|
task.assigned_to = doc.id
|
|
task.pr_number = 1
|
|
task.pr_url = "u"
|
|
task.pr_created = True
|
|
await db_session.flush()
|
|
agent_ctx = AgentContext(
|
|
agent_id=cast("uuid.UUID", doc.id),
|
|
role=AgentRole.DOCUMENTER,
|
|
team=Team.BACKEND,
|
|
slug=doc.slug,
|
|
)
|
|
fake_delivery = MagicMock()
|
|
fake_delivery.notify_pm_of_docs_complete = AsyncMock()
|
|
monkeypatch.setattr(
|
|
"roboco.services.notification_delivery.get_notification_delivery_service",
|
|
lambda _s: fake_delivery,
|
|
)
|
|
|
|
async def _no_commit() -> None:
|
|
await db_session.flush()
|
|
|
|
monkeypatch.setattr(db_session, "commit", _no_commit)
|
|
out = await svc.docs_complete_for_task(
|
|
task.id,
|
|
agent_ctx,
|
|
"Substantial notes about what was documented and where in detail.",
|
|
)
|
|
assert out is not None
|
|
fake_delivery.notify_pm_of_docs_complete.assert_awaited_once()
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# escalate_to_ceo_for_agent — notification path
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_escalate_to_ceo_for_agent_invokes_notification(
|
|
task_setup: dict, db_session: AsyncSession, monkeypatch: pytest.MonkeyPatch
|
|
) -> None:
|
|
|
|
svc = task_setup["svc"]
|
|
pm = AgentTable(
|
|
id=uuid4(),
|
|
name="PM",
|
|
slug=f"main-pm-{uuid4().hex[:8]}",
|
|
role=AgentRole.MAIN_PM,
|
|
team=Team.MAIN_PM,
|
|
status=AgentStatus.ACTIVE,
|
|
model_config={},
|
|
system_prompt="pm",
|
|
capabilities=[],
|
|
permissions={},
|
|
metrics={},
|
|
)
|
|
db_session.add(pm)
|
|
await db_session.flush()
|
|
task = await svc.create(_req(task_setup))
|
|
task.status = TaskStatus.AWAITING_PM_REVIEW
|
|
task.pr_number = 1
|
|
task.pr_url = "u"
|
|
task.pr_created = True
|
|
task.docs_complete = True
|
|
await db_session.flush()
|
|
agent_ctx = AgentContext(
|
|
agent_id=cast("uuid.UUID", pm.id),
|
|
role=AgentRole.MAIN_PM,
|
|
team=Team.MAIN_PM,
|
|
slug=pm.slug,
|
|
)
|
|
|
|
class _P:
|
|
def can_perform_task_action(self, *a: Any, **kw: Any) -> bool:
|
|
del a, kw
|
|
return True
|
|
|
|
fake_delivery = MagicMock()
|
|
fake_delivery.notify_ceo_of_escalation = AsyncMock()
|
|
monkeypatch.setattr(
|
|
"roboco.services.notification_delivery.get_notification_delivery_service",
|
|
lambda _s: fake_delivery,
|
|
)
|
|
|
|
async def _no_commit() -> None:
|
|
await db_session.flush()
|
|
|
|
monkeypatch.setattr(db_session, "commit", _no_commit)
|
|
out = await svc.escalate_to_ceo_for_agent(
|
|
task.id,
|
|
agent_ctx,
|
|
_P(),
|
|
"Substantial reasons for CEO review: scope, risk, breaking change",
|
|
)
|
|
assert out is not None
|
|
fake_delivery.notify_ceo_of_escalation.assert_awaited_once()
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# claim_task_for_agent commits
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_claim_task_for_agent_commits_and_returns(
|
|
task_setup: dict, db_session: AsyncSession, monkeypatch: pytest.MonkeyPatch
|
|
) -> None:
|
|
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.branch_name = "feature/backend/x"
|
|
await db_session.flush()
|
|
agent_ctx = AgentContext(
|
|
agent_id=task_setup["agent_id"],
|
|
role=AgentRole.DEVELOPER,
|
|
team=Team.BACKEND,
|
|
slug="x",
|
|
)
|
|
|
|
class _P:
|
|
def can_perform_task_action(self, *a: Any, **kw: Any) -> bool:
|
|
del a, kw
|
|
return True
|
|
|
|
async def _no_commit() -> None:
|
|
await db_session.flush()
|
|
|
|
monkeypatch.setattr(db_session, "commit", _no_commit)
|
|
out = await svc.claim_task_for_agent(task.id, agent_ctx, _P(), None)
|
|
assert out.id == task.id
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# complete_task_for_agent commits
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_complete_task_for_agent_commits(
|
|
task_setup: dict, db_session: AsyncSession, monkeypatch: pytest.MonkeyPatch
|
|
) -> None:
|
|
|
|
svc = task_setup["svc"]
|
|
pm = AgentTable(
|
|
id=uuid4(),
|
|
name="PM",
|
|
slug=f"be-pm-{uuid4().hex[:8]}",
|
|
role=AgentRole.CELL_PM,
|
|
team=Team.BACKEND,
|
|
status=AgentStatus.ACTIVE,
|
|
model_config={},
|
|
system_prompt="pm",
|
|
capabilities=[],
|
|
permissions={},
|
|
metrics={},
|
|
)
|
|
db_session.add(pm)
|
|
await db_session.flush()
|
|
task = await svc.create(_req(task_setup))
|
|
task.status = TaskStatus.IN_PROGRESS
|
|
task.assigned_to = pm.id
|
|
await db_session.flush()
|
|
agent_ctx = AgentContext(
|
|
agent_id=cast("uuid.UUID", pm.id),
|
|
role=AgentRole.CELL_PM,
|
|
team=Team.BACKEND,
|
|
slug=pm.slug,
|
|
)
|
|
|
|
class _P:
|
|
def can_perform_task_action(self, *a: Any, **kw: Any) -> bool:
|
|
del a, kw
|
|
return True
|
|
|
|
async def _no_commit() -> None:
|
|
await db_session.flush()
|
|
|
|
monkeypatch.setattr(db_session, "commit", _no_commit)
|
|
out = await svc.complete_task_for_agent(task.id, agent_ctx, _P())
|
|
assert out.status == TaskStatus.COMPLETED
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# substitute_task_for_agent — runs full update + commit
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_substitute_task_for_agent_runs_update(
|
|
task_setup: dict, db_session: AsyncSession, monkeypatch: pytest.MonkeyPatch
|
|
) -> None:
|
|
|
|
svc = task_setup["svc"]
|
|
task = await svc.create(_req(task_setup))
|
|
task.assigned_to = task_setup["agent_id"]
|
|
await db_session.flush()
|
|
agent_ctx = AgentContext(
|
|
agent_id=task_setup["agent_id"],
|
|
role=AgentRole.DEVELOPER,
|
|
team=Team.BACKEND,
|
|
slug="x",
|
|
)
|
|
|
|
monkeypatch.setattr("roboco.agents_config.get_pm_for_agent", lambda _s: None)
|
|
monkeypatch.setattr("roboco.agents_config.get_pm_for_team", lambda _t: None)
|
|
|
|
async def _no_commit() -> None:
|
|
await db_session.flush()
|
|
|
|
monkeypatch.setattr(db_session, "commit", _no_commit)
|
|
out = await svc.substitute_task_for_agent(
|
|
task.id,
|
|
agent_ctx,
|
|
SubstituteReason.MAX_RETRIES.value,
|
|
"needs different agent",
|
|
)
|
|
assert out is not None
|
|
# A transient substitute-out must NOT orphan the task: it stays with the
|
|
# same agent (re-dispatchable, resumes from the briefing) — never
|
|
# pending+unassigned.
|
|
assert out.status == TaskStatus.PENDING
|
|
assert out.assigned_to == task_setup["agent_id"]
|