Renn FandRenzo F 1f769f6315 [sandbox-ext] fix: drop dynamic verify SQL (bandit B608) — static query + Python membership ...

CI bandit -ll flagged B608 at sandbox.py:264 (f-string ANY(ARRAY[...])
with interpolated feature names). Root-cause fix: verify_step now runs a
static 'SELECT extname FROM pg_extension' and verify_ok checks set
membership against the installed extnames — no interpolation, no string-
built-SQL surface, and a more correct check (membership vs count). The
enable_step CREATE EXTENSION stays (identifiers can't be parameterized;
allowlist-validated upstream, the containment). Tests updated from the
count-based exec_out to the extname-list exec_out.

2026-07-13 20:05:45 +02:00

..

__init__.py

…

test_agent_image_registry.py

[21e195cd] Panel-wide UI standardization and usability pass (#194)

2026-06-17 06:36:28 +02:00

test_agent_write_permissions.py

Token optimization levers — claim-scoped briefing, payload caps, role-scoped optimal, notification-spawn cooldown (#292)

2026-07-02 05:46:01 +02:00

test_append_agent_auth_env.py

feat(video): switch 0.19.0 renderer Remotion → HyperFrames (HTML-native, Apache-2.0) (#314)

2026-07-07 10:09:23 +02:00

test_auditor_spawn_trigger.py

Leak fixes, gate green again, uv/CI hardening, e2e lifecycle smoke harness (#294)

2026-07-02 18:28:07 +02:00

test_auto_block_task.py

fix(gateway): working exits for wedged agents + declare_coverage roll-up unblock (#341)

2026-07-08 21:40:22 +02:00

test_blocker_and_claimed_dispatch.py

feat(lifecycle): revision findings ledger — structured failure feedback, persisted and delivered down the chain (#486)

2026-07-11 22:54:42 +02:00

test_board_dispatch.py

feat(prompter): board-review → redraft loop for MegaTask batches (#411)

2026-07-10 09:38:10 +02:00

test_briefing_sandbox_line.py

feat(sandbox): on-demand provisioning via request_sandbox verb (#338)

2026-07-08 16:40:02 +02:00

test_briefing_tool_load_block.py

[beb8cae1] Type-gate tests/ under mypy — fix all errors and flip quality gate (#156) (#157)

2026-06-14 13:43:46 +02:00

test_budget_sweep.py

Feature: prompter gold upgrade (#84)

2026-06-09 17:08:34 +02:00

test_cc_lockdown.py

fix(agents): block subagent spawning at the Claude Code level (disallow Task) (#377)

2026-07-10 02:37:12 +02:00

test_check_health_graceful_exit.py

[beb8cae1] Type-gate tests/ under mypy — fix all errors and flip quality gate (#156) (#157)

2026-06-14 13:43:46 +02:00

test_ci_watch_loop.py

Chore: 141 Gaps fill-in (#283)

2026-06-29 05:38:21 +02:00

test_code_task_routing.py

…

test_dep_update_loop.py

Chore: 141 Gaps fill-in (#283)

2026-06-29 05:38:21 +02:00

test_description_body.py

feat(gateway): carry intake technical depth down the chain + widen review coherence scope (#491)

2026-07-13 08:06:57 +02:00

test_dispatch_qa_no_preclaim.py

Hotfixes (#293)

2026-07-02 15:36:49 +02:00

test_dispatcher_heartbeat.py

Token optimization levers — claim-scoped briefing, payload caps, role-scoped optimal, notification-spawn cooldown (#292)

2026-07-02 05:46:01 +02:00

test_expected_stop_breadcrumb.py

fix(api): default event loop to asyncio + cancellation-safe commit — kills the CI segfault (#340)

2026-07-08 16:01:01 +02:00

test_external_pr_classify.py

feat(grok): pluggable agent providers + Grok on the official grok CLI (#218)

2026-06-19 09:15:01 +02:00

test_feature_spotlight_dispatch.py

feat(x-engine): smart spotlight cadence — daily when there's news, quiet when there isn't (#374)

2026-07-09 20:59:53 +02:00

test_feature_spotlight_loop_dormant.py

feat(marketing): HoM feature-spotlight X drafts + brand-voice charter (v0.18.0 B)

2026-07-04 07:34:40 +02:00

test_gate_env.py

v0.17.0 — Wave 3: sandbox DB, DB isolation, mobile UI, cloud auth, X account, roadmap engine (#303)

2026-07-03 19:24:00 +02:00

test_gateway_health.py

fix(api): default event loop to asyncio + cancellation-safe commit — kills the CI segfault (#340)

2026-07-08 16:01:01 +02:00

test_grok_cost_budget.py

fix(api): default event loop to asyncio + cancellation-safe commit — kills the CI segfault (#340)

2026-07-08 16:01:01 +02:00

test_grok_rate_limit.py

Chore: 141 Gaps fill-in (#283)

2026-06-29 05:38:21 +02:00

test_grok_usage_finalize.py

feat(video): switch 0.19.0 renderer Remotion → HyperFrames (HTML-native, Apache-2.0) (#314)

2026-07-07 10:09:23 +02:00

test_heal_stale_agent_tokens.py

feat(video): switch 0.19.0 renderer Remotion → HyperFrames (HTML-native, Apache-2.0) (#314)

2026-07-07 10:09:23 +02:00

test_heartbeat_reaper_tunable.py

…

test_idle_vs_respawn.py

feat: in-path PR-review gate — per-cell + main reviewers (#229)

2026-06-20 09:27:29 +02:00

test_image_prune_sweep.py

Feat/v0.13.0 (#270)

2026-06-26 01:43:08 +02:00

test_intake_spawn.py

[90c9474c] Auditor revival: scheduled audit trigger and reactive alert producers (#499)

2026-07-13 15:41:00 +02:00

test_interactive_grok_spawn.py

Chore: 141 Gaps fill-in (#283)

2026-06-29 05:38:21 +02:00

test_mcp_cli_arg_uuid_auth.py

fix: prod triage 2026-07-08 — MCP auth residue, gateway envelopes, verb-loop cap, A2A interjection, manual spawn UX (#334)

2026-07-08 10:41:02 +02:00

test_mcp_playwright_gating.py

[1197c975] Re-add Playwright chromium to FE/UX QA images and add browser-verification prompt guidance (#406)

2026-07-11 07:39:53 +02:00

test_no_spawn_human_roles.py

Chore/all/logical gaps sweep (#286)

2026-06-30 08:08:35 +02:00

test_notification_spawn_cooldown.py

Token optimization levers — claim-scoped briefing, payload caps, role-scoped optimal, notification-spawn cooldown (#292)

2026-07-02 05:46:01 +02:00

test_orchestrator_coordination_task.py

MegaTask (#248)

2026-06-24 01:15:57 +02:00

test_orchestrator_liveness.py

feat(video): switch 0.19.0 renderer Remotion → HyperFrames (HTML-native, Apache-2.0) (#314)

2026-07-07 10:09:23 +02:00

test_orchestrator_manifest.py

Hotfixes (#293)

2026-07-02 15:36:49 +02:00

test_orchestrator_shutdown_drain.py

feat(vault): Obsidian vault V2 — janitor, archival, weekly report, KB ingest, Bases + sync runbook (#482)

2026-07-11 15:51:19 +02:00

test_orchestrator_stuck_tasks.py

feat(video): switch 0.19.0 renderer Remotion → HyperFrames (HTML-native, Apache-2.0) (#314)

2026-07-07 10:09:23 +02:00

test_orchestrator_write_hooks.py

v0.15.0: Metrics granularity — per-member / per-task / org + CEO scorecards (#289)

2026-07-01 05:18:45 +02:00

test_orphan_spawn_session_sweep.py

feat(video): switch 0.19.0 renderer Remotion → HyperFrames (HTML-native, Apache-2.0) (#314)

2026-07-07 10:09:23 +02:00

test_parent_branch_race.py

…

test_parked_spawn_shortcut.py

Chore: 141 Gaps fill-in (#283)

2026-06-29 05:38:21 +02:00

test_per_dev_lane_queue.py

feat(lifecycle): revision findings ledger — structured failure feedback, persisted and delivered down the chain (#486)

2026-07-11 22:54:42 +02:00

test_pm_closure_auto_resume.py

Chore: 141 Gaps fill-in (#283)

2026-06-29 05:38:21 +02:00

test_pm_dispatch_claim_prefilter.py

fix(ci): fleet-branch push triggers + dispatcher claim prefilter (#463)

2026-07-11 09:21:15 +02:00

test_pm_respawn_reset.py

Persist the PM-respawn counter across orchestrator restarts (#275)

2026-06-26 03:36:42 +02:00

test_pr_gate_auto_submit.py

fix(runtime): auto-submit is unconditional; refusals brief the fallback PM

2026-07-08 22:16:50 +02:00

test_provider_overload_break.py

feat(video): switch 0.19.0 renderer Remotion → HyperFrames (HTML-native, Apache-2.0) (#314)

2026-07-07 10:09:23 +02:00

test_provider_routing.py

feat(grok): pluggable agent providers + Grok on the official grok CLI (#218)

2026-06-19 09:15:01 +02:00

test_rate_limit_probe.py

Feat/provider overload break (#242)

2026-06-22 03:49:45 +02:00

test_rate_limit_sweep.py

Chore: 141 Gaps fill-in (#283)

2026-06-29 05:38:21 +02:00

test_readiness_dependency_gate.py

Fix: dependency spawn gate and cell ownership (#73)

2026-06-06 22:10:48 +02:00

test_readiness_role_status_match.py

fix(orchestrator): spawn the owning PM for a gate-failed assembled PR

2026-06-21 00:04:24 +02:00

test_readopt_running_agents.py

Chore/all/logical gaps sweep (#286)

2026-06-30 08:08:35 +02:00

test_reaper_subprocess_timeout.py

Chore: 141 Gaps fill-in (#283)

2026-06-29 05:38:21 +02:00

test_release_manager_loop_dormant.py

Feat/v0.13.0 (#270)

2026-06-26 01:43:08 +02:00

test_remove_container_slug_guard.py

Chore: 141 Gaps fill-in (#283)

2026-06-29 05:38:21 +02:00

test_resolve_dev_owner.py

Chore: reduce analytics complexity (#100)

2026-06-11 04:36:17 +02:00

test_resolve_wait_repark.py

Chore/all/logical gaps sweep (#286)

2026-06-30 08:08:35 +02:00

test_respawn_gate_cooldown.py

feat(video): switch 0.19.0 renderer Remotion → HyperFrames (HTML-native, Apache-2.0) (#314)

2026-07-07 10:09:23 +02:00

test_respawn_gate_coverage.py

Token optimization levers — claim-scoped briefing, payload caps, role-scoped optimal, notification-spawn cooldown (#292)

2026-07-02 05:46:01 +02:00

test_respawn_gate_oscillation.py

Hotfixes (#293)

2026-07-02 15:36:49 +02:00

test_respawn_persistence.py

feat(video): switch 0.19.0 renderer Remotion → HyperFrames (HTML-native, Apache-2.0) (#314)

2026-07-07 10:09:23 +02:00

test_revision_coordination_dispatch.py

feat(lifecycle): revision findings ledger — structured failure feedback, persisted and delivered down the chain (#486)

2026-07-11 22:54:42 +02:00

test_revision_findings_prompt.py

feat(lifecycle): revision findings ledger — structured failure feedback, persisted and delivered down the chain (#486)

2026-07-11 22:54:42 +02:00

test_roadmap_dispatch.py

v0.17.0 — Wave 3: sandbox DB, DB isolation, mobile UI, cloud auth, X account, roadmap engine (#303)

2026-07-03 19:24:00 +02:00

test_roadmap_engine_loop_dormant.py

v0.17.0 — Wave 3: sandbox DB, DB isolation, mobile UI, cloud auth, X account, roadmap engine (#303)

2026-07-03 19:24:00 +02:00

test_role_effort.py

v0.16.0: fastapi-guard HTTP security layer — calibrated + scanner honeytrap (#290)

2026-07-01 23:54:48 +02:00

test_routing_target_fallback.py

Chore: reduce analytics complexity (#100)

2026-06-11 04:36:17 +02:00

test_sandbox_env.py

feat(sandbox): on-demand provisioning via request_sandbox verb (#338)

2026-07-08 16:40:02 +02:00

test_sandbox_provision_spawn.py

[sandbox-ext] Phase 3: parameter surface — schema + project field + verb override + cache-by-features

2026-07-13 20:05:45 +02:00

test_sandbox_provisioner.py

[sandbox-ext] fix: drop dynamic verify SQL (bandit B608) — static query + Python membership

2026-07-13 20:05:45 +02:00

test_sandbox_teardown_wiring.py

feat(sandbox): on-demand provisioning via request_sandbox verb (#338)

2026-07-08 16:40:02 +02:00

test_scheduled_audit_trigger.py

[90c9474c] Auditor revival: scheduled audit trigger and reactive alert producers (#499)

2026-07-13 15:41:00 +02:00

test_secretary_spawn_shutdown.py

fix(api): default event loop to asyncio + cancellation-safe commit — kills the CI segfault (#340)

2026-07-08 16:01:01 +02:00

test_secretary_spawn.py

feat(video): switch 0.19.0 renderer Remotion → HyperFrames (HTML-native, Apache-2.0) (#314)

2026-07-07 10:09:23 +02:00

test_self_heal_ceo_gate.py

Chore: 141 Gaps fill-in (#283)

2026-06-29 05:38:21 +02:00

test_self_heal_dispatch.py

Chore: 141 Gaps fill-in (#283)

2026-06-29 05:38:21 +02:00

test_self_heal_loop_dormant.py

feat(self-heal): wire the dormant orchestrator loop

2026-06-17 21:03:27 +02:00

test_sequence_ordered_merge.py

feat(tasks): sequence is the bar — strict sibling ordering at the claim chokepoint (#452)

2026-07-10 22:55:00 +02:00

test_spawn_agent_path_segment.py

Chore: 141 Gaps fill-in (#283)

2026-06-29 05:38:21 +02:00

test_spawn_attribution.py

Leak fixes, gate green again, uv/CI hardening, e2e lifecycle smoke harness (#294)

2026-07-02 18:28:07 +02:00

test_spawn_cwd_workspace.py

…

test_spawn_cwd_worktree.py

Chore: Close gaps (#285)

2026-06-29 11:32:34 +02:00

test_spawn_manifest.py

fix(runtime): fleet-wide subagent ban — no role fans out, not one (#372)

2026-07-09 17:14:13 +02:00

test_spawn_preflight.py

v0.16.0: fastapi-guard HTTP security layer — calibrated + scanner honeytrap (#290)

2026-07-01 23:54:48 +02:00

test_spawn_session_attribution.py

Chore/all/logical gaps sweep (#286)

2026-06-30 08:08:35 +02:00

test_spawn_strict_mcp.py

fix(release): close the 0.19.0 scan findings — sandbox mongo tag, flow-verb timeout walls, video hardening (#329)

2026-07-08 03:26:12 +02:00

test_spawn_worktree_ensure.py

Chore/all/logical gaps sweep (#286)

2026-06-30 08:08:35 +02:00

test_stale_claim_reaper.py

fix(api): default event loop to asyncio + cancellation-safe commit — kills the CI segfault (#340)

2026-07-08 16:01:01 +02:00

test_strategy_engine_loop.py

Chore/all/logical gaps sweep (#286)

2026-06-30 08:08:35 +02:00

test_streaming.py

[beb8cae1] Type-gate tests/ under mypy — fix all errors and flip quality gate (#156) (#157)

2026-06-14 13:43:46 +02:00

test_system_api_headers.py

feat(video): switch 0.19.0 renderer Remotion → HyperFrames (HTML-native, Apache-2.0) (#314)

2026-07-07 10:09:23 +02:00

test_token_sweep_cost.py

feat(video): switch 0.19.0 renderer Remotion → HyperFrames (HTML-native, Apache-2.0) (#314)

2026-07-07 10:09:23 +02:00

test_transcript_retention.py

fix(retention): match the encoded workspaces root at a path boundary (#227)

2026-06-19 20:57:02 +02:00

test_vault_curation_dispatch.py

feat(vault): Obsidian vault V1 — projection core, Auditor narrative, input loop (#458)

2026-07-11 03:17:59 +02:00

test_vault_intake_loop_dormant.py

feat(vault): Obsidian vault V1 — projection core, Auditor narrative, input loop (#458)

2026-07-11 03:17:59 +02:00

test_vault_janitor_loop_dormant.py

feat(vault): Obsidian vault V2 — janitor, archival, weekly report, KB ingest, Bases + sync runbook (#482)

2026-07-11 15:51:19 +02:00

test_vault_kb_loop_dormant.py

feat(vault): Obsidian vault V2 — janitor, archival, weekly report, KB ingest, Bases + sync runbook (#482)

2026-07-11 15:51:19 +02:00

test_video_ceo_gate.py

feat(video): 0.19.0 video engine (Remotion) + preview auth + render persistence (#307)

2026-07-05 13:37:17 +02:00

test_video_render_loop.py

[e4ed92d6] Video pipeline per-project requests, re-render action, composition preview (#403)

2026-07-11 07:39:17 +02:00

test_x_dispatch_skip.py

v0.17.0 — Wave 3: sandbox DB, DB isolation, mobile UI, cloud auth, X account, roadmap engine (#303)

2026-07-03 19:24:00 +02:00

test_x_engine_loop_dormant.py

v0.17.0 — Wave 3: sandbox DB, DB isolation, mobile UI, cloud auth, X account, roadmap engine (#303)

2026-07-03 19:24:00 +02:00