@jaguilar87/gaia 5.0.0-rc.2 → 5.0.0-rc.3

package/.claude-plugin/marketplace.json

@@ -8,7 +8,7 @@
     {
       "name": "gaia-ops",
       "description": "Full DevOps orchestration for Claude Code. Eight specialized agents handle the complete development lifecycle — analysis, planning, execution, and deployment. Gaia-Ops scans your codebase to understand it and injects the right context into each sub-agent. Every command is classified by risk: read-only runs freely, state changes pause for your approval, and irreversible operations are permanently blocked.",
-      "version": "5.0.0-rc.2",
+      "version": "5.0.0-rc.3",
       "category": "devops",
       "author": {
         "name": "jaguilar87",
@@ -20,7 +20,7 @@
     {
       "name": "gaia-security",
       "description": "Keeps you in the loop only when it matters. Gaia Security analyzes every command and classifies it into risk tiers: read-only queries run freely, simulations and validations pass through, and state-changing operations (create, delete, apply, push) pause for your explicit approval before executing. Irreversible commands like dropping databases or deleting cloud infrastructure are permanently blocked.",
-      "version": "5.0.0-rc.2",
+      "version": "5.0.0-rc.3",
       "category": "security",
       "author": {
         "name": "jaguilar87",

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "gaia-ops",
-  "version": "5.0.0-rc.2",
+  "version": "5.0.0-rc.3",
   "description": "Security-first orchestrator with specialized agents, hooks, and governance for AI coding",
   "author": {
     "name": "jaguilar87",

package/CHANGELOG.md

@@ -7,6 +7,44 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [5.0.0-rc.3] - 2026-04-26
+
+### Release Candidate 3: Python 3.9 Compatibility Fix
+
+Hotfix for rc.2. The previous release shipped successfully to npm under
+the `@rc` dist-tag but failed its post-publish sandbox harness gate
+because `bin/cli/approvals.py` used PEP 604 union syntax (`X | None`)
+which requires Python 3.10+ at module-import time. The publish.yml
+runner pins Python 3.9, and the `ci.yml` test matrix also includes 3.9.
+The plugin loader caught the resulting `ImportError` and emitted a
+`Warning:` line that leaked into stdout, breaking JSON parsing for
+several `gaia` subcommands on 3.9-only environments.
+
+#### Fixed
+- **Python 3.9 compatibility** — added `from __future__ import annotations`
+  to 7 files that used PEP 604 union syntax without it. With deferred
+  annotation evaluation, the type hints become string literals and no
+  longer execute the `|` operator at definition time. A repo-wide audit
+  of 21 PEP-604 files confirmed 14 were already safe (had `__future__`)
+  and 7 were the actual 3.9 breakers; all 7 are now fixed:
+  - `bin/cli/approvals.py` (the publish.yml-failing one)
+  - `bin/cli/plans.py`
+  - `bin/cli/context.py`
+  - `tests/cli/test_gaia_context.py`
+  - `tests/cli/test_gaia_plans.py`
+  - `tools/scan/tests/conftest.py`
+  - `tools/agentic-loop/record-iteration.py`
+
+The audit also confirmed no PEP 634 `match` statements, no `TypeAlias`,
+no runtime PEP 604 in `isinstance()`, and no runtime parameterized
+stdlib generics, so the `__future__` route is sufficient — no actual
+type-hint rewrites required.
+
+5.0.0-rc.2 is superseded by this release. Users on Python 3.10+ were
+unaffected by the bug; users on Python 3.9 should upgrade to rc.3.
+Failing run for reference:
+https://github.com/metraton/gaia/actions/runs/24951053090
+
 ## [5.0.0-rc.2] - 2026-04-26
 
 ### Release Candidate 2: Converger Identity, Session Liveness, Install-Gate Hardening

package/bin/cli/approvals.py

@@ -15,6 +15,8 @@ Subcommands:
 All subcommands exit 0 on success, 1 on error.
 """
 
+from __future__ import annotations
+
 import argparse
 import json
 import os

package/bin/cli/context.py

@@ -6,6 +6,8 @@ Subcommands:
   gaia context scan [--dry-run] [--json]            Run project scanner
 """
 
+from __future__ import annotations
+
 import json
 import subprocess
 import sys

package/bin/cli/plans.py

@@ -9,6 +9,8 @@ Subcommands:
                                         (accepts name with or without prefix)
 """
 
+from __future__ import annotations
+
 import json
 import sys
 from pathlib import Path

package/dist/gaia-ops/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "gaia-ops",
-  "version": "5.0.0-rc.2",
+  "version": "5.0.0-rc.3",
   "description": "Full DevOps orchestration for Claude Code. Eight specialized agents handle the complete development lifecycle \u2014 analysis, planning, execution, and deployment. Gaia-Ops scans your codebase to understand it and injects the right context into each sub-agent. Every command is classified by risk: read-only runs freely, state changes pause for your approval, and irreversible operations are permanently blocked.",
   "author": {
     "name": "jaguilar87",

package/dist/gaia-ops/tools/agentic-loop/record-iteration.py

@@ -25,6 +25,8 @@ then renamed over the original.  Either the full write lands or the original
 is untouched.
 """
 
+from __future__ import annotations
+
 import argparse
 import json
 import os

package/dist/gaia-ops/tools/scan/tests/conftest.py

@@ -5,6 +5,8 @@ Provides mock project trees, temporary directories, and common
 test data for scanner unit tests.
 """
 
+from __future__ import annotations
+
 import json
 import textwrap
 from pathlib import Path

package/dist/gaia-security/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "gaia-security",
-  "version": "5.0.0-rc.2",
+  "version": "5.0.0-rc.3",
   "description": "Keeps you in the loop only when it matters. Gaia Security analyzes every command and classifies it into risk tiers: read-only queries run freely, simulations and validations pass through, and state-changing operations (create, delete, apply, push) pause for your explicit approval before executing. Irreversible commands like dropping databases or deleting cloud infrastructure are permanently blocked.",
   "author": {
     "name": "jaguilar87",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jaguilar87/gaia",
-  "version": "5.0.0-rc.2",
+  "version": "5.0.0-rc.3",
   "description": "Multi-agent orchestration system for Claude Code - DevOps automation toolkit",
   "main": "index.js",
   "type": "module",

package/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "gaia"
-version = "5.0.0-rc.2"
+version = "5.0.0-rc.3"
 description = "Multi-agent orchestration system for Claude Code - DevOps automation toolkit"
 requires-python = ">=3.9"
 license = {text = "MIT"}

package/tools/agentic-loop/record-iteration.py

@@ -25,6 +25,8 @@ then renamed over the original.  Either the full write lands or the original
 is untouched.
 """
 
+from __future__ import annotations
+
 import argparse
 import json
 import os

package/tools/scan/tests/conftest.py

@@ -5,6 +5,8 @@ Provides mock project trees, temporary directories, and common
 test data for scanner unit tests.
 """
 
+from __future__ import annotations
+
 import json
 import textwrap
 from pathlib import Path