agentirc-cli 9.2.0__tar.gz → 9.4.0__tar.gz

agentirc_cli-9.4.0/.claude/skills/pr-review/scripts/pr-sonar.sh

@@ -0,0 +1,93 @@
+#!/usr/bin/env bash
+# pr-sonar.sh — list every SonarCloud finding attached to a PR.
+#
+# Surfaces what the GitHub-side `poll` cannot: SonarCloud issues,
+# security hotspots, and the duplication breakdown. The
+# sonarqubecloud[bot] PR comment only links to the dashboard — actual
+# findings live behind the SonarCloud API.
+#
+# Usage: pr-sonar.sh [--repo OWNER/REPO] [--sonar-key KEY] PR_NUMBER
+#
+# Defaults:
+#   --repo        auto-detected via `gh repo view`
+#   --sonar-key   derived from repo as `<owner>_<name>`
+#
+# Anonymous SonarCloud access is sufficient for public projects.
+# Requires: gh, jq, curl, python3.
+
+set -euo pipefail
+
+REPO=""
+SONAR_KEY=""
+
+while [[ $# -gt 0 ]]; do
+    case "$1" in
+        --repo) REPO="$2"; shift 2 ;;
+        --sonar-key) SONAR_KEY="$2"; shift 2 ;;
+        *) break ;;
+    esac
+done
+
+PR_NUMBER="${1:?Usage: pr-sonar.sh [--repo OWNER/REPO] [--sonar-key KEY] PR_NUMBER}"
+
+if [[ -z "$REPO" ]]; then
+    REPO=$(gh repo view --json nameWithOwner -q .nameWithOwner)
+fi
+if [[ -z "$SONAR_KEY" ]]; then
+    SONAR_KEY="${REPO%%/*}_${REPO##*/}"
+fi
+
+echo "════════════════ SONARCLOUD (project=$SONAR_KEY, PR=$PR_NUMBER) ════════════════"
+
+# ── Quality gate
+QG=$(curl -fsS "https://sonarcloud.io/api/qualitygates/project_status?projectKey=${SONAR_KEY}&pullRequest=${PR_NUMBER}" || echo '{}')
+QG_STATUS=$(echo "$QG" | jq -r '.projectStatus.status // "UNKNOWN"')
+echo "Quality Gate: $QG_STATUS"
+echo "$QG" | jq -r '.projectStatus.conditions[]? | select(.status != "OK") | "  ✗ \(.metricKey) = \(.actualValue) (threshold \(.comparator) \(.errorThreshold))"' || true
+
+# ── Issues (BUG / VULNERABILITY / CODE_SMELL)
+ISSUES=$(curl -fsS "https://sonarcloud.io/api/issues/search?componentKeys=${SONAR_KEY}&pullRequest=${PR_NUMBER}&statuses=OPEN,CONFIRMED&ps=500" || echo '{}')
+ISSUE_TOTAL=$(echo "$ISSUES" | jq -r '.total // 0')
+echo
+echo "── Issues ($ISSUE_TOTAL OPEN/CONFIRMED) ─────────────────────────────"
+if [[ "$ISSUE_TOTAL" != "0" ]]; then
+    echo "$ISSUES" | jq -r '
+        .issues[] |
+        "  [\(.rule)] \(.severity)  \(.component | sub("^[^:]+:"; ""))(:\(.line // "?"))\n     \(.message)"
+    '
+fi
+
+# ── Security hotspots
+HOTSPOTS=$(curl -fsS "https://sonarcloud.io/api/hotspots/search?projectKey=${SONAR_KEY}&pullRequest=${PR_NUMBER}&status=TO_REVIEW&ps=500" || echo '{}')
+HOTSPOT_TOTAL=$(echo "$HOTSPOTS" | jq -r '.paging.total // 0')
+echo
+echo "── Hotspots ($HOTSPOT_TOTAL TO_REVIEW) ──────────────────────────────"
+if [[ "$HOTSPOT_TOTAL" != "0" ]]; then
+    echo "$HOTSPOTS" | jq -r '
+        .hotspots[] |
+        "  [\(.ruleKey)] \(.vulnerabilityProbability)  \(.component | sub("^[^:]+:"; ""))(:\(.line // "?"))\n     \(.message)"
+    '
+fi
+
+# ── Duplication
+MEAS=$(curl -fsS "https://sonarcloud.io/api/measures/component?component=${SONAR_KEY}&pullRequest=${PR_NUMBER}&metricKeys=new_duplicated_lines_density,new_duplicated_lines,new_duplicated_blocks" || echo '{}')
+DUP_PCT=$(echo "$MEAS" | jq -r '.component.measures[]? | select(.metric == "new_duplicated_lines_density") | .periods[0].value // ""')
+DUP_LINES=$(echo "$MEAS" | jq -r '.component.measures[]? | select(.metric == "new_duplicated_lines") | .periods[0].value // ""')
+DUP_BLOCKS=$(echo "$MEAS" | jq -r '.component.measures[]? | select(.metric == "new_duplicated_blocks") | .periods[0].value // ""')
+echo
+echo "── Duplication on new code ──────────────────────────────────────────"
+echo "  density: ${DUP_PCT:-?}%   lines: ${DUP_LINES:-?}   blocks: ${DUP_BLOCKS:-?}"
+
+if [[ "${DUP_BLOCKS:-0}" != "0" && -n "${DUP_BLOCKS:-}" ]]; then
+    # Per-file duplication: list every file with duplicated_lines on new code.
+    # Sonar doesn't expose per-PR duplication-by-file directly; surface the
+    # files that appear in the issues + hotspots as a weak proxy.
+    DUP_FILES=$(echo "$ISSUES" | jq -r '[.issues[] | .component | sub("^[^:]+:"; "")] | unique | .[]')
+    if [[ -n "$DUP_FILES" ]]; then
+        echo "  files with findings (likely duplication source):"
+        echo "$DUP_FILES" | sed 's/^/    - /'
+    fi
+fi
+
+echo
+echo "Dashboard: https://sonarcloud.io/dashboard?id=${SONAR_KEY}&pullRequest=${PR_NUMBER}"

{agentirc_cli-9.2.0 → agentirc_cli-9.4.0}/.claude/skills/pr-review/scripts/workflow.sh

@@ -3,7 +3,8 @@
 #
 # Subcommands:
 #   lint              run the portability lint on the current diff (staged + unstaged)
-#   poll <PR>         fetch and display review comments
+#   poll <PR>         fetch and display review comments + SonarCloud findings
+#   sonar <PR>        list every SonarCloud issue / hotspot / duplication on a PR
 #   reply <PR>        batch reply to review comments (JSONL on stdin), --resolve
 #   delta             dump CLAUDE.md head + culture.yaml for each sibling project
 #                     listed in skills.local.yaml (alignment-delta check)
@@ -53,6 +54,12 @@ case "$cmd" in
     poll)
         PR="${1:?Usage: workflow.sh poll <PR>}"
         bash "$SCRIPT_DIR/pr-comments.sh" "$PR"
+        echo
+        bash "$SCRIPT_DIR/pr-sonar.sh" "$PR"
+        ;;
+    sonar)
+        PR="${1:?Usage: workflow.sh sonar <PR>}"
+        bash "$SCRIPT_DIR/pr-sonar.sh" "$PR"
         ;;
     reply)
         PR="${1:?Usage: workflow.sh reply <PR>  (JSONL on stdin)}"

agentirc_cli-9.4.0/CHANGELOG.md

@@ -0,0 +1,264 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+Format follows [Keep a Changelog](https://keepachangelog.com/).
+
+## [9.4.0] - 2026-05-01
+
+### Added
+
+- `ServerConfig.from_yaml(path)` — public classmethod on
+  `agentirc.config.ServerConfig` that loads `~/.culture/server.yaml`
+  (or any YAML file). Recognises `server`, `telemetry`, `links`,
+  `webhook_port`, `data_dir`, `system_bots` keys; silently ignores
+  culture-only top-level keys (`supervisor`, `agents`, `buffer_size`,
+  `poll_interval`, `sleep_start`, `sleep_end`, `webhooks`) so the same
+  file can drive both `culture server` and `agentirc` daemons.
+- CLI handlers (`serve`, `start`, `restart`) now overlay CLI flags on
+  top of YAML config. Precedence: explicit CLI flag (sentinel-`None`
+  detection) > YAML key > built-in default. Closes the bootstrap
+  acceptance criterion *"`agentirc start --config <path>` behaves
+  indistinguishably from `culture server start`"*.
+- New runtime dependency: `pyyaml>=6.0`.
+- `docs/api-stability.md` — semver contract for the three public
+  modules (`agentirc.config`, `agentirc.cli`, `agentirc.protocol`),
+  full member list per module, internal-may-refactor list, wire-format
+  quirks paragraph, versioning history.
+- `docs/cli.md` — verb table (8 verbs), per-verb flag reference, exit
+  codes, stderr formatting, YAML/CLI precedence, and the agentirc-vs-
+  culture differences table.
+- `docs/deployment.md` — on-disk footprint, systemd `Type=simple`
+  example unit, container deployment, standalone deployment,
+  multi-host federation, log rotation (logrotate `copytruncate` rule),
+  coexistence with culture, backup recommendations.
+
+### Changed
+
+- `agentirc/cli.py:_add_start_flags` — argparse defaults for `--name`,
+  `--host`, `--port`, `--link`, `--webhook-port`, `--data-dir` are now
+  sentinel `None` rather than concrete values. The user-visible
+  defaults (`0.0.0.0`, `6667`, `7680`, `~/.culture/data`) are still
+  documented in help strings and live on the `ServerConfig` dataclass;
+  the change lets `_resolve_config` distinguish "user-supplied" from
+  "argparse-filled" when overlaying CLI on YAML.
+
+### Removed
+
+- `agentirc/cli.py:_maybe_warn_unused_config` — the
+  *"`--config` was supplied, but YAML config loading is not yet wired
+  (PR-B4)"* warning that PR #4 review (Qodo + Copilot) requested. YAML
+  loading is now wired; the warning was the placeholder for this PR.
+
+### Notes
+
+- Bootstrap is functionally + docs complete as of 9.4.0. Remaining
+  work per the spec status note: acceptance-criteria spot-check (Task
+  14) and release ceremony (Tasks 16–18 — tag, publish, report-back to
+  culture). The cross-repo wire-format fixes (Track A) and steward
+  backport of `pr-sonar.sh` are the only outstanding follow-ups.
+- 13 new tests in `tests/test_config_loader.py` exercise
+  `ServerConfig.from_yaml` (missing/empty/malformed files, unknown-key
+  tolerance, telemetry/links sections) and the `_resolve_config` merge
+  (CLI overrides YAML, YAML used when CLI absent, defaults on both
+  absent, links wholesale-replace). Total suite: 328 tests, ~28s under
+  `pytest -n auto`.
+
+## [9.3.0] - 2026-05-01
+
+### Added
+
+- Test suite migration (PR-B3): 36 server-core / telemetry tests
+  vendored from `culture@df50942` (~6,500 LOC). 315 tests run under
+  `pytest -n auto` in ~29 seconds.
+  - 21 server-core tests in `tests/` cover IRC lifecycle, channels,
+    rooms, threads, history, federation (S2S), events, mentions,
+    and the icon skill.
+  - 15 telemetry integration tests in `tests/telemetry/` cover audit
+    JSONL emission, OTLP span injection on dispatch, S2S relay
+    spans, metrics initialization, and trace-context propagation.
+  - Test helper modules `_fakes.py` and `_metrics_helpers.py` also
+    vendored verbatim under the same package.
+- `tests/conftest.py` — adapted from culture. Drops the
+  `_BOTS_DIR_*` patches and the `server_with_bot` /
+  `server_with_bots` fixtures (see Changed below). Keeps the
+  `IRCTestClient` raw-TCP helper and the IRCd lifecycle, telemetry,
+  and audit fixtures.
+- `.claude/skills/pr-review/scripts/pr-sonar.sh` — new script that
+  fetches every SonarCloud issue, security hotspot, and duplication
+  measure for a PR via the SonarCloud API. `workflow.sh poll` now
+  runs it after `pr-comments.sh`; `workflow.sh sonar <PR>` runs it
+  standalone. Closes the gap where the GitHub-side poll only saw
+  the SonarCloud bot's "Quality Gate failed" link without the
+  underlying findings. Re-vendor to `steward` after this PR merges.
+- Three `[tool.citation]` packages:
+  `culture-tests-conftest` (paraphrase),
+  `culture-tests-server-core` (mostly quote, paraphrase for
+  `test_events_basic.py`), and `culture-tests-telemetry` (mostly
+  quote, paraphrase for `test_tracing.py`).
+
+### Changed
+
+- `agentirc/server_link.py:_replay_event` — parameter renamed from
+  `_seq` (PR-B1's unused-arg compliance variant) back to `seq` to
+  match the upstream signature culture's tests assume; signature
+  carries `# noqa: ARG002 # NOSONAR S1172`. Hash refreshed.
+
+### Fixed (post-review)
+
+- `requires-python = ">=3.10"` → `">=3.11"`; classifiers updated
+  (drop 3.10, add 3.13). Resolves Copilot/Qodo "asyncio.timeout
+  not in 3.10" findings. The 3.10 floor was inherited from PR-B1/B2
+  and would have ImportError'd on the first test run.
+- 2 SonarCloud `python:S5332` security hotspots cleared via
+  `# NOSONAR S5332` annotations on `tests/telemetry/test_config.py`'s
+  localhost OTLP test fixtures (URLs never reach the wire).
+- New `tests/_helpers.py` (agentirc-native, not cited) extracts the
+  duplicated "boot two linked IRCds" pattern into `boot_linked_pair`
+  + `link_pair`. Refactored 9 sites that previously inlined ~22
+  lines of identical scaffolding: 5 in `test_federation.py`, 3 in
+  `test_link_reconnect.py`, plus the `linked_servers` conftest
+  fixture. Drops ~180 duplicated lines, addressing SonarCloud's
+  >3% duplication threshold while keeping the cited test bodies
+  readable. Re-snapshots from culture replay this extraction
+  mechanically.
+- 42 SonarCloud OPEN issues cleared via inline `# NOSONAR <rule>`
+  annotations: `python:S1172` (server_link `_replay_event`'s upstream
+  signature compat), `python:S2068` (3 test fixture passwords),
+  `python:S7483` (3 `IRCTestClient.recv*` / `_wait_for_span` timeout
+  params kept by upstream design — see `RECV_TIMEOUT_SECONDS`
+  module-level note), `python:S7494` (2 `dict(t.split("=") for t in
+  tags)` patterns vendored verbatim from culture), `python:S125`
+  (1 `# 311 RPL_WHOISUSER` documentation comment SonarCloud
+  misclassified as commented-out code), `python:S1481` × 21
+  (`server_a, server_b = linked_servers` tuple-unpack sites where
+  one or both vars are used by the federation fixture but unread in
+  the test body — same idiom across 3 files; underscore-prefix
+  rename would diverge from culture upstream and complicate
+  re-snapshots).
+
+### Deferred / out of scope
+
+- Three bot-fixtured telemetry tests
+  (`test_bot_event_dispatch_span.py`, `test_bot_run_span.py`,
+  `test_metrics_bots.py`) and `test_welcome_bot.py` stay in culture
+  — they depend on the real `BotManager` (forbidden by agentirc's
+  dependency boundary). Bucket C tests (cli/console/daemon/clients)
+  also remain in culture indefinitely.
+- `tests/telemetry/conftest.py` is not migrated; its only consumer
+  was the deferred bot-fixtured tests above.
+- Bootstrap docs (`docs/api-stability.md`, `docs/cli.md`,
+  `docs/deployment.md`) ship in PR-B4.
+
+## [9.2.0] - 2026-05-01
+
+### Added
+
+- `agentirc/protocol.py` — public, semver-tracked module consolidating
+  IRC verb names, numeric reply codes (re-exported from
+  `_internal.protocol.replies`), and IRCv3 / agentirc tag names. Wire-
+  format quirks (`ROOMETAEND`, `ROOMETASET` typos; `ERR_NOSUCHCHANNEL`
+  semantic misuse; `STHREAD` verb collapse) are preserved verbatim with
+  explanatory comments — they require coordinated cross-repo bumps to
+  fix.
+- `agentirc/client.py` — IRC client transport vendored from
+  `culture/agentirc/client.py` at SHA `df50942`. Body unchanged; only
+  imports rewritten. The bootstrap spec originally said this would
+  "stay in culture" but its dependency surface (already-vendored
+  `_internal` support modules + opentelemetry) made vendoring the
+  cleaner path. Without it, `agentirc/ircd.py:580`'s runtime
+  `from agentirc.client import Client` raised `ImportError` on the
+  first TCP IRC connection.
+- Real `agentirc/cli.py` — verb dispatch extracted from
+  `culture/cli/server.py`. New verbs: `serve` (foreground, no PID;
+  for systemd `Type=simple` and containers), `restart`, `link`
+  (peer-spec validator), `logs` (cat / tail of `~/.culture/logs/server-
+  <name>.log`). Existing verbs `start`/`stop`/`status` reuse culture's
+  proven daemonize / `_wait_for_port` / `_wait_for_graceful_stop` /
+  `_force_kill` helpers.
+- Internal support modules:
+  - `agentirc/_internal/pidfile.py` — PID/port file management.
+    `is_managed_process()` recognizes both `culture` and
+    `agentirc`/`agentirc-cli` argv tokens; `is_culture_process` is
+    preserved as a thin alias.
+  - `agentirc/_internal/cli_shared/{constants,mesh}.py` — minimal
+    subset of `culture/cli/shared`. Keeps `DEFAULT_CONFIG`, `LOG_DIR`,
+    `culture_runtime_dir()`, `parse_link()`. Drops everything that
+    touched `culture.bots.config`, `culture.credentials`,
+    `culture.mesh_config`.
+- Citations recorded in `[tool.citation]`: `culture-pidfile`,
+  `culture-cli-shared`, `culture-client`, `culture-cli-server`.
+
+### Changed
+
+- Default server name changed from `culture` to `agentirc` in
+  `agentirc.cli`. PID/port files at `~/.culture/pids/server-<name>.{pid,
+  port}` keep their existing layout per the "Defaults preserve culture
+  continuity" rule, but the default fallback name no longer collides
+  with culture's daemon when both run on the same host.
+- Dropped culture-only verbs (`default`, `rename`, `archive`,
+  `unarchive`) from agentirc's CLI surface — they manage culture's
+  agent manifest, which agentirc does not own.
+- Dropped `--mesh-config` from `agentirc start` — depends on
+  `culture.credentials` / `culture.mesh_config` (out of scope).
+
+### Notes
+
+- End-to-end smoke verified: `agentirc start --port 16667` boots,
+  TCP NICK/USER handshake returns `001 RPL_WELCOME` from a real
+  `IRCd`, `agentirc stop` shuts cleanly. `agentirc serve` is now
+  byte-indistinguishable from `culture server start` for the lifecycle
+  contract culture's shim relies on.
+- Test suite migration (PR-B3) is the only remaining bootstrap slice.
+
+## [9.1.0] - 2026-04-30
+
+### Added
+
+- Server-core vendored from `culture` at SHA `df50942`. The `agentirc`
+  package now contains the IRCd (`ircd.py`), server-to-server linking
+  (`server_link.py`), channel/event/store/skill modules, `remote_client.py`
+  (peer-server ghost client), and the four built-in skills
+  (`skills/{rooms,threads,history,icon}.py`).
+- Internal vendored support modules under `agentirc/_internal/`:
+  - `aio` (`maybe_await`)
+  - `constants` (system user/channel constants)
+  - `protocol/` (IRC `Message` and numeric `replies`)
+  - `telemetry/` (OpenTelemetry audit/tracing/metrics — full subpackage)
+  - `virtual_client` (`VirtualClient` for in-process bot integration)
+  - `bots/{bot_manager,http_listener}` (no-op stubs; culture replaces
+    these at runtime when wrapping an `IRCd`)
+- `[tool.citation]` block in `pyproject.toml` enumerating every vendored
+  file with a quote/paraphrase/synthesize status, source URL, and
+  sha256, validated by `cite check`.
+- Runtime dependencies: `opentelemetry-api`, `opentelemetry-sdk`,
+  `opentelemetry-exporter-otlp-proto-grpc` (all `>=1.22`).
+- Dev dependency: `citation-cli` (provides the `cite` console script).
+
+### Changed
+
+- Bootstrap spec deviation: `remote_client.py` was originally listed as
+  "do not copy" but turned out to be server-side (used by `server_link`
+  and `virtual_client` for peer-server users in channel member lists).
+  Vendored as public `agentirc/remote_client.py`. See commit `8b4a6d8`.
+
+### Notes
+
+- `agentirc/cli.py` still ships only `version`; the `serve|start|stop|
+  restart|status|link|logs` lifecycle verbs remain stubs. The real CLI
+  is the next slice (PR-B2).
+- Tests are not migrated yet (PR-B3).
+
+## [9.0.0] - 2026-04-30
+
+### Added
+
+- Initial bootstrap of `agentirc-cli` as an installable Python package.
+- Skeleton `agentirc/{__init__,__main__,cli}.py` with `version` verb
+  wired up and lifecycle verbs (`serve|start|stop|restart|status|link|
+  logs`) as stubs.
+- Console scripts: both `agentirc` and `agentirc-cli` map to
+  `agentirc.cli:main`.
+- Major version starts at `9.0.0` to leapfrog the
+  `agentirc-cli==8.7.X.devN` squat that culture previously published to
+  TestPyPI, so dev releases sort as the actual "Latest".

{agentirc_cli-9.2.0 → agentirc_cli-9.4.0}/CLAUDE.md

@@ -2,20 +2,26 @@
 
 This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
 
-## Current state: server-core + real CLI + protocol module landed (9.2.0)
+## Current state: bootstrap functionally + docs complete (9.4.0); release ceremony remains
 
-This repo is the agentirc server-core extraction out of the sibling project [`culture`](https://github.com/OriNachum/culture). As of 9.2.0:
+This repo is the agentirc server-core extraction out of the sibling project [`culture`](https://github.com/OriNachum/culture). As of 9.4.0:
 
 - **Server-core** (`agentirc/{ircd,server_link,channel,events,skill,remote_client,…}.py`, `agentirc/skills/{rooms,threads,history,icon}.py`) — vendored from `culture@df50942` via the `cite-don't-copy` pattern (see `[tool.citation]` in `pyproject.toml`).
-- **Client transport** (`agentirc/client.py`) — vendored from `culture/agentirc/client.py` in PR-B2. The bootstrap spec originally said this would "stay in culture", but the dependency-boundary analysis after PR-B1 showed `client.py` only imports already-vendored support modules plus opentelemetry. Without it, `agentirc/ircd.py:580`'s runtime `from agentirc.client import Client` raised `ImportError` on the first TCP IRC connection.
-- **Public CLI** (`agentirc/cli.py`) — real verb dispatch extracted from `culture/cli/server.py`. Verbs: `serve` (foreground, no PID; for systemd `Type=simple` and containers), `start`/`stop`/`status` (lifecycle), `restart`, `link` (peer-spec validator), `logs` (cat / tail of `~/.culture/logs/server-<name>.log`), `version`.
+- **Client transport** (`agentirc/client.py`) — vendored from `culture/agentirc/client.py` in PR-B2.
+- **Public CLI** (`agentirc/cli.py`) — real verb dispatch extracted from `culture/cli/server.py`. Verbs: `serve` (foreground, no PID; for systemd `Type=simple` and containers), `start`/`stop`/`status` (lifecycle), `restart`, `link` (peer-spec validator), `logs` (cat / tail of `~/.culture/logs/server-<name>.log`), `version`. Since 9.4.0, `serve`/`start`/`restart` overlay CLI flags on `--config` YAML (precedence: CLI > YAML > built-in default).
+- **Public config** (`agentirc/config.py`) — `ServerConfig`, `LinkConfig`, `TelemetryConfig` dataclasses plus the `ServerConfig.from_yaml(path)` classmethod (added 9.4.0). Recognises `server`/`telemetry`/`links`/`webhook_port`/`data_dir`/`system_bots` keys; silently ignores culture-only keys (`supervisor`, `agents`, `buffer_size`, etc.) so the same `~/.culture/server.yaml` can drive both daemons.
 - **Public protocol** (`agentirc/protocol.py`) — verb name constants, numerics, IRCv3 tag names. Wire-format quirks (`ROOMETAEND`, `ROOMETASET` typos, `ERR_NOSUCHCHANNEL` semantic misuse, `STHREAD` verb collapse) preserved verbatim — they need coordinated cross-repo bumps to fix.
-- **Internal support** (`agentirc/_internal/`) — `aio`, `constants`, `protocol/`, `telemetry/`, `virtual_client`, `pidfile` (PR-B2), `cli_shared/` (PR-B2), `bots/` stubs.
+- **Test suite** (PR-B3, 9.3.0; +13 in 9.4.0) — 36 tests vendored from `culture@df50942` (~6.5kloc) plus 13 new agentirc-native tests in `tests/test_config_loader.py`. 328 tests run under `pytest -n auto` in ~28s on default workers. Three telemetry tests (`test_bot_event_dispatch_span`, `test_bot_run_span`, `test_metrics_bots`) and `test_welcome_bot` stay in culture because they depend on the real `BotManager`.
+- **Internal support** (`agentirc/_internal/`) — `aio`, `constants`, `protocol/`, `telemetry/`, `virtual_client`, `pidfile`, `cli_shared/`, `bots/` stubs.
+- **Bootstrap docs** (PR-B4, 9.4.0) — `docs/api-stability.md` (3 public modules + semver contract), `docs/cli.md` (verb table, flag reference, exit codes, YAML/CLI precedence, agentirc-vs-culture diff table), `docs/deployment.md` (on-disk footprint, systemd `Type=simple` example, container deployment, multi-host federation, log rotation, coexistence with culture, backup).
 
-End-to-end verified: `agentirc start --port <p>` boots a real IRCd, TCP NICK/USER handshake returns `001 RPL_WELCOME`, `agentirc stop` shuts cleanly. `agentirc serve` is byte-indistinguishable from `culture server start` for the lifecycle contract culture's shim relies on.
+End-to-end verified: `agentirc start --port <p>` boots a real IRCd, TCP NICK/USER handshake returns `001 RPL_WELCOME`, `agentirc stop` shuts cleanly. `agentirc serve --config server.yaml --port 9999` correctly overlays CLI flag on YAML.
 
 What is **not** done yet:
-- **Test suite migration** is PR-B3 — only remaining bootstrap slice.
+- **Acceptance-criteria spot-check** (Task 14 in the bootstrap spec) — read-only audit to confirm every bullet in §"Acceptance criteria" is ✅ before tagging.
+- **Release ceremony** (Tasks 16–18) — tag `v9.4.0`, the existing `publish.yml` CI pushes to PyPI on push to `main`, then report version + source SHA back so culture's cutover PR can pin against it.
+- **Cross-repo wire-format fixes (Track A)** — `ROOMETAEND`/`ROOMETASET` typos, `ERR_NOSUCHCHANNEL` overload, `STHREAD` collapse. Each requires culture-side change first then agentirc bump.
+- **Steward backport** — port the 9.3.0 `pr-sonar.sh` + `workflow.sh` SonarCloud wiring back to the steward skills repo.
 
 Read the bootstrap spec at `docs/superpowers/specs/2026-04-30-bootstrap-design.md` for the full plan; it is the operative source of truth and is intentionally self-contained. The culture-side counterpart spec is at `../culture/docs/superpowers/specs/2026-04-30-agentirc-extraction-design.md` — not normally needed, but explains *why* if a decision looks arbitrary.
 
@@ -44,6 +50,13 @@ There are three different names in play. Don't conflate them:
 
 When migrating tests, the rule is: pure server tests come here, transport tests **also** come here now that we own `client.py`, mixed tests stay in culture and get rewritten to drive `agentirc serve` as a subprocess fixture rather than importing `IRCd` directly. When unsure, **prefer copying the test here** — this repo owns the IRCd and the client transport.
 
+### Test layout (since 9.3.0)
+
+- `tests/conftest.py` — paraphrase of culture's conftest. Drops the `_BOTS_DIR_*` `unittest.mock.patch` calls (no-op against agentirc's bot stubs) and the `server_with_bot` / `server_with_bots` fixtures. Keeps `IRCTestClient`, the IRCd lifecycle fixtures (`server`, `linked_servers`, `make_client*`, `server_welcome_disabled`), telemetry fixtures (`tracing_exporter`, `metrics_reader`, `audit_dir`), and the `TEST_LINK_PASSWORD` constant.
+- `tests/test_*.py` — 21 server-core tests + the agentirc-native `test_cli.py`. Cover IRC lifecycle, channels, rooms, threads, history, federation, events, mentions, the icon skill.
+- `tests/telemetry/test_*.py` — 15 telemetry integration tests covering audit JSONL emission, OTLP span injection on dispatch, S2S relay spans, metrics initialization, trace-context propagation. Uses two private helper modules `_fakes.py` (FakeWriter etc.) and `_metrics_helpers.py`. No `tests/telemetry/conftest.py` (the upstream one was bot-coupled).
+- Tests left in culture: `test_bot_event_dispatch_span.py`, `test_bot_run_span.py`, `test_metrics_bots.py`, `test_welcome_bot.py` (bot-manager-coupled), plus the entire bucket-C surface (cli, console, daemon, clients, credentials).
+
 ## Public API contract (semver-tracked)
 
 Only three modules are public. Everything else is internal and may be refactored without a major bump.
@@ -82,7 +95,7 @@ Do not rename on-disk artifacts during the bootstrap. That is explicitly out of
 # Dev setup
 uv venv && uv pip install -e ".[dev]"
 
-# Tests (the spec mandates parallel; no tests yet — collected 0)
+# Tests (315 collected, ~29s on default workers)
 pytest -n auto
 
 # Run a single test
@@ -91,7 +104,7 @@ pytest tests/path/to/test_file.py::test_name -v
 # CLI smoke
 agentirc --help
 agentirc-cli --help          # alias of agentirc
-agentirc version             # prints "agentirc 9.2.0"
+agentirc version             # prints "agentirc 9.3.0"
 python -m agentirc version   # equivalent
 
 # Lifecycle (functional since 9.2.0)
@@ -146,7 +159,8 @@ Per-machine paths for these skills go in `.claude/skills.local.yaml` (gitignored
 
 The full list lives in §"Acceptance criteria" of the bootstrap spec. The non-obvious ones:
 
-- `pip install agentirc-cli==9.2.0` on a clean venv produces working `agentirc` *and* `agentirc-cli` binaries (both pointing at `agentirc.cli:main`). ✅ since 9.0.0.
+- `pip install agentirc-cli==9.3.0` on a clean venv produces working `agentirc` *and* `agentirc-cli` binaries (both pointing at `agentirc.cli:main`). ✅ since 9.0.0.
 - `agentirc serve` is byte-indistinguishable from `culture server start` (same socket, same logs, same systemd integration). ✅ since 9.2.0.
 - `agentirc.config.{ServerConfig, LinkConfig, TelemetryConfig}`, `agentirc.cli.{main, dispatch}`, `agentirc.protocol.*` all import from a clean Python session. ✅ since 9.2.0.
-- `docs/api-stability.md` names the three public modules. ⏳ pending.
+- `pytest -n auto` passes for the migrated suite (315 tests, ~29s). ✅ since 9.3.0.
+- `docs/api-stability.md` names the three public modules. ⏳ pending PR-B4.

{agentirc_cli-9.2.0 → agentirc_cli-9.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentirc-cli
-Version: 9.2.0
+Version: 9.4.0
 Summary: Agent-friendly IRCd: server core for AI agent meshes
 Project-URL: Homepage, https://github.com/OriNachum/agentirc
 Project-URL: Issues, https://github.com/OriNachum/agentirc/issues
@@ -32,14 +32,15 @@ Classifier: Development Status :: 3 - Alpha
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
 Classifier: Topic :: Communications :: Chat :: Internet Relay Chat
-Requires-Python: >=3.10
+Requires-Python: >=3.11
 Requires-Dist: opentelemetry-api>=1.22
 Requires-Dist: opentelemetry-exporter-otlp-proto-grpc>=1.22
 Requires-Dist: opentelemetry-sdk>=1.22
+Requires-Dist: pyyaml>=6.0
 Provides-Extra: dev
 Requires-Dist: bandit; extra == 'dev'
 Requires-Dist: black; extra == 'dev'