code-context-control 2.78.0__tar.gz → 2.80.0__tar.gz

{code_context_control-2.78.0/code_context_control.egg-info → code_context_control-2.80.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-context-control
-Version: 2.78.0
+Version: 2.80.0
 Summary: Local MCP code-intelligence for AI coding tools: surgical search/read/edit, agent-config version history, path-level access + masking guards, and a multi-project hub.
 Author-email: Dimitri Tselenchuk <dtselenc@gmail.com>
 License-Expression: Apache-2.0
@@ -202,6 +202,7 @@ C3 exposes **21 tools** as a native MCP server. Your IDE calls them directly:
 | `c3_session` | Snapshot, restore, log decisions, compact history |
 | `c3_impact` | Blast-radius analysis before editing shared symbols |
 | `c3_locks` | Agent leases — who is working on which file, so two agents don't collide (v2.65.0) |
+| `c3_ci` | Run this repo's real `.github/workflows` locally, with structured failures, before pushing (v2.79.0) |
 | `c3_delegate` | Offload heavy work to local Ollama / Codex / Gemini |
 | `c3_agent` | Workflows: `review_changes`, `investigate`, `preflight`, `prepare_context`, `validate_compress` |
 | `c3_edits` | Edit-ledger queries, version diffs, restore points, per-branch filter, `verify` (did a failed `c3_edit` still land?) |
@@ -212,7 +213,7 @@ C3 exposes **21 tools** as a native MCP server. Your IDE calls them directly:
 | `c3_jira` | Jira Cloud + Data Center — JQL, issues, transitions (v2.56.0) |
 | `c3_project` | Cross-project discovery & operations; guarded writes (v2.31.0) |
 
-Every tool is **read-only safe in plan mode** except `c3_edit`, `c3_shell`, `c3_artifacts(action='restore')`, `c3_delegate` with write delegation enabled, and write actions on `c3_bitbucket` / `c3_jira` / `c3_credentials` / `c3_project` / `c3_task` / `c3_locks`.
+Every tool is **read-only safe in plan mode** except `c3_edit`, `c3_shell`, `c3_ci(action='run'|'rerun')`, `c3_artifacts(action='restore')`, `c3_delegate` with write delegation enabled, and write actions on `c3_bitbucket` / `c3_jira` / `c3_credentials` / `c3_project` / `c3_task` / `c3_locks`.
 
 On Windows `c3_shell` uses Git Bash when available. Git Bash bundles no `jq`; use `python -m json.tool` for portable JSON formatting.
 

{code_context_control-2.78.0 → code_context_control-2.80.0}/README.md

@@ -139,6 +139,7 @@ C3 exposes **21 tools** as a native MCP server. Your IDE calls them directly:
 | `c3_session` | Snapshot, restore, log decisions, compact history |
 | `c3_impact` | Blast-radius analysis before editing shared symbols |
 | `c3_locks` | Agent leases — who is working on which file, so two agents don't collide (v2.65.0) |
+| `c3_ci` | Run this repo's real `.github/workflows` locally, with structured failures, before pushing (v2.79.0) |
 | `c3_delegate` | Offload heavy work to local Ollama / Codex / Gemini |
 | `c3_agent` | Workflows: `review_changes`, `investigate`, `preflight`, `prepare_context`, `validate_compress` |
 | `c3_edits` | Edit-ledger queries, version diffs, restore points, per-branch filter, `verify` (did a failed `c3_edit` still land?) |
@@ -149,7 +150,7 @@ C3 exposes **21 tools** as a native MCP server. Your IDE calls them directly:
 | `c3_jira` | Jira Cloud + Data Center — JQL, issues, transitions (v2.56.0) |
 | `c3_project` | Cross-project discovery & operations; guarded writes (v2.31.0) |
 
-Every tool is **read-only safe in plan mode** except `c3_edit`, `c3_shell`, `c3_artifacts(action='restore')`, `c3_delegate` with write delegation enabled, and write actions on `c3_bitbucket` / `c3_jira` / `c3_credentials` / `c3_project` / `c3_task` / `c3_locks`.
+Every tool is **read-only safe in plan mode** except `c3_edit`, `c3_shell`, `c3_ci(action='run'|'rerun')`, `c3_artifacts(action='restore')`, `c3_delegate` with write delegation enabled, and write actions on `c3_bitbucket` / `c3_jira` / `c3_credentials` / `c3_project` / `c3_task` / `c3_locks`.
 
 On Windows `c3_shell` uses Git Bash when available. Git Bash bundles no `jq`; use `python -m json.tool` for portable JSON formatting.
 

{code_context_control-2.78.0 → code_context_control-2.80.0}/cli/c3.py

@@ -92,7 +92,7 @@ console = Console() if HAS_RICH else None
 # Config
 CONFIG_DIR = ".c3"
 CONFIG_FILE = ".c3/config.json"
-__version__ = "2.78.0"
+__version__ = "2.80.0"
 
 
 def _compress_file_cli(compressor, path, mode="smart", **kw):
@@ -261,7 +261,7 @@ _C3_MCP_ALLOW = [
     "mcp__c3__c3_bitbucket",
     "mcp__c3__c3_jira", "mcp__c3__c3_credentials",
     "mcp__c3__c3_project", "mcp__c3__c3_task", "mcp__c3__c3_artifacts",
-    "mcp__c3__c3_override",
+    "mcp__c3__c3_override", "mcp__c3__c3_ci",
 ]
 
 # Obsolete MCP tool names from earlier C3 versions. `c3 permissions clean`
@@ -4772,6 +4772,7 @@ back to native tools as the task progresses.
 - **Shell**: `c3_shell(cmd, timeout=60)` — structured shell exec (tests/git/build). Auto-filters output, logs git mutations to the ledger. Native Bash for interactive/TTY only
 - **Memory**: `c3_memory(action='recall')` — full recall. `index` + `fetch` for token-efficient two-step retrieval
 - **Delegate**: `c3_delegate(task, backend='ollama|codex|gemini|claude|auto')` — offload to other models
+- **Local CI** (v2.79.0+): `c3_ci(action='inspect|run|rerun|failures')` — run THIS repo's real `.github/workflows` here instead of pushing for feedback. `run` executes in `needs` order; `failures` gives {file,line,message}; `rerun` retries only what failed. Only `FULL_CI_PASS` means safe to push — `PARTIAL_PASS` means something did not run (other OS, unsupported action, or your selection).
 - **Bitbucket** (v2.30.0+, when `c3 bitbucket login` has run): `c3_bitbucket(action='list_prs|get_pr|merge_pr|...')` — self-hosted Bitbucket Data Center / Server. Token in OS keyring; mutating actions auto-log to the edit ledger.
 - **Cross-project** (v2.31.0+): `c3_project(action='list|scan|search|read|edit|...', project='<name|path>')` — discover and operate on OTHER c3-installed projects. Reads run freely; writes (edit/shell/memory) need `allow_write=true`.
 - **Masked paths** (v2.63.0+): content prefixed `[c3-mask:transformed]` is a policy-transformed VIEW, not the file. Values may be synthetic, rows withheld, bodies stripped — don't copy literals out of it or infer completeness from it. Masked paths are read-only and refuse shell/git/validate/impact/filter/delegate (`[c3-mask:unsupported]`). That's policy, not a transient error — report the block instead of routing around it.
@@ -6030,6 +6031,82 @@ def _creds_cmd_import(args, project_path: str) -> None:
               "(use --overwrite to replace)")
 
 
+def cmd_ci(args):
+    """AgentCI entry point — exits with the finding.
+
+    The shared dispatcher below discards every command's return value, so
+    `ci` exits for itself rather than changing exit-code behaviour for the
+    other twenty commands. A pre-push hook or a script has to be able to read
+    "not a full pass" from `$?`, which is the whole point of the verdict.
+    """
+    sys.exit(_ci_main(args))
+
+
+def _ci_main(args) -> int:
+    """AgentCI — run this repo's real CI locally (docs/agent-ci.md).
+
+    The human mirror of the c3_ci tool. It deliberately reuses the same
+    handler, so the CLI and the agent surface can never drift into disagreeing
+    about what a verdict means. Returns the process exit code.
+    """
+    import json as _json
+    from types import SimpleNamespace
+
+    from cli.tools.ci import handle_ci
+
+    sub = getattr(args, "ci_cmd", None) or "inspect"
+    project_path = getattr(args, "project_path", ".") or "."
+    as_json = bool(getattr(args, "json", False))
+
+    if as_json:
+        # Structured mode answers from the services directly — the text
+        # handler formats for reading, and reformatting prose into JSON would
+        # be a second, lossier schema.
+        from services import ci_runner as cr
+        from services.ci_workflow import inspect_project
+        if sub == "inspect":
+            payload = inspect_project(project_path, event=getattr(args, "event", "") or "")
+        elif sub in ("run", "rerun"):
+            only = None
+            if sub == "rerun":
+                prior = cr.load_run(project_path, getattr(args, "run_id", ""))
+                only = (prior or {}).get("failed") or []
+                if not only:
+                    print(_json.dumps({"error": "no failed jobs to rerun"}))
+                    return 1
+            payload = cr.run_ci(
+                project_path, selector=getattr(args, "job", ""),
+                allow_foreign=bool(getattr(args, "allow_foreign", False)),
+                only=only, timeout=getattr(args, "timeout", 0) or cr.DEFAULT_STEP_TIMEOUT,
+                workflow=getattr(args, "workflow", ""),
+                event=getattr(args, "event", "") or "").to_dict()
+        elif sub == "runs":
+            payload = {"runs": cr.list_runs(project_path)}
+        else:
+            payload = cr.load_run(project_path, getattr(args, "run_id", ""))
+        print(_json.dumps(payload, indent=2))
+        verdict = payload.get("verdict") if isinstance(payload, dict) else ""
+        return 0 if verdict in (cr.FULL_PASS, None, "") else 1
+
+    svc = SimpleNamespace(project_path=project_path)
+
+    def finalize(_name, _args, resp, _summ, **_kw):
+        return resp
+
+    out = handle_ci(
+        sub, getattr(args, "job", "") or "", getattr(args, "run_id", "") or "",
+        bool(getattr(args, "allow_foreign", False)),
+        getattr(args, "workflow", "") or "", getattr(args, "tail", 200) or 200,
+        getattr(args, "timeout", 0) or 0, svc, finalize,
+        getattr(args, "event", "") or "")
+    print(out)
+    # Exit code is the finding: a non-full verdict must not read as success to
+    # a shell script or a pre-push hook.
+    if sub in ("run", "rerun") and "FULL_CI_PASS" not in out:
+        return 1
+    return 0
+
+
 def cmd_locks(args):
     """Agent Locks — human surface. force-release lives here, never in c3_locks."""
     from services import agent_locks as al
@@ -8290,6 +8367,7 @@ def main():
         "enforce": cmd_enforce,
         "override": cmd_override,
         "locks": cmd_locks,
+        "ci": cmd_ci,
         "oracle": cmd_oracle,
         "upgrade": cmd_upgrade,
     }

{code_context_control-2.78.0 → code_context_control-2.80.0}/cli/commands/parser.py

@@ -472,6 +472,55 @@ def build_parser(version: str, parse_cli_ide_arg):
     lk_sweep = locks_subs.add_parser("sweep", help="Drop expired leases now")
     lk_sweep.add_argument("--path", dest="project_path", default=".")
 
+    # ── AgentCI — local CI execution (docs/agent-ci.md) ─────────────────
+    # Reads .github/workflows/*.yml as the source of truth. The CLI mirrors
+    # the c3_ci tool so a human can drive the same loop an agent does.
+    p_ci = subparsers.add_parser(
+        "ci", help="Run this repo's real CI locally instead of pushing for feedback")
+    ci_subs = p_ci.add_subparsers(dest="ci_cmd")
+
+    def _ci_common(sub):
+        sub.add_argument("--path", dest="project_path", default=".",
+                         help="Project directory (default: current)")
+        sub.add_argument("--json", action="store_true", help="Machine-readable output")
+        sub.add_argument("--event", default="",
+                         help="GitHub event to simulate (push, pull_request) — "
+                              "only needed when an `if:` reads github.event_name")
+        return sub
+
+    _ci_common(ci_subs.add_parser(
+        "inspect", help="Show workflows, the job DAG, and what runs on this host"))
+
+    ci_run = _ci_common(ci_subs.add_parser("run", help="Execute jobs locally"))
+    ci_run.add_argument("--job", default="",
+                        help="Job id, matrix cell, or workflow::job (default: all)")
+    ci_run.add_argument("--workflow", default="", help="Limit to one workflow by name")
+    ci_run.add_argument("--allow-foreign", action="store_true",
+                        help="Also run jobs targeting another OS (labelled cross-OS; "
+                             "can never yield FULL_CI_PASS)")
+    ci_run.add_argument("--timeout", type=int, default=0,
+                        help="Per-step timeout in seconds (default 900)")
+
+    ci_rerun = _ci_common(ci_subs.add_parser(
+        "rerun", help="Re-run only the jobs that failed in the last run"))
+    ci_rerun.add_argument("--run", dest="run_id", default="", help="Run id (default: latest)")
+    ci_rerun.add_argument("--allow-foreign", action="store_true")
+    ci_rerun.add_argument("--timeout", type=int, default=0)
+
+    ci_status = _ci_common(ci_subs.add_parser("status", help="Last run's verdict and jobs"))
+    ci_status.add_argument("--run", dest="run_id", default="")
+
+    ci_fail = _ci_common(ci_subs.add_parser(
+        "failures", help="Structured failures from the last run"))
+    ci_fail.add_argument("--run", dest="run_id", default="")
+
+    ci_logs = _ci_common(ci_subs.add_parser("logs", help="Tail one job's log"))
+    ci_logs.add_argument("job", nargs="?", default="", help="Job key")
+    ci_logs.add_argument("--run", dest="run_id", default="")
+    ci_logs.add_argument("--tail", type=int, default=200)
+
+    _ci_common(ci_subs.add_parser("runs", help="Recent local CI runs"))
+
     # ── Override Requests (v2.69.0, docs/override-requests.md) ──────────
     # Human-only approval surface. A grant is single-use, session-bound,
     # path-exact and TTL-capped, and it never edits policy: the rule that

{code_context_control-2.78.0 → code_context_control-2.80.0}/cli/hub_server.py

@@ -337,6 +337,7 @@ _HUB_JS_FILES = [
     "hub_ui/components/hub_credentials.js",
     "hub_ui/components/hub_locks.js",
     "hub_ui/components/hub_enforcement.js",
+    "hub_ui/components/hub_ci.js",
     "hub_ui/components/drill_subprojects.js",
     "hub_ui/components/drill_health.js",
     "hub_ui/components/drill_tasks.js",
@@ -1282,6 +1283,134 @@ def api_batch_cancel():
         return jsonify({"cancelled": True})
 
 
+# ── AgentCI: local CI execution (docs/agent-ci.md) ────────────────────────
+# A CI run is minutes long, so the POST starts a worker and returns; the UI
+# polls. One run per project at a time — two concurrent runs would interleave
+# their writes into the same .c3/ci run index and neither result would be
+# trustworthy.
+
+_ci_runs: dict = {}          # project path -> in-flight state
+_ci_lock = threading.Lock()
+
+
+def _ci_worker(project: str, job: str, allow_foreign: bool, workflow: str) -> None:
+    from services import ci_runner as cr
+    try:
+        result = cr.run_ci(project, selector=job, allow_foreign=allow_foreign,
+                           workflow=workflow)
+        payload = {"running": False, "done": True, "error": None,
+                   "run_id": result.run_id, "verdict": result.verdict,
+                   "note": result.note}
+    except Exception as exc:            # a crashed worker must not look idle
+        payload = {"running": False, "done": True, "run_id": "",
+                   "error": f"{type(exc).__name__}: {exc}"}
+    with _ci_lock:
+        _ci_runs[project] = payload
+
+
+@app.route("/api/ci/inspect", methods=["GET"])
+def api_ci_inspect():
+    """Workflows, the normalized job DAG, and what is runnable on this host."""
+    from services.ci_workflow import inspect_project
+    path = (request.args.get("path") or "").strip()
+    if not path:
+        return jsonify({"error": "path is required"}), 400
+    try:
+        resolved = _resolve_project_path(path)
+    except ValueError as e:
+        return jsonify({"error": str(e)}), 404
+    try:
+        return jsonify(inspect_project(resolved))
+    except Exception as e:
+        return jsonify({"error": f"{type(e).__name__}: {e}"}), 500
+
+
+@app.route("/api/ci/runs", methods=["GET"])
+def api_ci_runs():
+    from services import ci_runner as cr
+    path = (request.args.get("path") or "").strip()
+    if not path:
+        return jsonify({"error": "path is required"}), 400
+    try:
+        resolved = _resolve_project_path(path)
+    except ValueError as e:
+        return jsonify({"error": str(e)}), 404
+    limit = max(1, min(100, int(request.args.get("limit") or 20)))
+    return jsonify({"runs": cr.list_runs(resolved, limit=limit)})
+
+
+@app.route("/api/ci/run", methods=["GET"])
+def api_ci_run_detail():
+    from services import ci_runner as cr
+    path = (request.args.get("path") or "").strip()
+    if not path:
+        return jsonify({"error": "path is required"}), 400
+    try:
+        resolved = _resolve_project_path(path)
+    except ValueError as e:
+        return jsonify({"error": str(e)}), 404
+    return jsonify(cr.load_run(resolved, (request.args.get("run_id") or "").strip())
+                   or {})
+
+
+@app.route("/api/ci/logs", methods=["GET"])
+def api_ci_logs():
+    from services import ci_runner as cr
+    path = (request.args.get("path") or "").strip()
+    run_id = (request.args.get("run_id") or "").strip()
+    job = (request.args.get("job") or "").strip()
+    if not (path and run_id and job):
+        return jsonify({"error": "path, run_id and job are required"}), 400
+    try:
+        resolved = _resolve_project_path(path)
+    except ValueError as e:
+        return jsonify({"error": str(e)}), 404
+    tail = max(1, min(2000, int(request.args.get("tail") or 300)))
+    return jsonify({"log": cr.read_log(resolved, run_id, job, tail=tail)})
+
+
+@app.route("/api/ci/run", methods=["POST"])
+def api_ci_run_start():
+    """Start a local CI run in the background. Poll /api/ci/status."""
+    data = request.get_json(force=True) or {}
+    path = str(data.get("path") or "").strip()
+    if not path:
+        return jsonify({"error": "path is required"}), 400
+    try:
+        resolved = str(_resolve_project_path(path))
+    except ValueError as e:
+        return jsonify({"error": str(e)}), 404
+
+    with _ci_lock:
+        state = _ci_runs.get(resolved) or {}
+        if state.get("running"):
+            return jsonify({"error": "a CI run is already in progress here"}), 409
+        _ci_runs[resolved] = {"running": True, "done": False, "error": None,
+                              "run_id": "", "verdict": "", "note": ""}
+
+    threading.Thread(
+        target=_ci_worker,
+        args=(resolved, str(data.get("job") or ""),
+              bool(data.get("allow_foreign")), str(data.get("workflow") or "")),
+        daemon=True,
+    ).start()
+    return jsonify({"started": True})
+
+
+@app.route("/api/ci/status", methods=["GET"])
+def api_ci_status():
+    path = (request.args.get("path") or "").strip()
+    if not path:
+        return jsonify({"error": "path is required"}), 400
+    try:
+        resolved = str(_resolve_project_path(path))
+    except ValueError as e:
+        return jsonify({"error": str(e)}), 404
+    with _ci_lock:
+        return jsonify(dict(_ci_runs.get(resolved)
+                            or {"running": False, "done": False}))
+
+
 # ── Sub-projects: linked child .c3 branches (v2.44.0) ─────────────────────
 
 def _sub_manager(parent: str):

{code_context_control-2.78.0 → code_context_control-2.80.0}/cli/hub_ui/app.js

@@ -17,7 +17,7 @@ function App() {
   const [version, setVersion] = useState('');
   const [projects, setProjects] = useState([]);
   const [loaded, setLoaded] = useState(false);
-  const [mainView, setMainView] = useState('projects'); // projects | board | creds | locks
+  const [mainView, setMainView] = useState('projects'); // projects | board | ci | creds | locks | enforce
   const [filter, setFilter] = useState('all');          // all | active | idle | tag:<x>
   const [search, setSearch] = useState('');
   const [view, setView] = useState('list');             // list | grid
@@ -44,7 +44,7 @@ function App() {
       if (cfg.projects_view === 'grid') setView('grid');
       if (cfg.sidebar_collapsed != null) setSidebarCollapsed(!!cfg.sidebar_collapsed);
       if (cfg.sidebar_group) setFilter(cfg.sidebar_group);
-      if (['board', 'creds', 'locks', 'enforce'].includes(cfg.main_view)) setMainView(cfg.main_view);
+      if (['board', 'ci', 'creds', 'locks', 'enforce'].includes(cfg.main_view)) setMainView(cfg.main_view);
     } catch { }
     try { const v = await api.get('/api/version'); setVersion(v.c3_version || ''); } catch { }
   }, []);
@@ -112,6 +112,8 @@ function App() {
         }}>
           {mainView === 'board' ? (
             <TaskBoard projects={projects} onOpenDrill={openDrill} />
+          ) : mainView === 'ci' ? (
+            <HubCI projects={projects} onOpenDrill={openDrill} />
           ) : mainView === 'creds' ? (
             <HubCredentials projects={projects} onOpenDrill={openDrill} />
           ) : mainView === 'locks' ? (