codee-agent 0.1.0__tar.gz → 0.2.0__tar.gz

{codee_agent-0.1.0 → codee_agent-0.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codee-agent
-Version: 0.1.0
+Version: 0.2.0
 Summary: A virtual co-worker that picks up Jira and Azure DevOps tasks and solves them with coding agents.
 Keywords: ai,agent,jira,azure-devops,claude-code,github-copilot,automation
 Author: Denis Kibalko

{codee_agent-0.1.0 → codee_agent-0.2.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "codee-agent"
-version = "0.1.0"
+version = "0.2.0"
 description = "A virtual co-worker that picks up Jira and Azure DevOps tasks and solves them with coding agents."
 readme = "README.md"
 license = "MIT"

{codee_agent-0.1.0 → codee_agent-0.2.0}/src/codee/admin.py

@@ -126,7 +126,6 @@ class AdminState(rx.State):
     jira_api_token: str = ""
     jira_project: str = ""
     azure_organization_url: str = ""
-    azure_project: str = ""
     azure_tenant_id: str = ""
     azure_client_id: str = ""
     azure_client_secret: str = ""
@@ -484,7 +483,6 @@ class AdminState(rx.State):
         self.jira_api_token = jira.get("api_token", "")
         self.jira_project = jira.get("project", "")
         self.azure_organization_url = azure.get("organization_url", "")
-        self.azure_project = azure.get("project", "")
         self.azure_tenant_id = azure.get("tenant_id", "")
         self.azure_client_id = azure.get("client_id", "")
         self.azure_client_secret = azure.get("client_secret", "")
@@ -533,9 +531,6 @@ class AdminState(rx.State):
     def set_azure_organization_url(self, value: str) -> None:
         self.azure_organization_url = value
 
-    def set_azure_project(self, value: str) -> None:
-        self.azure_project = value
-
     def set_azure_tenant_id(self, value: str) -> None:
         self.azure_tenant_id = value
 
@@ -549,7 +544,7 @@ class AdminState(rx.State):
     def azure_can_connect(self) -> bool:
         """Everything the authorization request and the later queries need."""
         return all(value.strip() for value in (
-            self.azure_organization_url, self.azure_project,
+            self.azure_organization_url,
             self.azure_client_id, self.azure_client_secret))
 
     def connect_azure_devops(self) -> Any:
@@ -560,7 +555,7 @@ class AdminState(rx.State):
         """
         if not self.azure_can_connect:
             return rx.toast.error(
-                "Fill in organization URL, project, client ID and client secret first.")
+                "Fill in organization URL, client ID and client secret first.")
         error = self._persist_settings()
         if error:
             return rx.toast.error(error)
@@ -591,7 +586,6 @@ class AdminState(rx.State):
             if self.tasks_provider == "jira"
             else {
                 "organization_url": self.azure_organization_url,
-                "project": self.azure_project,
                 "tenant_id": self.azure_tenant_id,
                 "client_id": self.azure_client_id,
                 "client_secret": self.azure_client_secret,
@@ -1443,7 +1437,7 @@ def azure_instructions() -> rx.Component:
                            "→ user_impersonation → Add. Entra publishes no read-only scope "
                            "for Azure DevOps; Codee only ever issues read calls, and you can "
                            "narrow it further by connecting with an account that has Readers "
-                           "access to the project."),
+                           "access to only the projects it should see."),
                 azure_step(4, "Create a client secret",
                            "Certificates & secrets → New client secret. Copy the Value "
                            "column immediately — Azure hides it once you leave the page."),
@@ -1485,9 +1479,10 @@ def azure_fields() -> rx.Component:
         field("Organization URL", rx.input(value=AdminState.azure_organization_url,
                                            on_change=AdminState.set_azure_organization_url,
                                            placeholder="https://dev.azure.com/your-org",
-                                           width="100%")),
-        field("Project", rx.input(value=AdminState.azure_project,
-                                  on_change=AdminState.set_azure_project, width="100%")),
+                                           width="100%"),
+              hint=rx.text("Work items are picked up from every project in this "
+                           "organization the connected account can read.",
+                           color=MUTED, font_size="0.8rem")),
         field("Application (client) ID", rx.input(value=AdminState.azure_client_id,
                                                   on_change=AdminState.set_azure_client_id,
                                                   width="100%")),

{codee_agent-0.1.0 → codee_agent-0.2.0}/src/codee/admin_service.py

@@ -949,8 +949,8 @@ class AdminService:
         """
         config = azure_oauth.OAuthConfig.from_settings(self.load_settings())
         if not config.is_complete():
-            return False, ("Fill in organization URL, project, client ID and "
-                           "client secret before connecting.")
+            return False, ("Fill in organization URL, client ID and client "
+                           "secret before connecting.")
         state = azure_oauth.new_state()
         code_verifier = azure_oauth.new_code_verifier()
         redirect_uri = self.azure_redirect_uri()

{codee_agent-0.1.0 → codee_agent-0.2.0}/src/codee/lib/test_trigger_cron_skills.py

@@ -6,11 +6,13 @@ import unittest
 import sys
 from datetime import datetime, timedelta
 from pathlib import Path
+from unittest.mock import patch
 
 sys.path.insert(0, str(Path(__file__).parent))
 
 from codee_main_context.context import CodeeMainContext
 
+from codee.lib import trigger_aws_sqs_skills as trigger_aws_sqs_skills_module
 from codee.lib.trigger_aws_sqs_skills import (
     AwsSqsMessage,
     find_aws_sqs_triggered_skills,
@@ -480,6 +482,36 @@ class CronSkillTests(unittest.TestCase):
         self.assertTrue(calls[0][1])
         self.assertEqual(sqs_source.deleted, [message])
 
+    def test_reconcile_survives_unconfigured_aws_client(self):
+        def run_claude(user_message: str, session_id: str, model: str = "") -> str:
+            raise AssertionError("should not run without an SQS client")
+
+        with tempfile.TemporaryDirectory() as temp_dir:
+            root = Path(temp_dir)
+            skills_dir = root / "skills"
+            skill_dir = skills_dir / "sqs-check"
+            skill_dir.mkdir(parents=True)
+            (skill_dir / "SKILL.md").write_text(
+                "---\n"
+                "name: SQS Check\n"
+                "disable-model-invocation: true\n"
+                "x-codee-trigger: aws-sqs\n"
+                "x-codee-aws-sqs-queue: codee-queue\n"
+                "---\n\n"
+                "Process this content: {CONTENT}\n"
+            )
+
+            with patch.object(
+                trigger_aws_sqs_skills_module,
+                "Boto3AwsSqsMessageSource",
+                side_effect=Exception("You must specify a region."),
+            ):
+                trigger_aws_sqs_skills(
+                    run_claude,
+                    skills_dir=skills_dir,
+                    main_context=_ctx(root),
+                )
+
 
 if __name__ == "__main__":
     unittest.main()

{codee_agent-0.1.0 → codee_agent-0.2.0}/src/codee/lib/trigger_aws_sqs_skills.py

@@ -53,7 +53,9 @@ def trigger_aws_sqs_skills(
         return
 
     if sqs_message_source is None:
-        sqs_message_source = Boto3AwsSqsMessageSource()
+        sqs_message_source = _build_boto3_message_source()
+        if sqs_message_source is None:
+            return
 
     for skill in skills:
         try:
@@ -131,6 +133,30 @@ def find_aws_sqs_triggered_skills(skills_dir: Path = SKILLS_DIR) -> list[AwsSqsT
     return skills
 
 
+def _build_boto3_message_source() -> "Boto3AwsSqsMessageSource | None":
+    """Build the SQS client, or return None when AWS isn't configured.
+
+    boto3 raises (NoRegionError, missing credentials, boto3 not installed) at
+    client construction. That must not abort the executor tick -- the rest of
+    run_once() still has cron skills, email skills and tasks to process -- so we
+    report it once per process and let SQS triggers stay idle.
+    """
+    global _boto3_unavailable_reported
+    try:
+        return Boto3AwsSqsMessageSource()
+    except Exception as exc:
+        if not _boto3_unavailable_reported:
+            _boto3_unavailable_reported = True
+            print(
+                f"[aws_sqs_skills] AWS SQS client unavailable ({exc}); SQS triggers "
+                "stay idle until AWS is configured (e.g. AWS_DEFAULT_REGION)."
+            )
+        return None
+
+
+_boto3_unavailable_reported = False
+
+
 class Boto3AwsSqsMessageSource:
     def __init__(self, *, visibility_timeout: int = 7200) -> None:
         import boto3

{codee_agent-0.1.0 → codee_agent-0.2.0}/src/codee/test_admin_service.py

@@ -781,7 +781,6 @@ class AzureDevOpsOAuthTest(unittest.TestCase):
 
     AZURE_CREDENTIALS = {
         "organization_url": "https://dev.azure.com/acme",
-        "project": "Core",
         "tenant_id": "tenant-1",
         "client_id": "client-1",
         "client_secret": "secret-1",

{codee_agent-0.1.0 → codee_agent-0.2.0}/src/codee/test_executor.py

@@ -55,7 +55,6 @@ class RefreshConfigTest(unittest.TestCase):
             tasks_provider=TasksProvider.AZURE_DEVOPS,
             credentials={TasksProvider.AZURE_DEVOPS.value: {
                 "organization_url": "https://dev.azure.com/acme",
-                "project": "Core",
                 "tenant_id": "tenant-1",
                 "client_id": "client-1",
                 "client_secret": "secret-1",
@@ -104,7 +103,8 @@ class RefreshConfigTest(unittest.TestCase):
 
         self._save(
             tasks_provider=TasksProvider.AZURE_DEVOPS,
-            credentials={TasksProvider.AZURE_DEVOPS.value: {"project": "Core"}},
+            credentials={TasksProvider.AZURE_DEVOPS.value: {
+                "organization_url": "https://dev.azure.com/acme"}},
         )
         with patch.dict(executor._TASKS_PROVIDERS,
                         {TasksProvider.AZURE_DEVOPS: _Exploding}):

{codee_agent-0.1.0 → codee_agent-0.2.0}/src/codee_main_context/context.py

@@ -59,9 +59,10 @@ TASKS_PROVIDER_FIELDS: dict[TasksProvider, list[CredentialField]] = {
     # Azure DevOps authenticates through an Entra ID app registration, so the
     # stored credentials describe the app; the tokens it yields live in SQLite
     # (codee_database.oauth_tokens) rather than in settings.json.
+    # There is no project field: work items are queried across the whole
+    # organization, which is the scope the granted access has anyway.
     TasksProvider.AZURE_DEVOPS: [
         CredentialField("organization_url", "Organization URL"),
-        CredentialField("project", "Project"),
         CredentialField("tenant_id", "Directory (tenant) ID"),
         CredentialField("client_id", "Application (client) ID"),
         CredentialField("client_secret", "Client secret", secret=True),

{codee_agent-0.1.0 → codee_agent-0.2.0}/src/codee_tasks_azure_devops/oauth.py

@@ -64,10 +64,14 @@ class AzureDevOpsAuthError(RuntimeError):
 
 @dataclass(frozen=True)
 class OAuthConfig:
-    """The Entra app registration, as captured in settings.json."""
+    """The Entra app registration, as captured in settings.json.
+
+    There is no project here: queries run across the whole organization. A
+    project would only ever have been a filter — the access Entra grants covers
+    the organization however it is set.
+    """
 
     organization_url: str = ""
-    project: str = ""
     tenant_id: str = ""
     client_id: str = ""
     client_secret: str = ""
@@ -77,7 +81,6 @@ class OAuthConfig:
         creds = settings.credentials.get(PROVIDER, {})
         return cls(
             organization_url=(creds.get("organization_url") or "").strip().rstrip("/"),
-            project=(creds.get("project") or "").strip(),
             tenant_id=(creds.get("tenant_id") or "").strip(),
             client_id=(creds.get("client_id") or "").strip(),
             client_secret=(creds.get("client_secret") or "").strip(),
@@ -85,8 +88,8 @@ class OAuthConfig:
 
     def is_complete(self) -> bool:
         """Whether we have everything needed to run the flow and query tasks."""
-        return bool(self.organization_url and self.project
-                    and self.client_id and self.client_secret)
+        return bool(self.organization_url and self.client_id
+                    and self.client_secret)
 
     @property
     def tenant(self) -> str:

{codee_agent-0.1.0 → codee_agent-0.2.0}/src/codee_tasks_azure_devops/provider.py

@@ -91,7 +91,7 @@ class AzureDevOpsTasksProvider(AbstractTasksProvider):
         connection = self._auth.connection() or {}
         account = connection.get("account") or "connected account"
         return (f"Azure DevOps {self._config.organization_url} "
-                f"(project {self._config.project}, assignee {account})")
+                f"(all projects, assignee {account})")
 
     def get_tasks(self, statuses: list[str]) -> list[Task]:
         """Fetch work items assigned to the connected account in the given states."""
@@ -120,8 +120,11 @@ class AzureDevOpsTasksProvider(AbstractTasksProvider):
                 for item_id in ids if item_id in by_id]
 
     def _query_work_item_ids(self, token: str, statuses: list[str]) -> list[int]:
+        # Organization-scoped, like the batch fetch below: the endpoint's
+        # project segment is optional, and leaving it off is what lets one query
+        # span every project the connected account can read.
         response = requests.post(
-            f"{self._config.organization_url}/{self._config.project}/_apis/wit/wiql",
+            f"{self._config.organization_url}/_apis/wit/wiql",
             params={"api-version": API_VERSION, "$top": _MAX_TASKS},
             json={"query": self._build_wiql(statuses)},
             headers=self._headers(token),
@@ -132,7 +135,14 @@ class AzureDevOpsTasksProvider(AbstractTasksProvider):
         return [item["id"] for item in work_items][:_BATCH_LIMIT]
 
     def _build_wiql(self, statuses: list[str]) -> str:
-        """WIQL for Codee work items owned by the connected account, highest priority first."""
+        """WIQL for Codee work items owned by the connected account, highest priority first.
+
+        Nothing here names a project, and no ``@project`` macro is used — that
+        is what keeps the query valid with no project in the route, so it spans
+        the organization. What comes back is still narrow: only the Codee work
+        item types, only the states asked for, and only what is assigned to the
+        connected account.
+        """
         quoted_statuses = ", ".join(_quote_wiql(status) for status in statuses)
         quoted_types = ", ".join(_quote_wiql(item_type)
                                  for item_type in _WORK_ITEM_TYPES)

{codee_agent-0.1.0 → codee_agent-0.2.0}/src/codee_tasks_azure_devops/test.py

@@ -18,7 +18,6 @@ from codee_tasks_azure_devops.provider import AzureDevOpsTasksProvider
 def _config(**overrides) -> OAuthConfig:
     values = {
         "organization_url": "https://dev.azure.com/acme",
-        "project": "Core",
         "tenant_id": "tenant-1",
         "client_id": "client-1",
         "client_secret": "secret-1",
@@ -39,16 +38,16 @@ def _iso(offset: timedelta) -> str:
     return (datetime.now(timezone.utc) + offset).isoformat()
 
 
+def _settings(**credentials) -> Settings:
+    return Settings(tasks_provider=TasksProvider.AZURE_DEVOPS,
+                    credentials={"azure_devops": credentials})
+
+
 class OAuthConfigTest(unittest.TestCase):
     def test_from_settings_reads_provider_credentials(self) -> None:
-        settings = Settings(
-            tasks_provider=TasksProvider.AZURE_DEVOPS,
-            credentials={"azure_devops": {
-                "organization_url": "https://dev.azure.com/acme/",
-                "project": "Core",
-                "client_id": "client-1",
-                "client_secret": "secret-1",
-            }})
+        settings = _settings(organization_url="https://dev.azure.com/acme/",
+                             client_id="client-1",
+                             client_secret="secret-1")
 
         config = OAuthConfig.from_settings(settings)
 
@@ -56,6 +55,16 @@ class OAuthConfigTest(unittest.TestCase):
         self.assertEqual(config.organization_url, "https://dev.azure.com/acme")
         self.assertTrue(config.is_complete())
 
+    def test_a_leftover_project_credential_is_ignored(self) -> None:
+        # Settings written when a project field still existed must not keep the
+        # queries narrowed to it; there is nothing left that reads the key.
+        config = OAuthConfig.from_settings(
+            _settings(organization_url="https://dev.azure.com/acme",
+                      project="Core", client_id="c", client_secret="s"))
+
+        self.assertTrue(config.is_complete())
+        self.assertNotIn("Core", str(config))
+
     def test_is_incomplete_without_a_secret(self) -> None:
         self.assertFalse(_config(client_secret="").is_complete())
 
@@ -299,15 +308,11 @@ class TasksProviderTest(unittest.TestCase):
         self._temporary = tempfile.TemporaryDirectory()
         self.addCleanup(self._temporary.cleanup)
         self.context = CodeeMainContext(data_dir=Path(self._temporary.name))
-        settings = Settings(
-            tasks_provider=TasksProvider.AZURE_DEVOPS,
-            credentials={"azure_devops": {
-                "organization_url": "https://dev.azure.com/acme",
-                "project": "Core",
-                "client_id": "client-1",
-                "client_secret": "secret-1",
-            }})
-        self.provider = AzureDevOpsTasksProvider(settings, self.context)
+        self.provider = AzureDevOpsTasksProvider(
+            _settings(organization_url="https://dev.azure.com/acme",
+                      client_id="client-1",
+                      client_secret="secret-1"),
+            self.context)
 
     def _connect(self) -> None:
         oauth_tokens.save_tokens(
@@ -328,6 +333,25 @@ class TasksProviderTest(unittest.TestCase):
         self.assertIn(
             "[System.WorkItemType] IN ('Codee Task', 'Codee Story')", wiql)
 
+    def test_wiql_names_no_project_at_all(self) -> None:
+        wiql = self.provider._build_wiql(["Ready"])
+
+        self.assertNotIn("System.TeamProject", wiql)
+        # @project would need a project in the route, which there isn't.
+        self.assertNotIn("@project", wiql)
+
+    def test_the_query_is_organization_scoped(self) -> None:
+        self._connect()
+        with patch("codee_tasks_azure_devops.provider.requests.post",
+                   side_effect=[_response({"workItems": []})]) as post:
+            self.provider.get_tasks(["Ready"])
+
+        self.assertEqual(post.call_args.args[0],
+                         "https://dev.azure.com/acme/_apis/wit/wiql")
+
+    def test_describe_says_the_query_covers_all_projects(self) -> None:
+        self.assertIn("all projects", self.provider.describe())
+
     def test_not_configured_until_oauth_completes(self) -> None:
         self.assertFalse(self.provider.is_configured())
         self._connect()