codee-agent 0.1.1__tar.gz → 0.3.0__tar.gz

{codee_agent-0.1.1 → codee_agent-0.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codee-agent
-Version: 0.1.1
+Version: 0.3.0
 Summary: A virtual co-worker that picks up Jira and Azure DevOps tasks and solves them with coding agents.
 Keywords: ai,agent,jira,azure-devops,claude-code,github-copilot,automation
 Author: Denis Kibalko

{codee_agent-0.1.1 → codee_agent-0.3.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "codee-agent"
-version = "0.1.1"
+version = "0.3.0"
 description = "A virtual co-worker that picks up Jira and Azure DevOps tasks and solves them with coding agents."
 readme = "README.md"
 license = "MIT"

{codee_agent-0.1.1 → codee_agent-0.3.0}/src/codee/admin.py

@@ -126,7 +126,6 @@ class AdminState(rx.State):
     jira_api_token: str = ""
     jira_project: str = ""
     azure_organization_url: str = ""
-    azure_project: str = ""
     azure_tenant_id: str = ""
     azure_client_id: str = ""
     azure_client_secret: str = ""
@@ -336,6 +335,11 @@ class AdminState(rx.State):
         return _save_toast(*SERVICE.save_agents(self.agents_content))
 
     def load_memories(self) -> None:
+        self.coding_agent = SERVICE.load_settings().coding_agent.value
+        if self.coding_agent == "github_copilot":
+            self.memories = []
+            self.selected_memory = ""
+            return
         self.memories = [MemoryEntry(**entry)
                          for entry in SERVICE.list_memories()]
 
@@ -484,7 +488,6 @@ class AdminState(rx.State):
         self.jira_api_token = jira.get("api_token", "")
         self.jira_project = jira.get("project", "")
         self.azure_organization_url = azure.get("organization_url", "")
-        self.azure_project = azure.get("project", "")
         self.azure_tenant_id = azure.get("tenant_id", "")
         self.azure_client_id = azure.get("client_id", "")
         self.azure_client_secret = azure.get("client_secret", "")
@@ -533,9 +536,6 @@ class AdminState(rx.State):
     def set_azure_organization_url(self, value: str) -> None:
         self.azure_organization_url = value
 
-    def set_azure_project(self, value: str) -> None:
-        self.azure_project = value
-
     def set_azure_tenant_id(self, value: str) -> None:
         self.azure_tenant_id = value
 
@@ -549,7 +549,7 @@ class AdminState(rx.State):
     def azure_can_connect(self) -> bool:
         """Everything the authorization request and the later queries need."""
         return all(value.strip() for value in (
-            self.azure_organization_url, self.azure_project,
+            self.azure_organization_url,
             self.azure_client_id, self.azure_client_secret))
 
     def connect_azure_devops(self) -> Any:
@@ -560,7 +560,7 @@ class AdminState(rx.State):
         """
         if not self.azure_can_connect:
             return rx.toast.error(
-                "Fill in organization URL, project, client ID and client secret first.")
+                "Fill in organization URL, client ID and client secret first.")
         error = self._persist_settings()
         if error:
             return rx.toast.error(error)
@@ -591,7 +591,6 @@ class AdminState(rx.State):
             if self.tasks_provider == "jira"
             else {
                 "organization_url": self.azure_organization_url,
-                "project": self.azure_project,
                 "tenant_id": self.azure_tenant_id,
                 "client_id": self.azure_client_id,
                 "client_secret": self.azure_client_secret,
@@ -611,6 +610,7 @@ class AdminState(rx.State):
 
 
 ACCENT = "var(--codee-accent)"
+ACCENT_DEEP = "var(--codee-accent-deep)"
 BORDER = "1px solid var(--codee-border)"
 MUTED = "var(--codee-muted)"
 SURFACE = "var(--codee-surface)"
@@ -712,23 +712,26 @@ def shell(content: rx.Component) -> rx.Component:
         color=TEXT,
         font_family="IBM Plex Sans, sans-serif",
         style={
-            "--codee-accent": rx.color_mode_cond("#167d5a", "#4abd85"),
-            "--codee-border": rx.color_mode_cond("#dfe4df", "#354039"),
-            "--codee-muted": rx.color_mode_cond("#68716b", "#a1ada5"),
-            "--codee-surface": rx.color_mode_cond("#ffffff", "#18201c"),
-            "--codee-page-background": rx.color_mode_cond("#f3f5f3", "#101512"),
-            "--codee-nav-background": rx.color_mode_cond("#f7f9f7", "#141b17"),
-            "--codee-text": rx.color_mode_cond("#202721", "#edf3ef"),
-            "--codee-hover": rx.color_mode_cond("#edf5f0", "#213029"),
-            "--codee-active": rx.color_mode_cond("#e2efe9", "#23372e"),
-            "--codee-grid": rx.color_mode_cond("#e4e9e5", "#2e3932"),
-            "--codee-subtle-icon": rx.color_mode_cond("#91a097", "#718078"),
-            "--codee-warning-background": rx.color_mode_cond("#fffbeb", "#332a13"),
-            "--codee-warning-border": rx.color_mode_cond("#d97706", "#f59e0b"),
+            "--codee-accent": rx.color_mode_cond("#2f6fd6", "#7aa9f0"),
+            # The darker half of the two-blue brand pairing, for filled marks
+            # that should recede behind the interactive blue (step markers).
+            "--codee-accent-deep": rx.color_mode_cond("#232c9b", "#5866de"),
+            "--codee-border": rx.color_mode_cond("#dbe1ec", "#2b3350"),
+            "--codee-muted": rx.color_mode_cond("#5d687f", "#a3adc4"),
+            "--codee-surface": rx.color_mode_cond("#ffffff", "#171d33"),
+            "--codee-page-background": rx.color_mode_cond("#f2f5fb", "#0e1224"),
+            "--codee-nav-background": rx.color_mode_cond("#f7f9fd", "#121729"),
+            "--codee-text": rx.color_mode_cond("#1b2440", "#e9edf7"),
+            "--codee-hover": rx.color_mode_cond("#edf3fc", "#1e2742"),
+            "--codee-active": rx.color_mode_cond("#e0eafb", "#24304f"),
+            "--codee-grid": rx.color_mode_cond("#e2e7f1", "#2a3350"),
+            "--codee-subtle-icon": rx.color_mode_cond("#8e99b0", "#6e7a94"),
+            "--codee-warning-background": rx.color_mode_cond("#fff5ed", "#33200f"),
+            "--codee-warning-border": rx.color_mode_cond("#e26128", "#f5854a"),
             # Tint reserved for in-flight work, so a live run reads at a glance.
-            "--codee-running-background": rx.color_mode_cond("#effaf4", "#15271f"),
+            "--codee-running-background": rx.color_mode_cond("#eff4fd", "#14203a"),
             "--codee-running-glow": rx.color_mode_cond(
-                "rgba(22, 125, 90, 0.16)", "rgba(74, 189, 133, 0.18)"),
+                "rgba(47, 111, 214, 0.16)", "rgba(122, 169, 240, 0.18)"),
             "color_scheme": "light dark",
         },
     )
@@ -894,13 +897,13 @@ def skill_card(skill: SkillSummary) -> rx.Component:
     return rx.box(
         rx.vstack(
             rx.hstack(rx.heading(skill.name, size="4"), rx.spacer(),
-                      rx.badge(skill.type, color_scheme="green", variant="soft"), width="100%"),
+                      rx.badge(skill.type, color_scheme="blue", variant="soft"), width="100%"),
             rx.text(skill.description, color=MUTED, font_size="0.9rem", min_height="2.7rem",
                     overflow="hidden"),
             rx.cond(
                 skill.issue_status != "",
                 rx.hstack(
-                    rx.badge(skill.issue_type, color_scheme="green",
+                    rx.badge(skill.issue_type, color_scheme="blue",
                              variant="outline"),
                     rx.icon("circle-dot", size=14, color=SUBTLE_ICON),
                     rx.text(skill.issue_status, color=MUTED,
@@ -1199,8 +1202,12 @@ def memory_page() -> rx.Component:
                                 memory_row), spacing="3", width="100%"),
                       empty_state("notebook-text", "No memories yet."))
     return shell(rx.vstack(page_header("Memory", "Review and maintain durable project context."),
-                           rx.cond(AdminState.selected_memory ==
-                                   "", listing, memory_editor()),
+                           rx.cond(AdminState.coding_agent == "github_copilot",
+                                   empty_state(
+                                       "notebook-text",
+                                       "Github Copilot currently does not support local memory"),
+                                   rx.cond(AdminState.selected_memory ==
+                                           "", listing, memory_editor())),
                            align="start", width="100%"))
 
 
@@ -1245,7 +1252,7 @@ def workflow_warning(message: rx.Var) -> rx.Component:
     return rx.callout(
         message,
         icon="triangle-alert",
-        color_scheme="amber",
+        color_scheme="orange",
         width="100%",
     )
 
@@ -1399,7 +1406,7 @@ def sessions_page() -> rx.Component:
 
 def azure_step(number: int, title: str, detail: rx.Component | str) -> rx.Component:
     return rx.hstack(
-        rx.box(str(number), color="white", background=ACCENT, min_width="1.4rem",
+        rx.box(str(number), color="white", background=ACCENT_DEEP, min_width="1.4rem",
                height="1.4rem", display="grid", place_items="center",
                border_radius="50%", font_size="0.75rem", font_weight="700"),
         rx.vstack(rx.text(title, font_weight="600", font_size="0.9rem"),
@@ -1443,7 +1450,7 @@ def azure_instructions() -> rx.Component:
                            "→ user_impersonation → Add. Entra publishes no read-only scope "
                            "for Azure DevOps; Codee only ever issues read calls, and you can "
                            "narrow it further by connecting with an account that has Readers "
-                           "access to the project."),
+                           "access to only the projects it should see."),
                 azure_step(4, "Create a client secret",
                            "Certificates & secrets → New client secret. Copy the Value "
                            "column immediately — Azure hides it once you leave the page."),
@@ -1485,9 +1492,10 @@ def azure_fields() -> rx.Component:
         field("Organization URL", rx.input(value=AdminState.azure_organization_url,
                                            on_change=AdminState.set_azure_organization_url,
                                            placeholder="https://dev.azure.com/your-org",
-                                           width="100%")),
-        field("Project", rx.input(value=AdminState.azure_project,
-                                  on_change=AdminState.set_azure_project, width="100%")),
+                                           width="100%"),
+              hint=rx.text("Work items are picked up from every project in this "
+                           "organization the connected account can read.",
+                           color=MUTED, font_size="0.8rem")),
         field("Application (client) ID", rx.input(value=AdminState.azure_client_id,
                                                   on_change=AdminState.set_azure_client_id,
                                                   width="100%")),
@@ -1640,10 +1648,10 @@ app = rx.App(
             "width": "6px",
         },
         ".workflow-route-node--forward .react-flow__handle": {
-            "background": "#167d5a",
+            "background": "#2f6fd6",
         },
         ".workflow-route-node--return .react-flow__handle": {
-            "background": "#d97706",
+            "background": "#e26128",
         },
     },
     stylesheets=[

{codee_agent-0.1.1 → codee_agent-0.3.0}/src/codee/admin_cli.py

@@ -22,8 +22,8 @@ config = rx.Config(
     plugins=[
         rx.plugins.RadixThemesPlugin(
             theme=rx.theme(
-                accent_color="green",
-                gray_color="sage",
+                accent_color="indigo",
+                gray_color="slate",
                 radius="small",
                 appearance="inherit",
             )

{codee_agent-0.1.1 → codee_agent-0.3.0}/src/codee/admin_service.py

@@ -1,4 +1,5 @@
 """Framework-independent operations for the Codee admin UI."""
+import hashlib
 import json
 import re
 import os
@@ -74,6 +75,9 @@ _CODING_AGENTS: dict[CodingAgent, type[AbstractCodingAgent]] = {
 }
 WORKFLOW_NODE_SPACING = 440
 WORKFLOW_NODE_CENTER_OFFSET = 110
+# Inferring the workflow costs a coding-agent run, so the graph is kept in the
+# data directory and reused by later admin processes.
+WORKFLOW_CACHE_FILE = "workflow.json"
 
 # Port the admin UI listens on unless ``codee-admin --port`` says otherwise.
 # The OAuth redirect URI is built from it, and Entra ID matches redirect URIs
@@ -199,6 +203,18 @@ def _transition_values(value: Any) -> list[dict[str, str]]:
     return transitions
 
 
+def _is_workflow(value: Any) -> bool:
+    """Whether a stored graph still has the shape the workflow page reads."""
+    if not isinstance(value, dict):
+        return False
+    return all(
+        isinstance(value.get(issue_type), dict)
+        and all(isinstance(value[issue_type].get(key), list)
+                for key in ("nodes", "edges", "warnings"))
+        for issue_type in ISSUE_TYPES
+    )
+
+
 def _remove_redundant_skill_transitions(
     transitions: list[dict[str, str]],
 ) -> list[dict[str, str]]:
@@ -247,7 +263,8 @@ class AdminService:
         self.data_dir.mkdir(parents=True, exist_ok=True)
         self.context = CodeeMainContext(data_dir=self.data_dir)
         self.context.settings = load_settings(self.data_dir)
-        self._workflow_cache: dict[str, Any] | None = None
+        # Cached graph plus the skill fingerprint it was generated from.
+        self._workflow_cache: tuple[str, dict[str, Any]] | None = None
         self._workflow_lock = threading.Lock()
         # Asking an agent for its catalog can mean spawning its CLI, so the
         # answer is cached per agent for the life of the process.
@@ -343,16 +360,73 @@ class AdminService:
         return ""
 
     def generate_workflow(self, force: bool = False) -> dict[str, Any]:
-        """Return cached workflows by issue type, regenerating when requested."""
+        """Return cached workflows by issue type, regenerating when requested.
+
+        The cache outlives the admin process: it is stored in the data
+        directory under the fingerprint of the skill documents the graph was
+        inferred from, so a restart reuses it while an edited skill still
+        regenerates it.
+        """
         workflow_lock = getattr(self, "_workflow_lock", None)
         if workflow_lock is None:
             workflow_lock = self._workflow_lock = threading.Lock()
         with workflow_lock:
-            workflow_cache = getattr(self, "_workflow_cache", None)
-            if not force and workflow_cache is not None:
-                return workflow_cache
-            self._workflow_cache = self._generate_workflow()
-            return self._workflow_cache
+            fingerprint = self._workflow_fingerprint()
+            if not force:
+                cached = self._cached_workflow(fingerprint)
+                if cached is not None:
+                    return cached
+            workflow = self._generate_workflow()
+            self._workflow_cache = (fingerprint, workflow)
+            self._store_workflow(fingerprint, workflow)
+            return workflow
+
+    def _workflow_fingerprint(self) -> str:
+        """Digest the skill documents the workflow graph is inferred from."""
+        digest = hashlib.sha256()
+        for skill in find_issue_triggered_skills(self.skills_dir):
+            digest.update(skill.slug.encode())
+            digest.update(b"\0")
+            digest.update(skill.path.read_bytes())
+            digest.update(b"\0")
+        return digest.hexdigest()
+
+    def _workflow_cache_path(self) -> Path:
+        return self.data_dir / WORKFLOW_CACHE_FILE
+
+    def _cached_workflow(self, fingerprint: str) -> dict[str, Any] | None:
+        """This process's graph, else the one an earlier process stored."""
+        cached = getattr(self, "_workflow_cache", None)
+        if cached is not None and cached[0] == fingerprint:
+            return cached[1]
+        try:
+            stored = json.loads(self._workflow_cache_path().read_text())
+        except FileNotFoundError:
+            return None
+        except (OSError, ValueError) as error:
+            print(f"[admin] Ignoring unreadable workflow cache: {error}")
+            return None
+        if not isinstance(stored, dict) or stored.get("fingerprint") != fingerprint:
+            return None
+        workflow = stored.get("workflow")
+        if not _is_workflow(workflow):
+            return None
+        self._workflow_cache = (fingerprint, workflow)
+        return workflow
+
+    def _store_workflow(self, fingerprint: str, workflow: dict[str, Any]) -> None:
+        """Persist the graph for the next admin process; failing is not fatal."""
+        path = self._workflow_cache_path()
+        pending = path.with_suffix(".tmp")
+        try:
+            path.parent.mkdir(parents=True, exist_ok=True)
+            pending.write_text(json.dumps(
+                {"fingerprint": fingerprint, "workflow": workflow}))
+            # Replace in one step so a crash mid-write cannot leave a
+            # half-written cache behind.
+            pending.replace(path)
+        except OSError as error:
+            print(f"[admin] Failed to store workflow cache: {error}")
 
     def _generate_workflow(self) -> dict[str, Any]:
         """Infer separate status graphs for story and task skills."""
@@ -949,8 +1023,8 @@ class AdminService:
         """
         config = azure_oauth.OAuthConfig.from_settings(self.load_settings())
         if not config.is_complete():
-            return False, ("Fill in organization URL, project, client ID and "
-                           "client secret before connecting.")
+            return False, ("Fill in organization URL, client ID and client "
+                           "secret before connecting.")
         state = azure_oauth.new_state()
         code_verifier = azure_oauth.new_code_verifier()
         redirect_uri = self.azure_redirect_uri()

{codee_agent-0.1.1 → codee_agent-0.3.0}/src/codee/test_admin_service.py

@@ -15,6 +15,25 @@ from codee_main_context.context import (
     CodeeMainContext, CodingAgent, Settings, TasksProvider, save_settings)
 
 
+def _empty_workflow() -> dict:
+    return {issue_type: {"nodes": [], "edges": [], "warnings": []}
+            for issue_type in ("story", "task")}
+
+
+def _write_issue_skill(root: Path) -> Path:
+    """Create one issue-trigger skill, the input the workflow cache is keyed on."""
+    skills_dir = root / ".claude" / "skills"
+    skill_dir = skills_dir / "develop"
+    skill_dir.mkdir(parents=True)
+    (skill_dir / "SKILL.md").write_text(
+        "---\nname: develop\ndisable-model-invocation: true\n"
+        "x-codee-trigger: issue\nx-codee-issue-status: [Ready]\n"
+        "x-codee-issue-type: story\n---\n"
+        "After implementation, move the issue to Review.\n"
+    )
+    return skills_dir
+
+
 class AdminServiceIssueTriggerTest(unittest.TestCase):
     def test_list_skills_includes_issue_status(self) -> None:
         with tempfile.TemporaryDirectory() as temporary_directory:
@@ -227,6 +246,7 @@ class AdminServiceIssueTriggerTest(unittest.TestCase):
             service = AdminService.__new__(AdminService)
             service.root = root
             service.skills_dir = skills_dir
+            service.data_dir = root / ".codee"
             service.context = Mock(settings=Settings(
                 coding_agent=CodingAgent.CLAUDE_CODE))
 
@@ -315,6 +335,7 @@ class AdminServiceIssueTriggerTest(unittest.TestCase):
             service = AdminService.__new__(AdminService)
             service.root = root
             service.skills_dir = skills_dir
+            service.data_dir = root / ".codee"
             service.context = Mock(
                 settings=Settings(coding_agent=CodingAgent.CLAUDE_CODE))
 
@@ -356,6 +377,7 @@ class AdminServiceIssueTriggerTest(unittest.TestCase):
             service = AdminService.__new__(AdminService)
             service.root = root
             service.skills_dir = skills_dir
+            service.data_dir = root / ".codee"
             service.context = Mock(
                 settings=Settings(coding_agent=CodingAgent.CLAUDE_CODE))
 
@@ -406,6 +428,7 @@ class AdminServiceIssueTriggerTest(unittest.TestCase):
             service = AdminService.__new__(AdminService)
             service.root = root
             service.skills_dir = skills_dir
+            service.data_dir = root / ".codee"
             service.context = Mock(
                 settings=Settings(coding_agent=CodingAgent.CLAUDE_CODE))
 
@@ -462,6 +485,7 @@ class AdminServiceIssueTriggerTest(unittest.TestCase):
             service = AdminService.__new__(AdminService)
             service.root = root
             service.skills_dir = skills_dir
+            service.data_dir = root / ".codee"
             service.context = Mock(
                 settings=Settings(coding_agent=CodingAgent.CLAUDE_CODE))
 
@@ -501,6 +525,7 @@ class AdminServiceIssueTriggerTest(unittest.TestCase):
             service = AdminService.__new__(AdminService)
             service.root = root
             service.skills_dir = skills_dir
+            service.data_dir = root / ".codee"
             service.context = Mock(
                 settings=Settings(coding_agent=CodingAgent.CLAUDE_CODE))
 
@@ -518,8 +543,10 @@ class AdminServiceIssueTriggerTest(unittest.TestCase):
 
     def test_generate_workflow_returns_empty_without_issue_skills(self) -> None:
         with tempfile.TemporaryDirectory() as temporary_directory:
+            root = Path(temporary_directory)
             service = AdminService.__new__(AdminService)
-            service.skills_dir = Path(temporary_directory)
+            service.skills_dir = root
+            service.data_dir = root / ".codee"
 
             self.assertEqual(service.generate_workflow(), {
                 "story": {"nodes": [], "edges": [], "warnings": []},
@@ -527,15 +554,92 @@ class AdminServiceIssueTriggerTest(unittest.TestCase):
             })
 
     def test_generate_workflow_is_cached_until_forced(self) -> None:
-        service = AdminService.__new__(AdminService)
-        generated = {"nodes": [], "edges": [], "warnings": []}
+        with tempfile.TemporaryDirectory() as temporary_directory:
+            root = Path(temporary_directory)
+            service = AdminService.__new__(AdminService)
+            service.skills_dir = root / ".claude" / "skills"
+            service.data_dir = root / ".codee"
+            generated = _empty_workflow()
+
+            with patch.object(service, "_generate_workflow",
+                              return_value=generated) as generate:
+                self.assertIs(service.generate_workflow(), generated)
+                self.assertIs(service.generate_workflow(), generated)
+                self.assertIs(service.generate_workflow(force=True), generated)
+
+            self.assertEqual(generate.call_count, 2)
+
+    def test_generate_workflow_reuses_graph_stored_by_an_earlier_process(self) -> None:
+        with tempfile.TemporaryDirectory() as temporary_directory:
+            root = Path(temporary_directory)
+            skills_dir = _write_issue_skill(root)
+            generated = _empty_workflow()
+            generated["story"]["warnings"] = ["stored"]
+
+            first = AdminService.__new__(AdminService)
+            first.skills_dir = skills_dir
+            first.data_dir = root / ".codee"
+            with patch.object(first, "_generate_workflow", return_value=generated):
+                first.generate_workflow()
+
+            # A restart starts from an empty in-memory cache, so only the file
+            # written above can spare it another coding-agent run.
+            restarted = AdminService.__new__(AdminService)
+            restarted.skills_dir = skills_dir
+            restarted.data_dir = root / ".codee"
+            with patch.object(restarted, "_generate_workflow") as generate:
+                workflow = restarted.generate_workflow()
 
-        with patch.object(service, "_generate_workflow", return_value=generated) as generate:
-            self.assertIs(service.generate_workflow(), generated)
-            self.assertIs(service.generate_workflow(), generated)
-            self.assertIs(service.generate_workflow(force=True), generated)
+            generate.assert_not_called()
+            self.assertEqual(workflow["story"]["warnings"], ["stored"])
+
+    def test_generate_workflow_ignores_stored_graph_after_a_skill_changes(self) -> None:
+        with tempfile.TemporaryDirectory() as temporary_directory:
+            root = Path(temporary_directory)
+            skills_dir = _write_issue_skill(root)
+
+            first = AdminService.__new__(AdminService)
+            first.skills_dir = skills_dir
+            first.data_dir = root / ".codee"
+            with patch.object(first, "_generate_workflow",
+                              return_value=_empty_workflow()):
+                first.generate_workflow()
+
+            (skills_dir / "develop" / "SKILL.md").write_text(
+                "---\nname: develop\ndisable-model-invocation: true\n"
+                "x-codee-trigger: issue\nx-codee-issue-status: [Ready]\n"
+                "x-codee-issue-type: story\n---\n"
+                "After implementation, move the issue to Done.\n"
+            )
+            regenerated = _empty_workflow()
+            regenerated["story"]["warnings"] = ["regenerated"]
+            restarted = AdminService.__new__(AdminService)
+            restarted.skills_dir = skills_dir
+            restarted.data_dir = root / ".codee"
+            with patch.object(restarted, "_generate_workflow",
+                              return_value=regenerated) as generate:
+                workflow = restarted.generate_workflow()
+
+            generate.assert_called_once_with()
+            self.assertEqual(workflow["story"]["warnings"], ["regenerated"])
+
+    def test_generate_workflow_ignores_a_corrupt_stored_graph(self) -> None:
+        with tempfile.TemporaryDirectory() as temporary_directory:
+            root = Path(temporary_directory)
+            skills_dir = _write_issue_skill(root)
+            data_dir = root / ".codee"
+            data_dir.mkdir()
+            (data_dir / "workflow.json").write_text("{ not json")
+
+            service = AdminService.__new__(AdminService)
+            service.skills_dir = skills_dir
+            service.data_dir = data_dir
+            generated = _empty_workflow()
+            with patch.object(service, "_generate_workflow",
+                              return_value=generated) as generate:
+                self.assertIs(service.generate_workflow(), generated)
 
-        self.assertEqual(generate.call_count, 2)
+            generate.assert_called_once_with()
 
 
 class AdminServiceSkillModelTest(unittest.TestCase):
@@ -781,7 +885,6 @@ class AzureDevOpsOAuthTest(unittest.TestCase):
 
     AZURE_CREDENTIALS = {
         "organization_url": "https://dev.azure.com/acme",
-        "project": "Core",
         "tenant_id": "tenant-1",
         "client_id": "client-1",
         "client_secret": "secret-1",

{codee_agent-0.1.1 → codee_agent-0.3.0}/src/codee/test_executor.py

@@ -55,7 +55,6 @@ class RefreshConfigTest(unittest.TestCase):
             tasks_provider=TasksProvider.AZURE_DEVOPS,
             credentials={TasksProvider.AZURE_DEVOPS.value: {
                 "organization_url": "https://dev.azure.com/acme",
-                "project": "Core",
                 "tenant_id": "tenant-1",
                 "client_id": "client-1",
                 "client_secret": "secret-1",
@@ -104,7 +103,8 @@ class RefreshConfigTest(unittest.TestCase):
 
         self._save(
             tasks_provider=TasksProvider.AZURE_DEVOPS,
-            credentials={TasksProvider.AZURE_DEVOPS.value: {"project": "Core"}},
+            credentials={TasksProvider.AZURE_DEVOPS.value: {
+                "organization_url": "https://dev.azure.com/acme"}},
         )
         with patch.dict(executor._TASKS_PROVIDERS,
                         {TasksProvider.AZURE_DEVOPS: _Exploding}):

{codee_agent-0.1.1 → codee_agent-0.3.0}/src/codee_main_context/context.py

@@ -59,9 +59,10 @@ TASKS_PROVIDER_FIELDS: dict[TasksProvider, list[CredentialField]] = {
     # Azure DevOps authenticates through an Entra ID app registration, so the
     # stored credentials describe the app; the tokens it yields live in SQLite
     # (codee_database.oauth_tokens) rather than in settings.json.
+    # There is no project field: work items are queried across the whole
+    # organization, which is the scope the granted access has anyway.
     TasksProvider.AZURE_DEVOPS: [
         CredentialField("organization_url", "Organization URL"),
-        CredentialField("project", "Project"),
         CredentialField("tenant_id", "Directory (tenant) ID"),
         CredentialField("client_id", "Application (client) ID"),
         CredentialField("client_secret", "Client secret", secret=True),

{codee_agent-0.1.1 → codee_agent-0.3.0}/src/codee_tasks_azure_devops/oauth.py

@@ -64,10 +64,14 @@ class AzureDevOpsAuthError(RuntimeError):
 
 @dataclass(frozen=True)
 class OAuthConfig:
-    """The Entra app registration, as captured in settings.json."""
+    """The Entra app registration, as captured in settings.json.
+
+    There is no project here: queries run across the whole organization. A
+    project would only ever have been a filter — the access Entra grants covers
+    the organization however it is set.
+    """
 
     organization_url: str = ""
-    project: str = ""
     tenant_id: str = ""
     client_id: str = ""
     client_secret: str = ""
@@ -77,7 +81,6 @@ class OAuthConfig:
         creds = settings.credentials.get(PROVIDER, {})
         return cls(
             organization_url=(creds.get("organization_url") or "").strip().rstrip("/"),
-            project=(creds.get("project") or "").strip(),
             tenant_id=(creds.get("tenant_id") or "").strip(),
             client_id=(creds.get("client_id") or "").strip(),
             client_secret=(creds.get("client_secret") or "").strip(),
@@ -85,8 +88,8 @@ class OAuthConfig:
 
     def is_complete(self) -> bool:
         """Whether we have everything needed to run the flow and query tasks."""
-        return bool(self.organization_url and self.project
-                    and self.client_id and self.client_secret)
+        return bool(self.organization_url and self.client_id
+                    and self.client_secret)
 
     @property
     def tenant(self) -> str:

{codee_agent-0.1.1 → codee_agent-0.3.0}/src/codee_tasks_azure_devops/provider.py

@@ -91,7 +91,7 @@ class AzureDevOpsTasksProvider(AbstractTasksProvider):
         connection = self._auth.connection() or {}
         account = connection.get("account") or "connected account"
         return (f"Azure DevOps {self._config.organization_url} "
-                f"(project {self._config.project}, assignee {account})")
+                f"(all projects, assignee {account})")
 
     def get_tasks(self, statuses: list[str]) -> list[Task]:
         """Fetch work items assigned to the connected account in the given states."""
@@ -120,8 +120,11 @@ class AzureDevOpsTasksProvider(AbstractTasksProvider):
                 for item_id in ids if item_id in by_id]
 
     def _query_work_item_ids(self, token: str, statuses: list[str]) -> list[int]:
+        # Organization-scoped, like the batch fetch below: the endpoint's
+        # project segment is optional, and leaving it off is what lets one query
+        # span every project the connected account can read.
         response = requests.post(
-            f"{self._config.organization_url}/{self._config.project}/_apis/wit/wiql",
+            f"{self._config.organization_url}/_apis/wit/wiql",
             params={"api-version": API_VERSION, "$top": _MAX_TASKS},
             json={"query": self._build_wiql(statuses)},
             headers=self._headers(token),
@@ -132,7 +135,14 @@ class AzureDevOpsTasksProvider(AbstractTasksProvider):
         return [item["id"] for item in work_items][:_BATCH_LIMIT]
 
     def _build_wiql(self, statuses: list[str]) -> str:
-        """WIQL for Codee work items owned by the connected account, highest priority first."""
+        """WIQL for Codee work items owned by the connected account, highest priority first.
+
+        Nothing here names a project, and no ``@project`` macro is used — that
+        is what keeps the query valid with no project in the route, so it spans
+        the organization. What comes back is still narrow: only the Codee work
+        item types, only the states asked for, and only what is assigned to the
+        connected account.
+        """
         quoted_statuses = ", ".join(_quote_wiql(status) for status in statuses)
         quoted_types = ", ".join(_quote_wiql(item_type)
                                  for item_type in _WORK_ITEM_TYPES)

{codee_agent-0.1.1 → codee_agent-0.3.0}/src/codee_tasks_azure_devops/test.py

@@ -18,7 +18,6 @@ from codee_tasks_azure_devops.provider import AzureDevOpsTasksProvider
 def _config(**overrides) -> OAuthConfig:
     values = {
         "organization_url": "https://dev.azure.com/acme",
-        "project": "Core",
         "tenant_id": "tenant-1",
         "client_id": "client-1",
         "client_secret": "secret-1",
@@ -39,16 +38,16 @@ def _iso(offset: timedelta) -> str:
     return (datetime.now(timezone.utc) + offset).isoformat()
 
 
+def _settings(**credentials) -> Settings:
+    return Settings(tasks_provider=TasksProvider.AZURE_DEVOPS,
+                    credentials={"azure_devops": credentials})
+
+
 class OAuthConfigTest(unittest.TestCase):
     def test_from_settings_reads_provider_credentials(self) -> None:
-        settings = Settings(
-            tasks_provider=TasksProvider.AZURE_DEVOPS,
-            credentials={"azure_devops": {
-                "organization_url": "https://dev.azure.com/acme/",
-                "project": "Core",
-                "client_id": "client-1",
-                "client_secret": "secret-1",
-            }})
+        settings = _settings(organization_url="https://dev.azure.com/acme/",
+                             client_id="client-1",
+                             client_secret="secret-1")
 
         config = OAuthConfig.from_settings(settings)
 
@@ -56,6 +55,16 @@ class OAuthConfigTest(unittest.TestCase):
         self.assertEqual(config.organization_url, "https://dev.azure.com/acme")
         self.assertTrue(config.is_complete())
 
+    def test_a_leftover_project_credential_is_ignored(self) -> None:
+        # Settings written when a project field still existed must not keep the
+        # queries narrowed to it; there is nothing left that reads the key.
+        config = OAuthConfig.from_settings(
+            _settings(organization_url="https://dev.azure.com/acme",
+                      project="Core", client_id="c", client_secret="s"))
+
+        self.assertTrue(config.is_complete())
+        self.assertNotIn("Core", str(config))
+
     def test_is_incomplete_without_a_secret(self) -> None:
         self.assertFalse(_config(client_secret="").is_complete())
 
@@ -299,15 +308,11 @@ class TasksProviderTest(unittest.TestCase):
         self._temporary = tempfile.TemporaryDirectory()
         self.addCleanup(self._temporary.cleanup)
         self.context = CodeeMainContext(data_dir=Path(self._temporary.name))
-        settings = Settings(
-            tasks_provider=TasksProvider.AZURE_DEVOPS,
-            credentials={"azure_devops": {
-                "organization_url": "https://dev.azure.com/acme",
-                "project": "Core",
-                "client_id": "client-1",
-                "client_secret": "secret-1",
-            }})
-        self.provider = AzureDevOpsTasksProvider(settings, self.context)
+        self.provider = AzureDevOpsTasksProvider(
+            _settings(organization_url="https://dev.azure.com/acme",
+                      client_id="client-1",
+                      client_secret="secret-1"),
+            self.context)
 
     def _connect(self) -> None:
         oauth_tokens.save_tokens(
@@ -328,6 +333,25 @@ class TasksProviderTest(unittest.TestCase):
         self.assertIn(
             "[System.WorkItemType] IN ('Codee Task', 'Codee Story')", wiql)
 
+    def test_wiql_names_no_project_at_all(self) -> None:
+        wiql = self.provider._build_wiql(["Ready"])
+
+        self.assertNotIn("System.TeamProject", wiql)
+        # @project would need a project in the route, which there isn't.
+        self.assertNotIn("@project", wiql)
+
+    def test_the_query_is_organization_scoped(self) -> None:
+        self._connect()
+        with patch("codee_tasks_azure_devops.provider.requests.post",
+                   side_effect=[_response({"workItems": []})]) as post:
+            self.provider.get_tasks(["Ready"])
+
+        self.assertEqual(post.call_args.args[0],
+                         "https://dev.azure.com/acme/_apis/wit/wiql")
+
+    def test_describe_says_the_query_covers_all_projects(self) -> None:
+        self.assertIn("all projects", self.provider.describe())
+
     def test_not_configured_until_oauth_completes(self) -> None:
         self.assertFalse(self.provider.is_configured())
         self._connect()