forgexa-cli 1.65.0__tar.gz → 1.65.2__tar.gz

{forgexa_cli-1.65.0 → forgexa_cli-1.65.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: forgexa-cli
-Version: 1.65.0
+Version: 1.65.2
 Summary: Forgexa CLI — command-line client and AI agent runtime for the Forgexa platform
 Author-email: Jason Sun <dev.winds@gmail.com>
 License-Expression: MIT

{forgexa_cli-1.65.0 → forgexa_cli-1.65.2}/forgexa_cli/__init__.py

@@ -1,2 +1,2 @@
 """forgexa-cli — Forgexa command-line client."""
-__version__ = "1.65.0"
+__version__ = "1.65.2"

{forgexa_cli-1.65.0 → forgexa_cli-1.65.2}/forgexa_cli/daemon.py

@@ -1234,7 +1234,7 @@ except (ImportError, ModuleNotFoundError):
 # DAEMON_VERSION is the protocol/logic version of the daemon code.
 # Kept in sync with pyproject.toml version via bump-version.sh.
 # CLIENT_TYPE identifies which packaging/distribution this daemon runs in.
-DAEMON_VERSION = "1.65.0"
+DAEMON_VERSION = "1.65.2"
 
 
 def _detect_client_type() -> str:
@@ -8494,7 +8494,7 @@ class ProcessManager:
         conventional `main` / `master` refs. Falls back to HEAD~1 if merge-base
         detection fails.
         """
-        info: dict[str, Any] = {}
+        info: dict[str, Any] = {"files_changed_verified": False}
         try:
             # Prefer the exact pre-node HEAD when available so the diff is
             # scoped to this node's work, not the whole requirement branch.
@@ -8531,8 +8531,11 @@ class ProcessManager:
                 **_agent_process_group_kwargs(),
             )
             stdout, _ = await asyncio.wait_for(proc.communicate(), timeout=10)
+            if proc.returncode != 0:
+                return info
             files = [f for f in stdout.decode().strip().split("\n") if f]
             info["files_changed"] = files
+            info["files_changed_verified"] = True
 
             # Lines added/removed since branch point
             proc2 = await _create_subprocess_exec(
@@ -10533,6 +10536,25 @@ def _parse_frozen_qa_test_level_policy(
     }, []
 
 
+def _qa_source_test_validation_required(snapshot: object) -> bool:
+    policy, issues = _parse_frozen_qa_test_level_policy(snapshot)
+    return bool(issues or (
+        policy is not None
+        and policy["enforcement"] == "enforce"
+        and any(not config["enabled"] for config in policy["levels"].values())
+    ))
+
+
+def _mark_qa_source_validation_unavailable(result: TaskResult) -> None:
+    result.status = "failed"
+    result.failure_code = "validation_retry_exhausted"
+    result.error = (
+        "qa_policy.validation_unavailable: source-test output validation could not be completed; "
+        "refusing to commit or push unvalidated changes."
+    )
+    result.metrics["validation_issues"] = [result.error]
+
+
 def _validate_enforced_qa_test_level_artifacts(
     policy: dict[str, Any],
     test_intent_data: object,
@@ -12799,19 +12821,18 @@ class RuntimeDaemon:
                     if result.metrics.get("validation_issues") is not None or True:
                         pre_commit_git = await self.process_manager._collect_git_info(workspace_path)
                 except Exception:
-                    logger.exception("Validation gate error for task %s (proceeding anyway)", task.task_id)
+                    if _qa_source_test_validation_required(
+                        (task.input_data or {}).get("qa_test_level_policy_snapshot")
+                    ):
+                        _mark_qa_source_validation_unavailable(result)
+                        logger.exception("Validation gate error for task %s (refusing to proceed)", task.task_id)
+                    else:
+                        logger.exception("Validation gate error for task %s (proceeding anyway)", task.task_id)
 
             if result.failure_code == "verification_work_item_scope_violation" and not is_local_bind:
                 await self._discard_verification_scope_changes(
                     workspace_path, task, result, node_before_sha,
                 )
-            elif result.failure_code == "validation_retry_exhausted" and not is_local_bind and any(
-                str(issue).startswith("qa_policy.source_test_level_disabled")
-                for issue in (result.metrics.get("validation_issues") or [])
-            ):
-                await self._discard_qa_policy_source_test_changes(
-                    workspace_path, task, result, node_before_sha,
-                )
 
             # 4.6 Post-validation rate-limit fallback.
             # _validate_and_retry returns early (preserving the rate-limit error)
@@ -13005,6 +13026,32 @@ class RuntimeDaemon:
                                 task.task_id, _aj_err,
                             )
 
+            if result.status == "success" and _qa_source_test_validation_required(
+                (task.input_data or {}).get("qa_test_level_policy_snapshot")
+            ):
+                previous_validation_retries = result.metrics.get("validation_retries_used", 0)
+                try:
+                    result = await self._validate_and_retry(
+                        agent, task, workspace_path, result, reporter, on_output_chunk,
+                        max_retries=0, default_branch=default_branch, before_sha=node_before_sha,
+                    )
+                except Exception:
+                    _mark_qa_source_validation_unavailable(result)
+                    logger.exception("Final QA source-test validation error for task %s", task.task_id)
+                result.metrics["validation_retries_used"] = previous_validation_retries
+
+            if result.failure_code == "validation_retry_exhausted" and not is_local_bind and any(
+                str(issue).startswith((
+                    "qa_policy.source_test_level_disabled",
+                    "qa_policy.source_change_inventory_unavailable",
+                    "qa_policy.validation_unavailable",
+                ))
+                for issue in (result.metrics.get("validation_issues") or [])
+            ):
+                await self._discard_qa_policy_source_test_changes(
+                    workspace_path, task, result, node_before_sha,
+                )
+
             # 5. Auto-commit and push if changes exist
             if result.status == "success" and not is_local_bind:
                 workspace_health_error = await self._workspace_checkout_health_error(
@@ -13468,7 +13515,7 @@ class RuntimeDaemon:
             input_data.get("qa_test_level_policy_snapshot")
         )
         issues.extend(qa_policy_issues)
-        if qa_policy is not None and node_type in ("coding", "fix", "testing"):
+        if qa_policy is not None:
             issues.extend(_validate_enforced_qa_source_test_paths(
                 qa_policy,
                 result.files_changed,
@@ -15353,14 +15400,19 @@ class RuntimeDaemon:
 
         Returns the (possibly updated) TaskResult.
         """
+        require_source_inventory = _qa_source_test_validation_required(
+            (task.input_data or {}).get("qa_test_level_policy_snapshot")
+        )
         for attempt in range(max_retries):
-            await self._refresh_validation_changed_paths(
+            inventory_issues = await self._refresh_validation_changed_paths(
                 workspace_path,
                 result,
                 default_branch=default_branch,
                 before_sha=before_sha,
             )
             issues = self._validate_outputs(workspace_path, task, result)
+            if require_source_inventory:
+                issues.extend(inventory_issues)
             if not issues:
                 self._record_testing_telemetry(
                     workspace_path, task, result, retries_used=attempt
@@ -15475,13 +15527,15 @@ class RuntimeDaemon:
                 return result
 
         # Final check after all retries
-        await self._refresh_validation_changed_paths(
+        inventory_issues = await self._refresh_validation_changed_paths(
             workspace_path,
             result,
             default_branch=default_branch,
             before_sha=before_sha,
         )
         remaining = self._validate_outputs(workspace_path, task, result)
+        if require_source_inventory:
+            remaining.extend(inventory_issues)
         if remaining:
             if getattr(task, "workspace_resolution", None) == "local_bind":
                 _append_local_bind_output_log(task.task_id, [
@@ -15572,11 +15626,12 @@ class RuntimeDaemon:
         *,
         default_branch: str,
         before_sha: str,
-    ) -> None:
+    ) -> list[str]:
         """Merge reported, working-tree, and already-committed task paths."""
         reported_paths = ProcessManager._normalize_repo_paths(result.files_changed)
         paths: set[str] = set()
         collected_paths = False
+        inventory_issues: list[str] = []
         try:
             status_output = await self.workspace_manager._git(
                 "status",
@@ -15590,6 +15645,9 @@ class RuntimeDaemon:
             ))
             collected_paths = True
         except Exception:
+            inventory_issues.append(
+                "qa_policy.source_change_inventory_unavailable: working-tree changed paths could not be verified."
+            )
             logger.debug(
                 "Could not collect working-tree paths for validation", exc_info=True,
             )
@@ -15600,15 +15658,27 @@ class RuntimeDaemon:
                     default_branch=default_branch,
                     before_sha=before_sha,
                 )
+                if committed_git.get("files_changed_verified") is False:
+                    inventory_issues.append(
+                        "qa_policy.source_change_inventory_unavailable: committed changed paths could not be verified."
+                    )
                 paths.update(ProcessManager._normalize_repo_paths(
                     committed_git.get("files_changed") or []
                 ))
                 collected_paths = True
             except Exception:
+                inventory_issues.append(
+                    "qa_policy.source_change_inventory_unavailable: committed changed paths could not be verified."
+                )
                 logger.debug(
                     "Could not collect committed paths for validation", exc_info=True,
                 )
+        else:
+            inventory_issues.append(
+                "qa_policy.source_change_inventory_unavailable: the pre-node commit baseline is unavailable."
+            )
         result.files_changed = sorted(paths if collected_paths else reported_paths)
+        return inventory_issues
 
     def _record_testing_telemetry(
         self, workspace_path: Path, task: TaskInfo, result: TaskResult, retries_used: int
@@ -15980,7 +16050,7 @@ class RuntimeDaemon:
         before_sha: str,
     ) -> None:
         """Discard cloud-worktree changes that violate disabled test levels."""
-        if task.node_type not in ("coding", "fix", "testing") or not before_sha:
+        if not before_sha or getattr(task, "workspace_resolution", None) == "local_bind":
             return
 
         policy, _ = _parse_frozen_qa_test_level_policy(
@@ -15997,18 +16067,25 @@ class RuntimeDaemon:
                 and not policy["levels"][level]["enabled"]
             )
         )
-        if not forbidden_paths:
+        unverified_changes = any(
+            str(issue).startswith((
+                "qa_policy.source_change_inventory_unavailable", "qa_policy.validation_unavailable",
+            ))
+            for issue in (result.metrics.get("validation_issues") or [])
+        )
+        if not forbidden_paths and not unverified_changes:
             return
 
         try:
             await self.workspace_manager._git(
                 "reset", "--hard", before_sha, cwd=workspace_path,
             )
-            await self.workspace_manager._git(
-                "clean", "-f", "--", *forbidden_paths, cwd=workspace_path,
-            )
+            if forbidden_paths:
+                await self.workspace_manager._git(
+                    "clean", "-f", "--", *forbidden_paths, cwd=workspace_path,
+                )
             logger.warning(
-                "Discarded disabled QA source-test changes for task %s: %s",
+                "Rolled back task %s after QA source-test validation failure: %s",
                 task.task_id,
                 forbidden_paths,
             )

{forgexa_cli-1.65.0 → forgexa_cli-1.65.2}/forgexa_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: forgexa-cli
-Version: 1.65.0
+Version: 1.65.2
 Summary: Forgexa CLI — command-line client and AI agent runtime for the Forgexa platform
 Author-email: Jason Sun <dev.winds@gmail.com>
 License-Expression: MIT

{forgexa_cli-1.65.0 → forgexa_cli-1.65.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "forgexa-cli"
-version = "1.65.0"
+version = "1.65.2"
 description = "Forgexa CLI — command-line client and AI agent runtime for the Forgexa platform"
 requires-python = ">=3.9"
 license = "MIT"