lemming-cli 0.5.0__tar.gz → 0.5.2__tar.gz

lemming_cli-0.5.0/README.md → lemming_cli-0.5.2/PKG-INFO

@@ -1,3 +1,26 @@
+Metadata-Version: 2.5
+Name: lemming-cli
+Version: 0.5.2
+Summary: An autonomous, iterative task runner for AI coding agents.
+Project-URL: Homepage, https://github.com/owahltinez/lemming
+Project-URL: Repository, https://github.com/owahltinez/lemming
+Author: Lemming Contributors
+License: MIT
+License-File: LICENSE
+Keywords: agents,ai,antigravity,automation,claude,opencode
+Requires-Python: >=3.12
+Requires-Dist: beautifulsoup4>=4.13.3
+Requires-Dist: click-agentcli>=0.4.1
+Requires-Dist: click>=8.0.0
+Requires-Dist: fastapi>=0.124.4
+Requires-Dist: markdownify>=0.14.1
+Requires-Dist: pydantic>=2.12.5
+Requires-Dist: pyyaml>=6.0.3
+Requires-Dist: readability-cli>=0.10.0
+Requires-Dist: requests>=2.32.3
+Requires-Dist: uvicorn>=0.33.0
+Description-Content-Type: text/markdown
+
 # Lemming 🐹
 
 **The transparent, tool-agnostic orchestrator for autonomous AI coding agents.**
@@ -121,6 +144,14 @@ lemming exec "Add pagination to the tasks API" --review all
 which is resolved to the files it changed. It defaults to uncommitted work, or
 to the whole tree outside a git repository.
 
+Reviews may edit the working directory. The built-in readability review
+intentionally applies fixes, and testing may repair production code or tests.
+UX is instructed to remain advisory, but its prompt and `--no-yolo` do not
+enforce filesystem isolation. A global review override may perform any actions
+its prompt requests. When isolation is required, follow the working-copy
+guidance below and pass a separate VCS-managed working copy with
+`lemming -C <working-copy> exec --review ...`.
+
 Each run is self-contained: nothing is read from the project's roadmap or its
 local hooks, it runs only the requested task and reviews, and its state
 directory is removed unless it failed — in which case it is kept, and its path
@@ -261,13 +292,15 @@ Lemming comes with several built-in hooks to help manage your project:
   unnecessary complexity and duplicate implementations, then reviews changes for
   adherence to the Google Style Guide and general readability using the
   [readability](https://github.com/owahltinez/readability) tool (exposed as
-  `lemming readability`). It can record findings as task progress or suggest
-  follow-up refactoring tasks.
+  `lemming readability`). It intentionally applies automated and targeted fixes
+  in the working directory and records broader findings as task progress.
 - **`testing`**: Verifies that changed behavior has focused test coverage and
-  that the relevant tests pass.
+  that the relevant tests pass. It may repair small, targeted problems in
+  production code or tests and may add, merge, or remove tests.
 - **`ux`**: Reviews at most one critical user journey affected by a user-visible
   change. It reports only concrete, reproducible continuity gaps and exits
-  immediately for non-user-facing tasks.
+  immediately for non-user-facing tasks. Its prompt instructs the agent to stay
+  advisory, but this is not sandbox-enforced.
 
 ### Custom and Global Hooks
 
@@ -409,7 +442,8 @@ These come before the subcommand and apply to all of them.
     `add`, there is no length cap.
   - `--review <names>`: Reviews to run after the task, comma-separated or
     repeated; `all` selects every one. With no description, only the reviews
-    run. Hooks that revise the roadmap cannot be selected.
+    run. Reviews may edit the working directory. Hooks that revise the roadmap
+    cannot be selected.
   - `--scope <path|range>`: What the reviews look at. Paths pass through; a git
     revision range is resolved to the files it changed. Defaults to uncommitted
     work, or the whole tree outside a repository.

lemming_cli-0.5.0/PKG-INFO → lemming_cli-0.5.2/README.md

@@ -1,26 +1,3 @@
-Metadata-Version: 2.5
-Name: lemming-cli
-Version: 0.5.0
-Summary: An autonomous, iterative task runner for AI coding agents.
-Project-URL: Homepage, https://github.com/owahltinez/lemming
-Project-URL: Repository, https://github.com/owahltinez/lemming
-Author: Lemming Contributors
-License: MIT
-License-File: LICENSE
-Keywords: agents,ai,antigravity,automation,claude,opencode
-Requires-Python: >=3.12
-Requires-Dist: beautifulsoup4>=4.13.3
-Requires-Dist: click-agentcli>=0.3.0
-Requires-Dist: click>=8.0.0
-Requires-Dist: fastapi>=0.124.4
-Requires-Dist: markdownify>=0.14.1
-Requires-Dist: pydantic>=2.12.5
-Requires-Dist: pyyaml>=6.0.3
-Requires-Dist: readability-cli>=0.9.0
-Requires-Dist: requests>=2.32.3
-Requires-Dist: uvicorn>=0.33.0
-Description-Content-Type: text/markdown
-
 # Lemming 🐹
 
 **The transparent, tool-agnostic orchestrator for autonomous AI coding agents.**
@@ -144,6 +121,14 @@ lemming exec "Add pagination to the tasks API" --review all
 which is resolved to the files it changed. It defaults to uncommitted work, or
 to the whole tree outside a git repository.
 
+Reviews may edit the working directory. The built-in readability review
+intentionally applies fixes, and testing may repair production code or tests.
+UX is instructed to remain advisory, but its prompt and `--no-yolo` do not
+enforce filesystem isolation. A global review override may perform any actions
+its prompt requests. When isolation is required, follow the working-copy
+guidance below and pass a separate VCS-managed working copy with
+`lemming -C <working-copy> exec --review ...`.
+
 Each run is self-contained: nothing is read from the project's roadmap or its
 local hooks, it runs only the requested task and reviews, and its state
 directory is removed unless it failed — in which case it is kept, and its path
@@ -284,13 +269,15 @@ Lemming comes with several built-in hooks to help manage your project:
   unnecessary complexity and duplicate implementations, then reviews changes for
   adherence to the Google Style Guide and general readability using the
   [readability](https://github.com/owahltinez/readability) tool (exposed as
-  `lemming readability`). It can record findings as task progress or suggest
-  follow-up refactoring tasks.
+  `lemming readability`). It intentionally applies automated and targeted fixes
+  in the working directory and records broader findings as task progress.
 - **`testing`**: Verifies that changed behavior has focused test coverage and
-  that the relevant tests pass.
+  that the relevant tests pass. It may repair small, targeted problems in
+  production code or tests and may add, merge, or remove tests.
 - **`ux`**: Reviews at most one critical user journey affected by a user-visible
   change. It reports only concrete, reproducible continuity gaps and exits
-  immediately for non-user-facing tasks.
+  immediately for non-user-facing tasks. Its prompt instructs the agent to stay
+  advisory, but this is not sandbox-enforced.
 
 ### Custom and Global Hooks
 
@@ -432,7 +419,8 @@ These come before the subcommand and apply to all of them.
     `add`, there is no length cap.
   - `--review <names>`: Reviews to run after the task, comma-separated or
     repeated; `all` selects every one. With no description, only the reviews
-    run. Hooks that revise the roadmap cannot be selected.
+    run. Reviews may edit the working directory. Hooks that revise the roadmap
+    cannot be selected.
   - `--scope <path|range>`: What the reviews look at. Paths pass through; a git
     revision range is resolved to the files it changed. Defaults to uncommitted
     work, or the whole tree outside a repository.

{lemming_cli-0.5.0 → lemming_cli-0.5.2}/SKILL.md

@@ -136,8 +136,12 @@ lemming -C /tmp/pr-123 exec --review testing --scope main...HEAD
 which is resolved to the files it changed. It defaults to uncommitted work, and
 a clean tree stops the run rather than reviewing everything.
 
-Reviews **edit the workspace** — readability applies fixes and reruns checks.
-That is the point, but it means a review is not read-only.
+Reviews may edit the working directory. Readability intentionally applies fixes,
+and testing may repair production code or tests. UX is instructed to remain
+advisory, but its prompt and `--no-yolo` do not enforce filesystem isolation. A
+global review override may perform any actions its prompt requests. When
+isolation is required, use a separate VCS-managed working copy and pass it with
+the global `-C` option, as in the example above.
 
 ## Drive a roadmap
 

{lemming_cli-0.5.0 → lemming_cli-0.5.2}/docs/HOOKS.md

@@ -54,20 +54,34 @@ a broad task).
 A code quality and simplification hook that challenges unnecessary complexity,
 indirection, and duplicated implementations before reviewing changes for
 adherence to the Google Style Guide and general readability using the bundled
-`lemming readability` tool. It provides feedback via task progress or suggests
-follow-up refactoring tasks.
+`lemming readability` tool. It intentionally applies automated and targeted
+fixes in the working directory and records broader findings as task progress.
 
 ### `testing`
 
 Checks that changed behavior has focused test coverage and runs the relevant
-tests. It records larger testing gaps as task progress for the roadmap hook.
+tests. It may repair small, targeted problems in production code or tests and
+may add, merge, or remove tests. It records larger testing gaps as task progress
+for the roadmap hook.
 
 ### `ux`
 
 A lightweight journey-continuity review for user-visible changes. It considers
 at most one affected critical journey, reports only concrete and reproducible
 gaps, and exits immediately when the task did not change user-facing behavior.
-It runs after `testing` and before `roadmap`.
+Its prompt instructs the agent to stay advisory, but this is not
+sandbox-enforced. It runs after `testing` and before `roadmap`.
+
+### Reviews Are Not Read-Only
+
+When selected with `lemming exec --review`, the hooks above may edit the working
+directory. Prompt instructions and `--no-yolo` do not enforce filesystem
+isolation. When isolation is required, create a separate VCS-managed working
+copy and pass it through the global option:
+
+```bash
+lemming -C <working-copy> exec --review <name>
+```
 
 ### Editing Built-in Hook Prompts
 
@@ -104,7 +118,8 @@ Because of this precedence order, overriding a built-in hook only requires
 creating a Markdown file with the same logical name in the project or global
 directory (e.g. `~/.local/lemming/hooks/90-roadmap.md`); delete the file to
 restore the built-in version. Global hooks are available to all Lemming projects
-on the system.
+on the system. A global review override selected by `lemming exec --review` may
+perform any actions its prompt requests.
 
 ### Example: `lint` hook
 

{lemming_cli-0.5.0 → lemming_cli-0.5.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "lemming-cli"
-version = "0.5.0"
+version = "0.5.2"
 description = "An autonomous, iterative task runner for AI coding agents."
 readme = "README.md"
 authors = [
@@ -16,12 +16,12 @@ keywords = ["ai", "agents", "automation", "antigravity", "claude", "opencode"]
 dependencies = [
     "beautifulsoup4>=4.13.3",
     "click>=8.0.0",
-    "click-agentcli>=0.3.0",
+    "click-agentcli>=0.4.1",
     "fastapi>=0.124.4",
     "markdownify>=0.14.1",
     "pydantic>=2.12.5",
     "pyyaml>=6.0.3",
-    "readability-cli>=0.9.0",
+    "readability-cli>=0.10.0",
     "requests>=2.32.3",
     "uvicorn>=0.33.0",
 ]

{lemming_cli-0.5.0 → lemming_cli-0.5.2}/src/lemming/api/conftest.py

@@ -86,8 +86,7 @@ def git_repo():
     api.app.state.root = pathlib.Path(test_dir).resolve()
 
     # Clear cached git repo check from previous tests
-    if hasattr(paths.in_git_repo, "_result"):
-        del paths.in_git_repo._result
+    paths.in_git_repo.cache_clear()
 
     subprocess.run(["git", "init"], check=True)
     subprocess.run(
@@ -113,8 +112,7 @@ def git_repo():
     yield pathlib.Path(test_dir)
 
     # Clear cached git repo check and restore cwd
-    if hasattr(paths.in_git_repo, "_result"):
-        del paths.in_git_repo._result
+    paths.in_git_repo.cache_clear()
     os.chdir(orig_cwd)
     api.app.state.root = original_root
     shutil.rmtree(test_dir)
@@ -130,8 +128,7 @@ def non_git_dir():
     api.app.state.root = pathlib.Path(test_dir).resolve()
 
     # Clear cached git repo check
-    if hasattr(paths.in_git_repo, "_result"):
-        del paths.in_git_repo._result
+    paths.in_git_repo.cache_clear()
 
     # Create files (including one that would be "ignored" if git were present)
     (pathlib.Path(test_dir) / "file1.txt").write_text("content1")
@@ -139,8 +136,7 @@ def non_git_dir():
 
     yield pathlib.Path(test_dir)
 
-    if hasattr(paths.in_git_repo, "_result"):
-        del paths.in_git_repo._result
+    paths.in_git_repo.cache_clear()
     os.chdir(orig_cwd)
     api.app.state.root = original_root
     shutil.rmtree(test_dir)

{lemming_cli-0.5.0 → lemming_cli-0.5.2}/src/lemming/api/context_test.py

@@ -6,10 +6,13 @@ import pytest
 from lemming.api import context
 
 
-class MockAppState:
-    def __init__(self, root: pathlib.Path, tasks_file: pathlib.Path):
-        self.root = root
-        self.tasks_file = tasks_file
+def _app_state(
+    root: pathlib.Path, tasks_file: pathlib.Path
+) -> fastapi.datastructures.State:
+    """The real state object, since it is just an attribute bag."""
+    return fastapi.datastructures.State(
+        {"root": root, "tasks_file": tasks_file}
+    )
 
 
 def test_resolve_project_dir(tmp_path):
@@ -18,7 +21,7 @@ def test_resolve_project_dir(tmp_path):
     project = root / "project"
     project.mkdir()
 
-    app_state = MockAppState(root, root / "tasks.yml")
+    app_state = _app_state(root, root / "tasks.yml")
 
     # Default (no project)
     assert context.resolve_project_dir(app_state) == root
@@ -46,7 +49,7 @@ def test_resolve_tasks_file(tmp_path):
     project.mkdir()
 
     default_tasks = root / "tasks.yml"
-    app_state = MockAppState(root, default_tasks)
+    app_state = _app_state(root, default_tasks)
 
     # Default
     assert context.resolve_tasks_file(app_state) == default_tasks

{lemming_cli-0.5.0 → lemming_cli-0.5.2}/src/lemming/cli/exec_cli.py

@@ -223,7 +223,7 @@ def _task_status(
     help=(
         "Reviews to run after the task, comma-separated or repeated. "
         "Use 'all' for every review. With no description, only the "
-        "reviews run."
+        "reviews run. Reviews may edit the working directory."
     ),
 )
 @click.option(

{lemming_cli-0.5.0 → lemming_cli-0.5.2}/src/lemming/hooks_test.py

@@ -103,6 +103,7 @@ def test_disable_hooks_keeps_priority_in_mask(tmp_path, monkeypatch):
     # The mask filename carries the hook's priority so listings still
     # report the priority it would run at if re-enabled
     mask = results["roadmap"]
+    assert mask is not None
     assert mask.name == "90-roadmap.md"
     assert mask.read_text(encoding="utf-8") == ""
 

{lemming_cli-0.5.0 → lemming_cli-0.5.2}/src/lemming/models_test.py

@@ -27,12 +27,14 @@ def test_task_model_defaults():
 
 
 def test_task_model_validation():
-    # description is required
+    # description is required; the omission is the assertion, not a mistake
     with pytest.raises(pydantic.ValidationError):
+        # pyrefly: ignore[missing-argument]
         models.Task(id="123")
 
     # id is required
     with pytest.raises(pydantic.ValidationError):
+        # pyrefly: ignore[missing-argument]
         models.Task(description="Test")
 
 

{lemming_cli-0.5.0 → lemming_cli-0.5.2}/src/lemming/tasks/lifecycle_test.py

@@ -169,6 +169,7 @@ def test_finish_task_attempt(tmp_path):
     persistence.save_tasks(tasks_file, data)
 
     finished = lifecycle.finish_task_attempt(tasks_file, "1")
+    assert finished is not None
     assert finished.status == models.TaskStatus.PENDING
     assert finished.pid is None
 

{lemming_cli-0.5.0 → lemming_cli-0.5.2}/src/lemming/tasks/queries_test.py

@@ -235,6 +235,7 @@ def test_get_pending_task(tmp_path):
         ]
     )
     pending = queries.get_pending_task(data)
+    assert pending is not None
     assert pending.id == "1"
 
 

{lemming_cli-0.5.0 → lemming_cli-0.5.2}/uv.lock

@@ -204,14 +204,14 @@ wheels = [
 
 [[package]]
 name = "click-agentcli"
-version = "0.3.0"
+version = "0.4.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "click" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/75/d5/660cd6f973e3cda14aaec0b31306c739069ae6a45e3b5ca86632a0af8561/click_agentcli-0.3.0.tar.gz", hash = "sha256:55a4c6d60f93a04c0e25df47df75c1e4169a1224ac2306da2fd544ca272ae579", size = 24098, upload-time = "2026-08-22T01:13:19.54Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/5f/f3/38a4a99f28121e48e848681dd80b54e490ec32a86d09a2d33f5c1a5d22cc/click_agentcli-0.4.1.tar.gz", hash = "sha256:f8bef4e82b2d61957764af3d806bc377eaba43bbd363552a966a04aecf05e9bb", size = 25736, upload-time = "2026-08-29T01:11:34.368Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/d4/c7/fec03b1cae7febb4bb67ab8b18000af29859526b55850b45e0ba2732c16a/click_agentcli-0.3.0-py3-none-any.whl", hash = "sha256:5115cdbde546e8eb8abe60ca1e22eedff9174591431e760e237d7c418d86e8dd", size = 24500, upload-time = "2026-08-22T01:13:18.346Z" },
+    { url = "https://files.pythonhosted.org/packages/e5/81/e50bd1adf77cc31283b642b729f9aefc002b0a5e1338dec19539b902c39d/click_agentcli-0.4.1-py3-none-any.whl", hash = "sha256:a39bc96c364970225ddbede45bc4307b4f73013f32c2744e6a02807b1aee27c6", size = 26364, upload-time = "2026-08-29T01:11:32.949Z" },
 ]
 
 [[package]]
@@ -307,7 +307,7 @@ wheels = [
 
 [[package]]
 name = "lemming-cli"
-version = "0.5.0"
+version = "0.5.2"
 source = { editable = "." }
 dependencies = [
     { name = "beautifulsoup4" },
@@ -338,12 +338,12 @@ evals = [
 requires-dist = [
     { name = "beautifulsoup4", specifier = ">=4.13.3" },
     { name = "click", specifier = ">=8.0.0" },
-    { name = "click-agentcli", specifier = ">=0.3.0" },
+    { name = "click-agentcli", specifier = ">=0.4.1" },
     { name = "fastapi", specifier = ">=0.124.4" },
     { name = "markdownify", specifier = ">=0.14.1" },
     { name = "pydantic", specifier = ">=2.12.5" },
     { name = "pyyaml", specifier = ">=6.0.3" },
-    { name = "readability-cli", specifier = ">=0.9.0" },
+    { name = "readability-cli", specifier = ">=0.10.0" },
     { name = "requests", specifier = ">=2.32.3" },
     { name = "uvicorn", specifier = ">=0.33.0" },
 ]
@@ -573,7 +573,7 @@ wheels = [
 
 [[package]]
 name = "readability-cli"
-version = "0.9.0"
+version = "0.10.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "beautifulsoup4" },
@@ -581,9 +581,9 @@ dependencies = [
     { name = "markdownify" },
     { name = "requests" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/eb/aa/7570aaa1ec46c74b8359b2d2a47bdc70d7ee6adff94501cbdaf347810f19/readability_cli-0.9.0.tar.gz", hash = "sha256:4e14e182be391d70092fe159d8d81c6d94e34e8099fdfc9ca8b8ad3ffc31d4c5", size = 343257, upload-time = "2026-08-20T00:51:02.731Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/cd/1e/879bc39b3e9127dfac23822b333093237b95f9ac8891295c039c21481bdd/readability_cli-0.10.0.tar.gz", hash = "sha256:201bf386850d8e465d154bab307399cc5516eb779d1032f75bc97cf38dbf636d", size = 349921, upload-time = "2026-08-23T23:44:08.64Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/8d/94/1857a49eaf9a3efddcdf6f6f413f0aac804915a58d1ccbd64b32a6994602/readability_cli-0.9.0-py3-none-any.whl", hash = "sha256:1709c282575c3f5fc9351d585f069a92b79312d33a22a5ff3713aef8cb834850", size = 324977, upload-time = "2026-08-20T00:51:01.416Z" },
+    { url = "https://files.pythonhosted.org/packages/e1/e2/c573dd0f508e9eb3b4ad0167fc1d60cd361297b6ed8daaf7e4825ad7f6cf/readability_cli-0.10.0-py3-none-any.whl", hash = "sha256:09227180ce6e66ca5f9ef386a9f4e254aeecbed880296c188d0dccc33f918b15", size = 326908, upload-time = "2026-08-23T23:44:06.691Z" },
 ]
 
 [[package]]

lemming_cli-0.5.0/pyrefly.toml

@@ -1,21 +0,0 @@
-# Type checking covers the code that ships, not the code that exercises it.
-#
-# Test doubles are duck-typed on purpose, so a strict checker reports every
-# one of them as an incompatible argument; the eval fixture projects are
-# sample repositories seeded into a workspace, several deliberately broken,
-# and they are data rather than source.
-project-excludes = [
-  "**/*_test.py",
-  "**/conftest.py",
-  "**/evals/projects/**",
-]
-
-# The fixture projects are checked when a path names one directly, where
-# project-excludes does not apply. Their imports are relative to the
-# workspace they get seeded into, not to this repository.
-[[sub-config]]
-matches = "**/evals/projects/**"
-
-[sub-config.errors]
-missing-import = false
-missing-module-attribute = false