moai-adk 0.10.1__py3-none-any.whl → 0.11.0__py3-none-any.whl

moai_adk/core/project/phase_executor.py

@@ -312,8 +312,12 @@ class PhaseExecutor:
                 cwd=project_path,
                 check=True,
                 capture_output=True,
+                timeout=30,  # Default timeout for git operations
             )
             # Intentionally avoid printing to keep progress output clean
+        except subprocess.TimeoutExpired:
+            # Timeout is non-fatal
+            pass
         except subprocess.CalledProcessError:
             # Only log on error; failures are non-fatal
             pass

moai_adk/core/tags/ci_validator.py

@@ -16,6 +16,8 @@ import os
 from typing import Any, Dict, List, Optional
 
 import requests
+from requests.adapters import HTTPAdapter
+from urllib3.util import Retry
 
 from .pre_commit_validator import (
     PreCommitValidator,
@@ -87,16 +89,44 @@ class CIValidator(PreCommitValidator):
             'Accept': 'application/vnd.github.v3+json'
         }
 
+        # Create session with retry strategy
+        session = requests.Session()
+        retry = Retry(
+            total=3,
+            backoff_factor=0.5,
+            status_forcelist=[500, 502, 503, 504],
+            allowed_methods=["GET"]
+        )
+        adapter = HTTPAdapter(max_retries=retry)
+        session.mount("https://", adapter)
+
         try:
-            response = requests.get(url, headers=headers, timeout=10)
+            # Dual timeout: (connect_timeout, read_timeout)
+            response = session.get(
+                url,
+                headers=headers,
+                timeout=(5, 10)
+            )
             response.raise_for_status()
 
             files_data = response.json()
             return [file_info['filename'] for file_info in files_data]
 
-        except Exception:
-            # Return empty list on any error (network, auth, etc.)
+        except requests.exceptions.Timeout:
+            # Network timeout - return empty list gracefully
+            return []
+        except requests.exceptions.HTTPError as e:
+            # HTTP error (4xx, 5xx)
+            if e.response.status_code == 404:
+                # PR not found
+                return []
+            # Other HTTP errors: log but continue
+            return []
+        except requests.exceptions.RequestException:
+            # Network/connection errors
             return []
+        finally:
+            session.close()
 
     def validate_pr_changes(
         self,

moai_adk/core/template_engine.py

@@ -31,13 +31,17 @@ class TemplateEngine:
     - File-based and string-based template rendering
     """
 
-    def __init__(self, strict_undefined: bool = False):
+    def __init__(self, strict_undefined: bool = True):
         """
         Initialize the template engine.
 
         Args:
-            strict_undefined: If True, raise error on undefined variables.
+            strict_undefined: If True, raise error on undefined variables (default: True).
                              If False, render undefined variables as empty strings.
+
+        Note:
+            Changed to strict_undefined=True (v0.10.2+) for safer template rendering.
+            Variables must be explicitly provided to avoid silent template failures.
         """
         self.strict_undefined = strict_undefined
         self.undefined_behavior = StrictUndefined if strict_undefined else None

moai_adk/templates/.github/workflows/moai-gitflow.yml

@@ -13,6 +13,11 @@ jobs:
   moai-pipeline:
     name: "{{PROJECT_NAME}} Pipeline"
     runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        python-version: ["3.11", "3.12", "3.13"]
+
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -22,7 +27,7 @@ jobs:
         if: ${{ hashFiles('requirements.txt') != '' || hashFiles('pyproject.toml') != '' || hashFiles('setup.py') != '' }}
         uses: actions/setup-python@v5
         with:
-          python-version: "3.13"
+          python-version: ${{ matrix.python-version }}
 
       - name: Setup Node.js
         if: ${{ hashFiles('package.json') != '' }}

moai_adk/templates/.github/workflows/release.yml

@@ -10,14 +10,18 @@ jobs:
     name: 📦 Deploy to PyPI
     runs-on: ubuntu-latest
 
+    strategy:
+      matrix:
+        python-version: ["3.11", "3.12", "3.13"]
+
     steps:
       - name: 📥 Checkout code
         uses: actions/checkout@v4
 
-      - name: 🐍 Setup Python 3.13
+      - name: 🐍 Setup Python ${{ matrix.python-version }}
         uses: actions/setup-python@v5
         with:
-          python-version: "3.13"
+          python-version: ${{ matrix.python-version }}
 
       - name: 📦 Install uv
         uses: astral-sh/setup-uv@v2

moai_adk/templates/.github/workflows/tag-validation.yml

@@ -10,9 +10,39 @@ on:
     branches: [main, develop, "feature/**"]
 
 jobs:
+  detect-language:
+    name: 🔍 Detect Project Language
+    runs-on: ubuntu-latest
+    outputs:
+      language: ${{ steps.detect.outputs.language }}
+      is-python: ${{ steps.detect.outputs.is-python }}
+      is-javascript: ${{ steps.detect.outputs.is-javascript }}
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Detect language
+        id: detect
+        run: |
+          if [ -f "pyproject.toml" ] || [ -f "setup.py" ] || [ -f "requirements.txt" ]; then
+            echo "language=python" >> $GITHUB_OUTPUT
+            echo "is-python=true" >> $GITHUB_OUTPUT
+            echo "is-javascript=false" >> $GITHUB_OUTPUT
+          elif [ -f "package.json" ]; then
+            echo "language=javascript" >> $GITHUB_OUTPUT
+            echo "is-python=false" >> $GITHUB_OUTPUT
+            echo "is-javascript=true" >> $GITHUB_OUTPUT
+          else
+            echo "language=unknown" >> $GITHUB_OUTPUT
+            echo "is-python=false" >> $GITHUB_OUTPUT
+            echo "is-javascript=false" >> $GITHUB_OUTPUT
+          fi
+
   validate-tags:
     name: 🏷️ Validate TAG Annotations
     runs-on: ubuntu-latest
+    needs: detect-language
 
     # Skip validation on draft PRs (allow WIP)
     if: github.event.pull_request.draft == false || github.event_name == 'push'
@@ -21,26 +51,41 @@ jobs:
       contents: read
       pull-requests: write
 
+    strategy:
+      matrix:
+        python-version: ["3.11", "3.12", "3.13"]
+        node-version: ["18", "20"]
+
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
         with:
           fetch-depth: 0  # Fetch all history for comprehensive validation
 
-      - name: Setup Python
+      - name: Setup Python (if Python project)
+        if: needs.detect-language.outputs.is-python == 'true'
         uses: actions/setup-python@v5
         with:
-          python-version: '3.13'
+          python-version: ${{ matrix.python-version }}
 
-      - name: Install uv
-        uses: astral-sh/setup-uv@v5
+      - name: Setup Node.js (if JavaScript project)
+        if: needs.detect-language.outputs.is-javascript == 'true'
+        uses: actions/setup-node@v4
         with:
-          version: "latest"
+          node-version: ${{ matrix.node-version }}
+
+      - name: Install dependencies (Python)
+        if: needs.detect-language.outputs.is-python == 'true'
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e .
+          pip install requests
 
-      - name: Install dependencies
+      - name: Install dependencies (JavaScript)
+        if: needs.detect-language.outputs.is-javascript == 'true'
         run: |
-          uv pip install --system -e .
-          uv pip install --system requests
+          npm ci
+          npm install requests 2>/dev/null || true
 
       - name: Get PR number
         id: pr