sbxloop 0.7.0__tar.gz → 0.7.2__tar.gz

{sbxloop-0.7.0 → sbxloop-0.7.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: sbxloop
-Version: 0.7.0
+Version: 0.7.2
 Summary: Agentic loop orchestration on Docker Sandboxes (sbx) with isolated credential domains
 Project-URL: Homepage, https://github.com/brettbergin/sbxloop
 Project-URL: Repository, https://github.com/brettbergin/sbxloop

{sbxloop-0.7.0 → sbxloop-0.7.2}/src/sbxloop/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '0.7.0'
-__version_tuple__ = version_tuple = (0, 7, 0)
+__version__ = version = '0.7.2'
+__version_tuple__ = version_tuple = (0, 7, 2)
 
 __commit_id__ = commit_id = None

{sbxloop-0.7.0 → sbxloop-0.7.2}/src/sbxloop/cli/app.py

@@ -2003,8 +2003,8 @@ mem_abort = 0.0
 # open a per-run tracking issue. For a design/discussion tracker set both
 # false: the source issue gets the summary + delivered_label and stays open
 # until a human merges the PR, and no extra tracking issue is opened.
-# close_on_success = true
-# tracking_issue = true
+# close_on_success = true         # false leaves the issue open for a human to close on merge
+# tracking_issue = true           # false skips the per-run tracking issue
 # max_runs_per_day = 12           # rolling 24h window, persisted across restarts
 # max_attempts_per_item = 2
 # max_resumes_per_item = 2         # interrupted runs resumed at most this often per item

{sbxloop-0.7.0 → sbxloop-0.7.2}/src/sbxloop/engine/prompts/plan.md

@@ -105,7 +105,14 @@ literal text (a grep for an escape code never matches, and nothing says
 why), while `[[ ]]`, `source`, `declare`/`local`, `pushd`/`popd` fail as
 unknown commands and here-strings are a syntax error. Write portable shell:
 `[ ]` not `[[ ]]`, `printf` for escape sequences, pipes instead of
-here-strings, `.` instead of `source`. Bashisms are rejected mechanically. And prefer to verify *behavior* through the project's test
+here-strings, `.` instead of `source`. Bashisms are rejected mechanically.
+Never wrap a check in its own `sh -c "..."` / `bash -c` — each command is
+already run that way, and any dollar expansion (`$$?`, an awk field) inside
+the wrapper's double quotes is consumed by the outer shell before the inner
+one ever sees it — a wrapped `git status | awk` field-print guard printed
+whole lines and failed every revision of a correct change. Write the
+pipeline directly. And
+prefer to verify *behavior* through the project's test
 runner rather than shell pipelines: asserting on bytes, escape sequences,
 exact whitespace, or exit codes is trivial and exact inside a test file
 (`assert "\x1b[31m" in captured.out`) and fragile as a `grep`/`od`

{sbxloop-0.7.0 → sbxloop-0.7.2}/src/sbxloop/verifylint.py

@@ -177,6 +177,14 @@ def _strip_quoted(command: str, *, keep_ansi_c: bool = False) -> str:
     return "".join(out)
 
 
+# `sh -c "..."` / `bash -c '...'` at command position: a shell inside the
+# shell the runner already provides. Matched on the raw command so quoting
+# does not hide it.
+_NESTED_SHELL = re.compile(
+    r"(?:^|[|&;(]\s*)(?:/bin/|/usr/bin/)?(?:sh|bash|dash|zsh)\s+-[a-zA-Z]*c\b"
+)
+
+
 def bashisms(command: str) -> list[str]:
     """Portable-shell violations in one verify command (empty = clean)."""
     problems: list[str] = []
@@ -191,12 +199,26 @@ def bashisms(command: str) -> list[str]:
     for token, what, rewrite in _BASHISM_OPERATORS[1:]:
         if token in unquoted:
             problems.append(f"uses {what} — verify commands run under `sh -c`; {rewrite}")
-    for head in command_heads(command):
+    heads = command_heads(command)
+    for head in heads:
         if head in _BASHISM_COMMANDS:
             what, rewrite = _BASHISM_COMMANDS[head]
             problems.append(
                 f"invokes {what}, which fails as an unknown command under `sh -c`; {rewrite}"
             )
+    if _NESTED_SHELL.search(command):
+        # Field failure r7ef26eht (first sbxloop-on-sbxloop run): the plan
+        # wrapped a pipeline as `sh -c "... awk '{print $2}' ..."`. The
+        # runner already executes each verify command under `sh -c`, so the
+        # OUTER shell expanded the double-quoted `$2` to nothing, awk printed
+        # whole lines, the allowlist grep matched none of them, and a correct
+        # change failed verification three revisions and a replan in a row.
+        problems.append(
+            "wraps the check in a nested `sh -c`/`bash -c` string — verify commands "
+            "already run under `sh -c`, and `$` expansions inside the wrapper's double "
+            "quotes are consumed by the outer shell; write the pipeline directly, "
+            "unwrapped"
+        )
     return problems