CodeSnuffler Forgejo End-to-End historical review range codesnuffler-forgejo-live-20260629T085016458Z-62e6b5fb-81e #44

Closed

jason-admin wants to merge 2 commits from change_forgejo_end_to_end into base_forgejo_end_to_end

pull from: change_forgejo_end_to_end

merge into: jason-admin:base_forgejo_end_to_end

jason-admin:master

Conversation 1 Commits 2 Files changed 24 +408 -215

jason-admin commented 2026-06-29 08:51:16 +00:00

Owner

Copy link

Exercise the live Forgejo webhook review pipeline against a stable historical CodeSnuffler diff.

Run marker: codesnuffler-forgejo-live-20260629T085016458Z-62e6b5fb-81e.
Run started at: 2026-06-29T08:50:16.458Z.

Fixture range: f9d210eccd0075b6b39b606cea9b1376719aa062..d8a3fc420b055e04df1d203706b89b1f1261a9c1.
This two-commit AI Harness range stops before 404b386c removed stale persona and old-shape compatibility, so the review is expected to produce actionable findings.

Exercise the live Forgejo webhook review pipeline against a stable historical CodeSnuffler diff. Run marker: codesnuffler-forgejo-live-20260629T085016458Z-62e6b5fb-81e. Run started at: 2026-06-29T08:50:16.458Z. Fixture range: f9d210eccd0075b6b39b606cea9b1376719aa062..d8a3fc420b055e04df1d203706b89b1f1261a9c1. This two-commit AI Harness range stops before 404b386c removed stale persona and old-shape compatibility, so the review is expected to produce actionable findings.

jason-admin added 2 commits 2026-06-29 08:51:16 +00:00

AI Harness: update tool auth contracts for plugin instances ... 11f109e6c2

This completes Step 12 of the AI harness plugin-instance plan by replacing the tool auth container session contract's persona field with explicit plugin instance identity. Controller request and response schemas, auth image refs, build payloads, dev-shell websocket forwarding, Docker labels, container env, and shared probe metadata now carry plugin_id, instance_id, and driver_id.

The controller now rejects mismatched plugin or driver identity, uses PLUGIN_INSTANCE_ID instead of TOOL_PERSONA_ID in auth containers, and labels containers/images with current plugin and driver keys. The app-side auth container client and session helpers send the new payload shape without accepting the old persona_id request field.

Validated with: pytest for the container image controller client, AI tool auth containers, and container image controller integration files; compileall for touched controller/app/contract/test modules; git diff --check; targeted cleanup search for removed tool-auth persona fields, env vars, labels, and probe keys in the edited boundary.

AI Harness: update runtime status projections for plugin instances ... d8a3fc420b

Update the AI harness runtime/status layer to project current plugin instance identity through auth runtime summaries, raw probe normalization, storage inventory, setup details, generic auth helpers, and system report rows. Runtime/status models now carry plugin_id, instance_id, and driver_id without a persona_id field, while later runner and review-policy persona cleanup remains explicitly scoped to follow-up plan steps.

Validated with: pytest for the AI tool instance suite, focused homepage runtime/status cases, the configured harness plugin catalog case, AI tool schema unit tests, compileall for the touched backend/test modules, git diff --check, and targeted persona cleanup searches.

jason-admin commented 2026-06-29 08:51:24 +00:00

Author

Owner

Copy link

CodeSnuffler Review Findings

Recommendation	Risk	Open findings	Files touched by findings
Request Changes	Medium	2	2

Findings

1. Frontend still sends persona_id to dev-shell websocket

Severity	Category	Confidence	Location	Status
Medium	Correctness	94%	frontend/src/dev-shell/components/DevShellTerminal.vue:154-155	Open

The backend now reads instance_id from the websocket query, but DevShellTerminal still sends persona_id. Runner auth commands launched from the UI for non-primary instances will silently fall back to primary, using the wrong auth storage/session.

Open finding in CodeSnuffler

Generate patch with CodeSnuffler

Suggested fix: Send instance_id instead of persona_id, and update related prop/variable names if this surface is part of the rename.

2. AI review policy still exposes persona_id

Severity	Category	Confidence	Location	Status
Medium	Maintainability	88%	app/settings/ai_review_policy/schemas.py:72-77	Open

This PR removes persona_id from several auth/tool contracts, but the AI review policy choice schema and frontend generated type still expose persona_id. Under the repo's no-compatibility-shim policy, this keeps the old public shape alive instead of standardizing on instance_id.

Open finding in CodeSnuffler

Generate patch with CodeSnuffler

Suggested fix: Replace this field with plugin_id, instance_id, and driver_id as needed, update the service payload, regenerate frontend API types, and adjust frontend consumers to use instance_id.

 ## CodeSnuffler Review Findings | Recommendation | Risk | Open findings | Files touched by findings | | --- | --- | ---: | ---: | | Request Changes | Medium | 2 | 2 | ### Findings #### 1. Frontend still sends persona_id to dev-shell websocket | Severity | Category | Confidence | Location | Status | | --- | --- | ---: | --- | --- | | Medium | Correctness | 94% | `frontend/src/dev-shell/components/DevShellTerminal.vue:154-155` | Open | The backend now reads `instance_id` from the websocket query, but `DevShellTerminal` still sends `persona_id`. Runner auth commands launched from the UI for non-primary instances will silently fall back to `primary`, using the wrong auth storage/session. [Open finding in CodeSnuffler](https://ops.codesnuffler.com/codesnuffler_review/forgejo-jason-admin-CodeSnuffler-FJ-pr-44/findings/3) [Generate patch with CodeSnuffler](https://ops.codesnuffler.com/codesnuffler_review/forgejo-jason-admin-CodeSnuffler-FJ-pr-44/findings/3/fix) **Suggested fix:** Send `instance_id` instead of `persona_id`, and update related prop/variable names if this surface is part of the rename. #### 2. AI review policy still exposes persona_id | Severity | Category | Confidence | Location | Status | | --- | --- | ---: | --- | --- | | Medium | Maintainability | 88% | `app/settings/ai_review_policy/schemas.py:72-77` | Open | This PR removes `persona_id` from several auth/tool contracts, but the AI review policy choice schema and frontend generated type still expose `persona_id`. Under the repo's no-compatibility-shim policy, this keeps the old public shape alive instead of standardizing on `instance_id`. [Open finding in CodeSnuffler](https://ops.codesnuffler.com/codesnuffler_review/forgejo-jason-admin-CodeSnuffler-FJ-pr-44/findings/4) [Generate patch with CodeSnuffler](https://ops.codesnuffler.com/codesnuffler_review/forgejo-jason-admin-CodeSnuffler-FJ-pr-44/findings/4/fix) **Suggested fix:** Replace this field with `plugin_id`, `instance_id`, and `driver_id` as needed, update the service payload, regenerate frontend API types, and adjust frontend consumers to use `instance_id`.

jason-admin closed this pull request 2026-06-29 08:53:35 +00:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

jason-admin/CodeSnuffler-FJ!44

No description provided.