Skip to content

fix(agentic-engineering): declare runtime asset executability - #142

Merged
devantler merged 1 commit into
mainfrom
codex/runtime-asset-mode-141
Aug 16, 2026
Merged

fix(agentic-engineering): declare runtime asset executability#142
devantler merged 1 commit into
mainfrom
codex/runtime-asset-mode-141

Conversation

@devantler

Copy link
Copy Markdown
Contributor

🤖 Generated by the Agentic Engineer

Summary

  • declare the classifier runtime asset executable in provider-neutral desired state
  • require and validate the executable property for agent-only installations
  • add missing and false declaration regressions and publish agentic-engineering 4.3.7

Verification

  • manifest validator self-test: 168 passed
  • classifier contracts: 17 passed
  • manifest validation, ShellCheck, and plugin version gate passed

Fixes #141

@devantler

Copy link
Copy Markdown
Contributor Author

🤖 Generated by the Agentic Engineer

@coderabbitai review

Please review exact head 6f16f61. Focus on the requiredRuntimeAssets executable declaration, schema and validator enforcement, the missing and false regressions, and the 4.3.7 release boundary.

@devantler

Copy link
Copy Markdown
Contributor Author

🤖 Generated by the Agentic Engineer

Exact-head evaluation for 6f16f61:

  • the provider-neutral runtime asset now declares path, SHA-256, and executable: true;
  • schema and validator reject missing or false executable declarations and reject a non-executable referenced file;
  • existing exact-byte, containment, and symlink checks remain covered;
  • local evidence: manifest self-test 168/0, classifier contract 17/0, manifest validation, ShellCheck, version gate 4.3.6 to 4.3.7, and diff check;
  • GitHub required CI, CodeQL, dependency review, and zizmor are green on this exact head.

Promotion remains blocked pending a clean exact-head substantive review.

@devantler

Copy link
Copy Markdown
Contributor Author

🤖 Generated by the Agentic Engineer

@codex review

Please review exact head 6f16f61 after the CodeRabbit request. Focus on whether the provider-neutral executable requirement is complete, enforced, and regression-tested without weakening the existing byte-integrity boundary.

@devantler

Copy link
Copy Markdown
Contributor Author

🤖 Generated by the Agentic Engineer

@cursor review

Please review exact head 6f16f61. Focus on the executable-mode declaration and validation boundary for the required runtime asset.

@coderabbitai

coderabbitai Bot commented Aug 16, 2026

Copy link
Copy Markdown
🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

head='6f16f615036ec4291f5e8b106075c1332fd63ada'
printf '%s\n' '== Exact-head verification =='
git rev-parse HEAD
git cat-file -t "$head"
git merge-base --is-ancestor "$head" HEAD && echo "requested-head-is-ancestor-of-checkout=yes" || echo "requested-head-is-ancestor-of-checkout=no"
git show --no-ext-diff --format='commit=%H%nparents=%P%nsubject=%s' --no-patch "$head"

printf '%s\n' '== Changed files against first parent =='
parent=$(git rev-parse "${head}^")
git diff --no-ext-diff --name-status "$parent" "$head"
printf '%s\n' '== Focused diff =='
git diff --no-ext-diff --unified=80 "$parent" "$head" -- \
  '*manifest*' '*schema*' '*validator*' '*classifier*' \
  'package.json' 'CHANGELOG.md' 'pnpm-lock.yaml' 'npm-shrinkwrap.json' \
  '*agentic-engineering*' || true

printf '%s\n' '== Candidate file map =='
fd -HI -t f . | rg -i '(manifest|schema|validator|classifier|agentic-engineering|package\.json|changelog)' | sed -n '1,240p'

printf '%s\n' '== Symbol/reference locations =='
rg -n -i -C 3 \
  'requiredRuntimeAssets|executable|agentic-engineering.{0,80}4\.3\.[67]|"version"[[:space:]]*:[[:space:]]*"4\.3\.[67]"' \
  -g '!node_modules/**' -g '!dist/**' -g '!build/**' . | sed -n '1,800p'

Length of output: 100558


🏁 Script executed:

#!/bin/bash
set -euo pipefail

head='6f16f615036ec4291f5e8b106075c1332fd63ada'
parent=$(git rev-parse "${head}^")

printf '%s\n' '== Complete changed-file diff excluding already inspected large files =='
git diff --no-ext-diff --unified=40 "$parent" "$head" -- \
  '.claude-plugin/marketplace.json' '.github/plugin/marketplace.json' \
  'plugins/agentic-engineering/.claude-plugin/plugin.json' \
  'plugins/agentic-engineering/plugin.json' \
  'plugins/agentic-engineering/resources/provider-neutral.desired-state.json' \
  'plugins/agentic-engineering/scripts/classify-default-branch-ci-runs.test.sh' \
  | sed -n '1,1000p'

printf '%s\n' '== Release references and version coherence =='
rg -n -C 2 '"agentic-engineering"|agentic-engineering@|agentic-engineering.{0,120}4\.3\.[0-9]+|"version"[[:space:]]*:[[:space:]]*"4\.3\.[0-9]+"' \
  -g '!node_modules/**' -g '!dist/**' -g '!build/**' \
  '.claude-plugin/marketplace.json' '.github/plugin/marketplace.json' \
  'plugins/agentic-engineering/plugin.json' \
  'plugins/agentic-engineering/.claude-plugin/plugin.json' \
  'scripts' '.github' 2>/dev/null || true

printf '%s\n' '== Runtime asset mode, hash, and declaration =='
git ls-tree "$head" -- plugins/agentic-engineering/scripts/classify-default-branch-ci-runs.sh
sha256sum plugins/agentic-engineering/scripts/classify-default-branch-ci-runs.sh
jq -c '.spec.source.requiredRuntimeAssets' \
  plugins/agentic-engineering/resources/provider-neutral.desired-state.json

printf '%s\n' '== Test harness control flow around desired-state fixtures =='
sed -n '1,125p' scripts/validate-manifests.test.sh
sed -n '650,940p' scripts/validate-manifests.test.sh
printf '%s\n' '== Validator invocation sites =='
rg -n -C 3 'validate_desired_state_resources|validate-manifests\.sh' \
  scripts/validate-manifests.sh scripts/validate-manifests.test.sh

printf '%s\n' '== Working tree state =='
git status --short

Length of output: 51593


@devantler No findings for exact head 6f16f615036ec4291f5e8b106075c1332fd63ada.

I verified the requested scope:

  • requiredRuntimeAssets declares executable: true.
  • The declared classifier is Git mode 100755.
  • The declared SHA-256 matches the checked-in classifier bytes.
  • The schema requires path, sha256, and executable: true for each runtime asset.
  • The validator rejects missing and false executable declarations before file checks.
  • The validator retains executable-file, containment, symlink, and exact-byte digest checks.
  • The self-test uses the real validator and has separate regressions for missing and false declarations.
  • All four publish surfaces declare agentic-engineering version 4.3.7.

I completed a static review. I did not execute repository scripts in this sandbox.

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@coderabbitai

coderabbitai Bot commented Aug 16, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: ff3ca542-5933-44e1-b968-b961f2352b0f

📥 Commits

Reviewing files that changed from the base of the PR and between 73109ad and 6f16f61.

📒 Files selected for processing (9)
  • .claude-plugin/marketplace.json
  • .github/plugin/marketplace.json
  • plugins/agentic-engineering/.claude-plugin/plugin.json
  • plugins/agentic-engineering/README.md
  • plugins/agentic-engineering/plugin.json
  • plugins/agentic-engineering/resources/provider-neutral.desired-state.json
  • plugins/agentic-engineering/scripts/classify-default-branch-ci-runs.test.sh
  • scripts/validate-manifests.sh
  • scripts/validate-manifests.test.sh

Included review availability: Your plan includes up to 1 review per rolling hour; 0 remain after this review.

📜 Recent review details
🧰 Additional context used
📓 Path-based instructions (2)
plugins/**/{plugin.json,.claude-plugin/plugin.json}

📄 CodeRabbit inference engine (AGENTS.md)

Keep both normalised JSON documents semantically identical

Files:

  • plugins/agentic-engineering/plugin.json
  • plugins/agentic-engineering/.claude-plugin/plugin.json
**/{.github/workflows,.github/plugin,.claude-plugin}/**/*.json

📄 CodeRabbit inference engine (AGENTS.md)

The two marketplace manifests are the contract

Files:

  • plugins/agentic-engineering/.claude-plugin/plugin.json
  • .claude-plugin/marketplace.json
  • .github/plugin/marketplace.json
🔇 Additional comments (9)
plugins/agentic-engineering/resources/provider-neutral.desired-state.json (1)

16-17: LGTM!

Also applies to: 104-104

plugins/agentic-engineering/README.md (1)

228-229: LGTM!

plugins/agentic-engineering/scripts/classify-default-branch-ci-runs.test.sh (1)

202-203: LGTM!

.claude-plugin/marketplace.json (1)

30-30: LGTM!

.github/plugin/marketplace.json (1)

30-30: LGTM!

plugins/agentic-engineering/.claude-plugin/plugin.json (1)

4-4: LGTM!

plugins/agentic-engineering/plugin.json (1)

4-4: LGTM!

scripts/validate-manifests.sh (1)

459-460: LGTM!

Also applies to: 568-583, 643-643, 849-853

scripts/validate-manifests.test.sh (1)

825-860: LGTM!

Also applies to: 872-872, 884-884, 896-896, 906-906, 918-918


📝 Walkthrough

Walkthrough

The agentic-engineering plugin version is updated to 4.3.7. Its desired-state manifest now declares the bundled classifier as executable. Onboarding instructions and tests verify this requirement. Manifest validation requires executable: true, enforces the corresponding schema, and preserves path, symlink, filesystem, and SHA-256 checks. Validation tests cover missing and false executable declarations and update existing runtime-asset fixtures.

Possibly related issues

Possibly related PRs

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Linked Issues check ✅ Passed The changes satisfy issue #141 by declaring, validating, and testing executable runtime asset requirements while preserving digest and byte checks.
Out of Scope Changes check ✅ Passed The version updates and README change support the runtime asset fix and the stated 4.3.7 release boundary.
Docstring Coverage ✅ Passed Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%.
Title check ✅ Passed The title clearly summarizes the main change: declaring runtime asset executability for the agentic-engineering plugin.
Description check ✅ Passed The description accurately covers executable declarations, validator enforcement, regression tests, and the 4.3.7 release.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Keep them coming!

Reviewed commit: 6f16f61503

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@devantler
devantler marked this pull request as ready for review August 16, 2026 12:07
@devantler
devantler merged commit 342a7db into main Aug 16, 2026
41 checks passed
@devantler
devantler deleted the codex/runtime-asset-mode-141 branch August 16, 2026 12:07
@github-project-automation github-project-automation Bot moved this from 🫴 Ready to ✅ Done in 🌊 Project Board Aug 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: ✅ Done

Development

Successfully merging this pull request may close these issues.

fix(agentic-engineering): declare runtime asset executability

1 participant