Overview - Adt-cli

adt-cli

7 days30 days

Latest CI Pipeline Executions

Fuzzy

Succeeded
feat/scoped-safe-execution
da1c53fc fix(adt-mcp): address Devin Review thread gaps - require objectType in get_object_structure so scoped read can build a canonical key - parseScopedObjectKeys now rejects empty resourceKeys for read and safe_execute scopes - remove exact-key checks on JWT payload/protected header; validate only required alg/kid/typ and trusted claim fields, so issuers can add standard/extra claims without breaking existing invocation policies Co-Authored-By: Petr Plenkov <petr.plenkov@gmail.com>
by Devin AI
Succeeded
feat/scoped-safe-execution
8fd6d044 fix(adt-mcp): stable ATC object-not-found error and avoid orphan worklists - Introduce AtcObjectUnavailableError and match it with instanceof instead of a literal message string. - Resolve the ATC scope URIs before creating the server-side worklist, so a missing-object failure no longer leaves an orphaned worklist behind. - Return mcpErrorResult for the deterministic not-found case so destination-mode records 'failed' rather than 'outcome_unknown'. Co-Authored-By: Petr Plenkov <petr.plenkov@gmail.com>
by Devin AI
Succeeded
feat/scoped-safe-execution
763f2a0c fix(adt-mcp): stable ATC object-not-found error and avoid orphan worklists - Introduce AtcObjectUnavailableError and match it with instanceof instead of a literal message string. - Resolve the ATC scope URIs before creating the server-side worklist, so a missing-object failure no longer leaves an orphaned worklist behind. - Return mcpErrorResult for the deterministic not-found case so destination-mode records 'failed' rather than 'outcome_unknown'. Co-Authored-By: Petr Plenkov <petr.plenkov@gmail.com>
by Devin AI
Succeeded
feat/scoped-safe-execution
6a085711 fix(adt-mcp): return normal MCP error for missing ATC object under safe execution atc_run now catches the 'ATC object is unavailable' error and returns mcpErrorResult instead of letting handleSafeExecuteError rethrow it, so destination-mode records a deterministic 'failed' outcome instead of 'outcome_unknown'. Co-Authored-By: Petr Plenkov <petr.plenkov@gmail.com>
by Devin AI
Succeeded
feat/scoped-safe-execution
a6a1d4e2 fix(adt-client, adt-mcp): SSRF session-path normalization and safe-execute helper dedup - session.ts: normalize sessionPath via new URL() before origin/path checks so dot-segments like ../ cannot bypass the sessions-prefix guard - atc-run.ts & run-unit-tests.ts: share safePolicy extraction and safe-execute error handling via extractSafeExecutePolicy / handleSafeExecuteError Co-Authored-By: Petr Plenkov <petr.plenkov@gmail.com>
by Devin AI
Succeeded
feat/scoped-safe-execution
5bd49c73 fix(adt-mcp, adt-client): address P1 review threads - destination-mode: hide safe_execute tools when execution hooks are missing - server.ts: pass full destination options to tool list projection - get-object: make objectType required and update README/tests - session.ts: add positional overload, SSRF session-path validation, cleanup on failed CSRF acquisition, avoid caching cleanup CSRF token - http/server.ts: restore uniqueness check in isSortedUniqueStrings Co-Authored-By: Petr Plenkov <petr.plenkov@gmail.com>
by Devin AI
Succeeded
feat/scoped-safe-execution
d6a46912 fix(session): suppress Opengrep SSRF false positives on validated ADT session URLs Co-Authored-By: Petr Plenkov <petr.plenkov@gmail.com>
by Devin AI
Succeeded
feat/scoped-safe-execution
1b2cd9ae fix(session): pass URL objects directly to fetch to satisfy Codacy tainted-URL rule Co-Authored-By: Petr Plenkov <petr.plenkov@gmail.com>
by Devin AI
Succeeded
feat/scoped-safe-execution
81c63e6e fix: Sonar/Codacy issues in scoped execution - parseSafeExecutePolicy: split into operation-specific helpers to reduce cognitive complexity - snapshotScopedAccess: use localeCompare in sorted-unique check - session helpers: add nosemgrep suppressions for ADT URL fetch Co-Authored-By: Petr Plenkov <petr.plenkov@gmail.com>
by Devin AI
Succeeded
feat/scoped-safe-execution
e6de61d3 refactor: reduce CodeScene complexity/argument warnings - SessionManager.initializeCsrf: take an options object, extract createSecuritySession/acquireCsrfToken/deleteSecuritySession helpers - snapshotScopedAccess: split into small validators with early returns - runSafeExecution/registerDestinationTool: accept a single context object Co-Authored-By: Petr Plenkov <petr.plenkov@gmail.com>
by Devin AI
Succeeded
feat/scoped-safe-execution
702a8c58 fix(review): address remaining Baz/Cubic/CodeRabbit review threads - get_object: uppercase objectType before search and compare base types (CLAS/OC) - scope-catalogue: normalize canonical object keys to base type and hide read tools when resourceKeys is empty - snapshotScopedAccess: reject empty read resourceKeys and add typeof guards for scopeId/executionId/systemSid - runSafeExecution: keep per-execution counter after terminal outcome so maxToolCalls is enforced across calls - initializeCsrf: thread execution signal into normal cleanup, add bounded best-effort cleanup after abort Co-Authored-By: Petr Plenkov <petr.plenkov@gmail.com>
by Devin AI
Succeeded
feat/scoped-safe-execution
913d8e2e fix(codacy): inline nosemgrep suppression for Map.set false positive Co-Authored-By: Petr Plenkov <petr.plenkov@gmail.com>
by Devin AI
Succeeded
feat/scoped-safe-execution
dc9f8836 fix(codacy): suppress false-positive header-injection on Map counters Co-Authored-By: Petr Plenkov <petr.plenkov@gmail.com>
by Devin AI
Succeeded
feat/scoped-safe-execution
72ab0398 fix(review): address Baz and Gitar threads on safe-execute dispatch\n\n- Deduplicate safe-execute payload in run-unit-tests coverage limit path by using safeExecuteLimitResult()\n- Reserve maxToolCalls slots before any awaited work and roll back on denial\n- Evict safe-execute per-execution counter after the terminal outcome is reported\n- Keep fail-closed scope behavior for destination-mode safe and non-safe paths Co-Authored-By: Petr Plenkov <petr.plenkov@gmail.com>
by Devin AI
Succeeded
feat/scoped-safe-execution
b74d7f86 refactor: split wrapToolHandler and initializeCsrf to improve code health\n\n- Extract parseHandlerArgs, isScopeAllowed, maxToolCallsReached, incrementCounter, and runSafeExecution helpers in destination-mode.ts\n- Extract buildSessionHeaders and deleteSecuritySession private methods in SessionManager to reduce initializeCsrf nesting\n- Keep abort cleanup behavior unchanged (DELETE session without clearing shared state) Co-Authored-By: Petr Plenkov <petr.plenkov@gmail.com>
by Devin AI
Succeeded
feat/scoped-safe-execution
d360bf88 fix(review): address PR #143 review threads\n\n- Deduplicate scope denied / safe-execute limit payloads via utils.ts helpers\n- Track per-execution dispatch counters in destination-mode.ts\n- Include program and class alerts in AUnit resultCounts\n- Add optional objectType to get_object and fail-closed on empty scoped resourceKeys\n- Relax systemSid regex and sort arrays once in snapshotScopedAccess\n- Keep sessionPath/csrfToken for DELETE on cancellation; avoid clearing shared SessionManager state\n- Make runWithAdtAbortSignal async so synchronous abort throws become rejected promises\n- Compose test JWT fixture from segments to avoid scanner match\n- Use shared safeExecuteLimitResult helper in atc-run and run-unit-tests Co-Authored-By: Petr Plenkov <petr.plenkov@gmail.com>
by Devin AI
Succeeded
feat/scoped-safe-execution
20589149 fix: format mcp-runtime, refactor run-unit-tests for code health, swap fake JWT in test Co-Authored-By: Petr Plenkov <petr.plenkov@gmail.com>
by Devin AI