Test results

Full go build + go vet across all packages. New local starter pack handler (embedded JSON + 3-pass agent import) compiles cleanly. Pre-existing IPv6 vet warning in IMAP client (not related).

All frontend/shared-package unit tests: @caliptic/core (152), @caliptic/views (645 — including fixed members-tab test mocks for MemberDetailPanel + isLocalEdition + dropdown event bubbling), @caliptic/web (30), @caliptic/desktop (65), @caliptic/license-issuer (13). 6 flaky timeouts under full parallel load pass individually.

tsc --noEmit across the monorepo: @caliptic/core, @caliptic/views, @caliptic/ui, @caliptic/web, @caliptic/desktop, @caliptic/docs, @caliptic/license-issuer. New local-starter-pack-tab.tsx and showcase-import-tab delegation compile cleanly.

New embedded starter pack: 47 agents + 60 skills static JSON (go:embed), manifest endpoint, 3-pass import handler (supervisors → workers → links), runtime/model selection, dedup by name. Frontend Settings → Starter Pack tab with runtime selector + model input.

End-to-end penetration tests covering 14 private-project leak paths, 8 agent-invocation ACL bypass paths, 3 cross-workspace ID manipulation paths, and 5 regression scenarios. All paths still close under the new approval + agent_access changes.

Brand-new suite covering all 10 approval-related HTTP endpoints (issue gate + workflow CRUD + decision + my-pending) plus the 5 helper functions. Surfaced and fixed 3 production bugs: a group-approval visibility leak across workspace members, a bogus-stepID-marks-request-approved data integrity hole, and a schema-drift 404 on GetApprovalRequest. Regression test for each.

Pure-logic unit tests for the rule engine: all 8 operators in evalCondition (eq / neq / contains / is_empty / is_not_empty / in / nin / unknown), getFieldValue resolution + unknown-field fallback, AND short-circuit in evaluateConditions, JSON payload extraction. Pinned the numeric-string coercion contract that issue.number-style comparisons rely on.

Two-file suite covering ComputeNextRun (happy path + 7 invalid cron expressions + timezone correctness UTC vs Asia/Kolkata), ValidateTimezone (4 good + 5 bad zones), and the autopilot HTTP handler validation matrix — including the security guard that rejects non-agent assignees and the schedule-trigger-requires-cron / webhook-has-no-cron contract.

Coverage of the round-robin rotation helper, all 6 assignment HTTP endpoints, and the security/contract guard ensuring disabled groups return 404 (same response as unknown) so the UI can't surface them as functional. Skill-level out-of-range coercion to 3 is now contract-tested.

Full matrix for userCanUseAgent: workspace owner / admin always pass, agent owner passes, no-grants + visibility = workspace allows any member, no-grants + private denies non-owner, restricted-mode requires direct member grant OR group membership, non-workspace-member denied at the first gate. Plus all 3 access-CRUD HTTP endpoints with non-manager 403s.

Coverage of all 5 mail-inbox endpoints. Surfaced and fixed 3 bugs: a folder→imap_folder schema drift that 500'd every ListMailInboxes call, a placeholder-counter desync in UpdateMailInbox that intermittently crashed UPDATE requests with extra fields, and a last_poll_at value that was scanned then discarded (always null in the response). Each fix has a regression guard.

Sprint lifecycle invariants: create, start (with backlog promotion), close (carry-over + revert), add/remove issue, conflict detection, transactional-consistency guard. Carried over from v0.1.33.

All other server-side unit tests: HMAC task tokens, daemon (session resume, message retry, SIGTERM), repo cache (bare dir collision), middleware, supervisor/agent ACL helpers, calipticore module gating with the new NoProject flag, and recent dedup-status PRs. Excludes the dedicated rounds above, which are listed separately.

All frontend/shared-package unit tests: @caliptic/core (97), @caliptic/views (550 — including the new runtimes/utils.ts cost+aggregation coverage and issues/utils/sort.ts coverage from this release), @caliptic/web (28), @caliptic/license-issuer (13), @caliptic/desktop (43). First release where Vitest counts are surfaced on this page.

tsc --noEmit across the monorepo: @caliptic/core, @caliptic/views, @caliptic/ui, @caliptic/web, @caliptic/desktop, @caliptic/docs, @caliptic/license-issuer.

helm lint + helm template against onprem, openshift, cloud, and tenant override values files. Carried over from v0.1.33.

End-to-end penetration tests covering 14 private-project leak paths, 8 agent-invocation ACL bypass paths, 3 cross-workspace ID manipulation paths, and 5 regression scenarios to ensure public-project flows still work.

Sprint lifecycle invariants: create, start (with backlog promotion), close (carry-over + revert), add/remove issue, conflict detection, and the transactional-consistency guard.

Server-side unit tests for the auth layer (HMAC task tokens), daemon (session resume, message retry, SIGTERM), repo cache (bare dir collision), handler middleware, and supervisor/agent ACL helpers.

tsc --noEmit across all monorepo packages: @caliptic/core, @caliptic/views, @caliptic/ui, @caliptic/web, @caliptic/desktop, @caliptic/docs.

helm lint + helm template against onprem, openshift, cloud, and tenant override values files to catch chart regressions before production deploy.

Introduced this commit. Covers create, start with backlog promotion, close (both carry-over modes), add/remove issue, conflict detection, and the regression guard against the 'sprint started but issues vanished' bug.

Auth, daemon, repo cache, handler middleware. The sprint module is now fully covered by the new suite above.

All monorepo packages typecheck cleanly under tsc --noEmit. Sprint frontend WS sync changes don't break any TS contracts.

Verified Mac auto-update restart fix compiles cleanly across web + desktop.

Cross-platform Electron build pipeline produced signed installers for all three OS targets.

Migration 100-103 applied cleanly (task_dependencies, supervisor_scope, agent_access, project_knowledge). All existing handler + service tests still pass with the new schema.

New packages: @caliptic/views/supervisors. All monorepo packages compile cleanly with the new shared components.

CLI issue --issue-type flag tested via cmd_issue_test.go round-trip.