Commit Graph

15 Commits

Author SHA1 Message Date
ci
3683efbff7 ci: bump image to a3f61fc332 2026-06-04 01:26:41 +00:00
robert
a3f61fc332 Trigger agent reviewer image build
All checks were successful
build / build (push) Successful in 15s
2026-06-03 22:26:24 -03:00
robert
c47ae5f0e9 Trigger agent reviewer build 2026-06-03 22:24:57 -03:00
robert
f75f73f29d Add agent reviewer build workflow
Some checks failed
build / build (push) Failing after 1s
2026-06-03 22:20:03 -03:00
robert
5ce474bb55 Update a2a-pack to 0.1.57 2026-06-03 21:58:38 -03:00
robert
e609aa34ef Require forwarded reviewer LLM credentials 2026-06-03 20:59:02 -03:00
robert
f13dd0ac72 Handle missing reviewer LLM credentials 2026-06-03 20:52:07 -03:00
robert
115afed40a Update a2a-pack minimum to 0.1.56 2026-06-03 14:34:00 -03:00
robert
7b75d4b844 Expose reviewer agent ingress 2026-06-02 17:07:02 -03:00
robert
6c5fad682f Pin reviewer deployment image and signing keys 2026-06-02 16:56:48 -03:00
robert
32cab7f29f Require a2a-pack 0.1.53 2026-06-02 15:32:05 -03:00
robert
032df618fe Bump a2a-pack minimum to 0.1.41 2026-05-31 20:53:52 -03:00
robert
8f78bc5edc test: use local a2a package 2026-05-29 10:43:00 -03:00
robert
6d0880ea0d Bump a2a-pack dependency to 0.1.36 2026-05-28 20:22:56 -03:00
robert
64a601a85a feat: initial agent-reviewer meta-agent
A2A agent that audits another deployed agent's source pre-deploy.
Reads the target Gitea repo via a short-lived read-only token minted
through ctx.mint_gitea_token(), runs an inner DeepAgents graph backed
by GiteaBackend, and emits a typed ReviewReport.

Skill bundles:
- security-anti-patterns (credentials, eval, sandbox bypass, egress)
- a2apack-best-practices (class shape, decorators, types, timeouts)
- grant-scope-evaluation (declared vs actual workspace scope)

Tools:
- sandbox_a2a_card  : round-trips the project through microsandbox
- sandbox_ruff_check: objective static checks
- submit_review_report: typed final report

7 smoke tests pass; agent card loads cleanly via `a2a card`.
2026-05-28 09:59:40 -03:00