gemini(w5): preview projection maxTasks boundary test #126

New issue

Closed

opened 2026-05-28 01:20:43 +02:00 by codex · 1 comment

codex commented

2026-05-28 01:20:43 +02:00

Collaborator

Parent: #2
Agent lane: Gemini 3.5 Flash
Wave: 5 / Swarmheart / Leviathan
Risk class: low

Goal

Ensure preview enforces safety caps before expensive or misleading work.

Context refs

docs/leviathan-projection-contract.md
packages/api/src/routers/agent.ts

Scope

Find preview projection implementation.
Add test around maxTasks exactly at, below, and above limit.
Assert errors are structured and non-mutating.

Acceptance

Too many tasks fail before preview construction.
No audit/write side effects occur in preview-only paths.
Error tells caller how to split batches.

Suggested checks

Projection preview tests.

Non-goals / fences

Do not deploy, restart production, rotate secrets, or run production migrations.
Do not widen MCP write authority or public exposure.
Keep the change small enough for one focused PR or one scouting report.

Expected output

A short PR or issue comment with findings, touched files, tests run, and remaining risks.

Parent: #2 Agent lane: Gemini 3.5 Flash Wave: 5 / Swarmheart / Leviathan Risk class: low ## Goal Ensure preview enforces safety caps before expensive or misleading work. ## Context refs - `docs/leviathan-projection-contract.md` - `packages/api/src/routers/agent.ts` ## Scope - Find preview projection implementation. - Add test around `maxTasks` exactly at, below, and above limit. - Assert errors are structured and non-mutating. ## Acceptance - Too many tasks fail before preview construction. - No audit/write side effects occur in preview-only paths. - Error tells caller how to split batches. ## Suggested checks - Projection preview tests. ## Non-goals / fences - Do not deploy, restart production, rotate secrets, or run production migrations. - Do not widen MCP write authority or public exposure. - Keep the change small enough for one focused PR or one scouting report. ## Expected output A short PR or issue comment with findings, touched files, tests run, and remaining risks.

codex added the

labels

2026-05-28 01:20:43 +02:00

codex referenced this issue from a commit

2026-06-03 09:32:03 +02:00

fix(agent): cap Leviathan preview tasks (#126)

codex referenced this issue from a pull request that will close it,

2026-06-03 09:32:24 +02:00

fix(agent): cap Leviathan preview tasks #146

codex commented

2026-06-03 09:32:37 +02:00

Author

Collaborator

Implemented as PR #146.

Scope:

previewLeviathanProjection now accepts and enforces maxTasks before preview construction.
Shared API guard is used by preview/apply paths.
MCP preview_leviathan_projection exposes the same maxTasks input.
Integration test covers below-limit, at-limit, and above-limit previews.
Above-limit preview asserts no card creation and no agent audit side effects.

Checks run:

pnpm --filter @kan/api exec vitest integration-tests/agent.integration.test.ts --run -t "enforces Leviathan preview maxTasks"
pnpm --filter @kan/api exec vitest integration-tests/agent.integration.test.ts --run
pnpm --filter @kan/api typecheck
pnpm --filter @kan/mcp typecheck
pnpm --filter @kan/mcp test
pnpm exec prettier --check packages/api/src/routers/agent.ts packages/api/integration-tests/agent.integration.test.ts packages/mcp/src/client.ts packages/mcp/src/index.ts

No deploy, migration, token/scope change, or real projection write.

Implemented as PR #146. Scope: - `previewLeviathanProjection` now accepts and enforces `maxTasks` before preview construction. - Shared API guard is used by preview/apply paths. - MCP `preview_leviathan_projection` exposes the same `maxTasks` input. - Integration test covers below-limit, at-limit, and above-limit previews. - Above-limit preview asserts no card creation and no agent audit side effects. Checks run: - `pnpm --filter @kan/api exec vitest integration-tests/agent.integration.test.ts --run -t "enforces Leviathan preview maxTasks"` - `pnpm --filter @kan/api exec vitest integration-tests/agent.integration.test.ts --run` - `pnpm --filter @kan/api typecheck` - `pnpm --filter @kan/mcp typecheck` - `pnpm --filter @kan/mcp test` - `pnpm exec prettier --check packages/api/src/routers/agent.ts packages/api/integration-tests/agent.integration.test.ts packages/mcp/src/client.ts packages/mcp/src/index.ts` No deploy, migration, token/scope change, or real projection write.