-
Notifications
You must be signed in to change notification settings - Fork 358
Conversation
CLA assistant check
All committers have signed the CLA.
@santoshkumarradha
santoshkumarradha
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for pushing this cleanup through. I found a couple of concrete regressions while validating locally, so I’m requesting changes before this can land.
I ran cd control-plane && go test ./... in a fresh checkout of this PR and the run fails during SQLite setup because the new migration uses IF NOT EXISTS on ALTER TABLE ... ADD COLUMN, which SQLite does not support in the version our tests exercise. I also checked the new root compose.yaml, and the agent services point at ./agent.py, but this repo does not have that file at the root, so the example stack will not start as written.
Also worth noting: I only see the CLA check on the PR right now, so the normal CI gates do not appear to have run yet.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This migration breaks the current SQLite test path. ALTER TABLE ... ADD COLUMN IF NOT EXISTS is not accepted by the SQLite version our suite uses, so go test ./... fails during storage initialization with near "EXISTS": syntax error. Please switch this to the same compatibility pattern we use in earlier migrations so both fresh SQLite DBs and already-migrated DBs work.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This compose example points at ./agent.py, but there is no agent.py at the repo root. In a fresh checkout the bind mount source is missing, so the agent and team services cannot start as written. If this is meant to reuse the triggers demo, please wire it to the real file under examples/triggers-demo/ or add the missing entrypoint alongside this compose file.
Performance
✓ No regressions detected |
santoshkumarradha
commented
Jun 5, 2026
Thanks for the cleanup pass. I did a security-focused read because this PR touches a lot of sensitive surfaces. I don’t see evidence of a supply-chain/backdoor style issue, but I think this should be split up and fixed before merge.
Main blockers:
- The new storage migration breaks fresh SQLite/local startup (
migration 016: near "EXISTS": syntax error), and it also appears to add then dropretry_countin the embedded migration. - The root
compose.yamlhardcodespostgres/postgres,abc123, andadmin123, exposes ports, and references a rootagent.pythat does not exist. - Telemetry/docs changes are not just cleanup for us. Anonymous OSS telemetry and its public disclosure are critical, so flipping telemetry off and removing the docs/privacy context needs a dedicated discussion.
- The new frontend
cpClientshould not attach API/admin tokens to arbitrary absolute URLs; it should stay same-origin/path-only before it becomes a shared helper. - Identity/DID/VC and admin gRPC removals are security/audit surface changes, not tech debt, and need their own PR with rationale and replacement plan.
I’d recommend reducing this into small focused PRs: .DS_Store cleanup, migration fix, compose example, frontend API client refactor, and any identity/admin removals separately.
pocesar
commented
Jun 6, 2026
@santoshkumarradha sorry about the sloppy PR, I was in a rush yesterday. I'll split them properly. Rest assured it's not an account takeover 😆
Summary
Type of change
Test plan
Test coverage
This repo enforces a coverage gate on every PR (see
.github/workflows/coverage.ymlanddocs/COVERAGE.md)../scripts/coverage-summary.shand compares per-surfacenumbers against
coverage-baseline.json.if any surface is below 80%, or if the weighted aggregate falls below
85%.
Before asking for review, please confirm:
coverage-baseline.jsoninthis PR only if the removal caused a legitimate regression and I
called it out in the summary above.
Checklist
docs/DEVELOPMENT.md.
Related issues / PRs