* ci(security): run deterministic eval tests in affected-area CI (Task 04) The build-check job validated build + suite structure but never ran the tests, and its summary referenced a `test:ci` script that did not exist. Make affected-area CI meaningful: - Add `test:ci` to evals/framework running the offline, deterministic Vitest allowlist (7 files / 112 tests) — no model, network, or paid execution. - Add a required "Run deterministic tests" step to build-check; a failure fails the job and the existing PR summary gate (which keys on build-check.result) fails closed. - Correct the summary note to state test:ci runs the deterministic allowlist and that model/network agent suites are excluded on PRs. The broader deterministic suite has 3 pre-existing failing files (framework-confidence, logger, test-runner; confirmed failing before this work) which are intentionally out of the allowlist and tracked separately. Validated locally: build, validate:suites:all, and test:ci all exit 0. * ci(security): least privilege permissions + pin actions to SHAs (Task 05) Harden all 9 GitHub Actions workflows: Least privilege: - Add explicit top-level `permissions: contents: read` to installer-checks, validate-test-suites, and opencode (opencode's job keeps the writes it needs; the top level now defaults to read). - Every workflow now declares an explicit top-level permissions block. - Write scopes retained only where justified (releases, doc/registry commits, follow-up PRs, and sync-docs' issues.create). Immutable action pinning: - Pin every `uses:` to a full 40-char commit SHA with a version comment, including first-party actions/* (checkout, github-script, setup-node, upload-artifact) and third-party (oven-sh/setup-bun). - Replace the two mutable refs that could change under us at any push: ludeeus/action-shellcheck@master and sst/opencode/github@latest. Record all SHAs, versions, and permission justifications in docs/maintenance/repository-recovery/action-pin-inventory.md. Verified: all 9 workflows parse as valid YAML; no floating tag/branch refs remain; every workflow has a top-level permissions block. * docs(security): add SECURITY.md and private-reporting checklist (Task 06) - Add root SECURITY.md: supported versions (0.7.x), private reporting via GitHub's "Report a vulnerability", best-effort response expectations, coordinated disclosure, and no-secret guidance. - Add private-vulnerability-reporting checklist that separates repository file work (this PR) from GitHub settings changes that require their own approval (Task 07: enabling private vulnerability reporting). No external links to validate; the reporting path uses the repo Security tab. SECURITY.md documents the private reporting path ahead of Task 07 enabling it. * ci(security): add dependency governance and ownership controls (Task 08) - .github/dependabot.yml: weekly grouped github-actions updates (keeps the Task 05 SHA pins current). Scoped to actions only — the primary lockfile is bun.lock and Dependabot's npm ecosystem would desync it; npm dependency risk is covered by dependency-review below. - .github/workflows/dependency-review.yml: runs on PRs with contents: read, SHA-pinned actions, fail-on-severity: high to block newly introduced high-severity vulnerabilities (exceptions documented inline). - .github/CODEOWNERS: default owner @darrenhinde with explicit ownership of security-sensitive paths (workflows, dependabot, CODEOWNERS, SECURITY.md, scripts/validation). Verified: dependabot.yml and dependency-review.yml are valid YAML; dependency-review actions are SHA-pinned with contents: read; CODEOWNERS owner is the repository owner. * docs(security): record GitHub security settings evidence (Task 07) Enable private vulnerability reporting and record read-back evidence. Settings changed (each approved immediately before, verified by read-back): - Private vulnerability reporting: enabled=false -> enabled=true. The Security tab now offers "Report a vulnerability", making the path documented in SECURITY.md live. - Dependency Graph / Dependabot alerts: 404 -> 204. This was an undocumented prerequisite of Task 08's dependency-review.yml, which failed with "Dependency graph is not enabled"; the Dependency Review check on PR #336 went fail -> pass after enabling it. No other repository setting was modified; secret scanning and push protection are unchanged, and dependabot_security_updates remains disabled (out of scope, would need its own approval). Both changes are reversible via the corresponding DELETE calls. Marks Part B of the private-vulnerability-reporting checklist complete. |
||
|---|---|---|
| .. | ||
| agents | ||
| framework | ||
| results | ||
| test_tmp | ||
| CORE_TEST_SUITE.md | ||
| CREATING_TESTS.md | ||
| EVAL_FRAMEWORK_GUIDE.md | ||
| GROK_TEST_RESULTS.md | ||
| PRODUCTION_READINESS_ASSESSMENT.md | ||
| README.md | ||
| SUBAGENT_TESTING.md | ||
| SUMMARY.md | ||
Agent Evaluation Framework
Test and validate agent behavior with automated evaluations.
Quick Start
cd evals/framework
# Run golden tests (baseline - 8 tests, ~2-3 min)
npm run eval:sdk -- --agent=openagent --pattern="**/golden/*.yaml"
# Run a specific test
npm run eval:sdk -- --agent=openagent --pattern="**/smoke-test.yaml"
# Run with debug output (includes multi-agent logging)
npm run eval:sdk -- --agent=openagent --pattern="**/golden/*.yaml" --debug
✨ New Features
Multi-Agent Logging (Dec 2025)
Beautiful hierarchical logging shows parent-child delegation chains:
┌────────────────────────────────────────────────────────────┐
│ 🎯 PARENT: OpenAgent (ses_xxx...) │
└────────────────────────────────────────────────────────────┘
┌────────────────────────────────────────────────────────────┐
│ 🎯 CHILD: simple-responder (ses_yyy...) │
│ Parent: ses_xxx... │
│ Depth: 1 │
└────────────────────────────────────────────────────────────┘
✅ CHILD COMPLETE (2.9s)
✅ PARENT COMPLETE (20.9s)
Enable with --debug flag. See MULTI_AGENT_LOGGING_COMPLETE.md for details.
Performance Improvements (Dec 2025)
- 10-20% faster tests - Grace period reduced from 5s to 2s
- Performance metrics - Automatic collection of tool latencies, inference time
- 37 unit tests - Complete test coverage for logging system
Golden Tests
8 curated tests that validate core agent behaviors:
| Test | What It Validates |
|---|---|
| 01-smoke-test | Agent & subagent delegation (multi-agent) |
| 02-context-loading | Agent reads context before answering |
| 03-read-before-write | Agent inspects before modifying |
| 04-write-with-approval | Agent asks before writing |
| 05-multi-turn-context | Agent remembers conversation |
| 06-task-breakdown | Agent reads standards before implementing |
| 07-tool-selection | Agent uses dedicated tools (not bash) |
| 08-error-handling | Agent handles errors gracefully |
# Run all golden tests
npm run eval:sdk -- --agent=openagent --pattern="**/golden/*.yaml"
Creating Custom Tests
See CREATING_TESTS.md for:
- Test templates (copy and modify)
- Behavior options (mustUseTools, requiresApproval, etc.)
- NEW:
expectedContextFiles- Explicitly specify which context files to validate - Expected violations
- Examples
New Feature: Explicit Context File Validation
You can now explicitly specify which context files the agent must read:
behavior:
requiresContext: true
expectedContextFiles:
- .opencode/context/core/standards/code.md
- standards/code.md
See agents/shared/tests/EXPLICIT_CONTEXT_FILES.md for detailed guide.
Quick example:
id: my-test
name: "My Test"
description: What this tests.
category: developer
prompts:
- text: Read evals/test_tmp/README.md and summarize it.
approvalStrategy:
type: auto-approve
behavior:
mustUseTools: [read]
expectedViolations:
- rule: approval-gate
shouldViolate: false
severity: error
timeout: 60000
Evaluators
| Evaluator | What It Checks |
|---|---|
| approval-gate | Approval requested before risky operations |
| context-loading | Context files loaded before acting (supports explicit file specification) |
| execution-balance | Read operations before write operations |
| tool-usage | Dedicated tools used instead of bash |
| behavior | Expected tools used, forbidden tools avoided |
| delegation | Complex tasks delegated to subagents |
| stop-on-failure | Agent stops on errors instead of auto-fixing |
Directory Structure
evals/
├── README.md # This file
├── CREATING_TESTS.md # How to create custom tests
├── framework/ # Test runner and evaluators
│ ├── src/
│ │ ├── sdk/ # Test execution
│ │ └── evaluators/ # Rule validators
│ └── README.md # Technical details
├── agents/
│ ├── shared/tests/
│ │ ├── golden/ # 8 baseline tests
│ │ └── templates/ # Test templates
│ └── core/openagent/tests/ # Agent-specific tests
├── results/ # Test results
│ ├── latest.json
│ └── index.html # Dashboard
└── test_tmp/ # Temp files (auto-cleaned)
CLI Options
npm run eval:sdk -- [options]
Options:
--agent=NAME Agent to test (openagent, opencoder, core/openagent)
--subagent=NAME Test a subagent (coder-agent, tester, reviewer, etc.)
Default: Standalone mode (forces mode: primary)
--delegate Test subagent via parent delegation (requires --subagent)
--pattern=GLOB Test file pattern (default: **/*.yaml)
--debug Enable debug output, keep sessions for inspection
--verbose Show full conversation (prompts + responses) after each test
(automatically enables --debug)
--model=PROVIDER/MODEL Override model (default: opencode/big-pickle)
--timeout=MS Test timeout (default: 60000)
--prompt-variant=NAME Use specific prompt variant (gpt, gemini, grok, llama)
Auto-detects recommended model from prompt metadata
--no-evaluators Skip running evaluators (faster iteration)
--core Run core test suite only (7 tests, ~5-8 min)
Examples
# Run golden tests with verbose output (see full conversations)
npm run eval:sdk -- --agent=openagent --pattern="**/golden/*.yaml" --verbose
# Test subagent standalone (forces mode: primary)
npm run eval:sdk -- --subagent=coder-agent
# Test subagent via delegation (uses parent agent)
npm run eval:sdk -- --subagent=coder-agent --delegate
# Test with a specific model
npm run eval:sdk -- --agent=openagent --model=anthropic/claude-3-5-sonnet-20241022
# Test with a prompt variant (auto-detects model)
npm run eval:sdk -- --agent=openagent --prompt-variant=llama
# Quick iteration without evaluators
npm run eval:sdk -- --agent=openagent --pattern="**/01-smoke-test.yaml" --no-evaluators
Quick Commands (Makefile)
From the project root, you can use these shortcuts:
# Full pipeline: build, validate, run golden tests
make test-evals
# Just run golden tests (8 tests, ~3-5 min)
make test-golden
# Quick smoke test (1 test, ~30s)
make test-smoke
# Run with verbose output (see full conversations)
make test-verbose
# Test specific agent
make test-agent AGENT=opencoder
# Test subagent (standalone mode)
make test-subagent SUBAGENT=coder-agent
# Test subagent (delegation mode)
make test-subagent-delegate SUBAGENT=coder-agent
# Test with specific model
make test-model MODEL=anthropic/claude-3-5-sonnet-20241022
# Test with prompt variant
make test-variant VARIANT=llama
# View results
make view-results # Open dashboard in browser
make show-results # Show summary in terminal
For detailed subagent testing guide, see SUBAGENT_TESTING.md
Results
Results are saved to evals/results/:
latest.json- Most recent runhistory/- Historical results (by month)index.html- Dashboard (open in browser)
# View dashboard
make view-results
# Or manually:
cd evals/results && python -m http.server 8080
# Open http://localhost:8080