Merge remote-tracking branch 'origin/main' into feature/debug-repeated-macos-7d7

# Conflicts:
#	docs/decisions/INDEX.md

Author: carlosflorencio

CHANGELOG.md

@@ -36,6 +36,7 @@ Open source, multi-provider, no telemetry, not tied to any cloud.
 - **Integrated workspace** - Built-in terminal, code editor with LSP, git changes panel, embedded vscode and chat in one IDE-like view
 - **Kanban task management** - Drag-and-drop boards, columns, and workflow automation
 - **Agentic workflows** - Multi-step pipelines that mix-and-match agents per step - for example, Claude Code Opus to design a plan, GitHub Copilot Sonnet to implement it, and Codex GPT 5.4 to review the changes. See [docs/workflow-tips.md](docs/workflow-tips.md)
+- **Automations** - Trigger agent tasks on schedules or webhooks, with configurable run destinations, context, and concurrency
 - **Sub-tasks** - Agents can spawn sub-tasks that resume from the parent task's session. Useful for splitting a task that has grown too big, or producing several PRs from the same starting point.
 - **CLI passthrough** - Drop into raw agent CLI mode for direct terminal interaction with agents that support it, leveraging their full native TUI
 - **Workspace isolation** - Git worktrees prevent concurrent agents from conflicting
@@ -44,6 +45,7 @@ Open source, multi-provider, no telemetry, not tied to any cloud.
 - **Runtime settings** - Executor profiles, secrets, custom prompts, utility agents, and resource metrics are configurable from Settings
 - **Task-agent MCP** - Agents can create subtasks, target sibling repos, attach extra branches for multiple PRs, message other tasks, read conversations, and inspect related tasks
 - **External MCP** - Manage Kandev from outside coding agents over streamable HTTP or SSE, with copyable config snippets for popular agent CLIs
+- **Plugin marketplace and management** - Browse, install, update, enable, disable, and configure plugins from Settings, including MCP Explorer and the [Bitbucket plugin](https://github.com/kdlbs/kandev-plugin-bitbucket)
 - **Workflow portability** - Export and import workflows as portable YAML across workspaces or Kandev installs
 - **Session management** - Resume and review agent conversations
 - **Shareable task snapshots** - Publish redacted task conversation snapshots as secret GitHub Gists, with preview and revoke controls
@@ -63,10 +65,11 @@ We're working on **Office mode**, a feature-flagged autonomy layer for persisten
   <a href="https://linear.app/"><img src="https://img.shields.io/badge/Linear-5E6AD2?style=for-the-badge&logo=linear&logoColor=white" alt="Linear"></a>
   <a href="https://sentry.io/"><img src="https://img.shields.io/badge/Sentry-362D59?style=for-the-badge&logo=sentry&logoColor=white" alt="Sentry"></a>
   <a href="https://gitlab.com/"><img src="https://img.shields.io/badge/GitLab-FC6D26?style=for-the-badge&logo=gitlab&logoColor=white" alt="GitLab"></a>
+  <a href="https://azure.microsoft.com/products/devops"><img src="https://img.shields.io/badge/Azure%20DevOps-0078D7?style=for-the-badge&logo=azuredevops&logoColor=white" alt="Azure DevOps"></a>
   <a href="https://slack.com/"><img src="https://img.shields.io/badge/Slack-4A154B?style=for-the-badge&logo=slack&logoColor=white" alt="Slack"></a>
 </p>
 
-Connect Kandev to the tools your team already uses — pull issues into the kanban, link tasks to PRs, and surface review activity inline.
+Connect Kandev to GitHub, GitLab, Jira, Linear, Sentry, and Azure DevOps to pull issues into the kanban, link tasks to PRs, and surface review activity inline. Bitbucket support is available through the [Bitbucket plugin](https://github.com/kdlbs/kandev-plugin-bitbucket).
 
 ## Supported ACP Agents
 

README.md

@@ -388,6 +388,9 @@ func (fakeHostTaskReader) Get(context.Context, string) (*pluginsdk.Task, error)
 func (fakeHostTaskReader) Update(context.Context, pluginsdk.UpdateTaskInput) (*pluginsdk.Task, error) {
 	return nil, nil
 }
+func (fakeHostTaskReader) Move(context.Context, pluginsdk.MoveTaskInput) (*pluginsdk.MoveTaskOutcome, error) {
+	return nil, nil
+}
 
 func (r fakeHostTaskReader) Create(_ context.Context, in pluginsdk.CreateTaskInput) (*pluginsdk.Task, error) {
 	r.h.lastCreateInput = in

apps/backend/cmd/plugin-fixture/main_test.go

@@ -39,6 +39,13 @@ MCP CONFIG TOOLS:
 - get_mcp_config_kandev: Get MCP server config for a profile. Required: profile_id.
 - update_mcp_config_kandev: Update MCP config for a profile. Required: profile_id. Optional: enabled, servers.
 
+SAVED PROMPT TOOLS:
+- list_shared_prompts_kandev: List saved prompt summaries without content.
+- get_shared_prompt_kandev: Read one saved prompt by exact name. Required: name.
+Saved prompt names are case-sensitive. Surrounding whitespace is ignored. Use
+the list result to discover names before reading a prompt. These tools are
+read-only and do not create, update, delete, or expand saved prompts.
+
 TASK TOOLS:
 - list_tasks_kandev: List all tasks in a workflow. Required: workflow_id.
 - move_task_kandev: Move a task to a different workflow step. Required: task_id, workflow_step_id.

apps/backend/config/prompts/config-context.md

@@ -12,6 +12,7 @@ import (
 	"net"
 	"net/netip"
 	"strconv"
+	"strings"
 	"sync"
 	"time"
 
@@ -421,6 +422,11 @@ func (c *Client) RemoveContainer(ctx context.Context, containerID string, force
 			// removed the container already, which is the desired end state.
 			return nil
 		}
+		if containerRemovalInProgress(err) {
+			// A concurrent cleanup owner is already removing the container. Treat
+			// this conflict as success because both callers converge on removal.
+			return nil
+		}
 		c.logger.Error("Failed to remove container", zap.String("container_id", containerID), zap.Error(err))
 		return fmt.Errorf("failed to remove container %s: %w", containerID, err)
 	}
@@ -429,6 +435,16 @@ func (c *Client) RemoveContainer(ctx context.Context, containerID string, force
 	return nil
 }
 
+func containerRemovalInProgress(err error) bool {
+	if !errdefs.IsConflict(err) {
+		return false
+	}
+
+	message := strings.ToLower(err.Error())
+	return strings.Contains(message, "removal of container") &&
+		strings.Contains(message, "already in progress")
+}
+
 func (c *Client) containerRemover() containerRemover {
 	if c.remover != nil {
 		return c.remover

apps/backend/internal/agent/docker/client.go

@@ -166,3 +166,29 @@ func TestContainerTeardownTreatsMissingContainersAsSuccess(t *testing.T) {
 	require.NoError(t, client.KillContainer(context.Background(), "missing-container", "SIGKILL"))
 	require.NoError(t, client.RemoveContainer(context.Background(), "missing-container", true))
 }
+
+func TestRemoveContainerTreatsConcurrentRemovalAsSuccess(t *testing.T) {
+	dockerDaemon := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.Method == http.MethodHead && r.URL.Path == "/_ping" {
+			w.WriteHeader(http.StatusOK)
+			return
+		}
+		w.Header().Set("Content-Type", "application/json")
+		w.WriteHeader(http.StatusConflict)
+		_, _ = w.Write([]byte(`{"message":"removal of container abc is already in progress"}`))
+	}))
+	t.Cleanup(dockerDaemon.Close)
+
+	log, err := logger.NewFromZap(zap.NewNop())
+	require.NoError(t, err)
+	client, err := NewClient(config.DockerConfig{
+		Host:       "tcp://" + strings.TrimPrefix(dockerDaemon.URL, "http://"),
+		APIVersion: "1.44",
+	}, log)
+	require.NoError(t, err)
+
+	// Docker reports a conflict when another owner is already removing the
+	// same container. Removal is a convergence operation, so the in-flight
+	// owner has already taken responsibility for reaching the desired state.
+	require.NoError(t, client.RemoveContainer(context.Background(), "abc", true))
+}

apps/backend/internal/agent/docker/client_test.go

@@ -518,21 +518,94 @@ func (l *Launcher) pipeOutput(name string, scanner *bufio.Scanner) {
 	}
 }
 
-// childLogLevel extracts the level token from a line emitted by the agentctl
-// child's console-format zap logger: "<ts>\t<LEVEL>\t<caller>\t<msg>", where
-// LEVEL is capitalized and may be wrapped in ANSI color codes. It returns the
-// uppercased level ("INFO"/"WARN"/…) or "" when the line does not match that
-// shape.
+// childLogLevel extracts a recognized level from the agentctl child's trusted
+// structured log formats. It returns the uppercased level ("INFO"/"WARN"/…)
+// or "" when the line does not match one of those formats.
 func childLogLevel(line string) string {
 	// A well-formed console record is "<ts>\t<LEVEL>\t<caller>\t<msg>", so the
 	// level token must be bounded by at least a following caller field. Requiring
 	// three segments rejects truncated lines (e.g. "<ts>\t<token>") whose second
 	// field is not actually a level, so they fall back to WARN.
 	fields := strings.SplitN(line, "\t", 4)
-	if len(fields) < 3 {
+	if len(fields) >= 3 {
+		if level := recognizedChildLogLevel(stripANSI(fields[1])); level != "" {
+			return level
+		}
+	}
+
+	if level := childSlogTextLevel(line); level != "" {
+		return level
+	}
+
+	// slog.Default uses the standard log package's date/time prefix followed by
+	// the level and message, for example "2026/08/12 10:00:00 INFO message".
+	defaultFields := strings.Fields(line)
+	if len(defaultFields) < 3 {
+		return ""
+	}
+	if _, err := time.Parse("2006/01/02 15:04:05", defaultFields[0]+" "+defaultFields[1]); err != nil {
 		return ""
 	}
-	level := strings.ToUpper(stripANSI(fields[1]))
+	return recognizedChildLogLevel(stripANSI(defaultFields[2]))
+}
+
+func childSlogTextLevel(line string) string {
+	fields, ok := splitSlogTextFields(line)
+	if !ok || len(fields) < 3 || !strings.HasPrefix(fields[0], "time=") ||
+		!strings.HasPrefix(fields[1], "level=") {
+		return ""
+	}
+	for _, field := range fields[2:] {
+		if strings.HasPrefix(field, "msg=") {
+			return recognizedChildLogLevel(stripANSI(strings.TrimPrefix(fields[1], "level=")))
+		}
+	}
+	return ""
+}
+
+func splitSlogTextFields(line string) ([]string, bool) {
+	fields := make([]string, 0, 4)
+	start := -1
+	inQuotes := false
+	escaped := false
+	for i := 0; i < len(line); i++ {
+		ch := line[i]
+		if start < 0 {
+			if ch == ' ' || ch == '\t' {
+				continue
+			}
+			start = i
+		}
+		if inQuotes {
+			switch {
+			case escaped:
+				escaped = false
+			case ch == '\\':
+				escaped = true
+			case ch == '"':
+				inQuotes = false
+			}
+			continue
+		}
+		switch ch {
+		case '"':
+			inQuotes = true
+		case ' ', '\t':
+			fields = append(fields, line[start:i])
+			start = -1
+		}
+	}
+	if inQuotes || escaped {
+		return nil, false
+	}
+	if start >= 0 {
+		fields = append(fields, line[start:])
+	}
+	return fields, true
+}
+
+func recognizedChildLogLevel(level string) string {
+	level = strings.ToUpper(level)
 	switch level {
 	case "DEBUG", "INFO", "WARN", "ERROR", "FATAL", "PANIC", "DPANIC":
 		return level

apps/backend/internal/agent/runtime/agentctl/launcher/launcher.go

@@ -1,6 +1,12 @@
 package launcher
 
-import "testing"
+import (
+	"bytes"
+	stdlog "log"
+	"log/slog"
+	"strings"
+	"testing"
+)
 
 func TestChildLogLevel(t *testing.T) {
 	tests := []struct {
@@ -78,6 +84,98 @@ func TestChildLogLevel(t *testing.T) {
 	}
 }
 
+func TestChildLogLevelSlogTextRecords(t *testing.T) {
+	tests := []struct {
+		name  string
+		level string
+		want  string
+	}{
+		{name: "debug", level: "DEBUG", want: "DEBUG"},
+		{name: "info", level: "INFO", want: "INFO"},
+		{name: "warn", level: "WARN", want: "WARN"},
+		{name: "error", level: "ERROR", want: "ERROR"},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			line := "time=2026-08-12T10:00:00.000Z level=" + tt.level +
+				" source=main.go:97 msg=\"agentctl record\""
+			if got := childLogLevel(line); got != tt.want {
+				t.Fatalf("childLogLevel(%q) = %q, want %q", line, got, tt.want)
+			}
+		})
+	}
+}
+
+func TestChildLogLevelSlogDefaultRecords(t *testing.T) {
+	var output bytes.Buffer
+	originalWriter := stdlog.Writer()
+	originalFlags := stdlog.Flags()
+	stdlog.SetOutput(&output)
+	stdlog.SetFlags(stdlog.LstdFlags)
+	t.Cleanup(func() {
+		stdlog.SetOutput(originalWriter)
+		stdlog.SetFlags(originalFlags)
+	})
+
+	tests := []struct {
+		name  string
+		write func()
+		want  string
+	}{
+		{name: "info", write: func() { slog.Default().Info("agentctl record", "component", "acp-conn") }, want: "INFO"},
+		{name: "warn", write: func() { slog.Default().Warn("agentctl record", "component", "acp-conn") }, want: "WARN"},
+		{name: "error", write: func() { slog.Default().Error("agentctl record", "component", "acp-conn") }, want: "ERROR"},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			output.Reset()
+			tt.write()
+			line := strings.TrimSpace(output.String())
+			if line == "" {
+				t.Fatal("slog.Default produced no output")
+			}
+			if got := childLogLevel(line); got != tt.want {
+				t.Fatalf("childLogLevel(%q) = %q, want %q", line, got, tt.want)
+			}
+		})
+	}
+}
+
+func TestChildLogLevelRejectsMalformedSlogTextRecords(t *testing.T) {
+	tests := []struct {
+		name string
+		line string
+	}{
+		{
+			name: "missing time anchor",
+			line: "level=INFO source=main.go:97 msg=\"agentctl record\"",
+		},
+		{
+			name: "missing level anchor",
+			line: "time=2026-08-12T10:00:00.000Z msg=\"level=INFO\"",
+		},
+		{
+			name: "missing message field",
+			line: "time=2026-08-12T10:00:00.000Z level=INFO source=main.go:97",
+		},
+		{
+			name: "level anchor is not second field",
+			line: "time=2026-08-12T10:00:00.000Z source=main.go:97 level=INFO msg=\"record\"",
+		},
+		{
+			name: "message-looking key is inside a quoted attribute",
+			line: `time=2026-08-12T10:00:00.000Z level=INFO attr="foo msg=bar" component=acp-conn`,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			if got := childLogLevel(tt.line); got != "" {
+				t.Fatalf("childLogLevel(%q) = %q, want no recognized level", tt.line, got)
+			}
+		})
+	}
+}
+
 func TestStripANSI(t *testing.T) {
 	tests := []struct {
 		name string