Kevin Veen-BirkenbachandClaude Opus 5.5
d9eb121d12
Requirement 001 phase 6, S5: - Tasks tab: every pending ask, rule request, operator row and choice card shows under "waits on Operator"; a choice request goes out on a fixed channel button, post and call with an agent multi-select, and a click on an option sends a passkey-signed answer the agent checks with operator_message. The unsigned /api/decisions/<id>/choose route is gone, and a decision, choice answer or choice recipient whose name holds "*" is refused, so a signed answer never reaches every agent. - Gantt view: one bar per task from start to end (running to now), one arrow per explicit, branch-base and queue-order edge, hatched forecast bars (always, points only, real only) from the median duration or points times median hours per point. - rasci.py set --after/--drop-after stores task dependencies and refuses unknown tasks and cycles. - Estimation toggle (No estimate default, Story points) is stored in the hub settings; burndown and burnup per whole register, list filter or one agent or line, counting tasks or summing complexity with the unestimated tasks as their own line. - New skill kvb-org-queue-estimate: "Request estimates" (story points mode, passkey-signed board action) or the skill sends exactly one newsletter listing every unestimated task with its RASCI parties; a party name that is no plain name shows as "unnamed party". - Business value per task or in bulk is stored only with a verified passkey assertion over the exact ids and values; WSJF uses it instead of the median. The task list sorts by every decision-50 mode both ways. - e2e: the walk's pending ask lives an hour instead of 60 s, and the CDP and BiDi drivers retry removing the browser profile while the browser exits (ENOTEMPTY). Evidence: make test 709 OK, ruff and markdownlint clean (/tmp/s5-make-test-fix-2.log); e2e 26 OK in Chromium and Firefox (/tmp/s5-e2e-fix-2.log); MEDUSA 50 files, an independent skeptic rejected four holes (unsigned choose route, unsigned estimates request, free-text party names, "*" recipients incl. normalizer bypasses), all fixed and re-verified, the 8 remaining pattern hits accepted, rescan 0 open. 🎯 Fix: 92 % 💥 Break: 4 % 💸 Cost: 100 % ⏱️ Time: – 🛡️ Security: 100 % 🏆 Score: 88 🚦 Gate: ✅ 90/5, cost and time <= 100, security 100 % Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
46 lines
1.5 KiB
Python
46 lines
1.5 KiB
Python
from __future__ import annotations
|
|
|
|
import subprocess
|
|
import sys
|
|
from dataclasses import dataclass
|
|
from pathlib import Path
|
|
from typing import Protocol
|
|
|
|
SCRIPT_TIMEOUT = 60
|
|
OUTPUT_LIMIT = 4000
|
|
SAFE_PATH = "/usr/local/bin:/usr/bin:/bin"
|
|
RADIO = "kvb-org-radio/scripts/radio.py"
|
|
RASCI = "kvb-org-rasci/scripts/rasci.py"
|
|
NIGHT = "kvb-org-suspend/scripts/night.py"
|
|
OPERATOR_SCRIPT = "kvb-org-operator/scripts/operator.py"
|
|
ESTIMATE = "kvb-org-queue-estimate/scripts/estimate.py"
|
|
|
|
|
|
class Runner(Protocol):
|
|
def run(self, script: str, args: list[str]) -> dict: ...
|
|
|
|
|
|
@dataclass(frozen=True)
|
|
class Scripts:
|
|
skills: Path
|
|
council: Path
|
|
home: Path
|
|
|
|
def run(self, script: str, args: list[str]) -> dict:
|
|
command = " ".join([Path(script).name, *args])
|
|
env = {"PATH": SAFE_PATH, "HOME": str(self.home), "AGENTS_COUNCIL_ROOT": str(self.council), "PYTHONDONTWRITEBYTECODE": "1"}
|
|
try:
|
|
done = subprocess.run(
|
|
[sys.executable, str(self.skills / script), *args],
|
|
capture_output=True,
|
|
encoding="utf-8",
|
|
errors="replace",
|
|
timeout=SCRIPT_TIMEOUT,
|
|
env=env,
|
|
stdin=subprocess.DEVNULL,
|
|
check=False,
|
|
)
|
|
except (OSError, subprocess.TimeoutExpired) as error:
|
|
return {"command": command, "code": -1, "stdout": "", "stderr": str(error)}
|
|
return {"command": command, "code": done.returncode, "stdout": done.stdout[-OUTPUT_LIMIT:], "stderr": done.stderr[-OUTPUT_LIMIT:]}
|