2 Commits

Include renames

Author	SHA1	Message	Date
Omar SobhandClaude Opus 5	285d0c82f2	chore: delete dead scaffolding and stop fabricating claw capability cards ... Tier 0 of the prompt-ablation pass -- subtraction only, none of this reached a model. - cm-brain: drop ClawBrain::export_markdown (zero callers). - workflows: drop the `task_preamble` keys. No Rust code ever read them -- WorkflowPhase.config is an opaque serde_json::Value -- so the comment calling the preamble "the belt, the skill the suspenders" described a belt that was never implemented. (`commit_policy` is unread for the same reason; left in place as documentation pending a decision.) - mcp_door: derive the unknown-tool error from EXPOSED_TOOLS. The literal had drifted to naming one of the three tools the door exposes. - Dashboard.tsx: drop TEAM_TEMPLATES/COMPANY_TEMPLATES, defined and never referenced, and disconnected from the real templates/teams/*.toml. The substantive one: GET /api/claws/{id}/compartments returned hardcoded strings for tools/capabilities/safety, identical for every claw. Every card read "Network: none" and "Shell . blocked" regardless of the claw's real risk_profile -- which is the actual capability boundary, so the card was most wrong exactly where it mattered, on a coding_readwrite claw that does have shell. Now derived from the claw's effective risk_profile (its team's setting, else the same role-derived default the provisioner applies), with the allowlists mirroring [risk_profiles.*] in the runtime config. Note: cm-topology/src/heuristics.rs was slated for deletion here as unused. It is not -- routes/topology.rs:43 serves it and p0_endpoints.rs:302 asserts it. Left alone. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>	2026-07-30 10:44:33 -07:00
Omar SobhandClaude Opus 4.7	565f6cae65	slice 4: 5 workflow templates as TOML recipes + mission-launch orchestrator ... Two things land together: 1. Ships the 5 workflow recipes as TOML files under templates/workflows/*.toml: - research_only (hub_spoke research → MD + PDF) - research_and_code (research → coding loop until INT-XX drained) - security_hardening (scan → research patches → coding with reviewer approval + full MCP bundle) - refactor (single-pass coding with dep audit preamble + before/after benchmarks) - benchmark (author + baseline benchmarks per stack) Each declares phases[], per-phase config, default_team_template. Loaded read-only into an in-memory registry (workflow_registry) via OnceLock — no DB row per recipe. 2. Ships the mission-launch orchestrator that closes the loop from Slice 3.5d's mechanics. When a mission transitions draft→running, `mission_orchestrator::on_launch`: - Reads mission.team_template_id (skips if unset) - Loads the team template detail (roles + skills bindings) - Builds a topology graph from role slots via cm_topology::build - Inserts the teams row + stamps template_id/version/risk_profile/mcp_bundles - For each role: agent insert, model binding, runtime provision (opt-in via RuntimeProvisioner::from_env), brain_seed::ingest (Slice 3.5d), agent_template_link::upsert (Slice 3.5d), team_members bind, audit trail - UPDATE missions SET team_id = ... Wired into routes::missions::set_status when prior.status='draft' and new='running'. Failures log + are non-fatal (mission still flips to running so the user can inspect + retry). With this, Slice 3.5d's brain-seed + link machinery actually gets populated, and the MCP skills server's template-defaults-merge path (Slice 3.5b/d) starts serving real bindings to real agents. Follow-ups (Slice 5-8): - Task-card parser watches run events for TASK/COMPLETED markers → mission_tasks rows - PDF renderer worker turns MD artifacts into PDFs - Before/after benchmark runner honors phases[].config.benchmark - Security scan MCP bundle exposes cargo-audit/gitleaks/trivy/semgrep - Level-up endpoints diff learned-vs-seeded via agent_template_link Co-Authored-By: Claude Opus 4.7 <[email protected]>	2026-07-19 14:34:26 -07:00