skynet/agent-runtime-framework
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(decompose-template): replace inline python3 -c paste with cp-cli decompose verb

Browse Source 
The python3 -c block imported internal entrypoint code directly and
pasted module paths into agent prompts — a security boundary violation.
Switch to the thin-client verb (added in agent-runtimes a116aedb).

Claude-Session: https://claude.ai/code/session_0124mK2BVfCdkELLXDCr5Zzs
This commit is contained in:
Paul O'Reilly
2026-08-17 10:11:22 +12:00
parent 18a702d7a0
commit 76a7277961
1 changed files with 2 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
task-templates/workflow/scope-decompose-sonnet@1.yaml
View File

@@ -61,16 +61,6 @@ nodes:
Include "airouter-eligible" in tags only for single-file, self-contained
tasks that Qwen3.6 can handle alone. Omit tags for complex multi-file tasks.
After writing decompose.json, run this Python command to create the work items:
After writing decompose.json, run this command to create the work items:
python3 -c "
import sys, os
sys.path.insert(0, '/opt/agent')
cp_url = os.environ.get('CP_URL', 'http://controlplane.agent-runtimes.svc.cluster.local:8100').rstrip('/')
from actions.decompose_work_items import decompose_work_items_action
decompose_work_items_action(
{'cp_url': cp_url, 'plan_path': '/workspace/.agent-output/decompose.json'},
{}
)
print('decompose_work_items: done')
"
python3 -m lib.cp_cli planner items decompose ${item.uuid} --file /workspace/.agent-output/decompose.json