The deploy repo NetworkPolicy admits :8100 only from named apps and the traefik/cms-proxy namespaces; agent/script pods time out, so state-tx / cp-cli calls silently lost transitions. Invariant now rejects the in-cluster form and pins the ingress URL. Claude-Session: https://claude.ai/code/session_01N218bERyNeLhbLmDRDvbWF
142 lines
6.5 KiB
YAML
142 lines
6.5 KiB
YAML
name: scope-decompose-sonnet
|
||
version: 2
|
||
description: Scope and decompose a spec into tagged tasks using Sonnet planning (CP-side apply-verified; WF-COMP-33 / WIA-47)
|
||
runtime: spec-writing-sonnet-repo
|
||
input:
|
||
state: spec-reviewed-arch
|
||
tags_forbidden: []
|
||
required_artifacts: []
|
||
output:
|
||
state: scoped-tagged
|
||
scope_budget:
|
||
files_modified_max: 10
|
||
lines_diff_max: 500
|
||
wall_clock_seconds_max: 2400
|
||
nodes:
|
||
# WF-COMP-33 / WIA-47 / WV-36..37 — the agent's only side effect is the
|
||
# declared output `plan_manifest` plus the per-child item files under
|
||
# `items/<local_id>`; `finalize_run` reads, validates and applies them.
|
||
# The agent does NOT call the CP and does NOT read any internal-service
|
||
# CP credential file.
|
||
- id: agent
|
||
kind: agent
|
||
outputs: [plan_manifest]
|
||
template: spec-writing-sonnet-repo
|
||
model: sonnet
|
||
runtime_env:
|
||
AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
|
||
AGENT_BRANCH: "spec/${item.uuid}"
|
||
CP_URL: "https://agents.oreillyit.nz/api"
|
||
# The deliverable is a directory of plan files on disk — NOT a git diff.
|
||
AGENT_EMPTY_DELIVERABLE_CHECK: "false"
|
||
prompt: |
|
||
The agent-runtimes project repo is cloned at /workspace/project.
|
||
Change to that directory before doing any work.
|
||
|
||
Find the spec file in /workspace/project/spec/ (the spec was
|
||
written in an earlier pipeline stage — look for a file whose name matches
|
||
the concept title '${item.title}' as a slug, e.g. spec/<slug>.md).
|
||
Read that spec carefully.
|
||
|
||
YOUR ONLY DELIVERABLE FOR THIS STAGE IS THE DECOMPOSE PLAN. You do
|
||
NOT call the CP, you do NOT run `cp-cli planner items decompose`,
|
||
and you do NOT read any internal-service CP credential file (the
|
||
path that the legacy `@1` flow used for its CP write is no longer
|
||
mounted into your container). The CP applies your plan from disk
|
||
at finalize time (spec/work-items-api.md WIA-47..47g). This node's
|
||
declared output is the literal key `plan_manifest`; the CP packs
|
||
the manifest plus every per-child item file in the same step folder.
|
||
|
||
On-disk layout (every path is relative to your step folder):
|
||
/variables/agent/plan_manifest # the manifest (plain text)
|
||
/variables/agent/items/<local_id> # one item file per child
|
||
|
||
`<local_id>` matches `^[a-z0-9][a-z0-9-]{0,31}$` — lowercase letters,
|
||
digits, and hyphen; 1–32 characters; no underscore. Use the literal
|
||
`$root` as the parent header on every item; the CP substitutes the
|
||
real item UUID server-side (WV-36 / WIA-47e).
|
||
|
||
Write each item file with a quoted heredoc whose terminator cannot
|
||
occur in the body — example for a child `c1`:
|
||
|
||
cat > /variables/agent/items/c1 <<'__DECOMPOSE_ITEM_END__'
|
||
parent: $root
|
||
title: Implement payment service FP-1..3
|
||
spec_ids: FP-1,FP-2,FP-3
|
||
test_files: tests/payments/test_fp.py
|
||
tags: airouter-eligible
|
||
---
|
||
Write the payment service implementation covering FP-1, FP-2, FP-3.
|
||
|
||
Acceptance criteria:
|
||
- FP-1: idempotent payment capture
|
||
- FP-2: refund flow
|
||
__DECOMPOSE_ITEM_END__
|
||
|
||
Do NOT use `wfvar set <key> <body>` for plan files — it passes the
|
||
body as argv and breaks on backticks, quotes and `$(...)` and
|
||
truncates at ARG_MAX. The file-write / heredoc path is byte-faithful.
|
||
|
||
Manifest format — first line exactly `decompose/v1`, then one
|
||
`local_id` per line, no blank lines, no header, no body. Example for
|
||
the three-item plan above:
|
||
|
||
decompose/v1
|
||
c1
|
||
c2
|
||
c3
|
||
|
||
Item header grammar (every line is `key: value`):
|
||
- closed header set: {parent, title, spec_ids, test_files, tags}
|
||
- `parent` and `title` are REQUIRED on every item
|
||
- `parent` MUST be the literal `$root` (a work-item UUID is rejected
|
||
as `parent_must_be_root` — privilege-escalation guard)
|
||
- `title` is 1–200 bytes UTF-8, unique within one plan compared
|
||
case- and whitespace-insensitively
|
||
- `spec_ids` and `test_files` are comma-separated, at most 50
|
||
entries each; `spec_ids` entries match `^[A-Z][A-Z0-9-]{0,31}$`
|
||
(e.g. `FP-1`, `WV-36`)
|
||
- `test_files` entries have no leading `/`, no `..` segment, no SP
|
||
or `,`, at most 250 bytes each (e.g.
|
||
`tests/payments/test_fp.py`)
|
||
- `tags` is optional; every tag MUST be exactly `airouter-eligible`
|
||
(the only tag in DECOMPOSE_AGENT_TAG_ALLOWLIST — anything else
|
||
is `tag_not_allowed`). Omit the `tags:` line for tasks Qwen3.6
|
||
cannot handle alone.
|
||
- `---` ends the header block; every byte after it to EOF is the
|
||
body, verbatim (printable ASCII + UTF-8 bytes 0x80–0xFF, plus
|
||
LF and TAB as the only permitted control bytes; CR is rejected).
|
||
The body must be ≤ 16,384 bytes UTF-8.
|
||
- one header per item, no duplicates (`duplicate_header`)
|
||
- unknown keys are rejected (`unknown_header`)
|
||
- the file MUST be strict UTF-8, LF line endings (CRLF is rejected)
|
||
|
||
Plan fan-out: 1–20 `local_id` lines in the manifest, exactly one
|
||
`items/<local_id>` file per manifest line (an orphan file or a
|
||
missing file fails the apply as `orphan_item_file` /
|
||
`manifest_entry_without_file`).
|
||
|
||
Title / slug uniqueness: every planned title must be unique within
|
||
the plan (`duplicate_title`); every planned slug
|
||
(`decompose_validation.slugify(title)`, lowercase, non-alphanum
|
||
runs collapsed to `-`, truncated to 80 chars) must also be unique
|
||
(`duplicate_slug`). Two titles that differ only in case / whitespace
|
||
are NOT distinct.
|
||
|
||
"airouter-eligible" is the only tag you may use. Do NOT emit
|
||
`auto-dispatch`, `integrated`, `ai-resolve` or `airouter-skip` —
|
||
the validator rejects those at apply time.
|
||
|
||
Workflow:
|
||
1. Read the spec carefully.
|
||
2. Decide the children (1–20). Draft a title, a one-paragraph
|
||
body, and the `spec_ids` / `test_files` for each.
|
||
3. Write `/variables/agent/plan_manifest` with a heredoc
|
||
(the heredoc terminator MUST be unique to that file — do not
|
||
reuse `__DECOMPOSE_ITEM_END__` across files).
|
||
4. Write each `/variables/agent/items/<local_id>` with a heredoc.
|
||
5. Confirm the manifest names exactly the files you wrote, and
|
||
that no extra `items/*` files exist (an orphan file fails the
|
||
apply).
|
||
6. Call task_complete. Do NOT PATCH the CP yourself.
|