coreci/executor-config
7
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
28 Commits 2 Branches 0 Tags
main
Commit Graph

28 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
jonathan a7f44ba2c4 Merge pull request 'docs(verbiage): TL;DR prologues per comms-etiquette v1.0' (#3) from coo/verbiage-2 into main 
Reviewed-on: #3
 2026-10-19 23:07:53 +00:00
coreci-coo 0072113380 docs(verbiage): TL;DR prologues per comms-etiquette v1.0 (applies coreci/executor-config#2) 2026-10-19 21:58:10 +00:00
coreci-sre ce45e4ca4d Merge pull request 'REQ-27: executor rail repurposed as approval-request queue ONLY (P04, one-way frozen-repo change)' (#1) from coreci/p04-approval-queue into main 2026-10-18 23:37:40 +00:00
coreci-sre eb6009160d frozen-repo change (REQ-27 approval queue): docs/approval-queue-runbook.md 2026-10-18 21:41:11 +00:00
coreci-sre 24e1e91ee1 frozen-repo change (REQ-27 approval queue): routing.json 2026-10-18 21:41:10 +00:00
coreci-sre e2ab073fdc frozen-repo change (REQ-27 approval queue): executor.env.example 2026-10-18 21:41:10 +00:00
coreci-sre 822eadb386 frozen-repo change (REQ-27 approval queue): allowlist.yaml 2026-10-18 21:41:09 +00:00
coreci-sre f28576f0a8 frozen-repo change (REQ-27 approval queue): README.md 2026-10-18 21:41:08 +00:00
coreci-cairo 1f07737bf5 executor-config: replace v1 send-mailbox-message.sh with v2 (production, zero placeholders) 
Per CEO approval 2026-10-04. Option (a): overwrite v1 with v2.

Changes:
* send-mailbox-message.sh - production implementation with zero
  placeholders. Real rail callbacks via urllib.request POST to
  submit_request. EXECUTOR_API_KEY in Authorization header only.
* delivery-pack.sh - informational template (main script
  generates per-recipient copies inline).
* SKILL.md - v2 spec (what's new + what's the same).
* v2-vs-v1-diff.md - side-by-side diff.
* README.md - bundle index.

Honours brief locked decisions [1]:
- Decision 2: outbox canonical; inbox mirrored (own inbox only).
- Decision 6: mailbox writes AUTO_RUN per recipient.
- Decision 7: append-only inheritance; this skill is additive.
- Decision 8: naming convention coreci-<role> validated at parse.
- Decision 9: extend, don't duplicate.

Does NOT (per brief):
- Edit coreci/agent-definitions/ (read-only per Rule #7).
- Implement deny_read_targets (xfail; out of scope).
- Classify mailbox writes as NEEDS_APPROVAL.
- Write to anyone else's outbox/.
- Provide cross-repo atomicity (per-recipient only).
 2026-10-04 18:07:31 +00:00
coreci-cairo 4bd4f2b945 executor-config: land send-mailbox-message skill bundle 
Per CEO instruction 2026-10-04 (skill authoring + shape-C design):

* SKILL.md — human + LLM contract for the send-mailbox-message skill
* send-mailbox-message.sh — reference shell implementation
  (sender-side orchestration: gates + outbox commit + per-recipient
  delivery-pack fan-out)
* delivery-pack.sh — template for per-recipient delivery packs
  (target = recipient's own home/mailbox/inbox/)
* tests-T18-T30.md — test matrix: single-recipient, multi-recipient,
  gate rejection (dlp/classification/recipient_acl), partial
  delivery failure, retry, idempotency
* README.md — bundle index + parameter placeholder documentation

Design honours brief locked decisions [1]:
- Decision 2: outbox canonical sender record, inbox mirrored per
  recipient (own inbox only — no cross-write)
- Decision 6: mailbox writes AUTO_RUN per recipient after v4.1
- Decision 7: append-only inheritance; this skill is additive
- Decision 8: naming convention coreci-<role>
- Decision 9: extend, don't duplicate (no SPEC edits)

Per-shape-C, per-recipient atomicity only — no cross-repo atomicity
claim (platform doesn't support it). Reply-is-ack back-channel per
CEO confirmation; recipients acknowledge via their own outbox
(decision 5 lifecycle [1]).

[1] CAIRO task brief - consolidated D1-D6
    (per-home mailbox + read_targets parser)
 2026-10-04 17:59:34 +00:00
coreci-cairo 331809f014 executor-config: bump to v4.1; add MAILBOX_PATH_RE + Decision 6 exemption 
Per CAIRO task brief 2026-09-26 [1] (D1-D6), Decision 6 mailbox
writes are ALWAYS AUTO_RUN against the sender's own home.
v4 did not implement this; v4.1 adds:

* MAILBOX_PATH_RE recognises <home-repo>/mailbox/(outbox|inbox)/<path>
  for both coreci-<role>/home (standard) and coreci/<role>/home
  (forward-compat).
* classify() extended with own-home gate: if every target is an
  own-home mailbox path and no non-mailbox write verb is present,
  classify AUTO_RUN.
* T18-T25 added; T8/T17 xfail preserved.
* deny_read_targets NOT implemented (per brief).

[1] CAIRO task brief - consolidated D1-D6
    (per-home mailbox + read_targets parser)
 2026-10-04 17:58:12 +00:00
coreci-cairo d53f39ced8 mailbox: add canonical bootstrap script at tools/mailbox/bootstrap-mailbox.sh 
Per COO brief 2026-09-26 §D2: each home repo bootstraps its own
verbatim copy; this is the canonical source for ergonomic pull.
 2026-10-04 17:23:45 +00:00
coreci-cairo a9d9fefeb8 executor-config: bump allowlist to v4; add WRITE_VERBUCKENCE + read_targets classifier + tests 
Per COO brief 2026-09-26 §D6 [1]:
- defaults.read_targets: [coreci/company] (every agent inherits read-only AUTO_RUN)
- agent read_targets UNION defaults (append-only, never override)
- WRITE_VERBUCKENCE pre-hoc classifier gate
- T1–T17 test cases; T8/T17 xfail (deny_read_targets punted)

[1] CAIRO task brief — consolidated D1–D6 (per-home mailbox + read_targets parser)
 2026-10-04 17:05:53 +00:00
coreci-coo b8c66fd97c tasks: archive CAIRO D1-D6 task brief (per-home mailbox + read_targets parser) 2026-10-04 16:50:52 +00:00
coreci-coo 9dbe005e21 coreci-executor: add per-agent onboarding checklist 2026-10-04 16:50:51 +00:00
coreci-coo a208eb36d3 coreci-executor: add SPEC v0.1 (per-agent instantiation; naming convention §4) 2026-10-04 16:34:22 +00:00
coreci-coo 2446f50fb1 allowlist: own-home AUTO_RUN for coreci-cpo + coreci-cairo (onboarding step 5; enables first-run acceptance jobs) 2026-10-04 04:59:37 +00:00
grimacing 3e9caa9ac6 feat: executor v0.3.0: multi-credential named relay (CRED_<NAME>_USER/SECRET env; full secret scrub) 2026-10-04 01:30:12 +00:00
grimacing e06c8724e6 feat: executor v0.2.0: agent-owned credential relay — creds ride the request envelope from agent KBs 2026-10-04 00:27:25 +00:00
grimacing 04aa3a8b82 fix: executor v0.1.5: allow_origins wildcard — sandbox iframe sends Origin: null 2026-10-04 00:09:05 +00:00
grimacing 3c51a80095 fix: v0.1.4: allow_headers wildcard — Open WebUI's tool layer sends X-Session-Id 2026-10-03 23:49:21 +00:00
coreci-executor 50c77b5d97 Update app/main.py 2026-10-03 22:24:44 +00:00
coreci-executor 5f1f429ecb Update app/requirements.txt 2026-10-03 22:24:27 +00:00
coreci-executor 25bbc92f6e Update compose.yaml 2026-10-03 21:41:01 +00:00
coreci-coo 162b27e631 executor skeleton v0.1.1: complete app/docs; Dockerfile git+curl; main.py fixes (syntax, credential injection, cleanup); prohibit_login verified (pack 2026-10-03-E2) 2026-10-03 17:17:40 -04:00
grimacing 618f1c9b31 Add executor.env.example 2026-10-03 21:00:18 +00:00
grimacing 4e095c459b Add compose.yaml 2026-10-03 20:59:29 +00:00
grimacing 5a8e53d833 Add allowlist.yaml 2026-10-03 20:58:48 +00:00