cardinal-ai 0.2.16 → 0.2.18

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 84bab289a5a9655c54a7e2cbd4587c21275a122903d08892f264c20fc2c0a52d
-  data.tar.gz: fdf187aa387793ddb12e7e5ccb6d9cb649a3214d894859490217be45585d690b
+  metadata.gz: e3382a025a7d0f1ce58e7a8a9f64a6a36705a2e27f2e9e9acd116dfa0c8955e8
+  data.tar.gz: 13824a0d4d5680a880151780e33b611e16c2299f9c7465bebbf47af5bf32718b
 SHA512:
-  metadata.gz: b128883b680056de0b221bba6df4d8db8c8ea299ef93feec45c30cf3c7df238982b983cc6ffb50db17ed52c7781d71ee2442c4091c1fd1c922e03209ca2af7ea
-  data.tar.gz: de0ae6c696aa5b3fa490f5f985a9acf81bf45d468660ff47522ec835c9871061b039eee9f5d872570667d8c109dd1b08ca2b71fe861cbea7a775f2ccef70d61e
+  metadata.gz: '098257f74f2a65053e822330315ce564e44fddef11ece7cb830364f8f1f8810a8161ae98a3cf439a35d54918b4bcca4670f97ac5f8ced351ed4e0cd8ae724ae2'
+  data.tar.gz: 3051666fee426647550bf6abab8abd8d36f79ff8998ca90e03eb0df85b318044aa31389487270bba5a2340e1b48be846cde8253ef40e49e1cf23d0ba4b79b927

data/app/assets/stylesheets/cardinal.css

@@ -127,7 +127,13 @@ a { color: var(--blue); text-decoration: none; }
 .archive-meta { display: block; font-size: 11px; color: var(--text-dim); margin-top: 3px; }
 .restore-btn { white-space: nowrap; }
 
-.note-toggle { display: block; font-size: 11px; color: var(--text-dim); margin-top: 4px; cursor: pointer; }
+.composer-box { flex: 1; display: flex; flex-direction: column; gap: 3px; }
+.composer-box textarea { width: 100%; }
+.note-toggle {
+  font-size: 11px; color: var(--text-dim); cursor: pointer; align-self: flex-start;
+  display: inline-flex; align-items: center; gap: 4px;
+}
+.note-toggle input[type="checkbox"] { margin: 0; }
 .note-toggle input { accent-color: var(--amber); }
 .note-flag { font-size: 10px; color: var(--amber); border: 1px solid var(--amber); border-radius: 8px; padding: 0 6px; margin-right: 4px; }
 
@@ -152,6 +158,24 @@ a { color: var(--blue); text-decoration: none; }
 .archive-rails .inline-check { display: inline-flex; align-items: center; gap: 4px; margin-right: 12px; cursor: pointer; }
 .archive-rails .hint { display: block; margin-top: 6px; }
 
+.asana-entry {
+  margin-right: auto; display: inline-flex; align-items: center;
+  background: transparent; color: var(--text-dim); border: 1px solid var(--border);
+  border-radius: 6px; padding: 6px 12px; font-weight: 600; font-size: inherit;
+}
+.asana-entry:hover { color: var(--text); border-color: var(--text-dim); }
+.asana-steps { font-size: 13px; margin: 8px 0 14px; padding-left: 20px; }
+.asana-steps li { margin: 4px 0; }
+.asana-connected { color: var(--green); }
+
+.summary-share { display: flex; align-items: center; margin-top: 8px; flex-shrink: 0; }
+.summary-share button[disabled] { opacity: .4; cursor: not-allowed; pointer-events: none; }
+.share-spacer { flex: 1; text-align: center; }
+.share-status { font-size: 12px; font-weight: 600; color: var(--green);
+                animation: share-fade 4s ease forwards; }
+.share-status.share-err { color: var(--red); animation: none; }
+@keyframes share-fade { 0%, 70% { opacity: 1; } 100% { opacity: 0; } }
+
 .pull-form { display: inline; }
 #repo-pull-status { font-size: 0.85rem; }
 #repo-pull-status .pull-ok  { color: var(--green); }

data/app/controllers/asana_controller.rb

@@ -0,0 +1,31 @@
+# Asana import (card #7). First visit is a connect wizard (PAT walkthrough);
+# once connected it's a one-field modal: paste the task URL, get a card.
+class AsanaController < ApplicationController
+  def new_card
+    @board = Board.first!
+    redirect_to root_path and return unless turbo_frame_request?
+    @connected = Asana.connected?
+    @error = params[:error]
+    @just_connected = params[:connected]
+  end
+
+  def connect
+    name = Asana.verify!(params.require(:token))
+    Asana.save_token!(params[:token])
+    redirect_to asana_new_card_path(connected: name)
+  rescue Asana::Error => e
+    redirect_to asana_new_card_path(error: e.message)
+  end
+
+  def import
+    card = Asana.import!(Board.first!, params.require(:url))
+    redirect_to card_path(card)
+  rescue Asana::Error => e
+    redirect_to asana_new_card_path(error: e.message)
+  end
+
+  def disconnect
+    Asana.disconnect!
+    redirect_to asana_new_card_path
+  end
+end

data/app/controllers/cards_controller.rb

@@ -1,5 +1,5 @@
 class CardsController < ApplicationController
-  before_action :set_card, only: [:show, :update, :move, :approve, :summarize, :compact, :destroy, :archive, :unarchive]
+  before_action :set_card, only: [:show, :update, :move, :approve, :summarize, :compact, :destroy, :archive, :unarchive, :share_summary]
 
   def new
     @board = Board.first!
@@ -140,6 +140,37 @@ class CardsController < ApplicationController
     end
   end
 
+  # Push the customer summary outward: to the source Asana task as a comment,
+  # or to the card's PR. The summary was written for exactly this audience.
+  def share_summary
+    summary = @card.summary.to_s.strip
+    if summary.blank?
+      @card.log!("error", text: "Nothing to share — the summary is empty.")
+      return redirect_to card_path(@card, zoom: "summary")
+    end
+
+    flash_text, flash_error = nil, false
+    case params[:to]
+    when "asana"
+      Asana.comment!(@card.asana_url, "Update from Cardinal:\n\n#{summary}")
+      @card.log!("status_change", actor: "user", text: "Summary posted to the Asana task as a comment")
+      flash_text = "✓ Posted to Asana"
+    when "pr"
+      out, status = Open3.capture2e("gh", "pr", "comment", @card.pr_url, "--body", summary)
+      if status.success?
+        @card.log!("status_change", actor: "user", text: "Summary posted as a PR comment")
+        flash_text = "✓ Posted to the PR"
+      else
+        @card.log!("error", text: "Couldn't comment on the PR: #{out.truncate(160)}")
+        flash_text, flash_error = "✗ PR comment failed — see the timeline", true
+      end
+    end
+    respond_with_share_flash(flash_text, flash_error)
+  rescue Asana::Error => e
+    @card.log!("error", text: "Couldn't post to Asana: #{e.message}")
+    respond_with_share_flash("✗ Asana refused — see the timeline", true)
+  end
+
   # Archive (card #42): off the board, never gone — /board/archive lists,
   # searches, and restores. Running cards can't be archived out from under
   # their agent.
@@ -162,6 +193,20 @@ class CardsController < ApplicationController
 
   private
 
+  # In-place feedback on the Summary tab: replace the panel with a transient
+  # ✓/✗ flash next to the share buttons (falls back to a redirect for plain
+  # HTML requests).
+  def respond_with_share_flash(text, error)
+    respond_to do |format|
+      format.turbo_stream do
+        render turbo_stream: turbo_stream.replace("card_summary",
+          partial: "cards/summary_panel",
+          locals: { card: @card.reload, share_status: text, share_error: error })
+      end
+      format.html { redirect_to card_path(@card, zoom: "summary") }
+    end
+  end
+
   def set_card
     @card = Board.first!.cards.find_by!(number: params[:id])
   end

data/app/services/asana.rb

@@ -0,0 +1,85 @@
+require "net/http"
+
+# Asana import (card #7): paste a task URL, get a card. First use walks
+# through connecting a Personal Access Token, which lives as a 0600 file in
+# .cardinal/ (like the Claude token) — never in the database, never in git.
+module Asana
+  API = "https://app.asana.com/api/1.0".freeze
+
+  class Error < StandardError; end
+
+  def self.token_path
+    Pathname(File.expand_path(ENV["CARDINAL_DATA_DIR"].presence || Rails.root.join(".cardinal"))).join("asana-token")
+  end
+
+  def self.connected? = !!File.size?(token_path)
+  def self.token = File.read(token_path).strip
+
+  def self.save_token!(value)
+    FileUtils.mkdir_p(File.dirname(token_path))
+    File.write(token_path, value.strip)
+    File.chmod(0o600, token_path)
+  end
+
+  def self.disconnect! = FileUtils.rm_f(token_path)
+
+  # Cheapest possible "does this token work" — also gives us a name to show.
+  def self.verify!(candidate)
+    data = request("/users/me", candidate)
+    data["name"].presence || data["email"].presence || "connected"
+  end
+
+  # Task URLs come in several vintages (/0/<project>/<task>, /0/.../f,
+  # /1/<ws>/project/<p>/task/<t>) — the task gid is the last long digit run.
+  def self.task_gid(url)
+    url.to_s.scan(/\d{6,}/).last or raise Error, "That doesn't look like an Asana task URL"
+  end
+
+  def self.import!(board, url)
+    data = request("/tasks/#{task_gid(url)}?opt_fields=name,notes,permalink_url,tags.name", token)
+    permalink = data["permalink_url"].presence || url
+    if (existing = board.cards.find_by(asana_url: permalink))
+      return existing
+    end
+
+    inbox = board.columns.inbox.order(:position).first
+    card = board.cards.create!(
+      column: inbox,
+      title: data["name"].presence || "Asana task",
+      asana_url: permalink,
+      tags: Array(data["tags"]).filter_map { |t| t["name"] }.first(5),
+      description: "#{data["notes"].presence || "(no description on the Asana task)"}\n\n---\n_Imported from Asana: #{permalink}_"
+    )
+    card.log!("status_change", actor: "user", text: "Imported from Asana: #{permalink}")
+    card
+  end
+
+  # Post text to the task as a comment (an Asana "story").
+  def self.comment!(task_url, text)
+    request("/tasks/#{task_gid(task_url)}/stories", token,
+            method: :post, body: { data: { text: text } })
+  end
+
+  def self.request(path, auth, method: :get, body: nil)
+    uri = URI("#{API}#{path}")
+    http = Net::HTTP.new(uri.host, uri.port)
+    http.use_ssl = true
+    http.open_timeout = 10
+    http.read_timeout = 15
+    headers = { "Authorization" => "Bearer #{auth}" }
+    response =
+      if method == :post
+        http.post(uri.request_uri, body.to_json, headers.merge("Content-Type" => "application/json"))
+      else
+        http.get(uri.request_uri, headers)
+      end
+    unless [200, 201].include?(response.code.to_i)
+      raise Error, "Asana said no (HTTP #{response.code}) — check the token, and that it can see this task"
+    end
+    JSON.parse(response.body)["data"]
+  rescue JSON::ParserError
+    raise Error, "Asana returned something unreadable"
+  rescue SocketError, Net::OpenTimeout, Net::ReadTimeout => e
+    raise Error, "Couldn't reach Asana (#{e.class.name.demodulize}) — check your connection"
+  end
+end

data/app/views/asana/new_card.html.erb

@@ -0,0 +1,59 @@
+<%= turbo_frame_tag "modal", data: { turbo_permanent: true } do %>
+  <div class="modal-backdrop" data-controller="modal" data-action="click->modal#backdrop">
+    <div class="modal modal-sm">
+      <header class="modal-header">
+        <h1>◯ New from Asana</h1>
+        <button type="button" class="modal-close" data-action="modal#close" title="Close (Esc)">✕</button>
+      </header>
+      <div class="modal-body">
+        <% if @error.present? %><p class="form-error"><%= @error %></p><% end %>
+
+        <% if @connected %>
+          <% if @just_connected.present? %>
+            <p class="hint asana-connected">✅ Connected as <strong><%= @just_connected %></strong> — you won't need to do that again.</p>
+          <% end %>
+          <p class="hint">Paste the Asana task's URL (open the task, copy the address bar or
+          use "Copy task link"). Cardinal pulls the title, description, and tags into a new
+          Tasks card that links back to Asana.</p>
+
+          <%= form_with url: asana_import_path, class: "card-edit",
+                data: { turbo_frame: "_top" } do |f| %>
+            <label>Asana task URL</label>
+            <%= f.text_field :url, required: true, autofocus: true,
+                  placeholder: "https://app.asana.com/0/1200000000000000/1205000000000000" %>
+            <div class="card-edit-actions">
+              <button type="button" class="btn-cancel" data-action="modal#close">Cancel</button>
+              <%= f.submit "Import task" %>
+            </div>
+          <% end %>
+          <details class="advanced-rules">
+            <summary>Connection</summary>
+            <p class="hint">Your Asana token lives in <code>.cardinal/asana-token</code> on this machine only.</p>
+            <%= button_to "Unlink Asana", asana_disconnect_path, class: "btn-cancel",
+                  form: { data: { turbo_frame: "modal" } } %>
+          </details>
+
+        <% else %>
+          <p class="hint"><strong>One-time setup:</strong> Cardinal talks to Asana with a
+          Personal Access Token that stays on this machine
+          (<code>.cardinal/asana-token</code>, never committed, never in the database).</p>
+          <ol class="asana-steps">
+            <li>Open <a href="https://app.asana.com/0/my-apps" target="_blank" rel="noopener">app.asana.com/0/my-apps</a> (Asana → Settings → Apps → Developer console)</li>
+            <li>Click <strong>Create new token</strong>, name it something like <code>cardinal</code></li>
+            <li>Copy the token and paste it below</li>
+          </ol>
+
+          <%= form_with url: asana_connect_path, class: "card-edit" do |f| %>
+            <label>Personal Access Token</label>
+            <%= f.password_field :token, required: true, autofocus: true,
+                  placeholder: "1/1234567890:abcdef…", autocomplete: "off" %>
+            <div class="card-edit-actions">
+              <button type="button" class="btn-cancel" data-action="modal#close">Cancel</button>
+              <%= f.submit "Connect Asana" %>
+            </div>
+          <% end %>
+        <% end %>
+      </div>
+    </div>
+  </div>
+<% end %>

data/app/views/cards/_card.html.erb

@@ -34,10 +34,12 @@
     </div>
   <% end %>
   <% has_cost = card.total_cost.positive? || card.total_output_tokens.positive? %>
-  <% if has_cost || card.pr_url.present? %>
+  <% if has_cost || card.pr_url.present? || card.asana_url.present? %>
     <div class="card-footer">
       <% if card.pr_url.present? %>
         <a class="footer-pr" href="<%= card.pr_url %>" target="_blank" rel="noopener" title="Open the pull request on GitHub">GitHub #<%= card.pr_url[%r{/pull/(\d+)}, 1] %> ↗</a>
+      <% elsif card.asana_url.present? %>
+        <a class="footer-pr" href="<%= card.asana_url %>" target="_blank" rel="noopener" title="Open the source task on Asana">◯ Asana ↗</a>
       <% else %>
         <span class="footer-pr"></span>
       <% end %>

data/app/views/cards/_detail.html.erb

@@ -73,12 +73,14 @@
                   data-action="scroll#jump">↓ New messages</button>
 
           <%= form_with url: card_messages_path(@card), class: "message-form" do |f| %>
-            <%= f.text_area "message[text]", rows: 2, required: true,
-                  data: { controller: "composer attach", action: "keydown->composer#keydown paste->attach#paste" },
-                  placeholder: (@card.column.planning? ? "Discuss this card with the planning assistant…" : "Add a note to this card…") + " (Enter sends, Shift+Enter for a new line)" %>
-            <label class="note-toggle" title="Record this message without asking any AI to respond. Future agents (the next column's assistant or worker) still read it as context — perfect for a parting instruction right before you drag the card onward.">
-              <%= f.check_box "message[note]", {}, "1", "0" %> 📝 note only — no AI reply
-            </label>
+            <div class="composer-box">
+              <label class="note-toggle" title="Record this message without asking any AI to respond. Future agents (the next column's assistant or worker) still read it as context — perfect for a parting instruction right before you drag the card onward.">
+                <%= f.check_box "message[note]", {}, "1", "0" %> 📝 note only — no AI reply
+              </label>
+              <%= f.text_area "message[text]", rows: 2, required: true,
+                    data: { controller: "composer attach", action: "keydown->composer#keydown paste->attach#paste" },
+                    placeholder: (@card.column.planning? ? "Discuss this card with the planning assistant…" : "Add a note to this card…") + " (Enter sends, Shift+Enter for a new line)" %>
+            </div>
           <% end %>
           <% end %>
         </section>

data/app/views/cards/_summary_panel.html.erb

@@ -27,4 +27,28 @@
           disabled: card.summary_working? %>
   <% end %>
 
+  <% can_asana = Asana.connected? && card.asana_url.present? %>
+  <% can_pr = card.pr_url.present? %>
+  <% if can_asana || can_pr %>
+    <div class="summary-share">
+      <% if can_asana %>
+        <%= button_to "◯ Post as comment on Asana task", share_summary_card_path(card, to: "asana"),
+              class: "theme-toggle", disabled: card.summary.blank?,
+              data: { turbo_submits_with: "Posting…" },
+              title: "Post this summary as a comment on #{card.asana_url}" %>
+      <% end %>
+      <span class="share-spacer">
+        <% if local_assigns[:share_status].present? %>
+          <span class="share-status<%= " share-err" if local_assigns[:share_error] %>"><%= share_status %></span>
+        <% end %>
+      </span>
+      <% if can_pr %>
+        <%= button_to "💬 Post as comment on PR", share_summary_card_path(card, to: "pr"),
+              class: "theme-toggle", disabled: card.summary.blank?,
+              data: { turbo_submits_with: "Posting…" },
+              title: "Post this summary as a comment on #{card.pr_url}" %>
+      <% end %>
+    </div>
+  <% end %>
+
 </div>

data/app/views/cards/new.html.erb

@@ -25,6 +25,9 @@
           <%= f.text_field "card[pr_url]", placeholder: "https://github.com/owner/repo/pull/123" %>
           <p class="hint">Leave blank and the agent picks a branch. Set either to point work at an existing branch or PR.</p>
           <div class="card-edit-actions">
+            <%= link_to "◯ New from Asana", asana_new_card_path, class: "asana-entry",
+                  data: { turbo_frame: "modal" },
+                  title: "Import an Asana task as a card — first use walks you through connecting" %>
             <button type="button" class="btn-cancel" data-action="modal#close">Cancel</button>
             <%= f.submit "Save" %>
           </div>

data/config/routes.rb

@@ -15,11 +15,17 @@ Rails.application.routes.draw do
       post :approve
       post :archive
       post :unarchive
+      post :share_summary
       post :summarize
       post :compact
     end
     resources :messages, only: [:create]
   end
+  get  "asana/new"        => "asana#new_card",   as: :asana_new_card
+  post "asana/connect"    => "asana#connect",    as: :asana_connect
+  post "asana/import"     => "asana#import",     as: :asana_import
+  post "asana/disconnect" => "asana#disconnect", as: :asana_disconnect
+
   resources :columns, only: [:create, :edit, :update, :destroy]
   resources :runs, only: [] do
     member do

data/db/migrate/20260705225451_add_asana_url_to_cards.rb

@@ -0,0 +1,5 @@
+class AddAsanaUrlToCards < ActiveRecord::Migration[8.1]
+  def change
+    add_column :cards, :asana_url, :string
+  end
+end

data/lib/cardinal/version.rb

@@ -1,3 +1,3 @@
 module Cardinal
-  VERSION = "0.2.16"
+  VERSION = "0.2.18"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: cardinal-ai
 version: !ruby/object:Gem::Version
-  version: 0.2.16
+  version: 0.2.18
 platform: ruby
 authors:
 - Jason Ellis
@@ -163,6 +163,7 @@ files:
 - app/assets/stylesheets/application.css
 - app/assets/stylesheets/cardinal.css
 - app/controllers/application_controller.rb
+- app/controllers/asana_controller.rb
 - app/controllers/boards_controller.rb
 - app/controllers/cards_controller.rb
 - app/controllers/columns_controller.rb
@@ -209,12 +210,14 @@ files:
 - app/models/run.rb
 - app/services/agent/runner.rb
 - app/services/agent/workspace.rb
+- app/services/asana.rb
 - app/services/card_transition.rb
 - app/services/claude_cli.rb
 - app/services/github_issues.rb
 - app/services/rules.rb
 - app/services/rules/compiler.rb
 - app/services/run_sweeper.rb
+- app/views/asana/new_card.html.erb
 - app/views/boards/archive.html.erb
 - app/views/boards/brief.html.erb
 - app/views/boards/edit.html.erb
@@ -276,6 +279,7 @@ files:
 - db/migrate/20260705120000_create_ai_calls.rb
 - db/migrate/20260705120001_add_issue_number_to_cards.rb
 - db/migrate/20260705193935_add_settings_to_boards.rb
+- db/migrate/20260705225451_add_asana_url_to_cards.rb
 - db/queue_schema.rb
 - db/seeds.rb
 - docker/agent/Dockerfile