cardinal-ai 0.2.17 → 0.2.19

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: aaa2760a909ef2ee8cef012432e1a15311d1d3db2b1f37a5f2374e4322fc0c92
-  data.tar.gz: 6f995d0029b94d19dbb7f26fccf1dd01014ceab5973a766a91ef72aec043335d
+  metadata.gz: 0a2b2e4142b5c9c54b8d320d6e36c17832c2bfb69996fce034be52ee2b4849fe
+  data.tar.gz: 266f7d5ce81b724643c600582ce744ed48cb8bc24606d98c3b16bc21b515b673
 SHA512:
-  metadata.gz: 58d4a91169f2b8ab305e86b49d4d839cb16b275904d672525352258845af6ab70b6c47777d6a9b56dfc45b1db583b19fbb5e7bcce3d63cd8ec578e2d5a1e06ae
-  data.tar.gz: bd8de891a41f0a7841d371d342173639b7548988b8c25377804207971da1735f6e9ea9b2a8e6e17a736a6487d0d394b0160a5aa18ce60638e51b78b1bce5c693
+  metadata.gz: 94358996801e25b84e34564156a362d3963bf4941c0d195215cf19aee86fd510f4d22ee1ecd3adf4500d2846c811f7df653d808cbceca8c028c38e678e4a3337
+  data.tar.gz: 86deb643dae9b203eeb462e0c62c30c3bb7aa85b648b89ef7c53b8436f3a14af013fa231384e1e5f28a74aa0be0e9bab410b22e820fd500af4fd4c4e0ec5ff42

data/app/assets/stylesheets/cardinal.css

@@ -168,6 +168,14 @@ a { color: var(--blue); text-decoration: none; }
 .asana-steps li { margin: 4px 0; }
 .asana-connected { color: var(--green); }
 
+.summary-share { display: flex; align-items: center; margin-top: 8px; flex-shrink: 0; }
+.summary-share button[disabled] { opacity: .4; cursor: not-allowed; pointer-events: none; }
+.share-spacer { flex: 1; text-align: center; }
+.share-status { font-size: 12px; font-weight: 600; color: var(--green);
+                animation: share-fade 4s ease forwards; }
+.share-status.share-err { color: var(--red); animation: none; }
+@keyframes share-fade { 0%, 70% { opacity: 1; } 100% { opacity: 0; } }
+
 .pull-form { display: inline; }
 #repo-pull-status { font-size: 0.85rem; }
 #repo-pull-status .pull-ok  { color: var(--green); }

data/app/controllers/boards_controller.rb

@@ -29,8 +29,9 @@ class BoardsController < ApplicationController
 
   def update
     board = Board.first!
-    attrs = params.require(:board).permit(:name, :default_branch, archive_accepts_from: [])
+    attrs = params.require(:board).permit(:name, :default_branch, :permission_bypass, archive_accepts_from: [])
     board.archive_accepts_from = attrs[:archive_accepts_from].to_a.map(&:to_s).reject(&:blank?) if attrs.key?(:archive_accepts_from)
+    board.permission_bypass = (attrs[:permission_bypass] == "1") if attrs.key?(:permission_bypass)
     board.update!(
       name: attrs[:name].presence || board.name,
       default_branch: attrs[:default_branch].presence || board.default_branch

data/app/controllers/cards_controller.rb

@@ -1,5 +1,5 @@
 class CardsController < ApplicationController
-  before_action :set_card, only: [:show, :update, :move, :approve, :summarize, :compact, :destroy, :archive, :unarchive]
+  before_action :set_card, only: [:show, :update, :move, :approve, :summarize, :compact, :destroy, :archive, :unarchive, :share_summary]
 
   def new
     @board = Board.first!
@@ -140,6 +140,37 @@ class CardsController < ApplicationController
     end
   end
 
+  # Push the customer summary outward: to the source Asana task as a comment,
+  # or to the card's PR. The summary was written for exactly this audience.
+  def share_summary
+    summary = @card.summary.to_s.strip
+    if summary.blank?
+      @card.log!("error", text: "Nothing to share — the summary is empty.")
+      return redirect_to card_path(@card, zoom: "summary")
+    end
+
+    flash_text, flash_error = nil, false
+    case params[:to]
+    when "asana"
+      Asana.comment!(@card.asana_url, "Update from Cardinal:\n\n#{summary}")
+      @card.log!("status_change", actor: "user", text: "Summary posted to the Asana task as a comment")
+      flash_text = "✓ Posted to Asana"
+    when "pr"
+      out, status = Open3.capture2e("gh", "pr", "comment", @card.pr_url, "--body", summary)
+      if status.success?
+        @card.log!("status_change", actor: "user", text: "Summary posted as a PR comment")
+        flash_text = "✓ Posted to the PR"
+      else
+        @card.log!("error", text: "Couldn't comment on the PR: #{out.truncate(160)}")
+        flash_text, flash_error = "✗ PR comment failed — see the timeline", true
+      end
+    end
+    respond_with_share_flash(flash_text, flash_error)
+  rescue Asana::Error => e
+    @card.log!("error", text: "Couldn't post to Asana: #{e.message}")
+    respond_with_share_flash("✗ Asana refused — see the timeline", true)
+  end
+
   # Archive (card #42): off the board, never gone — /board/archive lists,
   # searches, and restores. Running cards can't be archived out from under
   # their agent.
@@ -162,12 +193,27 @@ class CardsController < ApplicationController
 
   private
 
+  # In-place feedback on the Summary tab: replace the panel with a transient
+  # ✓/✗ flash next to the share buttons (falls back to a redirect for plain
+  # HTML requests).
+  def respond_with_share_flash(text, error)
+    respond_to do |format|
+      format.turbo_stream do
+        render turbo_stream: turbo_stream.replace("card_summary",
+          partial: "cards/summary_panel",
+          locals: { card: @card.reload, share_status: text, share_error: error })
+      end
+      format.html { redirect_to card_path(@card, zoom: "summary") }
+    end
+  end
+
   def set_card
     @card = Board.first!.cards.find_by!(number: params[:id])
   end
 
   def card_params
-    attrs = params.require(:card).permit(:title, :description, :tags, :branch_name, :pr_url, :summary, :compact, :model, :effort)
+    attrs = params.require(:card).permit(:title, :description, :tags, :branch_name, :pr_url, :summary, :compact, :model, :effort, :permission_mode)
+    attrs[:permission_mode] = attrs[:permission_mode].presence_in(Card::PERMISSION_MODES) if attrs.key?(:permission_mode)
     attrs[:tags] = attrs[:tags].to_s.split(",").map(&:strip).reject(&:blank?) if attrs.key?(:tags)
     # Blank model/effort from the "Use column default" option mean "no override" —
     # store nil so effective_* falls back to the column (card #33).

data/app/models/board.rb

@@ -55,7 +55,15 @@ class Board < ApplicationRecord
   # may be DRAGGED onto the topbar 🗄 (explicit-only, like column rails —
   # empty means the archive is not a drop target). The Advanced-panel archive
   # button is always available; this governs only the drag affordance.
-  store_accessor :settings, :archive_accepts_from
+  store_accessor :settings, :archive_accepts_from, :permission_bypass
+
+  # Board default for worker autonomy (§ permissions): true (default) lets
+  # agents act without asking — full shell inside their workspace. false
+  # restricts workers to file tools (read/search/edit/write; Cardinal commits
+  # for them) unless a card explicitly overrides back to full autonomy.
+  def permission_bypass?
+    settings["permission_bypass"] != false
+  end
 
   def archive_accepts?(column)
     Array(archive_accepts_from).map(&:to_s).include?(column.id.to_s)

data/app/models/card.rb

@@ -92,6 +92,18 @@ class Card < ApplicationRecord
   # default", so existing cards are unaffected. Read fresh at every segment
   # spawn (start, restart, resume) by the runner and the planning assistant, so
   # a change takes effect on the next segment — never on an already-running one.
+  # Permission override (nil = board default): "bypass" forces full autonomy
+  # for this card, "ask" forces the restricted file-tools mode.
+  PERMISSION_MODES = ["bypass", "ask"].freeze
+
+  def effective_permission_bypass?
+    case permission_mode
+    when "bypass" then true
+    when "ask"    then false
+    else board.permission_bypass?
+    end
+  end
+
   def effective_model  = model.presence || column.model
   def effective_effort = effort.presence || column.effort
 

data/app/services/agent/runner.rb

@@ -125,9 +125,10 @@ module Agent
         cmd += ["--max-turns", "3", "--tools", ""]
       else
         cmd += ["--max-turns", (column.max_turns.presence || DEFAULT_EXECUTE_TURNS).to_s]
-        # Shell access off: restrict to file tools — the sandbox is the tool
-        # list itself, not a request in the prompt.
-        cmd += ["--tools", "Read,Glob,Grep,Edit,Write"] unless column.shell_access?
+        # Restricted agents (column shell toggle, or board/card permission
+        # setting) get file tools only — the sandbox is the tool list itself,
+        # not a request in the prompt.
+        cmd += ["--tools", "Read,Glob,Grep,Edit,Write"] if restricted_tools?
       end
       # Effective (possibly card-overridden) config, read fresh here at spawn
       # time — so a mid-run override takes effect on the next segment (start,
@@ -232,7 +233,7 @@ module Agent
       accumulate_usage(result)
       # A shell-less agent cannot commit its own edits — do it for it before
       # any commit counting or salvage below.
-      unless column.shell_access?
+      if restricted_tools?
         workspace.commit_all!("Card ##{card.number}: #{card.title.truncate(60)}\n\nCommitted by Cardinal for a shell-less agent.")
       end
       unless result[:success]
@@ -380,7 +381,14 @@ module Agent
     end
 
     def execute_rules
-      column.shell_access? ? EXECUTE_RULES : RESTRICTED_EXECUTE_RULES
+      restricted_tools? ? RESTRICTED_EXECUTE_RULES : EXECUTE_RULES
+    end
+
+    # Three voices, one verdict: the column's shell toggle, the board's
+    # permission default, and the card's own override (which beats the board
+    # but never re-opens a column that turned shell off).
+    def restricted_tools?
+      !column.shell_access? || !card.effective_permission_bypass?
     end
 
     def plan_prompt

data/app/services/asana.rb

@@ -54,14 +54,26 @@ module Asana
     card
   end
 
-  def self.request(path, auth)
+  # Post text to the task as a comment (an Asana "story").
+  def self.comment!(task_url, text)
+    request("/tasks/#{task_gid(task_url)}/stories", token,
+            method: :post, body: { data: { text: text } })
+  end
+
+  def self.request(path, auth, method: :get, body: nil)
     uri = URI("#{API}#{path}")
     http = Net::HTTP.new(uri.host, uri.port)
     http.use_ssl = true
     http.open_timeout = 10
     http.read_timeout = 15
-    response = http.get(uri.request_uri, { "Authorization" => "Bearer #{auth}" })
-    unless response.code.to_i == 200
+    headers = { "Authorization" => "Bearer #{auth}" }
+    response =
+      if method == :post
+        http.post(uri.request_uri, body.to_json, headers.merge("Content-Type" => "application/json"))
+      else
+        http.get(uri.request_uri, headers)
+      end
+    unless [200, 201].include?(response.code.to_i)
       raise Error, "Asana said no (HTTP #{response.code}) — check the token, and that it can see this task"
     end
     JSON.parse(response.body)["data"]

data/app/views/boards/edit.html.erb

@@ -10,12 +10,18 @@
         <div id="board-form-errors"></div>
 
         <%= form_with model: @board, url: board_path(autosave: 1), class: "card-edit",
-              data: { autosave_target: "form" } do |f| %>
+              data: { autosave_target: "form", action: "input->autosave#save change->autosave#save" } do |f| %>
           <label>Board name</label>
           <%= f.text_field :name %>
 
           <label>Default branch <%= info_tip("The branch agents fork card branches from and Done merges pull requests toward. Detected from the repo at first boot; fix it here if that guess was wrong.") %></label>
           <%= f.text_field :default_branch, placeholder: "main" %>
+
+          <label class="check-row">
+            <%= f.check_box :permission_bypass, { checked: @board.permission_bypass? }, "1", "0" %>
+            Agents act without asking (full autonomy)
+            <%= info_tip("On (default): worker agents run shell commands — tests, builds, git — inside their workspace without permission prompts. Off: workers get file tools only (read, search, edit, write); they cannot execute anything, and Cardinal commits their edits for them. Each card can override this in its 🧠 panel; a column whose Shell access is off stays restricted regardless.") %>
+          </label>
         <% end %>
 
         <label>Repository</label>

data/app/views/cards/_detail.html.erb

@@ -176,7 +176,17 @@
                     <%= f.select :effort, [["Use column default", ""], "low", "medium", "high", "max"], selected: @card.effort %>
                   </div>
                 </div>
-                <p class="hint">Overrides this card's model and effort. Only model + effort — budget, timeout, and concurrency are column policy. Takes effect on the next run segment (a run already going finishes on the model it started with).</p>
+                <div class="field-row">
+                  <div>
+                    <label>Permissions <%= info_tip("Overrides the board's autonomy default for THIS card. Full autonomy: the worker runs shell commands without asking. Restricted: file tools only — it cannot execute anything, and Cardinal commits its edits. A column whose Shell access is off stays restricted regardless.") %></label>
+                    <%= f.select :permission_mode,
+                          [["Board default (#{@card.board.permission_bypass? ? "full autonomy" : "restricted"})", ""],
+                           ["Full autonomy — acts without asking", "bypass"],
+                           ["Restricted — file tools only", "ask"]],
+                          selected: @card.permission_mode.to_s %>
+                  </div>
+                </div>
+                <p class="hint">Overrides this card's model, effort, and permissions. Budget, timeout, and concurrency are column policy. Takes effect on the next run segment (a run already going finishes on the settings it started with).</p>
               </details>
             <% end %>
           </div>

data/app/views/cards/_summary_panel.html.erb

@@ -27,4 +27,28 @@
           disabled: card.summary_working? %>
   <% end %>
 
+  <% can_asana = Asana.connected? && card.asana_url.present? %>
+  <% can_pr = card.pr_url.present? %>
+  <% if can_asana || can_pr %>
+    <div class="summary-share">
+      <% if can_asana %>
+        <%= button_to "◯ Post as comment on Asana task", share_summary_card_path(card, to: "asana"),
+              class: "theme-toggle", disabled: card.summary.blank?,
+              data: { turbo_submits_with: "Posting…" },
+              title: "Post this summary as a comment on #{card.asana_url}" %>
+      <% end %>
+      <span class="share-spacer">
+        <% if local_assigns[:share_status].present? %>
+          <span class="share-status<%= " share-err" if local_assigns[:share_error] %>"><%= share_status %></span>
+        <% end %>
+      </span>
+      <% if can_pr %>
+        <%= button_to "💬 Post as comment on PR", share_summary_card_path(card, to: "pr"),
+              class: "theme-toggle", disabled: card.summary.blank?,
+              data: { turbo_submits_with: "Posting…" },
+              title: "Post this summary as a comment on #{card.pr_url}" %>
+      <% end %>
+    </div>
+  <% end %>
+
 </div>

data/config/routes.rb

@@ -15,6 +15,7 @@ Rails.application.routes.draw do
       post :approve
       post :archive
       post :unarchive
+      post :share_summary
       post :summarize
       post :compact
     end

data/db/migrate/20260706002904_add_permission_mode_to_cards.rb

@@ -0,0 +1,5 @@
+class AddPermissionModeToCards < ActiveRecord::Migration[8.1]
+  def change
+    add_column :cards, :permission_mode, :string
+  end
+end

data/lib/cardinal/version.rb

@@ -1,3 +1,3 @@
 module Cardinal
-  VERSION = "0.2.17"
+  VERSION = "0.2.19"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: cardinal-ai
 version: !ruby/object:Gem::Version
-  version: 0.2.17
+  version: 0.2.19
 platform: ruby
 authors:
 - Jason Ellis
@@ -280,6 +280,7 @@ files:
 - db/migrate/20260705120001_add_issue_number_to_cards.rb
 - db/migrate/20260705193935_add_settings_to_boards.rb
 - db/migrate/20260705225451_add_asana_url_to_cards.rb
+- db/migrate/20260706002904_add_permission_mode_to_cards.rb
 - db/queue_schema.rb
 - db/seeds.rb
 - docker/agent/Dockerfile