Repository navigation
Umbrella: llc-module — finish endpoints, frontend spine, adapters, internal dedup #9923
Description
Activity
- addedumbrellaEpic/umbrella tracking issue grouping member issuesEpic/umbrella tracking issue grouping member issues
on Jun 11, 2026 Blocker cleared (2026-06-11): #9793 closed via PR #9948 (
857cfaedc) — backend image now shipsclaude+ghCLIs with a heartbeat CLI-availability gate and compose credential passthrough. The umbrella #9919 dependency edge ("U5 blocked until #9793 lands") is resolved; LLC subprocess agents are runnable under compose (API-key variants; subscription-OAuth variant remains a product decision on the #9793 thread).Batch session 2026-06-11 — 11 members landed
Member PR Squash commit #9841 env_float/env_int → autobot_shared #9964 a71cf35a1#9909 LLC frontend dedup → composables/llc/ #9969 4f31b36b0#9532 workIntent on checkout #9976 adfe7d810#9839 probe_pid/terminate_pid primitives #9979 092a36b51#9901 budget provisioning #9981 59020282b#9844 adapter test conftest #9990 f449d9f05#9773 registry-adapter rate-limit backoff #9993 a2be8d76e#9843 shared DI (get_session/service_dep) #9994 e04b019b3#9627 company selector + sidebar spine #9997 8a7954eec#8997 token budget mode #9998 e6e3cff71#9842 PollLoopScheduler base #10003 333d60bccEvery member went through an independent code-review round pre-merge; review-caught fixes included the #9773 success-transcript false-positive (would have re-run completed work) and the #9901 provision race + import-crashing env parse.
Discoveries filed: #9978 (LLC view strict-type errors), #9987 (liveness-monitor test patches a lazy import), #9992 (claude CLI stderr never drained), #9995 (sys.modules suite pollution masks router-test regressions).
Remaining members (all L/M features): #9861 (rescope — backlog-reorder + suggest-AC + org-chart enrichment; unblocked: #9899 closed via PR #9989), #9628, #9020, #9625, #9008, #9033, #9034. Both original blockers (#9793, #9899) are now closed — all remaining members are startable.
Adapter features audit (#9008/#9033): both have registered, partially-implemented adapters but several ACs unmet. Shipped the one real bug (adapter_type hire-validation, PR #10227) and decomposed the rest into scoped members:
- feat(llc/frontend): agent-hire form with adapter-type selector + GET /api/llc/adapters introspection #10219 — frontend adapter selector +
GET /api/llc/adapters - feat(llc/adapters): parse CLI token usage and report to LLC budget #10220 — CLI token usage → budget
- feat(llc/adapters): wire subscription adapters to OAuth tokens via secrets (no API key) #10217 — subscription OAuth wiring
- feat(llc/adapters): subscription quota exhaustion → auto-pause agent + board notification #10218 — quota → auto-pause + board notification
#9008/#9033 remain open pending these. Remaining original L member: #9628 (Portfolio→Program→Project browser).
- feat(llc/frontend): agent-hire form with adapter-type selector + GET /api/llc/adapters introspection #10219 — frontend adapter selector +
- added 4 commits that reference this issue
on Jun 16, 2026 ⚠️ Security regression found + fixed (#10148 → PR #1025873660669): #9020'sGET /projects/{id}/timelineand #9628'sGET /companies/{id}/projectswere added to sprints.py without tenant isolation — every sprints.py endpoint (28) depended only onget_async_session, so any authenticated caller could read/mutate another company's data by enumerating UUIDs (HIGH IDOR). Root cause: those PRs mirrored sprints.py's pre-existing un-guarded pattern instead of the IDOR-guarded pattern in the sibling work_items.py. Now fixed (all 28 endpoints guarded + test_sprints_idor.py). Lesson: new LLC endpoints must carry require_org_context from the start.22 remaining items
- added sub-issues
on Sep 1, 2026
Mission
Take the LLC (Low-Level Coordinator) module from "wired and proven end-to-end" to feature-complete and maintainable. The core loop already ships and passes e2e (#9902,
1df676a32); this umbrella covers the remaining backend endpoints flagged off during the ship (backlog-reorder, suggest-AC, per-agent budget), the LLC frontend spine (company selector, portfolio/program/project browser, Gantt), new adapter capabilities (subscription-mode, Copilot, replay, PR-linking), and the LLC-internal dedup refactors surfaced by the duplication audit.Dependency edges
Members (sized)
useLlcCompanyContext; org-chart endpoint ADDED; RESCOPE to: backlog-reorder + suggest-AC backends + org-chart budget/assigned-count enrichment)MSworkIntentfield to checkout endpoint for validationSMLL(PR feat(llc/sprint): project timeline + Gantt view for sprint planning (#9020) #10133a35416aab)M(PR feat(llc): GitHub PR ↔ work-item linking for LLC adapters (#9625) #10061fd774e20)LLMMSSSenv_float/env_inthelper to autobot_sharedSPollLoopSchedulerbase (start/stop/_loop/is_running dup ×4+)M_service()/get_session()DI boilerplate (×7)SSTriage delta — 2026-06-12 (new members from wave reviews)
SSXSSMTriage delta — 2026-06-19 (unfiled-issue sweep)
Triage delta — 2026-06-21