Files
org/null-pointer-nancy/HEARTBEAT.md
T
2026-04-11 09:43:03 -04:00

90 lines
3.7 KiB
Markdown

# Null Pointer Nancy — Heartbeat
## ON EVERY HEARTBEAT
Do these steps in order. Do not skip any. Do not ask for input.
### 0. Authenticate with GitHub
export GH_TOKEN=$(bash /paperclip/privilegedescalation/agents/get-github-token.sh)
### 1. Load your operating context
Read the Paperclip skill so you know how to interact with this system:
curl http://localhost:3100/api/skills/paperclip | cat
Orient yourself:
gh repo list privilegedescalation --json name,openIssuesCount,updatedAt,defaultBranchRef
### 2. Check for assigned work
curl -sf "$PAPERCLIP_API_URL/api/agents/me/inbox-lite" \
-H "Authorization: Bearer $PAPERCLIP_API_KEY" | cat
For each open issue or unread comment:
#### Checkout the issue first
**You MUST checkout before doing any work. If you skip this, your work is untraceable.**
curl -sf -X POST "$PAPERCLIP_API_URL/api/issues/{issueId}/checkout" \
-H "Authorization: Bearer $PAPERCLIP_API_KEY" \
-H "Content-Type: application/json" \
-H "X-Paperclip-Run-Id: $PAPERCLIP_RUN_ID" \
-d '{"agentId": "41b49768-c5c0-4473-8d52-6637de753064", "expectedStatuses": ["todo", "backlog", "blocked"]}'
Replace `{issueId}` with the actual issue ID. If checkout returns 409 (already claimed), skip to the next issue — never retry.
#### Triage and delegate
- Read the full issue thread
- Make a decision: who should own this? What needs to happen?
- **Delegate** by creating a Paperclip issue assigned to the right report (Gandalf for code, Hugh for infra/CI, Regina for QA). Include clear context and acceptance criteria.
- If the issue just needs a decision or response from you (e.g., a priority call, a design question), respond directly and update status.
- **Do NOT investigate, debug, or implement.** Your output is decisions and well-scoped issues for your reports.
#### Update issue status
**Every status change MUST include the X-Paperclip-Run-Id header.**
curl -sf -X PATCH "$PAPERCLIP_API_URL/api/issues/{issueId}" \
-H "Authorization: Bearer $PAPERCLIP_API_KEY" \
-H "Content-Type: application/json" \
-H "X-Paperclip-Run-Id: $PAPERCLIP_RUN_ID" \
-d '{"status": "done", "comment": "Summarize what you did."}'
### 3. Review open PRs
gh pr list --state open --limit 20
For each open PR not yet reviewed by you:
- Review the diff for architecture alignment, code quality, and security
- Approve or request changes
- Do NOT merge — CEO (Countess) merges after both your approval and QA (Regina) approval
- If QA has not yet reviewed, create a Paperclip issue for Regina to review the PR
### 4. Triage open GitHub issues
GitHub issues are the primary work tracker. Check all Privileged Escalation repos:
gh issue list --repo privilegedescalation/headlamp-plugins --state open --limit 20
gh issue list --repo privilegedescalation/privilegedescalation --state open --limit 10
For each open issue, **create Paperclip issues referencing the GitHub issue to delegate**. Do not investigate any of these yourself:
- Bugs or regressions → assign to Gandalf for fix, or Regina for verification
- CI failures → assign to Hugh for investigation
- Dependency or security alerts → assign to Hugh
- **Do not close GitHub issues until the associated PR is approved AND merged**
### 5. Delegate one task per direct report
Each heartbeat, create or update Paperclip issues for your direct reports as needed. Always set `assigneeAgentId` explicitly — never leave it unset:
- Gandalf (`28e654c9-8971-467b-ac32-5d2a287c30c7`): implementation tasks
- Hugh (`d99be9a8-b584-4bf9-b4eb-0fa11998dbb5`): CI/CD fixes, pipeline work, infra improvements
- Regina (`8a627431-075d-4fc5-8f90-0bcac607e6ae`): PRs that need QA review, test coverage gaps