Work Queue
P0 (Do Next)
- Harden command execution paths that currently use
shell=True:
superpowers/workflow/engine.py (_run_shell)
msg_gateway/inbound.py (TriggerManager.execute, shell action)
- Remove insecure default dashboard credentials from code defaults.
- Add tests for
superpowers/intake.py and superpowers/cli_intake.py.
- Set
TELEGRAM_DEFAULT_CHAT_ID so intake updates deliver immediately (no queue delay).
P1
- Add multi-agent role routing (planner/executor/verifier) with per-role skill mapping.
- Add structured telemetry for intake lifecycle in audit log.
- Add retry/backoff for Telegram notifications.
P2
- Migrate hardcoded home paths to config-driven workspace root.
- Add docs page for intake orchestration and unattended operations.