Roadmap status: 6a done, 6b split, #1597 fixed

[Paul Lizer (paullizer)]

Summary

Docs-only status update to docs/explanation/features/CHAT_ORCHESTRATION_WORKFLOWS_ROADMAP.md at paullizer-react-v2-ui 0.261.216 (b617296). One file changed: +94/−34.

• Status table and narrative.
  • 6a is done (#1592, v0.261.214).
  • The workflow_results planner capability and 6b are in progress. 6b is split into two stacked PRs: 6b-1 (server) and 6b-2 (V2).
  • The N9 follow-up is recorded (#1596, v0.261.215).
• 6a section. Records where Phase 6a: workflow results reader and Follow up in chat #1592 differs from the plan:
  • excerpts cover up to 8 outputs and 48 KB, last task first
  • structured (v3) runs get 409 workflow_result_unsupported
  • the entry points are Ask in chat and Ask about this
  • the owner-only result-context route
  • Retry and Edit are refused (gotcha 63)
• 6b section. Settled the details found while planning the split:
  • chat_delivery carries a delivery generation, because a resumed run keeps its run ID.
  • The card mounts from metadata.orchestration through /workflow-runs, as Phase 5's links do, so there's no workflow_run_link message key.
  • Retry is the durable /runtime/resume, with expected_version, a new UUID request_id, and RESUMABLE_STATES. It isn't /resume-failed, which returns 409 for durable runs. Cancelled runs get no Retry.
  • The status route returns the workflow's scope.
  • The run deep link reuses Track P's query form through one scope-aware helper, with no path route.
• Follow-ups. New entries:
  • #1597 is marked fixed (19 py/log-injection alerts), with a note on triaging the older clear-text alerts
  • #1598 is in review (tests only)
  • the non_group_invitee product bug in functions_collaboration.py
  • stale base assertions that Gate personal workflow instruction drafting on the AI workflow assistant setting (N9) #1596 found
  • the cold-import cycle (NameError: enabled_required), with its traced mechanism
• Also:
  • Phase 8 notes that group Draft Workflow Instructions checks only group workflow access.
  • §9 settles the 6a retention and 6b deep-link decisions.
  • §10 says to branch from paullizer-react-v2-ui, not only base the PR on it, because the default branch is Development.
  • Gotcha 61 wording is updated.

All new technical claims were checked against the code at b617296:

• functions_workflow_result_reader.py constants and _is_structured
• route_backend_workflows.py L1561, L1570, L1912, L2027 and L1999
• decide_workflow_runtime, plus _workflow_runtime_response's 409 mapping
• RESUMABLE_STATES (functions_workflow_runtime_store.py:43)
• the group branch of draft_workflow_instructions

The cold-import failure was reproduced in a fresh process with test_support.offline_bootstrap.offline_app_imports(), with 0 network attempts.

Linked issue

Refs #1543 #1546

Release Notes & Latest Features

• New Feature
• Bug Fix
• UI Enhancement
• Breaking Change
• Internal only

Is this visible to end users?

• Yes
• No

Is this admin-facing (Admin Settings, governance, deployment, config)?

• Yes
• No

Should this become a Latest Feature card?

• Yes
• No
• Already added

Screenshot needed for the card?

• Yes
• No
• Attached

Version bump

• application/single_app/config.py VERSION third segment bumped, or not needed because this is docs-only
• deployers/version.txt bumped, or not needed because deployers/ was not changed

Testing / validation

Run with PYTHONPATH=application/single_app;functional_tests on b444c22:

• python functional_tests/test_docs_app_surface_coverage.py passed (7/7).
• python functional_tests/test_docs_site_quality.py passed (6/6).
• python functional_tests/test_docs_link_integrity.py fails 2/5. The same failure is already on the base: pre-existing broken relative links on other pages, none in this file.
• python functional_tests/test_docs_release_notes_integrity.py fails 0/1. Also already on the base: 152 releases at 0.261.216 aren't on any generated page. The roadmap's follow-up line now says 152, up from 149.
• I checked the diff for lines over 120 columns: none outside table rows.
• scripts/build_docs_inventory.py wasn't needed, because no application surface changed.

Documentation

• Release notes updated, or not needed
• Feature documentation updated, or not needed
• Fix documentation updated, or not needed

Security checklist

• New Flask routes include @swagger_route(security=get_auth_security())
• Settings sent to non-admin frontends use sanitize_settings_for_user()
• Browser JavaScript is served from local SimpleChat static assets only; no CDN-hosted JS
• No secrets, keys, connection strings, or local-only artifacts are included