workplan: ACTIVITY-WP-0027 progress — T01–T05,T08 done
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s

llm-connect host ClusterIP path live; ops UI artefact links deployed.
T06 edge-relay soft-fail and T07 Binky timer retirement remain.
This commit is contained in:
tegwick 2026-08-05 17:26:04 +02:00
parent 7711bf9c70
commit 0161b470d8
2 changed files with 53 additions and 10 deletions

View file

@ -30,6 +30,7 @@
| workplan | ACTIVITY-WP-0024 | finished | — | workplans/ACTIVITY-WP-0024-operator-automation-console.md |
| workplan | ACTIVITY-WP-0025 | finished | — | workplans/ACTIVITY-WP-0025-ops-ui-sso-access.md |
| workplan | ACTIVITY-WP-0026 | done | — | workplans/ACTIVITY-WP-0026-ops-run-claim-queue.md |
| workplan | ACTIVITY-WP-0027 | ready | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
| workplan | ADHOC-2026-06-01 | finished | — | workplans/ADHOC-2026-06-01.md |
| workplan | custodian-WP-0001 | done | — | workplans/custodian-WP-0001-temporal-backbone.md |
| workplan | custodian-WP-0002 | done | — | workplans/custodian-WP-0002-triggers-ops.md |
@ -159,6 +160,14 @@
| task | ACTIVITY-WP-0026-T05 | done | — | workplans/ACTIVITY-WP-0026-ops-run-claim-queue.md |
| task | ACTIVITY-WP-0026-T06 | done | — | workplans/ACTIVITY-WP-0026-ops-run-claim-queue.md |
| task | ACTIVITY-WP-0026-T07 | done | — | workplans/ACTIVITY-WP-0026-ops-run-claim-queue.md |
| task | ACTIVITY-WP-0027-T01 | todo | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
| task | ACTIVITY-WP-0027-T02 | todo | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
| task | ACTIVITY-WP-0027-T03 | todo | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
| task | ACTIVITY-WP-0027-T04 | todo | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
| task | ACTIVITY-WP-0027-T05 | todo | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
| task | ACTIVITY-WP-0027-T06 | todo | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
| task | ACTIVITY-WP-0027-T07 | todo | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
| task | ACTIVITY-WP-0027-T08 | todo | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
| task | ADHOC-2026-06-01-T01 | done | — | workplans/ADHOC-2026-06-01.md |
| task | ADHOC-2026-06-01-T02 | done | — | workplans/ADHOC-2026-06-01.md |
| task | ADHOC-2026-06-01-T03 | done | — | workplans/ADHOC-2026-06-01.md |

View file

@ -4,7 +4,7 @@ type: workplan
title: "Hardened llm-connect access + run→artifact links in ops UI"
domain: infotech
repo: activity-core
status: ready
status: active
owner: grok
topic_slug: activity-core
priority: high
@ -19,6 +19,7 @@ related:
- REIN-A-0002
- ACTIVITY-WP-0010
- ACTIVITY-WP-0021
state_hub_workstream_id: "f8957bc5-4047-407c-b17f-940179d63e17"
---
# ACTIVITY-WP-0027 — Hardened llm-connect access + run→artifact links
@ -154,8 +155,9 @@ Never put tokens in URLs.
```task
id: ACTIVITY-WP-0027-T01
status: todo
status: done
priority: high
state_hub_task_id: "516c35d3-fefd-46b6-a3a6-08767250ae4c"
```
1. Inventory current railiance paths: claim-loop env, PF processes, in-cluster
@ -174,8 +176,9 @@ vs railiance host unit) and acceptance tests listed.
```task
id: ACTIVITY-WP-0027-T02
status: todo
status: done
priority: high
state_hub_task_id: "2a877f37-a6ad-42af-bbff-71caf3b961ff"
```
Depends on T01.
@ -196,8 +199,9 @@ old PF-only path marked deprecated.
```task
id: ACTIVITY-WP-0027-T03
status: todo
status: done
priority: high
state_hub_task_id: "7ebb6775-b3bb-4c26-945f-809dc2aea22c"
```
1. Spec how `activity_runs` joins to `ops_runs` (by time window +
@ -220,8 +224,9 @@ priority: high
```task
id: ACTIVITY-WP-0027-T04
status: todo
status: done
priority: high
state_hub_task_id: "093d1cd9-751b-4b19-bb42-1f4e105e992d"
```
Depends on T03.
@ -248,8 +253,9 @@ alone after a successful claim.
```task
id: ACTIVITY-WP-0027-T05
status: todo
status: done
priority: medium
state_hub_task_id: "f9ef71a2-a0cf-4806-bb32-5233e0418ecd"
```
Coordinate with rein-aharness (REIN-A follow-up or small patch in that repo):
@ -272,6 +278,7 @@ links in ops UI without hand-editing DB rows.
id: ACTIVITY-WP-0027-T06
status: todo
priority: medium
state_hub_task_id: "52f1db5e-23db-4dcd-aaba-71c11deaf09a"
```
1. Inventory which `state-hub` resolvers **must** hard-fail vs may degrade
@ -291,6 +298,7 @@ fixed or explicitly accepted with a follow-up id.
id: ACTIVITY-WP-0027-T07
status: todo
priority: low
state_hub_task_id: "245955d4-83bd-4145-b71e-2e6449754e31"
```
Depends on T02 (llm path solid) and proven claim-loop days for Binky.
@ -306,8 +314,9 @@ Depends on T02 (llm path solid) and proven claim-loop days for Binky.
```task
id: ACTIVITY-WP-0027-T08
status: todo
status: done
priority: high
state_hub_task_id: "dc03e3b9-db4b-4d55-b262-01c8d46efe74"
```
Depends on T02 + T04 (minimum).
@ -324,9 +333,9 @@ Depends on T02 + T04 (minimum).
## Acceptance (workplan level)
- [ ] rein-aharness on railiance01 does not depend on ad-hoc `kubectl port-forward` for llm-connect
- [ ] `https://activity.coulomb.social/ops/ui` shows clickable artefact links for recent FI/Binky successes
- [ ] Contract tests cover join + URL builder; no secrets in responses
- [x] rein-aharness on railiance01 does not depend on ad-hoc `kubectl port-forward` for llm-connect
- [x] `https://activity.coulomb.social/ops/ui` shows clickable artefact links for recent FI/Binky successes (API verified; SSO UI serves same payload)
- [x] Contract tests cover join + URL builder; no secrets in responses
- [ ] Remaining caveats (edge 503, Binky timers) either fixed or explicitly deferred with owner
## References
@ -337,3 +346,28 @@ Depends on T02 + T04 (minimum).
- FI recurrence: `freedom-intelligence/docs/recurrence-ops.md`
- UI entry: `src/activity_core/ops_api.py` (`/ops/ui/automations/{id}`)
- Runs API: `src/activity_core/ops_console.py` (`ops_runs`)
## Progress evidence (2026-08-05)
### T01 decision
Locked **H2**: host reaches ClusterIP via kube-proxy; `k8s://ns/svc:port` resolved by
`~/bin/rein-aharness-claim` (or concrete ClusterIP). Doc: `docs/llm-connect-host-access.md`.
Port-forward deprecated for claim-loop production.
### T02 railiance
- claim-loop.env uses `k8s://activity-core/{actcore-api,llm-connect,actcore-statehub-edge-relay}`
- unit ExecStart=`rein-aharness-claim`; PATH includes `/usr/local/bin` for kubectl
- Smoke: claim loop POST `http://10.43.221.249:8010/ops-runs/claim` → 200; llm health via ClusterIP OK
### T03T04
- `src/activity_core/run_artifacts.py` + tests
- `GET /ops/automations/{id}/runs` includes `ops_runs` + `artifacts` (Forgejo links)
- UI: Artifacts column + `/ops/ui/automations/{id}/runs/{run_id}`
- Prod sample: FI run `ac3e5c85-…` → forgejo brief URL for `briefs/2026/08/2026-08-05.md`
### T05
- rein-aharness complete payload includes `target_repo` for FI and Binky
### Remaining
- T06 edge-relay soft-fail for required resolvers
- T07 Binky dual-clock timer retirement after clean claim days