6 commits

Author	SHA1	Message	Date
tegwick	4f5399df84	Implement ACTIVITY-WP-0022/0023: safe sink default and gap closures ... Default ISSUE_SINK_TYPE to state-hub (no silent Forgejo issues), hard-fail prune apply without live-images protection, refresh-live-images script, disable TaskExecutor stub by default, and document consumer/sink contracts.	2026-07-21 21:40:08 +02:00
tegwick	bd1c993405	Finish ACTIVITY-WP-0021: state-hub sink default + deploy verification ... Record railiance01 one-shot evidence (Binky/SBOM/triage COMPLETED), keep ISSUE_SINK_TYPE=state-hub until Forgejo PAT rotation, and re-read sink env at factory call time.	2026-07-21 07:33:03 +02:00
tegwick	98e8aa83bd	Implement ACTIVITY-WP-0021 production automation reliability ... Root-cause IssueSink 503 (dead Forgejo PAT on issue-core), add state-hub task sink path B, log runs before emit, harden sync_schedules, deterministic SBOM/triage reports, DB probe thrash fix, and prod automation-status helper.	2026-07-21 04:21:55 +02:00
tegwick	f05c56e202	fix(issue-sink): stringify triggering_event_id before JSON encode ... IssueCoreRestSink.emit() passed task_spec.triggering_event_id straight into the httpx json= payload. When the field is a UUID object (rather than a string), httpx's JSON encoder raised "TypeError: Object of type UUID is not JSON serializable", failing the emission. Guard with str(), preserving None for optional event ids. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-19 00:15:03 +02:00
tegwick	a08bd1684f	Add ISSUE_CORE_API_KEY auth to IssueCoreRestSink ... Issue-core requires a shared ingestion key on POST /issues/. The REST sink now sends Authorization: Bearer using ISSUE_CORE_API_KEY and fails fast when the key is missing under ISSUE_SINK_TYPE=rest. Updates .env.example, emission boundary docs, and unit tests for the header contract and missing-key error.	2026-06-18 22:30:13 +02:00
tegwick	c3a256509b	feat(event-bridge): WP-0003a — domain model, rules module, event type registry ... Implements phases 7–8 of the Event Bridge architecture (custodian-WP-0003a). Domain model (T34, T40): - Added RuleDef, InstructionDef, ActionDef to models.py - Updated ActivityDefinition with rules/instructions fields (task_templates deprecated) - Formalized EventEnvelope: id, type, version, timestamp, publisher, attributes - Added from_nats_message() and from_webhook_payload() classmethods Rules module (T35, T36, T37): - src/activity_core/rules/ skeleton with boundary enforcement - evaluate_condition() — sandboxed AST walker, whitelisted nodes only, never exec() - execute_instruction() — LLM task generation with trusted_fields injection guard - tests/rules/test_boundary.py verifies no cross-boundary imports Infrastructure (T38, T39): - Alembic migrations 0004 (task_spawn_log) and 0005 (event_types) - IssueSink ABC + IssueCoreRestSink (REST) + NullSink (testing) - TaskSpawnLog and EventType ORM models Event type registry (T41, T42, T43): - event_type_registry.py: file scanner, parser, DB sync, in-process lookup - ACTIVITY_CURATOR_GATE env var (disabled|required) + approve endpoint - Three org event type definitions: org.repo.registered, org.workstream.completed, org.activity.run.completed All 10 tests pass. Boundary test confirms rules/ isolation. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-14 22:01:15 +02:00