repo-manager/workplans/RMGR-WP-0013-repository-classification-publisher.md

id	type	title	domain	repo	status	owner	topic_slug	created	updated	parent_project	parent_workplan	related
RMGR-WP-0013	workplan	Repository classification projection publisher	infotech	repo-manager	active	codex	infotech	2026-09-01	2026-09-01	prj-state-hub-retirement	STATE-WP-0079	HUB-WP-0006 RMGR-WP-0008

Repository classification projection publisher

Goal

Publish Repo Manager's validated fleet classification view through the frozen helixforge.repository-classification-projection 1.0.0 port.repo contract, including registrar UUIDs, atomic snapshot provenance, and safe paging, so hub-core can rebuild repository navigation without reading State Hub tables.

Freeze the publisher mapping

id: RMGR-WP-0013-T01
status: done
priority: high

Map repository registry identity, lifecycle, checkout observation, classification authority, revision provenance, diagnostics, and the exact hub-core envelope. Keep host paths and credentials outside the published contract.

Result (2026-09-01): the mapping pins registrar UUID, canonical slug, lifecycle, validated file classification, Git HEAD, classification-file SHA-256, and canonical UTC observation time. The closed envelope excludes local paths, remotes, work records, source bodies, and credentials.

Implement registry-backed snapshot publication

id: RMGR-WP-0013-T02
status: done
priority: high

Build deterministic full snapshots from an operator-owned local repository registry, validate every classification at observation time, and publish stable registrar UUID identities with source fingerprints and Git revisions.

Result (2026-09-01): repository_publisher.py loads a strict private operator registry, rejects duplicate identity and unsupported lifecycle, and builds full UUID-ordered snapshots. The primary-State-Hub bootstrap uses bounded direct identity reads with retries and never trusts remote host paths.

Implement the HTTP port and paging integrity

id: RMGR-WP-0013-T03
status: done
priority: high

Expose a read-only FastAPI port.repo route. Bind opaque cursors to the exact snapshot and page size with an HMAC, retain bounded in-flight snapshots, and fail closed on expired, malformed, or mismatched cursors.

Result (2026-09-01): the read-only FastAPI runtime exposes health, readiness, and GET /ports/repositories/classifications. Cursors are HMAC-SHA256-bound to snapshot, offset, and page size; in-flight snapshots are bounded; optional bearer authentication is constant-time checked.

Prove cross-repository conformance

id: RMGR-WP-0013-T04
status: done
priority: high

Exercise single- and multi-page transfers through hub-core's frozen consumer, including stable ordering, provenance, malformed registry state, invalid classification, cursor tampering, and preservation of the last good generation.

Result (2026-09-01): unit and cross-repository tests pass. A live five-page transfer carried all 123 registered classified checkouts into hub-core and was accepted as one current generation. Evidence: docs/evidence/RMGR-WP-0013-live-conformance-2026-09-01.md.

Package and hand off deployment

id: RMGR-WP-0013-T05
status: wait
priority: medium

Package the publisher runtime, document registry bootstrap and refresh, record evidence, and hand the concrete endpoint/configuration to HUB-WP-0006-T06.

Implementation and operating documentation are complete. Deployment remains waiting on an explicit placement/network owner: the public Core Hub cluster cannot read the host-local Repo Manager checkout registry, and mounting a broad home directory or reintroducing State Hub as the live classification source is not an acceptable implicit choice.

Acceptance

• Every published repository is keyed by its registrar UUID
• The output validates as contract 1.0.0 without hub-core coercion
• Pages cannot be mixed across snapshots or page sizes
• Invalid source state cannot replace hub-core's last accepted generation
• Runtime and deployment handoff are documented and reproducible