coulomb/user-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
user-engine/workplans/ADHOC-2026-10-09.md
tegwick 67a996999e
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
chore(consistency): write back hub IDs for ADHOC-2026-10-09 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 445231@bnt-lap001
Assistant-Session: 024a807e-0cc5-4f2c-bc8a-b83322d1395d
2026-10-09 11:21:45 +02:00

1.6 KiB
Raw Blame History

id type title domain repo status owner created updated state_hub_workstream_id
USER-WP-ADHOC-2026-10-09 workplan Scoped invitation mail client bindings communication user-engine finished claude 2026-10-09 2026-10-09 88817a88-4415-5400-be9a-939406e77831

Send an admitted tenant/client pair on invitation mail

id: USER-WP-ADHOC-2026-10-09-T01
status: done
priority: medium
state_hub_task_id: "d62b2f0e-7b62-5bf2-945d-7d8a9f51b002"

User-engine side of email-connect EMAIL-WP-0008 (caller policy draft 2026-10-08): current invitation envelopes omit client_id, so a scoped user-engine caller cannot be admitted. Opt-in USER_ENGINE_MAIL_CLIENT_BINDINGS maps tenant globs to one literal client id.

Files:

  • src/user_engine/mail_bindings.py — strict loader and single-match resolver
  • src/user_engine/adapters/delivery.py — adds client_id to the mail envelope only; denial contacts neither lane
  • src/user_engine/runtime.py — reads the env var
  • src/user_engine/service.py, src/user_engine/web.py — keep mail_binding_denied as the recorded failure reason with an operator status line instead of collapsing it to delivery_unavailable
  • docs/configuration.md, tests/test_mail_bindings.py, tests/test_service_operations.py

Acceptance: unset keeps legacy envelopes; invalid config stops startup; unmatched or conflicting tenants are denied; platform events and outbox payloads never carry client_id; make test and make check-layer pass.

Not done here: activation. Deploy config, email-connect caller admission (EMAIL-WP-0008-T03) and token custody stay with their owners and the founder.