generated from coulomb/repo-seed
59 lines
2.1 KiB
Markdown
59 lines
2.1 KiB
Markdown
---
|
|
id: ACTIVITY-WP-0017
|
|
type: workplan
|
|
title: "Core Hub ops evidence sink"
|
|
domain: infotech
|
|
repo: activity-core
|
|
status: finished
|
|
owner: codex
|
|
topic_slug: custodian
|
|
created: "2026-06-27"
|
|
updated: "2026-06-27"
|
|
state_hub_workstream_id: "2a073bf4-febf-433e-a721-5daf71760912"
|
|
---
|
|
|
|
# Core Hub ops evidence sink
|
|
|
|
## Goal
|
|
|
|
Provide the activity-core side of the Core Hub replacement evidence path for
|
|
`CORE-WP-0008-T03`, without depending on the legacy Haskell Inter-Hub sink and
|
|
without placing secret material in activity definitions, logs, State Hub, or
|
|
chat.
|
|
|
|
## Task: Add Core Hub interaction-event sink
|
|
|
|
```task
|
|
id: ACTIVITY-WP-0017-T01
|
|
status: done
|
|
priority: high
|
|
state_hub_task_id: "32aab1af-6be5-4b52-afa1-c11f52c65892"
|
|
```
|
|
|
|
Add a `core-hub-interaction-event` ops evidence sink that posts sanitized
|
|
ops-inventory probe evidence to Core Hub `/api/v2/interaction-events`, verifies
|
|
the created event is visible, and reports only non-secret ids/statuses.
|
|
|
|
Acceptance:
|
|
|
|
- runtime token is read through `CORE_HUB_RUNTIME_TOKEN_FILE` or a named
|
|
environment variable, never from workplan content;
|
|
- sink configuration accepts `CORE_HUB_BASE_URL` and a widget id or widget
|
|
mapping;
|
|
- emitted metadata reuses the existing compact/sanitized probe evidence path;
|
|
- missing Core Hub config skips cleanly with explicit non-secret missing keys;
|
|
- tests prove the POST/visibility check and secret non-disclosure.
|
|
|
|
Verification 2026-06-27: `tests/test_ops_evidence_sinks.py` passed, and
|
|
a disposable local Core Hub runtime accepted an activity-core
|
|
`core-hub-interaction-event` sink emission, then listed the created
|
|
`ops-endpoint-verified` event back through `/api/v2/interaction-events`.
|
|
The verification asserted sanitized metadata did not include response body,
|
|
authorization header, URL userinfo, or token query material.
|
|
|
|
Completed 2026-06-27: implemented the Core Hub interaction-event sink in
|
|
`activity_core.ops_evidence_sinks` with unit coverage for POST/visibility
|
|
verification, missing config behavior, and secret non-disclosure. This provides
|
|
the direct Core Hub consumer path needed by `CORE-WP-0008-T03`; deployed use
|
|
still requires an approved Core Hub runtime token and widget id/mapping.
|