Complete ops-hub Inter-Hub bootstrap and close bootstrap workplans.

Extract bootstrap logic into src/ops_hub/bootstrap.py with dry-run support, public hub discovery, and unit tests. Update the gate probe to accept public hub listing (200 or 401), document dev commands and architecture, and archive finished OPS-WP-0001 and OPS-WP-0002 workplans.
2026-07-07 01:49:12 +02:00
parent 0454e126cb
commit 39080333da
13 changed files with 795 additions and 370 deletions
--- a/workplans/archived/260707-OPS-WP-0001-statehub-bootstrap.md
+++ b/workplans/archived/260707-OPS-WP-0001-statehub-bootstrap.md
@@ -0,0 +1,76 @@
+---
+id: OPS-WP-0001
+type: workplan
+title: "Bootstrap State Hub integration"
+domain: infotech
+repo: ops-hub
+status: archived
+owner: codex
+topic_slug: inter_hub
+created: "2026-06-06"
+updated: "2026-07-07"
+state_hub_workstream_id: "636b6196-742a-4d09-8b8c-152a4686ad35"
+---
+
+# Bootstrap State Hub integration
+
+Bootstrap this repo's State Hub integration and replace generated placeholders
+with the first concrete `ops-hub` operating frame.
+
+## Review Generated Integration Files
+
+```task
+id: OPS-WP-0001-T01
+status: done
+priority: high
+state_hub_task_id: "c102264b-f104-4e04-ae84-3db441e60659"
+```
+
+Review `INTENT.md`, `SCOPE.md`, `AGENTS.md`, and `.custodian-brief.md`.
+Replace generated placeholders with repo-specific facts where needed.
+
+Completed 2026-06-06: `INTENT.md`, `SCOPE.md`, `AGENTS.md`, and `README.md`
+now describe `ops-hub` as the Operations / System 1 Inter-Hub extension.
+
+Refreshed 2026-07-07: filled `.claude/rules/stack-and-commands.md`,
+`architecture.md`, `repo-boundary.md`, updated `SCOPE.md` current state, and
+added repo-native dev commands to `AGENTS.md`.
+
+## Verify Local Developer Workflow
+
+```task
+id: OPS-WP-0001-T02
+status: done
+priority: high
+state_hub_task_id: "39b276bc-956a-497b-a5d9-f9d5b551aa86"
+```
+
+Identify the repo's install, test, lint, build, and run commands. Add or refine
+those commands in the agent instructions so future coding sessions can verify
+changes confidently.
+
+Completed 2026-06-06: initial bootstrap had no source tree.
+
+Refreshed 2026-07-07 after OPS-WP-0002: `pyproject.toml`, `src/ops_hub/`,
+`tests/`, and `Makefile` provide `make test`, `make interhub-gate`, and
+`make interhub-bootstrap` targets documented in `AGENTS.md` and
+`.claude/rules/stack-and-commands.md`.
+
+## Seed First Real Workplan
+
+```task
+id: OPS-WP-0001-T03
+status: done
+priority: medium
+state_hub_task_id: "dbb77b70-076f-4ff5-b77b-16daf683a4c7"
+```
+
+Create the first implementation workplan for the repository's most important
+next change. After workplan file updates, run from `~/state-hub`:
+
+```bash
+make fix-consistency REPO=ops-hub
+```
+
+Completed 2026-06-06: seeded
+`workplans/OPS-WP-0002-interhub-extension-bootstrap.md`.
--- a/workplans/archived/260707-OPS-WP-0002-interhub-extension-bootstrap.md
+++ b/workplans/archived/260707-OPS-WP-0002-interhub-extension-bootstrap.md
@@ -0,0 +1,195 @@
+---
+id: OPS-WP-0002
+type: workplan
+title: "Bootstrap ops-hub as an Inter-Hub Operations extension"
+domain: infotech
+repo: ops-hub
+status: archived
+owner: codex
+topic_slug: inter_hub
+created: "2026-06-06"
+updated: "2026-07-07"
+state_hub_workstream_id: "bea9126c-2f58-41d4-90d1-af4d096f4a10"
+---
+
+# Bootstrap ops-hub as an Inter-Hub Operations extension
+
+## Goal
+
+Turn the HelixForge `HF-WP-0001` handoff into the first concrete `ops-hub`
+implementation track.
+
+`ops-hub` should become the Operations / System 1 Inter-Hub extension for
+operational truth: environments, hosts, clusters, services, endpoints,
+releases, backups, incidents, risks, runbooks, readiness gates, and migration
+waves.
+
+This repo owns domain-specific implementation assets. `inter-hub` remains the
+generic framework, registry, authentication, manifest, widget, event, and
+bootstrap API substrate.
+
+## Current Gate
+
+As of 2026-07-07, production Inter-Hub exposes the bootstrap API surface at
+`https://hub.coulomb.social`. Run `make interhub-gate` to verify the current
+gate before bootstrap.
+
+Do not run manual database seeding unless the operator explicitly chooses that
+fallback. The preferred bootstrap path is the supported Inter-Hub API.
+
+Gate criteria:
+
+- Unauthenticated `GET /api/v2/hubs` returns `200` (public discovery) or `401`
+  (auth-gated listing), not `404`.
+- OpenAPI lists `/hubs`, `/hub-capability-manifests`, `/api-consumers`, and
+  `/policy-scopes`.
+- The bootstrap/smoke client can create or reuse the `ops-hub` hub, activate
+  its manifest, create the runtime API consumer/key, seed initial widgets, and
+  persist the first governed ops event.
+
+## Handoff Sources
+
+- `/home/worsch/helix-forge/workplans/HF-WP-0001-establish-ops-hub-first-extension.md`
+- `/home/worsch/helix-forge/wiki/OpsHubInventory.md`
+- `/home/worsch/helix-forge/wiki/OpsHubReadinessGates.md`
+- `/home/worsch/helix-forge/wiki/OpsHubBootstrapRunbook.md`
+- `/home/worsch/helix-forge/wiki/ops-hub-manifest.draft.json`
+- `/home/worsch/helix-forge/wiki/ops-hub-widgets.seed.json`
+
+## Port HelixForge Handoff Artifacts
+
+```task
+id: OPS-WP-0002-T01
+status: done
+priority: high
+state_hub_task_id: "7cd1eddb-f508-493b-89b1-6d8575bfd3df"
+```
+
+Create repo-local docs and seed data for the ops vocabulary, initial inventory,
+readiness gates, bootstrap runbook, manifest draft, and widget seed.
+
+Done when the `ops-hub` repo can be understood without opening HelixForge for
+routine implementation details. Keep links back to HelixForge for architectural
+context.
+
+Completed 2026-06-06:
+
+- Ported initial inventory to `docs/initial-inventory.md`.
+- Ported readiness gates to `docs/readiness-gates.md`.
+- Ported bootstrap runbook to `docs/bootstrap-runbook.md`.
+- Ported manifest and widget seeds to `seeds/`.
+- Added `docs/README.md` as the handoff index.
+
+## Define Repository Source Layout
+
+```task
+id: OPS-WP-0002-T02
+status: done
+priority: high
+state_hub_task_id: "27d45a1d-813d-482f-8017-3884be4b509e"
+```
+
+Choose and create the first source layout for bootstrap/smoke tooling,
+collectors, adapters, and tests. Add the repo-native lint, test, build, and run
+commands to `AGENTS.md`.
+
+Done when future code changes have an obvious home and a verification command.
+
+Completed 2026-06-06:
+
+- Added `pyproject.toml`.
+- Added Python package layout under `src/ops_hub/`.
+- Added operator scripts under `scripts/`.
+- Added tests under `tests/`.
+- Documented current verification commands in `AGENTS.md`.
+
+## Implement Inter-Hub Production Gate Probe
+
+```task
+id: OPS-WP-0002-T03
+status: done
+priority: high
+state_hub_task_id: "3ef0493c-6652-4dd2-a794-5e309c6cef88"
+```
+
+Build a small probe that checks the public Inter-Hub bootstrap API gate:
+
+- `/api/v2/hubs` response is `200` or `401` unauthenticated.
+- OpenAPI lists the required bootstrap paths.
+- The result is machine-readable and suitable for a scheduled ops signal later.
+
+Done when the probe can run locally without secrets and reports the current
+gate as pass/fail with clear reasons.
+
+Completed 2026-06-06: `scripts/interhub-gate-probe.py` checks unauthenticated
+`/api/v2/hubs` status and required OpenAPI bootstrap paths, emits JSON, and
+exits nonzero while the gate is closed. Updated 2026-07-07 to accept public hub
+discovery (`200`) as well as auth-gated listing (`401`).
+
+## Implement Bootstrap Smoke Client
+
+```task
+id: OPS-WP-0002-T04
+status: done
+priority: high
+state_hub_task_id: "1a8fa43a-d524-4852-94dc-2606098002dc"
+```
+
+Implement the authenticated bootstrap/smoke client once Inter-Hub production
+exposes the supported bootstrap API.
+
+The client should use `IHUB_BASE` and `IHUB_OPERATOR_KEY` and should create or
+reuse:
+
+- `ops-hub` hub row
+- active capability manifest
+- runtime API consumer/key
+- initial governed ops widgets
+- first `ops-endpoint-verified` event
+
+Done when a dry-run and an attended real run both produce repeatable evidence
+without direct DB access.
+
+Completed 2026-07-07:
+
+- Extracted bootstrap logic to `src/ops_hub/bootstrap.py`.
+- `scripts/ops-hub-bootstrap-api.py` supports `--dry-run` and `--skip-event`.
+- Public hub discovery is attempted before authenticated listing.
+- `make interhub-bootstrap-dry-run` and `make test` verify the client locally.
+- Attended production run: `make interhub-bootstrap IHUB_OPERATOR_KEY_FILE=...`
+
+## Seed First Operational Signal
+
+```task
+id: OPS-WP-0002-T05
+status: done
+priority: medium
+state_hub_task_id: "b7d09ecd-0899-470d-aea5-6e2f07caae96"
+```
+
+Submit the first governed ops signal for the Gitea registry endpoint once the
+manifest, widget, event type, and API key exist.
+
+Initial signal:
+
+```json
+{
+  "eventType": "ops-endpoint-verified",
+  "endpoint": "https://gitea.coulomb.social/v2/",
+  "expectedStatus": 401,
+  "viewContext": "railiance-apps/workplans/RAIL-AP-WP-0001"
+}
+```
+
+Done when the event is visible in Inter-Hub and traceable to the owning
+Railiance workplan.
+
+Completed 2026-07-07 via `warden access --exec` with `platform-admin` OpenBao
+token:
+
+- Hub `ops-hub` (`4f6e4cf7-6a96-4ff2-8a37-08c9f9e405d2`) reused.
+- Active manifest `00aaf90a-8e76-4b0e-892d-33b162862f38` reused.
+- Event `3c894714-1b90-4cfa-9ce1-340704bd6526` (`ops-endpoint-verified`) on
+  widget `8c768282-aca6-466b-9c62-c6fc8f2d5624`.
+- Runtime key prefix `ch_HfXNc138N` stored at
+  `platform/operators/ops-hub/runtime` (`OPS_HUB_KEY`).