m/Assistant
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Merge pull request 'chore: wire optional agent bridge URL' (#132) from codex/agent-bridge-config-wiring into main
CI / test (push) Successful in 46s
Details

Browse Source
This commit was merged in pull request #132.
This commit is contained in:
m
2026-08-22 17:17:58 +00:00
parent e1186757bf 82df14bde9
commit ada2da0c6c
3 changed files with 26 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/docker-compose.prod.yml
+1
View File
@@ -114,6 +114,7 @@ services:
WORK_POSTGRES_CREDENTIAL_REF: credential://domovoy/work/db-password/v1
WORK_POSTGRES_PASSWORD_FILE: /run/secrets/work_db_password
SECRET_BACKEND_ROOT: /run/secrets
AGENT_EXECUTION_BRIDGE_URL: ${AGENT_EXECUTION_BRIDGE_URL:-}
depends_on: { postgres: { condition: service_healthy } }
volumes:
- assistant_core_secrets:/run/secrets:ro
dev/ACTIVE_TASK.json
+2 -2
View File
@@ -1,5 +1,5 @@
{
"task_file": "dev/tasks/DEV-000158-status-evidence-consolidation.json",
"task_id": "DEV-000158",
"task_file": "dev/tasks/DEV-000159-agent-bridge-config-wiring.json",
"task_id": "DEV-000159",
"task_revision": 1
}
dev/tasks/DEV-000159-agent-bridge-config-wiring.json
+23
View File
@@ -0,0 +1,23 @@
{
"task_id": "DEV-000159",
"task_revision": 1,
"architecture_revision": "ADR-0018",
"base_repo_revision": "e1186757bfcf9a349ce0ced603f4a4ebdad636fe",
"risk_tier": "E",
"intent": "Expose the already-supported optional Agent Execution bridge URL to the production agent-worker without enabling it when unset.",
"requirement_ids": ["WP-301", "Agent Execution runtime and recovery"],
"allowed_change_scope": {"modules": ["deployment", "work-agent-execution"], "paths": ["deploy/docker-compose.prod.yml", "dev/ACTIVE_TASK.json", "dev/tasks/DEV-000159-agent-bridge-config-wiring.json"]},
"forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "contracts/**", "cmd/**", "modules/**", "adapters/**", ".gitea/**"]},
"allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 1, "new_third_party_dependencies": 0, "new_database_owner_roles": 0},
"contracts": {"consume": ["AGENT_EXECUTION_BRIDGE_URL deployment variable", "agent-worker optional bridge behavior"], "may_change": []},
"semantic_owner": "deployment projection; work-agent-execution remains owner",
"canonical_state": ["none"],
"state_transitions": ["unset URL -> recovery-only; configured URL -> existing typed HTTP executor path"],
"side_effects_and_privileges": ["deployment privileged-surface review is declared; no effective new privilege; no credential forwarding; no outbound call when variable is empty"],
"persistence_and_migrations": ["none"],
"failure_retry_restart": ["existing worker fail-closed and stale recovery behavior remains unchanged"],
"assumptions": ["an independently operated bridge is still required before enabling the variable in production", "empty default preserves current recovery-only behavior"],
"acceptance_scenarios": ["production compose renders with empty bridge URL", "agent-worker remains recovery-only when unset", "configured URL is available to the process without source secret", "no bridge runtime is fabricated"],
"required_tests": ["JSON validation", "docker compose config", "go test", "go vet", "preflight", "check-diff", "check-architecture", "independent", "git diff --check", "CI"],
"terminal_gap_states": ["BLOCKED_BY_MISSING_CAPABILITY", "BLOCKED_BY_CONFLICT"]
}