47 lines
4.2 KiB
JSON
47 lines
4.2 KiB
JSON
{
|
|
"task_id": "DEV-000042",
|
|
"task_revision": 1,
|
|
"architecture_revision": "ADR-0005",
|
|
"base_repo_revision": "6e0040fe89c938549295798c77006877902a338d",
|
|
"risk_tier": "E",
|
|
"intent": "Enable the ADR-0005 typed prospective notification command through the authenticated Creator flow, exact CapabilityBinding validation, dynamic Commit Executor dispatch, and an explicit confirmation control in the Creator console without installing production credentials or deploying.",
|
|
"requirement_ids": ["INV-AUTH-001", "INV-OWN-001", "INV-CONT-001", "ADR-0005"],
|
|
"allowed_change_scope": {
|
|
"modules": ["commit"],
|
|
"paths": [
|
|
"modules/commit/domain/commit.go",
|
|
"modules/commit/domain/notification_test.go",
|
|
"adapters/notificationexecutor/executor.go",
|
|
"adapters/notificationexecutor/executor_test.go",
|
|
"cmd/commit-runtime/creator_clients.go",
|
|
"cmd/commit-runtime/creator_command.go",
|
|
"cmd/commit-runtime/creator_command_test.go",
|
|
"cmd/commit-runtime/main.go",
|
|
"cmd/commit-runtime/notification_executor.go",
|
|
"cmd/commit-runtime/notification_executor_test.go",
|
|
"cmd/creator-web/server.go",
|
|
"cmd/creator-web/server_test.go",
|
|
"cmd/creator-web/static/index.html",
|
|
"cmd/creator-web/static/assets/console.js",
|
|
"cmd/creator-web/static/assets/console.css",
|
|
"dev/ACTIVE_TASK.json",
|
|
"dev/tasks/DEV-000042-creator-notification-command.json"
|
|
]
|
|
},
|
|
"forbidden_change_scope": {
|
|
"paths": ["architecture/**", "ci/**", ".gitea/**", "database/**", "deploy/**", "security/**", "modules/identity/**", "modules/authority/**", "modules/work/**", "modules/continuity/**"]
|
|
},
|
|
"allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0},
|
|
"contracts": {"consume": ["contracts.identity@v1", "contracts.authority@v1", "contracts.work@v1", "contracts.continuity@v1", "contracts.capability@v1", "contracts.commit@v1", "ADR-0005"], "may_change": []},
|
|
"semantic_owner": "Commit owns action evidence and attempts; Capability owns binding; Continuity owns the unchanged ProspectiveItem; Creator UI is a replaceable projection",
|
|
"canonical_state": ["existing Commit authorized action envelopes and attempts only"],
|
|
"state_transitions": ["notification action AUTHORIZED to EXECUTING to SUCCEEDED, FAILED, or UNKNOWN_OUTCOME", "ProspectiveItem remains DELIVERED"],
|
|
"side_effects_and_privileges": ["new Creator route may invoke only deliver-prospective-notification-v1 after explicit confirmation", "Executor resolves only the exact committed binding and configured external secret reference", "no credential installation or production call in this task"],
|
|
"persistence_and_migrations": ["uses DEV-000041 additive schema; no migration in this task"],
|
|
"failure_retry_restart": ["stale item, Work target, grant, binding, owner or digest fail closed", "ambiguous PUT records UNKNOWN_OUTCOME", "reconciliation uses GET only", "retired historical binding may reconcile but cannot execute a new send"],
|
|
"assumptions": ["one configured write secret reference is sufficient for the initial receiver", "browser confirmation is explicit per notification request", "docker-test remains prohibited"],
|
|
"acceptance_scenarios": ["browser cannot submit actor, principal, capability, operation, destination, template, body, IDs, headers or credentials", "confirmation=false is rejected", "foreign owner, non-DELIVERED or stale item, stale Work, invalid grant, and missing/unhealthy/revised binding are rejected before external execution", "server renders the fixed V1 message and digest", "dynamic executor dispatch leaves existing Continuity satisfaction unchanged", "action history identifies notification actions", "UI exposes clear pending/success/unknown/error states and remains usable on desktop/mobile"],
|
|
"required_tests": ["domain authorization", "hostile request fields", "dynamic executor dispatch", "Creator HTTP", "gateway allowlist", "responsive browser", "browser console", "architecture preflight", "exact diff scope", "go test", "go vet", "CI"],
|
|
"terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT", "BLOCKED_BY_MISSING_CAPABILITY"]
|
|
}
|