wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

feat(api): close credential escrow evidence readback
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 19s
Details
CD Pipeline / build-and-deploy (push) Successful in 5m34s
Details
CD Pipeline / post-deploy-checks (push) Successful in 1m12s
Details

Browse Source
This commit is contained in:
Your Name
2026-06-29 21:17:42 +08:00
parent 165afd24bc
commit 005be30fb1
9 changed files with 674 additions and 233 deletions
Download Patch File Download Diff File Expand all files Collapse all files

186
apps/api/src/services/delivery_closure_workbench.py
View File

@@ -109,6 +109,10 @@ def build_delivery_closure_workbench(
)
credential_intake_rollups = _dict(credential_escrow_intake.get("rollups"))
credential_intake_readback = _dict(credential_escrow_intake.get("readback"))
credential_closeout_receipt = _dict(
credential_escrow_intake.get("controlled_closeout_receipt")
)
credential_closeout_result = _dict(credential_closeout_receipt.get("result"))
single_preflight_intake = _dict(
credential_escrow_intake.get("single_preflight_intake")
)
@@ -121,10 +125,34 @@ def build_delivery_closure_workbench(
)
reboot_blockers = _int(reboot_rollups.get("active_blocker_count"))
credential_escrow_required_items = _int(
backup_rollups.get("credential_escrow_required_item_count")
credential_intake_rollups.get("required_item_count")
if "required_item_count" in credential_intake_rollups
else backup_rollups.get("credential_escrow_required_item_count")
)
credential_escrow_missing_items = _int(
backup_rollups.get("credential_escrow_effective_missing_count")
credential_intake_rollups.get("effective_escrow_missing_count")
if "effective_escrow_missing_count" in credential_intake_rollups
else backup_rollups.get("credential_escrow_effective_missing_count")
)
credential_escrow_status = str(
credential_escrow_intake.get("status")
or backup_rollups.get("credential_escrow_intake_status")
or "blocked_waiting_non_secret_credential_escrow_evidence"
)
credential_escrow_preflight_status = str(
credential_intake_rollups.get("preflight_status")
or backup_rollups.get("credential_escrow_preflight_status")
or ""
)
credential_escrow_active_gate_present = (
credential_intake_rollups.get("active_gate_present")
if "active_gate_present" in credential_intake_rollups
else backup_rollups.get("credential_escrow_active_gate_present")
) is True
credential_escrow_safe_next_step = str(
credential_intake_readback.get("safe_next_step")
or credential_escrow_intake.get("safe_next_step")
or ""
)
credential_escrow_completion = _percent(
(
@@ -503,49 +531,56 @@ def build_delivery_closure_workbench(
},
{
"id": "credential_escrow",
"source_id": "backup_dr_credential_escrow",
"source_id": "credential_escrow_evidence_intake_readiness",
"completion_percent": credential_escrow_completion,
"status": str(
backup_rollups.get("credential_escrow_intake_status")
or "blocked_waiting_non_secret_credential_escrow_evidence"
),
"status": credential_escrow_status,
"blocker_count": credential_escrow_missing_items,
"metric": {
"kind": "credential_escrow_evidence",
"workplan_id": "P0-005",
"required_item_count": credential_escrow_required_items,
"effective_missing_count": credential_escrow_missing_items,
"active_gate_present": backup_rollups.get(
"credential_escrow_active_gate_present"
)
is True,
"preflight_status": str(
backup_rollups.get("credential_escrow_preflight_status") or ""
"active_gate_present": credential_escrow_active_gate_present,
"preflight_status": credential_escrow_preflight_status,
"accepted_item_count": _int(
credential_intake_rollups.get("accepted_item_count")
),
"owner_response_received_count": _int(
backup_rollups.get(
"credential_escrow_owner_response_received_count"
)
credential_intake_rollups.get("owner_response_received_count")
),
"owner_response_accepted_count": _int(
backup_rollups.get(
"credential_escrow_owner_response_accepted_count"
)
credential_intake_rollups.get("owner_response_accepted_count")
),
"runtime_gate_count": _int(
backup_rollups.get("credential_escrow_runtime_gate_count")
credential_intake_rollups.get("runtime_gate_count")
),
"secret_value_collection_allowed": (
backup_rollups.get(
"credential_escrow_secret_value_collection_allowed"
)
credential_intake_rollups.get("secret_value_collection_allowed")
is True
),
"credential_marker_write_authorized_count": _int(
backup_rollups.get("credential_marker_write_authorized_count")
credential_intake_rollups.get(
"credential_marker_write_authorized_count"
)
),
"forbidden_true_field_count": _int(
backup_rollups.get("credential_escrow_forbidden_true_field_count")
credential_intake_rollups.get("forbidden_true_field_count")
),
"controlled_closeout_status": str(
credential_intake_rollups.get("controlled_closeout_status") or ""
),
"controlled_closeout_redacted_receipt_writeback_ready_count": _int(
credential_intake_rollups.get(
"controlled_closeout_redacted_receipt_writeback_ready_count"
)
),
"controlled_closeout_source_ref": str(
credential_intake_readback.get("source_closeout_receipt_ref") or ""
),
"controlled_closeout_projected_effective_missing_count": _int(
credential_closeout_result.get(
"projected_effective_escrow_missing_count"
)
),
"single_preflight_intake_ready": (
credential_escrow_intake.get("single_preflight_intake_ready")
@@ -596,7 +631,7 @@ def build_delivery_closure_workbench(
),
},
"href": "/operations",
"next_action": "collect_redacted_non_secret_evidence_refs_then_rerun_preflight",
"next_action": credential_escrow_safe_next_step,
},
{
"id": "gitea_private_inventory",
@@ -807,46 +842,44 @@ def build_delivery_closure_workbench(
or ""
),
"credential_escrow_intake_status": str(
backup_rollups.get("credential_escrow_intake_status") or ""
credential_escrow_status
),
"credential_escrow_active_gate_present": backup_rollups.get(
"credential_escrow_active_gate_present"
)
is True,
"credential_escrow_preflight_status": str(
backup_rollups.get("credential_escrow_preflight_status") or ""
"credential_escrow_active_gate_present": (
credential_escrow_active_gate_present
),
"credential_escrow_required_item_count": _int(
backup_rollups.get("credential_escrow_required_item_count")
),
"credential_escrow_effective_missing_count": _int(
backup_rollups.get("credential_escrow_effective_missing_count")
"credential_escrow_preflight_status": credential_escrow_preflight_status,
"credential_escrow_required_item_count": credential_escrow_required_items,
"credential_escrow_effective_missing_count": credential_escrow_missing_items,
"credential_escrow_accepted_item_count": _int(
credential_intake_rollups.get("accepted_item_count")
),
"credential_escrow_owner_response_received_count": _int(
backup_rollups.get(
"credential_escrow_owner_response_received_count"
)
credential_intake_rollups.get("owner_response_received_count")
),
"credential_escrow_owner_response_accepted_count": _int(
backup_rollups.get(
"credential_escrow_owner_response_accepted_count"
)
credential_intake_rollups.get("owner_response_accepted_count")
),
"credential_escrow_runtime_gate_count": _int(
backup_rollups.get("credential_escrow_runtime_gate_count")
credential_intake_rollups.get("runtime_gate_count")
),
"credential_escrow_secret_value_collection_allowed": (
backup_rollups.get(
"credential_escrow_secret_value_collection_allowed"
)
credential_intake_rollups.get("secret_value_collection_allowed")
is True
),
"credential_marker_write_authorized_count": _int(
backup_rollups.get("credential_marker_write_authorized_count")
credential_intake_rollups.get(
"credential_marker_write_authorized_count"
)
),
"credential_escrow_forbidden_true_field_count": _int(
backup_rollups.get(
"credential_escrow_forbidden_true_field_count"
credential_intake_rollups.get("forbidden_true_field_count")
),
"credential_escrow_controlled_closeout_status": str(
credential_intake_rollups.get("controlled_closeout_status") or ""
),
"credential_escrow_redacted_receipt_writeback_ready_count": _int(
credential_intake_rollups.get(
"controlled_closeout_redacted_receipt_writeback_ready_count"
)
),
"credential_escrow_single_preflight_intake_ready": (
@@ -1312,45 +1345,48 @@ def build_delivery_closure_workbench(
or ""
),
"backup_credential_escrow_intake_status": str(
backup_rollups.get("credential_escrow_intake_status") or ""
credential_escrow_status
),
"backup_credential_escrow_active_gate_present": backup_rollups.get(
"credential_escrow_active_gate_present"
)
is True,
"backup_credential_escrow_preflight_status": str(
backup_rollups.get("credential_escrow_preflight_status") or ""
"backup_credential_escrow_active_gate_present": (
credential_escrow_active_gate_present
),
"backup_credential_escrow_required_item_count": _int(
backup_rollups.get("credential_escrow_required_item_count")
),
"backup_credential_escrow_effective_missing_count": _int(
backup_rollups.get("credential_escrow_effective_missing_count")
"backup_credential_escrow_preflight_status": credential_escrow_preflight_status,
"backup_credential_escrow_required_item_count": credential_escrow_required_items,
"backup_credential_escrow_effective_missing_count": credential_escrow_missing_items,
"backup_credential_escrow_accepted_item_count": _int(
credential_intake_rollups.get("accepted_item_count")
),
"backup_credential_escrow_owner_response_received_count": _int(
backup_rollups.get(
"credential_escrow_owner_response_received_count"
)
credential_intake_rollups.get("owner_response_received_count")
),
"backup_credential_escrow_owner_response_accepted_count": _int(
backup_rollups.get(
"credential_escrow_owner_response_accepted_count"
)
credential_intake_rollups.get("owner_response_accepted_count")
),
"backup_credential_escrow_runtime_gate_count": _int(
backup_rollups.get("credential_escrow_runtime_gate_count")
credential_intake_rollups.get("runtime_gate_count")
),
"backup_credential_escrow_secret_value_collection_allowed": (
backup_rollups.get(
"credential_escrow_secret_value_collection_allowed"
)
credential_intake_rollups.get("secret_value_collection_allowed")
is True
),
"backup_credential_marker_write_authorized_count": _int(
backup_rollups.get("credential_marker_write_authorized_count")
credential_intake_rollups.get(
"credential_marker_write_authorized_count"
)
),
"backup_credential_escrow_forbidden_true_field_count": _int(
backup_rollups.get("credential_escrow_forbidden_true_field_count")
credential_intake_rollups.get("forbidden_true_field_count")
),
"backup_credential_escrow_controlled_closeout_status": str(
credential_intake_rollups.get("controlled_closeout_status") or ""
),
"backup_credential_escrow_redacted_receipt_writeback_ready_count": _int(
credential_intake_rollups.get(
"controlled_closeout_redacted_receipt_writeback_ready_count"
)
),
"backup_credential_escrow_closeout_receipt_ref": str(
credential_intake_readback.get("source_closeout_receipt_ref") or ""
),
"backup_credential_escrow_single_preflight_intake_ready": (
credential_escrow_intake.get("single_preflight_intake_ready") is True