wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

feat(api): expose gitea runner attestation request
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 27s
Details
CD Pipeline / build-and-deploy (push) Has been cancelled
Details
CD Pipeline / post-deploy-checks (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Your Name
2026-06-30 07:39:05 +08:00
parent 481a946d1b
commit 43396f5603
8 changed files with 419 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

110
apps/api/src/services/delivery_closure_workbench.py
View File

@@ -33,6 +33,9 @@ from src.services.credential_escrow_evidence_intake_readiness import (
from src.services.gitea_private_inventory_p0_scorecard import (
load_latest_gitea_private_inventory_p0_scorecard,
)
from src.services.gitea_workflow_runner_owner_attestation_request import (
load_latest_gitea_workflow_runner_owner_attestation_request,
)
from src.services.gitea_workflow_runner_health import (
load_latest_gitea_workflow_runner_health,
)
@@ -65,6 +68,9 @@ def load_delivery_closure_workbench() -> dict[str, Any]:
load_latest_awoooi_gitea_onboarding_warning_step_runtime_enablement_gate()
)
gitea = load_latest_gitea_workflow_runner_health()
gitea_runner_attestation_request = (
load_latest_gitea_workflow_runner_owner_attestation_request()
)
runtime = load_latest_runtime_surface_inventory()
backup = load_latest_backup_dr_readiness_matrix()
credential_escrow_intake = load_latest_credential_escrow_evidence_intake_readiness()
@@ -78,6 +84,7 @@ def load_delivery_closure_workbench() -> dict[str, Any]:
cicd_template_copy_receipt=cicd_template_copy_receipt,
cicd_runtime_enablement_gate=cicd_runtime_enablement_gate,
gitea=gitea,
gitea_runner_attestation_request=gitea_runner_attestation_request,
runtime=runtime,
backup=backup,
credential_escrow_intake=credential_escrow_intake,
@@ -95,6 +102,7 @@ def build_delivery_closure_workbench(
cicd_template_copy_receipt: dict[str, Any],
cicd_runtime_enablement_gate: dict[str, Any],
gitea: dict[str, Any],
gitea_runner_attestation_request: dict[str, Any],
runtime: dict[str, Any],
backup: dict[str, Any],
credential_escrow_intake: dict[str, Any],
@@ -145,6 +153,18 @@ def build_delivery_closure_workbench(
production_deploy_rollups = _dict(production_deploy.get("rollups"))
gitea_status = _dict(gitea.get("program_status"))
gitea_rollups = _dict(gitea.get("rollups"))
gitea_runner_request_readback = _dict(
gitea_runner_attestation_request.get("readback")
)
gitea_runner_request_packet = _dict(
gitea_runner_attestation_request.get("request_packet")
)
gitea_runner_request_rollups = _dict(
gitea_runner_attestation_request.get("rollups")
)
gitea_runner_request_boundaries = _dict(
gitea_runner_attestation_request.get("operation_boundaries")
)
runtime_status = _dict(runtime.get("program_status"))
runtime_rollups = _dict(runtime.get("rollups"))
backup_status = _dict(backup.get("program_status"))
@@ -1007,6 +1027,47 @@ def build_delivery_closure_workbench(
"metric": {
"kind": "workflow_count",
"count": _int(gitea_rollups.get("total_workflows")),
"runner_attestation_request_status": str(
gitea_runner_attestation_request.get("status") or ""
),
"runner_attestation_request_ready": (
gitea_runner_request_rollups.get("request_template_ready") is True
),
"runner_attestation_request_active_blocker_count": _int(
gitea_runner_request_rollups.get("active_blocker_count")
),
"runner_attestation_contract_id": str(
gitea_runner_request_readback.get("contract_id") or ""
),
"runner_attestation_workflow_count": _int(
gitea_runner_request_rollups.get(
"workflow_requiring_attestation_count"
)
),
"runner_attestation_required_owner_field_count": _int(
gitea_runner_request_rollups.get("required_owner_field_count")
),
"runner_attestation_owner_response_received_count": _int(
gitea_runner_request_rollups.get("owner_response_received_count")
),
"runner_attestation_owner_response_accepted_count": _int(
gitea_runner_request_rollups.get("owner_response_accepted_count")
),
"runner_attestation_request_send_performed": (
gitea_runner_request_boundaries.get("request_send_performed")
is True
),
"runner_attestation_runner_label_change_allowed": (
gitea_runner_request_boundaries.get("runner_label_change_allowed")
is True
),
"runner_attestation_runner_registration_allowed": (
gitea_runner_request_boundaries.get("runner_registration_allowed")
is True
),
"runner_attestation_secret_read_allowed": (
gitea_runner_request_boundaries.get("secret_read_allowed") is True
),
},
"href": "/deployments",
"next_action": _first_contract_action(gitea.get("runner_contracts")),
@@ -1363,6 +1424,55 @@ def build_delivery_closure_workbench(
)
is True
),
"gitea_runner_attestation_request_status": str(
gitea_runner_attestation_request.get("status") or ""
),
"gitea_runner_attestation_request_ready": (
gitea_runner_request_rollups.get("request_template_ready") is True
),
"gitea_runner_attestation_request_active_blocker_count": _int(
gitea_runner_request_rollups.get("active_blocker_count")
),
"gitea_runner_attestation_contract_id": str(
gitea_runner_request_readback.get("contract_id") or ""
),
"gitea_runner_attestation_runner_label": str(
gitea_runner_request_readback.get("runner_label") or ""
),
"gitea_runner_attestation_workflow_count": _int(
gitea_runner_request_rollups.get(
"workflow_requiring_attestation_count"
)
),
"gitea_runner_attestation_required_owner_field_count": _int(
gitea_runner_request_rollups.get("required_owner_field_count")
),
"gitea_runner_attestation_forbidden_action_count": _int(
gitea_runner_request_rollups.get("forbidden_action_count")
),
"gitea_runner_attestation_owner_response_received_count": _int(
gitea_runner_request_rollups.get("owner_response_received_count")
),
"gitea_runner_attestation_owner_response_accepted_count": _int(
gitea_runner_request_rollups.get("owner_response_accepted_count")
),
"gitea_runner_attestation_request_sent": (
gitea_runner_request_packet.get("request_sent") is True
),
"gitea_runner_attestation_request_send_performed": (
gitea_runner_request_boundaries.get("request_send_performed") is True
),
"gitea_runner_attestation_runner_label_change_allowed": (
gitea_runner_request_boundaries.get("runner_label_change_allowed")
is True
),
"gitea_runner_attestation_runner_registration_allowed": (
gitea_runner_request_boundaries.get("runner_registration_allowed")
is True
),
"gitea_runner_attestation_secret_read_allowed": (
gitea_runner_request_boundaries.get("secret_read_allowed") is True
),
"p0_cicd_baseline_status": str(cicd_baseline.get("status") or ""),
"p0_cicd_baseline_workplan_id": str(
cicd_baseline_readback.get("workplan_id") or ""