Merge remote-tracking branch 'origin/main' into codex/p0-obs-002-20260715

apps/api/src/core/config.py

@@ -832,6 +832,33 @@ class Settings(BaseSettings):
             "dedicated signal worker."
         ),
     )
+    ENABLE_MCP_VERSION_LIFECYCLE_WORKER: bool = Field(
+        default=True,
+        description=(
+            "True=run the fail-closed external MCP catalog observation and version "
+            "lifecycle controller in the dedicated signal worker. The controller "
+            "never installs or promotes an external artifact without immutable "
+            "supply-chain and replay receipts."
+        ),
+    )
+    MCP_VERSION_LIFECYCLE_INTERVAL_SECONDS: int = Field(
+        default=21_600,
+        ge=900,
+        le=86_400,
+        description="External MCP discovery cadence; defaults to every six hours.",
+    )
+    MCP_VERSION_LIFECYCLE_STARTUP_SLEEP_SECONDS: int = Field(
+        default=30,
+        ge=0,
+        le=900,
+        description="Delay before the first MCP version lifecycle observation run.",
+    )
+    MCP_VERSION_LIFECYCLE_SOURCE_TIMEOUT_SECONDS: int = Field(
+        default=12,
+        ge=3,
+        le=30,
+        description="Bounded timeout for one allowlisted Smithery or mcp.so read.",
+    )
     AWOOOP_ANSIBLE_CANDIDATE_BACKFILL_INTERVAL_SECONDS: int = Field(
         default=600,
         ge=60,