gabriel / musehub public
Open
aaronrene aaronrene · 17 days ago

Phase 9A-4 F7: overseer-run provenance enrichment API (Scooling consumer)

Summary

Read-only GET /api/overseer-run-provenance/{run_ref} for Scooling's readOverseerRunProvenance consumer (GitHub SC #198 @ 10f7b02).

MuseHub issue

https://staging.musehub.ai/gabriel/musehub/issues/144

Branch

feat/9a-4-f7-overseer-provenance → dev

Acceptance

  • Fixed-path route before /{owner}/{repo_slug} wildcard
  • Env gate: MUSEHUB_OVERSEER_PROVENANCE_ENRICHMENT=enabled
  • Fixture flow_run:fixture-overseer-001 returns content-free envelope
  • Read-only — no canonical writes

Post-merge (operator)

deploy/push.sh staging with env flag enabled; Aaron resumes hosted spot-check.

feat/9a-4-f7-overseer-provenance dev branch
high risk
minor semver
0/2 approvals
merge type
sha256:42bc547653458bb15e283222247af0237872d9cb5c2a72ad2ca1c111ed2c0ca4 from
sha256:fd35b52294fe17892f05804659f29fa44e583018c702ea23073b154375506648 to

Symbol Delta

43 symbols
41 added 2 modified
musehub/api/routes/musehub/overseer_provenance.py 11
+ _require_enrichment_enabled
+ get_overseer_run_provenance
+ import::APIRouter
+ import::Depends
+ import::HTTPException
+ import::TokenClaims
+ import::annotations
+ import::enrichment
+ import::optional_token
+ import::status
+ router
musehub/config.py 3
+ import::Field
~ Settings breaking
~ import::model_validator
musehub/services/musehub_overseer_provenance.py 20
+ CONTRACT_VERSION
+ HASH_RE
+ OVERSEER_PROVENANCE_ENRICHMENT_AUTHORIZED
+ OverseerRunProvenanceRecord
+ RUN_REF_RE
+ SAFE_IDENTIFIER_RE
+ _ENRICHMENT_STORE
+ _serialize_record
+ _validate_record_shape
+ default_produced_at
+ get_overseer_run_provenance
+ import::Any
+ import::UTC
+ import::annotations
+ import::dataclass
+ import::datetime
+ import::re
+ import::settings
+ is_overseer_provenance_enrichment_enabled
+ seed_overseer_provenance_record
tests/unit/test_overseer_provenance_f7.py 9
+ import::annotations
+ import::enrichment
+ import::pytest
+ test_fixture_run_ref_returns_content_free_envelope
+ test_gate_off_when_env_disabled
+ test_gate_on_when_env_enabled
+ test_invalid_run_ref_returns_none
+ test_seed_rejects_invalid_record
+ test_unknown_run_ref_returns_none

Files Changed

5 of 1,033
A musehub/api/routes/musehub/overseer_provenance.py
A musehub/services/musehub_overseer_provenance.py
A tests/unit/test_overseer_provenance_f7.py
M deploy/secrets.sh
M musehub/config.py

Commits

2
fix
fix(9A-4 F7): env alias + staging secrets for overseer provenance gate. Map...
aaronrene · 15 days ago
minor sha256:e5530c6b8996
feat
feat(9A-4 F7): overseer-run provenance enrichment API for Scooling consumer. Adds...
aaronrene · 17 days ago
minor sha256:42bc54765345

Divergence Analysis

feat/9a-4-f7-overseer-provenance → dev
0%
0% divergence
Very compatible — minimal differences

Review comments

0

No review comments yet

Be the first to leave a review comment on this merge proposal.

Muse CLI

Comment muse hub proposal comment create sha256:01e6a0d4ca543a6a11eeeecd4fa9eca259c0d2ad625954b5465de30a30163c83 --body "…"
Approve muse hub proposal review submit sha256:01e6a0d4ca543a6a11eeeecd4fa9eca259c0d2ad625954b5465de30a30163c83 --verdict approve
Request changes muse hub proposal review submit sha256:01e6a0d4ca543a6a11eeeecd4fa9eca259c0d2ad625954b5465de30a30163c83 --verdict request_changes --body "…"
Close muse hub proposal close sha256:01e6a0d4ca543a6a11eeeecd4fa9eca259c0d2ad625954b5465de30a30163c83
Merge — merge engine docs ↗
Merge muse hub proposal merge sha256:01e6a0d4ca543a6a11eeeecd4fa9eca259c0d2ad625954b5465de30a30163c83 --hub http://staging.musehub.ai