code-coordinator 0.5.55__tar.gz → 0.5.57__tar.gz

{code_coordinator-0.5.55/code_coordinator.egg-info → code_coordinator-0.5.57}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-coordinator
-Version: 0.5.55
+Version: 0.5.57
 Summary: Coordinate Claude Code workers across multiple machines and repos.
 Author-email: John Donaghy <johnfdonaghy@gmail.com>
 License-Expression: LicenseRef-FSL-1.1-MIT

{code_coordinator-0.5.55 → code_coordinator-0.5.57/code_coordinator.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-coordinator
-Version: 0.5.55
+Version: 0.5.57
 Summary: Coordinate Claude Code workers across multiple machines and repos.
 Author-email: John Donaghy <johnfdonaghy@gmail.com>
 License-Expression: LicenseRef-FSL-1.1-MIT

{code_coordinator-0.5.55 → code_coordinator-0.5.57}/code_coordinator.egg-info/SOURCES.txt

@@ -100,6 +100,7 @@ coord/pipeline.py
 coord/plan_parser.py
 coord/plans.py
 coord/platform_paths.py
+coord/portal_bridge.py
 coord/pr_body_lint.py
 coord/prereqs.py
 coord/progress.py
@@ -149,6 +150,7 @@ coord/commands/merge.py
 coord/commands/milestone.py
 coord/commands/plan_followup.py
 coord/commands/plans.py
+coord/commands/portal.py
 coord/commands/release.py
 coord/commands/report.py
 coord/commands/review.py
@@ -484,6 +486,7 @@ tests/test_cli_milestone_ship.py
 tests/test_cli_network.py
 tests/test_cli_new_issue_chat.py
 tests/test_cli_plans.py
+tests/test_cli_portal.py
 tests/test_cli_pull_artifact.py
 tests/test_cli_queue.py
 tests/test_cli_reattach_sessions.py
@@ -634,6 +637,8 @@ tests/test_plan_followup_review_command.py
 tests/test_plan_only.py
 tests/test_plan_parser.py
 tests/test_platform_paths.py
+tests/test_portal_bridge.py
+tests/test_portal_config.py
 tests/test_pr_body_lint.py
 tests/test_prereqs.py
 tests/test_production_db_guard.py

{code_coordinator-0.5.55 → code_coordinator-0.5.57}/code_coordinator.egg-info/scm_file_list.json

@@ -61,6 +61,7 @@
     "coord/commands/milestone.py",
     "coord/commands/plan_followup.py",
     "coord/commands/plans.py",
+    "coord/commands/portal.py",
     "coord/commands/release.py",
     "coord/commands/report.py",
     "coord/commands/review.py",
@@ -272,6 +273,7 @@
     "coord/plan_parser.py",
     "coord/plans.py",
     "coord/platform_paths.py",
+    "coord/portal_bridge.py",
     "coord/pr_body_lint.py",
     "coord/prereqs.py",
     "coord/progress.py",
@@ -514,6 +516,7 @@
     "tests/test_cli_network.py",
     "tests/test_cli_new_issue_chat.py",
     "tests/test_cli_plans.py",
+    "tests/test_cli_portal.py",
     "tests/test_cli_pull_artifact.py",
     "tests/test_cli_queue.py",
     "tests/test_cli_reattach_sessions.py",
@@ -664,6 +667,8 @@
     "tests/test_plan_only.py",
     "tests/test_plan_parser.py",
     "tests/test_platform_paths.py",
+    "tests/test_portal_bridge.py",
+    "tests/test_portal_config.py",
     "tests/test_pr_body_lint.py",
     "tests/test_prereqs.py",
     "tests/test_production_db_guard.py",

{code_coordinator-0.5.55 → code_coordinator-0.5.57}/code_coordinator.egg-info/scm_version.json

@@ -1,7 +1,7 @@
 {
-  "tag": "0.5.55",
+  "tag": "0.5.57",
   "distance": 0,
-  "node": "g20ff70836aa359817f5f585fff5a5b9a075bb022",
+  "node": "ge814fae5eeda1e29d1a4fc796dc41051c4ae8d99",
   "dirty": false,
   "branch": "HEAD",
   "node_date": "2026-08-13"

{code_coordinator-0.5.55 → code_coordinator-0.5.57}/coord/cli.py

@@ -87,6 +87,9 @@ from coord.health.cli import health
 # #1632: same arrangement for the fleet notifier — predicate, baselines,
 # transport seam and CLI all live in coord/notifier/.
 from coord.notifier.cli import notifier_group
+# #2179: coord-portal sync bridge client — coord/portal_bridge.py is the
+# client, coord/commands/portal.py is the CLI over it.
+from coord.commands.portal import portal_group
 from coord.commands.merge import (
     bounce,
     merge,
@@ -391,6 +394,7 @@ main.add_command(gates)
 main.add_command(doctor)
 main.add_command(health)
 main.add_command(notifier_group)
+main.add_command(portal_group)
 main.add_command(issue_group)
 main.add_command(context_group)
 main.add_command(audit)

code_coordinator-0.5.57/coord/commands/portal.py

@@ -0,0 +1,120 @@
+"""``coord portal`` — exercise the coord-portal sync bridge client (#2179).
+
+Everything that automatically decides *when* to push a status, and *which*
+coord-side work a portal submission maps to, is out of scope here (see
+``coord/portal_bridge.py``'s module docstring — that is follow-up work this
+issue deliberately did not take on). What exists today is the thin client
+plus enough CLI surface to:
+
+* prove the credential pair actually works (``coord portal heartbeat``),
+  which is also how an operator manually verifies #2179's acceptance shape
+  end to end once ``BRIDGE_CLIENT_ID``/``BRIDGE_CLIENT_SECRET`` are set — a
+  submission's ``/deliveries`` row going ``queued`` → ``sent`` in production
+  is only reachable at all once something has pushed a status; and
+* push one status update by hand (``coord portal push``), so a submission's
+  status can be moved even before anything automatic drives it.
+"""
+
+from __future__ import annotations
+
+import json
+
+import click
+
+from coord.commands._common import _CONFIG_OPTION, _load_config
+from coord.portal_bridge import (
+    PortalBridgeError,
+    SUBMISSION_STATUSES,
+    client_from_config,
+)
+
+
+@click.group("portal")
+def portal_group() -> None:
+    """coord-portal sync bridge — status, manual push, heartbeat (#2179)."""
+
+
+@portal_group.command("status")
+@_CONFIG_OPTION
+@click.option("--json", "as_json", is_flag=True, default=False)
+def portal_status(config_path, as_json: bool) -> None:
+    """Show whether the portal bridge is configured, without sending anything."""
+    cfg = _load_config(config_path).portal
+    payload = {
+        "enabled": cfg.enabled,
+        "base_url": cfg.base_url,
+        "credentials_set": bool(cfg.bridge_client_id and cfg.bridge_client_secret),
+        "timeout_secs": cfg.timeout_secs,
+        "max_retries": cfg.max_retries,
+    }
+    if as_json:
+        click.echo(json.dumps(payload, indent=2, sort_keys=True))
+        return
+    if not cfg.enabled:
+        click.echo("portal: disabled (no 'portal:' block, or portal.enabled: false)")
+        return
+    click.echo(f"portal: ENABLED  base_url={cfg.base_url}  "
+               f"credentials={'set' if payload['credentials_set'] else 'MISSING'}")
+
+
+@portal_group.command("heartbeat")
+@_CONFIG_OPTION
+def portal_heartbeat(config_path) -> None:
+    """Send one heartbeat, proving the credential pair and base_url work.
+
+    Exits non-zero on failure — a 401 here means BRIDGE_CLIENT_ID/SECRET on
+    this side do not match what the portal has (or Cloudflare Access is
+    rejecting the request before it even gets there).
+    """
+    cfg = _load_config(config_path).portal
+    client = client_from_config(cfg)
+    if client is None:
+        click.secho(
+            "portal is not enabled — nothing to do (see `coord portal status`)",
+            fg="yellow",
+        )
+        raise SystemExit(1)
+    try:
+        ok = client.heartbeat()
+    except PortalBridgeError as exc:
+        click.secho(f"heartbeat failed: {exc}", fg="red")
+        raise SystemExit(1) from exc
+    if ok:
+        click.secho("heartbeat sent", fg="green")
+        return
+    click.secho("heartbeat sent but portal did not confirm 'ok'", fg="red")
+    raise SystemExit(1)
+
+
+@portal_group.command("push")
+@_CONFIG_OPTION
+@click.argument("submission_id")
+@click.argument("revision", type=int)
+@click.argument("status", type=click.Choice(SUBMISSION_STATUSES))
+def portal_push(config_path, submission_id: str, revision: int, status: str) -> None:
+    """Push one status update by hand: SUBMISSION_ID REVISION STATUS.
+
+    REVISION must be strictly greater than whatever the portal last accepted
+    for this submission, or the push comes back `already_applied` (a
+    success, not an error — see coord-portal's src/bridge/updates.ts).
+    """
+    cfg = _load_config(config_path).portal
+    client = client_from_config(cfg)
+    if client is None:
+        click.secho(
+            "portal is not enabled — nothing to do (see `coord portal status`)",
+            fg="yellow",
+        )
+        raise SystemExit(1)
+    try:
+        result = client.push_status(submission_id, revision, status)
+    except PortalBridgeError as exc:
+        click.secho(f"push failed: {exc}", fg="red")
+        raise SystemExit(1) from exc
+    if result.ok:
+        click.secho(f"{result.outcome}: {submission_id}@{revision} -> {status}", fg="green")
+        return
+    click.secho(
+        f"rejected: {submission_id}@{revision} -> {status} ({result.reason})", fg="red"
+    )
+    raise SystemExit(1)

{code_coordinator-0.5.55 → code_coordinator-0.5.57}/coord/config.py

@@ -1671,6 +1671,41 @@ class NotificationsConfig:
     cold_ceiling_mins: dict[str, float] = field(default_factory=dict)
 
 
+@dataclass
+class PortalConfig:
+    """The outbound client to coord-portal's sync bridge (#2179, ``docs/CUSTOMER_PORTAL.md``).
+
+    Absent block == disabled == coord never talks to the portal — unchanged
+    behaviour for every existing deployment, and the correct default until
+    ``BRIDGE_CLIENT_ID``/``BRIDGE_CLIENT_SECRET`` actually exist in production
+    (they do not, as of #2179: ``wrangler secret list`` on the portal has no
+    entry for either).
+
+    The portal is a third party from coord's perspective — a push failure
+    must be retried and surfaced, never fatal to a merge or a dispatch.
+    Nothing in :mod:`coord.portal_bridge` sits on the dispatch path; it is a
+    client other code calls, not a check anything blocks on.
+    """
+
+    enabled: bool = False
+    # e.g. "https://intake.heurontech.com". No default: a client pointed at
+    # nothing by accident is worse than one that refuses to start.
+    base_url: str | None = None
+    # The Cloudflare Access service-token pair coord-portal's
+    # ``isBridgeAuthorized`` requires as a matched, non-empty pair (half a
+    # credential is not a credential, and it fails closed on exactly that).
+    # Support ``${VAR}`` expansion (mirrors ``providers.definitions[*].env``)
+    # so the real secret lives in the environment, never committed in
+    # coordinator.yml.
+    bridge_client_id: str | None = None
+    bridge_client_secret: str | None = None
+    timeout_secs: float = 10.0
+    # Retries are for transient/5xx failures only — see
+    # coord.portal_bridge.PortalBridgeClient. A 401 never retries: a bad
+    # credential does not become a good one on attempt two.
+    max_retries: int = 2
+
+
 @dataclass
 class Config:
     repos: list[Repo]
@@ -1695,6 +1730,8 @@ class Config:
     health: HealthConfig = field(default_factory=HealthConfig)
     # #1632 — absent block == disabled == today's behaviour (silence).
     notifications: NotificationsConfig = field(default_factory=NotificationsConfig)
+    # #2179 — absent block == disabled == coord never talks to coord-portal.
+    portal: PortalConfig = field(default_factory=PortalConfig)
     path: Path | None = None
 
     def repo(self, name: str) -> Repo | None:
@@ -1767,6 +1804,7 @@ def parse_mapping(raw: Any, *, path: Path | None = None) -> Config:
     pricing = _parse_pricing(raw.get("pricing"))
     health = _parse_health(raw.get("health"))
     notifications = _parse_notifications(raw.get("notifications"))
+    portal = _parse_portal(raw.get("portal"))
 
     return Config(
         repos=repos,
@@ -1789,6 +1827,7 @@ def parse_mapping(raw: Any, *, path: Path | None = None) -> Config:
         pricing=pricing,
         health=health,
         notifications=notifications,
+        portal=portal,
         path=p,
     )
 
@@ -3239,6 +3278,85 @@ def _expand_env_vars(value: str) -> str:
     return _ENV_VAR_RE.sub(_replace, value)
 
 
+_PORTAL_PLAIN_STR_FIELDS = ("base_url",)
+_PORTAL_SECRET_STR_FIELDS = ("bridge_client_id", "bridge_client_secret")
+
+
+def _parse_portal(raw: Any) -> PortalConfig:
+    """Parse the optional ``portal:`` block from coordinator.yml (#2179).
+
+    An absent block returns a **disabled** :class:`PortalConfig` — unchanged
+    behaviour for every existing deployment, and the correct default until
+    ``BRIDGE_CLIENT_ID``/``BRIDGE_CLIENT_SECRET`` exist in production.
+    """
+    if raw is None:
+        return PortalConfig()
+    if not isinstance(raw, dict):
+        raise ConfigError("'portal' must be a mapping")
+
+    cfg = PortalConfig()
+    known = {f.name for f in fields(PortalConfig)}
+    unknown = sorted(set(raw) - known)
+    if unknown:
+        raise ConfigError(
+            f"unknown portal option(s): {', '.join(unknown)} "
+            f"(valid: {', '.join(sorted(known))})"
+        )
+
+    if "enabled" in raw:
+        if not isinstance(raw["enabled"], bool):
+            raise ConfigError("portal.enabled must be a boolean")
+        cfg.enabled = raw["enabled"]
+
+    for key in _PORTAL_PLAIN_STR_FIELDS:
+        if key in raw:
+            value = raw[key]
+            if value is not None and not isinstance(value, str):
+                raise ConfigError(f"portal.{key} must be a string or null")
+            if isinstance(value, str) and not value.strip():
+                raise ConfigError(f"portal.{key} must be a non-empty string or null")
+            setattr(cfg, key, value.strip().rstrip("/") if isinstance(value, str) else None)
+
+    for key in _PORTAL_SECRET_STR_FIELDS:
+        if key in raw:
+            value = raw[key]
+            if value is not None and not isinstance(value, str):
+                raise ConfigError(f"portal.{key} must be a string or null")
+            if isinstance(value, str):
+                # ${VAR} expansion (mirrors providers.definitions[*].env) so the
+                # real secret lives in the environment, never committed here —
+                # coordinator.yml is public-repo-adjacent operator config, and
+                # these two values are exactly what coord-portal is public
+                # about NOT holding on its own side of the boundary.
+                value = _expand_env_vars(value).strip()
+                if not value:
+                    raise ConfigError(f"portal.{key} must be a non-empty string or null")
+            setattr(cfg, key, value if isinstance(value, str) else None)
+
+    if "timeout_secs" in raw:
+        value = raw["timeout_secs"]
+        if isinstance(value, bool) or not isinstance(value, (int, float)) or value <= 0:
+            raise ConfigError("portal.timeout_secs must be a positive number")
+        cfg.timeout_secs = float(value)
+
+    if "max_retries" in raw:
+        value = raw["max_retries"]
+        if isinstance(value, bool) or not isinstance(value, int) or value < 0:
+            raise ConfigError("portal.max_retries must be a non-negative integer")
+        cfg.max_retries = value
+
+    if cfg.enabled and not (cfg.base_url and cfg.bridge_client_id and cfg.bridge_client_secret):
+        # Half a credential is not a credential — coord-portal's
+        # isBridgeAuthorized takes the identical position and fails closed on
+        # exactly this. Refuse at parse time rather than 401-looping forever.
+        raise ConfigError(
+            "portal.enabled is true but base_url/bridge_client_id/bridge_client_secret "
+            "are not all set"
+        )
+
+    return cfg
+
+
 def _parse_providers(raw: Any) -> ProvidersConfig:
     """Parse the optional ``providers:`` block from coordinator.yml.