datatug / backend / 38850665691

84%

Build Type

push

github

Committed by web-flow

Commit Message

feat(context): add fenced hosted session Detective bridge (#47)

Session-bound Detective runs now seal authenticated context selections and immutable Check definitions before executing the verified embedded invoice provider. Exact retries recover only an unclaimed dispatch; status and reconciliation recover durable produced results and Case evidence without replaying source queries.

The hosted adapter checks the session generation and current Case permission/version during native acceptance, then checks the fence and current Case authority in the same Firestore transaction as CaseRunLink finalization. Metadata-only evidence delivery rechecks the exact Core outbox version, session generation, redaction state and current Case authority under its native transaction. A bounded trusted worker scrubs accepted private pins while preserving separately owned Case evidence and produced receipts.

Capability metadata distinguishes admitted Chinook and embedded invoice sources under the existing demo environment. The initial native execution profile supports only the verified private embedded invoice demo. Native execution remains disabled unless explicitly configured with that admitted profile and an available provider; this change does not activate the host.

Produced checkpoints cap aggregate snapshots at 2 MiB using twice the encoded document size plus 4 KiB per document, and cap the run at 256 KiB. This leaves conservative transaction headroom for acceptance and Case writes. Native source calls serialize so capacity exhaustion prevents every later query. Prior bounded results remain durable, with an explicit failure summary; both checkpoint persistence and finalization enforce the same budget.

The dependency is released Core v0.57.1, which retains applied historical revisions alongside edited current heads in session snapshots.

Validation: complete api4datatug, facade4datatug and models4datatug suites, focused go vet and tidy verification pass against Cor... (continued)

Coverage Stats

901 of 1106 new or added lines in 8 files covered. (81.46%)

4 existing lines in 1 file now uncovered.

12605 of 15114 relevant lines covered (83.4%)

0.84 hits per line