mirror of
https://github.com/ruvnet/RuView
synced 2026-06-19 11:53:19 +00:00
rUv
df617145d6
* feat(ADR-262 P3): live RuField surface — RuView sensing speaks RuField on /api/field + /ws/field Wire the P1 `wifi-densepose-rufield` bridge into the live `wifi-densepose-sensing-server` so the governed sensing cycle emits real signed RuField `FieldEvent`s on two additive endpoints. - Cargo: add the `wifi-densepose-rufield` path dep (the single coupling point, ADR-262 §5.4 — no new RuView-internal coupling). - New `src/rufield_surface.rs` (kept out of the 8k-line main.rs): `FieldSurface` holds a dedicated ed25519 `Signer` + a bounded ring of recent events + the `/ws/field` broadcast topic; `GET /api/field` and `GET /ws/field` handlers; a standalone `router()` for isolated testing. - Signer (defers the P2 key decision, ADR-262 §8 Q1): a STANDALONE dev/sensing key from `WDP_RUFIELD_SIGNING_SEED`, else a deterministic dev default with a logged WARN. Reusing the `cog-ha-matter` Ed25519 key is the deferred P2 call — P3 does not pre-empt it. - Tap: at the ESP32 governed-trust cycle (`main.rs` ~5886 observe_cycle / ~5938 SensingUpdate build), `emit_rufield_event` joins the cycle's features/classification/signal_field with the engine's effective_class/demoted trust state into a `SensingSnapshot` and surfaces it via the bridge. Existing endpoints (`/ws/sensing` etc.) are unchanged — purely additive. - Privacy egress: `network_egress_allowed` is fail-closed for an unattended live surface — only P1/P2 leave the box; P0 raw and P3/P4/P5 (identity/biometric/aggregate) are held edge-local. A `Derived` cycle maps to P4/P5 and never surfaces. - No-phantom: `emit` drops no-presence cycles (no fabricated events). Gates (tests/rufield_surface_test.rs, tower::oneshot, 4/0): well-formed signed event (WifiCsi, P2 not P1, is_fusable, real timestamp); empty cycle → no phantom; Derived trust never surfaces; mixed stream surfaces only egress-safe events. Honesty (ADR-262 §0/§6): real plumbing on a live endpoint, NOT accuracy. Single-link CSI with its existing caveats (no validated room-coordinate accuracy); dedicated dev signing key pending the P2 ownership decision; no accuracy claim. Co-Authored-By: claude-flow <ruv@ruv.net> * docs(ADR-262 P3): mark P1+P3 implemented; document /api/field + /ws/field; CHANGELOG - ADR-262 Status → "P1 + P3 implemented"; add a P3 implementation-status block (tap site, endpoints, dedicated dev signer deferring the §8 Q1 key decision, fail-closed egress, gates). Keep the honesty framing: real plumbing on a live endpoint, not accuracy. - CHANGELOG [Unreleased]: add the ADR-262 P3 entry. - user-guide: add `/api/field` to the REST table + a "RuField surface (ADR-262 P3)" section covering `/api/field` + `/ws/field`, the fail-closed P1/P2-only egress, the WDP_RUFIELD_SIGNING_SEED dev key, and the no-accuracy honesty note. Co-Authored-By: claude-flow <ruv@ruv.net> * ci: checkout submodules everywhere + Dockerfile copies vendor/rufield Making wifi-densepose-rufield (ADR-262 bridge) a v2 workspace member means EVERY cargo-on-workspace context must have the vendor/rufield submodule present (cargo loads all member manifests). P1 only fixed the rust-tests job; this adds `submodules: recursive` to all workflow checkouts that run cargo (mqtt-integration was failing on the missing submodule manifest), and makes Dockerfile.rust COPY vendor/rufield/ to /vendor/rufield (matches the bridge's ../../../vendor/rufield path-dep under the collapsed Docker layout). update-submodules.yml left alone (it manages submodules itself). Co-Authored-By: claude-flow <ruv@ruv.net> --------- Co-authored-by: ruv <ruvnet@gmail.com>
102 lines
3.1 KiB
YAML
102 lines
3.1 KiB
YAML
name: BFLD MQTT Integration
|
|
|
|
# Runs the env-gated mosquitto integration tests from iters 24 + 29 of the
|
|
# BFLD rollout (ADR-118 / ADR-122 §2.2). Spins up an eclipse-mosquitto:2
|
|
# service container, exports BFLD_MQTT_BROKER, runs `cargo test --features
|
|
# mqtt`. Local developers can reproduce with:
|
|
#
|
|
# scoop install mosquitto # Windows
|
|
# # or: docker run -p 1883:1883 eclipse-mosquitto:2
|
|
# BFLD_MQTT_BROKER=tcp://localhost:1883 \
|
|
# cargo test -p wifi-densepose-bfld --features mqtt
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
- 'feat/adr-118-*'
|
|
- 'feat/bfld-*'
|
|
paths:
|
|
- 'v2/crates/wifi-densepose-bfld/**'
|
|
- '.github/workflows/bfld-mqtt-integration.yml'
|
|
pull_request:
|
|
paths:
|
|
- 'v2/crates/wifi-densepose-bfld/**'
|
|
- '.github/workflows/bfld-mqtt-integration.yml'
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
mqtt-live-broker:
|
|
name: cargo test --features mqtt (live mosquitto)
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 15
|
|
|
|
services:
|
|
mosquitto:
|
|
image: eclipse-mosquitto:2
|
|
ports:
|
|
- 1883:1883
|
|
# Allow anonymous connections — local-only CI broker, no exposure
|
|
# to the public internet, never touches production credentials.
|
|
options: >-
|
|
--health-cmd "mosquitto_pub -h localhost -t healthcheck -m ping || exit 1"
|
|
--health-interval 5s
|
|
--health-timeout 3s
|
|
--health-retries 10
|
|
|
|
env:
|
|
BFLD_MQTT_BROKER: tcp://localhost:1883
|
|
CARGO_TERM_COLOR: always
|
|
CARGO_INCREMENTAL: 0
|
|
RUSTFLAGS: -D warnings
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
submodules: recursive
|
|
|
|
- name: Install Rust toolchain
|
|
uses: dtolnay/rust-toolchain@stable
|
|
with:
|
|
components: clippy
|
|
|
|
- name: Cache cargo registry + target
|
|
uses: actions/cache@v4
|
|
with:
|
|
path: |
|
|
~/.cargo/registry
|
|
~/.cargo/git
|
|
v2/target
|
|
key: bfld-mqtt-${{ runner.os }}-${{ hashFiles('v2/Cargo.lock') }}
|
|
|
|
- name: Wait for mosquitto to be ready
|
|
run: |
|
|
for i in {1..20}; do
|
|
if nc -z localhost 1883; then
|
|
echo "mosquitto reachable on port 1883 (attempt $i)"
|
|
exit 0
|
|
fi
|
|
echo "waiting for mosquitto ($i/20)..."
|
|
sleep 1
|
|
done
|
|
echo "mosquitto never became reachable" >&2
|
|
exit 1
|
|
|
|
- name: cargo test --no-default-features (baseline regression)
|
|
working-directory: v2
|
|
run: cargo test -p wifi-densepose-bfld --no-default-features
|
|
|
|
- name: cargo test (default features)
|
|
working-directory: v2
|
|
run: cargo test -p wifi-densepose-bfld
|
|
|
|
- name: cargo test --features mqtt (incl. live mosquitto roundtrip)
|
|
working-directory: v2
|
|
run: cargo test -p wifi-densepose-bfld --features mqtt
|
|
|
|
- name: cargo clippy --features mqtt (lint gate)
|
|
working-directory: v2
|
|
run: cargo clippy -p wifi-densepose-bfld --features mqtt --all-targets -- -D warnings
|
|
continue-on-error: true
|