c18b9e5b87
All checks were successful
Build and deploy / Validate source (push) Successful in 1m45s
Build and deploy / Integration suite on a real stack (push) Successful in 4m48s
Build and deploy / Secret scan and release gate (push) Successful in 11s
Build and deploy / Publish images and notify Portainer (push) Has been skipped
Week 2 work that did not need client inputs. Print files (1.4): each paid item gets a PDF the width of the film and the length of the approved layout, with every copy at its reviewed position, rotation and mirror. Sources are embedded once at original resolution; JPEG bytes pass through and PNG alpha becomes a soft mask. Artwork the generator cannot reproduce goes to hand preparation with the reason. The worker renders outside any transaction, and the operator approves the generated file as the final one through the existing review. Delivery address (3.8): required for any non-pickup quote, bound to the quoted CEP, carried into the order snapshot, the Kanban card and Tiny. Kanban (1.5): print-file status per item, and a panel of payment events that need a person (money without an order, refunds after an order) until an operator records the resolution. Mercado Pago and Tiny (1.1, 1.3): adapters written from the public API documentation and tested against fake transports only. Selectable for sandbox testing with their credentials; the production preflight still blocks release. Adds payment intents and a PIX step on the Site. MinIO: Docker Hub and quay.io now refuse anonymous pulls, so local and CI storage use Chainguard's MinIO build, pinned by digest. Verified with the full CI integration sequence on a fresh local build, including the new print_file_test and both browser suites. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
91 lines
4.0 KiB
Python
91 lines
4.0 KiB
Python
"""Transactional outbox worker. Fake receipts persist; no messages leave the stack."""
|
|
import json
|
|
import logging
|
|
import os
|
|
import threading
|
|
import time
|
|
from http.server import BaseHTTPRequestHandler, HTTPServer
|
|
from psycopg.types.json import Jsonb
|
|
from .adapters import FakeTiny, FakeWhatsApp, LocalS3Storage, require_runtime
|
|
from .core.secrets import load as load_secret_files
|
|
from .core.db import connect
|
|
from .printjobs import render_loop
|
|
from .scanning import ClamAV, scan_loop
|
|
|
|
load_secret_files()
|
|
require_runtime()
|
|
adapters = {'tiny': FakeTiny(), 'whatsapp': FakeWhatsApp()}
|
|
# Not yet confirmed against the client's account; see app/tiny.py.
|
|
if os.environ.get('TINY_ADAPTER') == 'tiny':
|
|
from .tiny import TinyOrders
|
|
adapters['tiny'] = TinyOrders()
|
|
last_tick = 0.0
|
|
last_cleanup = 0.0
|
|
storage = LocalS3Storage()
|
|
scan_thread = None
|
|
render_thread = None
|
|
|
|
def cleanup():
|
|
"""Delete only expired object bytes; retain order/file metadata and history."""
|
|
with connect() as c:
|
|
rows = c.execute("""SELECT * FROM dtf_local.uploads WHERE purged_at IS NULL
|
|
AND (expires_at<=now() OR (NOT complete AND created_at<now()-interval '1 day'))
|
|
ORDER BY created_at FOR UPDATE SKIP LOCKED LIMIT 50""").fetchall()
|
|
for row in rows:
|
|
storage.discard(row['object_key'],row['multipart_id'],row['complete'])
|
|
c.execute('UPDATE dtf_local.uploads SET purged_at=now() WHERE id=%s', (row['id'],))
|
|
c.execute('DELETE FROM dtf_local.sessions WHERE expires_at<=now()')
|
|
c.execute('DELETE FROM dtf_local.operator_sessions WHERE expires_at<=now()')
|
|
c.execute("DELETE FROM dtf_local.login_attempts WHERE started_at<now()-interval '1 day'")
|
|
c.execute("DELETE FROM dtf_local.security_events WHERE created_at<now()-interval '30 days'")
|
|
|
|
def tick():
|
|
global last_tick
|
|
with connect() as c:
|
|
job = c.execute('SELECT * FROM dtf_local.outbox WHERE delivered_at IS NULL AND available_at <= now() ORDER BY id FOR UPDATE SKIP LOCKED LIMIT 1').fetchone()
|
|
if job:
|
|
try:
|
|
receipt = adapters[job['provider']].deliver(job['event_key'], job['payload'])
|
|
c.execute('UPDATE dtf_local.outbox SET delivered_at=now(), receipt=%s, attempts=attempts+1, last_error=NULL WHERE id=%s', (Jsonb(receipt),job['id']))
|
|
except Exception as exc:
|
|
delay = min(1800, 2**min(job['attempts']+1, 10))
|
|
c.execute("UPDATE dtf_local.outbox SET attempts=attempts+1, last_error=%s, available_at=now() + %s * interval '1 second' WHERE id=%s", (str(exc),delay,job['id']))
|
|
last_tick = time.monotonic()
|
|
|
|
def loop():
|
|
global last_cleanup
|
|
while True:
|
|
try:
|
|
tick()
|
|
if time.monotonic()-last_cleanup > 60:
|
|
cleanup()
|
|
last_cleanup = time.monotonic()
|
|
except Exception:
|
|
logging.exception('Local worker tick failed')
|
|
time.sleep(1)
|
|
|
|
class Health(BaseHTTPRequestHandler):
|
|
def do_GET(self):
|
|
scanner = False
|
|
try:
|
|
scanner = bool(scan_thread and scan_thread.is_alive() and ClamAV().ping())
|
|
except Exception:
|
|
pass
|
|
renderer = bool(render_thread and render_thread.is_alive())
|
|
healthy = time.monotonic()-last_tick < 15 and scanner and renderer
|
|
self.send_response(200 if self.path == '/health' and healthy else 503)
|
|
self.end_headers()
|
|
self.wfile.write(json.dumps({'worker': 'ok' if healthy else 'unavailable',
|
|
'scanner': 'ok' if scanner else 'unavailable',
|
|
'print_files': 'ok' if renderer else 'unavailable'}).encode())
|
|
def log_message(self, *args):
|
|
pass
|
|
|
|
if __name__ == '__main__':
|
|
scan_thread = threading.Thread(target=scan_loop,args=(storage,),daemon=True)
|
|
scan_thread.start()
|
|
render_thread = threading.Thread(target=render_loop,args=(storage,),daemon=True)
|
|
render_thread.start()
|
|
threading.Thread(target=loop, daemon=True).start()
|
|
HTTPServer(('0.0.0.0',8002),Health).serve_forever()
|