dispatch: seed the routing smoke's mail legs into Stalwart; make wake intake work #35

Merged

founder merged 1 commit from claude/routing-smoke-seed-stalwart into main 2026-08-16 06:18:24 +00:00

Conversation 0 Commits 1 Files changed 4 +23 -6

founder commented 2026-08-16 06:17:39 +00:00

Owner

Copy link

Picks up key-store/dispatch#2 (ba409a1b) and wires the forge side.

Why: the identity-routing smoke's four mail legs (mail-trusted-billing-cfo, mail-trusted-billing-assistant, mail-trusted-security, mail-review-billing) have never passed since dispatch c4a5029 made /webhook/forwardemail wake the Stalwart mirror + a targeted agent-dispatcher mail --once --message-id intake instead of enqueueing the payload — the synthetic message never existed in Stalwart, so every redmine-dispatcher-smoke run timed out with status=missing. On top of that, Stalwart 0.15 answers SEARCH HEADER Message-ID with an empty result, so the wake's targeted intake never found real mail either (mail only flowed through the 15-minute unseen sweep); dispatch#2 falls back to a client-side header match.

What:

• nixos/keystore-forge.nix: redmine-dispatcher-smoke gets KEYSTORE_ROUTING_SMOKE_MAIL_ACCOUNTS derived from forwardEmailMirrorMailboxes (agent=agent:…,billing=billing:/run/agenix/billingPassword,contact=manager:…,founder=founder:…,privacy=manager:…,security=security-agent:/run/agenix/securityAgentPassword) — the same alias → account mapping the key-store-forwardemail-wake@ unit uses, so the two cannot drift — plus KEYSTORE_ROUTING_SMOKE_IMAP_ADDR from the dispatcher's mail.imapAddr.
• nixos/hosts/keystore-forge/common.nix: pointer comment at the smoke invocation.
• flake.nix/flake.lock: dispatch_src → ba409a1b. go.mod unchanged, vendorHash unchanged.

Verified nix eval .#nixosConfigurations.keystore-forge.config.systemd.services.redmine-dispatcher-smoke.environment produces the mapping above; the seeding function was exercised against the forge Stalwart (993 IMAPS and 143 STARTTLS, idempotent re-run, probe message removed afterwards).

Deploy the forge, then systemctl start redmine-dispatcher-smoke should print ok for all four mail legs.

🤖 Generated with Claude Code

Picks up [key-store/dispatch#2](https://git.key.store/key-store/dispatch/pulls/2) (`ba409a1b`) and wires the forge side. **Why:** the identity-routing smoke's four mail legs (`mail-trusted-billing-cfo`, `mail-trusted-billing-assistant`, `mail-trusted-security`, `mail-review-billing`) have never passed since dispatch c4a5029 made `/webhook/forwardemail` wake the Stalwart mirror + a targeted `agent-dispatcher mail --once --message-id` intake instead of enqueueing the payload — the synthetic message never existed in Stalwart, so every `redmine-dispatcher-smoke` run timed out with `status=missing`. On top of that, Stalwart 0.15 answers `SEARCH HEADER Message-ID` with an empty result, so the wake's targeted intake never found *real* mail either (mail only flowed through the 15-minute unseen sweep); dispatch#2 falls back to a client-side header match. **What:** - `nixos/keystore-forge.nix`: `redmine-dispatcher-smoke` gets `KEYSTORE_ROUTING_SMOKE_MAIL_ACCOUNTS` derived from `forwardEmailMirrorMailboxes` (`agent=agent:…,billing=billing:/run/agenix/billingPassword,contact=manager:…,founder=founder:…,privacy=manager:…,security=security-agent:/run/agenix/securityAgentPassword`) — the same alias → account mapping the `key-store-forwardemail-wake@` unit uses, so the two cannot drift — plus `KEYSTORE_ROUTING_SMOKE_IMAP_ADDR` from the dispatcher's `mail.imapAddr`. - `nixos/hosts/keystore-forge/common.nix`: pointer comment at the smoke invocation. - `flake.nix`/`flake.lock`: `dispatch_src` → `ba409a1b`. `go.mod` unchanged, vendorHash unchanged. Verified `nix eval .#nixosConfigurations.keystore-forge.config.systemd.services.redmine-dispatcher-smoke.environment` produces the mapping above; the seeding function was exercised against the forge Stalwart (993 IMAPS and 143 STARTTLS, idempotent re-run, probe message removed afterwards). Deploy the forge, then `systemctl start redmine-dispatcher-smoke` should print `ok` for all four mail legs. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

founder added 1 commit 2026-08-16 06:17:39 +00:00

dispatch: seed the routing smoke's mail legs into Stalwart; make wake intake work ... 8e020f663c

key-store/dispatch#2 (ba409a1b): the identity-routing smoke's four mail legs
have never passed since the Forward Email webhook started waking the Stalwart
mirror instead of enqueueing (c4a5029) — the synthetic message never existed
in Stalwart, so the wake's targeted intake found nothing and every run timed
out with status=missing. On top of that, Stalwart answers SEARCH HEADER
Message-ID with an empty result, so the targeted intake never found real mail
either; it now falls back to matching the header client-side.

The smoke now APPENDs each synthetic message into the target account's INBOX
over IMAP before posting the webhook. Hand it the alias -> account:password
mapping derived from forwardEmailMirrorMailboxes (the same one the
key-store-forwardemail-wake@ unit uses) plus the dispatcher's IMAP address via
the redmine-dispatcher-smoke unit environment, and bump dispatch_src to
ba409a1b. go.mod is unchanged, so the vendorHash stays.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

founder requested reviews from assistant, ios, windows, android, cmo, forge, web, cdo, runner, release-runner, billing, manager, infra, agent, security-agent, linux, devex 2026-08-16 06:17:39 +00:00

founder force-pushed claude/routing-smoke-seed-stalwart from 8e020f663c to dc4c9e4772 2026-08-16 06:18:12 +00:00 Compare

founder merged commit dc4c9e4772 into main 2026-08-16 06:18:24 +00:00

infra referenced this pull request from a commit 2026-09-13 15:18:34 +00:00

KSE-0198: GoAlert on-call paging on HQ host (proposal, no cutover)

infra referenced this pull request 2026-09-13 15:18:51 +00:00

KSE-0198: GoAlert on-call paging on HQ host (proposal, no cutover) #270

infra referenced this pull request from a commit 2026-09-13 15:27:54 +00:00

KSE-0198: wire --goalert-secret-file, document runtime gap

devex referenced this pull request 2026-09-14 00:20:16 +00:00

KSE-0198: GoAlert on-call paging on HQ host (proposal, no cutover) #270

infra referenced this pull request from a commit 2026-09-14 00:23:42 +00:00

goalert: fix upstream binary path (sourceRoot) + dispatch#20 HMAC contract + hermetic tests

Sign in to join this conversation.

Reviewers

No reviewers

android

cdo

devex

cmo

windows

ios

linux

forge

security-agent

manager

web

agent

infra

assistant

runner

billing

release-runner

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

key-store/key.store!35

No description provided.