homelab-codex-ws/scripts/ha/lib/ha_write_api.py
oskar 4658089e21 fix(kb): przepiecie wszystkich odwolan wewnetrznych po migracji
126 plikow (md, yaml, sh, py) odwolywalo sie do sciezek sprzed migracji.

  15  markdown-linkow [..](..) -> policzona sciezka WZGLEDNA wobec pliku
      odsylajacego (wczesniej czesc z nich byla repo-root-relative i nie
      rozwiazywala sie z katalogu, w ktorym lezala)
 200  odwolan tekstowych (backticki, proza, yaml, importy w kodzie)
      -> nowa sciezka repo-root-relative, zgodnie z konwencja repo
   5  linkow rodzenstwa (gole nazwy plikow, np. "](DEPLOY.md)") — dzialaly
      tylko w starym katalogu; przeliczone recznie

Objete m.in.: CLAUDE.md (scripts/onboard/README.md -> kb/runbooks/
node-onboarding-tool.md, docs/backlog.md -> kb/phases/backlog.md),
README.md, .claude/skills/, 20 session logow, kod jobow.

Ostatnie 5 odwolan pochodzi z tresci wciagnietej rebasem z origin/master
(session log 2026-07-31, override node-agenta na SOLARII, dwie pozycje
backlogu) — wskazywaly na docs/incidents/, docs/kb/modules/ i
services/narty27/README.md sprzed migracji.

Dodany wzajemny link miedzy kb/services/control-plane.md (stub kodu)
a kb/subsystems/control-plane.md (opis, deprecated) — dwa dokumenty o tym
samym systemie, latwe do pomylenia.

Weryfikacja na 790 plikach: 0 odwolan do starych sciezek,
0 martwych linkow markdown. Lint OKF: 190/190 plikow ZGODNE.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-08-04 16:58:46 +02:00

60 lines
2.3 KiB
Python
Executable file

#!/usr/bin/env python3
"""Write-capable REST client for the HA "api" adapter's deploy path (see
kb/decisions/ha-configs-as-code.md, "Sync model", "Validation gate").
Deliberately kept out of ha_api.py, whose module docstring guarantees that
module is read-only by construction — the import path relies on that
guarantee staying true. This module is the only place under scripts/ha/
that ever issues a mutating call to a live HA instance, and it exposes only
the two operations DESIGN.md's deploy sequence requires:
- check_config() -> POST /api/config/core/check_config (validation gate)
- post_config(...) -> POST /api/config/<domain>/config/<id> (per-object write)
Same token discipline as ha_api.py: callers pass a token_path (via
ha_api.read_token), never a raw token in argv or a log line; the
Authorization header is set in-process via `requests`.
"""
import os
import sys
sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
import requests # noqa: E402
import ha_api # noqa: E402
class WriteClient(ha_api.Client):
"""Extends the read-only Client with the two mutating calls deploy.sh needs."""
def post_config(self, domain, object_id, body):
"""POST `body` (a dict) to /api/config/<domain>/config/<object_id>.
Returns the parsed JSON response. Raises requests.HTTPError on a
non-2xx status — deploy_api.py treats a failed write as a
per-object error, never a silent skip.
"""
path = f"/api/config/{domain}/config/{object_id}"
resp = requests.post(
self._base_url + path, headers=self._headers(), json=body, timeout=self._timeout
)
resp.raise_for_status()
return resp.json()
def check_config(self):
"""POST /api/config/core/check_config — HA's built-in config validator.
Returns (valid: bool, raw: dict). Only raises on a transport/HTTP
failure; an "invalid" result is a normal outcome the caller gates
on, not an exception.
"""
resp = requests.post(
self._base_url + "/api/config/core/check_config",
headers=self._headers(),
timeout=self._timeout,
)
resp.raise_for_status()
data = resp.json()
return data.get("result") == "valid", data