mirror of
https://github.com/Sea-Haven-Industries/procurement-ingest.git
synced 2026-10-07 16:08:54 +00:00
Adam Moussa
042a03b3a4
Bring the two post-fork main merges into the feature branch: #97 (PO revision/cancellation conditional-write logic, web-UI auth/XSS, KMS-grant removal, Secrets Manager hardening) and #98 (fail-closed SES sender authentication). Conflicts resolved by union so all prior work survives: - wo/po email_processor handlers: authenticate first (#98), then parse; WO keeps template-first parse + Bedrock fallback + EMF metric + issue #23 comment_id fix; PO keeps #97 conditional writes on top of the Bedrock provider switch. The retired Anthropic Secrets Manager client is dropped (Bedrock migration) rather than hardened. - cdk stacks: union of #97 web-ui secret handling + KMS-grant removal, #98 ALLOWED_DKIM_DOMAINS env + sender-auth-rejected alarm, and the branch's Bedrock dual-ARN grant, anthropic-secret removal, and template-fallback alarm. Restore the aws_secretsmanager import that the auto-merge silently dropped from both stacks. - README, conftest, requirements, .gitignore: union of all suites/docs. - test_bedrock_fallback: bypass the new INFRA-107 auth gate in the two dispatch tests (auth is covered by test_ses_auth). Refs: #99 |
||
|---|---|---|
| .. | ||
| tests | ||
| __init__.py | ||
| handler.py | ||
| requirements.txt | ||
| ses_auth.py | ||
| template_parser.py | ||