Sam Rolfe
09639c5125
The morning briefs go out through the house Apprise API on `.35:8210`: one brief per boy and one combined brief to Jo and Sam (FR-9, FR-14). The service names an Apprise tag (`harry_email`, `joanna_whatsapp`, ...) and never holds an address, a phone number or an SMTP password (AGENTS.md §10 rule 3). - internal/apprise: keyed and stateless client, tag filtering, and error redaction so nothing sensitive reaches a log, a row or a screen. - internal/brief: builds the per-boy and the combined brief, delivers on email and WhatsApp, records every attempt in `notifications` (migration 004 adds scope, channel, tag, ok and error) and fails loudly. - Send panel (§5 screen 4): recipients, channels, an exact preview, Send now, plus the Send action on a stored draft (FR-10). The dashboard shows a Morning briefs banner and the Sends list. - POST /notify/morning: the bearer-token endpoint the 6:00am n8n schedule calls. 207 when a channel or a scan failed; `dry_run=1` checks the wiring without messaging the family. - scripts/morning-brief.sh: scan both children, then send. It is the n8n job; deploy/n8n-morning-brief.json is the ready-to-import workflow (06:00 daily). - FR-12: a failed scan is never "nothing due" -- the brief says so, and the run exits non-zero. A failed delivery is recorded with no sent_at. - The long no-due-date tail is capped in the sent brief so it stays brief (§10 rule 6); overdue work is never capped. Verified live: 8 deliveries recorded (4 email, 4 WhatsApp) with HTTP 200 and sent_at, and the endpoint answers 401/200/207 as documented. Evidence in docs/phase-7-notify-notes.md. Co-Authored-By: Paperclip <noreply@paperclip.ing>
62 lines
2.4 KiB
Bash
Executable File
62 lines
2.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Phase 6: write important school events to Sam's Home Assistant calendar and
|
|
# read the calendar back (AGENTS.md §4 FR-8, §11 Phase 6).
|
|
#
|
|
# The school stays read-only. The only write is to the calendar. The Home
|
|
# Assistant token comes from the environment or from the service env file and is
|
|
# never printed.
|
|
#
|
|
# Usage:
|
|
# scripts/calendar-push.sh entities
|
|
# scripts/calendar-push.sh status
|
|
# scripts/calendar-push.sh push [--child Harry] [--dry-run]
|
|
# scripts/calendar-push.sh events [--days 14]
|
|
#
|
|
# Environment overrides:
|
|
# IMAGE image tag (default 0.5.0-phase7)
|
|
# VOLUME SQLite volume (default compass-teams-nhs_compass-teams-nhs-data)
|
|
# ENV_FILE HA config source (default environment.d/school-service.env)
|
|
# SCHOOL_TIMEZONE family timezone (default Australia/Sydney)
|
|
# SCHOOL_HA_URL Home Assistant base URL (no default; required)
|
|
# SCHOOL_HA_TOKEN long-lived access token (no default; required)
|
|
# SCHOOL_HA_CALENDAR_ENTITY calendar entity id (no default; required)
|
|
# TIMEOUT docker command timeout (default 300)
|
|
set -euo pipefail
|
|
|
|
REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
|
|
IMAGE="${IMAGE:-compass-teams-nhs/school:0.5.0-phase7}"
|
|
VOLUME="${VOLUME:-compass-teams-nhs_compass-teams-nhs-data}"
|
|
ENV_FILE="${ENV_FILE:-$REPO_ROOT/environment.d/school-service.env}"
|
|
SCHOOL_TIMEZONE="${SCHOOL_TIMEZONE:-Australia/Sydney}"
|
|
TIMEOUT="${TIMEOUT:-300}"
|
|
|
|
# The real service env file is gitignored. Take only the calendar variables from
|
|
# it, so the service's bcrypt hash (which contains "$$") is never re-expanded.
|
|
if [[ -f "$ENV_FILE" ]]; then
|
|
while IFS= read -r line; do
|
|
case "$line" in
|
|
SCHOOL_HA_URL=*|SCHOOL_HA_TOKEN=*|SCHOOL_HA_CALENDAR_ENTITY=*|SCHOOL_HA_INSECURE=*|SCHOOL_HA_TIMEOUT=*)
|
|
key="${line%%=*}"
|
|
val="${line#*=}"
|
|
if [[ -z "${!key:-}" ]]; then
|
|
export "$key=$val"
|
|
fi
|
|
;;
|
|
esac
|
|
done < "$ENV_FILE"
|
|
fi
|
|
|
|
if [[ $# -eq 0 ]]; then
|
|
echo "usage: scripts/calendar-push.sh entities|status|push|events [options]" >&2
|
|
exit 2
|
|
fi
|
|
|
|
exec timeout "$TIMEOUT" docker run --rm --network host \
|
|
-v "$VOLUME:/data" \
|
|
-e SCHOOL_DB_PATH=/data/school.db \
|
|
-e SCHOOL_TIMEZONE="$SCHOOL_TIMEZONE" \
|
|
-e SCHOOL_HA_URL -e SCHOOL_HA_TOKEN -e SCHOOL_HA_CALENDAR_ENTITY \
|
|
-e SCHOOL_HA_INSECURE -e SCHOOL_HA_TIMEOUT \
|
|
"$IMAGE" calendar "$@"
|