viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

broker-sync: update imap-cron comment to reflect default-skip IE (post-incident)

Browse source
This commit is contained in:
Viktor Barzin 2026-05-27 17:25:42 +00:00
parent 501f2c6b37
commit 06fb1f9ea9
1 changed files with 14 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

23
stacks/broker-sync/main.tf
View file

@ -427,15 +427,20 @@ resource "kubernetes_cron_job_v1" "imap" {
name = "BROKER_SYNC_DATA_DIR" name = "BROKER_SYNC_DATA_DIR"
value = "/data" value = "/data"
} }
# IE email parsing IS enabled (2026-05-27). The bearer-token CLI # 2026-05-27 (afternoon, post-incident): IE-via-IMAP is now
# path (`broker-sync invest-engine`) is not wired as a CronJob # STRUCTURALLY OPT-IN at the code level — broker_sync.providers.imap
# — token expires ~monthly, MFA blocks scripted refresh, and # default-excludes `invest-engine`. The earlier "standardise on IMAP
# the `/api/v0.3X/` version probe drifts every 4-6 weeks. Email # for IE" comment was inverted after a sibling Claude session ran
# confirmations land on every fill anyway, so we standardise on # broker-sync imap-ingest at 09:22 UTC without the EXCLUDE env and
# IMAP as the single canonical path for IE (parity with Schwab). # re-imported the 39 IE BUYs/DEPOSITs the previous day's dedup had
# If the bearer CLI is ever run manually, dedup is at WF level # removed. To re-enable IE-via-IMAP, add:
# (external_id) so a re-run is safe; just expect the IMAP store # env {
# not to know about those rows. # name = "BROKER_SYNC_IMAP_INCLUDE_PROVIDERS"
# value = "invest-engine"
# }
# Until that env is set, only Schwab is parsed (the canonical use
# of the IMAP path — Schwab has no public API).
# See post-mortem in beads code-dc1b.
env { env {
name = "WF_SESSION_PATH" name = "WF_SESSION_PATH"
value = "/data/wealthfolio_session.json" value = "/data/wealthfolio_session.json"