Tracking issue for the U7 Zitadel-on-DEV work (roundup plan U7/KTD9, executed and verified live on DEV 2026-08-09/10).
Scope:
- Parameterize the Zitadel dev scaffolding —
compose.yaml and scripts/setup-zitadel.sh hardcode localhost and throwaway secrets (masterkey, admin password, 2030 PAT expiries, secret echo to stdout). Every deployment-varying value becomes env-overridable with local-dev-preserving defaults; secret output masked by default with --show-secrets opt-in.
- Fix suggester submit 500 —
MissingGreenlet in SuggestionService._create_pr_for_session: an authenticated non-editor takes the 403-fallback _create_pr_directly, which returns an ORM PullRequest whose attributes expire after later commits; the notification block's attribute access then does sync IO in async context. Only the authenticated-suggester tier hits this (editor path returns pydantic, anonymous uses a different route) — invisible until DEV ran auth-enabled.
Found and verified during the U7 terminal persona sweep; the fix carries a red→green regression test.
PR: alea-institute/ontokit-api (branch feat/u7-zitadel-standup, base feat/pr-party).
🤖 Generated with Claude Code
Tracking issue for the U7 Zitadel-on-DEV work (roundup plan U7/KTD9, executed and verified live on DEV 2026-08-09/10).
Scope:
compose.yamlandscripts/setup-zitadel.shhardcode localhost and throwaway secrets (masterkey, admin password, 2030 PAT expiries, secret echo to stdout). Every deployment-varying value becomes env-overridable with local-dev-preserving defaults; secret output masked by default with--show-secretsopt-in.MissingGreenletinSuggestionService._create_pr_for_session: an authenticated non-editor takes the 403-fallback_create_pr_directly, which returns an ORMPullRequestwhose attributes expire after later commits; the notification block's attribute access then does sync IO in async context. Only the authenticated-suggester tier hits this (editor path returns pydantic, anonymous uses a different route) — invisible until DEV ran auth-enabled.Found and verified during the U7 terminal persona sweep; the fix carries a red→green regression test.
PR: alea-institute/ontokit-api (branch
feat/u7-zitadel-standup, basefeat/pr-party).🤖 Generated with Claude Code