Merge main into issue-97-report-the-artifact-a-native-start-ran-runtime

Conflicts: go.mod/go.sum take main's newer core pin (a3bf508a), which carries
the runtime-started-artifact contract; runtime.go keeps started() beside main's
reworded serve-timeout comment. AGENTS.md is at its 200-line cap on main, so
the started-artifact rule rides its table row and the CLAUDE.md bullet is one
line.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Author: antoinetoussaint-byte

.github/workflows/ci.yml

@@ -12,7 +12,7 @@ concurrency:
 
 jobs:
   ci:
-    uses: codefly-dev/core/.github/workflows/go-service-ci.yml@v0.19.4
+    uses: codefly-dev/core/.github/workflows/go-service-ci.yml@v0.19.6
     with:
       # The Python runtime tests drive `uv` on the host (dependency sync,
       # pytest); it isn't on the runner by default.

AGENTS.md

@@ -3,8 +3,8 @@
 This repo is one codefly agent binary: the **FastAPI specialization** of the
 generic Python agent. It composes `github.com/codefly-dev/service-python`'s
 `pkg/*` types and adds what FastAPI needs — uvicorn supervision and hot reload,
-OpenAPI-derived REST endpoints, an opt-in `grpc.aio` listener, the Dockerfile
-and kustomize recipes, and the scaffold a new FastAPI service is created from.
+OpenAPI-derived REST endpoints, an opt-in `grpc.aio` listener and Connect face,
+the Dockerfile and kustomize recipes, and the scaffold a new FastAPI service is created from.
 Dependency management is `uv`; poetry is not supported.
 
 It does **not** own:
@@ -67,9 +67,9 @@ within reach.
 ## Build and test
 
 Derived from `.github/workflows/ci.yml`, which delegates to core's shared
-`go-service-ci.yml`, pinned to the linked core's tag (`@v0.19.4`; move it with
+`go-service-ci.yml`, pinned to the linked core's tag (`@v0.19.6`; move it with
 the core bump), and adds a `race` job of its own. Go comes from `go.mod`
-(1.27.2). All of it runs locally:
+(1.27.3). All of it runs locally:
 
 ```bash
 go build ./...          # CI: build job
@@ -126,7 +126,8 @@ anything from it.
 | `runtime.go` | Init/Start/Stop/Destroy, uvicorn supervision, hot reload, the lock order |
 | `builder.go` | `Create` scaffolding, OpenAPI endpoint loading, Docker + kustomize recipes |
 | `uvsources.go` | the assembled build context: `[tool.uv.sources]` paths leaving the project |
-| `startedartifact.go` | what a native start reports it ran (`runtime-started-artifact/v1`) |
+| `uvgitsources.go` | the git commits `uv.lock` pins, declared for the caller to mirror into the build |
+| `startedartifact.go` | what a native start ran, reported before *every* `StartResponse` (`runtime-started-artifact/v1`) |
 | `probes.go`, `probe.py` | endpoint health translated to Kubernetes probes / a local probe |
 | `templates/` | **what ships** — embedded via `go:embed`, rendered on `Create` |
 | `base/` | a checked-in sample service, embedded nowhere |
@@ -147,9 +148,6 @@ into `templates/factory/code/pyproject.toml.tmpl` yourself.
   any dependent service. The swagger file does not exist at `Create` time — the
   service generates it at runtime from its own `src/openapi.py` — so absent is
   a normal state there, not an error to code around.
-- **A native start says what it ran**, before *every* `StartResponse` — core
-  consumes the report, so the restart that keeps a process names it again, and a
-  failed start names nothing. `startedartifact.go` owns the closure and why.
 - **Readiness is the endpoint's declared health check, never an open port.**
   Probe intents (readiness / startup / liveness) stay separate through
   `resources.PlanEndpointProbes`; collapsing them silently drops a predicate.
@@ -162,6 +160,13 @@ into `templates/factory/code/pyproject.toml.tmpl` yourself.
   same relative path resolves there; that plan claims the whole tree
   (`RECIPE_INVENTORY_SCOPE_TREE`), the Dockerfile-only one claims just what it
   emitted. Never rewrite `pyproject.toml` or `uv.lock` to make a path resolve.
+  A git source is declared in the recipe (`git_source_downloads`) by the URL
+  exactly as `uv.lock` records it up to its query, which is what uv hands git;
+  the caller fetches it with its own credentials and the Dockerfile maps that
+  URL onto the mirror; a normalized URL would miss it silently. A source core
+  refuses, or whose URL begins an undeclared locked one (insteadOf is a
+  prefix match), is not declared; a warning says why. An image whose own git
+  config already rewrites a declared URL keeps that rewrite (git prefers it).
 - **The runtime image is pinned.** `docker-image` rejects a bare name and
   `:latest`. The default `ghcr.io/codefly-dev/python` companion is built from
   core and pinned by the digest of its multi-platform index — prefer it. Its tag
@@ -191,6 +196,5 @@ carried here:
   `AGENTS.md` beside what it describes, or into `.claude/skills/`. The cap and
   each skill's frontmatter are asserted in `conformance_test.go`, so `go test
   ./...` enforces them with no workflow change.
-- There is no `CLAUDE.md`. If one is added, it is a one-line `@AGENTS.md`
-  pointer — one canonical source, never a second copy to drift.
+- There is no `CLAUDE.md`; if one is added, it is a one-line `@AGENTS.md` pointer.
 - Treat this file as code: the PR that changes a process updates it.

agent.codefly.yaml

@@ -1,7 +1,7 @@
 publisher: codefly.dev
 kind: codefly:service
 name: python-fastapi
-version: 0.0.118
+version: 0.0.123
 release:
   owner: workflow
   workflow: releaser.yml

build_recipe_test.go

@@ -196,5 +196,7 @@ func TestBuildShipsSiblingPackages(t *testing.T) {
 		"COPY --chown=appuser code/src code/src",
 		"COPY --chown=appuser code/adapters code/adapters",
 		"COPY --chown=appuser code/model_service code/model_service",
+		// uvicorn's logging configuration and filter, written by the builder (uvicorn_logging.go).
+		"COPY --chown=appuser code/uvicorn-log-config.json code/codefly_uvicorn_logging.py ./",
 	}, copies)
 }