feat: wire Naruon projection into Workspace Calendar (v2.17.0)

[seonghobae]

Outcome

Wires the published Naruon calendar projection contract into the Buyer Calendar (ADR 0203 activation gate step 2 / issue #336). GET /api/calendar and the 달력 destination now consume NARUON_CALENDAR_BASE_URL / NARUON_CALENDAR_SERVICE_TOKEN beside post-grounded commitments.

Observed Naruon occurrences stay evidence-only. A commitment still opens that post on the board. Missing or malformed audience, transport failure, or contract rejection fail-closes with events: [] and the ADR 0183 copy 이 범위의 일정을 아직 받을 수 없습니다. Commitments remain available.

Integrity boundary

• End-user bearer tokens are never forwarded to Naruon.
• CALDAV_BASE_URL is not a fallback.
• Observed events carry no post_id or issue_ticket_id and are never promoted into tickets.
• No theta, fused score, or invented occurrence is introduced.
• Independent of open stacks feat: persist and explain Event Lineage channel evidence #387 / feat: name Event Lineage isolation reasons (v2.16.0) #493 / feat: persist leftover interaction-map coordinates (v2.12.19) #579 / feat(lineage): require TEPP criterion anchor for channel weights #606.

Verification

• uv run --extra dev pytest -q tests/test_naruon_calendar_workspace.py backend/tests/test_config.py — 19 passed
• pnpm exec vitest run src/components/WorkspaceCalendar.test.tsx src/i18n.test.ts — 66 passed
• pnpm exec vitest run src/App.test.tsx -t "calendar|달력|commitment|RankWeave unavailability" — 7 passed

Not claimed

Activation gates 3–5 remain open: Naruon producer endpoint, provider/consumer fixtures against a released Naruon artifact, degraded/retry/revision tests, and protected merge. Do not close #336 until those land. Independent exact-head APPROVE is required; do not self-approve.

---

[coderabbitai]

Warning

Review limit reached

Next included review available in 19 minutes.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 07fdb0a5-c019-44e6-af22-9a006c652175

📥 Commits

Reviewing files that changed from the base of the PR and between 4f53190 and e1015bb.

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

📒 Files selected for processing (25)

• .env.example
• CHANGELOG.d/2.17.0-naruon-calendar-buyer-wiring.md
• CHANGELOG.md
• backend/app/config.py
• backend/app/main.py
• backend/tests/test_api.py
• backend/tests/test_config.py
• docker-compose.yml
• docs/adr/0183-gnb-four-korean-chrome.md
• docs/adr/0203-naruon-calendar-projection-boundary.md
• docs/product-technical-gap-baseline.md
• docs/storybook-inventory.md
• frontend/package.json
• frontend/src/App.test.tsx
• frontend/src/App.tsx
• frontend/src/api.ts
• frontend/src/components/WorkspaceCalendar.stories.tsx
• frontend/src/components/WorkspaceCalendar.test.tsx
• frontend/src/components/WorkspaceCalendar.tsx
• frontend/src/i18n.test.ts
• frontend/src/i18n.ts
• lineageweave/__init__.py
• lineageweave/naruon_calendar_workspace.py
• pyproject.toml
• tests/test_naruon_calendar_workspace.py

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Opened from main@4f53190. Independent of #387 / #493 / #579 / #606. Do not squash-merge without an independent exact-head APPROVE on e1015bb9cd0b32ac5d04d0d17367002dffd21ee6. Do not self-approve. Do not close #336 until Naruon producer gates land.

[devin-ai-integration]

Devin Review found 3 potential issues.

[seonghobae]

Resolved all current review findings in 37a27b0: the existing PopupCloseButton Storybook inventory row is restored; request windows are validated as exact bounded RFC 3339 input and return 422 before transport; the blocking Naruon client runs through asyncio.to_thread; and new product/object language uses Workspace Calendar rather than Buyer. The stale OIDC login regression was also composed. Verification: 55 Naruon contract tests, 62 Naruon/docstring/hygiene tests, five calendar UI tests, the OIDC redirect regression, lint, and production build pass.