feat(scheduling): Registry Scheduling MVP

.github/scripts/ci_changes.py

@@ -24,6 +24,7 @@
         "registry-platform-audit",
         "registry-platform-authcommon",
         "registry-platform-buildinfo",
+        "registry-platform-calendar",
         "registry-platform-canonical-json",
         "registry-platform-config",
         "registry-platform-crypto",
@@ -66,6 +67,12 @@
         "registry-casework-client-node",
         "registry-casework-client-py",
     ),
+    "scheduling": (
+        "registry-scheduling-core",
+        "registry-scheduling",
+        "registry-schedulingctl",
+        "registry-scheduling-client",
+    ),
     "stack-client": ("registry-record", "registry-stack-client"),
     "evidence": (
         "registry-evidence",
@@ -94,6 +101,7 @@
 RELAY_CLIENT_PACKAGES = frozenset(SHARDS["relay-client"])
 BREG_PACKAGES = frozenset(SHARDS["breg"])
 CASEWORK_PACKAGES = frozenset(SHARDS["casework"])
+SCHEDULING_PACKAGES = frozenset(SHARDS["scheduling"])
 STACK_CLIENT_PACKAGES = frozenset(SHARDS["stack-client"])
 
 # These are the cross-product semantic commitments implemented independently by
@@ -700,6 +708,8 @@ def classify(
                 seeds.update(BREG_PACKAGES)
             elif path.startswith("products/casework/"):
                 seeds.update(CASEWORK_PACKAGES)
+            elif path.startswith("products/scheduling/"):
+                seeds.update(SCHEDULING_PACKAGES)
             elif path.startswith("products/identifiers/"):
                 # The catalog gate compiles its focused Relay V2 exporter.
                 # Catalog-only tooling does not require the full Rust matrix.
@@ -952,7 +962,9 @@ def classify(
             for path in paths
         ),
         "evidence_contracts": bool(affected & EVIDENCE_PACKAGES),
+        "scheduling_contracts": bool(affected & SCHEDULING_PACKAGES),
         "casework_postgres": bool(affected & CASEWORK_PACKAGES),
+        "scheduling_postgres": bool(affected & SCHEDULING_PACKAGES),
         "release_tool": release_tool,
         "release_source_proof": release_source_proof,
         "docs": docs,

.github/scripts/test_ci_changes.py

@@ -273,6 +273,12 @@ def test_deferred_ci_work_keeps_its_selector_and_explicit_status_guard(
     ) -> None:
         selectors = {
             "casework-postgres": "needs.changes.outputs.casework_postgres == 'true'",
+            "scheduling-postgres": (
+                "needs.changes.outputs.scheduling_postgres == 'true'"
+            ),
+            "scheduling-contracts": (
+                "needs.changes.outputs.scheduling_contracts == 'true'"
+            ),
             "platform-fuzz": "needs.changes.outputs.platform == 'true'",
             "platform-coverage": "needs.changes.outputs.platform == 'true'",
             "rust-quality": "needs.changes.outputs.rust == 'true'",
@@ -338,6 +344,8 @@ def test_ci_scheduling_graph_retains_every_job_and_aggregate_dependency(
             "identifiers",
             "rust-result",
             "casework-postgres",
+            "scheduling-contracts",
+            "scheduling-postgres",
             "release-tool",
             "release-tool-required",
             "release-source-proof",
@@ -371,6 +379,8 @@ def test_ci_scheduling_graph_retains_every_job_and_aggregate_dependency(
                 "breg-wasm",
                 "identifiers",
                 "casework-postgres",
+                "scheduling-postgres",
+                "scheduling-contracts",
             ),
             "release-tool-required": ("changes", "release-tool"),
             "release-source-proof-required": ("changes", "release-source-proof"),
@@ -394,6 +404,8 @@ def test_ci_scheduling_graph_retains_every_job_and_aggregate_dependency(
                 "breg-wasm",
                 "identifiers",
                 "casework-postgres",
+                "scheduling-postgres",
+                "scheduling-contracts",
                 "release-tool",
                 "release-source-proof",
                 "evidence-tutorials",
@@ -449,7 +461,7 @@ def test_final_aggregate_flattens_rust_results_with_equivalent_outcomes(
             final_needs,
             previous_final_needs.difference({"rust-result"}).union(rust_needs),
         )
-        self.assertEqual(29, len(final_needs))
+        self.assertEqual(31, len(final_needs))
 
         def embedded_python(job: dict[str, Any]) -> str:
             run = job["steps"][0]["run"]

.github/scripts/test_nightly_rust_coverage.py

@@ -39,6 +39,7 @@ def test_all_live_shards_have_stable_flags_and_owned_packages(self) -> None:
             "relay-v2": "relay-v2",
             "breg": "breg",
             "casework": "casework",
+            "scheduling": "scheduling",
             "stack-client": "stack-client",
             "evidence": "evidence",
             "developer-tools": "developer-tools",

.github/workflows/ci.yml

@@ -58,7 +58,9 @@ jobs:
       relay_client_contracts: ${{ steps.filter.outputs.relay_client_contracts }}
       breg_contracts: ${{ steps.filter.outputs.breg_contracts }}
       casework_postgres: ${{ steps.filter.outputs.casework_postgres }}
+      scheduling_postgres: ${{ steps.filter.outputs.scheduling_postgres }}
       evidence_contracts: ${{ steps.filter.outputs.evidence_contracts }}
+      scheduling_contracts: ${{ steps.filter.outputs.scheduling_contracts }}
       release_tool: ${{ steps.filter.outputs.release_tool }}
       release_source_proof: ${{ steps.filter.outputs.release_source_proof }}
       docs: ${{ steps.filter.outputs.docs }}
@@ -711,6 +713,88 @@ jobs:
           CASEWORK_REVIEW_MIGRATION_TEST_DATABASE_URL: postgresql://casework:casework_test@localhost:${{ job.services.postgres.ports['5432'] }}/casework_review_migration
         run: cargo test --locked --profile ci -p registry-casework --features postgres-test --test review_migration_postgres
 
+  scheduling-contracts:
+    name: Scheduling product contracts
+    needs: [changes, rust-policy]
+    if: ${{ !cancelled() && needs.changes.result == 'success' && needs.changes.outputs.scheduling_contracts == 'true' }}
+    runs-on: ubuntu-24.04
+    timeout-minutes: 20
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+        with:
+          persist-credentials: false
+          submodules: false
+
+      - name: Cache Cargo registry
+        uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2
+        with:
+          shared-key: workspace-registry
+          cache-targets: false
+          save-if: ${{ github.ref == 'refs/heads/main' }}
+
+      - name: Scheduling contract consistency
+        run: products/scheduling/scripts/check-contracts.sh
+
+  scheduling-postgres:
+    name: Scheduling PostgreSQL transactions
+    needs: [changes, rust-policy]
+    if: ${{ !cancelled() && needs.changes.result == 'success' && needs.changes.outputs.scheduling_postgres == 'true' }}
+    runs-on: ubuntu-24.04
+    timeout-minutes: 30
+    services:
+      postgres:
+        image: postgres:17.11@sha256:67f41722b7a8cbdb868a44a4995c846eddfdc2973bccb291ce937dce88ad5675
+        env:
+          POSTGRES_DB: scheduling
+          POSTGRES_USER: scheduling
+          POSTGRES_PASSWORD: scheduling_test
+        options: >-
+          --health-cmd "pg_isready -U scheduling -d scheduling"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+        ports:
+          - 5432/tcp
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+        with:
+          persist-credentials: false
+          submodules: false
+      - name: Rust cache
+        uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2
+        with:
+          shared-key: workspace-registry
+          cache-targets: false
+          save-if: ${{ github.ref == 'refs/heads/main' }}
+      - name: Build the Scheduling authoring tool
+        run: cargo build --locked --profile ci -p registry-schedulingctl
+      - name: Verify Scheduling product contracts and offline authoring journeys
+        env:
+          SCHEDULINGCTL_BIN: ${{ github.workspace }}/target/ci/schedulingctl
+        run: products/scheduling/scripts/check-checkpoint.sh
+      - name: Verify commitment ledger transactions
+        env:
+          SCHEDULING_TEST_DATABASE_URL: postgresql://scheduling:scheduling_test@localhost:${{ job.services.postgres.ports['5432'] }}/scheduling
+        run: cargo test --locked --profile ci -p registry-scheduling --features postgres-test --test postgres_commitments
+      - name: Create isolated authoring-apply test database
+        env:
+          POSTGRES_CONTAINER_ID: ${{ job.services.postgres.id }}
+        run: docker exec "$POSTGRES_CONTAINER_ID" createdb -U scheduling scheduling_records_apply
+      - name: Verify offline authoring record application
+        env:
+          SCHEDULING_TEST_DATABASE_URL: postgresql://scheduling:scheduling_test@localhost:${{ job.services.postgres.ports['5432'] }}/scheduling_records_apply
+        run: cargo test --locked --profile ci -p registry-schedulingctl --features postgres-test --test records_apply_postgres
+      - name: Create isolated delivery-intent test database
+        env:
+          POSTGRES_CONTAINER_ID: ${{ job.services.postgres.id }}
+        run: docker exec "$POSTGRES_CONTAINER_ID" createdb -U scheduling scheduling_intents
+      - name: Verify undelivered delivery intent reads
+        env:
+          SCHEDULING_TEST_DATABASE_URL: postgresql://scheduling:scheduling_test@localhost:${{ job.services.postgres.ports['5432'] }}/scheduling_intents
+        run: cargo test --locked --profile ci -p registry-schedulingctl --features postgres-test --test intents_postgres
+
   breg-contracts:
     name: Base Registry Engine product contracts (${{ matrix.lane }})
     needs: changes
@@ -786,15 +870,18 @@ jobs:
           BREG_POSTGRES_LANE: ${{ matrix.lane }}
         run: products/breg/scripts/test-postgres.sh --lane "$BREG_POSTGRES_LANE"
 
-      - name: Casework task approval through stock issuer and BReg
+      - name: Casework task approval through stock issuer to Evidence, BReg, and Scheduling
         if: matrix.lane == 'postgres'
         shell: bash
         run: |
           set -euo pipefail
+          cargo build --locked --profile ci -p registry-scheduling \
+            --example scheduling-auth-probe
+          SCHEDULING_AUTH_PROBE_BIN="${GITHUB_WORKSPACE}/target/ci/examples/scheduling-auth-probe" \
           CASEWORK_ASSIGNMENT_TEST_DATABASE_URL="${BREG_TEST_DATABASE_URL}" \
             cargo test --locked --profile ci -p registry-casework \
               --features postgres-test --lib \
-              approved_casework_tasks_exchange_on_stock_thunderid_for_evidence_and_revoke_breg_writes \
+              approved_casework_tasks_reach_evidence_breg_and_scheduling_through_stock_thunderid \
               -- --ignored
           cargo build --locked --profile ci -p registry-casework -p registry-caseworkctl
           cargo test --locked --profile ci -p registry-casework \
@@ -937,6 +1024,8 @@ jobs:
       - breg-wasm
       - identifiers
       - casework-postgres
+      - scheduling-postgres
+      - scheduling-contracts
     runs-on: ubuntu-slim
     env:
       RUST_JOB_RESULTS: ${{ toJSON(needs) }}
@@ -1938,6 +2027,8 @@ jobs:
       - breg-wasm
       - identifiers
       - casework-postgres
+      - scheduling-postgres
+      - scheduling-contracts
       - release-tool
       - release-source-proof
       - evidence-tutorials

.github/workflows/release-canary.yml

@@ -69,7 +69,7 @@ jobs:
           PY
           printf '{"spdxVersion":"SPDX-2.3","name":"release-canary"}\n' \
             > canary/bundle-root/registry-stack-${tag}.sbom.spdx.json
-          image_names=(relay evidence discovery breg casework)
+          image_names=(relay evidence discovery breg casework scheduling)
 
           write_image_reports() {
             local name="$1"
@@ -109,6 +109,7 @@ jobs:
               "evidence-image",
               "breg-image",
               "casework-image",
+              "scheduling-image",
               "relay-image"
             ]
           }' > "${evidence_root}/advisory-verdict.json"

.github/workflows/release-candidate.yml

@@ -255,7 +255,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        group: [core, breg, casework]
+        group: [core, breg, casework, scheduling]
     steps:
       - name: Checkout exact candidate source
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -340,6 +340,12 @@ jobs:
           name: canonical-linux-binaries-casework-${{ needs.validate.outputs.source_sha }}-${{ github.run_id }}-${{ github.run_attempt }}
           path: binary-shards/casework
 
+      - name: Download canonical Linux Scheduling binary shard
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: canonical-linux-binaries-scheduling-${{ needs.validate.outputs.source_sha }}-${{ github.run_id }}-${{ github.run_attempt }}
+          path: binary-shards/scheduling
+
       - name: Merge and smoke the canonical Linux payload
         run: |
           set -euo pipefail
@@ -349,6 +355,7 @@ jobs:
             --core binary-shards/core \
             --breg binary-shards/breg \
             --casework binary-shards/casework \
+            --scheduling binary-shards/scheduling \
             --output dist \
             --builder-image "${RELEASE_BUILDER_IMAGE}"
           test "$("dist/bin/relay-${{ needs.validate.outputs.tag }}-linux-amd64" --version)" = \
@@ -369,6 +376,10 @@ jobs:
             test "$("dist/bin/caseworkctl-${{ needs.validate.outputs.tag }}-linux-amd64" --version)" = \
               "caseworkctl ${{ needs.validate.outputs.version }}"
           fi
+          if (( release_major > 0 || release_minor >= 33 )); then
+            test "$(dist/image-bin/scheduling --version)" = \
+              "scheduling ${{ needs.validate.outputs.version }}"
+          fi
 
       - name: Set up Docker Buildx
         id: buildx

.github/workflows/release-rehearsal.yml

@@ -128,7 +128,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        group: [core, breg, casework]
+        group: [core, breg, casework, scheduling]
     steps:
       - name: Checkout exact prepared source
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -225,6 +225,12 @@ jobs:
           name: release-rehearsal-binaries-casework-${{ github.sha }}-${{ github.run_id }}-${{ github.run_attempt }}
           path: binary-shards/casework
 
+      - name: Download canonical Linux Scheduling binary shard
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: release-rehearsal-binaries-scheduling-${{ github.sha }}-${{ github.run_id }}-${{ github.run_attempt }}
+          path: binary-shards/scheduling
+
       - name: Merge and smoke the canonical Linux payload
         env:
           REHEARSAL_VERSION: ${{ inputs.version }}
@@ -237,6 +243,7 @@ jobs:
             --core binary-shards/core \
             --breg binary-shards/breg \
             --casework binary-shards/casework \
+            --scheduling binary-shards/scheduling \
             --output dist \
             --builder-image "${RELEASE_BUILDER_IMAGE}"
           test "$("dist/bin/breg-v${REHEARSAL_VERSION}-linux-amd64" --version)" = \
@@ -251,6 +258,10 @@ jobs:
             test "$("dist/bin/caseworkctl-v${REHEARSAL_VERSION}-linux-amd64" --version)" = \
               "caseworkctl ${REHEARSAL_VERSION}"
           fi
+          if (( release_major > 0 || release_minor >= 33 )); then
+            test "$(dist/image-bin/scheduling --version)" = \
+              "scheduling ${REHEARSAL_VERSION}"
+          fi
 
       - name: Set up Docker Buildx for advisory evidence
         if: ${{ inputs.advisory_evidence }}