feat: aligner le dashboard production sur recette

ops/ci-alert-email-dispatch.py

@@ -0,0 +1,49 @@
+#!/usr/bin/env python3
+"""Expédie les alertes CI mises en file par le dashboard depuis l’hôte de recette."""
+
+import json
+import subprocess
+import sys
+from email.message import EmailMessage
+from pathlib import Path
+
+
+OUTBOX = Path("/opt/manus-deploy/secrets/ci-alerts/outbox")
+ARCHIVE = Path("/var/log/manus-deploy/ci-alerts-email-sent.json")
+
+
+def send_alert(file_path: Path) -> None:
+    payload = json.loads(file_path.read_text(encoding="utf-8"))
+    recipient = str(payload.get("to", "")).strip()
+    subject = str(payload.get("subject", "")).strip()
+    text = str(payload.get("text", "")).strip()
+    if not recipient or "@" not in recipient or not subject or not text:
+        raise ValueError(f"Alerte CI invalide : {file_path.name}")
+    message = EmailMessage()
+    message["To"] = recipient
+    message["From"] = "alertes-ci@itinova.org"
+    message["Subject"] = subject
+    message.set_content(text)
+    subprocess.run(["/usr/sbin/sendmail", "-t", "-oi"], input=message.as_bytes(), check=True, timeout=30)
+    ARCHIVE.parent.mkdir(parents=True, exist_ok=True)
+    ARCHIVE.write_text(json.dumps({"id": payload.get("id"), "sentAt": payload.get("createdAt")}) + "\n", encoding="utf-8")
+    file_path.unlink()
+
+
+def main() -> int:
+    OUTBOX.mkdir(parents=True, exist_ok=True, mode=0o700)
+    failures = []
+    for file_path in sorted(OUTBOX.glob("*.json")):
+        try:
+            send_alert(file_path)
+        except Exception as error:  # Le fichier reste en file pour réessai et investigation.
+            print(f"CI_EMAIL_DISPATCH_FAILED {file_path.name}: {error}", file=sys.stderr)
+            failures.append(file_path.name)
+    if failures:
+        return 1
+    print("CI_EMAIL_DISPATCH_OK")
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())