docs(p2-6): Phase 0 inventory + enqueue lease unit pin

Record wheel baseline (top-level src/), entrypoint blast radius, and
release defaults. No package move. Pin Postgres enqueue lease SQL for
hosts without live PG.

Author: JuliaEdom

CHANGELOG.md

@@ -4,6 +4,14 @@ All notable changes to AgentFlow are documented in this file.
 
 ## [Unreleased]
 
+### Docs — P2-6 Phase 0 inventory (no package move)
+
+- Baseline wheel still ships top-level `src/` (~540 in-repo `from src` lines).
+- Defaults recorded: `src/agentflow_runtime/` layout, one-minor shim, warnings
+  off until Phase 2. Plan:
+  `docs/plans/p2-6-runtime-namespace-migration.md`. Unit pin:
+  `tests/unit/test_postgres_enqueue_lease_contract.py` (enqueue lease SQL).
+
 ### Perf — paced 10 min @ 100 eps produce (apply ~96.5)
 
 - Mac compose (1 Flink TM): 60 000 events at `--pace-eps 100` → produce 100.0,

docs/STATUS.md

@@ -75,9 +75,9 @@ at 100 eps held hop/apply near 96–97 with lag → 0 after a bounded peak
 1. **≥ 100 eps multi-hour sustained** — 10 min paced @ 100 produce is measured
    (~96–97 apply/hop); multi-hour still open. Evidence:
    [perf/throughput-realpath-paced100-2026-07-17.md](perf/throughput-realpath-paced100-2026-07-17.md).
-2. **P2-6 packaging** (breaking) — rename wheel package `src` →
-   `agentflow_runtime` with deprecation shim; plan only until a release
-   window: [plans/p2-6-runtime-namespace-migration.md](plans/p2-6-runtime-namespace-migration.md).
+2. **P2-6 packaging** (breaking) — Phase 0 inventory + defaults done; Phase 1
+   (tree/`agentflow_runtime` + shim) waits for a release branch:
+   [plans/p2-6-runtime-namespace-migration.md](plans/p2-6-runtime-namespace-migration.md).
 
 External gates remain unchanged and are listed in the README scope note:
 production CDC onboarding, a benchmark on production-grade hardware, and a

docs/plans/p2-6-runtime-namespace-migration.md

@@ -1,7 +1,8 @@
 # P2-6 — Runtime namespace: `src` → `agentflow_runtime`
 
-> Plan only. **Do not implement** until a breaking release window is
-> scheduled. Source of the finding: `audit_gpt_11_07_26.md` §P2-6.
+> Plan + **Phase 0 inventory (done 2026-07-17)**. Do **not** start Phase 1
+> (tree move / dual import) until a breaking release window is scheduled.
+> Source of the finding: `audit_gpt_11_07_26.md` §P2-6.
 
 ## Problem
 
@@ -92,10 +93,70 @@ Do not block the namespace rename on integrations publish.
 - [ ] bridge: `python -m agentflow_runtime.processing.bridge_consumer` (or shim module path)
 - [ ] CI unit + contract green; no accidental `packages = ["src"]` only
 
-## Decision needed before coding
+## Decisions (defaults for the release window)
 
-1. **Layout:** `src/agentflow_runtime/` (src-layout) vs rename tree root.
-2. **Shim lifetime:** one minor vs one major.
-3. **Warning default:** on vs off until phase 2 complete.
+Recorded 2026-07-17 so implementation is not blocked on recap — still **do not
+code Phase 1** until the release branch is opened.
 
-Until those three are answered in a release ticket, leave code as-is.
+| Decision | Choice | Rationale |
+|----------|--------|-----------|
+| Layout | **`src/agentflow_runtime/`** (src-layout) | Keeps `src/` as the container dir; hatch packages `agentflow_runtime`; matches modern packaging without dumping the whole monorepo root. |
+| Shim lifetime | **One minor line** (e.g. 2.1 ships dual import; 2.2 drops `src` top-level) | Enough for first-party cutover + external consumers; not forever. |
+| DeprecationWarning on `import src` | **Off until Phase 2 complete**, then on by default (env `AGENTFLOW_SRC_SHIM_SILENT=1` to mute) | Avoids CI noise during mass codemod. |
+
+## Phase 0 inventory — done 2026-07-17 (`main` @ `4a5d524`)
+
+### Wheel today
+
+```text
+python -m build --wheel
+→ agentflow_runtime-2.0.0-py3-none-any.whl  (~342 KB, 145 files)
+top-level package dir in wheel:  src/   (141 files under src/)
+```
+
+Distribution name is already `agentflow-runtime`; only the **import package**
+is the generic `src`.
+
+### Hatch
+
+```toml
+[tool.hatch.build.targets.wheel]
+packages = ["src"]
+```
+
+CI mypy: `mypy src/ --ignore-missing-imports` (`.github/workflows/ci.yml`).
+
+### Runtime entrypoints hardcoding `src.`
+
+| Kind | Hits (repo scan, excl. .venv/.git) | Examples |
+|------|-----------------------------------:|----------|
+| `python -m src.…` | 47 | bridge_consumer, local_pipeline, provision docs |
+| `uvicorn src.…` | 12 | `Dockerfile.api`, `docker-compose.prod.yml`, `k8s_staging_up.sh`, load/perf workflows |
+| `src.serving.api.main` | 100 | helm deployment + worker, benchmarks, chaos/e2e |
+| `src.serving.provision` | 27 | helm provision Job, tests, main lifespan notes |
+| `src.processing.bridge_consumer` | 11 | bridge tests, main |
+| `packages = ["src"]` | 6 | pyproject (+ mutants / plan / audit) |
+| `from src.` / `import src.` lines in `src/`+`tests/`+`scripts/` | **~540** | primary codemod surface |
+
+### Helm / image (must change in Phase 1–2 with shim)
+
+- `helm/agentflow/templates/deployment.yaml` → `uvicorn` `src.serving.api.main:app`
+- `helm/agentflow/templates/deployment-worker.yaml` → same
+- `helm/agentflow/templates/provision-job.yaml` → `src.serving.provision`
+- `Dockerfile.api` CMD → `src.serving.api.main:app`
+- `scripts/k8s_staging_up.sh` patch args → same
+
+### Blast radius (honest)
+
+- **~540** first-party import lines + **~100** `main:app` string references +
+  helm/docker/compose.
+- Shim Phase 1 is mandatory; big-bang rename without shim will break every
+  image and local `python -m` habit the same day.
+
+### Phase 0 exit criteria
+
+- [x] Entrypoint inventory
+- [x] Hatch pin confirmed
+- [x] Baseline wheel tree recorded (`src/` top-level only)
+- [x] Default decisions written (layout / shim / warnings)
+- [ ] Phase 1 on a release branch (not started)

tests/unit/test_postgres_enqueue_lease_contract.py

@@ -0,0 +1,27 @@
+"""Static contract: Postgres enqueue stamps claim lease (multi-pod race).
+
+Live exclusivity is covered by
+``tests/integration/test_control_plane_postgres_live.py`` when a DSN is present.
+This pin keeps the INSERT shape from regressing on hosts without PostgreSQL.
+"""
+
+from pathlib import Path
+
+POSTGRES = (
+    Path(__file__).resolve().parents[2] / "src" / "serving" / "control_plane" / "postgres.py"
+)
+
+
+def test_enqueue_webhook_delivery_stamps_lease_on_insert() -> None:
+    text = POSTGRES.read_text(encoding="utf-8")
+    assert POSTGRES.is_file()
+
+    start = text.index("def enqueue_webhook_delivery")
+    chunk = text[start : start + 1400]
+
+    assert "lease_expires_at" in chunk
+    assert "now() + make_interval(secs => %s)" in chunk
+    assert "_claim_lease_seconds" in chunk
+    assert "ON CONFLICT (webhook_id, event_id) DO NOTHING" in chunk
+    # Winner-only inline delivery still depends on rowcount.
+    assert "rowcount" in chunk