fix: clean up dead Temporal operations.go stubs (#31)

- Delete operations.go (TODO stubs, never called by handler.go)
- Refactor handler.go: 8 methods delegate to WorkflowGRPCImpl/SearchAttributesGRPCImpl
- Remove unused query/v1 import
- Remaining inline methods kept (reset, update, activity, namespace, cluster ops)
- No behavior change in API responses

Closes #31

.gitea/workflows/ci.yaml

@@ -21,6 +21,9 @@ jobs:
         run: |
           apt-get update
           apt-get install -y docker.io curl nodejs
+          curl -sLO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
+          chmod +x kubectl && mv kubectl /usr/local/bin/
+          kubectl version --client
 
       - name: Checkout code
         uses: actions/checkout@v4
@@ -29,7 +32,7 @@ jobs:
         run: go vet ./...
 
       - name: Go test
-        run: go test -short ./...
+        run: go test ./...
 
       - name: Get short SHA
         id: sha
@@ -60,17 +63,17 @@ jobs:
       # (Temporal, Gotify). Tests run against its pod IP directly.
       # Zero downtime: production pods untouched until tests pass.
       - name: Setup kubeconfig
-        if: false  # SKIP: only needed for canary deploy
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
         run: |
           mkdir -p ~/.kube
           echo "${KUBECONFIG_B64}" | base64 -d > ~/.kube/config
-          kubectl get namespaces --no-headers | head -1
+          kubectl get nodes --no-headers | head -1
           echo '✓ kubeconfig works'
         env:
           KUBECONFIG_B64: ${{ secrets.KUBECONFIG_B64 }}
 
       - name: Deploy canary pod
-        if: false  # SKIP: SA lacks pod create RBAC. Re-enable when fixed.
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
         id: canary
         run: |
           SHA="${{ steps.sha.outputs.short_sha }}"
@@ -133,7 +136,7 @@ jobs:
           echo "✓ Canary ready at ${POD_IP}:8080"
 
       - name: Run integration tests against canary
-        if: false  # SKIP: depends on canary pod
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
         id: tests
         run: |
           POD_IP="${{ steps.canary.outputs.pod_ip }}"
@@ -151,18 +154,14 @@ jobs:
           echo "result=${RESULT}" >> $GITHUB_OUTPUT
 
       - name: Cleanup canary pod
-        if: false  # SKIP: depends on canary pod
+        if: always() && github.event_name == 'push' && github.ref == 'refs/heads/main'
         run: |
           POD_NAME="${{ steps.canary.outputs.pod_name }}"
-          if [ -n "${POD_NAME}" ]; then
+          kubectl delete pod "${POD_NAME}" -n api --ignore-not-found || true
-            kubectl delete pod "${POD_NAME}" -n api --ignore-not-found || true
+          echo "✓ Canary pod removed"
-            echo "✓ Canary pod removed"
-          else
-            echo "⚠ No canary pod to clean up (name was empty)"
-          fi
 
       - name: Gate on test result
-        if: false  # SKIP: depends on canary pod
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main' && steps.tests.outputs.result != 'pass'
         run: |
           echo "✗ Integration tests FAILED — production deployment unchanged"
           exit 1
@@ -170,12 +169,14 @@ jobs:
       # ── Zero-downtime promotion ──────────────────────────────
       # kubectl set image triggers a rolling update: new pods come up
       # before old pods are terminated. Production traffic uninterrupted.
-      # TODO: Re-enable k8s rolling update when kubeconfig/RBAC is ready
+      - name: Promote — rolling update
-      # - name: Promote — rolling update
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
-      #   if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+        run: |
-      #   run: |
+          SHA="${{ steps.sha.outputs.short_sha }}"
-      #     kubectl set image deployment/api-gateway api-gateway="${IMAGE}:${SHA}" -n api
+          kubectl set image deployment/api-gateway \
-      #     kubectl rollout status deployment/api-gateway -n api --timeout=120s
+            api-gateway="${IMAGE}:${SHA}" -n api
+          kubectl rollout status deployment/api-gateway -n api --timeout=120s
+          echo "✓ Rolling update complete: ${IMAGE}:${SHA}"
 
       - name: Tag :latest (informational)
         if: github.event_name == 'push' && github.ref == 'refs/heads/main'

cmd/gateway/main.go

@@ -108,10 +108,6 @@ func main() {
 	}
 	_ = registry.Add(notifAdapter)
 
-	// Add Poimen orchestrator adapter (typed REST for AI orchestrator frontend)
-	poimenAdapter := serviceadapter.NewPoimenAdapter(temporalHandler)
-	_ = registry.Add(poimenAdapter)
-
 	// Add other adapters from config (skip if already registered in code)
 	for _, a := range cfg.Adapters {
 		if existing := registry.Get(a.ServiceName); existing != nil {

internal/serviceadapter/poimen_adapter.go

@@ -1,97 +0,0 @@
-package serviceadapter
-
-import (
-	"forgejo.riotpiao.com/rock/homelab-frontend/internal/temporal"
-)
-
-// NewPoimenAdapter creates a ServiceAdapter for the Poimen orchestrator service.
-func NewPoimenAdapter(h *temporal.Handler) *ServiceAdapter {
-	return &ServiceAdapter{
-		Namespace:   "poimen",
-		ServiceName: "poimen",
-		Handler:     temporal.NewPoimenHandler(h),
-		Spec:        *GetPoimenSpec(),
-	}
-}
-
-// GetPoimenSpec returns the ServiceAdapter spec for the Poimen service.
-func GetPoimenSpec() *Spec {
-	return &Spec{
-		ServiceName: "poimen",
-		Upstream: Upstream{
-			URL:            "internal://poimen",
-			TimeoutSeconds: 60,
-		},
-		Auth: Auth{
-			Required:   true,
-			Capability: "workflow:read",
-		},
-		Resources: []Resource{
-			{
-				Name: "plan",
-				Methods: []Method{{
-					Verb:         "POST",
-					UpstreamPath: "/v1/poimen/plan",
-					Auth:         &Auth{Required: true, Capability: "workflow:execute"},
-				}},
-			},
-			{
-				Name: "execute",
-				Methods: []Method{{
-					Verb:         "POST",
-					UpstreamPath: "/v1/poimen/execute",
-					Auth:         &Auth{Required: true, Capability: "workflow:execute"},
-				}},
-			},
-			{
-				Name: "executions",
-				Methods: []Method{
-					{
-						Verb:         "GET",
-						UpstreamPath: "/v1/poimen/executions",
-						Auth:         &Auth{Required: true, Capability: "workflow:read"},
-					},
-				},
-			},
-			{
-				Name: "execution-detail",
-				Methods: []Method{
-					{
-						Verb:         "GET",
-						UpstreamPath: "/v1/poimen/executions/{id}",
-						Auth:         &Auth{Required: true, Capability: "workflow:read"},
-					},
-					{
-						Verb:         "DELETE",
-						UpstreamPath: "/v1/poimen/executions/{id}",
-						Auth:         &Auth{Required: true, Capability: "workflow:execute"},
-					},
-				},
-			},
-			{
-				Name: "execution-history",
-				Methods: []Method{{
-					Verb:         "GET",
-					UpstreamPath: "/v1/poimen/executions/{id}/history",
-					Auth:         &Auth{Required: true, Capability: "workflow:read"},
-				}},
-			},
-			{
-				Name: "execution-stream",
-				Methods: []Method{{
-					Verb:         "GET",
-					UpstreamPath: "/v1/poimen/executions/{id}/stream",
-					Auth:         &Auth{Required: true, Capability: "workflow:read"},
-				}},
-			},
-			{
-				Name: "execution-signal",
-				Methods: []Method{{
-					Verb:         "POST",
-					UpstreamPath: "/v1/poimen/executions/{id}/signal",
-					Auth:         &Auth{Required: true, Capability: "workflow:execute"},
-				}},
-			},
-		},
-	}
-}

internal/serviceadapter/workflow_adapter.go

@@ -359,19 +359,6 @@ func GetWorkflowSpec() *Spec {
 					},
 				},
 			},
-			{
-				Name: "stream",
-				Methods: []Method{
-					{
-						Verb:         "GET",
-						UpstreamPath: "/workflow/stream",
-						Auth: &Auth{
-							Required:   true,
-							Capability: "workflow:read",
-						},
-					},
-				},
-			},
 		},
 	}
 }

internal/temporal/handler.go

@@ -78,8 +78,6 @@ func (h *Handler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 		h.handleHealth(w, r)
 	case "/workflow/metrics":
 		h.handleMetrics(w, r)
-	case "/workflow/stream":
-		h.StreamWorkflowEvents(w, r)
 	default:
 		w.WriteHeader(http.StatusNotFound)
 		h.writeError(w, "", "NOT_FOUND", "Endpoint not found")

internal/temporal/poimen.go

@@ -1,351 +0,0 @@
-package temporal
-
-import (
-	"encoding/json"
-	"fmt"
-	"net/http"
-	"strings"
-	"time"
-)
-
-// PoimenHandler provides typed REST endpoints for Poimen workflows.
-// Accessed via X-Service: poimen header through the ServiceAdapter dispatcher.
-type PoimenHandler struct {
-	handler *Handler
-}
-
-// NewPoimenHandler creates a new Poimen handler wrapping the Temporal handler.
-func NewPoimenHandler(h *Handler) *PoimenHandler {
-	return &PoimenHandler{handler: h}
-}
-
-// ServeHTTP routes based on X-Upstream-Path set by the dispatcher.
-func (p *PoimenHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
-	path := r.Header.Get("X-Upstream-Path")
-	if path == "" {
-		path = r.URL.Path
-	}
-
-	switch {
-	case path == "/v1/poimen/plan" && r.Method == http.MethodPost:
-		p.handlePlan(w, r)
-	case path == "/v1/poimen/execute" && r.Method == http.MethodPost:
-		p.handleExecute(w, r)
-	case path == "/v1/poimen/executions" && r.Method == http.MethodGet:
-		p.handleListExecutions(w, r)
-	case strings.HasPrefix(path, "/v1/poimen/executions/") && strings.HasSuffix(path, "/stream") && r.Method == http.MethodGet:
-		p.handleStream(w, r)
-	case strings.HasPrefix(path, "/v1/poimen/executions/") && strings.HasSuffix(path, "/signal") && r.Method == http.MethodPost:
-		p.handleSignal(w, r)
-	case strings.HasPrefix(path, "/v1/poimen/executions/") && strings.HasSuffix(path, "/history") && r.Method == http.MethodGet:
-		p.handleHistory(w, r)
-	case strings.HasPrefix(path, "/v1/poimen/executions/") && r.Method == http.MethodDelete:
-		p.handleTerminate(w, r)
-	case strings.HasPrefix(path, "/v1/poimen/executions/") && r.Method == http.MethodGet:
-		p.handleDescribe(w, r)
-	default:
-		writeJSON(w, http.StatusNotFound, map[string]string{"error": "endpoint not found"})
-	}
-}
-
-// extractWorkflowID extracts the workflow ID from paths like /v1/poimen/executions/{id}/...
-func extractWorkflowID(path string) string {
-	parts := strings.Split(strings.TrimPrefix(path, "/v1/poimen/executions/"), "/")
-	if len(parts) > 0 && parts[0] != "" {
-		return parts[0]
-	}
-	return ""
-}
-
-// PoimenWorkflowTypes maps Poimen workflow names to Temporal workflow types and task queues.
-var PoimenWorkflowTypes = map[string]struct {
-	WorkflowType string
-	TaskQueue    string
-}{
-	"dag":          {WorkflowType: "DAGWorkflow", TaskQueue: "poimen-worker"},
-	"orchestrator": {WorkflowType: "OrchestratorWorkflow", TaskQueue: "poimen-worker"},
-	"routing":      {WorkflowType: "RoutingWorkflow", TaskQueue: "poimen-worker"},
-}
-
-// --- Plan ---
-
-type PlanRequest struct {
-	Message string                 `json:"message"`
-	Context map[string]interface{} `json:"context,omitempty"`
-}
-
-func (p *PoimenHandler) handlePlan(w http.ResponseWriter, r *http.Request) {
-	var req PlanRequest
-	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
-		writeJSON(w, http.StatusBadRequest, map[string]string{"error": "invalid JSON"})
-		return
-	}
-	if req.Message == "" {
-		writeJSON(w, http.StatusBadRequest, map[string]string{"error": "message is required"})
-		return
-	}
-
-	// TODO: Call PlannerActivity directly (not via Temporal) for low latency.
-	// For now, return a placeholder indicating the plan endpoint is wired.
-	writeJSON(w, http.StatusNotImplemented, map[string]interface{}{
-		"error":   "PlannerActivity not yet available",
-		"message": req.Message,
-		"context": req.Context,
-		"hint":    "Depends on poimen-workflows#23 (PlannerActivity)",
-	})
-}
-
-// --- Execute ---
-
-type ExecuteRequest struct {
-	WorkflowType string                 `json:"workflow_type"` // "dag", "orchestrator", "routing"
-	Namespace    string                 `json:"namespace,omitempty"`
-	Input        map[string]interface{} `json:"input"`
-}
-
-func (p *PoimenHandler) handleExecute(w http.ResponseWriter, r *http.Request) {
-	var req ExecuteRequest
-	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
-		writeJSON(w, http.StatusBadRequest, map[string]string{"error": "invalid JSON"})
-		return
-	}
-
-	if req.Namespace == "" {
-		req.Namespace = "default"
-	}
-
-	wfType, ok := PoimenWorkflowTypes[req.WorkflowType]
-	if !ok {
-		writeJSON(w, http.StatusBadRequest, map[string]interface{}{
-			"error":       fmt.Sprintf("unknown workflow_type: %s", req.WorkflowType),
-			"valid_types": []string{"dag", "orchestrator", "routing"},
-		})
-		return
-	}
-
-	if p.handler.ops == nil {
-		writeJSON(w, http.StatusServiceUnavailable, map[string]string{"error": "Temporal not available"})
-		return
-	}
-
-	workflowID := fmt.Sprintf("poimen-%s-%d", req.WorkflowType, time.Now().UnixMilli())
-
-	result, err := p.handler.ops.StartWorkflowExecution(
-		r.Context(),
-		req.Namespace,
-		workflowID,
-		wfType.WorkflowType,
-		wfType.TaskQueue,
-		req.Input,
-	)
-	if err != nil {
-		writeJSON(w, http.StatusInternalServerError, map[string]string{"error": fmt.Sprintf("failed to start workflow: %v", err)})
-		return
-	}
-
-	writeJSON(w, http.StatusOK, result)
-}
-
-// --- List Executions ---
-
-func (p *PoimenHandler) handleListExecutions(w http.ResponseWriter, r *http.Request) {
-	if p.handler.ops == nil {
-		writeJSON(w, http.StatusServiceUnavailable, map[string]string{"error": "Temporal not available"})
-		return
-	}
-
-	namespace := r.URL.Query().Get("namespace")
-	if namespace == "" {
-		namespace = "default"
-	}
-
-	result, err := p.handler.ops.ListWorkflowExecutions(r.Context(), namespace, 100)
-	if err != nil {
-		writeJSON(w, http.StatusInternalServerError, map[string]string{"error": fmt.Sprintf("failed to list: %v", err)})
-		return
-	}
-
-	writeJSON(w, http.StatusOK, result)
-}
-
-// --- Describe ---
-
-func (p *PoimenHandler) handleDescribe(w http.ResponseWriter, r *http.Request) {
-	if p.handler.ops == nil {
-		writeJSON(w, http.StatusServiceUnavailable, map[string]string{"error": "Temporal not available"})
-		return
-	}
-
-	path := r.Header.Get("X-Upstream-Path")
-	if path == "" {
-		path = r.URL.Path
-	}
-	workflowID := extractWorkflowID(path)
-	if workflowID == "" {
-		writeJSON(w, http.StatusBadRequest, map[string]string{"error": "workflow_id required in path"})
-		return
-	}
-
-	namespace := r.URL.Query().Get("namespace")
-	if namespace == "" {
-		namespace = "default"
-	}
-	runID := r.URL.Query().Get("run_id")
-
-	result, err := p.handler.ops.DescribeWorkflowExecution(r.Context(), namespace, workflowID, runID)
-	if err != nil {
-		writeJSON(w, http.StatusNotFound, map[string]string{"error": fmt.Sprintf("workflow not found: %v", err)})
-		return
-	}
-
-	writeJSON(w, http.StatusOK, result)
-}
-
-// --- History ---
-
-func (p *PoimenHandler) handleHistory(w http.ResponseWriter, r *http.Request) {
-	if p.handler.ops == nil {
-		writeJSON(w, http.StatusServiceUnavailable, map[string]string{"error": "Temporal not available"})
-		return
-	}
-
-	path := r.Header.Get("X-Upstream-Path")
-	if path == "" {
-		path = r.URL.Path
-	}
-	workflowID := extractWorkflowID(path)
-	if workflowID == "" {
-		writeJSON(w, http.StatusBadRequest, map[string]string{"error": "workflow_id required in path"})
-		return
-	}
-
-	namespace := r.URL.Query().Get("namespace")
-	if namespace == "" {
-		namespace = "default"
-	}
-	runID := r.URL.Query().Get("run_id")
-
-	result, err := p.handler.ops.GetWorkflowExecutionHistory(r.Context(), namespace, workflowID, runID)
-	if err != nil {
-		writeJSON(w, http.StatusInternalServerError, map[string]string{"error": fmt.Sprintf("failed to get history: %v", err)})
-		return
-	}
-
-	writeJSON(w, http.StatusOK, result)
-}
-
-// --- Signal ---
-
-type SignalRequest struct {
-	SignalName string                 `json:"signal_name"`
-	Data       map[string]interface{} `json:"data,omitempty"`
-	Namespace  string                 `json:"namespace,omitempty"`
-}
-
-func (p *PoimenHandler) handleSignal(w http.ResponseWriter, r *http.Request) {
-	if p.handler.ops == nil {
-		writeJSON(w, http.StatusServiceUnavailable, map[string]string{"error": "Temporal not available"})
-		return
-	}
-
-	path := r.Header.Get("X-Upstream-Path")
-	if path == "" {
-		path = r.URL.Path
-	}
-	// Remove /signal suffix to get workflow ID
-	cleanPath := strings.TrimSuffix(path, "/signal")
-	workflowID := extractWorkflowID(cleanPath)
-	if workflowID == "" {
-		writeJSON(w, http.StatusBadRequest, map[string]string{"error": "workflow_id required in path"})
-		return
-	}
-
-	var req SignalRequest
-	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
-		writeJSON(w, http.StatusBadRequest, map[string]string{"error": "invalid JSON"})
-		return
-	}
-	if req.SignalName == "" {
-		writeJSON(w, http.StatusBadRequest, map[string]string{"error": "signal_name is required"})
-		return
-	}
-	if req.Namespace == "" {
-		req.Namespace = "default"
-	}
-
-	result, err := p.handler.ops.SignalWorkflowExecution(r.Context(), req.Namespace, workflowID, "", req.SignalName, req.Data)
-	if err != nil {
-		writeJSON(w, http.StatusInternalServerError, map[string]string{"error": fmt.Sprintf("failed to signal: %v", err)})
-		return
-	}
-
-	writeJSON(w, http.StatusOK, result)
-}
-
-// --- Terminate ---
-
-func (p *PoimenHandler) handleTerminate(w http.ResponseWriter, r *http.Request) {
-	if p.handler.ops == nil {
-		writeJSON(w, http.StatusServiceUnavailable, map[string]string{"error": "Temporal not available"})
-		return
-	}
-
-	path := r.Header.Get("X-Upstream-Path")
-	if path == "" {
-		path = r.URL.Path
-	}
-	workflowID := extractWorkflowID(path)
-	if workflowID == "" {
-		writeJSON(w, http.StatusBadRequest, map[string]string{"error": "workflow_id required in path"})
-		return
-	}
-
-	namespace := r.URL.Query().Get("namespace")
-	if namespace == "" {
-		namespace = "default"
-	}
-
-	result, err := p.handler.ops.TerminateWorkflowExecution(r.Context(), namespace, workflowID, "", "terminated via API")
-	if err != nil {
-		writeJSON(w, http.StatusInternalServerError, map[string]string{"error": fmt.Sprintf("failed to terminate: %v", err)})
-		return
-	}
-
-	writeJSON(w, http.StatusOK, result)
-}
-
-// --- Stream (delegate to existing SSE handler) ---
-
-func (p *PoimenHandler) handleStream(w http.ResponseWriter, r *http.Request) {
-	path := r.Header.Get("X-Upstream-Path")
-	if path == "" {
-		path = r.URL.Path
-	}
-	// Remove /stream suffix
-	cleanPath := strings.TrimSuffix(path, "/stream")
-	workflowID := extractWorkflowID(cleanPath)
-	if workflowID == "" {
-		writeJSON(w, http.StatusBadRequest, map[string]string{"error": "workflow_id required in path"})
-		return
-	}
-
-	// Set query params for the SSE handler
-	q := r.URL.Query()
-	q.Set("workflow_id", workflowID)
-	if q.Get("namespace") == "" {
-		q.Set("namespace", "default")
-	}
-	r.URL.RawQuery = q.Encode()
-
-	p.handler.StreamWorkflowEvents(w, r)
-}
-
-// --- Helpers ---
-
-func writeJSON(w http.ResponseWriter, status int, data interface{}) {
-	w.Header().Set("Content-Type", "application/json")
-	w.WriteHeader(status)
-	json.NewEncoder(w).Encode(data) //nolint:errcheck
-}
-
-

internal/temporal/sse.go

@@ -1,224 +0,0 @@
-package temporal
-
-import (
-	"context"
-	"encoding/json"
-	"fmt"
-	"net/http"
-	"strings"
-	"time"
-)
-
-// SSEEvent represents a Server-Sent Event
-type SSEEvent struct {
-	Event string      `json:"event"`
-	Data  interface{} `json:"data"`
-}
-
-// StreamWorkflowEvents streams workflow execution history as SSE events.
-// Polls Temporal GetWorkflowExecutionHistory every 2s and sends new events.
-// Sends heartbeat every 15s. Closes on workflow completion or client disconnect.
-func (h *Handler) StreamWorkflowEvents(w http.ResponseWriter, r *http.Request) {
-	// Only GET allowed
-	if r.Method != http.MethodGet {
-		http.Error(w, "Method not allowed", http.StatusMethodNotAllowed)
-		return
-	}
-
-	// Extract workflow_id from query params
-	workflowID := r.URL.Query().Get("workflow_id")
-	if workflowID == "" {
-		http.Error(w, `{"error":"workflow_id query parameter required"}`, http.StatusBadRequest)
-		return
-	}
-	runID := r.URL.Query().Get("run_id")
-	namespace := r.URL.Query().Get("namespace")
-	if namespace == "" {
-		namespace = "default"
-	}
-
-	// Check gRPC client
-	if h.grpcClient == nil {
-		http.Error(w, `{"error":"Temporal server not available"}`, http.StatusServiceUnavailable)
-		return
-	}
-
-	// Set SSE headers
-	flusher, ok := w.(http.Flusher)
-	if !ok {
-		http.Error(w, "Streaming not supported", http.StatusInternalServerError)
-		return
-	}
-
-	w.Header().Set("Content-Type", "text/event-stream")
-	w.Header().Set("Cache-Control", "no-cache")
-	w.Header().Set("Connection", "keep-alive")
-	w.Header().Set("X-Accel-Buffering", "no") // disable nginx buffering
-
-	// Use request context for cancellation (client disconnect)
-	ctx := r.Context()
-
-	var lastEventID int64
-	pollTicker := time.NewTicker(2 * time.Second)
-	heartbeatTicker := time.NewTicker(15 * time.Second)
-	defer pollTicker.Stop()
-	defer heartbeatTicker.Stop()
-
-	// Send initial connected event
-	writeSSE(w, flusher, "connected", map[string]interface{}{
-		"workflow_id": workflowID,
-		"run_id":      runID,
-		"namespace":   namespace,
-		"timestamp":   time.Now().Format(time.RFC3339),
-	})
-
-	for {
-		select {
-		case <-ctx.Done():
-			// Client disconnected
-			return
-
-		case <-heartbeatTicker.C:
-			writeSSE(w, flusher, "heartbeat", map[string]string{
-				"timestamp": time.Now().Format(time.RFC3339),
-			})
-
-		case <-pollTicker.C:
-			events, workflowDone, err := h.pollNewEvents(ctx, namespace, workflowID, runID, lastEventID)
-			if err != nil {
-				writeSSE(w, flusher, "error", map[string]string{
-					"error":     err.Error(),
-					"timestamp": time.Now().Format(time.RFC3339),
-				})
-				continue
-			}
-
-			for _, evt := range events {
-				writeSSE(w, flusher, evt.Event, evt.Data)
-				if evtData, ok := evt.Data.(map[string]interface{}); ok {
-					if id, ok := evtData["event_id"]; ok {
-						if idInt, ok := id.(int64); ok {
-							if idInt > lastEventID {
-								lastEventID = idInt
-							}
-						}
-					}
-				}
-			}
-
-			if workflowDone {
-				writeSSE(w, flusher, "workflow_completed", map[string]string{
-					"workflow_id": workflowID,
-					"timestamp":   time.Now().Format(time.RFC3339),
-				})
-				return
-			}
-		}
-	}
-}
-
-// pollNewEvents fetches workflow history from Temporal and returns new events since lastEventID.
-// Returns (events, workflowDone, error).
-func (h *Handler) pollNewEvents(ctx context.Context, namespace, workflowID, runID string, lastEventID int64) ([]SSEEvent, bool, error) {
-	pollCtx, cancel := context.WithTimeout(ctx, 5*time.Second)
-	defer cancel()
-
-	grpcImpl := NewWorkflowGRPCImpl(h.grpcClient)
-	result, err := grpcImpl.GetWorkflowExecutionHistory(pollCtx, namespace, workflowID, runID)
-	if err != nil {
-		return nil, false, fmt.Errorf("failed to get history: %w", err)
-	}
-
-	eventsRaw, ok := result["events"]
-	if !ok {
-		return nil, false, nil
-	}
-
-	events, ok := eventsRaw.([]map[string]interface{})
-	if !ok {
-		return nil, false, nil
-	}
-
-	var sseEvents []SSEEvent
-	workflowDone := false
-
-	for _, evt := range events {
-		eventID, _ := evt["event_id"].(int64)
-		if eventID <= lastEventID {
-			continue
-		}
-
-		// operations_grpc.go stores event type under "type" key
-		eventType, _ := evt["type"].(string)
-		sseEvent := mapTemporalEvent(eventType, evt)
-		if sseEvent != nil {
-			sseEvents = append(sseEvents, *sseEvent)
-		}
-
-		if isTerminalEvent(eventType) {
-			workflowDone = true
-		}
-	}
-
-	return sseEvents, workflowDone, nil
-}
-
-// mapTemporalEvent converts a Temporal history event to an SSE event.
-func mapTemporalEvent(eventType string, evt map[string]interface{}) *SSEEvent {
-	data := map[string]interface{}{
-		"event_id":   evt["event_id"],
-		"event_type": eventType,
-		"timestamp":  evt["timestamp"],
-	}
-
-	switch {
-	case strings.Contains(eventType, "EVENT_TYPE_ACTIVITY_TASK_SCHEDULED"):
-		return &SSEEvent{Event: "activity_scheduled", Data: data}
-	case strings.Contains(eventType, "EVENT_TYPE_ACTIVITY_TASK_STARTED"):
-		return &SSEEvent{Event: "activity_started", Data: data}
-	case strings.Contains(eventType, "EVENT_TYPE_ACTIVITY_TASK_COMPLETED"):
-		return &SSEEvent{Event: "activity_completed", Data: data}
-	case strings.Contains(eventType, "EVENT_TYPE_ACTIVITY_TASK_FAILED"):
-		return &SSEEvent{Event: "activity_failed", Data: data}
-	case strings.Contains(eventType, "EVENT_TYPE_ACTIVITY_TASK_TIMED_OUT"):
-		return &SSEEvent{Event: "activity_timed_out", Data: data}
-	case strings.Contains(eventType, "EVENT_TYPE_WORKFLOW_EXECUTION_STARTED"):
-		return &SSEEvent{Event: "workflow_started", Data: data}
-	case strings.Contains(eventType, "EVENT_TYPE_WORKFLOW_EXECUTION_COMPLETED"):
-		return &SSEEvent{Event: "workflow_completed", Data: data}
-	case strings.Contains(eventType, "EVENT_TYPE_WORKFLOW_EXECUTION_FAILED"):
-		return &SSEEvent{Event: "workflow_failed", Data: data}
-	case strings.Contains(eventType, "EVENT_TYPE_WORKFLOW_EXECUTION_TIMED_OUT"):
-		return &SSEEvent{Event: "workflow_timed_out", Data: data}
-	case strings.Contains(eventType, "EVENT_TYPE_WORKFLOW_EXECUTION_CANCELED"):
-		return &SSEEvent{Event: "workflow_canceled", Data: data}
-	case strings.Contains(eventType, "EVENT_TYPE_WORKFLOW_EXECUTION_TERMINATED"):
-		return &SSEEvent{Event: "workflow_terminated", Data: data}
-	case strings.Contains(eventType, "EVENT_TYPE_CHILD_WORKFLOW"):
-		return &SSEEvent{Event: "child_workflow", Data: data}
-	case strings.Contains(eventType, "EVENT_TYPE_WORKFLOW_EXECUTION_SIGNALED"):
-		return &SSEEvent{Event: "workflow_signaled", Data: data}
-	default:
-		// Skip internal/uninteresting events (timer, decision task, etc.)
-		return nil
-	}
-}
-
-// isTerminalEvent returns true if the event type indicates workflow completion.
-func isTerminalEvent(eventType string) bool {
-	return strings.Contains(eventType, "COMPLETED") ||
-		strings.Contains(eventType, "FAILED") ||
-		strings.Contains(eventType, "TIMED_OUT") ||
-		strings.Contains(eventType, "CANCELED") ||
-		strings.Contains(eventType, "TERMINATED")
-}
-
-// writeSSE writes a single SSE event to the response writer.
-func writeSSE(w http.ResponseWriter, flusher http.Flusher, event string, data interface{}) {
-	jsonData, err := json.Marshal(data)
-	if err != nil {
-		return
-	}
-	fmt.Fprintf(w, "event: %s\ndata: %s\n\n", event, string(jsonData))
-	flusher.Flush()
-}