Add rule-drafts API with pluggable submission backends (GitHub, local)

[julietshen]

Adds a ui-api blueprint for authoring SML rule drafts from the UI, with submission routed through a pluggable backend so each deployment can pick where drafts go for review.

Endpoints (all gated by a new CAN_EDIT_RULE_DRAFTS ability, granted to super_user):

• GET /rule-drafts/source - fetch a loaded SML file
• POST /rule-drafts/validate - splice the draft into the engine's loaded sources and re-run the same AST validation the engine uses; returns structured errors plus suggested imports
• GET /rule-drafts/vocabulary - features, UDFs (with signatures), and in-use effects, for editor autocomplete
• POST /rule-drafts/submit - re-validates server-side, then hands the draft to the configured backend
• GET /rule-drafts/pending - list drafts currently in review
• POST /rule-drafts/parse-into-builder - decide whether a file fits the form-based builder subset (used by the UI in a follow-up PR)

Backends implement the RuleSubmissionBackend Protocol and are selected by OSPREY_RULES_SUBMISSION_BACKEND:

• null (default): every call fails fast with 503, so an unconfigured install never writes anything
• github: opens a PR via the REST API; supports GitHub Enterprise via OSPREY_GITHUB_API_URL
• local: writes into a mounted rules directory for deployments whose pipeline already syncs one

Adopter docs (env vars per backend) are in docs/user/manage.md.

This is the base of a stack. Follow-ups: the rule-editor UI, a GitLab backend, and a Tangled (ATProto) backend.

Checklist

• Tests pass locally (./run-tests.sh osprey_worker/src/osprey/worker/ui_api/osprey/views/tests/test_rule_drafts.py)
• uv run ruff check . passes
• uv tool run fawltydeps --check-unused --pyenv .venv passes
• Updated CHANGELOG.md

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: a8538cfa-82b6-457d-8bc6-89dc3c29f7fe

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}