feat: curvit-content-creator service — scheduled AI editorial assistant (issue #331)

.github/workflows/ci-python.yml

@@ -11,6 +11,7 @@ on:
       - 'services/document-ingestion-service/**'
       - 'workers/analysis-worker/**'
       - 'workers/batch-ranking-worker/**'
+      - 'services/content-creator/**'
       - 'shared/telemetry/**'
   pull_request:
     paths:
@@ -22,6 +23,7 @@ on:
       - 'services/document-ingestion-service/**'
       - 'workers/analysis-worker/**'
       - 'workers/batch-ranking-worker/**'
+      - 'services/content-creator/**'
       - 'shared/telemetry/**'
 
 env:
@@ -128,6 +130,9 @@ jobs:
             batch-ranking-worker:
               - 'workers/batch-ranking-worker/**'
               - 'shared/telemetry/**'
+            content-creator:
+              - 'services/content-creator/**'
+              - 'shared/telemetry/**'
 
       - name: Build matrix of changed services
         id: set-matrix
@@ -141,6 +146,7 @@ jobs:
           [ "${{ steps.filter.outputs.document-ingestion-service }}" = "true" ] && SERVICES+=('services/document-ingestion-service')
           [ "${{ steps.filter.outputs.analysis-worker }}" = "true" ] && SERVICES+=('workers/analysis-worker')
           [ "${{ steps.filter.outputs.batch-ranking-worker }}" = "true" ] && SERVICES+=('workers/batch-ranking-worker')
+          [ "${{ steps.filter.outputs.content-creator }}" = "true" ] && SERVICES+=('services/content-creator')
           if [ ${#SERVICES[@]} -eq 0 ]; then
             echo 'matrix={"service":[]}' >> "$GITHUB_OUTPUT"
           else

docker-compose.yml

@@ -469,6 +469,43 @@ services:
     networks:
       - backend
 
+  content-creator:
+    <<: *runtime-hardening-strict
+    build:
+      context: .
+      dockerfile: services/content-creator/Dockerfile
+    image: curvit/content-creator:local
+    container_name: curvit-content-creator
+    restart: unless-stopped
+    environment:
+      APP_ENV: ${APP_ENV:-development}
+      LOG_LEVEL: "debug"
+      DATABASE_URL: "postgresql+asyncpg://curvit:${POSTGRES_PASSWORD}@postgres:5432/curvit"
+      AUTH_SECRET: ${AUTH_SECRET}
+      AUTH_ISSUER: https://app.curvit.local.co.uk
+      AUTH_AUDIENCE: curvit-api
+      INTERNAL_API_KEY: ${INTERNAL_API_KEY:-}
+      CMS_SERVICE_URL: "http://cms-service:8000"
+      # CONTENT_CREATOR_AI_API_KEY: placeholder — set when key is generated
+      CONTENT_CREATOR_AI_API_KEY: ${CONTENT_CREATOR_AI_API_KEY:-}
+      CONTENT_CREATOR_AI_MODEL: ${CONTENT_CREATOR_AI_MODEL:-claude-haiku-4-5-20251001}
+      PROMPT_VERSION: ${CONTENT_CREATOR_PROMPT_VERSION:-v1.0}
+    depends_on:
+      postgres:
+        condition: service_healthy
+      cms-service:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8000/health')"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 15s
+    # No public ingress — internal service only.
+    # No Traefik labels — content-creator is never exposed externally.
+    networks:
+      - backend
+
   messaging-service:
     <<: *runtime-hardening-strict
     build: