feat(sdk): add out of the box controls - part 1

[namrataghadi-galileo]

Summary

• Added Phase 1 out-of-box controls bootstrap tooling so startup can safely seed controls later without duplicating rows or blocking pod startup.
• Added evaluator gating, namespace-aware seeding, initial version creation, idempotency, duplicate-name race handling, and fail-open lifespan integration.

Scope

• User-facing/API changes: None.
• Internal changes: New agent_control_server.bootstrap module, startup seeding hook, and bootstrap tests.
• Out of scope: Actual OOTB control definitions, Phase 2 regex/json/list templates, and Phase 3 Luna metadata seeding.

Risk and Rollout

• Risk level: low
• Rollback plan: Remove the lifespan call to seed_out_of_box_controls and/or revert the bootstrap module and related tests.

Testing

• Added or updated automated tests
• Ran make check (not run because uv dependency resolution hit private index 401s)
• Manually verified behavior via targeted tests, server lint, and server mypy using the existing .venv

Checklist

• Linked issue/spec (Phase 1 from OOTB controls technical spec)
• Updated docs/examples for user-facing changes: N/A, no user-facing changes
• Included any required follow-up tasks in .md format: Phase 2 follow-up not yet added as a separate .md file

[codecov]

Codecov Report

❌ Patch coverage is 92.42424% with 10 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
...nt_control_server/bootstrap/out_of_box_controls.py	91.96%	9 Missing ⚠️
server/src/agent_control_server/main.py	90.90%	1 Missing ⚠️

📢 Thoughts on this report? Let us know!

[abhinav-galileo]

Using an active, mutable name as the seed identity resurrects deleted controls and duplicates renamed ones on the next standalone startup. Could we persist an immutable seed/source ID plus an explicit opt-out tombstone, and cover delete/rename followed by reseeding?

[namrataghadi-galileo]

Implemented. Out-of-box controls now persist an immutable, namespace-scoped source_id, and deleting a seeded control records an explicit opt-out tombstone. Reseeding resolves by source ID, so renamed controls are preserved and deleted controls are not resurrected. Added regression coverage for both rename → reseed and delete → reseed scenarios.

[abhinav-galileo]

The try/except is fail-open only after this await returns. A database lock wait can hold startup before lifespan yields, especially because statement timeouts may be disabled. Please bound the whole bootstrap, or set a local lock timeout and retry later.

[namrataghadi-galileo]

Addressed. The full OOTB bootstrap await is now bounded by a configurable timeout (10 seconds by default). If it blocks, the operation is cancelled and startup continues fail-open with a warning. Added lifespan coverage using a seed coroutine that never returns.