feat: e2e event-driven code-review agent (TLS + NATS)

[tgarciai]

Summary

New e2e test proving the core underpass-ai reactive loop:

NATS event → agent wakes up → runtime session (HTTPS/TLS) →
  tool discovery (70 tools) → write code → analyze → write review →
    NATS completion event

Use case: A code-review-agent receives task.assigned via NATS. It creates a session on the runtime over TLS, writes Go source code with a real bug (unchecked os.ReadFile error), reads and analyzes it, writes a REVIEW.md with 3 findings and REQUEST CHANGES verdict, then publishes task.completed back to NATS.

• 5 tool invocations over HTTPS (fs.write_file, fs.read_file, fs.list)
• NATS pub/sub round-trip verified
• 10 steps, all passed

Cluster evidence

OK Subscribed to workspace.task.completed
OK Published task pr-review-6c71cdcd
OK Session: session-938fbe150433a867
OK Discovered 70 tools
OK handlers.go written (752 bytes)
OK Code analyzed: 752 bytes, unchecked-error bug=found
OK REVIEW.md written (1341 bytes)
OK Workspace: 2 files — handlers.go=yes, REVIEW.md=yes
OK Review verified: 1341 bytes, verdict=REQUEST CHANGES
OK NATS round-trip verified: task_id=pr-review-6c71cdcd
OK Event-Driven Agent E2E PASSED — 5 invocations over TLS

Test plan

• Ran on live cluster with tls.mode=server (rev 23)
• NATS running in namespace
• Pod Completed, job succeeded
• No sensitive data in test code

🤖 Generated with Claude Code

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud