Add origin_app to APActivity — apps only process their own activities

Each app's EventProcessor now filters by origin_app so apps don't steal
each other's pending activities. emit_activity() and publish_activity()
auto-detect the app name from Quart's current_app.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

events/bus.py

@@ -86,6 +86,7 @@ async def emit_activity(
     source_id: int | None = None,
     visibility: str = "internal",
     actor_profile_id: int | None = None,
+    origin_app: str | None = None,
 ) -> APActivity:
     """
     Write an AP-shaped activity to ap_activities with process_state='pending'.
@@ -93,6 +94,13 @@ async def emit_activity(
     Called inside a service function using the same session that performs the
     domain change.  The activity and the change commit together.
     """
+    if not origin_app:
+        try:
+            from quart import current_app
+            origin_app = current_app.name
+        except (ImportError, RuntimeError):
+            pass
+
     activity_uri = f"internal:{uuid.uuid4()}" if visibility == "internal" else f"urn:uuid:{uuid.uuid4()}"
 
     activity = APActivity(
@@ -107,6 +115,7 @@ async def emit_activity(
         source_id=source_id,
         visibility=visibility,
         process_state="pending",
+        origin_app=origin_app,
     )
     session.add(activity)
     await session.flush()

events/processor.py

@@ -28,9 +28,11 @@ class EventProcessor:
     def __init__(
         self,
         *,
+        app_name: str | None = None,
         poll_interval: float = 2.0,
         batch_size: int = 10,
     ):
+        self._app_name = app_name
         self._poll_interval = poll_interval
         self._batch_size = batch_size
         self._task: asyncio.Task | None = None
@@ -70,12 +72,15 @@ class EventProcessor:
         """Fetch and process a batch of pending activities. Returns count processed."""
         processed = 0
         async with get_session() as session:
+            filters = [
+                APActivity.process_state == "pending",
+                APActivity.process_attempts < APActivity.process_max_attempts,
+            ]
+            if self._app_name:
+                filters.append(APActivity.origin_app == self._app_name)
             stmt = (
                 select(APActivity)
-                .where(
-                    APActivity.process_state == "pending",
-                    APActivity.process_attempts < APActivity.process_max_attempts,
-                )
+                .where(*filters)
                 .order_by(APActivity.created_at)
                 .limit(self._batch_size)
                 .with_for_update(skip_locked=True)