mesh-adminandClaude Opus 5.5
47ef2644ac
mesh/merge-gate head 47ef2644aca1 merged into trunk e22326240833 — pass: builds build-agent, gitea → ace, g14, novox, shanks; no bus step; every machine co…
mesh/repo-check head 47ef2644aca1 merged into trunk e22326240833 — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-…
mesh/delivery delivered
mesh/delivery-group group fix/704-release-branch-judge delivered: every member is delivered
Every merge check's judge is built where no pull request can reach (hq ADR 0358 §6, issue 704): the build agent needs a directory beside its workspace, mounted at the same path, that only judge builds mount. ADR 0358 §5 already holds in the forge's holder; this test keeps it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
132 lines
3.4 KiB
JSON
132 lines
3.4 KiB
JSON
{
|
|
"module": "build-agent",
|
|
"version": "1",
|
|
"slug": "agent",
|
|
"capabilities": [
|
|
"container-runtime"
|
|
],
|
|
"claims": [
|
|
{
|
|
"name": "node-build-agent",
|
|
"scope": "node",
|
|
"serves": ["current", "kill", "pause", "resume"]
|
|
}
|
|
],
|
|
"requires": [
|
|
"artifact-store",
|
|
{
|
|
"name": "npm-package-registry",
|
|
"optional": true
|
|
}
|
|
],
|
|
"binds": {
|
|
"npm-package-registry": "${dir:mesh-state}/package-registry.json"
|
|
},
|
|
"secrets": {
|
|
"npm-package-registry": "${dir:mesh-state}/package-registry.secret"
|
|
},
|
|
"own-secrets": {
|
|
"broker": "${dir:mesh-state}/broker",
|
|
"genesis-package-registry": {
|
|
"path": "${dir:mesh-state}/genesis-package-registry.json",
|
|
"issued-by": "outside"
|
|
}
|
|
},
|
|
"data": {
|
|
"own": [
|
|
{
|
|
"id": "workspace",
|
|
"path": "${dir:workspace}",
|
|
"class": "cache",
|
|
"why": "a build's working copy, cloned again for every build"
|
|
},
|
|
{
|
|
"id": "judge-cache",
|
|
"path": "${dir:judge-cache}",
|
|
"class": "cache",
|
|
"why": "the Go cache every merge check's judge is built with and the release-branch judges kept per head; mounted into judge builds only, never into a check's containers (novox/hq ADR 0358 §6)"
|
|
}
|
|
]
|
|
},
|
|
"resources": [
|
|
{
|
|
"id": "mesh-state",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"place": "mesh"
|
|
},
|
|
{
|
|
"id": "workspace",
|
|
"type": "directory",
|
|
"mode": "0700"
|
|
},
|
|
{
|
|
"id": "judge-cache",
|
|
"type": "directory",
|
|
"mode": "0700"
|
|
},
|
|
{
|
|
"id": "agent-env",
|
|
"type": "file",
|
|
"path": "${dir:mesh-state}/build-agent.env",
|
|
"mode": "0600",
|
|
"content": "MESH_BROKER_FILE=/run/mesh/broker\nMESH_NODE=${machine:name}\nMESH_REGISTRY=${bound:artifact-store:at}:${bound:artifact-store:port}\nMESH_PACKAGE_BINDING=/run/mesh/package-registry.json\nMESH_NPM_TOKEN_FILE=/run/mesh/package-registry.secret\nMESH_GENESIS_PACKAGE_REGISTRY=/run/mesh/genesis-package-registry.json\nMESH_WORKSPACE=${dir:workspace}\nMESH_JUDGE_CACHE=${dir:judge-cache}\n"
|
|
},
|
|
{
|
|
"id": "server",
|
|
"type": "container",
|
|
"name": "mesh-build-agent",
|
|
"artifact": "server",
|
|
"env-file": [
|
|
"${dir:mesh-state}/build-agent.env"
|
|
],
|
|
"volumes": [
|
|
"${dir:mesh-state}:/run/mesh:ro",
|
|
"${dir:workspace}:${dir:workspace}",
|
|
"${dir:judge-cache}:${dir:judge-cache}",
|
|
"/var/run/docker.sock:/var/run/docker.sock"
|
|
],
|
|
"restart-on": [
|
|
"agent-env"
|
|
],
|
|
"network": "host",
|
|
"health": {
|
|
"kind": "exec",
|
|
"command": "/usr/local/bin/mesh-builder ready",
|
|
"interval": "10s",
|
|
"timeout": "5s",
|
|
"looks": 3,
|
|
"grace": "60s"
|
|
},
|
|
"busy": {
|
|
"command": "/usr/local/bin/mesh-builder busy"
|
|
}
|
|
}
|
|
],
|
|
"build": {
|
|
"artifacts": [
|
|
{
|
|
"name": "server",
|
|
"kind": "image",
|
|
"from": "Dockerfile",
|
|
"compiles": "cmd/mesh-builder",
|
|
"context": {
|
|
"seat": "git",
|
|
"repository": "novox/mesh-controller",
|
|
"ref": "main"
|
|
}
|
|
}
|
|
],
|
|
"on": [
|
|
{
|
|
"arg": "GO_BASE",
|
|
"image": "golang@sha256:8ac98ca534ac3f51e1f420a1dd2c15e74c75cfa0f23f3ad27eb5d7236c349a0c"
|
|
},
|
|
{
|
|
"arg": "ALPINE_BASE",
|
|
"image": "alpine@sha256:d9e853e87e55526f6b2917df91a2115c36dd7c696a35be12163d44e6e2a4b6bc"
|
|
}
|
|
]
|
|
}
|
|
}
|