mesh-tools
652b00b25b
mesh/merge-gate checking again: the gate refused `unknown` because the controller judged with a node-engine validator pinned before mesh-host #117; mesh-co…
mesh/repo-check checking again: the gate refused `unknown` because the controller judged with a node-engine validator pinned before mesh-host #117; mesh-co…
mesh/delivery-group group feat/owned-paths checking: 0 of 2 member(s) ready
mesh/delivery superseded: a newer head of the same pull request
Every directory and archive resource carries `unknown`: move-out for a home folder whose program writes nothing there (the node-engine, delivered in mesh-host #117, moves the rest to ~/.local/state/mesh-moved/<module>/ with a list), module for ~/.ssh and ~/.claude, program elsewhere; `knows` keeps what a program or the operator relies on (powerlevel10k's compiled files, i3's scripts and the asus/g14 drop-ins, dunst's slack rule, betterbird's records, node-env's forge credential, issue 1033). Two shared folders are no longer declared. Each module's README says it. checks/owned holds every manifest to it; checks/sshdir stays while main's merge check runs it (issue 1035). Tests that pin a manifest follow the new key only. Reviewed in three rounds.
143 lines
3.3 KiB
JSON
143 lines
3.3 KiB
JSON
{
|
|
"module": "build-agent",
|
|
"version": "1",
|
|
"slug": "agent",
|
|
"capabilities": [
|
|
"container-runtime"
|
|
],
|
|
"claims": [
|
|
{
|
|
"name": "node-build-agent",
|
|
"scope": "node",
|
|
"serves": ["current", "kill", "pause", "resume"]
|
|
}
|
|
],
|
|
"reads": [
|
|
"mesh-delivery.pulls"
|
|
],
|
|
"requires": [
|
|
"artifact-store",
|
|
{
|
|
"name": "npm-package-registry",
|
|
"optional": true
|
|
}
|
|
],
|
|
"binds": {
|
|
"npm-package-registry": "${dir:mesh-state}/package-registry.json"
|
|
},
|
|
"secrets": {
|
|
"npm-package-registry": "${dir:mesh-state}/package-registry.secret"
|
|
},
|
|
"own-secrets": {
|
|
"broker": "${dir:mesh-state}/broker",
|
|
"genesis-package-registry": {
|
|
"path": "${dir:mesh-state}/genesis-package-registry.json",
|
|
"issued-by": "outside"
|
|
}
|
|
},
|
|
"data": {
|
|
"own": [
|
|
{
|
|
"id": "workspace",
|
|
"path": "${dir:workspace}",
|
|
"class": "cache",
|
|
"why": "a build's working copy, cloned again for every build"
|
|
},
|
|
{
|
|
"id": "judge-cache",
|
|
"path": "${dir:judge-cache}",
|
|
"class": "cache",
|
|
"why": "the Go cache every merge check's judge is built with and the release-branch judges kept per head; mounted into judge builds only, never into a check's containers (novox/hq ADR 0358 §6)"
|
|
}
|
|
]
|
|
},
|
|
"resources": [
|
|
{
|
|
"id": "mesh-state",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"place": "mesh",
|
|
"unknown": "program"
|
|
},
|
|
{
|
|
"id": "workspace",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"unknown": "program"
|
|
},
|
|
{
|
|
"id": "judge-cache",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"unknown": "program"
|
|
},
|
|
{
|
|
"id": "agent-env",
|
|
"type": "file",
|
|
"path": "${dir:mesh-state}/build-agent.env",
|
|
"mode": "0600",
|
|
"template": "files/build-agent.env"
|
|
},
|
|
{
|
|
"id": "server",
|
|
"type": "container",
|
|
"name": "mesh-build-agent",
|
|
"artifact": "server",
|
|
"env-file": [
|
|
"${dir:mesh-state}/build-agent.env"
|
|
],
|
|
"volumes": [
|
|
"${dir:mesh-state}:/run/mesh:ro",
|
|
"${dir:workspace}:${dir:workspace}",
|
|
"${dir:judge-cache}:${dir:judge-cache}",
|
|
"/var/run/docker.sock:/var/run/docker.sock"
|
|
],
|
|
"restart-on": [
|
|
"agent-env"
|
|
],
|
|
"network": "host",
|
|
"health": {
|
|
"kind": "exec",
|
|
"command": "/usr/local/bin/mesh-builder ready",
|
|
"interval": "10s",
|
|
"timeout": "5s",
|
|
"looks": 3,
|
|
"grace": "60s"
|
|
},
|
|
"busy": {
|
|
"command": "/usr/local/bin/mesh-builder busy"
|
|
}
|
|
}
|
|
],
|
|
"build": {
|
|
"artifacts": [
|
|
{
|
|
"name": "server",
|
|
"kind": "image",
|
|
"from": "Dockerfile",
|
|
"compiles": "cmd/mesh-builder",
|
|
"context": {
|
|
"seat": "git",
|
|
"repository": "novox/mesh-controller",
|
|
"ref": "main"
|
|
}
|
|
},
|
|
{
|
|
"name": "files",
|
|
"kind": "archive",
|
|
"from": "files"
|
|
}
|
|
],
|
|
"on": [
|
|
{
|
|
"arg": "GO_BASE",
|
|
"image": "golang@sha256:8ac98ca534ac3f51e1f420a1dd2c15e74c75cfa0f23f3ad27eb5d7236c349a0c"
|
|
},
|
|
{
|
|
"arg": "ALPINE_BASE",
|
|
"image": "alpine@sha256:d9e853e87e55526f6b2917df91a2115c36dd7c696a35be12163d44e6e2a4b6bc"
|
|
}
|
|
]
|
|
}
|
|
}
|