mesh-catalog/modules/mesh-build-go/module.json

{
  "module": "mesh-build-go",
  "version": "0.1",
  "packages": {
    "git.novox.be/novox/mesh-delivery/modules/mesh-delivery-builder/builds": "0.1",
    "git.novox.be/novox/mesh-catalog/modules/ssh-client/sshkeys": "0.1"
  },
  "moved": true,
  "runs-as": "mesh-build-go",
  "capabilities": [
    "package-manager",
    "seat-settle-delay",
    "user-namespaces"
  ],
  "state": [
    "toolchains",
    "keys",
    {
      "name": "steps",
      "ttl-seconds": 172800
    },
    "pauses"
  ],
  "claims": [
    {
      "name": "node-build-go",
      "scope": "node",
      "serves": [
        "current",
        "drop",
        "pause",
        "resume",
        "steps",
        "kept-artifact"
      ]
    }
  ],
  "consumes": [
    "mesh-conditions.findings-asked"
  ],
  "invokes": [
    "seat:mesh-hand-acts.hand-act",
    "mesh-delivery-indexer.indexer_read_manifests",
    "seat:oci-artifact-registry.publish",
    "seat:oci-artifact-registry.publish-part",
    "seat:go-package-registry.publish",
    "seat:go-package-registry.publish-part",
    "seat:mesh-delivery-checker.input",
    "seat:mesh-catalog.input",
    "seat:mesh-wants.input",
    "seat:mesh-module-assigner.assignments",
    "seat:mesh-catalog.module"
  ],
  "config": {
    "capacity": {
      "type": "number",
      "description": "How many asks of the Go build seat this module runs at once on this node (novox/hq ADR 0525 §5); 0 pulls nothing. It is set per node in the mesh's configuration; a node with no value builds nothing.",
      "minimum": 0,
      "default": 0
    },
    "build-hours": {
      "type": "string",
      "description": "When this node may take this module's build asks: one window HH:MM-HH:MM in the node's local time (an end before its start crosses midnight, 18:00-06:00). Outside it the node takes no new step and finishes the ones it runs; an empty value builds at any hour. It is set per node in the mesh's configuration.",
      "pattern": "|([01][0-9]|2[0-3]):[0-5][0-9]-([01][0-9]|2[0-3]):[0-5][0-9]",
      "default": ""
    },
    "cores-per-step": {
      "type": "number",
      "description": "How many processors one Go step of this module needs (a full check of a large repository takes what it is given: three at about 4 cores each ran past the 30-minute step bound on 2026-10-26). The capacity above is an upper bound: on each node the module runs at most floor(the cores of its build slice's CPU quota / this) steps at once, the quota read live from its cgroup (issue 1806), so a lowered build CPU share never starves its steps. Above 0.",
      "minimum": 0.1,
      "default": 6
    }
  },
  "tools": [
    "build_go_fetch",
    "build_go_test",
    "build_go_digest",
    "build_go_build",
    "build_go_imports",
    "build_go_release",
    "build_go_kept",
    "build_go_kept_drop",
    "build_go_step",
    "build_go_steps",
    "build_go_step_end",
    "build_go_toolchains",
    "build_go_status",
    "build_go_health"
  ],
  "requires": [
    {
      "name": "detected-steps",
      "storage": "key-value",
      "template": "state",
      "options": {
        "history": 1
      }
    },
    {
      "name": "kept-builds",
      "storage": "object-store",
      "template": "objects",
      "options": {
        "max-mib": 1024
      }
    },
    "artifact-store",
    "forge-account",
    "go-toolchain",
    "go-package-registry",
    "node-tools",
    {
      "name": "findings",
      "storage": "key-value",
      "template": "state"
    },
    {
      "name": "finding-events",
      "storage": "stream",
      "template": "events",
      "options": {
        "events": [
          "finding-written.*",
          "finding-cleared.*",
          "findings-stated.*"
        ],
        "max-age-days": 7,
        "max-mib": 16
      }
    }
  ],
  "binds": {
    "artifact-store": "${dir:state}/artifact-store.json",
    "go-package-registry": "${dir:state}/go-package-registry.json"
  },
  "own-secrets": {
    "broker": "${dir:state}/broker"
  },
  "secrets-owner": "mesh-build-go",
  "runtime-health": {
    "kind": "tool",
    "tool": "build_go_health",
    "interval": "60s",
    "timeout": "10s",
    "looks": 2,
    "grace": "60s"
  },
  "resources": [
    {
      "id": "account",
      "type": "user",
      "name": "mesh-build-go",
      "shell": "/usr/bin/nologin",
      "home": "/var/lib/mesh-build-go"
    },
    {
      "id": "state",
      "type": "directory",
      "mode": "0700",
      "owner": "mesh-build-go",
      "place": ".",
      "unknown": "program"
    },
    {
      "id": "work",
      "type": "directory",
      "path": "/var/lib/mesh-build-go-work",
      "mode": "0700",
      "owner": "mesh-build-go",
      "unknown": "program"
    },
    {
      "id": "cache",
      "type": "directory",
      "path": "/var/lib/mesh-build-go-cache",
      "mode": "0700",
      "owner": "mesh-build-go",
      "unknown": "program"
    },
    {
      "id": "settings",
      "trusted": false,
      "type": "file",
      "path": "${dir:state}/settings.json",
      "mode": "0600",
      "owner": "mesh-build-go",
      "takes-config": [
        "capacity",
        "cores-per-step",
        "build-hours"
      ],
      "merge": "json",
      "template": "files/settings.json"
    },
    {
      "id": "ssh-dir",
      "type": "directory",
      "path": "${dir:state}/.ssh",
      "mode": "0700",
      "owner": "mesh-build-go",
      "unknown": "program"
    },
    {
      "id": "ssh-config",
      "type": "file",
      "path": "${dir:ssh-dir}/config",
      "owner": "mesh-build-go",
      "mode": "0600",
      "template": "files/forge"
    },
    {
      "id": "known-hosts",
      "type": "file",
      "path": "${dir:ssh-dir}/known_hosts",
      "owner": "mesh-build-go",
      "mode": "0644",
      "template": "files/known_hosts"
    },
    {
      "id": "git-config",
      "type": "file",
      "path": "${dir:state}/.config/git/config",
      "owner": "mesh-build-go",
      "mode": "0644",
      "template": "files/gitconfig"
    },
    {
      "id": "git",
      "type": "package",
      "package": "git"
    },
    {
      "id": "openssh",
      "type": "package",
      "package": "openssh"
    },
    {
      "id": "bubblewrap",
      "type": "package",
      "package": "bubblewrap"
    },
    {
      "id": "postgresql",
      "type": "package",
      "package": "postgresql"
    }
  ],
  "build": {
    "artifacts": [
      {
        "name": "tools",
        "kind": "bundle",
        "language": "go",
        "system": "arch",
        "from": "cmd/mesh-build-go",
        "binary": "mesh-build-go",
        "loads": [
          "mesh-build-go"
        ]
      },
      {
        "name": "files",
        "kind": "archive",
        "from": "files"
      }
    ]
  }
}