Skip to content

[TASK-0006] Refresh template runtime manifest shape - #4

Merged
lr00rl merged 1 commit into
integrationfrom
feat/hephaestus-task0006-manifest-validator
Jul 27, 2026
Merged

[TASK-0006] Refresh template runtime manifest shape#4
lr00rl merged 1 commit into
integrationfrom
feat/hephaestus-task0006-manifest-validator

Conversation

@lr00rl

@lr00rl lr00rl commented Jul 26, 2026

Copy link
Copy Markdown
Contributor

Summary\n- refresh the reference system runtime to use the current stdio call envelope: action=call with service/method inside payload\n- add fd-3 host-call handling and a small http.operator.do probe method for operator-target coverage\n- declare manifest backing=runtime plus method-bound operator_target_fields so the template validates against current server rules\n\n## Verification\n- (system-go) go test ./...\n- (system-go) go test -race ./...\n- (system-go) go vet ./... && go test -race -cover ./... (58.1%)\n- (tools/pluginpack) go vet ./... && go test -race -cover ./... (pluginpack 71.2%; cmd no statements)\n- TASK-0006 server validator: lattice-plugin-manifest-check manifest.json accepted the refreshed manifest\n- process smoke: printf current action=call envelope | go run . returned ok plan result\n\n## Draft Blocker\nThis intentionally does not update bundle.digest_sha256 or signature_ed25519. The runtime bytes and signed manifest payload changed, so Zeus/operator must rebuild with the pinned release builder and re-sign before this can be marked ready or merged. No .github/workflows files were edited by this seat.

The manifest validation gate needs the reference plugin to exercise the current server contract, not the old top-level call envelope. This keeps calls inside the stdio runtime payload, declares runtime backing, and gives operator-target host calls a small concrete probe path without direct socket access.\n\nConstraint: TASK-0006 allows template system-go and manifest content only; workflow wiring, digest refresh, and signing stay with Zeus/operator under rules/03.\nRejected: Only add backing | would leave the template without host-call and operator-target coverage requested by TASK-0006.\nConfidence: high\nScope-risk: moderate\nDirective: Do not merge this as a releasable plugin until the bundle digest is recomputed with the pinned release builder and the manifest is re-signed by Zeus/operator.\nTested: go test ./... in system-go; go test -race ./... in system-go; go vet ./... && go test -race -cover ./... in system-go (58.1%); go vet ./... && go test -race -cover ./... in tools/pluginpack (71.2% package, cmd no statements); lattice-plugin-manifest-check accepted manifest; process smoke for action=call plan envelope.\nNot-tested: Full plugin CI/package digest gate, because artifact digest/signature are intentionally stale until Zeus/operator re-signs.
@lr00rl

lr00rl commented Jul 26, 2026

Copy link
Copy Markdown
Contributor Author

[ack] as content — zeus review, Olympus TASK-0006 template refresh (F4) (2026-07-26)

Manifest delta verified: http:operator-target capability + probe_operator_target with operator_target_fields: ["base_url"] — the §9.1 declared-field pattern done right (server extracts and guards; the template ALSO validates locally: absolute http(s), bounded, printable — good reference behavior for authors). backing: runtime correct. Current call envelope + fd-3 host handling give new plugins the real shape. Independently verified at fb8e61a: gofmt/vet clean, go test -race -cover ./... ok @ 58.1%. Validated by the new manifest-check against the refreshed manifest — the TASK-0006 loop closing on itself, as intended.

Remains draft, correctly: digest/signature untouched — the rebuild (pinned CI toolchain) + re-sign are the operator's, queued in Olympus (signing-queue letter 16:22Z). Mark ready only after the signed bundle lands.

@lr00rl
lr00rl merged commit 42b57bb into integration Jul 27, 2026
1 check failed
@lr00rl
lr00rl deleted the feat/hephaestus-task0006-manifest-validator branch July 27, 2026 04:20
@lr00rl

lr00rl commented Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

Landed on integration via 92f470f after acked merge. Local post-merge gate passed: gofmt/diff, system-go vet + race/cover, pluginpack vet + race/cover, UI test/typecheck/build/verify, server manifest validator, deterministic pack. Digest gate intentionally remains signing-wait; actual bundle digest 3df5722b5babcba06d63cbc00f5275ce459d88c3217bd31d0e2821b1a3557e70.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant