Package Go flake-update-cascade on nexus #41

Merged

vnprc merged 1 commit from agent/go-cascade-cutover into master

2026-09-08 21:43:45 +01:00

allod-agent commented

2026-09-08 18:23:40 +01:00

Member

After a human rebuild, nexus runs the Go flake-update-cascade with packaged git and Go forge; Nix still comes from the system PATH.
The command interface and other home packages stay the same; Bash remains in the tools input for rollback.
The actual generated cascade and forge packages build, cascade --help runs, and all seven other package derivations are unchanged with identical inputs.
Revert this packaging commit and rebuild if the cutover is wrong; the last-good tools revision supplied by archetypes is 536c8b387d0b7ba253a3fb7b399aa09bc92b5c6f.
Deploy only with the companion allod/archetypes#72 tools pin at merged revision cf09348cf3382f09a9100e0dfeb33aa0afabcb45 or later.

Risk

R3: this tool can commit and push workspace lock updates. Human merge and host rebuild gates remain; no machine has been rebuilt and no live cascade was run. Upstream Bash and parity tests must remain until dev VM and nexus rebuild validation passes. Nexus receives allod-tools from its consumer, so this PR has no lock update.

Validation

Imported the actual nix/home.nix using nexus locked nixpkgs on x86_64-linux and git-pinned tools cf09348cf3382f09a9100e0dfeb33aa0afabcb45; built its selected cascade and forge packages with nix build --impure --file /tmp/nexus-go-cascade-validation.nix cascade forge --no-link --print-out-paths.
Inspected the generated wrappers: cascade prefixes only git and the packaged Go forge; forge prefixes git. The cascade executable is wrapped and executable, with no jq, util-linux, or Nix wrapper additions.
Ran the generated cascade --help successfully under env -i PATH=/run/current-system/sw/bin.
Evaluated both old and new home modules with identical inputs; all seven non-cascade package derivation paths match exactly. Targeted evaluation confirms cmd/flake-update-cascade and cmd/forge subpackages. git diff --check passes.
Package-only validation; no full system rebuild or whole-flake check was run. Live dev VM and nexus validation remains a human gate.

Refs allod/tools#159

After a human rebuild, nexus runs the Go `flake-update-cascade` with packaged git and Go forge; Nix still comes from the system PATH. The command interface and other home packages stay the same; Bash remains in the tools input for rollback. The actual generated cascade and forge packages build, cascade `--help` runs, and all seven other package derivations are unchanged with identical inputs. Revert this packaging commit and rebuild if the cutover is wrong; the last-good tools revision supplied by archetypes is `536c8b387d0b7ba253a3fb7b399aa09bc92b5c6f`. Deploy only with the companion allod/archetypes#72 tools pin at merged revision `cf09348cf3382f09a9100e0dfeb33aa0afabcb45` or later. ## Risk R3: this tool can commit and push workspace lock updates. Human merge and host rebuild gates remain; no machine has been rebuilt and no live cascade was run. Upstream Bash and parity tests must remain until dev VM and nexus rebuild validation passes. Nexus receives `allod-tools` from its consumer, so this PR has no lock update. ## Validation - Imported the actual `nix/home.nix` using nexus locked nixpkgs on `x86_64-linux` and git-pinned tools `cf09348cf3382f09a9100e0dfeb33aa0afabcb45`; built its selected cascade and forge packages with `nix build --impure --file /tmp/nexus-go-cascade-validation.nix cascade forge --no-link --print-out-paths`. - Inspected the generated wrappers: cascade prefixes only git and the packaged Go forge; forge prefixes git. The cascade executable is wrapped and executable, with no jq, util-linux, or Nix wrapper additions. - Ran the generated cascade `--help` successfully under `env -i PATH=/run/current-system/sw/bin`. - Evaluated both old and new home modules with identical inputs; all seven non-cascade package derivation paths match exactly. Targeted evaluation confirms `cmd/flake-update-cascade` and `cmd/forge` subpackages. `git diff --check` passes. - Package-only validation; no full system rebuild or whole-flake check was run. Live dev VM and nexus validation remains a human gate. Refs allod/tools#159

allod-agent added 1 commit

2026-09-08 18:23:40 +01:00