download an agent's cached closure in prebuild, building locally when that fails

hive-priv/src/main.rs

@@ -20,10 +20,11 @@
 //! dispatch table. Each op family's handlers and validation live in their
 //! own module: [`container`] (lifecycle), [`container_config`] (nspawn flags,
 //! systemd drop-ins), [`storage`] (btrfs subvolumes, quotas, snapshots, disk
-//! measurement), [`files`] (pause marker, socket dir, legacy tmpfiles) and
-//! [`infra`] (gateway nginx, infra containers). Helpers more than
-//! one family uses are in [`shared`].
+//! measurement), [`files`] (pause marker, socket dir, legacy tmpfiles), [`infra`] (gateway nginx,
+//! infra containers) and [`closure`] (downloads from the swarm cache). Helpers
+//! more than one family uses are in [`shared`].
 
+mod closure;
 mod container;
 mod container_config;
 mod files;
@@ -361,6 +362,11 @@ async fn exec(
             ref meta_rev,
         } => container::container_flake_action("create", name, meta_rev, stream, writer).await,
 
+        PrivRequest::RealiseClosure {
+            ref agent,
+            ref store_path,
+        } => closure::realise_closure(agent, store_path).await,
+
         PrivRequest::DestroyContainer { ref name } => container::destroy_container(name).await,
 
         PrivRequest::ListContainers => container::container_run(&["list"]).await,