diff --git a/hive-c0re/src/meta.rs b/hive-c0re/src/meta.rs index a9d013b7..9b602407 100644 --- a/hive-c0re/src/meta.rs +++ b/hive-c0re/src/meta.rs @@ -1,20 +1,8 @@ //! Single hive-c0re-owned flake at `/var/lib/hyperhive/meta/` that -//! consumes every agent's applied repo as a flake input and exports one -//! `nixosConfiguration` per agent. Containers run against -//! `--flake /var/lib/hyperhive/meta#`; lifecycle ops here drive the -//! lock file so meta's git log is the system-wide deploy audit trail. -//! -//! Flow: -//! - `sync_agents` (idempotent) — render `flake.nix` for the current -//! agent set, init the repo on first call, relock if the rendered -//! contents changed, commit. Used by spawn / destroy / startup -//! migration. -//! - `prepare_deploy` + `finalize_deploy` / `abort_deploy` — two-phase -//! for the `request_apply_commit` path so a failed -//! `nixos-container update` leaves no orphan commit in meta. Prepare -//! writes the new lock without committing; finalize commits with the -//! deploy message; abort `git restore`s the lock back. -//! - `lock_update_hyperhive` — one-shot for the auto-update path. +//! exports one `nixosConfiguration` per agent and drives the system-wide +//! deploy audit trail. Flow (`sync_agents`, two-phase `prepare_deploy` / +//! `finalize_deploy` / `abort_deploy`, `lock_update_hyperhive`): +//! `docs/approvals.md::Meta flake`. use std::path::{Path, PathBuf};