LilithSemi/chock

Fork 0

feat: add nix tool #13

Open

TheComputerGuy wants to merge 41 commits from feat/nix-tool into master

TheComputerGuy commented

2026-09-19 08:15:57 +00:00

Owner

No description provided.

TheComputerGuy added 11 commits

2026-09-19 08:15:57 +00:00

feat(chock-nix): evaluate nix and send every store question to a seam 53b93ac41e

feat(chock-core): name a nix build and a nix run in the policy table 1401575eb2

feat(chock-policy): bound what one evaluation may add to the store ff946d763e

feat(chock-policy): ask before a store path this session did not start with c86abfb27f

feat(chock-core): let an agent evaluate a nix expression 9938469161

feat(chock-core): broker a nix build on the host and mount what it made 904c494476

refactor(chock-core): drop the run action namespace nothing names 267c5987ca

feat(chock-nix): realise the derivation this session wrote, not an installable 5d46884e7b

feat(chock-nix): put every fetch a build would make to the network policy 92e9ae02c7

feat(chock-nix): fetch a project's flake inputs once, under the network policy f64bdc64e5

fix(chock-nix): ask about a missing flake input when a person can answer 997ad74d0a

TheComputerGuy added 1 commit

2026-09-19 08:58:15 +00:00

fix: build the evaluator with llvm on x86_64, which has no tail call 9c67fa2b35

TheComputerGuy added 4 commits

2026-09-19 16:27:49 +00:00

fix: build the last two evaluator tests with llvm on x86_64 56d28d8b8a

feat(chock-nix): resolve a mirror url and pin the builder to what was allowed c1fa080b39

fix(chock-nix): force a value before rendering it, so no answer reads as code 01bc5e1ce3

fix: skip the trust store test where the machine has no bundle b6b979b230

TheComputerGuy added 9 commits

2026-09-19 22:55:45 +00:00

feat(chock-policy): allow a build that fetches without naming a host 4781d251b9

feat(chock-nix): read a mirrors list nix can substitute, and name an ftp host 1a12e636c1

feat(chock-nix): ask once for every host a build fetches from 833cd4fa81

chore: cut the comment volume to what the code cannot say 0970db4d3b

chore: cut the bold lead-ins and the release narrative 70ddfca081

feat(chock-policy): answer whether a rule named a key 9a9b1e71cf

feat(chock-proto): name the part of chock that wants an approval 0023ef3f50

feat(chock-nix): give a nix build its own egress namespace 6b6c68c649

chore: document the nix egress namespace and the approval source 8448586887

TheComputerGuy added 9 commits

2026-09-20 03:12:48 +00:00

chore(chock-core): keep the comments that carry a fact cb14da744a

chore: keep the comments that carry a fact in the cli 3b71374869

chore: keep the comments that carry a fact in run 2491b5428a

chore(chock-sandbox): keep the comments that carry a kernel fact 17818602e0

chore(chock-broker): keep the comments that carry a fact fd13900b66

chore(chock-policy): keep the comments that carry a fact eb530b7f90

chore: group the docs by task and split the oversized pages bbbef1cc61

fix: say that a plugin capability is asked at admit and per call 2a7c08ef0a

chore: keep the comments that carry a fact in the tests 3563bf7ba8

TheComputerGuy added 5 commits

2026-09-22 00:39:22 +00:00

feat(chock-core): read instructions from a file named on the command line ccb45ecb5e

feat(chock-workspace): bind the paths the worktree does not carry 83507e1707

feat(chock-nix): name the dev shell the tool environment comes from 2d429653b0

feat(chock-policy): take a policy rule on the command line dce08dca44

feat(chock-proto): record each run's configuration and its sandbox shape 80d010dd05

TheComputerGuy added 2 commits

2026-09-22 18:51:40 +00:00

fix: say why a session ended instead of dropping the reason 5cf336b574

fix: ask before replacing a credential instead of refusing the login 20a30ce671

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin feat/nix-tool:feat/nix-tool

git switch feat/nix-tool

Merge

Merge the changes and update on Forgejo.

git switch master

git merge --no-ff feat/nix-tool

git switch feat/nix-tool

git rebase master

git switch master

git merge --ff-only feat/nix-tool

git switch feat/nix-tool

git rebase master

git switch master

git merge --no-ff feat/nix-tool

git switch master

git merge --squash feat/nix-tool

git switch master

git merge --ff-only feat/nix-tool

git switch master

git merge feat/nix-tool

git push origin master

No reviewers

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

LilithSemi/chock!13

No description provided.

Rows
Columns