Squad Test

This commit is contained in:
Stef Heyenrath
2026-04-16 16:29:28 +02:00
parent 6e2a4d7e04
commit facd2b66ca
127 changed files with 14965 additions and 1 deletions
+287
View File
@@ -0,0 +1,287 @@
---
name: "distributed-mesh"
description: "How to coordinate with squads on different machines using git as transport"
domain: "distributed-coordination"
confidence: "high"
source: "multi-model-consensus (Opus 4.6, Sonnet 4.5, GPT-5.4)"
---
## SCOPE
**✅ THIS SKILL PRODUCES (exactly these, nothing more):**
1. **`mesh.json`** — Generated from user answers about zones and squads (which squads participate, what zone each is in, paths/URLs for each), using `mesh.json.example` in this skill's directory as the schema template
2. **`sync-mesh.sh` and `sync-mesh.ps1`** — Copied from this skill's directory into the project root (these are bundled resources, NOT generated code)
3. **Zone 2 state repo initialization** (if applicable) — If the user specified a Zone 2 shared state repo, run `sync-mesh.sh --init` to scaffold the state repo structure
4. **A decision entry** in `.squad/decisions/inbox/` documenting the mesh configuration for team awareness
**❌ THIS SKILL DOES NOT PRODUCE:**
- **No application code** — No validators, libraries, or modules of any kind
- **No test files** — No test suites, test cases, or test scaffolding
- **No GENERATING sync scripts** — They are bundled with this skill as pre-built resources. COPY them, don't generate them.
- **No daemons or services** — No background processes, servers, or persistent runtimes
- **No modifications to existing squad files** beyond the decision entry (no changes to team.md, routing.md, agent charters, etc.)
**Your role:** Configure the mesh topology and install the bundled sync scripts. Nothing more.
## Context
When squads are on different machines (developer laptops, CI runners, cloud VMs, partner orgs), the local file-reading convention still works — but remote files need to arrive on your disk first. This skill teaches the pattern for distributed squad communication.
**When this applies:**
- Squads span multiple machines, VMs, or CI runners
- Squads span organizations or companies
- An agent needs context from a squad whose files aren't on the local filesystem
**When this does NOT apply:**
- All squads are on the same machine (just read the files directly)
## Patterns
### The Core Principle
> "The filesystem is the mesh, and git is how the mesh crosses machine boundaries."
The agent interface never changes. Agents always read local files. The distributed layer's only job is to make remote files appear locally before the agent reads them.
### Three Zones of Communication
**Zone 1 — Local:** Same filesystem. Read files directly. Zero transport.
**Zone 2 — Remote-Trusted:** Different host, same org, shared git auth. Transport: `git pull` from a shared repo. This collapses Zone 2 into Zone 1 — files materialize on disk, agent reads them normally.
**Zone 3 — Remote-Opaque:** Different org, no shared auth. Transport: `curl` to fetch published contracts (SUMMARY.md). One-way visibility — you see only what they publish.
### Agent Lifecycle (Distributed)
```
1. SYNC: git pull (Zone 2) + curl (Zone 3) — materialize remote state
2. READ: cat .mesh/**/state.md — all files are local now
3. WORK: do their assigned work (the agent's normal task, NOT mesh-building)
4. WRITE: update own billboard, log, drops
5. PUBLISH: git add + commit + push — share state with remote peers
```
Steps 24 are identical to local-only. Steps 1 and 5 are the entire distributed extension. **Note:** "WORK" means the agent performs its normal squad duties — it does NOT mean "build mesh infrastructure."
### The mesh.json Config
```json
{
"squads": {
"auth-squad": { "zone": "local", "path": "../auth-squad/.mesh" },
"ci-squad": {
"zone": "remote-trusted",
"source": "git@github.com:our-org/ci-squad.git",
"ref": "main",
"sync_to": ".mesh/remotes/ci-squad"
},
"partner-fraud": {
"zone": "remote-opaque",
"source": "https://partner.dev/squad-contracts/fraud/SUMMARY.md",
"sync_to": ".mesh/remotes/partner-fraud",
"auth": "bearer"
}
}
}
```
Three zone types, one file. Local squads need only a path. Remote-trusted need a git URL. Remote-opaque need an HTTP URL.
### Write Partitioning
Each squad writes only to its own directory (`boards/{self}.md`, `squads/{self}/*`, `drops/{date}-{self}-*.md`). No two squads write to the same file. Git push/pull never conflicts. If push fails ("branch is behind"), the fix is always `git pull --rebase && git push`.
### Trust Boundaries
Trust maps to git permissions:
- **Same repo access** = full mesh visibility
- **Read-only access** = can observe, can't write
- **No access** = invisible (correct behavior)
For selective visibility, use separate repos per audience (internal, partner, public). Git permissions ARE the trust negotiation.
### Phased Rollout
- **Phase 0:** Convention only — document zones, agree on mesh.json fields, manually run `git pull`/`git push`. Zero new code.
- **Phase 1:** Sync script (~30 lines bash or PowerShell) when manual sync gets tedious.
- **Phase 2:** Published contracts + curl fetch when a Zone 3 partner appears.
- **Phase 3:** Never. No MCP federation, A2A, service discovery, message queues.
**Important:** Phases are NOT auto-advanced. These are project-level decisions — you start at Phase 0 (manual sync) and only move forward when the team decides complexity is justified.
### Mesh State Repo
The shared mesh state repo is a plain git repository — NOT a Squad project. It holds:
- One directory per participating squad
- Each directory contains at minimum a SUMMARY.md with the squad's current state
- A root README explaining what the repo is and who participates
No `.squad/` folder, no agents, no automation. Write partitioning means each squad only pushes to its own directory. The repo is a rendezvous point, not an intelligent system.
If you want a squad that *observes* mesh health, that's a separate Squad project that lists the state repo as a Zone 2 remote in its `mesh.json` — it does NOT live inside the state repo.
## Examples
### Developer Laptop + CI Squad (Zone 2)
Auth-squad agent wakes up. `git pull` brings ci-squad's latest results. Agent reads: "3 test failures in auth module." Adjusts work. Pushes results when done. **Overhead: one `git pull`, one `git push`.**
### Two Orgs Collaborating (Zone 3)
Payment-squad fetches partner's published SUMMARY.md via curl. Reads: "Risk scoring v3 API deprecated April 15. New field `device_fingerprint` required." The consuming agent (in payment-squad's team) reads this information and uses it to inform its work — for example, updating payment integration code to include the new field. Partner can't see payment-squad's internals.
### Same Org, Shared Mesh Repo (Zone 2)
Three squads on different machines. One shared git repo holds the mesh. Each squad: `git pull` before work, `git push` after. Write partitioning ensures zero merge conflicts.
## AGENT WORKFLOW (Deterministic Setup)
When a user invokes this skill to set up a distributed mesh, follow these steps **exactly, in order:**
### Step 1: ASK the user for mesh topology
Ask these questions (adapt phrasing naturally, but get these answers):
1. **Which squads are participating?** (List of squad names)
2. **For each squad, which zone is it in?**
- `local` — same filesystem (just need a path)
- `remote-trusted` — different machine, same org, shared git access (need git URL + ref)
- `remote-opaque` — different org, no shared auth (need HTTPS URL to published contract)
3. **For each squad, what's the connection info?**
- Local: relative or absolute path to their `.mesh/` directory
- Remote-trusted: git URL (SSH or HTTPS), ref (branch/tag), and where to sync it to locally
- Remote-opaque: HTTPS URL to their SUMMARY.md, where to sync it, and auth type (none/bearer)
4. **Where should the shared state live?** (For Zone 2 squads: git repo URL for the mesh state, or confirm each squad syncs independently)
### Step 2: GENERATE `mesh.json`
Using the answers from Step 1, create a `mesh.json` file at the project root. Use `mesh.json.example` from THIS skill's directory (`.squad/skills/distributed-mesh/mesh.json.example`) as the schema template.
Structure:
```json
{
"squads": {
"<squad-name>": { "zone": "local", "path": "<relative-or-absolute-path>" },
"<squad-name>": {
"zone": "remote-trusted",
"source": "<git-url>",
"ref": "<branch-or-tag>",
"sync_to": ".mesh/remotes/<squad-name>"
},
"<squad-name>": {
"zone": "remote-opaque",
"source": "<https-url-to-summary>",
"sync_to": ".mesh/remotes/<squad-name>",
"auth": "<none|bearer>"
}
}
}
```
Write this file to the project root. Do NOT write any other code.
### Step 3: COPY sync scripts
Copy the bundled sync scripts from THIS skill's directory into the project root:
- **Source:** `.squad/skills/distributed-mesh/sync-mesh.sh`
- **Destination:** `sync-mesh.sh` (project root)
- **Source:** `.squad/skills/distributed-mesh/sync-mesh.ps1`
- **Destination:** `sync-mesh.ps1` (project root)
These are bundled resources. Do NOT generate them — COPY them directly.
### Step 4: RUN `--init` (if Zone 2 state repo exists)
If the user specified a Zone 2 shared state repo in Step 1, run the initialization:
**On Unix/Linux/macOS:**
```bash
bash sync-mesh.sh --init
```
**On Windows:**
```powershell
.\sync-mesh.ps1 -Init
```
This scaffolds the state repo structure (squad directories, placeholder SUMMARY.md files, root README).
**Skip this step if:**
- No Zone 2 squads are configured (local/opaque only)
- The state repo already exists and is initialized
### Step 5: WRITE a decision entry
Create a decision file at `.squad/decisions/inbox/<your-agent-name>-mesh-setup.md` with this content:
```markdown
### <YYYY-MM-DD>: Mesh configuration
**By:** <your-agent-name> (via distributed-mesh skill)
**What:** Configured distributed mesh with <N> squads across zones <list-zones-used>
**Squads:**
- `<squad-name>` — Zone <X> — <brief-connection-info>
- `<squad-name>` — Zone <X> — <brief-connection-info>
- ...
**State repo:** <git-url-if-zone-2-used, or "N/A (local/opaque only)">
**Why:** <user's stated reason for setting up the mesh, or "Enable cross-machine squad coordination">
```
Write this file. The Scribe will merge it into the main decisions file later.
### Step 6: STOP
**You are done.** Do not:
- Generate sync scripts (they're bundled with this skill — COPY them)
- Write validator code
- Write test files
- Create any other modules, libraries, or application code
- Modify existing squad files (team.md, routing.md, charters)
- Auto-advance to Phase 2 or Phase 3
Output a simple completion message:
```
✅ Mesh configured. Created:
- mesh.json (<N> squads)
- sync-mesh.sh and sync-mesh.ps1 (copied from skill bundle)
- Decision entry: .squad/decisions/inbox/<filename>
Run `bash sync-mesh.sh` (or `.\sync-mesh.ps1` on Windows) before agents start to materialize remote state.
```
---
## Anti-Patterns
**❌ Code generation anti-patterns:**
- Writing `mesh-config-validator.js` or any validator module
- Writing test files for mesh configuration
- Generating sync scripts instead of copying the bundled ones from this skill's directory
- Creating library modules or utilities
- Building any code that "runs the mesh" — the mesh is read by agents, not executed
**❌ Architectural anti-patterns:**
- Building a federation protocol — Git push/pull IS federation
- Running a sync daemon or server — Agents are not persistent. Sync at startup, publish at shutdown
- Real-time notifications — Agents don't need real-time. They need "recent enough." `git pull` is recent enough
- Schema validation for markdown — The LLM reads markdown. If the format changes, it adapts
- Service discovery protocol — mesh.json is a file with 10 entries. Not a "discovery problem"
- Auth framework — Git SSH keys and HTTPS tokens. Not a framework. Already configured
- Message queues / event buses — Agents wake, read, work, write, sleep. Nobody's home to receive events
- Any component requiring a running process — That's the line. Don't cross it
**❌ Scope creep anti-patterns:**
- Auto-advancing phases without user decision
- Modifying agent charters or routing rules
- Setting up CI/CD pipelines for mesh sync
- Creating dashboards or monitoring tools
@@ -0,0 +1,30 @@
{
"squads": {
"auth-squad": {
"zone": "local",
"path": "../auth-squad/.mesh"
},
"api-squad": {
"zone": "local",
"path": "../api-squad/.mesh"
},
"ci-squad": {
"zone": "remote-trusted",
"source": "git@github.com:our-org/ci-squad.git",
"ref": "main",
"sync_to": ".mesh/remotes/ci-squad"
},
"data-squad": {
"zone": "remote-trusted",
"source": "git@github.com:our-org/data-pipeline.git",
"ref": "main",
"sync_to": ".mesh/remotes/data-squad"
},
"partner-fraud": {
"zone": "remote-opaque",
"source": "https://partner.example.com/squad-contracts/fraud/SUMMARY.md",
"sync_to": ".mesh/remotes/partner-fraud",
"auth": "bearer"
}
}
}
@@ -0,0 +1,111 @@
# sync-mesh.ps1 — Materialize remote squad state locally
#
# Reads mesh.json, fetches remote squads into local directories.
# Run before agent reads. No daemon. No service. ~40 lines.
#
# Usage: .\sync-mesh.ps1 [path-to-mesh.json]
# .\sync-mesh.ps1 -Init [path-to-mesh.json]
# Requires: git
param(
[switch]$Init,
[string]$MeshJson = "mesh.json"
)
$ErrorActionPreference = "Stop"
# Handle -Init mode
if ($Init) {
if (-not (Test-Path $MeshJson)) {
Write-Host "$MeshJson not found"
exit 1
}
Write-Host "🚀 Initializing mesh state repository..."
$config = Get-Content $MeshJson -Raw | ConvertFrom-Json
$squads = $config.squads.PSObject.Properties.Name
# Create squad directories with placeholder SUMMARY.md
foreach ($squad in $squads) {
if (-not (Test-Path $squad)) {
New-Item -ItemType Directory -Path $squad | Out-Null
Write-Host " ✓ Created $squad/"
} else {
Write-Host "$squad/ exists (skipped)"
}
$summaryPath = "$squad/SUMMARY.md"
if (-not (Test-Path $summaryPath)) {
"# $squad`n`n_No state published yet._" | Set-Content $summaryPath
Write-Host " ✓ Created $summaryPath"
} else {
Write-Host "$summaryPath exists (skipped)"
}
}
# Generate root README.md
if (-not (Test-Path "README.md")) {
$readme = @"
# Squad Mesh State Repository
This repository tracks published state from participating squads.
## Participating Squads
"@
foreach ($squad in $squads) {
$zone = $config.squads.$squad.zone
$readme += "- **$squad** (Zone: $zone)`n"
}
$readme += @"
Each squad directory contains a ``SUMMARY.md`` with their latest published state.
State is synchronized using ``sync-mesh.sh`` or ``sync-mesh.ps1``.
"@
$readme | Set-Content "README.md"
Write-Host " ✓ Created README.md"
} else {
Write-Host " • README.md exists (skipped)"
}
Write-Host ""
Write-Host "✅ Mesh state repository initialized"
exit 0
}
$config = Get-Content $MeshJson -Raw | ConvertFrom-Json
# Zone 2: Remote-trusted — git clone/pull
foreach ($entry in $config.squads.PSObject.Properties | Where-Object { $_.Value.zone -eq "remote-trusted" }) {
$squad = $entry.Name
$source = $entry.Value.source
$ref = if ($entry.Value.ref) { $entry.Value.ref } else { "main" }
$target = $entry.Value.sync_to
if (Test-Path "$target/.git") {
git -C $target pull --rebase --quiet 2>$null
if ($LASTEXITCODE -ne 0) { Write-Host "${squad}: pull failed (using stale)" }
} else {
New-Item -ItemType Directory -Force -Path (Split-Path $target -Parent) | Out-Null
git clone --quiet --depth 1 --branch $ref $source $target 2>$null
if ($LASTEXITCODE -ne 0) { Write-Host "${squad}: clone failed (unavailable)" }
}
}
# Zone 3: Remote-opaque — fetch published contracts
foreach ($entry in $config.squads.PSObject.Properties | Where-Object { $_.Value.zone -eq "remote-opaque" }) {
$squad = $entry.Name
$source = $entry.Value.source
$target = $entry.Value.sync_to
$auth = $entry.Value.auth
New-Item -ItemType Directory -Force -Path $target | Out-Null
$params = @{ Uri = $source; OutFile = "$target/SUMMARY.md"; UseBasicParsing = $true }
if ($auth -eq "bearer") {
$tokenVar = ($squad.ToUpper() -replace '-', '_') + "_TOKEN"
$token = [Environment]::GetEnvironmentVariable($tokenVar)
if ($token) { $params.Headers = @{ Authorization = "Bearer $token" } }
}
try { Invoke-WebRequest @params -ErrorAction Stop }
catch { "# ${squad} — unavailable ($(Get-Date))" | Set-Content "$target/SUMMARY.md" }
}
Write-Host "✓ Mesh sync complete"
@@ -0,0 +1,104 @@
#!/bin/bash
# sync-mesh.sh — Materialize remote squad state locally
#
# Reads mesh.json, fetches remote squads into local directories.
# Run before agent reads. No daemon. No service. ~40 lines.
#
# Usage: ./sync-mesh.sh [path-to-mesh.json]
# ./sync-mesh.sh --init [path-to-mesh.json]
# Requires: jq (https://github.com/jqlang/jq), git, curl
set -euo pipefail
# Handle --init mode
if [ "${1:-}" = "--init" ]; then
MESH_JSON="${2:-mesh.json}"
if [ ! -f "$MESH_JSON" ]; then
echo "$MESH_JSON not found"
exit 1
fi
echo "🚀 Initializing mesh state repository..."
squads=$(jq -r '.squads | keys[]' "$MESH_JSON")
# Create squad directories with placeholder SUMMARY.md
for squad in $squads; do
if [ ! -d "$squad" ]; then
mkdir -p "$squad"
echo " ✓ Created $squad/"
else
echo "$squad/ exists (skipped)"
fi
if [ ! -f "$squad/SUMMARY.md" ]; then
echo -e "# $squad\n\n_No state published yet._" > "$squad/SUMMARY.md"
echo " ✓ Created $squad/SUMMARY.md"
else
echo "$squad/SUMMARY.md exists (skipped)"
fi
done
# Generate root README.md
if [ ! -f "README.md" ]; then
{
echo "# Squad Mesh State Repository"
echo ""
echo "This repository tracks published state from participating squads."
echo ""
echo "## Participating Squads"
echo ""
for squad in $squads; do
zone=$(jq -r ".squads.\"$squad\".zone" "$MESH_JSON")
echo "- **$squad** (Zone: $zone)"
done
echo ""
echo "Each squad directory contains a \`SUMMARY.md\` with their latest published state."
echo "State is synchronized using \`sync-mesh.sh\` or \`sync-mesh.ps1\`."
} > README.md
echo " ✓ Created README.md"
else
echo " • README.md exists (skipped)"
fi
echo ""
echo "✅ Mesh state repository initialized"
exit 0
fi
MESH_JSON="${1:-mesh.json}"
# Zone 2: Remote-trusted — git clone/pull
for squad in $(jq -r '.squads | to_entries[] | select(.value.zone == "remote-trusted") | .key' "$MESH_JSON"); do
source=$(jq -r ".squads.\"$squad\".source" "$MESH_JSON")
ref=$(jq -r ".squads.\"$squad\".ref // \"main\"" "$MESH_JSON")
target=$(jq -r ".squads.\"$squad\".sync_to" "$MESH_JSON")
if [ -d "$target/.git" ]; then
git -C "$target" pull --rebase --quiet 2>/dev/null \
|| echo "$squad: pull failed (using stale)"
else
mkdir -p "$(dirname "$target")"
git clone --quiet --depth 1 --branch "$ref" "$source" "$target" 2>/dev/null \
|| echo "$squad: clone failed (unavailable)"
fi
done
# Zone 3: Remote-opaque — fetch published contracts
for squad in $(jq -r '.squads | to_entries[] | select(.value.zone == "remote-opaque") | .key' "$MESH_JSON"); do
source=$(jq -r ".squads.\"$squad\".source" "$MESH_JSON")
target=$(jq -r ".squads.\"$squad\".sync_to" "$MESH_JSON")
auth=$(jq -r ".squads.\"$squad\".auth // \"\"" "$MESH_JSON")
mkdir -p "$target"
auth_flag=""
if [ "$auth" = "bearer" ]; then
token_var="$(echo "${squad}" | tr '[:lower:]-' '[:upper:]_')_TOKEN"
[ -n "${!token_var:-}" ] && auth_flag="--header \"Authorization: Bearer ${!token_var}\""
fi
eval curl --silent --fail $auth_flag "$source" -o "$target/SUMMARY.md" 2>/dev/null \
|| echo "# ${squad} — unavailable ($(date))" > "$target/SUMMARY.md"
done
echo "✓ Mesh sync complete"