aly.codes
A declarative, hermetic harness for Nix-defined agents.
github: init
author
Aly Raffauf
date
(Jun 28, 2026, 12:00 AM -0400)
commit
6576d407
6576d407c3e4ce4cac73166a2abcd628028817ec
parent
9ef00374
9ef0037490ee8748e6958a36c0e3d04d7ea6eca0
+60
+21
.github/renovate.json
+21
.github/renovate.json
···
1
+
{
2
+
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
3
+
"extends": [
4
+
"config:recommended"
5
+
],
6
+
"nix": {
7
+
"enabled": true
8
+
},
9
+
"packageRules": [
10
+
{
11
+
"description": "Group GitHub Actions updates into a single PR",
12
+
"matchManagers": ["github-actions"],
13
+
"groupName": "github-actions"
14
+
},
15
+
{
16
+
"description": "Group Nix flake input updates into a single PR",
17
+
"matchManagers": ["nix"],
18
+
"groupName": "nix-flake-inputs"
19
+
}
20
+
]
21
+
}
+39
.github/workflows/ci.yml
+39
.github/workflows/ci.yml
···
1
+
name: CI
2
+
3
+
on:
4
+
push:
5
+
branches: [master]
6
+
pull_request:
7
+
branches: [master]
8
+
9
+
concurrency:
10
+
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
11
+
cancel-in-progress: true
12
+
13
+
jobs:
14
+
lint:
15
+
runs-on: ubuntu-latest
16
+
steps:
17
+
- uses: actions/checkout@v7
18
+
- uses: astral-sh/setup-uv@v8.2.0
19
+
- run: uv run ruff check .
20
+
- run: uv run ty check
21
+
22
+
build-tartarus:
23
+
runs-on: ubuntu-latest
24
+
steps:
25
+
- uses: actions/checkout@v7
26
+
- uses: DeterminateSystems/nix-installer-action@v22
27
+
- uses: DeterminateSystems/magic-nix-cache-action@v14
28
+
- uses: astral-sh/setup-uv@v8.2.0
29
+
- run: nix flake check
30
+
- run: uv run pytest
31
+
- run: nix build .#tartarus --no-link --print-out-paths
32
+
33
+
build-agent:
34
+
runs-on: ubuntu-latest
35
+
steps:
36
+
- uses: actions/checkout@v7
37
+
- uses: DeterminateSystems/nix-installer-action@v22
38
+
- uses: DeterminateSystems/magic-nix-cache-action@v14
39
+
- run: nix build .#agents.x86_64-linux.default.bundle --no-link --print-out-paths