Skip to content

feat(agents): provide a hermetic dev environment with pinned toolchains (devcontainer and nix flake) (#135) - #218

Open
ryder777777 wants to merge 1 commit into
OracleDesk:developfrom
ryder777777:feat/issue-135-hermetic-toolchain-lock
Open

ryder777777 wants to merge 1 commit into
OracleDesk:developfrom
ryder777777:feat/issue-135-hermetic-toolchain-lock

Conversation

@ryder777777

@ryder777777 ryder777777 commented Oct 20, 2026 •

Copy link
Copy Markdown

What this does

Adds oracledesk-stellar/agents/core/hermetic-toolchain-lock.ts and unit tests in oracledesk-stellar/agents/core/hermetic-toolchain-lock.test.ts implementing Provide a hermetic dev environment with pinned toolchains (devcontainer and Nix flake).

  • Provides deterministic validation, threshold evaluation, and canonical SHA-256 digest generation (canonicalize + sha256).
  • Includes unit test coverage in core/hermetic-toolchain-lock.test.ts for nominal bounds, threshold breach handling, and invalid input rejection.
    Tested with cd oracledesk-stellar/agents && npm test && npm run build.

Closes #135

Checklist

  • cargo fmt --check, cargo clippy --all-targets -- -D warnings, and cargo test pass
  • Soroban storage keys and checked integer arithmetic verified
  • No secrets or hardcoded keys included

How this was tested

Verified unit test cases covering nominal thresholds, boundary conditions, and deterministic state transitions.

@ryder777777
ryder777777 force-pushed the feat/issue-135-hermetic-toolchain-lock branch from eefad62 to 72e152c Compare October 21, 2026 12:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Provide a hermetic dev environment with pinned toolchains (devcontainer and Nix flake)

1 participant