mirror of
https://github.com/docker/docker-agent.git
synced 2026-11-04 18:30:09 +00:00
Generated-file writes, portable blobs, manifest authorization, and workspace resolution form a coherent service independent of the agent loop. Move them into runtime/artifacts and migrate callers to artifact-owned references and errors directly. Preserve path containment, symlink rejection, naming precedence, and manifest revalidation. Inject writers per service instead of mutating a package-global test seam.