mirror of
https://github.com/docker/docker-agent.git
synced 2026-11-06 15:07:58 +00:00
Generated-file writes, portable blobs, manifest authorization, and workspace resolution form a coherent service independent of the agent loop. Move them into runtime/artifacts and migrate callers to artifact-owned references and errors directly. Preserve path containment, symlink rejection, naming precedence, and manifest revalidation. Inject writers per service instead of mutating a package-global test seam.