| name | pmoves-mesh-preflight |
| description | Run /healthz across every service in .claude/CATALOG.md and emit pass/fail. Use before claiming work in AGNOTE4482PHI.t1.md. |
pmoves-mesh-preflight
Runs a catalog-driven health snapshot across all PMOVES.AI services declared in .claude/CATALOG.md. Emit pass/fail before opening a CLAIM entry in pmoves/docs/AGENTS/AGNOTE4482PHI.t1.md so the worker can disclose the mesh state at session start (Emperor-CHIT-Humility).
When to use
- Before claiming a lane in the Active Claim Register
- Before merging any PR that touches a service in
.claude/CATALOG.md
- As part of
/test:pr smoke flow
- When a recipe in
.claude/PATTERNS.md recommends a preflight gate
How to invoke
bash .claude/skills/pmoves-mesh-preflight/scripts/preflight.sh
The script:
- Parses port + endpoint hints from
.claude/CATALOG.md.
- Issues
curl -sS --max-time 3 http://127.0.0.1:<port>/healthz (falls back to /health for known exceptions like Cipher Memory).
- Prints a fixed-width table:
service | port | status | latency_ms.
- Exits non-zero (1) if any service responds with HTTP >= 400 or times out.
Output
service | port | status | latency_ms
------------------------+------+--------+-----------
agent-zero | 8080 | 200 | 12
archon | 8091 | 200 | 9
cipher-memory | 8105 | 200 | 7
flute-gateway | 8055 | 503 | 3
...
FAIL: 1 service(s) unhealthy
Companion: safe-opening audit (Clause 3)
This skill checks liveness (is the service up?). It does not check whether a
reachable surface is auth-gated. That is the bind → auth coupling from
Clause 3 of the Safe-Activation Contract:
make -C pmoves port-audit — where a service binds (loopback vs mesh).make -C pmoves safe-opening-audit — whether each reachable (non-loopback)
surface is auth-gated; fails closed on any UNVERIFIED/UNGATED reachable bind.
Run the safe-opening audit before opening any surface on the mesh: a green
health check on a reachable-but-ungated service is exactly the "opened
unwittingly" case the contract exists to prevent.
Citations
pmoves/docs/security/SAFE_ACTIVATION_CONTRACT.md — parent invariant (Clause 3)pmoves/tools/safe_opening_audit.py — the bind→auth checker.claude/CATALOG.md — authoritative port catalogpmoves/docs/AGENTS/AGNOTE4482PHI.t1.md — Active Claim Register (record preflight result alongside CLAIM).claude/PATTERNS.md § Known Roads — companion recipe
