ワンクリックでManusで任意のスキルを実行

meticulous-system-architecture

スター5

フォーク0

更新日2026年4月13日 13:37

Use when reasoning about control plane vs agents, NATS or gRPC boundaries, org/project/pipeline domain model, phased roadmap, or locating detailed design plans under .cursor/plans.

インストール

Codex または Claude でインストールこの Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。

Manusで実行

ソース

GoodMannersHosting

GoodMannersHosting/Meticulous

GitHub リポジトリを開く Creator のリポジトリを見る

ダウンロード

Manusで実行

Meticulous system architecture

Overview

Operators use the web UI and REST API against PostgreSQL. Agents do not accept inbound control-plane connections; they dial out to the controller over gRPC. The controller uses NATS (often JetStream) for work dispatch and S3-compatible storage for artifacts and related binary data.

Core ideas

Pub/sub job dispatch — Agents subscribe to NATS subjects (e.g. by pool tags). Egress-only networking for agents.
Per-job PKI for secrets — Job-scoped key material; server encrypts secrets for the agent; no plaintext secrets on the wire for that hop. Details: meticulous-agent-security-invariants.
Custom execution engine — In-repo engine (DAG, steps, caching, artifacts); not Tekton-centric.
Reusable workflows — Pipelines compose versioned workflows at global (platform) or project scope.
External secrets preferred — First-class Vault/OpenBao, AWS Secrets Manager, Kubernetes secrets; built-in storage discouraged by product direction.

Domain hierarchy (summary)

Organization (tenant) → Project → Pipelines (Jobs as DAG, Steps) with scoped Secrets, Variables, Triggers; plus global or project reusable workflows. Pipeline YAML references workflows such as workflow: global/... or workflow: project/....

Deeper reference

File	Contents
references/system-diagram-and-domain.md	Mermaid diagram, hierarchy text, key decisions
references/phased-roadmap.md	Phased build order (0–7)
references/plan-index.md	Index of `.cursor/plans/*.plan.md`
../../design/adr/README.md	ADRs (run/job lifecycle, NATS, gRPC, secrets); check Status in each file—Accepted is normative for implementers
../../design/prd/README.md	Product requirements index, overlap resolution, verification matrix
../../design/adr/013-project-webhook-multi-pipeline-routing.md	Project webhook multi-pipeline routing

Frontend stack for the web UI is SvelteKit and Svelte 5 under frontend/ (not React).

Keywords

NATS, JetStream, gRPC, controller, met-agent, Axum, PostgreSQL, S3, DAG, reusable workflows, control plane, egress-only.

このリポジトリの他の Skills

同じリポジトリ

meticulous-rust-workspace

GoodMannersHosting/Meticulous

Use when navigating the Rust workspace, locating migrations or protobuf definitions, choosing a crate for a change, or running build, test, check, or frontend commands for Meticulous.

2026-04-125

meticulous-agent-security-invariants

GoodMannersHosting/Meticulous

Use when changing agent enrollment, join tokens, controller–agent trust, per-job secrets delivery, revocation, OIDC-style provider auth, or supported agent platforms for Meticulous.

2026-04-015

meticulous-repo-context

GoodMannersHosting/Meticulous

Use when onboarding to the Meticulous repository, judging stability or production readiness, or explaining what the product is and what it optimizes for.

2026-04-015

name	meticulous-system-architecture
description	Use when reasoning about control plane vs agents, NATS or gRPC boundaries, org/project/pipeline domain model, phased roadmap, or locating detailed design plans under .cursor/plans.

Meticulous system architecture

Overview

Core ideas

Pub/sub job dispatch — Agents subscribe to NATS subjects (e.g. by pool tags). Egress-only networking for agents.
Per-job PKI for secrets — Job-scoped key material; server encrypts secrets for the agent; no plaintext secrets on the wire for that hop. Details: meticulous-agent-security-invariants.
Custom execution engine — In-repo engine (DAG, steps, caching, artifacts); not Tekton-centric.
Reusable workflows — Pipelines compose versioned workflows at global (platform) or project scope.
External secrets preferred — First-class Vault/OpenBao, AWS Secrets Manager, Kubernetes secrets; built-in storage discouraged by product direction.

Domain hierarchy (summary)

Deeper reference

File	Contents
references/system-diagram-and-domain.md	Mermaid diagram, hierarchy text, key decisions
references/phased-roadmap.md	Phased build order (0–7)
references/plan-index.md	Index of `.cursor/plans/*.plan.md`
../../design/adr/README.md	ADRs (run/job lifecycle, NATS, gRPC, secrets); check Status in each file—Accepted is normative for implementers
../../design/prd/README.md	Product requirements index, overlap resolution, verification matrix
../../design/adr/013-project-webhook-multi-pipeline-routing.md	Project webhook multi-pipeline routing

Frontend stack for the web UI is SvelteKit and Svelte 5 under frontend/ (not React).

Keywords

NATS, JetStream, gRPC, controller, met-agent, Axum, PostgreSQL, S3, DAG, reusable workflows, control plane, egress-only.