[grubmeshi]

🤖 Written by AI agent

single-go-bin-runner

building-block-runner moves all its runners into one Go binary. It builds its meshStack client the way the Terraform provider does, through pkg/auth.ResolveClient with its config as a setting source, so it gets the CLI's settings, profiles and OIDC login. This PR adds what the runner needs:

• Basic auth credential. MESHSTACK_API_USERNAME and MESHSTACK_API_PASSWORD resolve a basic auth credential next to the API key. meshstack login --username stores it in the profile and checks it with one request. An Authorization produces a Credential, which is a BearerToken or a BasicAuth. Basic auth cannot refresh, so a 401 is not retried.
• client/http. internal/http moves to client/http, so client.New and the other exported client functions no longer take types from an internal/ package and are callable from other modules. A test fails when an exported name of client/... refers to an internal/ type. New client options: WithoutRedirects() and WithRetry(policy), which decides per method on which failures a request is sent again. Without options a client is the shared client with today's behaviour. The runner uses it for the GitHub, GitLab and Azure DevOps APIs.
• client.Runner. A runner claims a run, then registers as a status source, reports status and downloads or uploads the artifact with the run's token; ForRunUuid reports with the runner's own credentials. A run's implementation is typed, with one pointer per variant as the building block definition has it, decoded from the flat wire format by its type. Input values are decoded by their type, and an INTEGER keeps every digit as *big.Int.

Cross-repo PRs

• feat!: run every building block runner type in one Go binary building-block-runner#86 — every runner type in one Go binary, built on this PR
• feat: basic auth, client/http and the runner API in client #33 — this PR
• meshcloud/meshfed-release#11468 — dev shell, Keycloak config, runner deployments and Panel install instructions for the Go images
• docs: describe github_workflows.repository as the bare repository name terraform-provider-meshstack#354 — docs: github_workflows.repository is the bare repository name

🤖 Generated with Claude Code

[meshcloud-gh-actions]

Coverage of the acceptance run against the meshStack backend, on 5975d78e6bbfb79facb6c59d0312d21b9c858ec3.

Scope	Coverage
Unit tests	77.9%
Acceptance tests	52.7%
Combined	79.8%

Uncovered functions

client/api_key.go:55: meshApiKeyClient.Create 0.0%
client/api_key.go:59: meshApiKeyClient.Read 0.0%
client/api_key.go:63: meshApiKeyClient.Update 0.0%
client/api_key.go:71: meshApiKeyClient.Delete 0.0%
client/api_key_permissions.go:20: ApiKeyPermissions.AllCodes 0.0%
client/api_key_permissions.go:33: ApiKeyPermissions.WorkspaceCodes 0.0%
client/api_key_permissions.go:295: AllApiKeyPermissions 0.0%
client/api_key_permissions.go:299: WorkspacePermissionCodes 0.0%
client/building_block_definition.go:71: MeshBuildingBlockDefinitionApprovalPolicies.NothingRequiresApproval 0.0%
client/building_block_definition.go:82: DisabledSchedule 0.0%
client/building_block_definition.go:89: MeshBuildingBlockDefinitionSchedule.IsDisabled 0.0%
client/building_block_definition.go:93: MeshBuildingBlockDefinitionSpec.HasNeutralPolicies 0.0%
client/building_block_definition.go:97: MeshBuildingBlockDefinitionSpec.WithNeutralPolicies 0.0%
client/building_block_definition.go:166: meshBuildingBlockDefinitionClient.List 0.0%
client/building_block_definition.go:173: meshBuildingBlockDefinitionClient.Read 0.0%
client/building_block_definition.go:177: meshBuildingBlockDefinitionClient.Create 0.0%
client/building_block_definition.go:181: meshBuildingBlockDefinitionClient.Update 0.0%
client/building_block_definition.go:185: meshBuildingBlockDefinitionClient.Delete 0.0%
client/building_block_definition_version.go:100: MeshBuildingBlockType.TagInputTargets 0.0%
client/building_block_definition_version.go:245: meshBuildingBlockDefinitionVersionClient.Create 0.0%
client/building_block_definition_version.go:254: meshBuildingBlockDefinitionVersionClient.Update 0.0%
client/building_block_definition_version_implementation.go:80: MeshBuildingBlockDefinitionImplementation.InferType 0.0%
client/building_block_definition_version_implementation.go:94: MeshBuildingBlockDefinitionImplementation.MarshalJSON 0.0%
client/building_block_definition_version_implementation.go:107: *MeshBuildingBlockDefinitionImplementation.UnmarshalJSON 0.0%
client/building_block_runner.go:87: meshBuildingBlockRunnerClient.Create 0.0%
... and 133 more

covdata func names a method without its receiver, so an entry can belong to an implementation nothing selects rather than to a function the tests never reached. Open the file and line before reading one as a coverage gap.

[sonarqubecloud]

Quality Gate passed

Issues
6 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud