テーマ切替
takos-computer
Takosumi runs plain OpenTofu Capsules. It registers a Git Source, creates a Capsule, records plan/apply/destroy Runs, and captures StateVersion / Output evidence. Module metadata comes from generic repository information such as Git URL, ref, commit, tag, module path, and well-known OpenTofu outputs.
Current Flow
- Choose a Git URL/ref pointing at a OpenTofu Capsule.
- Run a plan; Takosumi records a
plantype Run with the reviewed plan, changes, and warnings. - Apply the reviewed plan; Takosumi records an
applytype Run and, on success, updates the StateVersion and Output. - Destroy is recorded as
destroy_planfollowed by approveddestroy_applyso teardown stays reviewable and tied to the Capsule's current StateVersion / Output evidence. - Connections hold credential references, ProviderBindings resolve each provider (plus optional alias) to an explicit provider connection (an explicit ProviderConnection), and policy resolves provider allowlists, state backend, execution image, and Cloudflare Container execution; account-plane policy, OIDC clients, billing, and domains belong to the Takosumi Accounts plane.
Takos Boundary
Takos owns the user-facing workspace experience: chat, agents, memory, Workspaces, and app launcher. Git, storage, agent runtime, file handlers, UI surfaces, and MCP are exposed through Capsule Outputs and Takos runtime contracts. deploy/product-resources.json is the provider-neutral resource authority; deploy/opentofu/cloudflare and deploy/opentofu/takoform are peer adapters. Takosumi runs either ordinary OpenTofu module and records Capsule / Run / StateVersion / Output state, policy decisions, and audit evidence.
API Shape
json
{
"spaceId": "space_1",
"module": {
"url": "https://github.com/example/app.git",
"ref": "main"
}
}An apply request references the reviewed plan type Run, and Takosumi records the resulting apply type Run, StateVersion and Output. Takos product routes should call the Takosumi deploy control plane or the Takosumi account-plane install flow instead of exposing a separate product-local deployment surface.