load.sh treats every already-set INFINITO_* as caller intent and restores it after sourcing .env. In a worktree those values come from a different checkout, so make requested the primary instance's subnet and docker refused the network with "invalid pool request: Pool overlaps with other one on this address space". Five retries, then the deploy died. INFINITO_INSTANCE names the slot a value belongs to. When the environment carries a different one than this checkout's .env, the whole set is foreign and is dropped before .env loads. A caller in the same slot still wins, which eight scripts under scripts/ rely on, and an unreadable .env yields no slot and leaves the previous behaviour untouched. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Environment Layer 🌍
This directory contains the shared environment bootstrap layer for Infinito.Nexus scripts. ✨
Its purpose is to keep runtime configuration centralized, deterministic, and easy to reuse across local runs, CI, and container-based execution. 🧭
The design follows simple composition principles so environment state can be loaded safely and consistently without duplicating logic in many places. 🧱
Use the directory-level entrypoint for sourcing this environment context in scripts and automation. ✅
Modules 📦
The directory has two kinds of env modules:
-
Always-on modules are composed by
all.shand SHOULD be sourced by anything that needs the standard project environment (Python interpreter, distro defaults, runtime context, inventory paths, GitHub markers):python.sh,runtime.sh,defaults.sh,inventory.sh,github.sh. -
On-demand modules MUST NOT be composed into
all.shbecause they encode an intent that only makes sense in a specific call path. The deploy-only marker is the canonical example:ci.shexportsINFINITO_MAKE_DEPLOY=1soMODE_CI(defined ingroup_vars/all/01_modes.yml) flips totruefor the duration of a make-driven deploy. It is sourced by every deploy entry-point underscripts/tests/deploy/local/deploy/. Sourcing it fromall.shwould set the marker for unrelatedmake test*ormake build*recipes too, which is exactly what the service-gating contract forbids.