brandonweeks · Oct 16, 2025 · Oct 7, 2025 · Oct 8, 2025 · Oct 9, 2025 · Oct 9, 2025
@@ -0,0 +1,4 @@
+[registries.buf]
+index = "sparse+https://buf.build/gen/cargo/"
+credential-provider = "cargo:token"
+token = "Bearer a54105a33eb0bc75fd05666e96f6a63ec8bb54fa7b964665e230d24824268687"
@@ -93,11 +93,18 @@ Package Spec (build.ncl) → SpecReader → DepGraph → ExecPlan → Build Reso
 
 **Sandbox Isolation Strategy**:
 - **Linux**: User namespaces + mount namespaces for filesystem isolation
-- **macOS**: `sandbox-exec` with dynamically generated policies  
+- **macOS**: `sandbox-exec` with dynamically generated policies
 - **Dependency mounting**: Build dependencies mounted read-only at specific paths
 - **Input copying**: Source files and local inputs copied to TMPDIR
 - **Output staging**: Builds write to `OUTPUT_DIR`, enumerated outputs copied to cache
 
+**SpongeBob Integration**:
+- **Build events**: Executor emits TargetStarted and TargetCompleted events for observability
+- **Target identifiers**: Package names (e.g., "tar", "glibc") used as target IDs
+- **File uploads**: stdout/stderr uploaded to SpongeBob after build execution
+- **Event flow**: TargetStarted → Build executes → Files uploaded → TargetCompleted
+- **Error handling**: Events published even on build failure for complete observability
+
 ### Package Ecosystem
 
 **Current Package Count**: 41 packages including:
@@ -175,6 +182,14 @@ gcc,
 - Linux uses direct syscalls via `nix` crate (no external dependencies)
 - Error handling includes platform-specific sandbox violations
 
+**Build Observability (SpongeBob Integration)**:
+- **build-sandbox executor** emits build events automatically when a SpongeBobInvocation is provided
+- **TargetStarted event**: Published before build execution begins, creates target in database
+- **TargetCompleted event**: Published after build finishes (success or failure)
+- **File uploads**: stdout/stderr automatically uploaded to SpongeBob for each target
+- **Target naming**: Uses package name as semantic target identifier (e.g., "tar" not a random UUID)
+- **Requirement**: Targets must exist (via TargetStarted) before file uploads succeed
+
 ## Working with Package Specs
 
 Package specifications are written in Nickel in `packages/<name>/build.ncl`: