Moira

Alpha software. Moira is under active development — interfaces, config schemas, and APIs may change without notice between commits. Run it, break it, report what you find, but don't depend on stability yet.

moira is a unified automation fabric for infrastructure engineers who believe the git repository is the only legitimate source of truth. It merges the concerns of CI pipelines, scheduled automation, workflow orchestration, and IaC execution into a single declarative system — hermetically sealed by Nix, driven by Rust, and accountable to nothing but your repo.

---

The mythology

Hydra builds moira.

In Hesiod's Theogony, the three Moirai — the Fates — are daughters of Nyx, the primordial goddess of night. They weave the thread of every mortal life: Clotho spins it into being, Lachesis measures its length, Atropos cuts it with inexorable finality.

Your infrastructure has the same shape. Intent is declared. Work is measured and scheduled. Execution is final, hermetic, irreversible. And it all runs on Nix — named, knowingly or not, for the same primordial darkness the Fates were born from.

Hydra — the many-headed — spawns Moira. Moira, daughters of Nyx, runs on Nix.

The lore wrote itself.

Internal architecture: the three sisters

The moira runtime is divided internally along the mythological grain:

Sister	Role
Clotho (CLI)	Git watcher and intent compiler — she reads your declared threads and spins them into executable task graphs
Lachesis (Server)	Scheduler and reconciler — she measures, allots work to agents, manages approval gate state, and ensures reality converges to declaration
Atropos (Agent)	Step executor — she cannot be turned aside; hermetic, deterministic, she runs the step and cuts the thread when done

These are internal names. Users interact only with moira.

Documentation

Full docs live in docs/. To serve locally:

zensical serve

Standard library

moira-modules — curated environments, typed modules, and thread constructors. Import as a flake input and use directly in your pipelines.

Modules — HTTP, git, SSH, S3, container push, compression, crypto, JWT, TOTP, ntfy, SMTP, OpenTofu/Terraform, Vikunja, CalDAV, Home Assistant. Each declares typed inputs and outputs; credentials are secret-typed and injected at runtime.

Thread constructors — rustCi, nodeCi, goCi, pythonCi, container, containerManifest, s3Site, notify. Applied to an options attrset, with withDefaults for per-site values.

Derived threads — fromProject { src = self; } reads a repo's own manifests at eval time and returns one thread per project it finds, so a monorepo gets per-project path filters without hand-written config.