[grubmeshi]

bb-skip-run-on: locked building blocks

BD-2867: meshStack can lock a building block so that it starts no run until someone unlocks it (meshcloud/meshfed-release#11684). Design: https://claude.ai/code/artifact/05d32f14-86a8-4ab0-a4d4-58701490e4a7

• MeshBuildingBlockV2Client.Update takes MeshBuildingBlockV2UpdateOptions{SkipRunOn}; VERSION_UPGRADE is sent as a repeated skipRunOn query parameter, and an empty set sends none.
• Lock and Unlock on the client, and the commands meshstack bb lock <uuid> and meshstack bb unlock <uuid>.
• The action UNLOCK_RUNS. bb wait and trigger-run --wait stop at a locked block and say how to unlock it.

Cross-repo PRs

• meshcloud/meshfed-release#11684 — the lock in meshStack, the coordinator and meshPanel
• bb-skip-run-on: lock and unlock building blocks #73 — this PR
• bb-skip-run-on: upgrade without a run and respect locked building blocks terraform-provider-meshstack#386 — write-only skip_run_on, a warning on a locked block

🤖 Generated with Claude Code

[meshcloud-gh-actions]

Coverage of the acceptance run against the meshStack backend, on a9295d472cae7d0464e5a29e98400f1b1d5b4cfe.

Scope	Coverage
Unit tests	78.4%
Acceptance tests	55.4%
Combined	81.0%

Uncovered functions

client/api_key.go:52: meshApiKeyClient.Create 0.0%
client/api_key.go:56: meshApiKeyClient.Read 0.0%
client/api_key.go:60: meshApiKeyClient.Update 0.0%
client/api_key.go:64: meshApiKeyClient.Delete 0.0%
client/api_key_permissions.go:20: ApiKeyPermissions.AllCodes 0.0%
client/api_key_permissions.go:33: ApiKeyPermissions.WorkspaceCodes 0.0%
client/api_key_permissions.go:262: AllApiKeyPermissions 0.0%
client/api_key_permissions.go:266: WorkspacePermissionCodes 0.0%
client/building_block_definition.go:71: MeshBuildingBlockDefinitionApprovalPolicies.NothingRequiresApproval 0.0%
client/building_block_definition.go:82: DisabledSchedule 0.0%
client/building_block_definition.go:89: MeshBuildingBlockDefinitionSchedule.IsDisabled 0.0%
client/building_block_definition.go:93: MeshBuildingBlockDefinitionSpec.HasNeutralPolicies 0.0%
client/building_block_definition.go:97: MeshBuildingBlockDefinitionSpec.WithNeutralPolicies 0.0%
client/building_block_definition.go:166: meshBuildingBlockDefinitionClient.List 0.0%
client/building_block_definition.go:173: meshBuildingBlockDefinitionClient.Read 0.0%
client/building_block_definition.go:177: meshBuildingBlockDefinitionClient.Create 0.0%
client/building_block_definition.go:181: meshBuildingBlockDefinitionClient.Update 0.0%
client/building_block_definition.go:185: meshBuildingBlockDefinitionClient.Delete 0.0%
client/building_block_definition_version.go:101: MeshBuildingBlockType.TagInputTargets 0.0%
client/building_block_definition_version.go:245: meshBuildingBlockDefinitionVersionClient.Create 0.0%
client/building_block_definition_version.go:254: meshBuildingBlockDefinitionVersionClient.Update 0.0%
client/building_block_definition_version_implementation.go:81: MeshBuildingBlockDefinitionImplementation.InferType 0.0%
client/building_block_definition_version_implementation.go:95: MeshBuildingBlockDefinitionImplementation.MarshalJSONTo 0.0%
client/building_block_definition_version_implementation.go:108: *MeshBuildingBlockDefinitionImplementation.UnmarshalJSONFrom 0.0%
client/building_block_runner.go:93: meshBuildingBlockRunnerClient.Create 0.0%
... and 125 more

covdata func names a method without its receiver, so an entry can belong to an implementation nothing selects rather than to a function the tests never reached. Open the file and line before reading one as a coverage gap.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud