stdize cicero actions and tullia tasks

run bitte-tests without cloning the git repo

flake.nix

@@ -91,9 +91,19 @@
 
         # loops - reconcile a target state
         (inputs.std.functions "loops")
+
+        # ----------
+        # Cicero actions and Tullia tasks
+        # ----------
+        (inputs.tullia.tasks "pipelines")
+        (inputs.std.functions "actions")
       ];
     }
     # soil -- TODO: remove soil
+    (tullia.fromStd {
+      tasks = inputs.std.harvest inputs.self ["automation" "pipelines"];
+      actions = inputs.std.harvest inputs.self ["cloud" "actions"];
+    })
     (let
       overlays = [
         fenix.overlay
@@ -157,10 +167,6 @@
             bitte = unstablePackages.callPackage ./cli/package.nix {inherit toolchain;};
             default = bitte;
           };
-        }
-        // tullia.fromSimple system {
-          tasks = import tullia/tasks.nix self;
-          actions = import tullia/actions.nix;
         })
       // {
         inherit lib;

nix/automation/pipelines.nix

@@ -0,0 +1,40 @@
+{
+  cell,
+  inputs,
+}: let
+  common = {
+    config,
+    lib,
+    ...
+  }: {
+    preset = {
+      nix.enable = true;
+      github-ci = __mapAttrs (_: lib.mkDefault) {
+        enable = config.action.facts != {};
+        repo = "input-output-hk/bitte";
+        sha = config.preset.github-ci.lib.getRevision "GitHub event" "HEAD";
+        clone = false;
+      };
+    };
+  };
+in {
+  build = {
+    config,
+    lib,
+    ...
+  }: {
+    imports = [common];
+
+    command.text = let
+      flakeUrl = lib.escapeShellArg (
+        with config.preset.github-ci;
+          if enable
+          then "github:${repo}/${sha}"
+          else "."
+      );
+    in "nix flake check ${flakeUrl} --allow-import-from-derivation";
+
+    memory = 1024 * 12;
+    nomad.resources.cpu = 10000;
+  };
+}

tullia/actions.nix → nix/cloud/actions.nix

@@ -1,4 +1,7 @@
 {
+  cell,
+  inputs,
+}: {
   "bitte/ci-push" = {
     task = "build";
     io = ''