Glossary
The vocabulary that runs through the rest of the docs. Each entry is a short
definition; follow the link for the page that covers the term in depth. Every
term has its own anchor, so you can deep-link a single definition (for example
glossary/#output-reference).
Core model
Workspace
The magus root directory that owns a set of projects and shared config; the unit magus operates over. See workspace.
Referenced on 107 pages
- ActivityService
- Agent skills
- Console API
- Diagnostics
- FAQ
- InsightService
- JobService
- Logging and verbosity
- MGS1001: no ci target defined
- MGS1002: spell import shadowed
- MGS1003: bespoke phase-fragment target name
- MGS1006: unknown target
- MGS1010: affected set could not be computed
- MGS1011: cross-project output names an unusable owner
- MGS1012: cross-project output forms a dependency cycle
- MGS1013: cross-project output glob escapes its owner
- MGS1015: cross-project dependency names an unresolvable project
- MGS1016: workspace-local Go replace directives drifted
- MGS1020: output owned by two targets
- MGS1021: workspace requires a newer magus
- MGS1022: member only callable from a magusfile
- MGS2001: path read denied
- MGS2002: path write denied
- MGS2005: kernel landlock unavailable
- MGS2006: PATH-shim manager stripped
- MGS2007: exec denied
- MGS2008: daemon socket withheld
- MGS2010: sandbox policy mismatch
- MGS3001: descendant project boundary crossed
- MGS3002: VCS unavailable
- MGS4001: filesystem race condition
- MGS4002: declared output overlap
- MGS4004: potential undeclared dependency
- MGS7001: unresolvable buzz import
- MGS8001: output ref not found
- StatusService
- The CLI in practice
- The Go SDK
- knowledge-graph diagnostics
- magus affected
- magus command
- magus completion
- magus config
- magus describe
- magus doctor
- magus graph
- magus init
- magus insight
- magus ls
- magus module
- magus self
- magus server
- magus status
- magus stdlib
- magus watch
- magus-architecture
- magus-buzz
- magus-changes
- magus-delegate-ultra
- magus-docs
- magus-sdk
- magus-vcs
- magus.yaml configuration
- magusfile diagnostics
- sandbox diagnostics
Project
A directory magus recognizes as a unit of work (it has a magusfile); the unit of caching, scheduling, and dependency tracking. See workspace.
Referenced on 91 pages
- Console API
- FAQ
- InsightService
- Logging and verbosity
- MGS1001: no ci target defined
- MGS1002: spell import shadowed
- MGS1003: bespoke phase-fragment target name
- MGS1005: redundant footprint glob
- MGS1006: unknown target
- MGS1007: target dependency cycle
- MGS1009: target never replays from cache
- MGS1010: affected set could not be computed
- MGS1011: cross-project output names an unusable owner
- MGS1012: cross-project output forms a dependency cycle
- MGS1013: cross-project output glob escapes its owner
- MGS1014: cross-project output was never produced
- MGS1015: cross-project dependency names an unresolvable project
- MGS1016: workspace-local Go replace directives drifted
- MGS1017: magusfile is not a spell
- MGS1018: dead output glob
- MGS1019: committed output records its own commit
- MGS1020: output owned by two targets
- MGS1022: member only callable from a magusfile
- MGS3001: descendant project boundary crossed
- MGS3004: tool not ready
- MGS4001: filesystem race condition
- MGS4002: declared output overlap
- MGS4003: non-deterministic output
- MGS4004: potential undeclared dependency
- MGS5001: near-duplicate services
- MetricsService
- StatusService
- The CLI in practice
- The Go SDK
- ViewerService
- magus affected
- magus command
- magus completion
- magus config
- magus describe
- magus doctor
- magus graph
- magus insight
- magus ls
- magus module
- magus run
- magus where
- magus x
- magusfile diagnostics
- vcs module
Magusfile
The magusfile.buzz that declares a project's targets (as export funs) and
binds its spells. See targets.
Referenced on 75 pages
- Agent skills
- Diagnostics
- FAQ
- Logging and verbosity
- MGS1001: no ci target defined
- MGS1002: spell import shadowed
- MGS1003: bespoke phase-fragment target name
- MGS1004: unreached footprint declaration
- MGS1006: unknown target
- MGS1008: target missing its context parameter
- MGS1015: cross-project dependency names an unresolvable project
- MGS1017: magusfile is not a spell
- MGS1021: workspace requires a newer magus
- MGS1022: member only callable from a magusfile
- MGS2005: kernel landlock unavailable
- MGS2011: secret too short to mask
- MGS3002: VCS unavailable
- MGS3003: tool not on PATH
- StatusService
- The CLI in practice
- The Go SDK
- env module
- magus affected
- magus command
- magus doctor
- magus init
- magus insight
- magus module
- magus run
- magus stdlib
- magus-buzz
- magus-query
- magus-run
- magus-vcs
- magusfile diagnostics
- vcs module
Target
A named operation (build, test, ...) you invoke with magus run <target>; it
may compose a spell's tool-native operations and depend on other targets. See
targets.
Referenced on 118 pages
- Affected
- CI
- Cache model
- Charms
- Concurrency
- Dependencies
- Engines
- Insight
- Knowledge graph
- Operations
- Remote caching
- Sandbox model
- Secrets
- Services
- Spells
- Target output references
- Targets
- Telemetry
- Tool identity
- Volatility
- Wards
- Workspace and projects
- bash spell
- buf spell
- buzz spell
- cosign spell
- docker spell
- go spell
- markdown spell
- md spell
- py spell
- python spell
- rs spell
- rust spell
- ts spell
- typescript spell
- ActivityService
- Console API
- FAQ
- InsightService
- JobService
- Logging and verbosity
- MGS1001: no ci target defined
- MGS1003: bespoke phase-fragment target name
- MGS1004: unreached footprint declaration
- MGS1005: redundant footprint glob
- MGS1006: unknown target
- MGS1007: target dependency cycle
- MGS1008: target missing its context parameter
- MGS1009: target never replays from cache
- MGS1010: affected set could not be computed
- MGS1011: cross-project output names an unusable owner
- MGS1012: cross-project output forms a dependency cycle
- MGS1013: cross-project output glob escapes its owner
- MGS1014: cross-project output was never produced
- MGS1015: cross-project dependency names an unresolvable project
- MGS1016: workspace-local Go replace directives drifted
- MGS1018: dead output glob
- MGS1019: committed output records its own commit
- MGS1020: output owned by two targets
- MGS2001: path read denied
- MGS2002: path write denied
- MGS2005: kernel landlock unavailable
- MGS2006: PATH-shim manager stripped
- MGS3001: descendant project boundary crossed
- MGS3003: tool not on PATH
- MGS3005: tool too old
- MGS4001: filesystem race condition
- MGS4002: declared output overlap
- MGS5001: near-duplicate services
- MGS6001: charm patch does not apply to the command
- MGS7002: dangling doc reference
- MGS8001: output ref not found
- MGS8002: ambiguous output ref prefix
- MGS8003: malformed output ref
- MGS9006: connector token not found
- MetricsService
- StatusService
- The CLI in practice
- The Go SDK
- ViewerService
- charm diagnostics
- charm module
- fs module
- magus affected
- magus command
- magus describe
- magus doctor
- magus graph
- magus insight
- magus module
- magus run
- magus stdlib
- magus x
- magus-buzz
- magus-run
- magusfile diagnostics
- os module
- output-reference diagnostics
- path module
- vcs module
Operation
A single tool-native command a target composes; the middle of the work hierarchy (Spell to Operation to Target). See operations.
Referenced on 19 pages
Spell
A language/runtime adapter (e.g. go, md) that maps generic targets onto a
toolchain's real commands. See spells.
Referenced on 84 pages
- CI providers
- Cache model
- Charms
- Compatibility
- Dependencies
- Engines
- Knowledge graph
- Operations
- Remote caching
- Sandbox model
- Secrets
- Spells
- Target output references
- Targets
- Telemetry
- Tool identity
- Workspace and projects
- bash spell
- buf spell
- buzz spell
- cosign spell
- docker spell
- go spell
- markdown spell
- md spell
- py spell
- python spell
- rs spell
- rust spell
- ts spell
- typescript spell
- FAQ
- InsightService
- Logging and verbosity
- MGS1001: no ci target defined
- MGS1002: spell import shadowed
- MGS1003: bespoke phase-fragment target name
- MGS1006: unknown target
- MGS1008: target missing its context parameter
- MGS1009: target never replays from cache
- MGS1017: magusfile is not a spell
- MGS1018: dead output glob
- MGS2001: path read denied
- MGS2002: path write denied
- MGS2003: env vars stripped
- MGS2004: sandbox.allow unresolved
- MGS2005: kernel landlock unavailable
- MGS2007: exec denied
- MGS2008: daemon socket withheld
- MGS3001: descendant project boundary crossed
- MGS3004: tool not ready
- MGS3005: tool too old
- MGS4001: filesystem race condition
- MGS4004: potential undeclared dependency
- MGS6001: charm patch does not apply to the command
- MetricsService
- StatusService
- The CLI in practice
- The Go SDK
- ViewerService
- magus command
- magus describe
- magus graph
- magus init
- magus module
- magus stdlib
- magus-buzz
- magus-docs
- magusfile diagnostics
- sandbox diagnostics
- semver module
Charm
An execution modifier attached with : (lint:rw) that changes how a target
runs, not which one; the built-in rw flips a check-only target to mutate in
place, and ci always strips it. See charms.
Referenced on 33 pages
Ward
A coded diagnostic that inspects a resolved op and nudges or blocks an anti-pattern before it runs. See wards.
Referenced on 3 pages
Module
A magus stdlib namespace a magusfile imports for host capabilities: filesystem, exec, vcs, and more. See the module reference.
Referenced on 50 pages
- MGS1016: workspace-local Go replace directives drifted
- MGS1021: workspace requires a newer magus
- MGS1022: member only callable from a magusfile
- MGS4001: filesystem race condition
- The Go SDK
- archive module
- charm module
- crypto module
- encoding module
- env module
- fmt module
- fs module
- http module
- json module
- knowledge-graph diagnostics
- magus describe
- magus module
- magus stdlib
- magus-architecture
- magus-docs
- markdown module
- os module
- path module
- platform module
- semver module
- strings module
- template module
- time module
- toml module
- uuid module
- vcs module
- xml module
- yaml module
Buzz
The language magusfiles are written in (the .buzz engine). See
engines.
Referenced on 47 pages
- Agent skills
- FAQ
- MGS1008: target missing its context parameter
- MGS1022: member only callable from a magusfile
- MGS2005: kernel landlock unavailable
- MGS7001: unresolvable buzz import
- MetricsService
- The Go SDK
- crypto module
- encoding module
- env module
- fs module
- json module
- knowledge-graph diagnostics
- magus command
- magus graph
- magus init
- magus stdlib
- magus-buzz
- magus-query
- magus-run
- magus-vcs
- os module
- sandbox diagnostics
- time module
Engine
The interpreter a magusfile runs on; magus embeds the Buzz engine. See engines.
Referenced on 19 pages
Execution and caching
Cache
The content-addressed store magus consults before running a target, so unchanged work is skipped. See cache.
Referenced on 82 pages
- Affected
- CI
- CI providers
- Cache model
- Compatibility
- Concurrency
- Dependencies
- Knowledge graph
- Operations
- Remote caching
- Sandbox model
- Services
- Spells
- Target output references
- Targets
- Telemetry
- Tool identity
- Volatility
- Workspace and projects
- bash spell
- buf spell
- buzz spell
- cosign spell
- docker spell
- go spell
- markdown spell
- md spell
- py spell
- python spell
- rs spell
- rust spell
- ts spell
- typescript spell
- Console API
- FAQ
- JobService
- Logging and verbosity
- MGS1004: unreached footprint declaration
- MGS1005: redundant footprint glob
- MGS1008: target missing its context parameter
- MGS1009: target never replays from cache
- MGS1011: cross-project output names an unusable owner
- MGS1013: cross-project output glob escapes its owner
- MGS1014: cross-project output was never produced
- MGS1015: cross-project dependency names an unresolvable project
- MGS1018: dead output glob
- MGS1020: output owned by two targets
- MGS2001: path read denied
- MGS2002: path write denied
- MGS2004: sandbox.allow unresolved
- MGS3004: tool not ready
- MGS4002: declared output overlap
- MGS4003: non-deterministic output
- MGS8001: output ref not found
- MetricsService
- StatusService
- The CLI in practice
- The Go SDK
- magus command
- magus config
- magus graph
- magus module
- magus run
- magus server
- magus status
- magus-run
- output-reference diagnostics
- race diagnostics
- sandbox diagnostics
- semver module
Affected
The set of projects touched by a change; magus affected <target> runs a target
only over them. See affected.
Referenced on 42 pages
- Agent skills
- Console API
- Logging and verbosity
- MGS1001: no ci target defined
- MGS1002: spell import shadowed
- MGS1006: unknown target
- MGS1009: target never replays from cache
- MGS1010: affected set could not be computed
- MGS1012: cross-project output forms a dependency cycle
- MGS1015: cross-project dependency names an unresolvable project
- MGS4001: filesystem race condition
- MGS4003: non-deterministic output
- StatusService
- The CLI in practice
- ViewerService
- knowledge-graph diagnostics
- magus affected
- magus command
- magus completion
- magus graph
- magus module
- magus run
- magus watch
- magus-changes
- magus-delegate-ultra
- magus-run
- race diagnostics
Sandbox
The restricted filesystem and environment a target runs in, so builds stay reproducible and side-effect-free. See sandbox.
Referenced on 28 pages
- Diagnostics
- MGS2001: path read denied
- MGS2002: path write denied
- MGS2003: env vars stripped
- MGS2005: kernel landlock unavailable
- MGS2006: PATH-shim manager stripped
- MGS2007: exec denied
- MGS2008: daemon socket withheld
- MGS2010: sandbox policy mismatch
- MetricsService
- crypto module
- encoding module
- env module
- fs module
- http module
- json module
- magus command
- magus stdlib
- magus-run
- sandbox diagnostics
Service
A long-running or shared process magus manages across runs, distinct from a one-shot target. See services.
Referenced on 33 pages
Daemon
The background magus host that owns shared state such as services and the warm knowledge graph. See daemon.
Referenced on 39 pages
- ActivityService
- Console API
- Daemon API
- FAQ
- JobService
- MGS2003: env vars stripped
- MGS2008: daemon socket withheld
- MGS2010: sandbox policy mismatch
- MGS3004: tool not ready
- MGS9001: bearer token rejected
- MGS9004: no auth token configured
- MGS9006: connector token not found
- MetricsService
- StatusService
- The CLI in practice
- TokenService
- magus command
- magus server
- magus status
- os module
- sandbox diagnostics
CI
An ordinary magusfile-defined target you compose yourself with magus\needs -
magus does not hardcode its stages. Magus.RunCI treats it specially only in
that it strips the rw charm, it is the anchor magus affected ci keys off,
and a selected scope with no project declaring it is a load error rather than
a silent no-op. See targets.
Referenced on 67 pages
- Console API
- Diagnostics
- FAQ
- Logging and verbosity
- MGS1001: no ci target defined
- MGS1003: bespoke phase-fragment target name
- MGS1010: affected set could not be computed
- MGS1015: cross-project dependency names an unresolvable project
- MGS1018: dead output glob
- MGS1019: committed output records its own commit
- MGS1021: workspace requires a newer magus
- MGS3003: tool not on PATH
- MGS3004: tool not ready
- MGS4003: non-deterministic output
- MGS4005: environmental drift
- StatusService
- The CLI in practice
- ViewerService
- env module
- magus affected
- magus command
- magus doctor
- magus init
- magus insight
- magus module
- magus run
- magus stdlib
- magus x
- magus-run
- magusfile diagnostics
- race diagnostics
Output reference
A short, shareable id (out1a2b3c, "ref" for short) for one target execution's
captured output; it appears on each target's line, and
magus query output out1a2b3c prints those exact bytes. In OpenTelemetry terms
it corresponds to a span (one target execution) within its trace (the
whole magus invocation). See output-refs.
Referenced on 4 pages
Trace
OpenTelemetry's name for one whole magus invocation; every target it runs is a
span beneath it. See telemetry.
Referenced on 13 pages
Span
OpenTelemetry's name for one unit of work under a trace - a target execution, whose sub-operations are child spans. An output reference points at a span's captured output. See telemetry.
Referenced on 3 pages
Pool
The concurrency pool: the shared set of slots that caps how many targets run in
parallel on one machine. Its capacity defaults to MAGUS_CONCURRENCY, then 4 on
GitHub-hosted runners, then min(NumCPU, 8); magus status and the
dashboard report it live. See daemon.
Referenced on 16 pages
Slot
One unit of the pool's capacity. A target acquires the slots it needs to run (most take one) and releases them when it finishes; the pool tracks capacity (total slots), running (acquired), and queued (blocked). See daemon.
Referenced on 11 pages
Concurrency
How many targets run at once. It is bounded by the pool's capacity and set with
--concurrency, MAGUS_CONCURRENCY, or the concurrency config key. See
daemon.
Referenced on 20 pages
Queued
A target that wants a slot while the pool is full; it blocks first-in-first-out until a slot frees. The dashboard colors a sample with queued > 0 accordingly. See daemon.
Referenced on 6 pages
Pool mode
Which pool a run uses: daemon (one shared pool the background daemon owns across every workspace and client) or proc (a per-process pool for a single one-off invocation). See daemon.
One-off
A single magus invocation that runs a target and exits, using a per-process
pool; the opposite of the long-lived daemon or a service. See
daemon.
Remote cache
A CI-only backend that shares content-addressed artifacts across runners: a cold machine replays a build another runner already did instead of rebuilding. Every remote artifact must be signed by a trusted key. See remote-cache.
Referenced on 12 pages
Snapshot
A point-in-time view of live state - the pool's occupancy or a tick of exported metrics - as opposed to accumulated history. See daemon.
Referenced on 20 pages
Backfill
The recent history the daemon replays to a dashboard on connect, so its charts start populated instead of empty. It is served from a bounded ring buffer of the last few hundred samples. See daemon.
Referenced on 1 page
Telemetry and health
Latency
How long an operation takes. magus records latency as OpenTelemetry histograms per family - target execution, cache op, pool wait, and graph query - and reports each as a count, sum, and percentiles. See telemetry.
Percentile
A latency value at a given rank, interpolated from a histogram's buckets: p50 is the median, p95 and p99 are the tail that most latency budgets care about. See telemetry.
Health
The at-a-glance daemon state derived from the pool: healthy when the pool is reporting, degraded when it reports an error, down when there is no pool. The dashboard color-codes each state. See daemon.
Referenced on 11 pages
Volatility
A target that fails once and passes on rerun is volatile, as opposed to a regression that started failing and stays failing. magus keeps per-target pass/fail history and a Wilson-score volatility rate to tell them apart and auto-retry the noise. See volatility.
Referenced on 10 pages
Insight and knowledge
Knowledge graph
The queryable graph of a workspace's spells, targets, docs, and code
relationships; query it with magus query/explain/path. See
knowledge.
Referenced on 23 pages
MAGUS.md
The committed routing index at a workspace root, regenerated from the knowledge graph: it lists every node and points at the exact query for a given question, so it is the entry point an agent reads first. See knowledge.
Insight
The reports magus derives over the graph and history (hotspots, affinity, ownership, trend). See insight.
Referenced on 10 pages
Hotspot
An insight lens: edit frequency times complexity, the prime refactoring targets.
The project view heat-colors the dependency graph by churn; --files ranks
individual files. See insight.
Affinity
An insight lens: projects that change together (temporal coupling). A pair that co-changes without either declaring a dependency on the other is a candidate architectural smell. See insight.
Referenced on 7 pages
Ownership
An insight lens: author concentration - the primary author and their share, the distinct-author count (the bus factor), and abandonment. See insight.
Referenced on 12 pages
Trend
An insight lens: the recent half of the window against the earlier half. A positive delta is a rising hotspot; a negative one is cooling. See insight.
Referenced on 7 pages
Diagnostic code
A stable MGSxxxx identifier attached to a magus warning or error, so it can be
referenced and looked up; some are guardrails (see wards), others hard
errors.
Referenced on 4 pages
Console
The vocabulary of the browser app. These terms name things you only meet in the console's UI, so they are defined here rather than left to be inferred from it.
Console
The browser app that reads a magus workspace: a tabbed, tiling page hosting the log viewer, graph explorer, dashboard, and activity trail. It is a separate static app, not something the daemon serves - the daemon exposes a loopback API it calls: read-only views plus one bearer-gated job-control service for maintenance jobs. See reference/console.
Console app
One of the console's applications (Log Viewer, Graph Explorer, Dashboard, Activity Trail, Settings). "App" rather than "page" because one is never a document you navigate to: it is mounted into a tab, or into a pane beside another one. Each is single-instance - opening one you already have focuses it instead of duplicating it.
The glossary term is two words on purpose. As a bare "App" the auto-linker matched every unrelated "app" in the corpus - a ChatGPT desktop app, a Postgres app - and pointed each at this definition. See reference/console.
Referenced on 1 page
Pane
A split within a tab. Splitting divides the focused pane along its longer side, so the same action tiles side-by-side on a desktop and stacks on a phone; a tab with no split is a single pane. Drag the divider to re-weight the split. See reference/console.
Referenced on 1 page
Chord
A key combination bound to a console command, written mod+k - where mod is
Cmd on macOS and Ctrl elsewhere, so one binding fits both. Every chord is
rebindable (Settings > Keybindings), and a command remains reachable from the
command bar whether or not it has one. See reference/console.
Command bar
The console's runner: one searchable list of every command and its chord,
opened with mod+k. It is the discoverable route to any action - the menus and
chords dispatch the same commands it does. See reference/console.
Live link
The URL that points an app at a running daemon. The daemon serves the console
from its own loopback origin, so the link is that origin plus the app path and
a bearer token in the fragment (http://127.0.0.1:7391/console/graph/#token=...).
The daemon prints it; the console consumes the token, stores it, and strips it from
the URL, so the secret never lingers in history or a copied link. The origin must be
literal loopback - localhost and hostnames are rejected before any request.
Without one, an app
reads only what rides in the link itself. See reference/console.
See also
- Conventions - how to read the placeholders, shell commands, and admonitions used across these pages.
- Targets - the fuller Target-struct glossary (Path, Name, Files) for magusfile authors.