mesh-catalog

Author	SHA1	Message	Date
mesh-tools	05e6b583e2	Keep what ssh reads itself and linked key folders in ~/.ssh, and fail the sweep loudly (issue 1020, ADR 0417) mesh/merge-gate head 05e6b583e2e3 merged into trunk ce56b491cffd — pass: builds ssh-client → ace, g14, novox, shanks; no bus step; every machine composes w… Details mesh/repo-check head 05e6b583e2e3 merged into trunk ce56b491cffd — pass: THE CHANGE ALTERS ITS OWN CHECK (merge-check.sh): main's version judged it; the ch… Details mesh/delivery delivered Details The sweep from issue 1017 moved known_hosts2, rc and environment, which ssh and sshd read by default, and moved a link to a folder of keys, breaking every login through it. It could move a file a tool was still writing. When ~/.local was on another file system, every sweep failed at its first move and left an empty folder each round, seen only in the journal. Its list was written after the moves with errors ignored. Now those files and linked key folders stay; a link whose target, or the folder it names, cannot be checked is left and named; a copy of authorized_keys is moved at any depth; a path changed in the last minute, at any depth, waits for the next sweep; a retired folder on another file system fails the sweep before anything is made; the list names each move before it is made; and each sweep's outcome is kept for ssh_client_check, which shows a failed sweep as a problem. A key's first line is read only so far. The catalogue's new checks/sshdir refuses any manifest but ssh-client naming a path under ~/.ssh (ADR 0415 §6). The README cites §7 for config.d.	2026-10-17 13:36:27 +00:00
mesh-tools	ce56b491cf	Merge pull request 'ssh-client keeps ~/.ssh to what it knows: sweep every other path into a kept folder (issue 1017, ADR 0415)' (#346 ) from fix/1017-retire-ssh-leftovers into main	2026-10-17 13:07:05 +00:00
mesh-tools	9675babf52	Merge pull request 'mesh-delivery acts on events and keeps each pull request's key; the forge's announcements carry a message id (issues 975, 976, design 47 milestone 2)' (#345 ) from feat/events-and-queues into main	2026-10-17 12:52:42 +00:00
jschoubben	94f65cccd9	issue 975: an empty commit so mesh-delivery reads the group's after: line, which it reads only when a head is announced (the operator's word, 2026-10-17) mesh/merge-gate head 94f65cccd9c1 merged into trunk a7d526838ab0 beside mesh-controller#368@0f21fe78 — pass: builds build-agent, gitea, mesh-delivery → ace… Details mesh/repo-check head 94f65cccd9c1 merged into trunk a7d526838ab0 beside mesh-controller#368@0f21fe78 — pass: its merge-check.sh passed, each part in its to… Details mesh/delivery delivered Details mesh/delivery-group group feat/events-and-queues delivered: every member is delivered Details	2026-10-17 14:39:21 +02:00
mesh-tools	acf075fa63	ssh-client keeps ~/.ssh to what it knows: sweep every other path into a kept folder (issue 1017, ADR 0415) mesh/merge-gate head acf075fa63cc merged into trunk 9675babf528b — pass: builds ssh-client → ace, g14, novox, shanks; no bus step; every machine composes w… Details mesh/repo-check head acf075fa63cc merged into trunk 9675babf528b — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-… Details mesh/delivery delivered Details ssh-client owns ~/.ssh, but treated every file it did not place as found, so a predecessor's drop-in and old copies stayed there for weeks. Its process now sweeps at start and every ten minutes: keys at any depth (and links to them), authorized_keys, authorized_keys2 and sockets stay, and a folder holding one is gone into; everything else moves to ~/.local/state/ssh-client/retired/<UTC time>/, a folder never shared with another sweep, with a list beside it, which ssh_client_check shows. Nothing is deleted.	2026-10-17 12:38:16 +00:00
jschoubben	52f70f42b7	issue 975: a merge heard again changes nothing, and a verdict naming no trunk commit is not written to the key mesh/delivery-group group feat/events-and-queues rejected: its order contradicts itself: novox/mesh-catalog@52f70f42b749 and novox/mesh-controller@0f21fe7888be… Details mesh/merge-gate head 52f70f42b749 merged into trunk a7d526838ab0 beside mesh-controller#368@0f21fe78 — pass: builds build-agent, gitea, mesh-delivery → ace… Details mesh/repo-check head 52f70f42b749 merged into trunk a7d526838ab0 beside mesh-controller#368@0f21fe78 — pass: its merge-check.sh passed, each part in its to… Details mesh/delivery superseded: a newer head of the same pull request Details	2026-10-17 14:10:14 +02:00
jschoubben	add91ff048	issue 976: the forge's announcements get a deterministic message id; the announcement files go, the poll's watermark is kept in the module's state	2026-10-17 13:52:47 +02:00
jschoubben	2c8c1543ba	issue 975: the pull request's key written by compare-and-set, the ready flag on a ready mark's check, build-agent reads the key	2026-10-17 13:48:54 +02:00
jschoubben	27ca8bbcff	issue 975: the acceptance over a real bus: a ready mark and its Approve are merged within seconds of their events	2026-10-17 13:28:21 +02:00
jschoubben	0809a1f982	issue 975: a test that fails on a ticker and on a timer that names no bounded step it retries	2026-10-17 13:25:33 +02:00
jschoubben	b5225d3a2f	issue 975: no forge poll; the open pull requests are read at start and when a merge check's status, a new head or a ready mark says they changed	2026-10-17 13:25:03 +02:00
jschoubben	d675f5e7c6	issue 975: no tick and no reconcile loop; a look after each event, one timer for the steps that wait on the clock	2026-10-17 13:23:25 +02:00
jschoubben	95e11464fe	issue 975: ready marks, verdicts and Approves ask the merge as events, not at the next minute	2026-10-17 13:19:01 +02:00
mesh-tools	a7d526838a	Merge pull request 'One forge user, nox-agent, for every machine's agents' SSH pushes, each machine's key titled by machine (issue 991, ADR 0410)' (#344 ) from fix/991-one-forge-agent-user into main	2026-10-17 00:51:08 +00:00
mesh-tools	3a2560dc51	One forge user, nox-agent, for every machine's agents' SSH pushes, each machine's key titled by machine (issue 991, ADR 0410) mesh/merge-gate head 3a2560dc51fc merged into trunk 82df3bd58913 — pass: builds gitea → novox; no bus step; every machine composes with the change as it di… Details mesh/repo-check head 3a2560dc51fc merged into trunk 82df3bd58913 — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-… Details mesh/delivery delivered Details	2026-10-17 00:46:43 +00:00
mesh-tools	82df3bd589	Merge pull request 'Give the forge an ssh name of its own, so it no longer merges with the operator's entry for its machine (issue 955, ADR 0409)' (#343 ) from fix/955-forge-ssh-name into main	2026-10-17 00:05:57 +00:00
mesh-tools	661b83249c	Give the forge an ssh name of its own, so it no longer merges with the operator's entry for its machine (issue 955, ADR 0409) mesh/merge-gate head 661b83249c2a merged into trunk bb291b5ad8af — pass: builds gitea, ssh-client → ace, g14, novox, shanks; no bus step; every machine com… Details mesh/repo-check head 661b83249c2a merged into trunk bb291b5ad8af — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-… Details mesh/delivery delivered Details	2026-10-17 00:01:42 +00:00
mesh-tools	bb291b5ad8	Merge pull request 'Keep gitea's forge-account provider running when a watch is refused, so a later grant is picked up (issue 955)' (#342 ) from fix/955-provider-keeps-running into main	2026-10-16 23:30:28 +00:00
mesh-tools	b159efd656	Keep gitea's forge-account provider running when a watch is refused, so a later grant is picked up (issue 955) mesh/merge-gate head b159efd65673 merged into trunk 522780d5fcfa — pass: builds gitea → novox; no bus step; every machine composes with the change as it di… Details mesh/repo-check head b159efd65673 merged into trunk 522780d5fcfa — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-… Details mesh/delivery delivered Details	2026-10-16 23:26:01 +00:00
mesh-tools	522780d5fc	Merge pull request 'Let gitea's forge-account provider read the assignments it learns its consumers from (issue 955)' (#341 ) from fix/955-gitea-reads-assignments into main	2026-10-16 23:11:16 +00:00
mesh-tools	065ecd85f5	Let gitea's forge-account provider read the assignments it learns its consumers from (issue 955) mesh/merge-gate head 065ecd85f53e merged into trunk 734a77f5a91a — pass: builds gitea → novox; no bus step; every machine composes with the change as it di… Details mesh/repo-check head 065ecd85f53e merged into trunk 734a77f5a91a — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-… Details mesh/delivery delivered Details	2026-10-16 23:05:10 +00:00
mesh-tools	734a77f5a9	Merge pull request 'Feature agents-write-git, step 2: git over SSH with a key made on each machine (issue 955)' (#340 ) from feat/agents-write-git-ssh into main	2026-10-16 22:31:17 +00:00
mesh-tools	ae9cda8531	Hand ssh-client's forge files to the provisioner client (issue 955) mesh/merge-gate head ae9cda8531b3 merged into trunk 017b729bc95d — pass: builds gitea, ssh-client → ace, g14, novox, shanks; no bus step; every machine com… Details mesh/repo-check head ae9cda8531b3 merged into trunk 017b729bc95d — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-… Details mesh/delivery covered after its failure: a later walk that contains it was delivered: plan-1792195559895153198 (novox/mesh-catalog at 82df3bd5 into main,… Details mesh/delivery-group group feat/agents-write-git-ssh delivered: every member is delivered Details	2026-10-16 22:05:52 +00:00
jschoubben	6f45570d4c	Do not remove keys or entries before the machines' keys are read (issue 955 F) mesh/merge-gate head 6f45570d4c23 merged into trunk 017b729bc95d — fail: builds gitea, ssh-client → ace, g14, novox, shanks; no bus step; 4 problem(s) the … Details mesh/repo-check head 6f45570d4c23 merged into trunk 017b729bc95d — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-… Details mesh/delivery-group group feat/agents-write-git-ssh rejected: a member's own check failed Details mesh/delivery superseded: a newer head of the same pull request Details	2026-10-16 22:54:31 +02:00
jschoubben	6fdf3629d3	Remove a machine's mesh keys and entry when its key is no longer reported (issue 955 F)	2026-10-16 22:53:22 +02:00
jschoubben	896f1d2854	Merge feat/agents-write-git-ssh into feat/agents-write-git-ssh-f (issue 955 F)	2026-10-16 22:48:06 +02:00
jschoubben	5c64b71cd7	Test the forge-account provider whole against a real bus and a fake forge (issue 955 F5)	2026-10-16 22:47:59 +02:00
jschoubben	1081a5f3ea	Declare the forge-account provision, its provider bundle, its fact and the keys it reads (issue 955 F4)	2026-10-16 22:46:27 +02:00
jschoubben	c346bba34e	Add the forge-account provider: an agent account, its team and its machine key per consumer (issue 955 F3)	2026-10-16 22:45:51 +02:00
fix-955-ssh	165cbcb35f	Merge branch 'feat/agents-write-git-ssh' into feat/agents-write-git-ssh-s	2026-10-16 22:44:43 +02:00
fix-955-ssh	9cb615f121	Prove the forge key process over a real bus in the merge check (issue 955 S4)	2026-10-16 22:44:36 +02:00
fix-955-ssh	ad5a0f8e44	Place the forge's known host, SSH Host and git rewrite (issue 955 S3)	2026-10-16 22:43:51 +02:00
fix-955-ssh	a4cdd05cb2	Declare ssh-client's keys state and its forge-account requirement (issue 955 S2)	2026-10-16 22:43:29 +02:00
fix-955-ssh	b2009f1bb5	Keep the machine's forge SSH key and its keys entry (issue 955 S1)	2026-10-16 22:43:18 +02:00
jschoubben	8131c13634	Register and prune an agent account's mesh SSH keys through the forge API (issue 955 F2)	2026-10-16 22:42:04 +02:00
jschoubben	c8dfbdc813	Lift the agent account code into internal/forgeaccount for the forge-account provider (issue 955 F1)	2026-10-16 22:41:11 +02:00
mesh-tools	017b729bc9	Merge pull request 'Serve postgres's consumers the port its server is published on, not the container's 5432 (issue 957)' (#339 ) from fix/957-postgres-serves-published-port into main	2026-10-16 20:15:33 +00:00
lead-57	deb2020bd4	Serve postgres's consumers the port its server is published on, not the container's 5432 (issue 957) mesh/merge-gate head deb2020bd47d merged into trunk 5652a1494493 — pass: builds postgres, sent nowhere; no bus step; 2 wait(s) for a person; every machine … Details mesh/repo-check head deb2020bd47d merged into trunk 5652a1494493 — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-… Details mesh/delivery delivered Details On novox postgres is published 6852:5432; handed 5432, gitea and keycloak reached nothing once their files were filled from postgres's entry.	2026-10-16 21:56:15 +02:00
mesh-tools	5652a14944	Merge pull request 'Feature agents-write-git, step 1: agents write with their own accounts, main stays closed, a merge into main waits for the operator (issues 948, 954)' (#338 ) from feat/agents-write-git into main	2026-10-16 19:45:36 +00:00
fix-deliv-awg@novox	9acd1f51c5	Merge branch 'feat/agents-write-git' into feat/agents-write-git-d mesh/merge-gate head 9acd1f51c5cf merged into trunk 8d012fe4e270 — pass: builds gitea, mesh-delivery, mesh-provisioner-client → ace, g14, novox, shanks; no… Details mesh/repo-check head 9acd1f51c5cf merged into trunk 8d012fe4e270 — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-… Details mesh/delivery delivered Details	2026-10-16 21:36:10 +02:00
fix-deliv-awg@novox	4cccd817a0	End a group's ask and Approve when any member is pushed (issue 948, ADR 0398 §3)	2026-10-16 21:36:06 +02:00
fix-forge-awg	3cdea45f90	Keep main's rule right at every start and copy a covering glob's checks (issue 948, review round 1)	2026-10-16 21:35:51 +02:00
lead-57	4215b40547	Read the whole plan the controller writes: at, from, as, names and credential-tool (issue 954) The client decodes a plan strictly, and since the controller carries these fields (issues 923 and 928) it refused the plans of gitea, keycloak and claude-code.	2026-10-16 21:32:13 +02:00
fix-deliv-awg@novox	0bfece71da	Merge branch 'feat/agents-write-git' into feat/agents-write-git-d	2026-10-16 21:29:58 +02:00
fix-deliv-awg@novox	f61e00aeaa	Ask the operator to Approve a merge into main and merge only on the warrant (issue 948, ADR 0398 §3)	2026-10-16 21:29:55 +02:00
fix-forge-awg	789aa0133f	Keep the guard's push wording for main (issue 948)	2026-10-16 21:28:49 +02:00
fix-forge-awg	7807135a1b	Main takes no push and only mesh-tools merges, set by setup and guarded (issue 948, ADR 0398 §2)	2026-10-16 21:28:43 +02:00
fix-deliv-awg@novox	417f69567c	Merge only into main: a ready mark on another base is left to its author (issue 948, ADR 0398 §4)	2026-10-16 21:26:53 +02:00
fix-forge-awg	b0f86671b6	Give the agent's token write scopes and the agents write team (issue 948, ADR 0398 §1)	2026-10-16 21:25:59 +02:00
mesh-tools	8d012fe4e2	Merge pull request 'Feature providers-after-switch-on, step 1: providers answer after the switch-on (issues 923, 928, 849, 945, 825)' (#337 ) from feat/providers-after-switch-on into main	2026-10-16 19:13:01 +00:00

1 2 3 4 5 ...