5 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	24bf59219e	Distribution and the forge hold their caller list from its config watch, not an ask per call (issue 1966) ... Claude-Session: https://claude.ai/code/session_01JG73KEq4zoDfM9WtYpcQgZ	2026-11-09 22:42:00 +01:00
jschoubben	541c2e02d9	distribution: provide and serve no artifact-store, and answer the seats' list from the store's own files (ADR 0632 §1, §3, §4; issue 1966) ... The store is found by the seats' holder and its listen registry; list says, per repository, each manifest's digest, whether it is an index and what it names, its tags, its size and whether it is held, so the sweep reads the store through the seat. E15 now asks that nothing is provided or served. Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig	2026-11-04 21:11:15 +01:00
jschoubben	b665156b0f	A3k finding 2: distribution reads its caller list as mesh-config resolves it, not from an environment nothing renders ... The node-engine fills ${config:} only in files, unit names, owners and groups, never in a process's environment, so MESH_CONFIG_CALLERS was never set and design 51's defaults always held. The tools bundle now reads `callers` through stdio.Config on each call (holder.ConfiguredCallers, Verbs.WithCallers per call); the program, which has no runtime resolving config, asks its own tools bundle's new registry_callers on each wake of the windows (manifest invokes). The environment variable is gone. Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig	2026-11-04 13:54:17 +01:00
jschoubben	b4584b0313	CAT-D2: distribution's caller list and its question to the builder are mesh-sdk's shared parts ... Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig	2026-11-04 13:32:55 +01:00
jschoubben	9ad22ad1e1	CAT-D1..D5 (holder core): distribution's holding of the two image seats, its caller list, incoming, the store's front and the two windows ... The holder answers publish and publish-part into incoming (parts of at most 1 MiB, resumed from what is held, hashed, only the missing layers sent, 20 GiB with its 80 % finding and a refusal at the cap, a transfer idle 24 hours dropped), asks builder_versions before it stores, and says published or refused (design 51 *Publishing*, ADR 0605 §4, ADR 0611). versions, remove (a tagged version; untagged only for the sweep's retention, which a hold keeps), hold and release (ADR 0617 §2: the sweep alone; the operator's session by hand; never distribution's own account), tags and mirror. The caller list is a trusted config value checked against the caller the tool runner proved. The store's port is the program's: reads open, writes refused but while the direct-write window is open (never over a tag published through the seat) or with the bootstrap's one-off credential. The old-name and direct-write windows read every node, away ones included, close once, and name a node holding them seven days. Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig	2026-11-04 11:52:37 +01:00