4 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	fe52629c28	Keep unchanged modules on their pins, so the delivery moves only what this release changes (issue 774)	2026-10-30 00:15:44 +01:00
jschoubben	1b16720030	Pin mesh-sdk 007b6fd, the release's final head (issue 774)	2026-10-30 00:10:13 +01:00
mesh-admin	a72eb3dbb2	licence manager: say what moved a binding, why, and who asked (issue 625) ... A switch of g14 back to another licence on 2026-10-13 left no trace: the manager logged no line and sent no event for bind, switch or release, and its audit kept only the verb's name. Every change of what a consumer holds now goes to the journal, the audit and a licence.<what> event with the same fields: consumer, licence before and after, generation, why (the verb or the rule) and by (the caller the runtime proved, or the manager itself). The node is told why in the bindings state and says it when it applies. The audit and binding tables become readable through the store's reader. The SDK moves to the version that proves the caller (issue 365).	2026-10-13 11:45:52 +00:00
jochen	15b2e6b86e	The licence manager, in Go, and claude-code's half of ADR 0206 ... claude-licence-manager holds the anthropic-licence-manager seat: it reads every node's holdings state, adopts a login it does not hold by refreshing it (newest first, once per account), keeps each grant alive under a lease, publishes what each consumer should hold as its bindings state with a generation, and answers current sealed to the consumer's key. Postgres store prepared by a run-once step; grants encrypted with the vault's key. claude-code reports what its node holds (fingerprints and account, never a token), hands its grant over only when the manager asks, watches its binding and fetches the token on a newer generation, and writes access-token-only. Its ask now reads the runtime's answer as a value and addresses seats as seats.	2026-10-04 12:18:51 +02:00