2589 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
jschoubben	f7e90cb049	mesh-vault: account_retire refuses while the controller holds the lease or before the wants are read whole, as the passes do (issue 774, review round 1)	2026-10-27 23:00:54 +01:00
jschoubben	98cae719bd	mesh-vault: pin the group's mesh-sdk head d688f10 (issue 774)	2026-10-27 22:52:33 +01:00
jschoubben	92cabc6fb2	mesh-vault: prove the vault whole on a real bus mints only from the lease write, and try a failed mint again at the pass; adopt the operator key before the watches open (issue 774, ADR 0561 §1-§4)	2026-10-27 22:48:58 +01:00
jschoubben	f1cdabbb0d	mesh-vault: tell where modules stand and which node holds the bus from the catalogue's placement first, so the vault does not depend on the controller's assignments for them (issue 774, ADR 0549 §3, §5)	2026-10-27 22:45:18 +01:00
jschoubben	6bc56a4ce3	mesh-vault: serve issue-account, the hand path that mints one wanted account now, and record a rotation at most once per loaded list's revision; a covered account still never rotates in place (issue 774, ADR 0561 §4, §9)	2026-10-27 22:42:57 +01:00
jschoubben	0754c2c3ae	mesh-vault: retire an account the grants part no longer wants only within ADR 0230's bounds, keeping its value, and re-enable it when wanted again; account_retire for a person past the bound (issue 774, ADR 0561 §2)	2026-10-27 22:39:13 +01:00
jschoubben	d422479180	mesh-vault: mint only while the controller's lease is handed away, read afresh before each mint, and say in vault_status what is held back and why (issue 774, ADR 0561 §3, §9)	2026-10-27 22:35:08 +01:00
jschoubben	d0bba2d364	mesh-vault: mint each account the grants part wants and the vault holds no value or adopted hash for, in the controller's shape, hashed before account-issued and secret-changed (issue 774, ADR 0561 §1, §2, §4)	2026-10-27 22:33:44 +01:00
mesh-tools	bf94af0a82	Merge pull request 'gitea: gitea_team_rights reads a forge team's members and units and a user's effective rights, read-only (issue 1563)' (#524) from fix/1563-team-rights into main	2026-10-27 21:00:57 +00:00
mesh-tools	476a59162f	Merge pull request 'mesh-build-go, mesh-build-node: a missing bubblewrap fails the sandbox proofs on a build node instead of skipping them (issue 1309)' (#523) from fix/1309-bwrap-fatal into main	2026-10-27 21:00:53 +00:00
jschoubben	36d5993323	gitea_team_rights: refuse a forge user that does not exist; keep ForgeRepository's doc comment on it (issue 1563)	2026-10-27 21:54:51 +01:00
jschoubben	f8ddcc98f6	Add gitea_team_rights: read a forge team's members, units and a user's effective rights, with the administrator's login, GET only (issue 1563)	2026-10-27 21:50:59 +01:00
jschoubben	9109524502	A missing bubblewrap fails the sandbox proofs on a build node instead of skipping them ... The levels a build module judges hand the tests MESH_BUILD_NODE=1; the tests that run a step in bubblewrap fail on it when bwrap is missing. Issue 1309	2026-10-27 21:36:28 +01:00
mesh-tools	9bd8247915	Merge pull request 'mesh-issues: cover a merged fix from the delivery view's reached head, not only its once-said event (issue 1950)' (#522) from fix/1950-delivered-on-machines into main	2026-10-27 20:32:21 +00:00
jschoubben	116751130f	Cover a merged fix from the delivery view's reached head in the sweep, not only from its once-said event, so a fix named after the saying is delivered (issue 1950)	2026-10-27 21:17:53 +01:00
mesh-tools	c05aa5e6ea	Merge pull request 'Take the placement files out again, so every node returns to the controller's compositions (recovery, issue 1126)' (#521) from revert/1126-seed into main	2026-10-27 14:06:34 +00:00
jschoubben	b95b0a4750	Take the placement files out again: the node agents cannot watch their haves with '>' (refused by their grant), so no node can compose its own; without its placement key each node returns to the controller's compositions (issue 1126)	2026-10-27 09:23:26 +01:00
mesh-tools	04fa2e3286	Merge pull request 'Seed the placement files from what each node runs today, so placement lives in the catalogue (issue 1126, ADR 0549 §4)' (#520) from feat/1126-seed into main	2026-10-27 08:20:33 +00:00
jschoubben	0c61bad102	Seed the placement files from what each node runs today, so placement lives in the catalogue (issue 1126, ADR 0549 §4)	2026-10-27 08:34:10 +01:00
mesh-tools	02597b66d7	Merge pull request 'The issue tracker learns the merge of a fix it never heard, so an old resolved issue no longer reads 'nothing heard from the delivery' (issue 1950)' (#517) from fix/1950-old-fixes into main	2026-10-27 07:21:13 +00:00
mesh-tools	457c60972c	Merge pull request 'The placement check and the delivery gate read the group's mesh-sdk, so replicated seats pass and placement pull messages are read (issue 1126)' (#519) from feat/1126-l2b into main	2026-10-27 07:21:09 +00:00
mesh-tools	5ae337b14d	Merge pull request 'Every build module clears at start what a previous process left running, held by the catalogue's check (issue 1890)' (#518) from fix/1890-step-owner into main	2026-10-27 07:19:39 +00:00
jschoubben	2ac511ce6b	Pin checks/placement and mesh-delivery-gate to mesh-sdk cadd7b1, the group's final head (issue 1126)	2026-10-27 02:44:12 +01:00
jschoubben	e955b53bf0	Pin mesh-delivery-gate to mesh-sdk 062c29c, so it reads a catalogue pull message that carries placement files instead of refusing it (issue 1126; review round 1)	2026-10-27 02:43:13 +01:00
jschoubben	454ac0fec7	Pin checks/placement to mesh-sdk 062c29c, the L2b group's head, so the catalogue's placement check judges with the replicated-seat rule the seed needs (issue 1126)	2026-10-27 02:30:16 +01:00
jschoubben	3c6f2dc274	mesh-issues: a learned merge is kept as of now, closed untimed issues get no fix time, the forge read is declared, the sweep rotates its asks (issue 1950)	2026-10-27 01:30:37 +01:00
jochen	39419b1892	Pin the build modules to mesh-sdk db1007ff, which deletes a gone process's ask key so its redelivery still answers (issue 1890)	2026-10-27 01:30:31 +01:00
jschoubben	b51f03c4ff	mesh-issues: a fix whose pull request has no record learns its merge from the delivery or the forge, so a delivered event can cover it (issue 1950)	2026-10-27 01:24:57 +01:00
jochen	3d42988afa	Hold every build module to ending what a previous process left running (issue 1890) ... A replaced mesh-build-go left a check ask's step running and its start sweep spared it (issue 1890, note 21). mesh-build-go, mesh-build-node and mesh-build-image pin mesh-sdk 981a35b5, whose steps name their owner and whose sweep ends another owner's at once; each runs the sweep through one method that main calls and that its test runs through the conformance kit's left-running case. The failurekit check now refuses a build module whose tests do not run that case, test step or not.	2026-10-27 01:22:13 +01:00
mesh-tools	64530a8dcb	Merge pull request 'Every build module runs the failure contract's conformance kit, and the catalogue refuses one that does not (issue 1901)' (#516) from fix/1901-failure-contract into main	2026-10-26 23:44:16 +00:00
jschoubben	e8a953818c	Merge main into fix/1901-failure-contract: pin mesh-sdk a2759ec (the group's sdk head), the failure kit check's marker lists what it reads (issue 1936), and the registry test's password can no longer match a random workspace name (issue 1901)	2026-10-27 00:39:35 +01:00
mesh-tools	f0f7b6737e	Merge pull request 'Delivery records are true at the source: the gate keeps no state after the merge, and the issue tracker reads delivered from the view (issue 1280)' (#515) from fix/delivery-records-true into main	2026-10-26 21:48:46 +00:00
jschoubben	c1cd8461bc	Merge main (#514, issue 1733) into the delivery-records group	2026-10-26 22:29:36 +01:00
mesh-tools	53bf4bb84c	Merge pull request 'The merge Approve says the check's real state, and is asked again when it passes or fails (issue 1733)' (#514) from fix/1733-ask-says-the-check into main	2026-10-26 21:25:37 +00:00
jschoubben	4677b8a2f5	mesh-delivery-gate: pin mesh-sdk 68d65e6, the group's sdk head merged with sdk main (issue 1280)	2026-10-26 22:21:21 +01:00
jschoubben	cc6e478c4f	Merge remote-tracking branch 'origin/main' into fix/delivery-records-true	2026-10-26 22:21:12 +01:00
mesh-tools	c17ab34a28	Merge pull request 'A reads-outside marker lists what its tests read, so its package's check is reused until one of those files changes (issue 1936)' (#513) from fix/1936-declared-reads into main	2026-10-26 21:18:14 +00:00
jschoubben	099605ec70	mesh-delivery-gate: the Approve's ask says the check's actual state at its heads, never a pass it has not had (issue 1733) ... With check-gates-merge false a head is ready and asked before any verdict exists, yet the ask said "<pr> passed its checks" (a group: "passed its checks"): on 2026-10-26 the operator approved mesh-delivery #79 and a six-repository group on that claim while their checks had not answered. The ask now reads the checker's verdict at exactly the heads it covers (checkAt, beside checkerAt): "passed its check" only for a pass there; otherwise "its check has no verdict yet[: it is running (since HH:MM UTC)]" or "its check failed: <first failure>", and the Approve clause says it merges "now, before its check ends" or "although its check failed". While the check gates no merge, a pending ask whose check then passes or fails (or loses a pass it named) is withdrawn and asked again in new words (the ask's AskCheck against the state now, endStaleAsks, the review-record path's withdrawAsk); a check that starts running is no new word, so the wait stays one message. Whether a merge waits is unchanged. The gate's log lines and stalled lines that claimed a pass for a ready head say the same state. Quick fix: replace "passed its checks" by neutral words in the two summaries. Thorough fix: one reader of the check's state at the ask's heads (checkAt) used by every text that names it, and the ask re-said when that state changes. Chosen: thorough, as it costs one helper and one case in endStaleAsks, and the quick one would still leave a pending ask silent about a failure that came after it. Tests: rows in TestAnApprovedPullRequestIsMergedThroughTheMergeTool (gated pass; ungated no verdict, running, then passed, then failed) and the ungated group's wording; no new test function.	2026-10-26 22:18:08 +01:00
jschoubben	488b7bfc58	checks/health: its marker names health-undeclared for what it counts (issue 1936)	2026-10-26 22:13:14 +01:00
jschoubben	d58249d0d8	checks/health: its marker lists the predefined keys, the modules' templates and health-undeclared it reads (issue 1936) ... ReadTreeManifest reads predefined.json and each templated module's templates (WithTemplatesFrom), and the test reads the root's health-undeclared through Kept: none was listed, so a change to them reused a stale verdict. No other marker's package reads manifests through ReadTreeManifest beyond what it lists. Review finding F1 on ba49a7f0.	2026-10-26 22:13:01 +01:00
jschoubben	d224b74ff1	mesh-build-go: a marked package's digest hashes every file of its own directory, Go files its build tags exclude too (issue 1936) ... go list leaves a file its build tags exclude (an integration test) in IgnoredGoFiles, which the digest did not hash; mesh-provisioner-client's unit test globs *_test.go and reads two of them, so a change there reused a stale unit pass. Review finding F2 on ba49a7f0.	2026-10-26 22:13:01 +01:00
jschoubben	234d2d5534	mesh-delivery-gate: pin mesh-sdk b4310df, the delivery-records work merged with sdk main (issue 1280)	2026-10-26 22:11:55 +01:00
mesh-tools	78d7ef71cc	Merge pull request 'The catalogue's placement files: listed at a merge and checked (issue 1126)' (#505) from feat/1126-nodes-compose into main	2026-10-26 21:11:16 +00:00
jschoubben	1a738ed4fc	Merge remote-tracking branch 'origin/main' into fix/delivery-records-true	2026-10-26 22:08:50 +01:00
jschoubben	c085975146	Pin mesh-sdk 9796444 (l2-next: feat/1126-nodes-compose merged with sdk main #101, the standing-test race fixes) (issue 1126)	2026-10-26 22:05:42 +01:00
jschoubben	ba49a7f0f9	mesh-build-go: a reads-outside marker lists what its tests read, so its package is kept until one of those files changes (issue 1936) ... 47 packages carried the marker and were never kept: about 2000 tests per level ran on every check, whatever it changed. The marker now lists, as paths or globs from the repository's root (? before a path whose absence is read), what the package's tests read outside it; the digest hashes those files with the package's own non-Go files. A marker that lists nothing, names an unclean path, or a line that matches nothing keeps today's never-kept digest. The 46 markers list their reads; checks/deps and checks/trunk lose theirs (their tests read only temporary directories). Digest form 6. Quick fix of issue 1936, chosen by the operator 2026-10-26 21:56; the thorough fix (the Go test log's files kept with each verdict) stays on the issue.	2026-10-26 22:02:58 +01:00
jschoubben	be7e98d25c	Pin mesh-sdk 5f45175 (l2-next: feat/1126-nodes-compose merged with sdk main) after merging main (issue 1126)	2026-10-26 21:59:21 +01:00
jschoubben	b1413949f0	Merge remote-tracking branch 'origin/main' into feat/1126-nodes-compose	2026-10-26 21:56:51 +01:00
mesh-tools	eba4bab00a	Merge pull request 'The image build context is the module's own directory, so a Dockerfile in a subdirectory builds (issue 1703)' (#512) from fix/1703-image-context into main	2026-10-26 20:36:08 +00:00
mesh-tools	216701fcba	Merge pull request 'The build modules size their capacity by CPU share and keep build hours (issues 1890, 1806)' (#511) from fix/capacity-follows-cpu-share into main	2026-10-26 20:33:30 +00:00