Mail and bus hardening: mesh-mail sends on Approve, desk prompt says what for, duplicate PR delivery, cpu_top (issues 790, 789, 783, 741, 811) #316

Merged

mesh-tools merged 11 commits from feat/mail-hardening into main 2026-10-15 14:59:25 +00:00

Conversation 3 Commits 11 Files Changed 20

+2500 -56

11 Commits

Author	SHA1	Message	Date
jochen	eb97a3d9a2	mesh-mail: refuse a send whose undecided index cannot be written, and never overwrite a corrupt index (issue 811, review round 3)	2026-10-15 15:40:16 +02:00
jochen	8b2e2300d8	mesh-mail: a send whose ask was never heard settles as ended, and the sweep reads only undecided sends (issue 811) ... A send whose ask never reached the router (the publish failed, or it was otherwise never recorded) stayed kept and undecided forever, so mail_send_status kept saying "waiting" and the minute sweep kept reading it. Settle it as ended once its asked time plus SendAskLasts has passed, with the words that say why. Keep an index of undecided send ids beside the sends (written when kept, removed once decided) so the sweep's work grows with undecided sends only, not with every send ever kept.	2026-10-15 15:27:56 +02:00
jochen	2f2daea415	Merge branch 'feat/mail-hardening' into mh-790-r1	2026-10-15 15:08:21 +02:00
jochen	3b48f5962a	mesh-mail: send on the operator's Approve itself, sweep, stale-send status, no header injection (issue 790, review round 1)	2026-10-15 15:07:46 +02:00
jochen	2b1678f315	disk-load: cpu_top's shares use the unrounded busy time, and key units by cgroup path (issue 741)	2026-10-15 15:06:06 +02:00
jochen	ab739d02dd	mesh-delivery: a merge that starts over a stopped duplicate is made from the forge's word too (issue 783)	2026-10-15 15:01:23 +02:00
jochen	a60020b51a	issue 741: merge feature branch head	2026-10-15 14:51:12 +02:00
jochen	a8d84d1730	Add disk-load's cpu_top tool: CPU by systemd unit and container (issue 741) ... No tool named which units or processes used CPU outside containers during the novox overload (issue 739). cpu_top reads each cgroup's cpu.stat (no root needed), ranks units or containers busiest first, and says the machine's CPU in use and the busy time no unit accounts for.	2026-10-15 14:51:08 +02:00
jochen	9e8521afb5	mesh-delivery: a stopped duplicate's delivery follows the pull request that merges it (issue 783) ... A delivery keyed by commit stayed stopped forever once an earlier, closed duplicate pull request with the same head had stopped it, even though a later pull request went on to merge that very commit: the merge only set merged_as on the stopped record, and the walk that carried it waited for this owner's word with no delivery left to give it. PullUpdated and PullMerged now start such a delivery over, under the same id, for the pull request that announces or merges it next, naming both pull requests in the transition's why. Any other stop (a person's, a group's, the same pull request's own close) is untouched.	2026-10-15 14:50:57 +02:00
jochen	8c60604eb7	Show what a desk's secret prompt is for, and declare mesh-mail's (issue 789) ... The desk's prompt named only the module and the secret's key, so the operator asking for one of mesh-mail's mail-credential-* accounts could not tell which one. node-launcher.secret (modules/rofi) now shows the controller's optional what as its own line under the module and secret names, escaped as text so the catalogue's words never reach the prompt as markup; omitted as before when none is declared. mesh-mail's mail-credential-* family now declares that line with the long-form own-secrets shape the controller's manifest parser reads (novox/hq issue 789 part b; part a landed in mesh-controller).	2026-10-15 14:28:45 +02:00
jochen	13cd710071	mesh-mail: add mail_send, asked and sent once on the operator's Approve (issue 790)	2026-10-15 13:57:47 +02:00