jschoubben 00e54d46d7 Give the integration level the node's installed Node toolchains read-only, so the Node build module's tests build offline (issue 1891, ADR 0533) ...

mesh-build-go binds /var/lib/mesh-build-node-cache/toolchain read-only into the
integration level's one shut-off process when it is there; the unit level never.
mesh-build-node opens its installed toolchains to other accounts (folders 0755,
files 0644, writable by its owner alone; its cache 0711, so the npm cache beside
them stays its own), and realMachine copies the toolchain of its own lock from
there instead of npm ci from the registry, which the level cannot reach.

2026-10-23 11:22:05 +02:00

..

testdata

K2: keep the captured claude-code manifest in a test file (issue 1751)

2026-10-22 21:18:18 +02:00

announce_integration_test.go

mesh-build-go: announce the states it keeps from its code, so readers are granted from its word (issue 1790, ADR 0495 §2 §5)

2026-10-22 18:12:01 +02:00

announce.go

mesh-build-go: announce the states it keeps from its code, so readers are granted from its word (issue 1790, ADR 0495 §2 §5)

2026-10-22 18:12:01 +02:00

archive_test.go

mesh-build-go: push each done archive to the artifact store from its own process and answer its reference (issue 1587, S1-S4, ADR 0498 §1 §2, lead decision L9)

2026-10-22 18:22:17 +02:00

archive.go

mesh-build-go: push each done archive to the artifact store from its own process and answer its reference (issue 1587, S1-S4, ADR 0498 §1 §2, lead decision L9)

2026-10-22 18:22:17 +02:00

beside_digest_test.go

mesh-build-go: fold the siblings' commits into every digest and echo them, and test and digest the integration level under integration,isolation (lead decision L5, the checker's agreement; issue 1309)

2026-10-22 18:18:03 +02:00

build_test.go

K2: keep the captured claude-code manifest in a test file (issue 1751)

2026-10-22 21:18:18 +02:00

build.go

K2: read a manifest for its build inputs in mesh-build-go and mesh-build-image (issue 1751, ADR 0514 §2)

2026-10-22 21:08:12 +02:00

bus.go

Add the Go build module's main, recipe, guard, key keeper, runner, store and bus, and its README (issues 1483, 1484, 1485, 1486), part 7 of 20

2026-10-20 20:50:11 +00:00

captured_manifest_test.go

K2: keep the captured claude-code manifest in a test file (issue 1751)

2026-10-22 21:18:18 +02:00

digest_test.go

mesh-build-go: run go test, go build and go list in bubblewrap, so a change's code reaches no key, login or network (issue 1309, S1-S6, ADR 0448)

2026-10-22 18:12:01 +02:00

digest.go

mesh-build-go: fold the siblings' commits into every digest and echo them, and test and digest the integration level under integration,isolation (lead decision L5, the checker's agreement; issue 1309)

2026-10-22 18:18:03 +02:00

emit_test.go

Review round 1 for the checks, ssh-client and the Go build module: sshdir (1484), socket path (1486), over_bound (1290, 1486), toolchain.reported and streams (1483), re-pin to mesh-sdk 36d6f774; delta part 2 of 4

2026-10-20 21:09:36 +00:00

fetch_test.go

Make the build modules' fetch merge the head onto a trunk commit and place siblings beside the tree, so the checker judges the merge and tests read their siblings (issues 1675, 1676, 1677)

2026-10-21 21:04:59 +02:00

fetch.go

Narrow both build modules' fetch with mesh-sdk's buildstep.Narrow, the one copy (issue 1758, ADR 0499 §4)

2026-10-22 18:42:17 +02:00

forge_test.go

mesh-build-go: push each done archive to the artifact store from its own process and answer its reference (issue 1587, S1-S4, ADR 0498 §1 §2, lead decision L9)

2026-10-22 18:22:17 +02:00

gomoddirs_test.go

Leave the go.mod fixtures under testdata out of the build module's tests and digests, so the checker stops running a fixture as a module (issue 1810)

2026-10-22 01:22:31 +02:00

installed_toolchain_test.go

Replace the downloaded release's tests with tests of the installed toolchain (issue 1572, ADR 0477)

2026-10-21 08:02:02 +00:00

integration_level_test.go

mesh-build-go: fold the siblings' commits into every digest and echo them, and test and digest the integration level under integration,isolation (lead decision L5, the checker's agreement; issue 1309)

2026-10-22 18:18:03 +02:00

integration.go

mesh-build-go: fold the siblings' commits into every digest and echo them, and test and digest the integration level under integration,isolation (lead decision L5, the checker's agreement; issue 1309)

2026-10-22 18:18:03 +02:00

isolate_test.go

mesh-build-go: run go test, go build and go list in bubblewrap, so a change's code reaches no key, login or network (issue 1309, S1-S6, ADR 0448)

2026-10-22 18:12:01 +02:00

isolate.go

mesh-build-go: run go test, go build and go list in bubblewrap, so a change's code reaches no key, login or network (issue 1309, S1-S6, ADR 0448)

2026-10-22 18:12:01 +02:00

isolation_integration_test.go

mesh-build-go: run go test, go build and go list in bubblewrap, so a change's code reaches no key, login or network (issue 1309, S1-S6, ADR 0448)

2026-10-22 18:12:01 +02:00

keys.go

Add the Go build module's main, recipe, guard, key keeper, runner, store and bus, and its README (issues 1483, 1484, 1485, 1486), part 7 of 20

2026-10-20 20:50:11 +00:00

level.go

Give the integration level the node's installed Node toolchains read-only, so the Node build module's tests build offline (issue 1891, ADR 0533)

2026-10-23 11:22:05 +02:00

levels.go

Review round 1 for the checks, ssh-client and the Go build module: sshdir (1484), socket path (1486), over_bound (1290, 1486), toolchain.reported and streams (1483), re-pin to mesh-sdk 36d6f774; delta part 2 of 4

2026-10-20 21:09:36 +00:00

main.go

mesh-build-go: push each done archive to the artifact store from its own process and answer its reference (issue 1587, S1-S4, ADR 0498 §1 §2, lead decision L9)

2026-10-22 18:22:17 +02:00

manifest_test.go

mesh-build-go: push each done archive to the artifact store from its own process and answer its reference (issue 1587, S1-S4, ADR 0498 §1 §2, lead decision L9)

2026-10-22 18:22:17 +02:00

module_test.go

Read a build module's steps and toolchains states with its own tools, so a step's result and the reported toolchain can be checked live (issue 1562)

2026-10-21 09:57:16 +00:00

module.go

Give the integration level the node's installed Node toolchains read-only, so the Node build module's tests build offline (issue 1891, ADR 0533)

2026-10-23 11:22:05 +02:00

narrow_integration_test.go

mesh-build-go: name go.mod among the narrowing test's paths, since mesh-sdk 104533e8 keeps only the manifest and the lock files beside them (review finding S1)

2026-10-22 21:39:55 +02:00

node_toolchains_test.go

Give the integration level the node's installed Node toolchains read-only, so the Node build module's tests build offline (issue 1891, ADR 0533)

2026-10-23 11:22:05 +02:00

pins_integration_test.go

Say loudly, not fail, where a check has no bubblewrap to run a build module's shut-off steps (issue 1309)

2026-10-22 19:04:24 +02:00

pins_test.go

Share one placement per repository and commit for pins on pull heads; say a pin is on no pull request head and what go said (issue 1148)

2026-10-22 16:24:18 +02:00

pins.go

Share one placement per repository and commit for pins on pull heads; say a pin is on no pull request head and what go said (issue 1148)

2026-10-22 16:24:18 +02:00

preview_integration_test.go

Say loudly, not fail, where a check has no bubblewrap to run a build module's shut-off steps (issue 1309)

2026-10-22 19:04:24 +02:00

preview_test.go

mesh-build-go: run go test, go build and go list in bubblewrap, so a change's code reaches no key, login or network (issue 1309, S1-S6, ADR 0448)

2026-10-22 18:12:01 +02:00

preview.go

mesh-build-go: fold the siblings' commits into every digest and echo them, and test and digest the integration level under integration,isolation (lead decision L5, the checker's agreement; issue 1309)

2026-10-22 18:18:03 +02:00

probe.go

Build Go with the installed go and name no Go version (issue 1572, ADR 0477)

2026-10-21 08:02:54 +00:00

push_test.go

mesh-build-go: push each done archive to the artifact store from its own process and answer its reference (issue 1587, S1-S4, ADR 0498 §1 §2, lead decision L9)

2026-10-22 18:22:17 +02:00

push.go

mesh-build-go: push each done archive to the artifact store from its own process and answer its reference (issue 1587, S1-S4, ADR 0498 §1 §2, lead decision L9)

2026-10-22 18:22:17 +02:00

read_test.go

Read a build module's steps and toolchains states with its own tools, so a step's result and the reported toolchain can be checked live (issue 1562)

2026-10-21 09:57:16 +00:00

read.go

Read a build module's steps and toolchains states with its own tools, so a step's result and the reported toolchain can be checked live (issue 1562)

2026-10-21 09:57:16 +00:00

recipe.go

Leave the go.mod fixtures under testdata out of the build module's tests and digests, so the checker stops running a fixture as a module (issue 1810)

2026-10-22 01:22:31 +02:00

runner.go

Add the Go build module's main, recipe, guard, key keeper, runner, store and bus, and its README (issues 1483, 1484, 1485, 1486), part 7 of 20

2026-10-20 20:50:11 +00:00

shares_test.go

Read manifests that name shares: mesh-build-go and mesh-build-node take mesh-sdk 465beb4 (issue 1657)

2026-10-21 12:52:28 +02:00

store_integration_test.go

Prove a done build's artifacts resolve in a real artifact store, in both build modules (issue 1587, S9 S10, ADR 0498's check)

2026-10-22 18:28:52 +02:00

store.go

Review round 1 for the checks, ssh-client and the Go build module: sshdir (1484), socket path (1486), over_bound (1290, 1486), toolchain.reported and streams (1483), re-pin to mesh-sdk 36d6f774; delta part 2 of 4

2026-10-20 21:09:36 +00:00

test_real_integration_test.go

Prove a done build's artifacts resolve in a real artifact store, in both build modules (issue 1587, S9 S10, ADR 0498's check)

2026-10-22 18:28:52 +02:00

test_test.go

mesh-build-go: run go test, go build and go list in bubblewrap, so a change's code reaches no key, login or network (issue 1309, S1-S6, ADR 0448)

2026-10-22 18:12:01 +02:00

test.go

mesh-build-go: run go test, go build and go list in bubblewrap, so a change's code reaches no key, login or network (issue 1309, S1-S6, ADR 0448)

2026-10-22 18:12:01 +02:00

tools.go

Read a build module's steps and toolchains states with its own tools, so a step's result and the reported toolchain can be checked live (issue 1562)

2026-10-21 09:57:16 +00:00

xz_framing_test.go

mesh-build-go: read a pinned release compressed with xz as the build agent does, so betterbird's archive gets a done key (issue 1590)

2026-10-22 18:13:49 +02:00

xz_framing.go

mesh-build-go: read a pinned release compressed with xz as the build agent does, so betterbird's archive gets a done key (issue 1590)

2026-10-22 18:13:49 +02:00

xz_test.go

mesh-build-go: read a pinned release compressed with xz as the build agent does, so betterbird's archive gets a done key (issue 1590)

2026-10-22 18:13:49 +02:00