mesh-catalog

internal/secret

mesh-mail: move password reading out of the tools' reach into its own package, so only keep and the send actor import it (ADR 0436 clause 12; issue 1193)

2026-10-19 09:32:54 +02:00

migrations

Add mesh-mail: watch the operator's own mailbox read-only and say each mail on the bus

2026-10-14 20:14:42 +02:00

acceptance_integration_test.go

mesh-mail: the refused-sign-in acceptance test's wait excluded queued too, so it returned done on the very first look before the sender ever claimed anything (issue 1198)

2026-10-19 11:10:36 +02:00

ask_test.go

mail_send's ask: judge messenger's real words, carry the content rule at run time, match display-name recipients (issue 868, review round 1)

2026-10-16 02:04:32 +02:00

claim_test.go

mesh-mail: decide kept by settleSend's own returned revision, not its error, so a changed revision is actually retried instead of silently accepted as another writer's state; emit mail.send.failed from claimQueuedSend only once its own write lands (review round 2; issue 1198)

2026-10-19 11:07:24 +02:00

config_test.go

mesh-mail: move password reading out of the tools' reach into its own package, so only keep and the send actor import it (ADR 0436 clause 12; issue 1193)

2026-10-19 09:32:54 +02:00

config.go

mesh-mail: move password reading out of the tools' reach into its own package, so only keep and the send actor import it (ADR 0436 clause 12; issue 1193)

2026-10-19 09:32:54 +02:00

content_rule.go

mail_send's ask: judge messenger's real words, carry the content rule at run time, match display-name recipients (issue 868, review round 1)

2026-10-16 02:04:32 +02:00

copies_test.go

mail_send's ask: judge messenger's real words, carry the content rule at run time, match display-name recipients (issue 868, review round 1)

2026-10-16 02:04:32 +02:00

health_test.go

mesh-mail: tighten tests that proved less than their criterion — attempt 5 and no mail received (1198/AC4), mail_health actually turning unhealthy (1199/AC2), and the words mail_send_status gives, not only its status (1199/AC4) (review round 1 finding 6)

2026-10-19 10:53:12 +02:00

health.go

mesh-mail: tell the operator once for a failed approved send and once more if its sender has not taken it, make an overdue send unhealthy, and give mail_send_status its full vocabulary (ADR 0436 clauses 11, 12; issue 1199)

2026-10-19 10:22:27 +02:00

imap_test.go

mesh-mail: the sender verifies the operator's warrant again from the router's own record and claims a send once before any connection (ADR 0436 clauses 9, 10; issue 1196)

2026-10-19 09:57:07 +02:00

imap.go

mesh-mail: move password reading out of the tools' reach into its own package, so only keep and the send actor import it (ADR 0436 clause 12; issue 1193)

2026-10-19 09:32:54 +02:00

kit_test.go

mesh-mail: move password reading out of the tools' reach into its own package, so only keep and the send actor import it (ADR 0436 clause 12; issue 1193)

2026-10-19 09:32:54 +02:00

mailevent.go

mesh-mail declares the mail seats and claims mail-store (issue 800 part A)

2026-10-15 17:16:53 +02:00

main.go

mesh-mail: tell the operator once for a failed approved send and once more if its sender has not taken it, make an overdue send unhealthy, and give mail_send_status its full vocabulary (ADR 0436 clauses 11, 12; issue 1199)

2026-10-19 10:22:27 +02:00

manifest_test.go

mesh-mail: declare the sender's own secret broker-send, so the controller can issue its account (review round 1 finding 1; issue 1172)

2026-10-19 10:29:48 +02:00

mime.go

Add mesh-mail: watch the operator's own mailbox read-only and say each mail on the bus

2026-10-14 20:14:42 +02:00

objects_test.go

Add mesh-mail: watch the operator's own mailbox read-only and say each mail on the bus

2026-10-14 20:14:42 +02:00

objects.go

Add mesh-mail: watch the operator's own mailbox read-only and say each mail on the bus

2026-10-14 20:14:42 +02:00

outcome_test.go

mesh-mail: decide kept by settleSend's own returned revision, not its error, so a changed revision is actually retried instead of silently accepted as another writer's state; emit mail.send.failed from claimQueuedSend only once its own write lands (review round 2; issue 1198)

2026-10-19 11:07:24 +02:00

pgstore_test.go

Add mesh-mail: watch the operator's own mailbox read-only and say each mail on the bus

2026-10-14 20:14:42 +02:00

pgstore.go

Add mesh-mail: watch the operator's own mailbox read-only and say each mail on the bus

2026-10-14 20:14:42 +02:00

schema.sql

Add mesh-mail: watch the operator's own mailbox read-only and say each mail on the bus

2026-10-14 20:14:42 +02:00

sdk_pin_test.go

mesh-mail: pin mesh-sdk go to release 2, declare the sender account, bus process and work-queue stream (ADR 0436 clauses 7, 8; issue 1172)

2026-10-19 09:23:45 +02:00

secret_boundary_test.go

mesh-mail: a send process that connects on its own bus account and consumes the mail-sends queue, stopping cleanly on a signal (ADR 0436 clause 7; issue 1195)

2026-10-19 09:49:24 +02:00

send_test.go

mesh-mail: on Approve the tools record the send queued directly, with no separate approved state, then publish; a stuck queued record is republished by the sweep past a short grace, never NakWithDelay'd by the sender (ADR 0436 clause 8, decided to replace the review round 1 item 2 work-around; issues 1194, 1196, 1199)

2026-10-19 10:53:32 +02:00

send.go

mesh-mail: decide kept by settleSend's own returned revision, not its error, so a changed revision is actually retried instead of silently accepted as another writer's state; emit mail.send.failed from claimQueuedSend only once its own write lands (review round 2; issue 1198)

2026-10-19 11:07:24 +02:00

sender_integration_test.go

mesh-mail: fix the work-queue stream's real bus name (MAIL_SENDS, not MAIL-SENDS) and build the integration tests' stream, subject and duplicate window exactly as the controller composes them, exercising the send id's dedup (review round 1 finding 7; issue 1198)

2026-10-19 10:57:45 +02:00

sender_test.go

mesh-mail: fix the work-queue stream's real bus name (MAIL_SENDS, not MAIL-SENDS) and build the integration tests' stream, subject and duplicate window exactly as the controller composes them, exercising the send id's dedup (review round 1 finding 7; issue 1198)

2026-10-19 10:57:45 +02:00

sender.go

mesh-mail: fix the work-queue stream's real bus name (MAIL_SENDS, not MAIL-SENDS) and build the integration tests' stream, subject and duplicate window exactly as the controller composes them, exercising the send id's dedup (review round 1 finding 7; issue 1198)

2026-10-19 10:57:45 +02:00

smtp_classify_test.go

mesh-mail: tighten tests that proved less than their criterion — attempt 5 and no mail received (1198/AC4), mail_health actually turning unhealthy (1199/AC2), and the words mail_send_status gives, not only its status (1199/AC4) (review round 1 finding 6)

2026-10-19 10:53:12 +02:00

smtp.go

mesh-mail: classify an SMTP send's outcome (not taken, refused, not proven), and carry the send id in the Message-ID (ADR 0436 clause 10; issue 1197)

2026-10-19 10:03:44 +02:00

store.go

Add mesh-mail: watch the operator's own mailbox read-only and say each mail on the bus

2026-10-14 20:14:42 +02:00

tell_test.go

mesh-mail: on Approve the tools record the send queued directly, with no separate approved state, then publish; a stuck queued record is republished by the sweep past a short grace, never NakWithDelay'd by the sender (ADR 0436 clause 8, decided to replace the review round 1 item 2 work-around; issues 1194, 1196, 1199)

2026-10-19 10:53:32 +02:00

tools_test.go

mesh-mail: bound a fetch by bytes, show mail_accounts only to its grantees, say why grants are unread, judge a secret without reading it (hq issue 733)

2026-10-14 22:24:11 +02:00

tools.go

mesh-mail: tell the operator once for a failed approved send and once more if its sender has not taken it, make an overdue send unhealthy, and give mail_send_status its full vocabulary (ADR 0436 clauses 11, 12; issue 1199)

2026-10-19 10:22:27 +02:00