Commit Graph

  • 56e89d62f1 Merge pull request 'sdk1: the controller's repository is emptied (ADR 0593 §11)' (#491) from feat/sdk1 into main main mesh-tools 2026-11-02 20:42:04 +00:00
  • 5970367173 Empty the controller's repository: its jobs moved to the parts ADR 0590 and 0593 name, so nothing builds here against the new mesh-sdk jschoubben 2026-11-02 18:16:50 +01:00
  • 4964ad1037 Remove route-proxy from the controller's repository, which it left for mesh-networking jschoubben 2026-11-02 14:18:30 +01:00
  • 5c281ad99b Merge pull request 'An unissued bus account holds back only its own module, never the whole node' (#490) from fix/vault-minted-accounts into main mesh-tools 2026-11-01 08:26:02 +00:00
  • 29dfb28f38 Hold only the module whose bus account nobody issued, never the whole node (issue 203) jschoubben 2026-11-01 09:12:54 +01:00
  • 88b16e9be2 Merge pull request 'The controller takes the indexer's verdict instead of judging manifests; route-proxy declares its credential form (ADR 0578, 0579)' (#489) from feat/judge-once into main mesh-tools 2026-11-01 07:54:23 +00:00
  • b564c315d0 Test the controller as one that judges no manifest, and reset the new-module waits each test leaves (ADR 0578) jschoubben 2026-11-01 04:14:44 +01:00
  • 5bd03b3984 Refuse a send that would seal a placeholder for a bus credential nobody issued (issue 203) jschoubben 2026-11-01 04:14:44 +01:00
  • e02fcad739 Pin the group's mesh-sdk head after the gofmt fix jschoubben 2026-11-01 03:27:07 +01:00
  • 4a92ec6102 Pin mesh-sdk at the head after review round 1 jschoubben 2026-11-01 03:13:17 +01:00
  • 909cc25169 Pin mesh-sdk at the judge-less release head in the controller and route-proxy jschoubben 2026-11-01 02:46:24 +01:00
  • 272d5ebd61 Declare credential form none for the provision, which hands consumers no credential jschoubben 2026-11-01 02:43:24 +01:00
  • a6386ff23a Decode manifests in tests and pin the mesh-sdk that no longer holds the judge jschoubben 2026-11-01 02:40:39 +01:00
  • b51105908a Stop judging manifests at registration; the controller registers what the indexer accepted jschoubben 2026-11-01 02:09:13 +01:00
  • 8b4d536a11 Take the indexer's verdict on a manifest instead of judging it in the controller jschoubben 2026-11-01 02:07:44 +01:00
  • dc90b3f5bd Merge pull request 'route-proxy dials the machine port its plans now carry (issue 774)' (#488) from fix/route-ports into main mesh-tools 2026-10-31 12:56:54 +00:00
  • 0e9c4c8299 Check route-proxy's composed targets over the live shapes in an existing test's place, and pin the mesh-sdk that keeps unassigned bare ports (issue 774, research 072 row 34) jschoubben 2026-10-31 13:22:00 +01:00
  • 14d10051e5 Dial a route at the machine port its module's placement assigned, from the mesh-sdk whose plans carry it (issue 774, research 072 row 34) jschoubben 2026-10-31 13:11:00 +01:00
  • c58b311ea7 Merge pull request 'route-proxy from the provisioner's plans with its own contract; the controller forwards accounts to the vault (issue 774)' (#487) from feat/072-moves into main mesh-tools 2026-10-31 10:31:07 +00:00
  • 7a169eae76 Keep the controller on main's mesh-sdk pin and mint until the grants part takes over, so its impact stays small and no account is minted that the bus it loads refuses (issue 774) jschoubben 2026-10-31 10:37:13 +01:00
  • a07621d761 Pin route-proxy at the group's mesh-sdk head acbf80a and its contract at the published tag v0.1.0, so it builds and reads the contributed payload; refresh its manifest digest for the events its contract names (issue 774) jschoubben 2026-10-31 10:27:05 +01:00
  • d791052f77 Forward module issue and an assignment's issue to the vault once one is installed, so the controller mints no bus account and none waits on a node reporting here (issue 774; research 072, the controller NATS-native: gap "vault mints after the lease", the minting piece moves to the vault) jschoubben 2026-10-31 10:02:38 +01:00
  • 22935b9202 Serve route-proxy's routes through its own contract: decode each plan entry's opaque contribution with it, say each name served, withdrawn or refused on the bus, and take who is inside from the seat mesh-placement, since the membership went with the assignments stream (issue 774, research 072 rows 33 and 34) jschoubben 2026-10-31 09:44:07 +01:00
  • efe745f2be Publish route-proxy's contract as a Go module of its own: the route a consumer asks, its schema, the events the proxy says, what it keeps on the bus and its tools' arguments, so other modules use the contract by its version and the provisioner carries a route unread (issue 774, research 072 row 34) modules/route-proxy/contract/v0.1.0 jschoubben 2026-10-31 09:44:00 +01:00
  • ff912d0972 Serve route-proxy's routes from the seat mesh-provisioner's plans alone and drop its received routes file, since a route is a provision and the file is the deprecated path (issue 774, research 072 row 34; needs the mesh-sdk pin carrying plan entries' given and Conn.Read) jschoubben 2026-10-31 09:24:53 +01:00
  • 4c9be8efc8 Merge pull request 'The web front's route helper reads the seat's plans, so a route-only module's route is provided (issue 774)' (#486) from fix/route-proxy-reads-plans into main mesh-tools 2026-10-30 23:43:15 +00:00
  • 62c05c681c Start route-proxy's provider helper only once Serve holds the runtime's channel, so its first watch is never refused and the helper never stops until a restart (issue 774, review) jschoubben 2026-10-31 00:32:26 +01:00
  • bfb728730f Answer route-proxy's routes from the seat mesh-provisioner's plans and keys, not the controller's assignments, so a route the seat keys for a module not handed is marked provided and its new builds are no longer withheld (issue 774) jschoubben 2026-10-31 00:27:11 +01:00
  • 159db37618 Merge pull request 'The web front keeps what it serves, its certificates and what it refuses on the bus, with tools to read them (issue 774)' (#485) from feat/route-proxy-tools into main mesh-tools 2026-10-30 22:11:52 +00:00
  • b7c3868980 Keep a scan out of route-proxy's unrouted state: only names under a served domain, a few a minute, no visitor address (issue 774) jschoubben 2026-10-30 23:03:00 +01:00
  • ddae6729c1 Give route-proxy its state on the bus and three tools, so a site's route, certificate and last answer are read from the mesh instead of with curl (issue 774) jschoubben 2026-10-30 22:58:04 +01:00
  • 4e2b8f32ce Pin mesh-sdk a3718126, whose bus retry never asks again a call its callee answered (issue 774) fix/sweep-2026-10-30 jschoubben 2026-10-30 18:43:13 +01:00
  • dd366f8a3f Pin the group's final mesh-sdk 206f794e with its captured conformance files, and read the engine's superseded word on a secret move (issue 774) jschoubben 2026-10-30 18:37:56 +01:00
  • 93d167f0e8 Say rightly which own secrets the core ask leaves out: broker-address and broker-management are no bus accounts (issue 774) jschoubben 2026-10-30 18:36:18 +01:00
  • cf4ca55596 Judge apply-failing by the client's failing-since, so a failure said in new words is measured from when it began (issue 774) jschoubben 2026-10-30 18:35:37 +01:00
  • 77c54445dc Pin the group's mesh-sdk ef1ec1c9 and capture its conformance files there, so the sweep builds on kvlimit and the named readers (issue 774) jschoubben 2026-10-30 18:27:54 +01:00
  • 8c3d372322 Compose no placed user from the node-engine's manifest in the controller's bus composer too, as mesh-sdk #136 does (issue 774) jschoubben 2026-10-30 18:23:42 +01:00
  • 519434241a Queue one state per call for the bus, bounded far above a burst, so a burst of read calls no longer drops call records (issue 774) jschoubben 2026-10-30 18:21:58 +01:00
  • c421629f6e Ask the vault for a bus process's account only once it is issued, so the vault never makes a random value under an account's name (issue 774) jschoubben 2026-10-30 18:19:26 +01:00
  • 07cecd287c Leave modules the mesh provides itself out of the lines that say a module lacks a fingerprint (issue 774) jschoubben 2026-10-30 18:19:26 +01:00
  • e6ecc2d15e Put mesh-delivery's merge words through mesh-sdk's kvlimit, so a word too large for its bucket is refused once and never retried (issue 774) jschoubben 2026-10-30 18:16:09 +01:00
  • d543ff7126 Judge each read for its reader with mesh-sdk's ReadsAnnouncedBy, so the parts named for the lease are granted it, and say a refusal once (issue 774) jschoubben 2026-10-30 18:15:17 +01:00
  • d63eb83ed3 Clear a condition whose check no longer exists, so a removed row or probe leaves no alarm open for good (issue 774) jschoubben 2026-10-30 18:10:29 +01:00
  • 6ffcea4f1d Keep apply-failing raised while any failure stands, so a failure said again in new words never clears it (issue 774) jschoubben 2026-10-30 18:08:09 +01:00
  • 48d9f22fa5 Retire the controller's merges consumer and read merges from the forge bridge's stream, so a held merge can never again queue every merge or look like a deaf controller (issue 774) jschoubben 2026-10-30 18:05:46 +01:00
  • a4426190b0 Merge pull request 'Accept the credential form none in a provisioner's plan, so design 47's release delivers (issue 774)' (#483) from fix/774-none-form into main jschoubben 2026-10-30 11:23:41 +00:00
  • 2154ea8e3c Accept the credential form none in a provisioner's plan, so the release's catalogue, which states it on every offer without a credential, no longer has every plan refused and every module held (issue 774) jschoubben 2026-10-30 12:18:36 +01:00
  • 812c528479 Merge pull request 'Pin the release's mesh-sdk in the controller, so it reads design 47's catalog until its lease is handed away (issue 774)' (#482) from feat/774-l3-reland into main mesh-tools 2026-10-30 11:01:57 +00:00
  • 257f017bdb Pin the group's mesh-sdk head, whose step log goes quiet after one failed publish fix/checker-full-failure jschoubben 2026-10-30 11:10:45 +01:00
  • 12af759fb3 Pin the group's mesh-sdk head, so the controller asserts module streams readable directly by their owner and grants that read; moves no piece of the NATS-native controller research (a pin only) jschoubben 2026-10-30 11:04:04 +01:00
  • 8b32e04e2f Judge the controller's module check against the catalogue it is released with, captured at the group's catalogue head f3a57dcc, so a group that brings a word the trunk's catalogue lacks does not fail on the trunk (issue 774) jschoubben 2026-10-30 10:38:29 +01:00
  • 79f44386d2 Merge main (delivery 1, the parse-only sdk) into L3's re-land, and pin mesh-sdk 2da0de7, the release's final head (issue 774) jschoubben 2026-10-30 01:13:41 +01:00
  • 6fe9efa712 Merge pull request 'Pin the parse-only mesh-sdk in the controller, so it reads design 47's manifests (issue 774)' (#481) from fix/774-new-words-first into main mesh-tools 2026-10-30 00:10:12 +00:00
  • d96542cd25 Pin the parse-only mesh-sdk 78c9ec8 in place of 6e4a301, so main's controller reads the release's new words and means nothing new by them (issue 774) jschoubben 2026-10-30 00:42:04 +01:00
  • 80dc6980b7 Pin mesh-sdk 6e4a301 on main's controller, so it reads the release's new manifest words before the release uses them (issue 774) jschoubben 2026-10-30 00:30:05 +01:00
  • 80df1b6361 Pin mesh-sdk 6e4a301, the release's final sdk (issue 774) jschoubben 2026-10-30 00:20:10 +01:00
  • 816cf96459 Pin mesh-sdk 007b6fd, the release's final sdk, so the controller reads the release's manifests and composes as the group does (issue 774) jschoubben 2026-10-30 00:07:04 +01:00
  • 3f05df5d1a Pin mesh-sdk 2e5cc4f, so the controller reads the release's new manifest words (issue 774) jschoubben 2026-10-29 22:19:39 +01:00
  • e04846e9fa Merge pull request 'Pin mesh-sdk dbcaa29, so the controller composes with the group fix/1960-no-hold-spread's SDK (issue 1960)' (#480) from fix/1960-no-hold-spread into main mesh-tools 2026-10-29 15:35:31 +00:00
  • 020c6a99b0 Pin mesh-sdk dbcaa29 and capture its conformance events there, so the controller composes with the group fix/1960-no-hold-spread's SDK (issue 1960) jschoubben 2026-10-29 16:17:48 +01:00
  • 5a9766d4a4 Merge pull request 'Pin mesh-sdk 38dbe1d, so the controller knows the seat mesh-placement (issue 1126, delivery 2 of 2)' (#479) from feat/1126-placement-seat into main mesh-tools 2026-10-28 18:33:05 +00:00
  • f46a08772f Pin mesh-sdk 38dbe1d, the group's head, so the controller knows the seat mesh-placement its holder claims (ADR 0567, issue 1126) jschoubben 2026-10-28 18:49:02 +01:00
  • 1c2adfdca9 Build with the group's mesh-sdk, so the controller knows the seat mesh-placement its holder claims (ADR 0567, issue 1126) jschoubben 2026-10-28 18:14:58 +01:00
  • 0fbb5ef359 Merge pull request 'The controller gives its lease back at the stop signal and says a takeover once, so a controller delivery raises no urgent alarm (issue 906, ADR 0558)' (#478) from fix/906-lease-release into main mesh-tools 2026-10-27 00:07:46 +00:00
  • 8f84731896 Name the epoch given back in the lease's delete marker, so only a holder's own release counts as a handover (issue 906, ADR 0558 §3, review round 1) jschoubben 2026-10-27 00:55:30 +01:00
  • fbaa463a38 Give the controller lease back at the stop signal and say a takeover once, so a controller delivery raises no urgent alarm (issue 906, ADR 0558) jschoubben 2026-10-27 00:47:30 +01:00
  • 2dafbe60e9 Merge pull request 'Broker tests read a consumer's pending count through pendingOf wherever they expect a count after a publish (issue 1126)' (#477) from fix/1126-tests-wait-for-consumer-counts into main mesh-tools 2026-10-26 22:57:59 +00:00
  • 8d58afea6c Broker tests read a consumer's pending count through pendingOf, which waits up to 10 s, wherever they expect a count after a publish (issue 1126) jschoubben 2026-10-26 23:28:03 +01:00
  • b611f7375a Merge pull request 'Pin mesh-sdk main, whose seats promise own and settle, so the catalogue passes the module check again (issue 1126)' (#476) from fix/1126-controller-pins-sdk-main into main mesh-tools 2026-10-26 22:08:19 +00:00
  • 253bbcea2d Pin mesh-sdk main f178323, whose delivery seat promises settle beside the vault's own, so the catalogue check passes against mesh-catalog main f0f7b673 (issue 1126) jschoubben 2026-10-26 23:03:47 +01:00
  • 2c6382346f Merge pull request 'Pin the mesh-sdk whose vault seat promises own, so the catalogue passes the module check again (issue 1126)' (#475) from fix/1126-vault-seat-own into main mesh-tools 2026-10-26 22:00:46 +00:00
  • b8cafccaf6 Pin mesh-sdk at e78e881, whose vault seat promises own, so the catalogue check passes against mesh-catalog main (issue 1126) jschoubben 2026-10-26 22:40:34 +01:00
  • 82d212a2a1 Merge pull request 'The controller answers each node's placement from its own store, the one verb of its exit (issue 1126)' (#474) from feat/1126-nodes-compose into main mesh-tools 2026-10-26 21:11:21 +00:00
  • df8ebf6a77 Pin mesh-sdk 9796444 (l2-next: feat/1126-nodes-compose merged with sdk main #101, the standing-test race fixes) (issue 1126) jschoubben 2026-10-26 22:05:41 +01:00
  • dc414fbfef Pin mesh-sdk 5f45175 (l2-next: feat/1126-nodes-compose merged with sdk main) after merging main (issue 1126) jschoubben 2026-10-26 21:59:21 +01:00
  • fd891688ac Pin mesh-sdk feat/1126-nodes-compose 03dce12, the group's head: the checker refuses a pin that is neither trunk nor the group's head (issue 1126) jschoubben 2026-10-26 20:35:49 +01:00
  • 9d8a5a7ede Review of L2, round 2: the placement export is checked within an existing integration test over the same fresh mesh, so it adds no test of its own (the test budget; issue 1126) jschoubben 2026-10-26 20:23:51 +01:00
  • 4e9e5c27d4 Review of L2: the export's test reads each printed placement back as the file the seed writes, at its version (S1); pin mesh-sdk 3968849, CAPTURED taken again (issue 1126) jschoubben 2026-10-26 20:12:49 +01:00
  • 7c8a2e03dd Pin mesh-sdk feat/1126-nodes-compose 9713c30: placement carries a settings-form module's values (issue 1126) jschoubben 2026-10-26 19:40:43 +01:00
  • 89f52a6504 Pin mesh-sdk 53c2def, the group's head, and take the SDK's conformance copy again at it (issue 1126) jschoubben 2026-10-26 19:28:39 +01:00
  • fb2f5a2962 The controller answers each node's placement from its own store, read-only, for the seed of the catalogue's placement files: the one verb of its exit (issue 1126, ADR 0555 §6; the operator 2026-10-26 19:06:40) jschoubben 2026-10-26 19:16:09 +01:00
  • 2ecfbb3a29 Merge pull request 'The controller takes mesh-sdk a7a1fbd3, so its composer gives build modules the node's CPU share (issue 1806, ADR 0553/0554 change B)' (#473) from fix/controller-sdk-cpu-share into main mesh-tools 2026-10-26 15:41:03 +00:00
  • 9ad8715871 Bump mesh-sdk to a7a1fbd3 so the build seats' runtimes are composed to yield (issue 1806) jschoubben 2026-10-26 16:34:55 +01:00
  • e1a55f099b Merge pull request 'Seat users pulled by kind may read their own seat's dead letters (issue 734)' (#472) from fix/734-lost-ask into main mesh-tools 2026-10-26 13:40:43 +00:00
  • ccc7ba334c broker: DeadLetterReads grants only what a pulled ordered consumer needs, as mesh-sdk buscompose (issue 734, review round 1) jschoubben 2026-10-26 14:17:00 +01:00
  • 65d5ed3367 broker: a user of a seat pulled by kind reads its seat's dead letters, as mesh-sdk buscompose composes it (issue 734) jschoubben 2026-10-26 13:51:35 +01:00
  • 08a261ac1a Merge pull request 'Declarations test: the indexer stand-in answers the trunk value at the trunk's commit alone (issue 1945)' (#471) from fix/declarations-test-stand-in into main mesh-tools 2026-10-26 12:30:18 +00:00
  • 23226384e5 Answer the indexer's trunk value at the trunk's commit alone in the declarations test, so its take-in records mesh-host's build (issue 1945) jschoubben 2026-10-26 13:27:27 +01:00
  • 779533764b Answer the indexer's trunk value at the trunk's commit alone in the declarations test, so its take-in records mesh-host's build (issue 1945) feat/1945-user-list-switch jschoubben 2026-10-26 13:27:27 +01:00
  • 350f8ebdfe Merge pull request 'Broker: the bus node may follow the grants part's sealed user list and the grants part may write it, the operator's second one-grant exception (issue 1945)' (#470) from feat/1945-user-list-switch into main mesh-tools 2026-10-26 12:21:44 +00:00
  • 09d2cc5056 Broker: the bus node may follow the grants part's sealed user list and the grants part may write it, the operator's second one-grant exception (issue 1945, ADR 0547 clauses 7-8) jschoubben 2026-10-26 13:03:15 +01:00
  • 47e64f0284 Merge pull request 'Broker: the grants part may create a placed module's declared buckets, logs and streams, creation only (issue 1790; the operator's one-grant exception)' (#469) from fix/1790-grants-create-buckets into main mesh-tools 2026-10-26 08:17:19 +00:00
  • 6927b02d4d Grant the grants part creating the streams manifests declare, so a new module state no longer waits for a controller start jschoubben 2026-10-26 09:02:44 +01:00
  • fda4859a95 Merge pull request 'The bus composer grants mesh-grants publishing memberships, nothing more (ADR 0547, the operator's one grant of 2026-10-25 22:31)' (#468) from fix/1945-memberships into main jschoubben 2026-10-25 22:44:04 +00:00
  • a81717e53c Seal the seeded account in the adapter-input test, the second fixture of its kind (issue 1945, PR #467) fix/1945-mesh-grants-publishes-memberships jschoubben 2026-10-25 23:30:20 +01:00
  • d01839c29c Grant the grants part reading every membership; seal the seeded account in the addresses test (ADR 0547 §5, review; issue 1945) jschoubben 2026-10-25 22:51:25 +01:00
  • f67d15536b Grant the grants part publishing the modules' memberships, and nothing more (ADR 0547 §5, issue 1945) jschoubben 2026-10-25 22:32:35 +01:00
  • 003eee8aa7 Issue every node's memberships when it is composed, so a module taken in with a new state is not refused it (issue 249 met again, issue 1945) fix/issued-states-follow-the-module jschoubben 2026-10-25 21:05:19 +01:00
  • 7cd4d18bd5 Merge pull request 'A bus account counts as issued only once sealed, stale accounts are forgotten, and grants name sealed accounts only (issue 1945 note 35)' (#467) from fix/1945-credential-when-row-without-seal into main jschoubben 2026-10-25 19:31:42 +00:00
  • fbf14b68db Forget the accounts of modules no longer on their nodes at the start's look, and grant sealed accounts alone (issue 1945, ADR 0543, review) jschoubben 2026-10-25 20:27:30 +01:00