Commit Graph

  • 518eeb7941 integrate: go served jochen 2026-10-03 23:12:21 +02:00
  • bf2da878a0 Merge remote-tracking branch 'origin/fix/issue-216-a-bundle-nothing-delivers-is-refused' into integrate jochen 2026-10-03 23:12:03 +02:00
  • 50cf253a43 Merge remote-tracking branch 'origin/fix/issue-215-a-commit-is-never-a-branch-to-follow' into integrate jochen 2026-10-03 23:12:03 +02:00
  • 980a0dee93 integrate: 214 jochen 2026-10-03 23:12:03 +02:00
  • ac9c2d57be The node's runtime reads the consumers of the modules it carries (hq ADR 0198) jochen 2026-10-03 22:30:55 +02:00
  • 8b016cc62b A Go tools bundle is served by its binary (hq ADR 0193) jochen 2026-10-03 22:27:01 +02:00
  • cf2bb3b87d A bundle nothing would deliver is refused at registration (hq issue 216) jochen 2026-10-03 22:25:34 +02:00
  • 473376259b Merge pull request 'The route proxy tells a backend the request was HTTPS, and for which name' (#245) from fix/the-route-proxy-says-the-request-was-https into main mesh-admin 2026-10-03 20:23:02 +00:00
  • e1293fb0ad The route proxy tells a backend the request was HTTPS, and for which name jochen 2026-10-03 22:22:51 +02:00
  • 6784efae75 A commit is never a branch to follow (hq issue 215) jochen 2026-10-03 22:22:08 +02:00
  • d86baebe9a A plan settles an asked build from the build records (hq issue 214) jochen 2026-10-03 22:20:33 +02:00
  • 82481099b7 Merge pull request 'The controller announces as the tool runtimes do, and answers $SRV.STATS (hq ADR 0197)' (#242) from fix/0197-the-controller-announces-as-the-runtimes-do into main mesh-admin 2026-10-03 20:18:48 +00:00
  • b127f005c3 The controller announces as the tool runtimes do, and answers $SRV.STATS (hq ADR 0197) jochen 2026-10-03 22:18:27 +02:00
  • 58b4fcb8c8 A bundle stands on the toolchain it is compiled in (hq issue 211) jochen 2026-10-03 22:18:20 +02:00
  • 796f6410c1 Merge pull request 'Discovery from what answers: grants, the controller announces its seat, JSON lists (hq ADR 0195, 0197)' (#241) from feat/node-and-module-lists-as-json into main mesh-admin 2026-10-03 20:11:29 +00:00
  • e67c58cd98 Every serving principal may answer the services discovery for what it serves; the controller announces its seat (hq ADR 0197) jochen 2026-10-03 22:11:00 +02:00
  • 85873b19e1 node list and module list answer --json, and the nodes and modules verbs use it (hq ADR 0195) jochen 2026-10-03 21:55:35 +02:00
  • 2ebbb79937 Merge pull request 'A runtime compiled to a binary runs itself (hq ADR 0193)' (#240) from feat/0193-a-runtime-compiled-to-a-binary into main mesh-admin 2026-10-03 19:24:24 +00:00
  • 9204190445 A runtime compiled to a binary runs itself (hq ADR 0193) jochen 2026-10-03 21:24:12 +02:00
  • 06ea2168d8 Merge pull request 'The roster is the machines: each node's internal domain covers its routes (hq ADR 0191)' (#238) from fix/the-mesh-publishes-the-names-it-composed into main jschoubben 2026-10-03 19:12:23 +00:00
  • 2b149dd43e Merge pull request 'Beside every TypeScript entrypoint the builder writes an executable launcher; the runtime is told it (hq ADR 0193)' (#239) from feat/0193-a-launcher-beside-every-typescript-entrypoint into main mesh-admin 2026-10-03 19:08:22 +00:00
  • 17dba2a34c Beside every TypeScript entrypoint the builder writes an executable launcher; the runtime is told it (hq ADR 0193) jochen 2026-10-03 21:07:07 +02:00
  • 11e4bc0ba1 The roster is the machines: each node's internal domain covers its routes (hq ADR 0191) jschoubben 2026-10-03 16:10:16 +02:00
  • e56f3aa1cb The roster publishes a route's internal name, never its public one (hq ADR 0191) jschoubben 2026-10-03 15:39:05 +02:00
  • f966693583 Merge pull request 'A file a tools bundle's words name restarts the runtime when it changes (hq ADR 0192)' (#237) from feat/0192-a-named-file-restarts-the-runtime into main mesh-admin 2026-10-03 13:33:57 +00:00
  • 5acc763992 A file a tools bundle's words name restarts the runtime when it changes (hq ADR 0192) jochen 2026-10-03 15:33:44 +02:00
  • 4f009fff83 Merge pull request 'A tools bundle is given its words, composed per machine; what they name is the account's to read (hq ADR 0192)' (#236) from feat/0192-a-bundles-env into main mesh-admin 2026-10-03 13:32:38 +00:00
  • f27e31954f A tools bundle is given its words, composed per machine; what they name is the account's to read (hq ADR 0192) jochen 2026-10-03 15:32:03 +02:00
  • 62650cd48c Merge pull request 'The mesh answers only its own names privately; a public name resolves publicly (hq ADR 0191)' (#235) from fix/the-mesh-resolves-only-its-own-names into main jschoubben 2026-10-03 13:16:14 +00:00
  • 408f6dbad9 The mesh answers only its own names privately; a public name resolves publicly (hq ADR 0191) jschoubben 2026-10-03 15:14:01 +02:00
  • eae0577567 Merge pull request 'Issues 203 and 206: an assignment issues its credential; the controller owns a worker's shape; the build seat's holder follows the controller' (#233) from fix/issues-203-206 into main mesh-admin 2026-10-03 09:49:54 +00:00
  • de26918c52 Merge pull request 'A declaration is numbered when it is composed, and a send is recorded even by a sender being replaced (hq issue 204)' (#232) from fix/issue-204 into main mesh-admin 2026-10-03 09:44:42 +00:00
  • e01d18e548 Merge pull request 'An idle build machine's empty fetch is asked again, not read as the end (hq ADR 0190)' (#234) from fix/an-empty-fetch-is-not-the-end into main mesh-admin 2026-10-03 09:41:52 +00:00
  • 59166b1031 An idle build machine's empty fetch is asked again, not read as the end (hq ADR 0190) jochen 2026-10-03 11:41:23 +02:00
  • c294949f2a A worker of the wrong type on a history-keeping stream is re-made to deliver from now on, never from the start (hq issue 207) jochen 2026-10-03 11:07:11 +02:00
  • 28853a251b The build seat's holder follows the controller that defines its worker (hq issue 206) jochen 2026-10-03 04:04:41 +02:00
  • 76a8b8df9e The controller owns a worker's shape, type included: one of the wrong type is re-made on a work queue (hq issue 206) jochen 2026-10-03 04:04:41 +02:00
  • f86f6a74f0 A declaration is numbered when it is composed, and a send is recorded even by a sender being replaced (hq issue 204) jochen 2026-10-03 04:02:36 +02:00
  • a3e8a4185b An assignment issues its bus credential, a push refuses one nobody issued, and what reads a secret restarts on it (hq issue 203) jochen 2026-10-03 04:01:17 +02:00
  • 78de54381b Merge pull request 'A seat's work is shared by its holders: node-build-agent, pulled one ask at a time (hq ADR 0190)' (#228) from feat/a-seats-work-is-shared-by-its-holders into main mesh-admin 2026-10-03 00:53:42 +00:00
  • ff5ef0ab60 The controller asks the build role that has a holder, and hears both roles' outcomes (hq ADR 0190, the handover) jochen 2026-10-03 02:50:27 +02:00
  • a5d6a1187c A build machine serves the seat its credential claims (hq ADR 0190, the handover) jochen 2026-10-03 02:47:49 +02:00
  • 06d0a4bfe8 Merge pull request 'A changed jail filter restarts fail2ban' (#231) from jschoubben/jail-filter-restart into main mesh-admin 2026-10-02 21:28:32 +00:00
  • d293a0deaf A changed jail filter restarts fail2ban jschoubben 2026-10-02 23:28:25 +02:00
  • 11a44e1ec4 Merge pull request 'A resolved manifest keeps a built reference in the store's own form, never the address it was reached by (hq ADR 0155)' (#230) from fix/a-resolved-reference-is-kept-not-routed into main mesh-admin 2026-10-02 21:14:06 +00:00
  • 28c7f05b39 A resolved manifest keeps a built reference in the store's own form, never the address it was reached by (hq ADR 0155) jochen 2026-10-02 23:13:22 +02:00
  • 93a0c6202e Merge pull request 'The bus is never public: the broker port is no longer a foundation opening (hq ADR 0169)' (#229) from jschoubben/the-bus-is-never-public into main mesh-admin 2026-10-02 20:52:28 +00:00
  • 7d82751862 The bus is never public: the broker port is no longer a foundation opening jschoubben 2026-10-02 22:52:22 +02:00
  • 905f3363c9 Two machines holding the build role share one queue, and neither is handed an ask while busy (hq ADR 0190) jochen 2026-10-02 22:35:39 +02:00
  • 9f9d9b3b25 A seat's holders pull one ask at a time from one shared worker (hq ADR 0190, issue 186) jochen 2026-10-02 22:34:44 +02:00
  • bde4b61b3b The build role is the node-scoped seat node-build-agent, and its work is shared by every holder (hq ADR 0190) jochen 2026-10-02 22:31:55 +02:00
  • d07018f3c5 Merge pull request 'WP3: a TypeScript bundle carries what it runs with, the runtime's credential belongs to its account, and the gate refuses spreading not standing (hq to-be 38)' (#226) from feat/wp3-node-tools into main mesh-admin 2026-10-02 19:57:21 +00:00
  • 729a5f9e6c The gate refuses the old tool-container pattern spreading, not a rebuild of what already stands (hq to-be 38 WP2.4, amended by WP3) jochen 2026-10-02 21:44:44 +02:00
  • 773b561f5e The runtime's credential belongs to the account it runs as (hq to-be 38 WP3) jochen 2026-10-02 21:44:44 +02:00
  • ca7e81e964 A TypeScript bundle carries what it runs with: the toolchain's runtime directory is copied into it (hq to-be 38 WP3, ADR 0188) jochen 2026-10-02 21:44:44 +02:00
  • 08bb56f1d3 Merge pull request 'The controller composes one tool runtime per node: its principal, the bundles, its process, and the gate (hq ADR 0175, to-be 38 WP2)' (#223) from feat/the-operators-machine into main mesh-admin 2026-10-02 19:27:52 +00:00
  • 1a44d281c2 Merge pull request 'node show cites ADR 0180 for a removed front end (hq ADR 0186)' (#224) from fix/a-ban-list-never-holds-a-neighbour into main mesh-admin 2026-10-02 16:47:25 +00:00
  • 1c8fe65601 node show cites ADR 0180 for a removed front end (hq ADR 0186) jschoubben 2026-10-02 18:42:16 +02:00
  • 8eb6c3e94a A tool container on the runtime's image is refused once the runtime is registered (hq ADR 0175, to-be 38 WP2.4) jochen 2026-10-02 18:30:14 +02:00
  • 9d4d847dc4 The machine runs one tool runtime, loading every delivered bundle (hq ADR 0175, to-be 38 WP2.3) jochen 2026-10-02 18:26:54 +02:00
  • bea1a1c513 Merge pull request 'A control plane behind its seat's row serves what it can (hq ADR 0185)' (#222) from fix/a-service-asked-to-run-is-still-running into main mesh-admin 2026-10-02 16:21:55 +00:00
  • b1df688c62 A module's tools bundle reaches the machine as an archive where the runtime runs (hq ADR 0175, to-be 38 WP2.2) jochen 2026-10-02 18:19:10 +02:00
  • 21d38c9b0e A control plane behind its seat's row serves what it can (hq ADR 0185) jschoubben 2026-10-02 18:16:24 +02:00
  • 1f86ed4135 One runtime principal per node carries every assigned module's tools (hq ADR 0175, to-be 38 WP2.1) jochen 2026-10-02 18:16:14 +02:00
  • 689dd060b0 Merge pull request 'A jail's pattern names <HOST> once, and is refused by name when it does not (hq ADR 0179)' (#221) from fix/a-jails-pattern-names-the-host-once into main mesh-admin 2026-10-02 15:32:14 +00:00
  • 99c4c4ef04 A jail's pattern names <HOST> once, and is refused by name when it does not (hq ADR 0179) jschoubben 2026-10-02 17:25:34 +02:00
  • e5e1666f91 Merge pull request 'The intrusion-prevention seat serves status, banned, ban and unban; the proxy logs a refused name (hq ADR 0179)' (#219) from feat/the-intrusion-seat-serves-its-verbs into main mesh-admin 2026-10-02 15:15:41 +00:00
  • bd58d1c3ef The intrusion-prevention seat serves status, banned, ban and unban; the proxy logs a refused name (hq ADR 0179) jschoubben 2026-10-02 17:02:49 +02:00
  • d134c89a7c Merge pull request 'The service manager is a node seat with the unit verbs, and a user shape names the account (hq ADR 0176, 0177)' (#218) from feat/the-operators-machine into main mesh-admin 2026-10-02 14:58:50 +00:00
  • a9307d9f33 The controller seat gains a generic verb: command runs one line of the binary and answers what it printed jochen 2026-10-02 16:53:27 +02:00
  • 5eb1c9c2b7 The service manager is a node seat with the unit verbs, and a user shape names the account (hq ADR 0176, 0177) jochen 2026-10-02 16:48:16 +02:00
  • 37b8edeec6 Merge pull request 'node show says a found firewall that was uninstalled is removed (hq ADR 0175)' (#217) from feat/the-found-front-end-is-uninstalled into main mesh-admin 2026-10-02 14:29:02 +00:00
  • 424406b2d6 node show says a found firewall that was uninstalled is removed (hq ADR 0175) jschoubben 2026-10-02 16:27:39 +02:00
  • 90455c61f6 Merge pull request 'The example images build from the Go the manifest pins' (#216) from jschoubben/example-images-go-base into main mesh-admin 2026-10-02 13:56:22 +00:00
  • 1f6793cf0c The example images build from the Go the manifest pins jschoubben 2026-10-02 15:38:29 +02:00
  • 6ef522fbda Merge pull request 'Cite hq ADR 0170, not 0169: the firewall seat's record was renumbered' (#215) from fix/adr-0170-cited into main mesh-admin 2026-10-02 12:53:13 +00:00
  • 46f65c12a0 Cite hq ADR 0170, not 0169: the firewall seat's record was renumbered after a collision on hq main jschoubben 2026-10-02 14:52:24 +02:00
  • 8f7c02d77a Merge pull request 'The virtualisation capability grants the lab its daemon's socket (hq ADR 0172)' (#214) from jschoubben/the-lab-is-a-module into main mesh-admin 2026-10-02 12:47:45 +00:00
  • a637df01ea The virtualisation capability grants the lab its daemon's socket jschoubben 2026-10-02 14:46:17 +02:00
  • 252eb786a7 Merge pull request 'A filter module's own filter file counts as declared for a mount (hq ADR 0169)' (#213) from feat/the-firewall-seat-serves-its-verbs into main mesh-admin 2026-10-02 12:05:09 +00:00
  • 9d13b0593b A filter module's own filter file counts as declared for a mount (hq ADR 0169) jschoubben 2026-10-02 14:04:35 +02:00
  • 30d548a762 Merge pull request 'The node-packet-filter seat serves rules, reload and remove (hq ADR 0169)' (#212) from feat/the-firewall-seat-serves-its-verbs into main mesh-admin 2026-10-02 11:28:57 +00:00
  • 550e4c6acb The node-packet-filter seat serves rules, reload and remove (hq ADR 0169) jschoubben 2026-10-02 13:27:04 +02:00
  • 1587fd97f9 Merge pull request 'The mesh says what filters a converged machine: filters kept per node, shown, named by status, previewed with fates (hq ADR 0168)' (#211) from feat/one-thing-filters-a-converged-machine into main mesh-admin 2026-10-02 10:03:01 +00:00
  • b5df244096 The mesh says what filters a converged machine: filters kept per node, shown by node show, named by status, and previewed with their fates (hq ADR 0168) jschoubben 2026-10-02 12:00:12 +02:00
  • db47bb68e9 Merge pull request 'The controller's tools can set an assignment's settings (hq issue 198)' (#210) from jschoubben/settings-verb into main mesh-admin 2026-10-02 09:42:08 +00:00
  • db84142d38 The controller's tools can set an assignment's settings jschoubben 2026-10-02 11:41:57 +02:00
  • c9204591bf Merge pull request 'The hub relays the mesh passing through it (hq issue 196)' (#209) from jschoubben/the-hub-relays-the-mesh into main mesh-admin 2026-10-02 09:17:17 +00:00
  • e8e707e013 The hub relays the mesh passing through it jschoubben 2026-10-02 11:17:09 +02:00
  • 0c003774ba Merge pull request 'A take acts on the preview it showed; a setting is judged where it is stored; a kept network and a minted secret are said (hq ADR 0163)' (#206) from feat/a-take-is-a-comparison-the-rest into main mesh-admin 2026-10-02 09:04:05 +00:00
  • fbc3d320ea A take acts on the preview it showed; a setting is judged where it is stored; a kept network and a minted secret are said (hq ADR 0163) jschoubben 2026-10-01 23:47:32 +02:00
  • cf495e315f Merge pull request 'The proxy is told its routes and the mesh on the bus, and serves internal names to the mesh only (hq issue 191, ADR 0167)' (#207) from jschoubben/an-internal-only-route into main mesh-admin 2026-10-02 07:42:45 +00:00
  • 86bc1fad2c Merge pull request 'The controller's tools can issue a module its bus account (hq issue 191)' (#208) from jschoubben/the-controller-issues-a-module-account into main mesh-admin 2026-10-02 00:22:23 +00:00
  • c9eba5f3b8 The controller's tools can issue a module its bus account jschoubben 2026-10-02 01:55:06 +02:00
  • 24f024dd74 The proxy is told its routes and the mesh on the bus, and serves internal names to the mesh only jschoubben 2026-10-02 01:46:26 +02:00
  • 9acb5f1292 route-proxy: serve a route that names only its internal host jschoubben 2026-10-01 23:31:57 +02:00
  • 20516e3fcb Merge pull request 'plans --what-if: the plan a merge would produce, read before merging' (#205) from feat/plans-what-if into main mesh-admin 2026-10-01 20:41:58 +00:00
  • 0a40c046cf plans --what-if: the plan a merge would produce, read before merging jschoubben 2026-10-01 22:38:49 +02:00
  • 8f51c66eb1 Merge pull request 'A plan rolls out every tier it built' (#204) from fix/a-plan-rolls-out-every-tier-it-built into main mesh-admin 2026-10-01 20:25:00 +00:00
  • 477d3ac9a7 A plan rolls out every tier it built jschoubben 2026-10-01 22:21:42 +02:00