What: inventory.Dependencies now draws two edges it lost once a module was built (catalogue.Resolve registers every built manifest with Build = nil):
a package base: a build's recorded against holds @novox/mesh-sdk@0.1.13 (the builder's name@version for a package artifact). It is read as a stands-on edge to the module whose held artifact is that package, whichever version it holds now (Held). mesh-tools -> mesh-sdk.
a bundle's toolchain: from the Bundles the resolved manifest keeps (language), as issue 211 drew it from build.artifacts before the first build. minio, umami, ... -> mesh-tools; Go bundles -> mesh-tools-go.
Why this way, not keeping build on the entry or changing what the builder records: it reads only records the mesh already keeps. So it holds for every module already built, with no rebuild, no migration and no new builder on the build agents. A rollback to main reads the same records and simply loses the two edges again: nothing is written in a new shape. The other choices would need every module rebuilt before the edge exists, and the SDK would still plan nothing until then.
Why: issue 614. mesh-sdk #24 (0.1.14) planned "builds mesh-sdk, sent nowhere", so issue 272's fix reached no provider. This is a regression of issues 211 and 212 once modules were built.
Tests:
internal/inventory TestABuiltModuleKeepsItsBuildEdges and TestAPackageNameIsReadOnlyFromAPackageReference. Both fail on main (dependenciesWith does not exist).
cmd/mesh-controller TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (store test, listed in testdata/store-tests). It reasons as delivery-plan does (theGraph + pullScope over registered modules and recorded builds). On main it plans mesh-sdk, the live answer of 2026-10-13. With the fix it plans mesh-sdk] [mesh-tools] [minio umami. Uses only what main had, so it is the replay; registered in mesh-lab as R614.
Full merge-check.sh with a store: everything passes except TestATierPutsABrokenModuleBackAtOnce, which also fails 2 of 4 on main alone (timing; not touched here).
Note: a mesh-tools-go change now rebuilds every Go bundle, as issue 211 intended.
Fixes issue 614.
What: inventory.Dependencies now draws two edges it lost once a module was built (catalogue.Resolve registers every built manifest with Build = nil):
- a package base: a build's recorded `against` holds `@novox/mesh-sdk@0.1.13` (the builder's name@version for a package artifact). It is read as a stands-on edge to the module whose held artifact is that package, whichever version it holds now (Held). mesh-tools -> mesh-sdk.
- a bundle's toolchain: from the `Bundles` the resolved manifest keeps (language), as issue 211 drew it from `build.artifacts` before the first build. minio, umami, ... -> mesh-tools; Go bundles -> mesh-tools-go.
Why this way, not keeping `build` on the entry or changing what the builder records: it reads only records the mesh already keeps. So it holds for every module already built, with no rebuild, no migration and no new builder on the build agents. A rollback to main reads the same records and simply loses the two edges again: nothing is written in a new shape. The other choices would need every module rebuilt before the edge exists, and the SDK would still plan nothing until then.
Why: issue 614. mesh-sdk #24 (0.1.14) planned "builds mesh-sdk, sent nowhere", so issue 272's fix reached no provider. This is a regression of issues 211 and 212 once modules were built.
Tests:
- internal/inventory TestABuiltModuleKeepsItsBuildEdges and TestAPackageNameIsReadOnlyFromAPackageReference. Both fail on main (dependenciesWith does not exist).
- cmd/mesh-controller TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (store test, listed in testdata/store-tests). It reasons as `delivery-plan` does (theGraph + pullScope over registered modules and recorded builds). On main it plans [[mesh-sdk]], the live answer of 2026-10-13. With the fix it plans [[mesh-sdk] [mesh-tools] [minio umami]]. Uses only what main had, so it is the replay; registered in mesh-lab as R614.
- Full merge-check.sh with a store: everything passes except TestATierPutsABrokenModuleBackAtOnce, which also fails 2 of 4 on main alone (timing; not touched here).
Note: a mesh-tools-go change now rebuilds every Go bundle, as issue 211 intended.
Fixes issue 614.
mesh/merge-gate head e658a14296f9 merged into trunk 1826b68a22b5 — pass: builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step; every …
A registered manifest carries no build, so mesh-tools' build.on naming the
SDK's package and every bundle's toolchain were edges only before a module was
first built: mesh-sdk 0.1.14 planned "sent nowhere". The relation now reads a
package base from the recorded name@version against the package the mesh holds,
and the toolchain from the bundles the resolved manifest keeps. Only records the
mesh already keeps are read, so it holds for every module built before it and a
rollback reads the same records. Replay R614.
Deliverynovox/mesh-controller@e658a14296f9 — delivered since 2026-10-13T09:42:17Z
Delivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
tier 0: mesh-controller
tier 1: build-agent
ace: receives build-agent
g14: receives build-agent
novox: receives mesh-controller, build-agent
shanks: receives build-agent
build-agent keeps data (ADR 0233): what it holds is backed up before it moves
grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine
Machines
mesh-controller on novox: passed — healthy 3 times over 3m38s
mesh-controller on the rest running it: sent
build-agent on ace: passed — healthy 1 times over 31s
build-agent on the rest running it: sent
Transitions
2026-10-13 09:08 (new) → proposed (announced): novox/mesh-controller#296's head announced
2026-10-13 09:15 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit
2026-10-13 09:15 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
2026-10-13 09:35 ready → published (merged): on the trunk its modules follow: merged there, and its walk opened — or nothing for a walk to move
2026-10-13 09:35 published → delivering (go): its walk started: let go by this owner in its group's order, by a person, or on the controller's own path — not a failed walk that carried a later commit for it, after which it waits for a walk of its own commit
2026-10-13 09:42 delivering → delivered (done): its walk is done, carrying its own commit: every machine of its deploy plan passed, or was left as its policy says
The commit's note under refs/notes/mesh-plan keeps every transition: git log --notes=mesh-plan.
<!-- mesh-delivery:view -->
**Delivery** `novox/mesh-controller@e658a14296f9` — **delivered** since 2026-10-13T09:42:17Z
**Delivery plan** — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
- tier 0: mesh-controller
- tier 1: build-agent
- ace: receives build-agent
- g14: receives build-agent
- novox: receives mesh-controller, build-agent
- shanks: receives build-agent
- build-agent keeps data (ADR 0233): what it holds is backed up before it moves
- grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine
**Machines**
- mesh-controller on novox: passed — healthy 3 times over 3m38s
- mesh-controller on the rest running it: sent
- build-agent on ace: passed — healthy 1 times over 31s
- build-agent on the rest running it: sent
**Transitions**
- 2026-10-13 09:08 (new) → proposed (announced): novox/mesh-controller#296's head announced
- 2026-10-13 09:15 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit
- 2026-10-13 09:15 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
- 2026-10-13 09:35 ready → published (merged): on the trunk its modules follow: merged there, and its walk opened — or nothing for a walk to move
- 2026-10-13 09:35 published → delivering (go): its walk started: let go by this owner in its group's order, by a person, or on the controller's own path — not a failed walk that carried a later commit for it, after which it waits for a walk of its own commit
- 2026-10-13 09:42 delivering → delivered (done): its walk is done, carrying its own commit: every machine of its deploy plan passed, or was left as its policy says
The commit's note under `refs/notes/mesh-plan` keeps every transition: `git log --notes=mesh-plan`.
Merge check at e658a142
Judged: head e658a14296f9 merged into trunk 1826b68a22b5; read beside it: mesh-catalog f35b06750452, mesh-controller-main 1826b68a22b5, mesh-host 7a41e120635b, mesh-tools 954e1a53eef9
mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: build-agent, mesh-controller)
mesh/repo-check: PASS — its merge-check.sh passed
Delivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
tier 0: mesh-controller
tier 1: build-agent
ace: receives build-agent
g14: receives build-agent
novox: receives mesh-controller, build-agent
shanks: receives build-agent
build-agent keeps data (ADR 0233): what it holds is backed up before it moves
grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine
read by no module's build: cmd/mesh-controller/replay614_test.go, internal/inventory/dependencies_test.go, testdata/store-tests
Run by the build seat on ace as build-1791882523823626544 (builds --log build-1791882523823626544).
--- the gate: build-agent, mesh-controller
mesh-controller: ok, 58 tool(s); WARNING: merge-window ask(s) for a setting and do(es) not say whether it is trusted, so it counts as trusted: set at the terminal alone; say "trusted" false where nothing trusts it (novox/hq issue 339); WARNING: controller stay(s) up and say(s) not how it is ready — judged by liveness alone, refused from 2026-11-18 (ADR 0240 rule 8)
long-running resources without health: 1
files asking for a setting without saying whether it is trusted: 1
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-13T08:59:10Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-13T08:59:10Z
modules the change moves:
- mesh-controller (changed)
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 2 module(s) in 2 tier(s): build-agent, mesh-controller
notes:
- cmd/mesh-controller/replay614_test.go, internal/inventory/dependencies_test.go and testdata/store-tests read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
ok github.com/novox/mesh-controller/cmd/mesh-builder 1.040s
ok github.com/novox/mesh-controller/cmd/mesh-controller 169.994s
ok github.com/novox/mesh-controller/examples/objectstore-provisioner 1.014s
ok github.com/novox/mesh-controller/examples/postgres-provisioner 1.019s
ok github.com/novox/mesh-controller/examples/redis-provisioner 1.013s
ok github.com/novox/mesh-controller/examples/route-proxy 1.140s
ok github.com/novox/mesh-controller/internal/artifacts 1.107s
? github.com/novox/mesh-controller/internal/beside [no test files]
ok github.com/novox/mesh-controller/internal/broker 6.348s
ok github.com/novox/mesh-controller/internal/builder 52.547s
ok github.com/novox/mesh-controller/internal/catalogue 7.558s
ok github.com/novox/mesh-controller/internal/conditions 2.571s
ok github.com/novox/mesh-controller/internal/envfile 1.079s
ok github.com/novox/mesh-controller/internal/facts 1.080s
ok github.com/novox/mesh-controller/internal/identity 7.683s
ok github.com/novox/mesh-controller/internal/inventory 40.657s
ok github.com/novox/mesh-controller/internal/lease 17.704s
ok github.com/novox/mesh-controller/internal/licences 6.598s
ok github.com/novox/mesh-controller/internal/licences/adapters 1.035s
ok github.com/novox/mesh-controller/internal/link 61.060s
ok github.com/novox/mesh-controller/internal/lint 2.292s
ok github.com/novox/mesh-controller/internal/outward 1.075s
ok github.com/novox/mesh-controller/internal/overlay 1.056s
ok github.com/novox/mesh-controller/internal/secrets 1.434s
ok github.com/novox/mesh-controller/internal/store 3.385s
ok github.com/novox/mesh-controller/internal/testbus 1.226s
ok github.com/novox/mesh-controller/internal/token 1.017s
store tests, each run against the store:
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeWalksTheOthersAgain (0.21s)
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeEndsTheMergesThatContainIt (0.21s)
./cmd/mesh-controller --- PASS: TestAStopWalksTheOthersAgainInTheOpenBatch (0.22s)
./cmd/mesh-controller --- PASS: TestAStopNamesWhatStaysOnTheMachinesAndWhatStillCarriesIt (0.20s)
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeLeavesItOutOfABatch (0.19s)
./cmd/mesh-controller --- PASS: TestSavingPlansAndMovingMergesIsOneAct (0.16s)
./cmd/mesh-controller --- PASS: TestAPlanFollowedFromTheStoreAnswersWhenItMoves (1.96s)
./cmd/mesh-controller --- PASS: TestNodeShowAndStatusReadTheLastSendFromTheStore (0.23s)
./cmd/mesh-controller --- PASS: TestTheConditionsVerbReadsTheLooksTheBucketNoLongerHolds (0.13s)
./cmd/mesh-controller --- PASS: TestAWalkLetGoAndStoppedByVerbsIsSaidStartedAndEnded (0.24s)
./cmd/mesh-controller --- PASS: TestAWalkStoppedOrClosedByAPersonIsSaidEndedStopped (0.23s)
./cmd/mesh-controller --- PASS: TestAWalkRetriedByAPersonIsSaidStartedAgain (0.20s)
./cmd/mesh-controller --- PASS: TestABacklogReleasedByAPersonIsSaidStarted (0.20s)
./cmd/mesh-controller --- PASS: TestAWalkEndedByCancelOrClearIsSaidEnded (0.26s)
./cmd/mesh-controller --- PASS: TestAWalkRestartedByARebuildIsSaidStarted (0.20s)
./cmd/mesh-controller --- PASS: TestAWalkStoppedByHandAndRetriedEndsFailedWhenItFailsAgain (0.24s)
./cmd/mesh-controller --- PASS: TestReplay237 (0.20s)
./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeUnresolvedSaysSoOnceInItsAnswer (0.19s)
./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeResolvedSaysNothingOfIt (0.29s)
./cmd/mesh-controller --- PASS: TestAnAssignThatLeavesItsNodeUnresolvedSaysOnlyThePlansRefusal (0.19s)
./cmd/mesh-controller --- PASS: TestADirectoryOwnersKeyIsRefusedThroughAVerb (0.21s)
./cmd/mesh-controller --- PASS: TestTheSendMakesNoValueForAnOutsideSecretNobodyGave (0.28s)
./cmd/mesh-controller --- PASS: TestAQuestionComposesWithoutAnOutsideSecretNobodyGave (0.26s)
./cmd/mesh-controller --- PASS: TestReplay201 (0.15s)
./cmd/mesh-controller --- PASS: TestARollbackWhoseSendWasRefusedIsCompletedByTheNextSend (0.15s)
./cmd/mesh-controller --- PASS: TestAGateJudgesTheOtherMovesBesideAKeptCore (0.15s)
./cmd/mesh-controller --- PASS: TestReplay401 (0.27s)
./cmd/mesh-controller --- PASS: TestReplay201ThePlansSend (0.23s)
./cmd/mesh-controller --- PASS: TestPlanAndNodeListAnOptionalRequirementLeftUnbound (0.28s)
./cmd/mesh-controller --- PASS: TestReplay340 (0.23s)
./cmd/mesh-controller --- PASS: TestOnlyATrustedFilesNamedKeyIsRefusedThroughAVerb (0.19s)
./cmd/mesh-controller --- PASS: TestReplay349 (0.19s)
./cmd/mesh-controller --- PASS: TestReplay348AFaultFromBeforeTheSendFailsNoGate (0.18s)
./cmd/mesh-controller --- PASS: TestReplay239AModuleNameIsNotTakenOverByAnotherRepository (0.15s)
./cmd/mesh-controller --- PASS: TestAWalkThatMovedNothingSaysWhichModulesMatchedWhatRuns (0.18s)
./cmd/mesh-controller --- PASS: TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (0.08s)
./internal/inventory --- PASS: TestTheLastSendSaysWhatTheMachineAnswered (0.07s)
./internal/inventory --- PASS: TestAReportIsTheLastSendsAnswerOnlyWhenItIsAboutThatSend (0.08s)
./internal/inventory --- PASS: TestAnIssuedValueIsSealedToEveryHolderOnceAndNotAgain (0.09s)
./internal/inventory --- PASS: TestAnIssuedValueIsSealedAgainAfterAKeyChangeOrAnAcceptance (0.08s)
./internal/inventory --- PASS: TestAConditionsLooksAreKeptBesideTheBucket (0.06s)
./internal/inventory --- PASS: TestAPlanIdHoldingAQuoteIsReadAsAPlainId (0.06s)
./internal/inventory --- PASS: TestAWalksStartIsKeptAndARefusedSaveLeavesItUnsaid (0.07s)
./internal/inventory --- PASS: TestAWalksRestIsReadFromEachMachinesOwnSend (0.07s)
./internal/inventory --- PASS: TestAStoredBuildWithASilentMergeableFileIsStillReadAndComposed (0.07s)
**Merge check** at `e658a142`
Judged: head `e658a14296f9` merged into trunk `1826b68a22b5`; read beside it: mesh-catalog `f35b06750452`, mesh-controller-main `1826b68a22b5`, mesh-host `7a41e120635b`, mesh-tools `954e1a53eef9`
- `mesh/merge-gate`: **PASS** — every machine composes with the change as it did without (4 of 4 compose) (modules: build-agent, mesh-controller)
- `mesh/repo-check`: **PASS** — its merge-check.sh passed
**Delivery plan** — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
- tier 0: mesh-controller
- tier 1: build-agent
- ace: receives build-agent
- g14: receives build-agent
- novox: receives mesh-controller, build-agent
- shanks: receives build-agent
- build-agent keeps data (ADR 0233): what it holds is backed up before it moves
- grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine
- read by no module's build: cmd/mesh-controller/replay614_test.go, internal/inventory/dependencies_test.go, testdata/store-tests
Run by the build seat on ace as `build-1791882523823626544` (`builds --log build-1791882523823626544`).
```
--- the gate: build-agent, mesh-controller
mesh-controller: ok, 58 tool(s); WARNING: merge-window ask(s) for a setting and do(es) not say whether it is trusted, so it counts as trusted: set at the terminal alone; say "trusted" false where nothing trusts it (novox/hq issue 339); WARNING: controller stay(s) up and say(s) not how it is ready — judged by liveness alone, refused from 2026-11-18 (ADR 0240 rule 8)
long-running resources without health: 1
files asking for a setting without saying whether it is trusted: 1
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-13T08:59:10Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-13T08:59:10Z
modules the change moves:
- mesh-controller (changed)
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 2 module(s) in 2 tier(s): build-agent, mesh-controller
notes:
- cmd/mesh-controller/replay614_test.go, internal/inventory/dependencies_test.go and testdata/store-tests read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
ok github.com/novox/mesh-controller/cmd/mesh-builder 1.040s
ok github.com/novox/mesh-controller/cmd/mesh-controller 169.994s
ok github.com/novox/mesh-controller/examples/objectstore-provisioner 1.014s
ok github.com/novox/mesh-controller/examples/postgres-provisioner 1.019s
ok github.com/novox/mesh-controller/examples/redis-provisioner 1.013s
ok github.com/novox/mesh-controller/examples/route-proxy 1.140s
ok github.com/novox/mesh-controller/internal/artifacts 1.107s
? github.com/novox/mesh-controller/internal/beside [no test files]
ok github.com/novox/mesh-controller/internal/broker 6.348s
ok github.com/novox/mesh-controller/internal/builder 52.547s
ok github.com/novox/mesh-controller/internal/catalogue 7.558s
ok github.com/novox/mesh-controller/internal/conditions 2.571s
ok github.com/novox/mesh-controller/internal/envfile 1.079s
ok github.com/novox/mesh-controller/internal/facts 1.080s
ok github.com/novox/mesh-controller/internal/identity 7.683s
ok github.com/novox/mesh-controller/internal/inventory 40.657s
ok github.com/novox/mesh-controller/internal/lease 17.704s
ok github.com/novox/mesh-controller/internal/licences 6.598s
ok github.com/novox/mesh-controller/internal/licences/adapters 1.035s
ok github.com/novox/mesh-controller/internal/link 61.060s
ok github.com/novox/mesh-controller/internal/lint 2.292s
ok github.com/novox/mesh-controller/internal/outward 1.075s
ok github.com/novox/mesh-controller/internal/overlay 1.056s
ok github.com/novox/mesh-controller/internal/secrets 1.434s
ok github.com/novox/mesh-controller/internal/store 3.385s
ok github.com/novox/mesh-controller/internal/testbus 1.226s
ok github.com/novox/mesh-controller/internal/token 1.017s
store tests, each run against the store:
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeWalksTheOthersAgain (0.21s)
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeEndsTheMergesThatContainIt (0.21s)
./cmd/mesh-controller --- PASS: TestAStopWalksTheOthersAgainInTheOpenBatch (0.22s)
./cmd/mesh-controller --- PASS: TestAStopNamesWhatStaysOnTheMachinesAndWhatStillCarriesIt (0.20s)
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeLeavesItOutOfABatch (0.19s)
./cmd/mesh-controller --- PASS: TestSavingPlansAndMovingMergesIsOneAct (0.16s)
./cmd/mesh-controller --- PASS: TestAPlanFollowedFromTheStoreAnswersWhenItMoves (1.96s)
./cmd/mesh-controller --- PASS: TestNodeShowAndStatusReadTheLastSendFromTheStore (0.23s)
./cmd/mesh-controller --- PASS: TestTheConditionsVerbReadsTheLooksTheBucketNoLongerHolds (0.13s)
./cmd/mesh-controller --- PASS: TestAWalkLetGoAndStoppedByVerbsIsSaidStartedAndEnded (0.24s)
./cmd/mesh-controller --- PASS: TestAWalkStoppedOrClosedByAPersonIsSaidEndedStopped (0.23s)
./cmd/mesh-controller --- PASS: TestAWalkRetriedByAPersonIsSaidStartedAgain (0.20s)
./cmd/mesh-controller --- PASS: TestABacklogReleasedByAPersonIsSaidStarted (0.20s)
./cmd/mesh-controller --- PASS: TestAWalkEndedByCancelOrClearIsSaidEnded (0.26s)
./cmd/mesh-controller --- PASS: TestAWalkRestartedByARebuildIsSaidStarted (0.20s)
./cmd/mesh-controller --- PASS: TestAWalkStoppedByHandAndRetriedEndsFailedWhenItFailsAgain (0.24s)
./cmd/mesh-controller --- PASS: TestReplay237 (0.20s)
./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeUnresolvedSaysSoOnceInItsAnswer (0.19s)
./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeResolvedSaysNothingOfIt (0.29s)
./cmd/mesh-controller --- PASS: TestAnAssignThatLeavesItsNodeUnresolvedSaysOnlyThePlansRefusal (0.19s)
./cmd/mesh-controller --- PASS: TestADirectoryOwnersKeyIsRefusedThroughAVerb (0.21s)
./cmd/mesh-controller --- PASS: TestTheSendMakesNoValueForAnOutsideSecretNobodyGave (0.28s)
./cmd/mesh-controller --- PASS: TestAQuestionComposesWithoutAnOutsideSecretNobodyGave (0.26s)
./cmd/mesh-controller --- PASS: TestReplay201 (0.15s)
./cmd/mesh-controller --- PASS: TestARollbackWhoseSendWasRefusedIsCompletedByTheNextSend (0.15s)
./cmd/mesh-controller --- PASS: TestAGateJudgesTheOtherMovesBesideAKeptCore (0.15s)
./cmd/mesh-controller --- PASS: TestReplay401 (0.27s)
./cmd/mesh-controller --- PASS: TestReplay201ThePlansSend (0.23s)
./cmd/mesh-controller --- PASS: TestPlanAndNodeListAnOptionalRequirementLeftUnbound (0.28s)
./cmd/mesh-controller --- PASS: TestReplay340 (0.23s)
./cmd/mesh-controller --- PASS: TestOnlyATrustedFilesNamedKeyIsRefusedThroughAVerb (0.19s)
./cmd/mesh-controller --- PASS: TestReplay349 (0.19s)
./cmd/mesh-controller --- PASS: TestReplay348AFaultFromBeforeTheSendFailsNoGate (0.18s)
./cmd/mesh-controller --- PASS: TestReplay239AModuleNameIsNotTakenOverByAnotherRepository (0.15s)
./cmd/mesh-controller --- PASS: TestAWalkThatMovedNothingSaysWhichModulesMatchedWhatRuns (0.18s)
./cmd/mesh-controller --- PASS: TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (0.08s)
./internal/inventory --- PASS: TestTheLastSendSaysWhatTheMachineAnswered (0.07s)
./internal/inventory --- PASS: TestAReportIsTheLastSendsAnswerOnlyWhenItIsAboutThatSend (0.08s)
./internal/inventory --- PASS: TestAnIssuedValueIsSealedToEveryHolderOnceAndNotAgain (0.09s)
./internal/inventory --- PASS: TestAnIssuedValueIsSealedAgainAfterAKeyChangeOrAnAcceptance (0.08s)
./internal/inventory --- PASS: TestAConditionsLooksAreKeptBesideTheBucket (0.06s)
./internal/inventory --- PASS: TestAPlanIdHoldingAQuoteIsReadAsAPlainId (0.06s)
./internal/inventory --- PASS: TestAWalksStartIsKeptAndARefusedSaveLeavesItUnsaid (0.07s)
./internal/inventory --- PASS: TestAWalksRestIsReadFromEachMachinesOwnSend (0.07s)
./internal/inventory --- PASS: TestAStoredBuildWithASilentMergeableFileIsStillReadAndComposed (0.07s)
```
Independent review for issue 614. The statuses at this head are: mesh/merge-gate success ("head e658a14296 merged into trunk 1826b68a22 — pass: builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step; every …"), mesh/repo-check success ("head e658a14296 merged into trunk 1826b68a22 — pass: its merge-check.sh passed") and mesh/delivery success ("ready: it delivers once merged").
What I ran on g14, in a fresh HTTPS clone with a throwaway postgres 18 store: gofmt is clean and go vet ./... passes. go test -race passes for internal/inventory (85 s) and for the whole of cmd/mesh-controller (637 s), including TestATierPutsABrokenModuleBackAtOnce, which the description says is flaky on main. The store test TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles passes, and it is listed in testdata/store-tests.
The tests fail on main. With the two test files laid over origin/main, internal/inventory does not compile (dependenciesWith and packageName are undefined). The replay fails with "a new SDK plans mesh-sdk, want mesh-sdk] [mesh-tools] [minio umami", which is the live answer of 2026-10-13.
Correctness of the package match. packageName strips only the last "@version" and returns "" for artifact-store references, image digests, URLs and a scoped name with no version. The lookup is then an exact map lookup on the name, so "@novox/mesh-sdk-extra@1" cannot match mesh-sdk; there is no prefix match anywhere. The version is ignored on purpose, so a build that stood on 0.1.13 still reaches the module that now holds 0.1.14. That is the right choice. I checked the live record: mesh-tools' build build-1791808123247620326 of 2026-10-12 was handed MESH_SDK=@novox/mesh-sdk@0.1.13, which is exactly the shape this reads.
A stored build record without these fields. A build with no built_against is skipped by BuiltAgainst, and dependenciesOf passes a nil held map, so nothing panics and no edge is invented. A registered manifest whose bundles carry no language (bundle language has been kept since b1df688 of 2026-10-02) makes ToolchainFor return an error, and that bundle silently gets no toolchain edge. This is the same behaviour as before the fix and is not a blocker; it only matters for a module not rebuilt since 2026-10-02.
Rollback to main. Nothing is written in a new shape: no migration, no new edge kind, no new field in the build record or the registered manifest. A controller rolled back reads the same rows and simply loses these two edges again.
A mesh-tools-go change now rebuilds every Go bundle. That is what issue 211 intended: its diagnosis tested "Go bundle → mesh-tools-go", and the code comment from that fix says that a toolchain that moves rebuilds every bundle compiled in it. ADR 0162 clauses 3 and 5 agree: a build dependency rebuilds the dependent in the next tier. The planner bounds it in order but not in size. tiersOf places mesh-tools-go first and every Go-bundle module after it. The built-by edge from mesh-tools-go to build-agent is skipped through isBaseOf, so no false cycle appears, and hasCycle would report one if it did. There is no cap on a tier's width. By mesh-catalog main, about 70 modules have a Go bundle, including mesh-controller and the core seats, so a mesh-tools-go merge becomes one wide walk. Rebuilds whose binaries come out identical are reported unchanged (issue 611), so only a compiler or flag change moves them. I recommend saying this in the record, but it does not block the merge.
Minor, not blocking. packagesHeld keys by package name, so if two modules ever held the same package name, the winner would depend on map order. Today only mesh-sdk holds a package.
Verdict: approve at e658a14296f9c86938f38a0a1f6727bfa7ac48fe
Independent review for issue 614. The statuses at this head are: mesh/merge-gate success ("head e658a14296f9 merged into trunk 1826b68a22b5 — pass: builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step; every …"), mesh/repo-check success ("head e658a14296f9 merged into trunk 1826b68a22b5 — pass: its merge-check.sh passed") and mesh/delivery success ("ready: it delivers once merged").
What I ran on g14, in a fresh HTTPS clone with a throwaway postgres 18 store: gofmt is clean and `go vet ./...` passes. `go test -race` passes for internal/inventory (85 s) and for the whole of cmd/mesh-controller (637 s), including TestATierPutsABrokenModuleBackAtOnce, which the description says is flaky on main. The store test TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles passes, and it is listed in testdata/store-tests.
The tests fail on main. With the two test files laid over origin/main, internal/inventory does not compile (dependenciesWith and packageName are undefined). The replay fails with "a new SDK plans [[mesh-sdk]], want [[mesh-sdk] [mesh-tools] [minio umami]]", which is the live answer of 2026-10-13.
Correctness of the package match. packageName strips only the last "@version" and returns "" for artifact-store references, image digests, URLs and a scoped name with no version. The lookup is then an exact map lookup on the name, so "@novox/mesh-sdk-extra@1" cannot match mesh-sdk; there is no prefix match anywhere. The version is ignored on purpose, so a build that stood on 0.1.13 still reaches the module that now holds 0.1.14. That is the right choice. I checked the live record: mesh-tools' build build-1791808123247620326 of 2026-10-12 was handed MESH_SDK=@novox/mesh-sdk@0.1.13, which is exactly the shape this reads.
A stored build record without these fields. A build with no built_against is skipped by BuiltAgainst, and dependenciesOf passes a nil held map, so nothing panics and no edge is invented. A registered manifest whose bundles carry no language (bundle language has been kept since b1df688 of 2026-10-02) makes ToolchainFor return an error, and that bundle silently gets no toolchain edge. This is the same behaviour as before the fix and is not a blocker; it only matters for a module not rebuilt since 2026-10-02.
Rollback to main. Nothing is written in a new shape: no migration, no new edge kind, no new field in the build record or the registered manifest. A controller rolled back reads the same rows and simply loses these two edges again.
A mesh-tools-go change now rebuilds every Go bundle. That is what issue 211 intended: its diagnosis tested "Go bundle → mesh-tools-go", and the code comment from that fix says that a toolchain that moves rebuilds every bundle compiled in it. ADR 0162 clauses 3 and 5 agree: a build dependency rebuilds the dependent in the next tier. The planner bounds it in order but not in size. tiersOf places mesh-tools-go first and every Go-bundle module after it. The built-by edge from mesh-tools-go to build-agent is skipped through isBaseOf, so no false cycle appears, and hasCycle would report one if it did. There is no cap on a tier's width. By mesh-catalog main, about 70 modules have a Go bundle, including mesh-controller and the core seats, so a mesh-tools-go merge becomes one wide walk. Rebuilds whose binaries come out identical are reported unchanged (issue 611), so only a compiler or flag change moves them. I recommend saying this in the record, but it does not block the merge.
Minor, not blocking. packagesHeld keys by package name, so if two modules ever held the same package name, the winner would depend on map order. Today only mesh-sdk holds a package.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
What: inventory.Dependencies now draws two edges it lost once a module was built (catalogue.Resolve registers every built manifest with Build = nil):
againstholds@novox/mesh-sdk@0.1.13(the builder's name@version for a package artifact). It is read as a stands-on edge to the module whose held artifact is that package, whichever version it holds now (Held). mesh-tools -> mesh-sdk.Bundlesthe resolved manifest keeps (language), as issue 211 drew it frombuild.artifactsbefore the first build. minio, umami, ... -> mesh-tools; Go bundles -> mesh-tools-go.Why this way, not keeping
buildon the entry or changing what the builder records: it reads only records the mesh already keeps. So it holds for every module already built, with no rebuild, no migration and no new builder on the build agents. A rollback to main reads the same records and simply loses the two edges again: nothing is written in a new shape. The other choices would need every module rebuilt before the edge exists, and the SDK would still plan nothing until then.Why: issue 614. mesh-sdk #24 (0.1.14) planned "builds mesh-sdk, sent nowhere", so issue 272's fix reached no provider. This is a regression of issues 211 and 212 once modules were built.
Tests:
delivery-plandoes (theGraph + pullScope over registered modules and recorded builds). On main it plans mesh-sdk, the live answer of 2026-10-13. With the fix it plans mesh-sdk] [mesh-tools] [minio umami. Uses only what main had, so it is the replay; registered in mesh-lab as R614.Note: a mesh-tools-go change now rebuilds every Go bundle, as issue 211 intended.
Fixes issue 614.
Delivery
novox/mesh-controller@e658a14296f9— delivered since 2026-10-13T09:42:17ZDelivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
Machines
Transitions
The commit's note under
refs/notes/mesh-plankeeps every transition:git log --notes=mesh-plan.Merge check at
e658a142Judged: head
e658a14296f9merged into trunk1826b68a22b5; read beside it: mesh-catalogf35b06750452, mesh-controller-main1826b68a22b5, mesh-host7a41e120635b, mesh-tools954e1a53eef9mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: build-agent, mesh-controller)mesh/repo-check: PASS — its merge-check.sh passedDelivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
Run by the build seat on ace as
build-1791882523823626544(builds --log build-1791882523823626544).Verdict: approve at
e658a14296Independent review for issue 614. The statuses at this head are: mesh/merge-gate success ("head
e658a14296merged into trunk1826b68a22— pass: builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step; every …"), mesh/repo-check success ("heade658a14296merged into trunk1826b68a22— pass: its merge-check.sh passed") and mesh/delivery success ("ready: it delivers once merged").What I ran on g14, in a fresh HTTPS clone with a throwaway postgres 18 store: gofmt is clean and
go vet ./...passes.go test -racepasses for internal/inventory (85 s) and for the whole of cmd/mesh-controller (637 s), including TestATierPutsABrokenModuleBackAtOnce, which the description says is flaky on main. The store test TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles passes, and it is listed in testdata/store-tests.The tests fail on main. With the two test files laid over origin/main, internal/inventory does not compile (dependenciesWith and packageName are undefined). The replay fails with "a new SDK plans mesh-sdk, want mesh-sdk] [mesh-tools] [minio umami", which is the live answer of 2026-10-13.
Correctness of the package match. packageName strips only the last "@version" and returns "" for artifact-store references, image digests, URLs and a scoped name with no version. The lookup is then an exact map lookup on the name, so "@novox/mesh-sdk-extra@1" cannot match mesh-sdk; there is no prefix match anywhere. The version is ignored on purpose, so a build that stood on 0.1.13 still reaches the module that now holds 0.1.14. That is the right choice. I checked the live record: mesh-tools' build build-1791808123247620326 of 2026-10-12 was handed MESH_SDK=@novox/mesh-sdk@0.1.13, which is exactly the shape this reads.
A stored build record without these fields. A build with no built_against is skipped by BuiltAgainst, and dependenciesOf passes a nil held map, so nothing panics and no edge is invented. A registered manifest whose bundles carry no language (bundle language has been kept since
b1df688of 2026-10-02) makes ToolchainFor return an error, and that bundle silently gets no toolchain edge. This is the same behaviour as before the fix and is not a blocker; it only matters for a module not rebuilt since 2026-10-02.Rollback to main. Nothing is written in a new shape: no migration, no new edge kind, no new field in the build record or the registered manifest. A controller rolled back reads the same rows and simply loses these two edges again.
A mesh-tools-go change now rebuilds every Go bundle. That is what issue 211 intended: its diagnosis tested "Go bundle → mesh-tools-go", and the code comment from that fix says that a toolchain that moves rebuilds every bundle compiled in it. ADR 0162 clauses 3 and 5 agree: a build dependency rebuilds the dependent in the next tier. The planner bounds it in order but not in size. tiersOf places mesh-tools-go first and every Go-bundle module after it. The built-by edge from mesh-tools-go to build-agent is skipped through isBaseOf, so no false cycle appears, and hasCycle would report one if it did. There is no cap on a tier's width. By mesh-catalog main, about 70 modules have a Go bundle, including mesh-controller and the core seats, so a mesh-tools-go merge becomes one wide walk. Rebuilds whose binaries come out identical are reported unchanged (issue 611), so only a compiler or flag change moves them. I recommend saying this in the record, but it does not block the merge.
Minor, not blocking. packagesHeld keys by package name, so if two modules ever held the same package name, the winner would depend on map order. Today only mesh-sdk holds a package.