novox/mesh-controller
8
0
Fork 0
Code Issues Pull Requests 5 Releases Wiki Activity

Issue the provisioner client its own account when its module declares no broker (issue 917) #359

Merged
mesh-tools merged 2 commits from fix/917-provisioner-account into main 2026-10-16 14:11:27 +00:00
Conversation 7 Commits 2 Files Changed 4
+53 -15
mesh-tools commented 2026-10-16 13:01:12 +00:00
Member
Copy Link
Copy Source

Fixes issue 917 (design 57 P3, issue 669; ADR 0349 clause 11, ADR 0374).

The catalogue's mesh-provisioner-client declares only the own secret provisioner-broker. Live on 2026-10-16 14:54: assign g14 mesh-provisioner-client minted nothing, push g14 refused (no credential for provisioner.g14, run module issue), and module issue refused (no own secret named broker). No machine could run the client.

  • mayIssue accepts a module that runs the provisioner client without a broker.
  • issueOnTheNewBus mints the module's own account only when it declares broker, then the client's account as before.
  • issueOnAssign checks the client's user when the module has no broker, so assign mints it.

Tests: TestAClientWithoutABrokerOfItsOwnMayBeIssued (fails on main, passes here), TestAssigningTheClientIssuesItsAccount (store; runs in the merge check).

Note: mesh/repo-check on main fails today for issue 914, independent of this change.

Fixes issue 917 (design 57 P3, issue 669; ADR 0349 clause 11, ADR 0374). The catalogue's `mesh-provisioner-client` declares only the own secret `provisioner-broker`. Live on 2026-10-16 14:54: `assign g14 mesh-provisioner-client` minted nothing, `push g14` refused (no credential for provisioner.g14, run `module issue`), and `module issue` refused (no own secret named broker). No machine could run the client. - `mayIssue` accepts a module that runs the provisioner client without a `broker`. - `issueOnTheNewBus` mints the module's own account only when it declares `broker`, then the client's account as before. - `issueOnAssign` checks the client's user when the module has no `broker`, so `assign` mints it. Tests: `TestAClientWithoutABrokerOfItsOwnMayBeIssued` (fails on main, passes here), `TestAssigningTheClientIssuesItsAccount` (store; runs in the merge check). Note: mesh/repo-check on main fails today for issue 914, independent of this change.
mesh-tools added 1 commit 2026-10-16 13:01:12 +00:00
Issue the provisioner client its own account when its module declares no broker
mesh/merge-gate error: builds mesh-controller → novox; no bus step; the check could not run: killed by hand
Details
mesh/repo-check error: the check could not run: killed by hand
Details
mesh/delivery superseded: a newer head of the same pull request
Details
b5da0b2161 
The catalogue's mesh-provisioner-client declares only provisioner-broker:
the client speaks on the bus as itself. module issue refused it for
lacking a broker, assign minted nothing, and push refused it for lacking
an account, so no machine could run the client (issue 917).
mesh-tools added 1 commit 2026-10-16 13:03:07 +00:00
List the client's assign test among the store tests
mesh/merge-gate head eea58662163e merged into trunk 407dc86a74df — pass: builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step; every …
Details
mesh/repo-check head eea58662163e merged into trunk 407dc86a74df — pass: its merge-check.sh passed
Details
mesh/delivery delivered
Details
eea5866216 
The merge check proves only listed store tests ran; unlisted, the one
test that shows assign issuing the client's account could skip unseen
(review of issue 917).
mesh-tools commented 2026-10-16 13:03:12 +00:00
Author
Member
Copy Link
Copy Source

Merge check at b5da0b21

  • mesh/merge-gate: ERROR — the check could not run: killed by hand (modules: mesh-controller)
  • mesh/repo-check: ERROR — the check could not run: killed by hand

Delivery plan — builds mesh-controller → novox; no bus step

  • tier 0: mesh-controller
  • novox: receives mesh-controller
  • read by no module's build: cmd/mesh-controller/provisioner_account_test.go

Run by the build seat on shanks as build-1792155778998635709 (builds --log build-1792155778998635709).

**Merge check** at `b5da0b21` - `mesh/merge-gate`: **ERROR** — the check could not run: killed by hand (modules: mesh-controller) - `mesh/repo-check`: **ERROR** — the check could not run: killed by hand **Delivery plan** — builds mesh-controller → novox; no bus step - tier 0: mesh-controller - novox: receives mesh-controller - read by no module's build: cmd/mesh-controller/provisioner_account_test.go Run by the build seat on shanks as `build-1792155778998635709` (`builds --log build-1792155778998635709`).
mesh-tools commented 2026-10-16 13:03:13 +00:00
Author
Member
Copy Link
Copy Source

Delivery novox/mesh-controller@eea58662163e — delivered since 2026-10-16T14:13:40Z

Delivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step

  • tier 0: mesh-controller
  • tier 1: build-agent
  • ace: receives build-agent
  • g14: receives build-agent
  • novox: receives mesh-controller, build-agent
  • shanks: receives build-agent
  • build-agent keeps data (ADR 0233): what it holds is backed up before it moves
  • grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine

Machines

  • mesh-controller on every machine running it: sent

Transitions

  • 2026-10-16 13:03 (new) → proposed (announced): novox/mesh-controller#359's head announced
  • 2026-10-16 13:08 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit
  • 2026-10-16 13:08 checked → rejected (refused): the gate failed or could not run, or the repository's own check failed
  • 2026-10-16 13:59 rejected → proposed (recheck): issue 914 is resolved and main moved to 611e2275; judge #359 (issue 917) again against it
  • 2026-10-16 14:06 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit
  • 2026-10-16 14:06 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
  • 2026-10-16 14:11 ready → published (merged): on the trunk its modules follow: merged there, and its walk opened — or nothing for a walk to move
  • 2026-10-16 14:11 published → delivering (go): its walk started: let go by this owner in its group's order, by a person, or on the controller's own path — not a failed walk that carried a later commit for it, after which it waits for a walk of its own commit
  • 2026-10-16 14:13 delivering → delivered (done): its walk is done, carrying its own commit: every machine of its deploy plan passed, or was left as its policy says

The commit's note under refs/notes/mesh-plan keeps every transition: git log --notes=mesh-plan.

<!-- mesh-delivery:view --> **Delivery** `novox/mesh-controller@eea58662163e` — **delivered** since 2026-10-16T14:13:40Z **Delivery plan** — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step - tier 0: mesh-controller - tier 1: build-agent - ace: receives build-agent - g14: receives build-agent - novox: receives mesh-controller, build-agent - shanks: receives build-agent - build-agent keeps data (ADR 0233): what it holds is backed up before it moves - grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine **Machines** - mesh-controller on every machine running it: sent **Transitions** - 2026-10-16 13:03 (new) → proposed (announced): novox/mesh-controller#359's head announced - 2026-10-16 13:08 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit - 2026-10-16 13:08 checked → rejected (refused): the gate failed or could not run, or the repository's own check failed - 2026-10-16 13:59 rejected → proposed (recheck): issue 914 is resolved and main moved to 611e2275; judge #359 (issue 917) again against it - 2026-10-16 14:06 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit - 2026-10-16 14:06 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail - 2026-10-16 14:11 ready → published (merged): on the trunk its modules follow: merged there, and its walk opened — or nothing for a walk to move - 2026-10-16 14:11 published → delivering (go): its walk started: let go by this owner in its group's order, by a person, or on the controller's own path — not a failed walk that carried a later commit for it, after which it waits for a walk of its own commit - 2026-10-16 14:13 delivering → delivered (done): its walk is done, carrying its own commit: every machine of its deploy plan passed, or was left as its policy says The commit's note under `refs/notes/mesh-plan` keeps every transition: `git log --notes=mesh-plan`.
mesh-tools commented 2026-10-16 13:08:27 +00:00
Author
Member
Copy Link
Copy Source

Merge check at eea58662
Judged: head eea58662163e merged into trunk a20680dfe769; read beside it: mesh-catalog 3db85a0dde83, mesh-controller-main a20680dfe769, mesh-host cd13f7726ef0, mesh-tools 7412c5b6c9c5

  • mesh/merge-gate: PASS — every machine composes with the change as it did without (3 of 4 compose) (modules: mesh-controller)
  • mesh/repo-check: FAIL — its merge-check.sh failed: --- FAIL: TestEveryCatalogueManifestParses (0.74s); and TestNoCatalogueManifestNamesAnInstallation, TestEveryCatalogueIdentityFitsWhatItRequires, TestCaTrustRendersTheAuthorityItWasBoundTo, TestTheFilterModuleNeverFlushesTheRuleset, TestTheForgesOwnAddressFollowsThePortTheNodeGaveIt and 6 more

Delivery plan — builds mesh-controller → novox; no bus step

  • tier 0: mesh-controller
  • novox: receives mesh-controller
  • read by no module's build: cmd/mesh-controller/provisioner_account_test.go, testdata/store-tests

Run by the build seat on ace as build-1792155790546150097 (builds --log build-1792155790546150097).

  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is left out of the rest of the mesh: it does not resolve: these assignments cannot be applied:
  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is left out of the rest of the mesh: it does not resolve: these assignments cannot be applied:
  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is left out of the rest of the mesh: it does not resolve: these assignments cannot be applied:
  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
  - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
claude-code on laptop:
  + managed_settings.permissions.allow
  run `plan laptop --diff` to see what it changes, `push laptop` to send it
claude-code on the whole mesh:
  + mcp_servers.listener.type
  + mcp_servers.listener.url
  run `push --behind` to send it to the machines running it
{
  "managed_settings": {
    "permissions": {
      "allow": [
        "Bash"
      ]
    }
  }
}
  set at the controller's terminal by an unnamed account at a shell on Ace at 2026-10-16 13:07
plan-gate: tier 0 built; sent 1 module(s) to anchor first in one send (app), the rest once its gate passes
plan-gate: the send to anchor in tier 0 failed its gate: not healthy within -1s of its apply: anchor has not reported on what it was sent; app was left as it was — anchor already ran app c2, or a build identical to it, before the send, so nothing of it moved and nothing is put back
plan-gate: the send to anchor in tier 0 failed its gate: not healthy within -1s of its apply: anchor has not reported on what it was sent; app was left as it was — anchor already ran app c2, or a build identical to it, before the send, so nothing of it moved and nothing is put back; none reported left as it was
  tier 0: the vault now holds accept/token (generation 1), accepted: sealed at this terminal to the vault's key for this call, opened in the vault alone and never remade by it; its machine takes it from the vault
  tier 0: plan-308-retry retried at tier 0 of 2: asked a as build-1792156052838821391; the plan goes on from there as any plan does
FAIL
FAIL	github.com/novox/mesh-controller/cmd/mesh-controller	71s	(shard 7 of 8: 128 tests)
ok  	github.com/novox/mesh-controller/cmd/mesh-controller	70s	(shard 8 of 8: 128 tests)
ok  	github.com/novox/mesh-controller/internal/inventory	16s	(shard 1 of 4: 77 tests)
ok  	github.com/novox/mesh-controller/internal/inventory	15s	(shard 2 of 4: 77 tests)
ok  	github.com/novox/mesh-controller/internal/inventory	14s	(shard 3 of 4: 77 tests)
ok  	github.com/novox/mesh-controller/internal/inventory	15s	(shard 4 of 4: 77 tests)
ok  	github.com/novox/mesh-controller/internal/builder	15s	(shard 1 of 4: 55 tests)
ok  	github.com/novox/mesh-controller/internal/builder	17s	(shard 2 of 4: 55 tests)
ok  	github.com/novox/mesh-controller/internal/builder	55s	(shard 3 of 4: 55 tests)
ok  	github.com/novox/mesh-controller/internal/builder	54s	(shard 4 of 4: 55 tests)
ok  	github.com/novox/mesh-controller/internal/link	14s	(shard 1 of 4: 48 tests)
ok  	github.com/novox/mesh-controller/internal/link	18s	(shard 2 of 4: 48 tests)
ok  	github.com/novox/mesh-controller/internal/link	15s	(shard 3 of 4: 47 tests)
ok  	github.com/novox/mesh-controller/internal/link	20s	(shard 4 of 4: 47 tests)
store tests, each run against the store:
  ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeWalksTheOthersAgain (0.27s)
  ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeEndsTheMergesThatContainIt (0.31s)
  ./cmd/mesh-controller --- PASS: TestAStopWalksTheOthersAgainInTheOpenBatch (0.31s)
  ./cmd/mesh-controller --- PASS: TestAStopNamesWhatStaysOnTheMachinesAndWhatStillCarriesIt (0.27s)
  ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeLeavesItOutOfABatch (0.25s)
  ./cmd/mesh-controller --- PASS: TestSavingPlansAndMovingMergesIsOneAct (0.20s)
  ./cmd/mesh-controller --- PASS: TestAPlanFollowedFromTheStoreAnswersWhenItMoves (2.02s)
  ./cmd/mesh-controller --- PASS: TestNodeShowAndStatusReadTheLastSendFromTheStore (0.36s)
  ./cmd/mesh-controller --- PASS: TestTheConditionsVerbReadsTheLooksTheBucketNoLongerHolds (0.17s)
  ./cmd/mesh-controller --- PASS: TestAWalkLetGoAndStoppedByVerbsIsSaidStartedAndEnded (0.26s)
  ./cmd/mesh-controller --- PASS: TestAWalkStoppedOrClosedByAPersonIsSaidEndedStopped (0.25s)
  ./cmd/mesh-controller --- PASS: TestAWalkRetriedByAPersonIsSaidStartedAgain (0.21s)
  ./cmd/mesh-controller --- PASS: TestABacklogReleasedByAPersonIsSaidStarted (0.22s)
  ./cmd/mesh-controller --- PASS: TestAWalkEndedByCancelOrClearIsSaidEnded (0.27s)
  ./cmd/mesh-controller --- PASS: TestAWalkRestartedByARebuildIsSaidStarted (0.22s)
  ./cmd/mesh-controller --- PASS: TestAWalkStoppedByHandAndRetriedEndsFailedWhenItFailsAgain (0.25s)
  ./cmd/mesh-controller --- PASS: TestReplay237 (0.32s)
  ./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeUnresolvedSaysSoOnceInItsAnswer (0.28s)
  ./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeResolvedSaysNothingOfIt (0.26s)
  ./cmd/mesh-controller --- PASS: TestAnAssignThatLeavesItsNodeUnresolvedSaysOnlyThePlansRefusal (0.23s)
  ./cmd/mesh-controller --- PASS: TestADirectoryOwnersKeyIsRefusedThroughAVerb (0.23s)
  ./cmd/mesh-controller --- PASS: TestTheSendMakesNoValueForAnOutsideSecretNobodyGave (0.37s)
  ./cmd/mesh-controller --- PASS: TestAQuestionComposesWithoutAnOutsideSecretNobodyGave (0.33s)
  ./cmd/mesh-controller --- PASS: TestReplay201 (0.20s)
  ./cmd/mesh-controller --- PASS: TestARollbackWhoseSendWasRefusedIsCompletedByTheNextSend (0.21s)
  ./cmd/mesh-controller --- PASS: TestAGateJudgesTheOtherMovesBesideAKeptCore (0.23s)
  ./cmd/mesh-controller --- PASS: TestReplay401 (0.39s)
  ./cmd/mesh-controller --- PASS: TestReplay201ThePlansSend (0.31s)
  ./cmd/mesh-controller --- PASS: TestPlanAndNodeListAnOptionalRequirementLeftUnbound (0.30s)
  ./cmd/mesh-controller --- PASS: TestReplay340 (0.32s)
  ./cmd/mesh-controller --- PASS: TestOnlyATrustedFilesNamedKeyIsRefusedThroughAVerb (0.20s)
  ./cmd/mesh-controller --- PASS: TestReplay349 (0.27s)
  ./cmd/mesh-controller --- PASS: TestReplay348AFaultFromBeforeTheSendFailsNoGate (0.21s)
  ./cmd/mesh-controller --- PASS: TestReplay239AModuleNameIsNotTakenOverByAnotherRepository (0.23s)
  ./cmd/mesh-controller --- PASS: TestAWalkThatMovedNothingSaysWhichModulesMatchedWhatRuns (0.24s)
  ./cmd/mesh-controller --- PASS: TestAWalkWhoseEveryBuildCameOutTheSameIsDone (0.18s)
  ./cmd/mesh-controller --- PASS: TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (0.09s)
  ./cmd/mesh-controller --- PASS: TestOneAcceptForAProviderIsPlacedForEveryConsumer (0.62s)
  ./cmd/mesh-controller --- PASS: TestReplay164 (0.38s)
  ./cmd/mesh-controller --- PASS: TestAnApprovedLayerOpensTheWalkThatSendsIt (0.20s)
  ./cmd/mesh-controller --- PASS: TestASettingsWalkSendsOneMachineAtATimeEachJudged (0.19s)
  ./cmd/mesh-controller --- PASS: TestAFailedSettingsWalkStopsAndHoldsNothingBack (0.18s)
  ./cmd/mesh-controller --- PASS: TestASettingsWalkSendsTheLayerAloneEveryBuildKept (0.18s)
  ./cmd/mesh-controller --- PASS: TestASettingsWalkStopsBeforeADataMoveAndPassesOverAMachineAway (0.55s)
  ./cmd/mesh-controller --- PASS: TestACrossingSendSupersedesASettingsGate (0.17s)
  ./cmd/mesh-controller --- PASS: TestASettingsWalkFailsOnARefusalThatCannotClear (0.17s)
  ./cmd/mesh-controller --- PASS: TestAProviderElsewhereServesItsOwnComposedName (0.24s)
  ./cmd/mesh-controller --- PASS: TestAReusedCheckBuildIsRegisteredByItsDigestAndGatedAsABuiltOne (0.73s)
  ./cmd/mesh-controller --- PASS: TestTheMergeGateJudgesEachManifestAgainstTheListOfTheTree (6.07s)
  ./cmd/mesh-controller --- PASS: TestRegistrationPublishesTheNewestTrunkListAndJudgesEveryModuleAgainstIt (0.21s)
  ./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameAfterPlacementMoves (0.40s)
  ./cmd/mesh-controller --- PASS: TestAReleaseSendsTheRestAtOnceAfterTheFirstPasses (0.24s)
  ./cmd/mesh-controller --- PASS: TestARestMachineThatFailsIsPutBackAloneAndTheOthersAreJudgedOn (0.21s)
  ./cmd/mesh-controller --- PASS: TestAWalkTakesOverTheReadingsOfAGateJudgingTheSameBuildThere (0.19s)
  ./cmd/mesh-controller --- PASS: TestAFirstSendMadeAndNotKeptIsNotSentAgain (0.24s)
  ./cmd/mesh-controller --- PASS: TestAReleaseSendKeptAndMadeIsNotMadeAgain (0.18s)
  ./cmd/mesh-controller --- PASS: TestAFirstMachineThatFailsStillStopsTheWalk (0.19s)
  ./cmd/mesh-controller --- PASS: TestTheControlNodeIsSentLastInAStep (0.22s)
  ./cmd/mesh-controller --- PASS: TestARestMachineSilentPastItsBoundIsLeftAndSaid (0.21s)
  ./cmd/mesh-controller --- PASS: TestANoMoveTierWaitsForNoNewReport (0.27s)
  ./cmd/mesh-controller --- PASS: TestOneProviderDownAndThreeConsumersFailingAreOneCondition (0.21s)
  ./cmd/mesh-controller --- PASS: TestAConsumerFailingBesideAHealthyProviderIsItsOwn (0.17s)
  ./cmd/mesh-controller --- PASS: TestTheProvisionerClientsAccountIsIssuedForItsServiceAndNeverInvented (0.21s)
  ./cmd/mesh-controller --- PASS: TestAcceptOfAnOwnSecretTakesThePathOfItsModulesForm (0.24s)
  ./cmd/mesh-controller --- PASS: TestAcceptForAProviderTakesThePathOfTheProvidersModule (0.28s)
  ./cmd/mesh-controller --- PASS: TestAcceptForAMovedTrustedModuleAnnouncesBeforeTheVaultIsAsked (0.26s)
  ./cmd/mesh-controller --- PASS: TestAcceptForAMovedModuleRecordsAHandActAndNeverTheValue (0.22s)
  ./cmd/mesh-controller --- PASS: TestAcceptOfAnOutsideOfferTakesThePathOfTheProvidersModule (0.28s)
  ./cmd/mesh-controller --- PASS: TestAnAskAtTheDeskTakesThePathOfItsModulesForm (0.26s)
  ./cmd/mesh-controller --- PASS: TestAnIssuedValueTakesThePathOfItsProvidersModule (0.30s)
  ./cmd/mesh-controller --- PASS: TestARotationTakesThePathOfItsModulesForm (0.24s)
  ./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameWhileTheWordsAreStillInTheLayers (2.31s)
  ./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameAfterTheMoveOfPlacement (4.03s)
  ./cmd/mesh-controller --- PASS: TestTheSendSealsNoSecretOfAModuleHandedThere (0.26s)
  ./cmd/mesh-controller --- PASS: TestAModulesSecretsAreTheVaultsOnceItIsMarkedMoved (0.16s)
  ./cmd/mesh-controller --- PASS: TestEveryMachineIsToldTheSameAfterTheMoveOfConfig (22.08s)
  ./cmd/mesh-controller --- PASS: TestTheMoveOfConfigRefusesWhatWouldChangeAMachine (10.23s)
  ./cmd/mesh-controller --- PASS: TestTheSettingsVerbForwardsToConfigOnceTheValuesMoved (11.21s)
  ./cmd/mesh-controller --- PASS: TestTheSendCarriesTheVaultsBoxForACoreCredentialAndKeepsIt (0.38s)
  ./cmd/mesh-controller --- PASS: TestASilentVaultHoldsTheKeptBoxAndSaysSo (0.38s)
  ./cmd/mesh-controller --- PASS: TestACoreModuleFirstPlacedWhileTheVaultIsSilentIsSealedByTheController (0.29s)
  ./cmd/mesh-controller --- PASS: TestAnEngineBelowTheContractIsSentTheControllersSealAsBefore (0.28s)
  ./cmd/mesh-controller --- PASS: TestModuleIssueHandsACoveredAccountToTheVaultAndOnlyThat (0.31s)
  ./cmd/mesh-controller --- PASS: TestModuleIssueFailsWhenTheVaultDoesNotTakeACoveredAccount (0.27s)
  ./cmd/mesh-controller --- PASS: TestModuleIssueBeforeTheVaultIsInstalledKeepsTheValueAndHandsNothing (0.24s)
  ./cmd/mesh-controller --- PASS: TestARecordedModulesBundleOnlyMoveRollsOutInItsWalk (0.34s)
  ./cmd/mesh-controller --- PASS: TestARecordedModulesMoveThatRecreatesAContainerWaits (0.70s)
  ./cmd/mesh-controller --- PASS: TestARecordedModulesMoveThatTouchesDataOrAProviderWaits (0.81s)
  ./cmd/mesh-controller --- PASS: TestAPersonsRecordAndTheBusHoldEveryMove (0.55s)
  ./cmd/mesh-controller --- PASS: TestARecordedMoveThatCannotBeJudgedWaits (0.52s)
  ./cmd/mesh-controller --- PASS: TestReplay867 (3.93s)
  ./cmd/mesh-controller --- PASS: TestReplay867Recheck (3.74s)
  ./cmd/mesh-controller --- PASS: TestTheRecheckVerbAsksMeshDeliveryOnABusOfItsOwn (0.36s)
  ./cmd/mesh-controller --- PASS: TestAGroupsCompositionIntoAReleaseBranchIsJudgedByItsOwnController (3.23s)
  ./cmd/mesh-controller --- PASS: TestAGroupsCompositionJudgedWithTheValidatorIntoAReleaseBranchIsJudgedByItsOwnController (3.11s)
  ./cmd/mesh-controller --- PASS: TestAssigningTheClientIssuesItsAccount (0.25s)
  ./internal/inventory --- PASS: TestTheLastSendSaysWhatTheMachineAnswered (0.20s)
  ./internal/inventory --- PASS: TestAReportIsTheLastSendsAnswerOnlyWhenItIsAboutThatSend (0.18s)
  ./internal/inventory --- PASS: TestAnIssuedValueIsSealedToEveryHolderOnceAndNotAgain (0.12s)
  ./internal/inventory --- PASS: TestAnIssuedValueIsSealedAgainAfterAKeyChangeOrAnAcceptance (0.19s)
  ./internal/inventory --- PASS: TestAConditionsLooksAreKeptBesideTheBucket (0.13s)
  ./internal/inventory --- PASS: TestAPlanIdHoldingAQuoteIsReadAsAPlainId (0.20s)
  ./internal/inventory --- PASS: TestAWalksStartIsKeptAndARefusedSaveLeavesItUnsaid (0.15s)
  ./internal/inventory --- PASS: TestAWalksRestIsReadFromEachMachinesOwnSend (0.14s)
  ./internal/inventory --- PASS: TestAStoredBuildWithASilentMergeableFileIsStillReadAndComposed (0.18s)
  ./internal/inventory --- PASS: TestACredentialIssuedOutsideIsNeverMade (0.15s)
  ./internal/inventory --- PASS: TestOneAcceptForAProviderIsSealedToEveryConsumer (0.13s)
  ./internal/inventory --- PASS: TestASharedOwnSecretIssuedOutsideIsNeverMade (0.12s)
  ./internal/inventory --- PASS: TestAModuleInTheConfigFormIsMirroredWithItsWholeDeclaration (0.16s)
  ./internal/inventory --- PASS: TestAReportOfABusyContainerIsKeptAndReadBack (0.11s)
  ./internal/inventory --- PASS: TestANewerBuildsListReplacesTheKeptOneAndAnOlderOneHeardLaterDoesNot (0.15s)
  ./internal/inventory --- PASS: TestPlacementMovesOutOfTheSettingsLayers (0.50s)
  ./internal/inventory --- PASS: TestASettingRoutesPlacementBesideTheLayer (0.20s)
  ./internal/inventory --- PASS: TestTheProvisionerClientsMachineHasAnAccountOfItsOwn (0.59s)
  ./internal/inventory --- PASS: TestTheFourWordsAreKeptBesideTheLayer (0.21s)
  ./internal/inventory --- PASS: TestALayerStillHoldingTheWordsReadsThemAsPlacement (0.19s)
  ./internal/inventory --- PASS: TestTheMoveOfPlacementMovesWhatTheLayersStillHold (0.27s)
  ./internal/inventory --- PASS: TestTheMoveReadsEveryRowSealedToAMachineAsItIs (0.16s)
  ./internal/inventory --- PASS: TestASendKeepsThePlansItHandedAndTheMirrorCarriesThem (0.12s)
  ./internal/inventory --- PASS: TestTheLayersAreReadUntilTheMoveOfConfigHasRun (0.11s)
  ./internal/inventory --- PASS: TestAModuleReadsMeshConfigOnlyWhereItsValuesAre (0.12s)
  ./internal/inventory --- PASS: TestTheEndOfTheMoveRefusesALayerChangedSinceItWasRead (0.10s)
  ./internal/inventory --- PASS: TestACoreCredentialsVaultBoxIsKeptPerMachineAndReplaced (0.08s)
  ./internal/inventory --- PASS: TestWhatRunsIsTheRegisteredBuildNotANewerOnePutBack (0.15s)
  ./internal/recordmirror --- PASS: TestNatsAnAssignmentAndARegistrationEachChangeOneKeyAndRaiseOneEvent (3.29s)
  ./internal/recordmirror --- PASS: TestNatsTheListOfPredefinedKeysKeptChangesTheMirrorsOneKey (1.56s)
the suite failed: each package or shard that failed is said above with its output
--- what failed, picked from the whole of its output (the whole is in the build's log)
--- FAIL: TestEveryCatalogueManifestParses (0.74s)
    catalogue_check_test.go:26: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
    catalogue_check_test.go:39: claude-code: this manifest cannot be used:
          - claude-code's config value "managed_settings": falls back to the predefined key "agent-managed-settings", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7)
    catalogue_check_test.go:39: dunst: this manifest cannot be used:
          - dunst's config value "font-size": falls back to the predefined key "font-size", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7)
    catalogue_check_test.go:52: 133 manifests, 71 named endpoints, 29 routed endpoints resolved
--- FAIL: TestNoCatalogueManifestNamesAnInstallation (1.82s)
    catalogue_check_test.go:62: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
    catalogue_check_test.go:75: /var/lib/build-agent/workspace/check/mesh-catalog/modules/claude-code/module.json: this manifest cannot be used:
          - claude-code's config value "managed_settings": falls back to the predefined key "agent-managed-settings", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7)
    catalogue_check_test.go:75: /var/lib/build-agent/workspace/check/mesh-catalog/modules/dunst/module.json: this manifest cannot be used:
          - dunst's config value "font-size": falls back to the predefined key "font-size", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7)
--- FAIL: TestEveryCatalogueIdentityFitsWhatItRequires (0.14s)
    catalogue_check_test.go:124: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
    catalogue_check_test.go:137: /var/lib/build-agent/workspace/check/mesh-catalog/modules/claude-code/module.json: this manifest cannot be used:
          - claude-code's config value "managed_settings": falls back to the predefined key "agent-managed-settings", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7)
--- FAIL: TestCaTrustRendersTheAuthorityItWasBoundTo (0.03s)
    catrust_manifest_test.go:22: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
    catrust_manifest_test.go:52: the script does not fetch from the authority it was bound to:
    catrust_manifest_test.go:71: the unit does not say "ExecStart=/var/lib/ca-trust/anchor install":
    catrust_manifest_test.go:71: the unit does not say "ExecStop=/var/lib/ca-trust/anchor remove":
    catrust_manifest_test.go:71: the unit does not say "RemainAfterExit=yes":
--- FAIL: TestTheFilterModuleNeverFlushesTheRuleset (0.00s)
    foundation_manifests_test.go:45: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
    foundation_manifests_test.go:70: the unit does not load the computed rule set and delete only its own table:
--- FAIL: TestTheForgesOwnAddressFollowsThePortTheNodeGaveIt (0.05s)
    foundation_manifests_test.go:189: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
    foundation_manifests_test.go:189: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
    foundation_manifests_test.go:191: the forge's manifest does not resolve against its own build: gitea names templates, and the build carried no text read back from the archive it packs files/ into ("files"): the builder that built it does not read templates
--- FAIL: TestTheForgesSshPortIsTheMeshsFixedConventionByDefault (0.04s)
    foundation_manifests_test.go:278: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
    foundation_manifests_test.go:288: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
    foundation_manifests_test.go:288: the forge's manifest does not resolve against its own build: gitea names templates, and the build carried no text read back from the archive it packs files/ into ("files"): the builder that built it does not read templates
--- FAIL: TestANodeMayGiveTheForgesSshPortADifferentNumber (0.04s)
    foundation_manifests_test.go:299: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
    foundation_manifests_test.go:308: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
    foundation_manifests_test.go:308: the forge's manifest does not resolve against its own build: gitea names templates, and the build carried no text read back from the archive it packs files/ into ("files"): the builder that built it does not read templates
--- FAIL: TestTheRuntimesModuleTrustsTheMeshsRegistry (0.03s)
    generated_collision_test.go:60: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
    generated_collision_test.go:75: the runtime's file says ""
--- FAIL: TestGenesisAssignsTheBuildAgentWithNothingProvidingTheRegistry (0.01s)
    genesis_registry_test.go:26: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
    genesis_registry_test.go:26: the build agent does not resolve against its own build: build-agent says it builds files and the build did not produce it — the build did not do what the manifest asked, which is a different fault from a resource asking for the wrong thing
--- FAIL: TestTheMachinesNameIsItsSetting (0.00s)
    hostname_seat_test.go:59: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
panic: interface conversion: interface {} is nil, not string [recovered, repanicked]

goroutine 562 [running]:
testing.tRunner.func1.2({0xdeda40, 0xc0000dac00})
	/usr/local/go/src/testing/testing.go:1974 +0x419
testing.tRunner.func1()
	/usr/local/go/src/testing/testing.go:1977 +0x67f
panic({0xdeda40?, 0xc0000dac00?})
	/usr/local/go/src/runtime/panic.go:860 +0x13a
github.com/novox/mesh-controller/internal/catalogue.TestTheMachinesNameIsItsSetting.func1(0x0)
	/var/lib/build-agent/workspace/check/mesh-controller/internal/catalogue/hostname_seat_test.go:77 +0x6b0
github.com/novox/mesh-controller/internal/catalogue.TestTheMachinesNameIsItsSetting(0xc0000f6fc8)
	/var/lib/build-agent/workspace/check/mesh-controller/internal/catalogue/hostname_seat_test.go:84 +0x609
testing.tRunner(0xc0000f6fc8, 0xeddd58)
	/usr/local/go/src/testing/testing.go:2036 +0x21d
created by testing.(*T).Run in goroutine 1
	/usr/local/go/src/testing/testing.go:2101 +0xb13
FAIL	github.com/novox/mesh-controller/internal/catalogue	7.859s
--- FAIL: TestTheResolverIsToldEveryMachineOnTheNetworkAndToldAgainWhenOneLeaves (0.30s)
    network_test.go:265: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
    network_test.go:265: dnsmasq is not registered: dnsmasq still names the template(s) of config (files/dnsmasq.conf), wait-for-address (files/mesh.conf): the manifest the mesh holds carries each file's text, read back from the build's templates archive — this one was resolved by a builder that does not read templates, or not built at all (novox/hq ADR 0349 §2)
FAIL	github.com/novox/mesh-controller/cmd/mesh-controller	71s	(shard 7 of 8: 128 tests)
**Merge check** at `eea58662` Judged: head `eea58662163e` merged into trunk `a20680dfe769`; read beside it: mesh-catalog `3db85a0dde83`, mesh-controller-main `a20680dfe769`, mesh-host `cd13f7726ef0`, mesh-tools `7412c5b6c9c5` - `mesh/merge-gate`: **PASS** — every machine composes with the change as it did without (3 of 4 compose) (modules: mesh-controller) - `mesh/repo-check`: **FAIL** — its merge-check.sh failed: --- FAIL: TestEveryCatalogueManifestParses (0.74s); and TestNoCatalogueManifestNamesAnInstallation, TestEveryCatalogueIdentityFitsWhatItRequires, TestCaTrustRendersTheAuthorityItWasBoundTo, TestTheFilterModuleNeverFlushesTheRuleset, TestTheForgesOwnAddressFollowsThePortTheNodeGaveIt and 6 more **Delivery plan** — builds mesh-controller → novox; no bus step - tier 0: mesh-controller - novox: receives mesh-controller - read by no module's build: cmd/mesh-controller/provisioner_account_test.go, testdata/store-tests Run by the build seat on ace as `build-1792155790546150097` (`builds --log build-1792155790546150097`). ``` - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node anchor is not counted as on the network: it does not resolve: these assignments cannot be applied: - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node anchor is not counted as on the network: it does not resolve: these assignments cannot be applied: - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node anchor is not counted as on the network: it does not resolve: these assignments cannot be applied: - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node anchor is not counted as on the network: it does not resolve: these assignments cannot be applied: - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node anchor is not counted as on the network: it does not resolve: these assignments cannot be applied: - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node anchor is left out of the rest of the mesh: it does not resolve: these assignments cannot be applied: - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node anchor is not counted as on the network: it does not resolve: these assignments cannot be applied: - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node anchor is not counted as on the network: it does not resolve: these assignments cannot be applied: - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node anchor is not counted as on the network: it does not resolve: these assignments cannot be applied: - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node anchor is not counted as on the network: it does not resolve: these assignments cannot be applied: - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node anchor is left out of the rest of the mesh: it does not resolve: these assignments cannot be applied: - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node anchor is not counted as on the network: it does not resolve: these assignments cannot be applied: - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node anchor is not counted as on the network: it does not resolve: these assignments cannot be applied: - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node anchor is not counted as on the network: it does not resolve: these assignments cannot be applied: - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node anchor is not counted as on the network: it does not resolve: these assignments cannot be applied: - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node anchor is left out of the rest of the mesh: it does not resolve: these assignments cannot be applied: - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node anchor is not counted as on the network: it does not resolve: these assignments cannot be applied: - rival-one and rival-two both claim "the-seat", and only one thing may hold it per node claude-code on laptop: + managed_settings.permissions.allow run `plan laptop --diff` to see what it changes, `push laptop` to send it claude-code on the whole mesh: + mcp_servers.listener.type + mcp_servers.listener.url run `push --behind` to send it to the machines running it { "managed_settings": { "permissions": { "allow": [ "Bash" ] } } } set at the controller's terminal by an unnamed account at a shell on Ace at 2026-10-16 13:07 plan-gate: tier 0 built; sent 1 module(s) to anchor first in one send (app), the rest once its gate passes plan-gate: the send to anchor in tier 0 failed its gate: not healthy within -1s of its apply: anchor has not reported on what it was sent; app was left as it was — anchor already ran app c2, or a build identical to it, before the send, so nothing of it moved and nothing is put back plan-gate: the send to anchor in tier 0 failed its gate: not healthy within -1s of its apply: anchor has not reported on what it was sent; app was left as it was — anchor already ran app c2, or a build identical to it, before the send, so nothing of it moved and nothing is put back; none reported left as it was tier 0: the vault now holds accept/token (generation 1), accepted: sealed at this terminal to the vault's key for this call, opened in the vault alone and never remade by it; its machine takes it from the vault tier 0: plan-308-retry retried at tier 0 of 2: asked a as build-1792156052838821391; the plan goes on from there as any plan does FAIL FAIL github.com/novox/mesh-controller/cmd/mesh-controller 71s (shard 7 of 8: 128 tests) ok github.com/novox/mesh-controller/cmd/mesh-controller 70s (shard 8 of 8: 128 tests) ok github.com/novox/mesh-controller/internal/inventory 16s (shard 1 of 4: 77 tests) ok github.com/novox/mesh-controller/internal/inventory 15s (shard 2 of 4: 77 tests) ok github.com/novox/mesh-controller/internal/inventory 14s (shard 3 of 4: 77 tests) ok github.com/novox/mesh-controller/internal/inventory 15s (shard 4 of 4: 77 tests) ok github.com/novox/mesh-controller/internal/builder 15s (shard 1 of 4: 55 tests) ok github.com/novox/mesh-controller/internal/builder 17s (shard 2 of 4: 55 tests) ok github.com/novox/mesh-controller/internal/builder 55s (shard 3 of 4: 55 tests) ok github.com/novox/mesh-controller/internal/builder 54s (shard 4 of 4: 55 tests) ok github.com/novox/mesh-controller/internal/link 14s (shard 1 of 4: 48 tests) ok github.com/novox/mesh-controller/internal/link 18s (shard 2 of 4: 48 tests) ok github.com/novox/mesh-controller/internal/link 15s (shard 3 of 4: 47 tests) ok github.com/novox/mesh-controller/internal/link 20s (shard 4 of 4: 47 tests) store tests, each run against the store: ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeWalksTheOthersAgain (0.27s) ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeEndsTheMergesThatContainIt (0.31s) ./cmd/mesh-controller --- PASS: TestAStopWalksTheOthersAgainInTheOpenBatch (0.31s) ./cmd/mesh-controller --- PASS: TestAStopNamesWhatStaysOnTheMachinesAndWhatStillCarriesIt (0.27s) ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeLeavesItOutOfABatch (0.25s) ./cmd/mesh-controller --- PASS: TestSavingPlansAndMovingMergesIsOneAct (0.20s) ./cmd/mesh-controller --- PASS: TestAPlanFollowedFromTheStoreAnswersWhenItMoves (2.02s) ./cmd/mesh-controller --- PASS: TestNodeShowAndStatusReadTheLastSendFromTheStore (0.36s) ./cmd/mesh-controller --- PASS: TestTheConditionsVerbReadsTheLooksTheBucketNoLongerHolds (0.17s) ./cmd/mesh-controller --- PASS: TestAWalkLetGoAndStoppedByVerbsIsSaidStartedAndEnded (0.26s) ./cmd/mesh-controller --- PASS: TestAWalkStoppedOrClosedByAPersonIsSaidEndedStopped (0.25s) ./cmd/mesh-controller --- PASS: TestAWalkRetriedByAPersonIsSaidStartedAgain (0.21s) ./cmd/mesh-controller --- PASS: TestABacklogReleasedByAPersonIsSaidStarted (0.22s) ./cmd/mesh-controller --- PASS: TestAWalkEndedByCancelOrClearIsSaidEnded (0.27s) ./cmd/mesh-controller --- PASS: TestAWalkRestartedByARebuildIsSaidStarted (0.22s) ./cmd/mesh-controller --- PASS: TestAWalkStoppedByHandAndRetriedEndsFailedWhenItFailsAgain (0.25s) ./cmd/mesh-controller --- PASS: TestReplay237 (0.32s) ./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeUnresolvedSaysSoOnceInItsAnswer (0.28s) ./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeResolvedSaysNothingOfIt (0.26s) ./cmd/mesh-controller --- PASS: TestAnAssignThatLeavesItsNodeUnresolvedSaysOnlyThePlansRefusal (0.23s) ./cmd/mesh-controller --- PASS: TestADirectoryOwnersKeyIsRefusedThroughAVerb (0.23s) ./cmd/mesh-controller --- PASS: TestTheSendMakesNoValueForAnOutsideSecretNobodyGave (0.37s) ./cmd/mesh-controller --- PASS: TestAQuestionComposesWithoutAnOutsideSecretNobodyGave (0.33s) ./cmd/mesh-controller --- PASS: TestReplay201 (0.20s) ./cmd/mesh-controller --- PASS: TestARollbackWhoseSendWasRefusedIsCompletedByTheNextSend (0.21s) ./cmd/mesh-controller --- PASS: TestAGateJudgesTheOtherMovesBesideAKeptCore (0.23s) ./cmd/mesh-controller --- PASS: TestReplay401 (0.39s) ./cmd/mesh-controller --- PASS: TestReplay201ThePlansSend (0.31s) ./cmd/mesh-controller --- PASS: TestPlanAndNodeListAnOptionalRequirementLeftUnbound (0.30s) ./cmd/mesh-controller --- PASS: TestReplay340 (0.32s) ./cmd/mesh-controller --- PASS: TestOnlyATrustedFilesNamedKeyIsRefusedThroughAVerb (0.20s) ./cmd/mesh-controller --- PASS: TestReplay349 (0.27s) ./cmd/mesh-controller --- PASS: TestReplay348AFaultFromBeforeTheSendFailsNoGate (0.21s) ./cmd/mesh-controller --- PASS: TestReplay239AModuleNameIsNotTakenOverByAnotherRepository (0.23s) ./cmd/mesh-controller --- PASS: TestAWalkThatMovedNothingSaysWhichModulesMatchedWhatRuns (0.24s) ./cmd/mesh-controller --- PASS: TestAWalkWhoseEveryBuildCameOutTheSameIsDone (0.18s) ./cmd/mesh-controller --- PASS: TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (0.09s) ./cmd/mesh-controller --- PASS: TestOneAcceptForAProviderIsPlacedForEveryConsumer (0.62s) ./cmd/mesh-controller --- PASS: TestReplay164 (0.38s) ./cmd/mesh-controller --- PASS: TestAnApprovedLayerOpensTheWalkThatSendsIt (0.20s) ./cmd/mesh-controller --- PASS: TestASettingsWalkSendsOneMachineAtATimeEachJudged (0.19s) ./cmd/mesh-controller --- PASS: TestAFailedSettingsWalkStopsAndHoldsNothingBack (0.18s) ./cmd/mesh-controller --- PASS: TestASettingsWalkSendsTheLayerAloneEveryBuildKept (0.18s) ./cmd/mesh-controller --- PASS: TestASettingsWalkStopsBeforeADataMoveAndPassesOverAMachineAway (0.55s) ./cmd/mesh-controller --- PASS: TestACrossingSendSupersedesASettingsGate (0.17s) ./cmd/mesh-controller --- PASS: TestASettingsWalkFailsOnARefusalThatCannotClear (0.17s) ./cmd/mesh-controller --- PASS: TestAProviderElsewhereServesItsOwnComposedName (0.24s) ./cmd/mesh-controller --- PASS: TestAReusedCheckBuildIsRegisteredByItsDigestAndGatedAsABuiltOne (0.73s) ./cmd/mesh-controller --- PASS: TestTheMergeGateJudgesEachManifestAgainstTheListOfTheTree (6.07s) ./cmd/mesh-controller --- PASS: TestRegistrationPublishesTheNewestTrunkListAndJudgesEveryModuleAgainstIt (0.21s) ./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameAfterPlacementMoves (0.40s) ./cmd/mesh-controller --- PASS: TestAReleaseSendsTheRestAtOnceAfterTheFirstPasses (0.24s) ./cmd/mesh-controller --- PASS: TestARestMachineThatFailsIsPutBackAloneAndTheOthersAreJudgedOn (0.21s) ./cmd/mesh-controller --- PASS: TestAWalkTakesOverTheReadingsOfAGateJudgingTheSameBuildThere (0.19s) ./cmd/mesh-controller --- PASS: TestAFirstSendMadeAndNotKeptIsNotSentAgain (0.24s) ./cmd/mesh-controller --- PASS: TestAReleaseSendKeptAndMadeIsNotMadeAgain (0.18s) ./cmd/mesh-controller --- PASS: TestAFirstMachineThatFailsStillStopsTheWalk (0.19s) ./cmd/mesh-controller --- PASS: TestTheControlNodeIsSentLastInAStep (0.22s) ./cmd/mesh-controller --- PASS: TestARestMachineSilentPastItsBoundIsLeftAndSaid (0.21s) ./cmd/mesh-controller --- PASS: TestANoMoveTierWaitsForNoNewReport (0.27s) ./cmd/mesh-controller --- PASS: TestOneProviderDownAndThreeConsumersFailingAreOneCondition (0.21s) ./cmd/mesh-controller --- PASS: TestAConsumerFailingBesideAHealthyProviderIsItsOwn (0.17s) ./cmd/mesh-controller --- PASS: TestTheProvisionerClientsAccountIsIssuedForItsServiceAndNeverInvented (0.21s) ./cmd/mesh-controller --- PASS: TestAcceptOfAnOwnSecretTakesThePathOfItsModulesForm (0.24s) ./cmd/mesh-controller --- PASS: TestAcceptForAProviderTakesThePathOfTheProvidersModule (0.28s) ./cmd/mesh-controller --- PASS: TestAcceptForAMovedTrustedModuleAnnouncesBeforeTheVaultIsAsked (0.26s) ./cmd/mesh-controller --- PASS: TestAcceptForAMovedModuleRecordsAHandActAndNeverTheValue (0.22s) ./cmd/mesh-controller --- PASS: TestAcceptOfAnOutsideOfferTakesThePathOfTheProvidersModule (0.28s) ./cmd/mesh-controller --- PASS: TestAnAskAtTheDeskTakesThePathOfItsModulesForm (0.26s) ./cmd/mesh-controller --- PASS: TestAnIssuedValueTakesThePathOfItsProvidersModule (0.30s) ./cmd/mesh-controller --- PASS: TestARotationTakesThePathOfItsModulesForm (0.24s) ./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameWhileTheWordsAreStillInTheLayers (2.31s) ./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameAfterTheMoveOfPlacement (4.03s) ./cmd/mesh-controller --- PASS: TestTheSendSealsNoSecretOfAModuleHandedThere (0.26s) ./cmd/mesh-controller --- PASS: TestAModulesSecretsAreTheVaultsOnceItIsMarkedMoved (0.16s) ./cmd/mesh-controller --- PASS: TestEveryMachineIsToldTheSameAfterTheMoveOfConfig (22.08s) ./cmd/mesh-controller --- PASS: TestTheMoveOfConfigRefusesWhatWouldChangeAMachine (10.23s) ./cmd/mesh-controller --- PASS: TestTheSettingsVerbForwardsToConfigOnceTheValuesMoved (11.21s) ./cmd/mesh-controller --- PASS: TestTheSendCarriesTheVaultsBoxForACoreCredentialAndKeepsIt (0.38s) ./cmd/mesh-controller --- PASS: TestASilentVaultHoldsTheKeptBoxAndSaysSo (0.38s) ./cmd/mesh-controller --- PASS: TestACoreModuleFirstPlacedWhileTheVaultIsSilentIsSealedByTheController (0.29s) ./cmd/mesh-controller --- PASS: TestAnEngineBelowTheContractIsSentTheControllersSealAsBefore (0.28s) ./cmd/mesh-controller --- PASS: TestModuleIssueHandsACoveredAccountToTheVaultAndOnlyThat (0.31s) ./cmd/mesh-controller --- PASS: TestModuleIssueFailsWhenTheVaultDoesNotTakeACoveredAccount (0.27s) ./cmd/mesh-controller --- PASS: TestModuleIssueBeforeTheVaultIsInstalledKeepsTheValueAndHandsNothing (0.24s) ./cmd/mesh-controller --- PASS: TestARecordedModulesBundleOnlyMoveRollsOutInItsWalk (0.34s) ./cmd/mesh-controller --- PASS: TestARecordedModulesMoveThatRecreatesAContainerWaits (0.70s) ./cmd/mesh-controller --- PASS: TestARecordedModulesMoveThatTouchesDataOrAProviderWaits (0.81s) ./cmd/mesh-controller --- PASS: TestAPersonsRecordAndTheBusHoldEveryMove (0.55s) ./cmd/mesh-controller --- PASS: TestARecordedMoveThatCannotBeJudgedWaits (0.52s) ./cmd/mesh-controller --- PASS: TestReplay867 (3.93s) ./cmd/mesh-controller --- PASS: TestReplay867Recheck (3.74s) ./cmd/mesh-controller --- PASS: TestTheRecheckVerbAsksMeshDeliveryOnABusOfItsOwn (0.36s) ./cmd/mesh-controller --- PASS: TestAGroupsCompositionIntoAReleaseBranchIsJudgedByItsOwnController (3.23s) ./cmd/mesh-controller --- PASS: TestAGroupsCompositionJudgedWithTheValidatorIntoAReleaseBranchIsJudgedByItsOwnController (3.11s) ./cmd/mesh-controller --- PASS: TestAssigningTheClientIssuesItsAccount (0.25s) ./internal/inventory --- PASS: TestTheLastSendSaysWhatTheMachineAnswered (0.20s) ./internal/inventory --- PASS: TestAReportIsTheLastSendsAnswerOnlyWhenItIsAboutThatSend (0.18s) ./internal/inventory --- PASS: TestAnIssuedValueIsSealedToEveryHolderOnceAndNotAgain (0.12s) ./internal/inventory --- PASS: TestAnIssuedValueIsSealedAgainAfterAKeyChangeOrAnAcceptance (0.19s) ./internal/inventory --- PASS: TestAConditionsLooksAreKeptBesideTheBucket (0.13s) ./internal/inventory --- PASS: TestAPlanIdHoldingAQuoteIsReadAsAPlainId (0.20s) ./internal/inventory --- PASS: TestAWalksStartIsKeptAndARefusedSaveLeavesItUnsaid (0.15s) ./internal/inventory --- PASS: TestAWalksRestIsReadFromEachMachinesOwnSend (0.14s) ./internal/inventory --- PASS: TestAStoredBuildWithASilentMergeableFileIsStillReadAndComposed (0.18s) ./internal/inventory --- PASS: TestACredentialIssuedOutsideIsNeverMade (0.15s) ./internal/inventory --- PASS: TestOneAcceptForAProviderIsSealedToEveryConsumer (0.13s) ./internal/inventory --- PASS: TestASharedOwnSecretIssuedOutsideIsNeverMade (0.12s) ./internal/inventory --- PASS: TestAModuleInTheConfigFormIsMirroredWithItsWholeDeclaration (0.16s) ./internal/inventory --- PASS: TestAReportOfABusyContainerIsKeptAndReadBack (0.11s) ./internal/inventory --- PASS: TestANewerBuildsListReplacesTheKeptOneAndAnOlderOneHeardLaterDoesNot (0.15s) ./internal/inventory --- PASS: TestPlacementMovesOutOfTheSettingsLayers (0.50s) ./internal/inventory --- PASS: TestASettingRoutesPlacementBesideTheLayer (0.20s) ./internal/inventory --- PASS: TestTheProvisionerClientsMachineHasAnAccountOfItsOwn (0.59s) ./internal/inventory --- PASS: TestTheFourWordsAreKeptBesideTheLayer (0.21s) ./internal/inventory --- PASS: TestALayerStillHoldingTheWordsReadsThemAsPlacement (0.19s) ./internal/inventory --- PASS: TestTheMoveOfPlacementMovesWhatTheLayersStillHold (0.27s) ./internal/inventory --- PASS: TestTheMoveReadsEveryRowSealedToAMachineAsItIs (0.16s) ./internal/inventory --- PASS: TestASendKeepsThePlansItHandedAndTheMirrorCarriesThem (0.12s) ./internal/inventory --- PASS: TestTheLayersAreReadUntilTheMoveOfConfigHasRun (0.11s) ./internal/inventory --- PASS: TestAModuleReadsMeshConfigOnlyWhereItsValuesAre (0.12s) ./internal/inventory --- PASS: TestTheEndOfTheMoveRefusesALayerChangedSinceItWasRead (0.10s) ./internal/inventory --- PASS: TestACoreCredentialsVaultBoxIsKeptPerMachineAndReplaced (0.08s) ./internal/inventory --- PASS: TestWhatRunsIsTheRegisteredBuildNotANewerOnePutBack (0.15s) ./internal/recordmirror --- PASS: TestNatsAnAssignmentAndARegistrationEachChangeOneKeyAndRaiseOneEvent (3.29s) ./internal/recordmirror --- PASS: TestNatsTheListOfPredefinedKeysKeptChangesTheMirrorsOneKey (1.56s) the suite failed: each package or shard that failed is said above with its output --- what failed, picked from the whole of its output (the whole is in the build's log) --- FAIL: TestEveryCatalogueManifestParses (0.74s) catalogue_check_test.go:26: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check catalogue_check_test.go:39: claude-code: this manifest cannot be used: - claude-code's config value "managed_settings": falls back to the predefined key "agent-managed-settings", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7) catalogue_check_test.go:39: dunst: this manifest cannot be used: - dunst's config value "font-size": falls back to the predefined key "font-size", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7) catalogue_check_test.go:52: 133 manifests, 71 named endpoints, 29 routed endpoints resolved --- FAIL: TestNoCatalogueManifestNamesAnInstallation (1.82s) catalogue_check_test.go:62: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check catalogue_check_test.go:75: /var/lib/build-agent/workspace/check/mesh-catalog/modules/claude-code/module.json: this manifest cannot be used: - claude-code's config value "managed_settings": falls back to the predefined key "agent-managed-settings", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7) catalogue_check_test.go:75: /var/lib/build-agent/workspace/check/mesh-catalog/modules/dunst/module.json: this manifest cannot be used: - dunst's config value "font-size": falls back to the predefined key "font-size", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7) --- FAIL: TestEveryCatalogueIdentityFitsWhatItRequires (0.14s) catalogue_check_test.go:124: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check catalogue_check_test.go:137: /var/lib/build-agent/workspace/check/mesh-catalog/modules/claude-code/module.json: this manifest cannot be used: - claude-code's config value "managed_settings": falls back to the predefined key "agent-managed-settings", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7) --- FAIL: TestCaTrustRendersTheAuthorityItWasBoundTo (0.03s) catrust_manifest_test.go:22: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check catrust_manifest_test.go:52: the script does not fetch from the authority it was bound to: catrust_manifest_test.go:71: the unit does not say "ExecStart=/var/lib/ca-trust/anchor install": catrust_manifest_test.go:71: the unit does not say "ExecStop=/var/lib/ca-trust/anchor remove": catrust_manifest_test.go:71: the unit does not say "RemainAfterExit=yes": --- FAIL: TestTheFilterModuleNeverFlushesTheRuleset (0.00s) foundation_manifests_test.go:45: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check foundation_manifests_test.go:70: the unit does not load the computed rule set and delete only its own table: --- FAIL: TestTheForgesOwnAddressFollowsThePortTheNodeGaveIt (0.05s) foundation_manifests_test.go:189: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check foundation_manifests_test.go:189: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check foundation_manifests_test.go:191: the forge's manifest does not resolve against its own build: gitea names templates, and the build carried no text read back from the archive it packs files/ into ("files"): the builder that built it does not read templates --- FAIL: TestTheForgesSshPortIsTheMeshsFixedConventionByDefault (0.04s) foundation_manifests_test.go:278: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check foundation_manifests_test.go:288: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check foundation_manifests_test.go:288: the forge's manifest does not resolve against its own build: gitea names templates, and the build carried no text read back from the archive it packs files/ into ("files"): the builder that built it does not read templates --- FAIL: TestANodeMayGiveTheForgesSshPortADifferentNumber (0.04s) foundation_manifests_test.go:299: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check foundation_manifests_test.go:308: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check foundation_manifests_test.go:308: the forge's manifest does not resolve against its own build: gitea names templates, and the build carried no text read back from the archive it packs files/ into ("files"): the builder that built it does not read templates --- FAIL: TestTheRuntimesModuleTrustsTheMeshsRegistry (0.03s) generated_collision_test.go:60: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check generated_collision_test.go:75: the runtime's file says "" --- FAIL: TestGenesisAssignsTheBuildAgentWithNothingProvidingTheRegistry (0.01s) genesis_registry_test.go:26: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check genesis_registry_test.go:26: the build agent does not resolve against its own build: build-agent says it builds files and the build did not produce it — the build did not do what the manifest asked, which is a different fault from a resource asking for the wrong thing --- FAIL: TestTheMachinesNameIsItsSetting (0.00s) hostname_seat_test.go:59: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check panic: interface conversion: interface {} is nil, not string [recovered, repanicked] goroutine 562 [running]: testing.tRunner.func1.2({0xdeda40, 0xc0000dac00}) /usr/local/go/src/testing/testing.go:1974 +0x419 testing.tRunner.func1() /usr/local/go/src/testing/testing.go:1977 +0x67f panic({0xdeda40?, 0xc0000dac00?}) /usr/local/go/src/runtime/panic.go:860 +0x13a github.com/novox/mesh-controller/internal/catalogue.TestTheMachinesNameIsItsSetting.func1(0x0) /var/lib/build-agent/workspace/check/mesh-controller/internal/catalogue/hostname_seat_test.go:77 +0x6b0 github.com/novox/mesh-controller/internal/catalogue.TestTheMachinesNameIsItsSetting(0xc0000f6fc8) /var/lib/build-agent/workspace/check/mesh-controller/internal/catalogue/hostname_seat_test.go:84 +0x609 testing.tRunner(0xc0000f6fc8, 0xeddd58) /usr/local/go/src/testing/testing.go:2036 +0x21d created by testing.(*T).Run in goroutine 1 /usr/local/go/src/testing/testing.go:2101 +0xb13 FAIL github.com/novox/mesh-controller/internal/catalogue 7.859s --- FAIL: TestTheResolverIsToldEveryMachineOnTheNetworkAndToldAgainWhenOneLeaves (0.30s) network_test.go:265: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check network_test.go:265: dnsmasq is not registered: dnsmasq still names the template(s) of config (files/dnsmasq.conf), wait-for-address (files/mesh.conf): the manifest the mesh holds carries each file's text, read back from the build's templates archive — this one was resolved by a builder that does not read templates, or not built at all (novox/hq ADR 0349 §2) FAIL github.com/novox/mesh-controller/cmd/mesh-controller 71s (shard 7 of 8: 128 tests) ```
mesh-tools added the mesh/ready label 2026-10-16 13:18:44 +00:00
mesh-tools commented 2026-10-16 13:18:44 +00:00
Author
Member
Copy Link
Copy Source

ready at eea5866216

ready at eea58662163e4a82b74bc16465ecec8defb3536a
mesh-tools commented 2026-10-16 13:18:50 +00:00
Author
Member
Copy Link
Copy Source

mesh-delivery: not merged. This pull request is marked ready at eea5866216, and its check failed: every machine composes with the change as it did without (3 of 4 compose) (head eea5866216 merged into trunk a20680dfe7). A new head, marked ready once reviewed, or a recheck that passes, merges it.

mesh-delivery: **not merged.** This pull request is marked ready at eea58662163e4a82b74bc16465ecec8defb3536a, and its check failed: every machine composes with the change as it did without (3 of 4 compose) (head eea58662163e merged into trunk a20680dfe769). A new head, marked ready once reviewed, or a recheck that passes, merges it.
mesh-tools removed the mesh/ready label 2026-10-16 14:01:14 +00:00
mesh-tools commented 2026-10-16 14:06:03 +00:00
Author
Member
Copy Link
Copy Source

Merge check at eea58662
Judged: head eea58662163e merged into trunk 407dc86a74df; read beside it: mesh-catalog 8b53a3663244, mesh-controller-main 407dc86a74df, mesh-host cd13f7726ef0, mesh-tools 7412c5b6c9c5

  • mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: build-agent, mesh-controller)
  • mesh/repo-check: PASS — its merge-check.sh passed

Delivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step

  • tier 0: mesh-controller
  • tier 1: build-agent
  • ace: receives build-agent
  • g14: receives build-agent
  • novox: receives mesh-controller, build-agent
  • shanks: receives build-agent
  • build-agent keeps data (ADR 0233): what it holds is backed up before it moves
  • grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine

Run by the build seat on shanks as build-1792159199545603954 (builds --log build-1792159199545603954).

--- the gate: build-agent, mesh-controller
mesh-controller: ok, 63 tool(s); WARNING: merge-window ask(s) for a setting and do(es) not say whether it is trusted, so it counts as trusted: set at the terminal alone; say "trusted" false where nothing trusts it (novox/hq issue 339); WARNING: controller stay(s) up and say(s) not how it is ready — judged by liveness alone, refused from 2026-11-18 (ADR 0240 rule 8)
long-running resources without health: 1
files asking for a setting without saying whether it is trusted: 1
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-16T13:53:38Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-16T13:53:38Z

modules the change moves:
  - mesh-controller (changed)

machines:
  - a machine (f35): composes
  - holds mesh-dns-resolver (idt): composes
  - holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-config, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-provisioner, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
  - a machine (yvbpsm): composes

a merge would rebuild 1 module(s) in 1 tier(s): mesh-controller

notes:
  - cmd/mesh-controller/provisioner_account_test.go and testdata/store-tests read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
ok  	github.com/novox/mesh-controller/cmd/mesh-builder	1.110s
ok  	github.com/novox/mesh-controller/examples/objectstore-provisioner	1.017s
ok  	github.com/novox/mesh-controller/examples/postgres-provisioner	1.023s
ok  	github.com/novox/mesh-controller/examples/redis-provisioner	1.019s
ok  	github.com/novox/mesh-controller/examples/route-proxy	1.205s
ok  	github.com/novox/mesh-controller/internal/artifacts	1.054s
?   	github.com/novox/mesh-controller/internal/beside	[no test files]
ok  	github.com/novox/mesh-controller/internal/broker	53.265s
ok  	github.com/novox/mesh-controller/internal/catalogue	24.014s
ok  	github.com/novox/mesh-controller/internal/conditions	2.840s
ok  	github.com/novox/mesh-controller/internal/envfile	1.026s
ok  	github.com/novox/mesh-controller/internal/facts	1.046s
ok  	github.com/novox/mesh-controller/internal/identity	7.036s
ok  	github.com/novox/mesh-controller/internal/lease	10.232s
ok  	github.com/novox/mesh-controller/internal/licences	5.396s
ok  	github.com/novox/mesh-controller/internal/licences/adapters	1.027s
ok  	github.com/novox/mesh-controller/internal/lint	2.975s
ok  	github.com/novox/mesh-controller/internal/outward	1.078s
ok  	github.com/novox/mesh-controller/internal/overlay	1.056s
ok  	github.com/novox/mesh-controller/internal/recordmirror	17.087s
ok  	github.com/novox/mesh-controller/internal/secrets	1.562s
ok  	github.com/novox/mesh-controller/internal/store	3.609s
ok  	github.com/novox/mesh-controller/internal/testbus	1.241s
ok  	github.com/novox/mesh-controller/internal/token	1.035s
ok  	github.com/novox/mesh-controller/cmd/mesh-controller	47s	(shard 1 of 8: 129 tests)
ok  	github.com/novox/mesh-controller/cmd/mesh-controller	37s	(shard 2 of 8: 129 tests)
ok  	github.com/novox/mesh-controller/cmd/mesh-controller	152s	(shard 3 of 8: 129 tests)
ok  	github.com/novox/mesh-controller/cmd/mesh-controller	80s	(shard 4 of 8: 129 tests)
ok  	github.com/novox/mesh-controller/cmd/mesh-controller	50s	(shard 5 of 8: 128 tests)
ok  	github.com/novox/mesh-controller/cmd/mesh-controller	110s	(shard 6 of 8: 128 tests)
ok  	github.com/novox/mesh-controller/cmd/mesh-controller	88s	(shard 7 of 8: 128 tests)
ok  	github.com/novox/mesh-controller/cmd/mesh-controller	82s	(shard 8 of 8: 128 tests)
ok  	github.com/novox/mesh-controller/internal/inventory	18s	(shard 1 of 4: 77 tests)
ok  	github.com/novox/mesh-controller/internal/inventory	17s	(shard 2 of 4: 77 tests)
ok  	github.com/novox/mesh-controller/internal/inventory	16s	(shard 3 of 4: 77 tests)
ok  	github.com/novox/mesh-controller/internal/inventory	16s	(shard 4 of 4: 77 tests)
ok  	github.com/novox/mesh-controller/internal/builder	17s	(shard 1 of 4: 55 tests)
ok  	github.com/novox/mesh-controller/internal/builder	20s	(shard 2 of 4: 55 tests)
ok  	github.com/novox/mesh-controller/internal/builder	38s	(shard 3 of 4: 55 tests)
ok  	github.com/novox/mesh-controller/internal/builder	40s	(shard 4 of 4: 55 tests)
ok  	github.com/novox/mesh-controller/internal/link	14s	(shard 1 of 4: 48 tests)
ok  	github.com/novox/mesh-controller/internal/link	18s	(shard 2 of 4: 48 tests)
ok  	github.com/novox/mesh-controller/internal/link	16s	(shard 3 of 4: 47 tests)
ok  	github.com/novox/mesh-controller/internal/link	20s	(shard 4 of 4: 47 tests)
store tests, each run against the store:
  ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeWalksTheOthersAgain (0.27s)
  ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeEndsTheMergesThatContainIt (0.31s)
  ./cmd/mesh-controller --- PASS: TestAStopWalksTheOthersAgainInTheOpenBatch (0.31s)
  ./cmd/mesh-controller --- PASS: TestAStopNamesWhatStaysOnTheMachinesAndWhatStillCarriesIt (0.27s)
  ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeLeavesItOutOfABatch (0.28s)
  ./cmd/mesh-controller --- PASS: TestSavingPlansAndMovingMergesIsOneAct (0.26s)
  ./cmd/mesh-controller --- PASS: TestAPlanFollowedFromTheStoreAnswersWhenItMoves (2.02s)
  ./cmd/mesh-controller --- PASS: TestNodeShowAndStatusReadTheLastSendFromTheStore (0.35s)
  ./cmd/mesh-controller --- PASS: TestTheConditionsVerbReadsTheLooksTheBucketNoLongerHolds (0.32s)
  ./cmd/mesh-controller --- PASS: TestAWalkLetGoAndStoppedByVerbsIsSaidStartedAndEnded (0.28s)
  ./cmd/mesh-controller --- PASS: TestAWalkStoppedOrClosedByAPersonIsSaidEndedStopped (0.27s)
  ./cmd/mesh-controller --- PASS: TestAWalkRetriedByAPersonIsSaidStartedAgain (0.23s)
  ./cmd/mesh-controller --- PASS: TestABacklogReleasedByAPersonIsSaidStarted (0.24s)
  ./cmd/mesh-controller --- PASS: TestAWalkEndedByCancelOrClearIsSaidEnded (0.29s)
  ./cmd/mesh-controller --- PASS: TestAWalkRestartedByARebuildIsSaidStarted (0.24s)
  ./cmd/mesh-controller --- PASS: TestAWalkStoppedByHandAndRetriedEndsFailedWhenItFailsAgain (0.28s)
  ./cmd/mesh-controller --- PASS: TestReplay237 (0.24s)
  ./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeUnresolvedSaysSoOnceInItsAnswer (0.26s)
  ./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeResolvedSaysNothingOfIt (0.26s)
  ./cmd/mesh-controller --- PASS: TestAnAssignThatLeavesItsNodeUnresolvedSaysOnlyThePlansRefusal (0.26s)
  ./cmd/mesh-controller --- PASS: TestADirectoryOwnersKeyIsRefusedThroughAVerb (0.26s)
  ./cmd/mesh-controller --- PASS: TestTheSendMakesNoValueForAnOutsideSecretNobodyGave (0.41s)
  ./cmd/mesh-controller --- PASS: TestAQuestionComposesWithoutAnOutsideSecretNobodyGave (0.38s)
  ./cmd/mesh-controller --- PASS: TestReplay201 (0.22s)
  ./cmd/mesh-controller --- PASS: TestARollbackWhoseSendWasRefusedIsCompletedByTheNextSend (0.22s)
  ./cmd/mesh-controller --- PASS: TestAGateJudgesTheOtherMovesBesideAKeptCore (0.20s)
  ./cmd/mesh-controller --- PASS: TestReplay401 (0.38s)
  ./cmd/mesh-controller --- PASS: TestReplay201ThePlansSend (0.27s)
  ./cmd/mesh-controller --- PASS: TestPlanAndNodeListAnOptionalRequirementLeftUnbound (0.36s)
  ./cmd/mesh-controller --- PASS: TestReplay340 (0.31s)
  ./cmd/mesh-controller --- PASS: TestOnlyATrustedFilesNamedKeyIsRefusedThroughAVerb (0.24s)
  ./cmd/mesh-controller --- PASS: TestReplay349 (0.24s)
  ./cmd/mesh-controller --- PASS: TestReplay348AFaultFromBeforeTheSendFailsNoGate (0.21s)
  ./cmd/mesh-controller --- PASS: TestReplay239AModuleNameIsNotTakenOverByAnotherRepository (0.20s)
  ./cmd/mesh-controller --- PASS: TestAWalkThatMovedNothingSaysWhichModulesMatchedWhatRuns (0.28s)
  ./cmd/mesh-controller --- PASS: TestAWalkWhoseEveryBuildCameOutTheSameIsDone (0.21s)
  ./cmd/mesh-controller --- PASS: TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (0.10s)
  ./cmd/mesh-controller --- PASS: TestOneAcceptForAProviderIsPlacedForEveryConsumer (0.62s)
  ./cmd/mesh-controller --- PASS: TestReplay164 (0.36s)
  ./cmd/mesh-controller --- PASS: TestAnApprovedLayerOpensTheWalkThatSendsIt (0.25s)
  ./cmd/mesh-controller --- PASS: TestASettingsWalkSendsOneMachineAtATimeEachJudged (0.23s)
  ./cmd/mesh-controller --- PASS: TestAFailedSettingsWalkStopsAndHoldsNothingBack (0.23s)
  ./cmd/mesh-controller --- PASS: TestASettingsWalkSendsTheLayerAloneEveryBuildKept (0.24s)
  ./cmd/mesh-controller --- PASS: TestASettingsWalkStopsBeforeADataMoveAndPassesOverAMachineAway (0.60s)
  ./cmd/mesh-controller --- PASS: TestACrossingSendSupersedesASettingsGate (0.22s)
  ./cmd/mesh-controller --- PASS: TestASettingsWalkFailsOnARefusalThatCannotClear (0.23s)
  ./cmd/mesh-controller --- PASS: TestAProviderElsewhereServesItsOwnComposedName (0.27s)
  ./cmd/mesh-controller --- PASS: TestAReusedCheckBuildIsRegisteredByItsDigestAndGatedAsABuiltOne (0.84s)
  ./cmd/mesh-controller --- PASS: TestTheMergeGateJudgesEachManifestAgainstTheListOfTheTree (5.64s)
  ./cmd/mesh-controller --- PASS: TestRegistrationPublishesTheNewestTrunkListAndJudgesEveryModuleAgainstIt (0.22s)
  ./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameAfterPlacementMoves (0.39s)
  ./cmd/mesh-controller --- PASS: TestAReleaseSendsTheRestAtOnceAfterTheFirstPasses (0.32s)
  ./cmd/mesh-controller --- PASS: TestARestMachineThatFailsIsPutBackAloneAndTheOthersAreJudgedOn (0.28s)
  ./cmd/mesh-controller --- PASS: TestAWalkTakesOverTheReadingsOfAGateJudgingTheSameBuildThere (0.28s)
  ./cmd/mesh-controller --- PASS: TestAFirstSendMadeAndNotKeptIsNotSentAgain (0.31s)
  ./cmd/mesh-controller --- PASS: TestAReleaseSendKeptAndMadeIsNotMadeAgain (0.23s)
  ./cmd/mesh-controller --- PASS: TestAFirstMachineThatFailsStillStopsTheWalk (0.23s)
  ./cmd/mesh-controller --- PASS: TestTheControlNodeIsSentLastInAStep (0.24s)
  ./cmd/mesh-controller --- PASS: TestARestMachineSilentPastItsBoundIsLeftAndSaid (0.26s)
  ./cmd/mesh-controller --- PASS: TestANoMoveTierWaitsForNoNewReport (0.29s)
  ./cmd/mesh-controller --- PASS: TestOneProviderDownAndThreeConsumersFailingAreOneCondition (0.21s)
  ./cmd/mesh-controller --- PASS: TestAConsumerFailingBesideAHealthyProviderIsItsOwn (0.19s)
  ./cmd/mesh-controller --- PASS: TestTheProvisionerClientsAccountIsIssuedForItsServiceAndNeverInvented (0.23s)
  ./cmd/mesh-controller --- PASS: TestAcceptOfAnOwnSecretTakesThePathOfItsModulesForm (0.28s)
  ./cmd/mesh-controller --- PASS: TestAcceptForAProviderTakesThePathOfTheProvidersModule (0.33s)
  ./cmd/mesh-controller --- PASS: TestAcceptForAMovedTrustedModuleAnnouncesBeforeTheVaultIsAsked (0.29s)
  ./cmd/mesh-controller --- PASS: TestAcceptForAMovedModuleRecordsAHandActAndNeverTheValue (0.26s)
  ./cmd/mesh-controller --- PASS: TestAcceptOfAnOutsideOfferTakesThePathOfTheProvidersModule (0.34s)
  ./cmd/mesh-controller --- PASS: TestAnAskAtTheDeskTakesThePathOfItsModulesForm (0.30s)
  ./cmd/mesh-controller --- PASS: TestAnIssuedValueTakesThePathOfItsProvidersModule (0.33s)
  ./cmd/mesh-controller --- PASS: TestARotationTakesThePathOfItsModulesForm (0.26s)
  ./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameWhileTheWordsAreStillInTheLayers (2.77s)
  ./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameAfterTheMoveOfPlacement (4.40s)
  ./cmd/mesh-controller --- PASS: TestTheSendSealsNoSecretOfAModuleHandedThere (0.31s)
  ./cmd/mesh-controller --- PASS: TestAModulesSecretsAreTheVaultsOnceItIsMarkedMoved (0.18s)
  ./cmd/mesh-controller --- PASS: TestEveryMachineIsToldTheSameAfterTheMoveOfConfig (23.63s)
  ./cmd/mesh-controller --- PASS: TestTheMoveOfConfigRefusesWhatWouldChangeAMachine (8.60s)
  ./cmd/mesh-controller --- PASS: TestTheSettingsVerbForwardsToConfigOnceTheValuesMoved (11.80s)
  ./cmd/mesh-controller --- PASS: TestTheSendCarriesTheVaultsBoxForACoreCredentialAndKeepsIt (0.40s)
  ./cmd/mesh-controller --- PASS: TestASilentVaultHoldsTheKeptBoxAndSaysSo (0.41s)
  ./cmd/mesh-controller --- PASS: TestACoreModuleFirstPlacedWhileTheVaultIsSilentIsSealedByTheController (0.34s)
  ./cmd/mesh-controller --- PASS: TestAnEngineBelowTheContractIsSentTheControllersSealAsBefore (0.32s)
  ./cmd/mesh-controller --- PASS: TestModuleIssueHandsACoveredAccountToTheVaultAndOnlyThat (0.32s)
  ./cmd/mesh-controller --- PASS: TestModuleIssueFailsWhenTheVaultDoesNotTakeACoveredAccount (0.26s)
  ./cmd/mesh-controller --- PASS: TestModuleIssueBeforeTheVaultIsInstalledKeepsTheValueAndHandsNothing (0.28s)
  ./cmd/mesh-controller --- PASS: TestARecordedModulesBundleOnlyMoveRollsOutInItsWalk (0.39s)
  ./cmd/mesh-controller --- PASS: TestARecordedModulesMoveThatRecreatesAContainerWaits (0.75s)
  ./cmd/mesh-controller --- PASS: TestARecordedModulesMoveThatTouchesDataOrAProviderWaits (0.80s)
  ./cmd/mesh-controller --- PASS: TestAPersonsRecordAndTheBusHoldEveryMove (0.56s)
  ./cmd/mesh-controller --- PASS: TestARecordedMoveThatCannotBeJudgedWaits (0.39s)
  ./cmd/mesh-controller --- PASS: TestReplay867 (4.53s)
  ./cmd/mesh-controller --- PASS: TestReplay867Recheck (5.00s)
  ./cmd/mesh-controller --- PASS: TestTheRecheckVerbAsksMeshDeliveryOnABusOfItsOwn (0.40s)
  ./cmd/mesh-controller --- PASS: TestAGroupsCompositionIntoAReleaseBranchIsJudgedByItsOwnController (4.75s)
  ./cmd/mesh-controller --- PASS: TestAGroupsCompositionJudgedWithTheValidatorIntoAReleaseBranchIsJudgedByItsOwnController (4.20s)
  ./cmd/mesh-controller --- PASS: TestAssigningTheClientIssuesItsAccount (0.22s)
  ./internal/inventory --- PASS: TestTheLastSendSaysWhatTheMachineAnswered (0.21s)
  ./internal/inventory --- PASS: TestAReportIsTheLastSendsAnswerOnlyWhenItIsAboutThatSend (0.22s)
  ./internal/inventory --- PASS: TestAnIssuedValueIsSealedToEveryHolderOnceAndNotAgain (0.18s)
  ./internal/inventory --- PASS: TestAnIssuedValueIsSealedAgainAfterAKeyChangeOrAnAcceptance (0.15s)
  ./internal/inventory --- PASS: TestAConditionsLooksAreKeptBesideTheBucket (0.11s)
  ./internal/inventory --- PASS: TestAPlanIdHoldingAQuoteIsReadAsAPlainId (0.21s)
  ./internal/inventory --- PASS: TestAWalksStartIsKeptAndARefusedSaveLeavesItUnsaid (0.17s)
  ./internal/inventory --- PASS: TestAWalksRestIsReadFromEachMachinesOwnSend (0.14s)
  ./internal/inventory --- PASS: TestAStoredBuildWithASilentMergeableFileIsStillReadAndComposed (0.17s)
  ./internal/inventory --- PASS: TestACredentialIssuedOutsideIsNeverMade (0.13s)
  ./internal/inventory --- PASS: TestOneAcceptForAProviderIsSealedToEveryConsumer (0.11s)
  ./internal/inventory --- PASS: TestASharedOwnSecretIssuedOutsideIsNeverMade (0.15s)
  ./internal/inventory --- PASS: TestAModuleInTheConfigFormIsMirroredWithItsWholeDeclaration (0.15s)
  ./internal/inventory --- PASS: TestAReportOfABusyContainerIsKeptAndReadBack (0.12s)
  ./internal/inventory --- PASS: TestANewerBuildsListReplacesTheKeptOneAndAnOlderOneHeardLaterDoesNot (0.18s)
  ./internal/inventory --- PASS: TestPlacementMovesOutOfTheSettingsLayers (0.55s)
  ./internal/inventory --- PASS: TestASettingRoutesPlacementBesideTheLayer (0.24s)
  ./internal/inventory --- PASS: TestTheProvisionerClientsMachineHasAnAccountOfItsOwn (0.67s)
  ./internal/inventory --- PASS: TestTheFourWordsAreKeptBesideTheLayer (0.19s)
  ./internal/inventory --- PASS: TestALayerStillHoldingTheWordsReadsThemAsPlacement (0.15s)
  ./internal/inventory --- PASS: TestTheMoveOfPlacementMovesWhatTheLayersStillHold (0.27s)
  ./internal/inventory --- PASS: TestTheMoveReadsEveryRowSealedToAMachineAsItIs (0.17s)
  ./internal/inventory --- PASS: TestASendKeepsThePlansItHandedAndTheMirrorCarriesThem (0.20s)
  ./internal/inventory --- PASS: TestTheLayersAreReadUntilTheMoveOfConfigHasRun (0.12s)
  ./internal/inventory --- PASS: TestAModuleReadsMeshConfigOnlyWhereItsValuesAre (0.11s)
  ./internal/inventory --- PASS: TestTheEndOfTheMoveRefusesALayerChangedSinceItWasRead (0.12s)
  ./internal/inventory --- PASS: TestACoreCredentialsVaultBoxIsKeptPerMachineAndReplaced (0.14s)
  ./internal/inventory --- PASS: TestWhatRunsIsTheRegisteredBuildNotANewerOnePutBack (0.16s)
  ./internal/recordmirror --- PASS: TestNatsAnAssignmentAndARegistrationEachChangeOneKeyAndRaiseOneEvent (3.50s)
  ./internal/recordmirror --- PASS: TestNatsTheListOfPredefinedKeysKeptChangesTheMirrorsOneKey (1.54s)
**Merge check** at `eea58662` Judged: head `eea58662163e` merged into trunk `407dc86a74df`; read beside it: mesh-catalog `8b53a3663244`, mesh-controller-main `407dc86a74df`, mesh-host `cd13f7726ef0`, mesh-tools `7412c5b6c9c5` - `mesh/merge-gate`: **PASS** — every machine composes with the change as it did without (4 of 4 compose) (modules: build-agent, mesh-controller) - `mesh/repo-check`: **PASS** — its merge-check.sh passed **Delivery plan** — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step - tier 0: mesh-controller - tier 1: build-agent - ace: receives build-agent - g14: receives build-agent - novox: receives mesh-controller, build-agent - shanks: receives build-agent - build-agent keeps data (ADR 0233): what it holds is backed up before it moves - grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine Run by the build seat on shanks as `build-1792159199545603954` (`builds --log build-1792159199545603954`). ``` --- the gate: build-agent, mesh-controller mesh-controller: ok, 63 tool(s); WARNING: merge-window ask(s) for a setting and do(es) not say whether it is trusted, so it counts as trusted: set at the terminal alone; say "trusted" false where nothing trusts it (novox/hq issue 339); WARNING: controller stay(s) up and say(s) not how it is ready — judged by liveness alone, refused from 2026-11-18 (ADR 0240 rule 8) long-running resources without health: 1 files asking for a setting without saying whether it is trusted: 1 1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-16T13:53:38Z says they run composing every machine as the mesh is the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued composing every machine with the change the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose) judged by controller development build against the facts of 2026-10-16T13:53:38Z modules the change moves: - mesh-controller (changed) machines: - a machine (f35): composes - holds mesh-dns-resolver (idt): composes - holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-config, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-provisioner, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes - a machine (yvbpsm): composes a merge would rebuild 1 module(s) in 1 tier(s): mesh-controller notes: - cmd/mesh-controller/provisioner_account_test.go and testdata/store-tests read by no module's build, and rebuild nothing (issue 280) --- its merge-check.sh (go toolchain) ok github.com/novox/mesh-controller/cmd/mesh-builder 1.110s ok github.com/novox/mesh-controller/examples/objectstore-provisioner 1.017s ok github.com/novox/mesh-controller/examples/postgres-provisioner 1.023s ok github.com/novox/mesh-controller/examples/redis-provisioner 1.019s ok github.com/novox/mesh-controller/examples/route-proxy 1.205s ok github.com/novox/mesh-controller/internal/artifacts 1.054s ? github.com/novox/mesh-controller/internal/beside [no test files] ok github.com/novox/mesh-controller/internal/broker 53.265s ok github.com/novox/mesh-controller/internal/catalogue 24.014s ok github.com/novox/mesh-controller/internal/conditions 2.840s ok github.com/novox/mesh-controller/internal/envfile 1.026s ok github.com/novox/mesh-controller/internal/facts 1.046s ok github.com/novox/mesh-controller/internal/identity 7.036s ok github.com/novox/mesh-controller/internal/lease 10.232s ok github.com/novox/mesh-controller/internal/licences 5.396s ok github.com/novox/mesh-controller/internal/licences/adapters 1.027s ok github.com/novox/mesh-controller/internal/lint 2.975s ok github.com/novox/mesh-controller/internal/outward 1.078s ok github.com/novox/mesh-controller/internal/overlay 1.056s ok github.com/novox/mesh-controller/internal/recordmirror 17.087s ok github.com/novox/mesh-controller/internal/secrets 1.562s ok github.com/novox/mesh-controller/internal/store 3.609s ok github.com/novox/mesh-controller/internal/testbus 1.241s ok github.com/novox/mesh-controller/internal/token 1.035s ok github.com/novox/mesh-controller/cmd/mesh-controller 47s (shard 1 of 8: 129 tests) ok github.com/novox/mesh-controller/cmd/mesh-controller 37s (shard 2 of 8: 129 tests) ok github.com/novox/mesh-controller/cmd/mesh-controller 152s (shard 3 of 8: 129 tests) ok github.com/novox/mesh-controller/cmd/mesh-controller 80s (shard 4 of 8: 129 tests) ok github.com/novox/mesh-controller/cmd/mesh-controller 50s (shard 5 of 8: 128 tests) ok github.com/novox/mesh-controller/cmd/mesh-controller 110s (shard 6 of 8: 128 tests) ok github.com/novox/mesh-controller/cmd/mesh-controller 88s (shard 7 of 8: 128 tests) ok github.com/novox/mesh-controller/cmd/mesh-controller 82s (shard 8 of 8: 128 tests) ok github.com/novox/mesh-controller/internal/inventory 18s (shard 1 of 4: 77 tests) ok github.com/novox/mesh-controller/internal/inventory 17s (shard 2 of 4: 77 tests) ok github.com/novox/mesh-controller/internal/inventory 16s (shard 3 of 4: 77 tests) ok github.com/novox/mesh-controller/internal/inventory 16s (shard 4 of 4: 77 tests) ok github.com/novox/mesh-controller/internal/builder 17s (shard 1 of 4: 55 tests) ok github.com/novox/mesh-controller/internal/builder 20s (shard 2 of 4: 55 tests) ok github.com/novox/mesh-controller/internal/builder 38s (shard 3 of 4: 55 tests) ok github.com/novox/mesh-controller/internal/builder 40s (shard 4 of 4: 55 tests) ok github.com/novox/mesh-controller/internal/link 14s (shard 1 of 4: 48 tests) ok github.com/novox/mesh-controller/internal/link 18s (shard 2 of 4: 48 tests) ok github.com/novox/mesh-controller/internal/link 16s (shard 3 of 4: 47 tests) ok github.com/novox/mesh-controller/internal/link 20s (shard 4 of 4: 47 tests) store tests, each run against the store: ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeWalksTheOthersAgain (0.27s) ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeEndsTheMergesThatContainIt (0.31s) ./cmd/mesh-controller --- PASS: TestAStopWalksTheOthersAgainInTheOpenBatch (0.31s) ./cmd/mesh-controller --- PASS: TestAStopNamesWhatStaysOnTheMachinesAndWhatStillCarriesIt (0.27s) ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeLeavesItOutOfABatch (0.28s) ./cmd/mesh-controller --- PASS: TestSavingPlansAndMovingMergesIsOneAct (0.26s) ./cmd/mesh-controller --- PASS: TestAPlanFollowedFromTheStoreAnswersWhenItMoves (2.02s) ./cmd/mesh-controller --- PASS: TestNodeShowAndStatusReadTheLastSendFromTheStore (0.35s) ./cmd/mesh-controller --- PASS: TestTheConditionsVerbReadsTheLooksTheBucketNoLongerHolds (0.32s) ./cmd/mesh-controller --- PASS: TestAWalkLetGoAndStoppedByVerbsIsSaidStartedAndEnded (0.28s) ./cmd/mesh-controller --- PASS: TestAWalkStoppedOrClosedByAPersonIsSaidEndedStopped (0.27s) ./cmd/mesh-controller --- PASS: TestAWalkRetriedByAPersonIsSaidStartedAgain (0.23s) ./cmd/mesh-controller --- PASS: TestABacklogReleasedByAPersonIsSaidStarted (0.24s) ./cmd/mesh-controller --- PASS: TestAWalkEndedByCancelOrClearIsSaidEnded (0.29s) ./cmd/mesh-controller --- PASS: TestAWalkRestartedByARebuildIsSaidStarted (0.24s) ./cmd/mesh-controller --- PASS: TestAWalkStoppedByHandAndRetriedEndsFailedWhenItFailsAgain (0.28s) ./cmd/mesh-controller --- PASS: TestReplay237 (0.24s) ./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeUnresolvedSaysSoOnceInItsAnswer (0.26s) ./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeResolvedSaysNothingOfIt (0.26s) ./cmd/mesh-controller --- PASS: TestAnAssignThatLeavesItsNodeUnresolvedSaysOnlyThePlansRefusal (0.26s) ./cmd/mesh-controller --- PASS: TestADirectoryOwnersKeyIsRefusedThroughAVerb (0.26s) ./cmd/mesh-controller --- PASS: TestTheSendMakesNoValueForAnOutsideSecretNobodyGave (0.41s) ./cmd/mesh-controller --- PASS: TestAQuestionComposesWithoutAnOutsideSecretNobodyGave (0.38s) ./cmd/mesh-controller --- PASS: TestReplay201 (0.22s) ./cmd/mesh-controller --- PASS: TestARollbackWhoseSendWasRefusedIsCompletedByTheNextSend (0.22s) ./cmd/mesh-controller --- PASS: TestAGateJudgesTheOtherMovesBesideAKeptCore (0.20s) ./cmd/mesh-controller --- PASS: TestReplay401 (0.38s) ./cmd/mesh-controller --- PASS: TestReplay201ThePlansSend (0.27s) ./cmd/mesh-controller --- PASS: TestPlanAndNodeListAnOptionalRequirementLeftUnbound (0.36s) ./cmd/mesh-controller --- PASS: TestReplay340 (0.31s) ./cmd/mesh-controller --- PASS: TestOnlyATrustedFilesNamedKeyIsRefusedThroughAVerb (0.24s) ./cmd/mesh-controller --- PASS: TestReplay349 (0.24s) ./cmd/mesh-controller --- PASS: TestReplay348AFaultFromBeforeTheSendFailsNoGate (0.21s) ./cmd/mesh-controller --- PASS: TestReplay239AModuleNameIsNotTakenOverByAnotherRepository (0.20s) ./cmd/mesh-controller --- PASS: TestAWalkThatMovedNothingSaysWhichModulesMatchedWhatRuns (0.28s) ./cmd/mesh-controller --- PASS: TestAWalkWhoseEveryBuildCameOutTheSameIsDone (0.21s) ./cmd/mesh-controller --- PASS: TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (0.10s) ./cmd/mesh-controller --- PASS: TestOneAcceptForAProviderIsPlacedForEveryConsumer (0.62s) ./cmd/mesh-controller --- PASS: TestReplay164 (0.36s) ./cmd/mesh-controller --- PASS: TestAnApprovedLayerOpensTheWalkThatSendsIt (0.25s) ./cmd/mesh-controller --- PASS: TestASettingsWalkSendsOneMachineAtATimeEachJudged (0.23s) ./cmd/mesh-controller --- PASS: TestAFailedSettingsWalkStopsAndHoldsNothingBack (0.23s) ./cmd/mesh-controller --- PASS: TestASettingsWalkSendsTheLayerAloneEveryBuildKept (0.24s) ./cmd/mesh-controller --- PASS: TestASettingsWalkStopsBeforeADataMoveAndPassesOverAMachineAway (0.60s) ./cmd/mesh-controller --- PASS: TestACrossingSendSupersedesASettingsGate (0.22s) ./cmd/mesh-controller --- PASS: TestASettingsWalkFailsOnARefusalThatCannotClear (0.23s) ./cmd/mesh-controller --- PASS: TestAProviderElsewhereServesItsOwnComposedName (0.27s) ./cmd/mesh-controller --- PASS: TestAReusedCheckBuildIsRegisteredByItsDigestAndGatedAsABuiltOne (0.84s) ./cmd/mesh-controller --- PASS: TestTheMergeGateJudgesEachManifestAgainstTheListOfTheTree (5.64s) ./cmd/mesh-controller --- PASS: TestRegistrationPublishesTheNewestTrunkListAndJudgesEveryModuleAgainstIt (0.22s) ./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameAfterPlacementMoves (0.39s) ./cmd/mesh-controller --- PASS: TestAReleaseSendsTheRestAtOnceAfterTheFirstPasses (0.32s) ./cmd/mesh-controller --- PASS: TestARestMachineThatFailsIsPutBackAloneAndTheOthersAreJudgedOn (0.28s) ./cmd/mesh-controller --- PASS: TestAWalkTakesOverTheReadingsOfAGateJudgingTheSameBuildThere (0.28s) ./cmd/mesh-controller --- PASS: TestAFirstSendMadeAndNotKeptIsNotSentAgain (0.31s) ./cmd/mesh-controller --- PASS: TestAReleaseSendKeptAndMadeIsNotMadeAgain (0.23s) ./cmd/mesh-controller --- PASS: TestAFirstMachineThatFailsStillStopsTheWalk (0.23s) ./cmd/mesh-controller --- PASS: TestTheControlNodeIsSentLastInAStep (0.24s) ./cmd/mesh-controller --- PASS: TestARestMachineSilentPastItsBoundIsLeftAndSaid (0.26s) ./cmd/mesh-controller --- PASS: TestANoMoveTierWaitsForNoNewReport (0.29s) ./cmd/mesh-controller --- PASS: TestOneProviderDownAndThreeConsumersFailingAreOneCondition (0.21s) ./cmd/mesh-controller --- PASS: TestAConsumerFailingBesideAHealthyProviderIsItsOwn (0.19s) ./cmd/mesh-controller --- PASS: TestTheProvisionerClientsAccountIsIssuedForItsServiceAndNeverInvented (0.23s) ./cmd/mesh-controller --- PASS: TestAcceptOfAnOwnSecretTakesThePathOfItsModulesForm (0.28s) ./cmd/mesh-controller --- PASS: TestAcceptForAProviderTakesThePathOfTheProvidersModule (0.33s) ./cmd/mesh-controller --- PASS: TestAcceptForAMovedTrustedModuleAnnouncesBeforeTheVaultIsAsked (0.29s) ./cmd/mesh-controller --- PASS: TestAcceptForAMovedModuleRecordsAHandActAndNeverTheValue (0.26s) ./cmd/mesh-controller --- PASS: TestAcceptOfAnOutsideOfferTakesThePathOfTheProvidersModule (0.34s) ./cmd/mesh-controller --- PASS: TestAnAskAtTheDeskTakesThePathOfItsModulesForm (0.30s) ./cmd/mesh-controller --- PASS: TestAnIssuedValueTakesThePathOfItsProvidersModule (0.33s) ./cmd/mesh-controller --- PASS: TestARotationTakesThePathOfItsModulesForm (0.26s) ./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameWhileTheWordsAreStillInTheLayers (2.77s) ./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameAfterTheMoveOfPlacement (4.40s) ./cmd/mesh-controller --- PASS: TestTheSendSealsNoSecretOfAModuleHandedThere (0.31s) ./cmd/mesh-controller --- PASS: TestAModulesSecretsAreTheVaultsOnceItIsMarkedMoved (0.18s) ./cmd/mesh-controller --- PASS: TestEveryMachineIsToldTheSameAfterTheMoveOfConfig (23.63s) ./cmd/mesh-controller --- PASS: TestTheMoveOfConfigRefusesWhatWouldChangeAMachine (8.60s) ./cmd/mesh-controller --- PASS: TestTheSettingsVerbForwardsToConfigOnceTheValuesMoved (11.80s) ./cmd/mesh-controller --- PASS: TestTheSendCarriesTheVaultsBoxForACoreCredentialAndKeepsIt (0.40s) ./cmd/mesh-controller --- PASS: TestASilentVaultHoldsTheKeptBoxAndSaysSo (0.41s) ./cmd/mesh-controller --- PASS: TestACoreModuleFirstPlacedWhileTheVaultIsSilentIsSealedByTheController (0.34s) ./cmd/mesh-controller --- PASS: TestAnEngineBelowTheContractIsSentTheControllersSealAsBefore (0.32s) ./cmd/mesh-controller --- PASS: TestModuleIssueHandsACoveredAccountToTheVaultAndOnlyThat (0.32s) ./cmd/mesh-controller --- PASS: TestModuleIssueFailsWhenTheVaultDoesNotTakeACoveredAccount (0.26s) ./cmd/mesh-controller --- PASS: TestModuleIssueBeforeTheVaultIsInstalledKeepsTheValueAndHandsNothing (0.28s) ./cmd/mesh-controller --- PASS: TestARecordedModulesBundleOnlyMoveRollsOutInItsWalk (0.39s) ./cmd/mesh-controller --- PASS: TestARecordedModulesMoveThatRecreatesAContainerWaits (0.75s) ./cmd/mesh-controller --- PASS: TestARecordedModulesMoveThatTouchesDataOrAProviderWaits (0.80s) ./cmd/mesh-controller --- PASS: TestAPersonsRecordAndTheBusHoldEveryMove (0.56s) ./cmd/mesh-controller --- PASS: TestARecordedMoveThatCannotBeJudgedWaits (0.39s) ./cmd/mesh-controller --- PASS: TestReplay867 (4.53s) ./cmd/mesh-controller --- PASS: TestReplay867Recheck (5.00s) ./cmd/mesh-controller --- PASS: TestTheRecheckVerbAsksMeshDeliveryOnABusOfItsOwn (0.40s) ./cmd/mesh-controller --- PASS: TestAGroupsCompositionIntoAReleaseBranchIsJudgedByItsOwnController (4.75s) ./cmd/mesh-controller --- PASS: TestAGroupsCompositionJudgedWithTheValidatorIntoAReleaseBranchIsJudgedByItsOwnController (4.20s) ./cmd/mesh-controller --- PASS: TestAssigningTheClientIssuesItsAccount (0.22s) ./internal/inventory --- PASS: TestTheLastSendSaysWhatTheMachineAnswered (0.21s) ./internal/inventory --- PASS: TestAReportIsTheLastSendsAnswerOnlyWhenItIsAboutThatSend (0.22s) ./internal/inventory --- PASS: TestAnIssuedValueIsSealedToEveryHolderOnceAndNotAgain (0.18s) ./internal/inventory --- PASS: TestAnIssuedValueIsSealedAgainAfterAKeyChangeOrAnAcceptance (0.15s) ./internal/inventory --- PASS: TestAConditionsLooksAreKeptBesideTheBucket (0.11s) ./internal/inventory --- PASS: TestAPlanIdHoldingAQuoteIsReadAsAPlainId (0.21s) ./internal/inventory --- PASS: TestAWalksStartIsKeptAndARefusedSaveLeavesItUnsaid (0.17s) ./internal/inventory --- PASS: TestAWalksRestIsReadFromEachMachinesOwnSend (0.14s) ./internal/inventory --- PASS: TestAStoredBuildWithASilentMergeableFileIsStillReadAndComposed (0.17s) ./internal/inventory --- PASS: TestACredentialIssuedOutsideIsNeverMade (0.13s) ./internal/inventory --- PASS: TestOneAcceptForAProviderIsSealedToEveryConsumer (0.11s) ./internal/inventory --- PASS: TestASharedOwnSecretIssuedOutsideIsNeverMade (0.15s) ./internal/inventory --- PASS: TestAModuleInTheConfigFormIsMirroredWithItsWholeDeclaration (0.15s) ./internal/inventory --- PASS: TestAReportOfABusyContainerIsKeptAndReadBack (0.12s) ./internal/inventory --- PASS: TestANewerBuildsListReplacesTheKeptOneAndAnOlderOneHeardLaterDoesNot (0.18s) ./internal/inventory --- PASS: TestPlacementMovesOutOfTheSettingsLayers (0.55s) ./internal/inventory --- PASS: TestASettingRoutesPlacementBesideTheLayer (0.24s) ./internal/inventory --- PASS: TestTheProvisionerClientsMachineHasAnAccountOfItsOwn (0.67s) ./internal/inventory --- PASS: TestTheFourWordsAreKeptBesideTheLayer (0.19s) ./internal/inventory --- PASS: TestALayerStillHoldingTheWordsReadsThemAsPlacement (0.15s) ./internal/inventory --- PASS: TestTheMoveOfPlacementMovesWhatTheLayersStillHold (0.27s) ./internal/inventory --- PASS: TestTheMoveReadsEveryRowSealedToAMachineAsItIs (0.17s) ./internal/inventory --- PASS: TestASendKeepsThePlansItHandedAndTheMirrorCarriesThem (0.20s) ./internal/inventory --- PASS: TestTheLayersAreReadUntilTheMoveOfConfigHasRun (0.12s) ./internal/inventory --- PASS: TestAModuleReadsMeshConfigOnlyWhereItsValuesAre (0.11s) ./internal/inventory --- PASS: TestTheEndOfTheMoveRefusesALayerChangedSinceItWasRead (0.12s) ./internal/inventory --- PASS: TestACoreCredentialsVaultBoxIsKeptPerMachineAndReplaced (0.14s) ./internal/inventory --- PASS: TestWhatRunsIsTheRegisteredBuildNotANewerOnePutBack (0.16s) ./internal/recordmirror --- PASS: TestNatsAnAssignmentAndARegistrationEachChangeOneKeyAndRaiseOneEvent (3.50s) ./internal/recordmirror --- PASS: TestNatsTheListOfPredefinedKeysKeptChangesTheMirrorsOneKey (1.54s) ```
mesh-tools added the mesh/ready label 2026-10-16 14:10:36 +00:00
mesh-tools commented 2026-10-16 14:10:36 +00:00
Author
Member
Copy Link
Copy Source

ready at eea5866216

ready at eea58662163e4a82b74bc16465ecec8defb3536a
mesh-tools merged commit f45b4cb213 into main 2026-10-16 14:11:27 +00:00
mesh-tools deleted branch fix/917-provisioner-account 2026-10-16 14:11:27 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
mesh/ready
Reviewed and ready: mesh-delivery merges at the marked head once its checks pass (hq ADR 0364)
No labels mesh/ready
Milestone
No items
No Milestone
Assignees
Clear assignees
jschoubben mesh-tools miel.truyen
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: novox/mesh-controller#359