A built module keeps its build edges: a new SDK plans the toolchain and its TypeScript bundles (hq issue 614) #296

Merged
mesh-admin merged 1 commits from fix/614-a-built-module-keeps-its-build-edges into main 2026-10-13 09:35:26 +00:00
Contributor

What: inventory.Dependencies now draws two edges it lost once a module was built (catalogue.Resolve registers every built manifest with Build = nil):

  • a package base: a build's recorded against holds @novox/mesh-sdk@0.1.13 (the builder's name@version for a package artifact). It is read as a stands-on edge to the module whose held artifact is that package, whichever version it holds now (Held). mesh-tools -> mesh-sdk.
  • a bundle's toolchain: from the Bundles the resolved manifest keeps (language), as issue 211 drew it from build.artifacts before the first build. minio, umami, ... -> mesh-tools; Go bundles -> mesh-tools-go.

Why this way, not keeping build on the entry or changing what the builder records: it reads only records the mesh already keeps. So it holds for every module already built, with no rebuild, no migration and no new builder on the build agents. A rollback to main reads the same records and simply loses the two edges again: nothing is written in a new shape. The other choices would need every module rebuilt before the edge exists, and the SDK would still plan nothing until then.

Why: issue 614. mesh-sdk #24 (0.1.14) planned "builds mesh-sdk, sent nowhere", so issue 272's fix reached no provider. This is a regression of issues 211 and 212 once modules were built.

Tests:

  • internal/inventory TestABuiltModuleKeepsItsBuildEdges and TestAPackageNameIsReadOnlyFromAPackageReference. Both fail on main (dependenciesWith does not exist).
  • cmd/mesh-controller TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (store test, listed in testdata/store-tests). It reasons as delivery-plan does (theGraph + pullScope over registered modules and recorded builds). On main it plans mesh-sdk, the live answer of 2026-10-13. With the fix it plans mesh-sdk] [mesh-tools] [minio umami. Uses only what main had, so it is the replay; registered in mesh-lab as R614.
  • Full merge-check.sh with a store: everything passes except TestATierPutsABrokenModuleBackAtOnce, which also fails 2 of 4 on main alone (timing; not touched here).

Note: a mesh-tools-go change now rebuilds every Go bundle, as issue 211 intended.

Fixes issue 614.

What: inventory.Dependencies now draws two edges it lost once a module was built (catalogue.Resolve registers every built manifest with Build = nil): - a package base: a build's recorded `against` holds `@novox/mesh-sdk@0.1.13` (the builder's name@version for a package artifact). It is read as a stands-on edge to the module whose held artifact is that package, whichever version it holds now (Held). mesh-tools -> mesh-sdk. - a bundle's toolchain: from the `Bundles` the resolved manifest keeps (language), as issue 211 drew it from `build.artifacts` before the first build. minio, umami, ... -> mesh-tools; Go bundles -> mesh-tools-go. Why this way, not keeping `build` on the entry or changing what the builder records: it reads only records the mesh already keeps. So it holds for every module already built, with no rebuild, no migration and no new builder on the build agents. A rollback to main reads the same records and simply loses the two edges again: nothing is written in a new shape. The other choices would need every module rebuilt before the edge exists, and the SDK would still plan nothing until then. Why: issue 614. mesh-sdk #24 (0.1.14) planned "builds mesh-sdk, sent nowhere", so issue 272's fix reached no provider. This is a regression of issues 211 and 212 once modules were built. Tests: - internal/inventory TestABuiltModuleKeepsItsBuildEdges and TestAPackageNameIsReadOnlyFromAPackageReference. Both fail on main (dependenciesWith does not exist). - cmd/mesh-controller TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (store test, listed in testdata/store-tests). It reasons as `delivery-plan` does (theGraph + pullScope over registered modules and recorded builds). On main it plans [[mesh-sdk]], the live answer of 2026-10-13. With the fix it plans [[mesh-sdk] [mesh-tools] [minio umami]]. Uses only what main had, so it is the replay; registered in mesh-lab as R614. - Full merge-check.sh with a store: everything passes except TestATierPutsABrokenModuleBackAtOnce, which also fails 2 of 4 on main alone (timing; not touched here). Note: a mesh-tools-go change now rebuilds every Go bundle, as issue 211 intended. Fixes issue 614.
mesh-admin added 1 commit 2026-10-13 09:08:29 +00:00
Read a built module's build edges from what is kept of it, so a new SDK rebuilds its toolchain and bundles (hq issue 614)
mesh/merge-gate head e658a14296f9 merged into trunk 1826b68a22b5 — pass: builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step; every …
mesh/repo-check head e658a14296f9 merged into trunk 1826b68a22b5 — pass: its merge-check.sh passed
mesh/delivery delivered
e658a14296
A registered manifest carries no build, so mesh-tools' build.on naming the
SDK's package and every bundle's toolchain were edges only before a module was
first built: mesh-sdk 0.1.14 planned "sent nowhere". The relation now reads a
package base from the recorded name@version against the package the mesh holds,
and the toolchain from the bundles the resolved manifest keeps. Only records the
mesh already keeps are read, so it holds for every module built before it and a
rollback reads the same records. Replay R614.
Author
Contributor

Delivery novox/mesh-controller@e658a14296f9 — delivered since 2026-10-13T09:42:17Z

Delivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step

  • tier 0: mesh-controller
  • tier 1: build-agent
  • ace: receives build-agent
  • g14: receives build-agent
  • novox: receives mesh-controller, build-agent
  • shanks: receives build-agent
  • build-agent keeps data (ADR 0233): what it holds is backed up before it moves
  • grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine

Machines

  • mesh-controller on novox: passed — healthy 3 times over 3m38s
  • mesh-controller on the rest running it: sent
  • build-agent on ace: passed — healthy 1 times over 31s
  • build-agent on the rest running it: sent

Transitions

  • 2026-10-13 09:08 (new) → proposed (announced): novox/mesh-controller#296's head announced
  • 2026-10-13 09:15 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit
  • 2026-10-13 09:15 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
  • 2026-10-13 09:35 ready → published (merged): on the trunk its modules follow: merged there, and its walk opened — or nothing for a walk to move
  • 2026-10-13 09:35 published → delivering (go): its walk started: let go by this owner in its group's order, by a person, or on the controller's own path — not a failed walk that carried a later commit for it, after which it waits for a walk of its own commit
  • 2026-10-13 09:42 delivering → delivered (done): its walk is done, carrying its own commit: every machine of its deploy plan passed, or was left as its policy says

The commit's note under refs/notes/mesh-plan keeps every transition: git log --notes=mesh-plan.

<!-- mesh-delivery:view --> **Delivery** `novox/mesh-controller@e658a14296f9` — **delivered** since 2026-10-13T09:42:17Z **Delivery plan** — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step - tier 0: mesh-controller - tier 1: build-agent - ace: receives build-agent - g14: receives build-agent - novox: receives mesh-controller, build-agent - shanks: receives build-agent - build-agent keeps data (ADR 0233): what it holds is backed up before it moves - grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine **Machines** - mesh-controller on novox: passed — healthy 3 times over 3m38s - mesh-controller on the rest running it: sent - build-agent on ace: passed — healthy 1 times over 31s - build-agent on the rest running it: sent **Transitions** - 2026-10-13 09:08 (new) → proposed (announced): novox/mesh-controller#296's head announced - 2026-10-13 09:15 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit - 2026-10-13 09:15 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail - 2026-10-13 09:35 ready → published (merged): on the trunk its modules follow: merged there, and its walk opened — or nothing for a walk to move - 2026-10-13 09:35 published → delivering (go): its walk started: let go by this owner in its group's order, by a person, or on the controller's own path — not a failed walk that carried a later commit for it, after which it waits for a walk of its own commit - 2026-10-13 09:42 delivering → delivered (done): its walk is done, carrying its own commit: every machine of its deploy plan passed, or was left as its policy says The commit's note under `refs/notes/mesh-plan` keeps every transition: `git log --notes=mesh-plan`.
Author
Contributor

Merge check at e658a142
Judged: head e658a14296f9 merged into trunk 1826b68a22b5; read beside it: mesh-catalog f35b06750452, mesh-controller-main 1826b68a22b5, mesh-host 7a41e120635b, mesh-tools 954e1a53eef9

  • mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: build-agent, mesh-controller)
  • mesh/repo-check: PASS — its merge-check.sh passed

Delivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step

  • tier 0: mesh-controller
  • tier 1: build-agent
  • ace: receives build-agent
  • g14: receives build-agent
  • novox: receives mesh-controller, build-agent
  • shanks: receives build-agent
  • build-agent keeps data (ADR 0233): what it holds is backed up before it moves
  • grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine
  • read by no module's build: cmd/mesh-controller/replay614_test.go, internal/inventory/dependencies_test.go, testdata/store-tests

Run by the build seat on ace as build-1791882523823626544 (builds --log build-1791882523823626544).

--- the gate: build-agent, mesh-controller
mesh-controller: ok, 58 tool(s); WARNING: merge-window ask(s) for a setting and do(es) not say whether it is trusted, so it counts as trusted: set at the terminal alone; say "trusted" false where nothing trusts it (novox/hq issue 339); WARNING: controller stay(s) up and say(s) not how it is ready — judged by liveness alone, refused from 2026-11-18 (ADR 0240 rule 8)
long-running resources without health: 1
files asking for a setting without saying whether it is trusted: 1
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-13T08:59:10Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-13T08:59:10Z

modules the change moves:
  - mesh-controller (changed)

machines:
  - a machine (f35): composes
  - holds mesh-dns-resolver (idt): composes
  - holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
  - a machine (yvbpsm): composes

a merge would rebuild 2 module(s) in 2 tier(s): build-agent, mesh-controller

notes:
  - cmd/mesh-controller/replay614_test.go, internal/inventory/dependencies_test.go and testdata/store-tests read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
ok  	github.com/novox/mesh-controller/cmd/mesh-builder	1.040s
ok  	github.com/novox/mesh-controller/cmd/mesh-controller	169.994s
ok  	github.com/novox/mesh-controller/examples/objectstore-provisioner	1.014s
ok  	github.com/novox/mesh-controller/examples/postgres-provisioner	1.019s
ok  	github.com/novox/mesh-controller/examples/redis-provisioner	1.013s
ok  	github.com/novox/mesh-controller/examples/route-proxy	1.140s
ok  	github.com/novox/mesh-controller/internal/artifacts	1.107s
?   	github.com/novox/mesh-controller/internal/beside	[no test files]
ok  	github.com/novox/mesh-controller/internal/broker	6.348s
ok  	github.com/novox/mesh-controller/internal/builder	52.547s
ok  	github.com/novox/mesh-controller/internal/catalogue	7.558s
ok  	github.com/novox/mesh-controller/internal/conditions	2.571s
ok  	github.com/novox/mesh-controller/internal/envfile	1.079s
ok  	github.com/novox/mesh-controller/internal/facts	1.080s
ok  	github.com/novox/mesh-controller/internal/identity	7.683s
ok  	github.com/novox/mesh-controller/internal/inventory	40.657s
ok  	github.com/novox/mesh-controller/internal/lease	17.704s
ok  	github.com/novox/mesh-controller/internal/licences	6.598s
ok  	github.com/novox/mesh-controller/internal/licences/adapters	1.035s
ok  	github.com/novox/mesh-controller/internal/link	61.060s
ok  	github.com/novox/mesh-controller/internal/lint	2.292s
ok  	github.com/novox/mesh-controller/internal/outward	1.075s
ok  	github.com/novox/mesh-controller/internal/overlay	1.056s
ok  	github.com/novox/mesh-controller/internal/secrets	1.434s
ok  	github.com/novox/mesh-controller/internal/store	3.385s
ok  	github.com/novox/mesh-controller/internal/testbus	1.226s
ok  	github.com/novox/mesh-controller/internal/token	1.017s
store tests, each run against the store:
  ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeWalksTheOthersAgain (0.21s)
  ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeEndsTheMergesThatContainIt (0.21s)
  ./cmd/mesh-controller --- PASS: TestAStopWalksTheOthersAgainInTheOpenBatch (0.22s)
  ./cmd/mesh-controller --- PASS: TestAStopNamesWhatStaysOnTheMachinesAndWhatStillCarriesIt (0.20s)
  ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeLeavesItOutOfABatch (0.19s)
  ./cmd/mesh-controller --- PASS: TestSavingPlansAndMovingMergesIsOneAct (0.16s)
  ./cmd/mesh-controller --- PASS: TestAPlanFollowedFromTheStoreAnswersWhenItMoves (1.96s)
  ./cmd/mesh-controller --- PASS: TestNodeShowAndStatusReadTheLastSendFromTheStore (0.23s)
  ./cmd/mesh-controller --- PASS: TestTheConditionsVerbReadsTheLooksTheBucketNoLongerHolds (0.13s)
  ./cmd/mesh-controller --- PASS: TestAWalkLetGoAndStoppedByVerbsIsSaidStartedAndEnded (0.24s)
  ./cmd/mesh-controller --- PASS: TestAWalkStoppedOrClosedByAPersonIsSaidEndedStopped (0.23s)
  ./cmd/mesh-controller --- PASS: TestAWalkRetriedByAPersonIsSaidStartedAgain (0.20s)
  ./cmd/mesh-controller --- PASS: TestABacklogReleasedByAPersonIsSaidStarted (0.20s)
  ./cmd/mesh-controller --- PASS: TestAWalkEndedByCancelOrClearIsSaidEnded (0.26s)
  ./cmd/mesh-controller --- PASS: TestAWalkRestartedByARebuildIsSaidStarted (0.20s)
  ./cmd/mesh-controller --- PASS: TestAWalkStoppedByHandAndRetriedEndsFailedWhenItFailsAgain (0.24s)
  ./cmd/mesh-controller --- PASS: TestReplay237 (0.20s)
  ./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeUnresolvedSaysSoOnceInItsAnswer (0.19s)
  ./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeResolvedSaysNothingOfIt (0.29s)
  ./cmd/mesh-controller --- PASS: TestAnAssignThatLeavesItsNodeUnresolvedSaysOnlyThePlansRefusal (0.19s)
  ./cmd/mesh-controller --- PASS: TestADirectoryOwnersKeyIsRefusedThroughAVerb (0.21s)
  ./cmd/mesh-controller --- PASS: TestTheSendMakesNoValueForAnOutsideSecretNobodyGave (0.28s)
  ./cmd/mesh-controller --- PASS: TestAQuestionComposesWithoutAnOutsideSecretNobodyGave (0.26s)
  ./cmd/mesh-controller --- PASS: TestReplay201 (0.15s)
  ./cmd/mesh-controller --- PASS: TestARollbackWhoseSendWasRefusedIsCompletedByTheNextSend (0.15s)
  ./cmd/mesh-controller --- PASS: TestAGateJudgesTheOtherMovesBesideAKeptCore (0.15s)
  ./cmd/mesh-controller --- PASS: TestReplay401 (0.27s)
  ./cmd/mesh-controller --- PASS: TestReplay201ThePlansSend (0.23s)
  ./cmd/mesh-controller --- PASS: TestPlanAndNodeListAnOptionalRequirementLeftUnbound (0.28s)
  ./cmd/mesh-controller --- PASS: TestReplay340 (0.23s)
  ./cmd/mesh-controller --- PASS: TestOnlyATrustedFilesNamedKeyIsRefusedThroughAVerb (0.19s)
  ./cmd/mesh-controller --- PASS: TestReplay349 (0.19s)
  ./cmd/mesh-controller --- PASS: TestReplay348AFaultFromBeforeTheSendFailsNoGate (0.18s)
  ./cmd/mesh-controller --- PASS: TestReplay239AModuleNameIsNotTakenOverByAnotherRepository (0.15s)
  ./cmd/mesh-controller --- PASS: TestAWalkThatMovedNothingSaysWhichModulesMatchedWhatRuns (0.18s)
  ./cmd/mesh-controller --- PASS: TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (0.08s)
  ./internal/inventory --- PASS: TestTheLastSendSaysWhatTheMachineAnswered (0.07s)
  ./internal/inventory --- PASS: TestAReportIsTheLastSendsAnswerOnlyWhenItIsAboutThatSend (0.08s)
  ./internal/inventory --- PASS: TestAnIssuedValueIsSealedToEveryHolderOnceAndNotAgain (0.09s)
  ./internal/inventory --- PASS: TestAnIssuedValueIsSealedAgainAfterAKeyChangeOrAnAcceptance (0.08s)
  ./internal/inventory --- PASS: TestAConditionsLooksAreKeptBesideTheBucket (0.06s)
  ./internal/inventory --- PASS: TestAPlanIdHoldingAQuoteIsReadAsAPlainId (0.06s)
  ./internal/inventory --- PASS: TestAWalksStartIsKeptAndARefusedSaveLeavesItUnsaid (0.07s)
  ./internal/inventory --- PASS: TestAWalksRestIsReadFromEachMachinesOwnSend (0.07s)
  ./internal/inventory --- PASS: TestAStoredBuildWithASilentMergeableFileIsStillReadAndComposed (0.07s)
**Merge check** at `e658a142` Judged: head `e658a14296f9` merged into trunk `1826b68a22b5`; read beside it: mesh-catalog `f35b06750452`, mesh-controller-main `1826b68a22b5`, mesh-host `7a41e120635b`, mesh-tools `954e1a53eef9` - `mesh/merge-gate`: **PASS** — every machine composes with the change as it did without (4 of 4 compose) (modules: build-agent, mesh-controller) - `mesh/repo-check`: **PASS** — its merge-check.sh passed **Delivery plan** — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step - tier 0: mesh-controller - tier 1: build-agent - ace: receives build-agent - g14: receives build-agent - novox: receives mesh-controller, build-agent - shanks: receives build-agent - build-agent keeps data (ADR 0233): what it holds is backed up before it moves - grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine - read by no module's build: cmd/mesh-controller/replay614_test.go, internal/inventory/dependencies_test.go, testdata/store-tests Run by the build seat on ace as `build-1791882523823626544` (`builds --log build-1791882523823626544`). ``` --- the gate: build-agent, mesh-controller mesh-controller: ok, 58 tool(s); WARNING: merge-window ask(s) for a setting and do(es) not say whether it is trusted, so it counts as trusted: set at the terminal alone; say "trusted" false where nothing trusts it (novox/hq issue 339); WARNING: controller stay(s) up and say(s) not how it is ready — judged by liveness alone, refused from 2026-11-18 (ADR 0240 rule 8) long-running resources without health: 1 files asking for a setting without saying whether it is trusted: 1 1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-13T08:59:10Z says they run composing every machine as the mesh is the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued composing every machine with the change the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose) judged by controller development build against the facts of 2026-10-13T08:59:10Z modules the change moves: - mesh-controller (changed) machines: - a machine (f35): composes - holds mesh-dns-resolver (idt): composes - holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes - a machine (yvbpsm): composes a merge would rebuild 2 module(s) in 2 tier(s): build-agent, mesh-controller notes: - cmd/mesh-controller/replay614_test.go, internal/inventory/dependencies_test.go and testdata/store-tests read by no module's build, and rebuild nothing (issue 280) --- its merge-check.sh (go toolchain) ok github.com/novox/mesh-controller/cmd/mesh-builder 1.040s ok github.com/novox/mesh-controller/cmd/mesh-controller 169.994s ok github.com/novox/mesh-controller/examples/objectstore-provisioner 1.014s ok github.com/novox/mesh-controller/examples/postgres-provisioner 1.019s ok github.com/novox/mesh-controller/examples/redis-provisioner 1.013s ok github.com/novox/mesh-controller/examples/route-proxy 1.140s ok github.com/novox/mesh-controller/internal/artifacts 1.107s ? github.com/novox/mesh-controller/internal/beside [no test files] ok github.com/novox/mesh-controller/internal/broker 6.348s ok github.com/novox/mesh-controller/internal/builder 52.547s ok github.com/novox/mesh-controller/internal/catalogue 7.558s ok github.com/novox/mesh-controller/internal/conditions 2.571s ok github.com/novox/mesh-controller/internal/envfile 1.079s ok github.com/novox/mesh-controller/internal/facts 1.080s ok github.com/novox/mesh-controller/internal/identity 7.683s ok github.com/novox/mesh-controller/internal/inventory 40.657s ok github.com/novox/mesh-controller/internal/lease 17.704s ok github.com/novox/mesh-controller/internal/licences 6.598s ok github.com/novox/mesh-controller/internal/licences/adapters 1.035s ok github.com/novox/mesh-controller/internal/link 61.060s ok github.com/novox/mesh-controller/internal/lint 2.292s ok github.com/novox/mesh-controller/internal/outward 1.075s ok github.com/novox/mesh-controller/internal/overlay 1.056s ok github.com/novox/mesh-controller/internal/secrets 1.434s ok github.com/novox/mesh-controller/internal/store 3.385s ok github.com/novox/mesh-controller/internal/testbus 1.226s ok github.com/novox/mesh-controller/internal/token 1.017s store tests, each run against the store: ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeWalksTheOthersAgain (0.21s) ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeEndsTheMergesThatContainIt (0.21s) ./cmd/mesh-controller --- PASS: TestAStopWalksTheOthersAgainInTheOpenBatch (0.22s) ./cmd/mesh-controller --- PASS: TestAStopNamesWhatStaysOnTheMachinesAndWhatStillCarriesIt (0.20s) ./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeLeavesItOutOfABatch (0.19s) ./cmd/mesh-controller --- PASS: TestSavingPlansAndMovingMergesIsOneAct (0.16s) ./cmd/mesh-controller --- PASS: TestAPlanFollowedFromTheStoreAnswersWhenItMoves (1.96s) ./cmd/mesh-controller --- PASS: TestNodeShowAndStatusReadTheLastSendFromTheStore (0.23s) ./cmd/mesh-controller --- PASS: TestTheConditionsVerbReadsTheLooksTheBucketNoLongerHolds (0.13s) ./cmd/mesh-controller --- PASS: TestAWalkLetGoAndStoppedByVerbsIsSaidStartedAndEnded (0.24s) ./cmd/mesh-controller --- PASS: TestAWalkStoppedOrClosedByAPersonIsSaidEndedStopped (0.23s) ./cmd/mesh-controller --- PASS: TestAWalkRetriedByAPersonIsSaidStartedAgain (0.20s) ./cmd/mesh-controller --- PASS: TestABacklogReleasedByAPersonIsSaidStarted (0.20s) ./cmd/mesh-controller --- PASS: TestAWalkEndedByCancelOrClearIsSaidEnded (0.26s) ./cmd/mesh-controller --- PASS: TestAWalkRestartedByARebuildIsSaidStarted (0.20s) ./cmd/mesh-controller --- PASS: TestAWalkStoppedByHandAndRetriedEndsFailedWhenItFailsAgain (0.24s) ./cmd/mesh-controller --- PASS: TestReplay237 (0.20s) ./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeUnresolvedSaysSoOnceInItsAnswer (0.19s) ./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeResolvedSaysNothingOfIt (0.29s) ./cmd/mesh-controller --- PASS: TestAnAssignThatLeavesItsNodeUnresolvedSaysOnlyThePlansRefusal (0.19s) ./cmd/mesh-controller --- PASS: TestADirectoryOwnersKeyIsRefusedThroughAVerb (0.21s) ./cmd/mesh-controller --- PASS: TestTheSendMakesNoValueForAnOutsideSecretNobodyGave (0.28s) ./cmd/mesh-controller --- PASS: TestAQuestionComposesWithoutAnOutsideSecretNobodyGave (0.26s) ./cmd/mesh-controller --- PASS: TestReplay201 (0.15s) ./cmd/mesh-controller --- PASS: TestARollbackWhoseSendWasRefusedIsCompletedByTheNextSend (0.15s) ./cmd/mesh-controller --- PASS: TestAGateJudgesTheOtherMovesBesideAKeptCore (0.15s) ./cmd/mesh-controller --- PASS: TestReplay401 (0.27s) ./cmd/mesh-controller --- PASS: TestReplay201ThePlansSend (0.23s) ./cmd/mesh-controller --- PASS: TestPlanAndNodeListAnOptionalRequirementLeftUnbound (0.28s) ./cmd/mesh-controller --- PASS: TestReplay340 (0.23s) ./cmd/mesh-controller --- PASS: TestOnlyATrustedFilesNamedKeyIsRefusedThroughAVerb (0.19s) ./cmd/mesh-controller --- PASS: TestReplay349 (0.19s) ./cmd/mesh-controller --- PASS: TestReplay348AFaultFromBeforeTheSendFailsNoGate (0.18s) ./cmd/mesh-controller --- PASS: TestReplay239AModuleNameIsNotTakenOverByAnotherRepository (0.15s) ./cmd/mesh-controller --- PASS: TestAWalkThatMovedNothingSaysWhichModulesMatchedWhatRuns (0.18s) ./cmd/mesh-controller --- PASS: TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (0.08s) ./internal/inventory --- PASS: TestTheLastSendSaysWhatTheMachineAnswered (0.07s) ./internal/inventory --- PASS: TestAReportIsTheLastSendsAnswerOnlyWhenItIsAboutThatSend (0.08s) ./internal/inventory --- PASS: TestAnIssuedValueIsSealedToEveryHolderOnceAndNotAgain (0.09s) ./internal/inventory --- PASS: TestAnIssuedValueIsSealedAgainAfterAKeyChangeOrAnAcceptance (0.08s) ./internal/inventory --- PASS: TestAConditionsLooksAreKeptBesideTheBucket (0.06s) ./internal/inventory --- PASS: TestAPlanIdHoldingAQuoteIsReadAsAPlainId (0.06s) ./internal/inventory --- PASS: TestAWalksStartIsKeptAndARefusedSaveLeavesItUnsaid (0.07s) ./internal/inventory --- PASS: TestAWalksRestIsReadFromEachMachinesOwnSend (0.07s) ./internal/inventory --- PASS: TestAStoredBuildWithASilentMergeableFileIsStillReadAndComposed (0.07s) ```
mesh-admin left a comment
Author
Contributor

Verdict: approve at e658a14296

Independent review for issue 614. The statuses at this head are: mesh/merge-gate success ("head e658a14296 merged into trunk 1826b68a22 — pass: builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step; every …"), mesh/repo-check success ("head e658a14296 merged into trunk 1826b68a22 — pass: its merge-check.sh passed") and mesh/delivery success ("ready: it delivers once merged").

What I ran on g14, in a fresh HTTPS clone with a throwaway postgres 18 store: gofmt is clean and go vet ./... passes. go test -race passes for internal/inventory (85 s) and for the whole of cmd/mesh-controller (637 s), including TestATierPutsABrokenModuleBackAtOnce, which the description says is flaky on main. The store test TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles passes, and it is listed in testdata/store-tests.

The tests fail on main. With the two test files laid over origin/main, internal/inventory does not compile (dependenciesWith and packageName are undefined). The replay fails with "a new SDK plans mesh-sdk, want mesh-sdk] [mesh-tools] [minio umami", which is the live answer of 2026-10-13.

Correctness of the package match. packageName strips only the last "@version" and returns "" for artifact-store references, image digests, URLs and a scoped name with no version. The lookup is then an exact map lookup on the name, so "@novox/mesh-sdk-extra@1" cannot match mesh-sdk; there is no prefix match anywhere. The version is ignored on purpose, so a build that stood on 0.1.13 still reaches the module that now holds 0.1.14. That is the right choice. I checked the live record: mesh-tools' build build-1791808123247620326 of 2026-10-12 was handed MESH_SDK=@novox/mesh-sdk@0.1.13, which is exactly the shape this reads.

A stored build record without these fields. A build with no built_against is skipped by BuiltAgainst, and dependenciesOf passes a nil held map, so nothing panics and no edge is invented. A registered manifest whose bundles carry no language (bundle language has been kept since b1df688 of 2026-10-02) makes ToolchainFor return an error, and that bundle silently gets no toolchain edge. This is the same behaviour as before the fix and is not a blocker; it only matters for a module not rebuilt since 2026-10-02.

Rollback to main. Nothing is written in a new shape: no migration, no new edge kind, no new field in the build record or the registered manifest. A controller rolled back reads the same rows and simply loses these two edges again.

A mesh-tools-go change now rebuilds every Go bundle. That is what issue 211 intended: its diagnosis tested "Go bundle → mesh-tools-go", and the code comment from that fix says that a toolchain that moves rebuilds every bundle compiled in it. ADR 0162 clauses 3 and 5 agree: a build dependency rebuilds the dependent in the next tier. The planner bounds it in order but not in size. tiersOf places mesh-tools-go first and every Go-bundle module after it. The built-by edge from mesh-tools-go to build-agent is skipped through isBaseOf, so no false cycle appears, and hasCycle would report one if it did. There is no cap on a tier's width. By mesh-catalog main, about 70 modules have a Go bundle, including mesh-controller and the core seats, so a mesh-tools-go merge becomes one wide walk. Rebuilds whose binaries come out identical are reported unchanged (issue 611), so only a compiler or flag change moves them. I recommend saying this in the record, but it does not block the merge.

Minor, not blocking. packagesHeld keys by package name, so if two modules ever held the same package name, the winner would depend on map order. Today only mesh-sdk holds a package.

Verdict: approve at e658a14296f9c86938f38a0a1f6727bfa7ac48fe Independent review for issue 614. The statuses at this head are: mesh/merge-gate success ("head e658a14296f9 merged into trunk 1826b68a22b5 — pass: builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step; every …"), mesh/repo-check success ("head e658a14296f9 merged into trunk 1826b68a22b5 — pass: its merge-check.sh passed") and mesh/delivery success ("ready: it delivers once merged"). What I ran on g14, in a fresh HTTPS clone with a throwaway postgres 18 store: gofmt is clean and `go vet ./...` passes. `go test -race` passes for internal/inventory (85 s) and for the whole of cmd/mesh-controller (637 s), including TestATierPutsABrokenModuleBackAtOnce, which the description says is flaky on main. The store test TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles passes, and it is listed in testdata/store-tests. The tests fail on main. With the two test files laid over origin/main, internal/inventory does not compile (dependenciesWith and packageName are undefined). The replay fails with "a new SDK plans [[mesh-sdk]], want [[mesh-sdk] [mesh-tools] [minio umami]]", which is the live answer of 2026-10-13. Correctness of the package match. packageName strips only the last "@version" and returns "" for artifact-store references, image digests, URLs and a scoped name with no version. The lookup is then an exact map lookup on the name, so "@novox/mesh-sdk-extra@1" cannot match mesh-sdk; there is no prefix match anywhere. The version is ignored on purpose, so a build that stood on 0.1.13 still reaches the module that now holds 0.1.14. That is the right choice. I checked the live record: mesh-tools' build build-1791808123247620326 of 2026-10-12 was handed MESH_SDK=@novox/mesh-sdk@0.1.13, which is exactly the shape this reads. A stored build record without these fields. A build with no built_against is skipped by BuiltAgainst, and dependenciesOf passes a nil held map, so nothing panics and no edge is invented. A registered manifest whose bundles carry no language (bundle language has been kept since b1df688 of 2026-10-02) makes ToolchainFor return an error, and that bundle silently gets no toolchain edge. This is the same behaviour as before the fix and is not a blocker; it only matters for a module not rebuilt since 2026-10-02. Rollback to main. Nothing is written in a new shape: no migration, no new edge kind, no new field in the build record or the registered manifest. A controller rolled back reads the same rows and simply loses these two edges again. A mesh-tools-go change now rebuilds every Go bundle. That is what issue 211 intended: its diagnosis tested "Go bundle → mesh-tools-go", and the code comment from that fix says that a toolchain that moves rebuilds every bundle compiled in it. ADR 0162 clauses 3 and 5 agree: a build dependency rebuilds the dependent in the next tier. The planner bounds it in order but not in size. tiersOf places mesh-tools-go first and every Go-bundle module after it. The built-by edge from mesh-tools-go to build-agent is skipped through isBaseOf, so no false cycle appears, and hasCycle would report one if it did. There is no cap on a tier's width. By mesh-catalog main, about 70 modules have a Go bundle, including mesh-controller and the core seats, so a mesh-tools-go merge becomes one wide walk. Rebuilds whose binaries come out identical are reported unchanged (issue 611), so only a compiler or flag change moves them. I recommend saying this in the record, but it does not block the merge. Minor, not blocking. packagesHeld keys by package name, so if two modules ever held the same package name, the winner would depend on map order. Today only mesh-sdk holds a package.
mesh-admin merged commit 404b4409e7 into main 2026-10-13 09:35:26 +00:00
mesh-admin deleted branch fix/614-a-built-module-keeps-its-build-edges 2026-10-13 09:35:27 +00:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: novox/mesh-controller#296