mesh-tools 0aac89f4e2 Test that the gate's buckets are writable by its machine's tool runner account only (issue 1326) ...

ADR 0437 §3's check: the gate, written in the test as the clause declares it, is composed with the parts and the view
through Users; its seven buckets are writable by its machine's tool runner and by no other account, and each part
reads only the gate buckets its manifest declares.

2026-10-19 21:48:07 +00:00

..

testdata

The bus's system account exports MESH's connect and disconnect events and connections request, heard only by the watchman (issue 1147)

2026-10-18 19:07:06 +02:00

agreement_catalogue_test.go

Count a module's own stream events beside its emits in the catalogue agreement (issue 1249)

2026-10-19 15:31:13 +02:00

agreement_streams_test.go

Count a module's own stream events beside its emits in the catalogue agreement (issue 1249)

2026-10-19 15:31:13 +02:00

agreement.go

Event names are checked now, per manifest and across the catalogue

2026-09-27 14:43:16 +02:00

broker_test.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

broker.go

Work slower than the window says so, and one address is the bus's

2026-09-28 09:51:50 +02:00

bus_module_emits_test.go

Raise every bus user's slow consumer and closed connection as S9, from the bus module's events (hq issue 270, ADR 0357)

2026-10-14 08:41:47 +02:00

callers_live_test.go

Split the unit level from the integration level outside cmd, builder, link, catalogue, inventory; merge-check.sh times and bounds the unit level (issue 895)

2026-10-17 20:41:57 +02:00

callers_test.go

broker: grant each credential the tool calls that name it as the caller, and no other (hq issue 365)

2026-10-11 05:25:29 +02:00

callers.go

broker: grant each credential the tool calls that name it as the caller, and no other (hq issue 365)

2026-10-11 05:25:29 +02:00

cancelled_test.go

Keep a replay from moving the mesh backwards, and tighten the queue's edges (review of hq ADR 0219)

2026-10-05 19:45:45 +02:00

cancelled.go

Let a build agent be paused, have a build killed, and end an ask cancelled as it took it (hq ADR 0219)

2026-10-05 19:17:42 +02:00

checks_running_mirror_test.go

The checks running are readable through reads and carry when each started (issue 1155)

2026-10-18 20:55:18 +02:00

checks_test.go

issue 974: the builders say the checks they run in a bucket that ages, and a builder drops a waiting request for a head and trunk commit another is running

2026-10-17 14:10:26 +02:00

checks.go

issue 974: the builders say the checks they run in a bucket that ages, and a builder drops a waiting request for a head and trunk commit another is running

2026-10-17 14:10:26 +02:00

condition_grant_test.go

Prove a module may say a condition to the operator only under its own name (issue 1216)

2026-10-19 12:01:59 +02:00

config_owner_live_test.go

Split the unit level from the integration level outside cmd, builder, link, catalogue, inventory; merge-check.sh times and bounds the unit level (issue 895)

2026-10-17 20:41:57 +02:00

consumer_from_now_test.go

Make a module's consumer from now and refuse a start word in consumes, so no part replays a week at its first start (issue 1279, ADR 0443)

2026-10-19 21:53:08 +02:00

consumer_upgrade_test.go

Split the unit level from the integration level outside cmd, builder, link, catalogue, inventory; merge-check.sh times and bounds the unit level (issue 895)

2026-10-17 20:41:57 +02:00

controller_asks_test.go

Ask the operator for a condition's answers and act on the warrant, so release, stop, start and restart can be answered from any channel that proves who answered (hq ADR 0259)

2026-10-09 16:22:34 +02:00

controller_buckets_integration_test.go

Keep a build request as the build in state asked (issue 1091)

2026-10-18 02:53:39 +02:00

controller_buckets_test.go

The checks running are readable through reads and carry when each started (issue 1155)

2026-10-18 20:55:18 +02:00

controller_buckets.go

Merge remote-tracking branch 'origin/main' into feat/delivery-watch

2026-10-19 00:53:02 +02:00

delivery_gate_grant_test.go

Test that the gate's buckets are writable by its machine's tool runner account only (issue 1326)

2026-10-19 21:48:07 +00:00

delivery_parts_grant_test.go

Test that the forge bridge's, indexer's and teller's credentials grant exactly their manifests (issue 1243)

2026-10-19 21:47:47 +00:00

derived_test.go

Make a module's consumer from now and refuse a start word in consumes, so no part replays a week at its first start (issue 1279, ADR 0443)

2026-10-19 21:53:08 +02:00

derived.go

Make a module's consumer from now and refuse a start word in consumes, so no part replays a week at its first start (issue 1279, ADR 0443)

2026-10-19 21:53:08 +02:00

genesis_template_test.go

Let the genesis test accept a degradable grant missing from the installer's list (issue 835)

2026-10-15 19:29:13 +02:00

have_bucket_live_test.go

The broker asserts the have bucket and grants each node its own keys of it, the controller none (issue 1136)

2026-10-18 19:04:55 +02:00

have_bucket_test.go

The have bucket takes a node's whole facts, as large as a chain value, never cut (issue 1162)

2026-10-18 23:51:56 +02:00

invokes_test.go

broker: grant each credential the tool calls that name it as the caller, and no other (hq issue 365)

2026-10-11 05:25:29 +02:00

issued_test.go

Let the controller ask an issued credential's tool in its own name, and seal it again over a remade pair (hq issue 526, ADR 0305)

2026-10-12 01:21:20 +02:00

jetstream_test.go

Split the unit level from the integration level outside cmd, builder, link, catalogue, inventory; merge-check.sh times and bounds the unit level (issue 895)

2026-10-17 20:41:57 +02:00

jetstream.go

mesh-controller.try fault A: decide drop-only dead letters by a module's own retention: work-queue, not by the bus's work-queue retention alone (issue 1178)

2026-10-19 03:35:51 +02:00

log_integration_test.go

Split the unit level from the integration level outside cmd, builder, link, catalogue, inventory; merge-check.sh times and bounds the unit level (issue 895)

2026-10-17 20:41:57 +02:00

log_test.go

Split the unit level from the integration level outside cmd, builder, link, catalogue, inventory; merge-check.sh times and bounds the unit level (issue 895)

2026-10-17 20:41:57 +02:00

log.go

Let a module declare a log the controller creates and never removes (ADR 0297)

2026-10-11 19:22:43 +02:00

membership_test.go

The machine runs one tool runtime, loading every delivered bundle (hq ADR 0175, to-be 38 WP2.3)

2026-10-02 18:26:54 +02:00

membership.go

Let the tool runner's account hear the event families its manifest names (issue 745, ADR 0367)

2026-10-14 23:05:14 +00:00

modstream_work_queue_test.go

Review round 1: a carried module's queue consumer survives PruneHeard, a work-queue stream's restricted metadata is proven on the server config (issue 1178)

2026-10-19 03:18:18 +02:00

modstreams_live_test.go

Make a module's consumer from now and refuse a start word in consumes, so no part replays a week at its first start (issue 1279, ADR 0443)

2026-10-19 21:53:08 +02:00

modstreams_test.go

Hear a restricted stream only from a module's own account, never the tool runner's (issue 727)

2026-10-15 14:11:37 +02:00

modstreams_workqueue_integration_test.go

Let module issue mint and deliver a bus process's account (issue 1181)

2026-10-19 02:55:29 +02:00

modstreams.go

Make a module's consumer from now and refuse a start word in consumes, so no part replays a week at its first start (issue 1279, ADR 0443)

2026-10-19 21:53:08 +02:00

move_secrets_test.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

msgttl_live_test.go

Split the unit level from the integration level outside cmd, builder, link, catalogue, inventory; merge-check.sh times and bounds the unit level (issue 895)

2026-10-17 20:41:57 +02:00

nats_golden_test.go

The bus's system account exports MESH's connect and disconnect events and connections request, heard only by the watchman (issue 1147)

2026-10-18 19:07:06 +02:00

nats_test.go

Ask a node's engine which of its directories the walk would refuse, read-only (issue 358)

2026-10-12 14:17:01 +02:00

nats.go

Grant a bus process an account scoped to its own declaration (issue 1180)

2026-10-19 02:44:38 +02:00

node_key_test.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

onnats_test.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

onnats.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

process_grants_test.go

Review round 1: check the process's whole publish set, not merely that each wanted subject is in it (issue 1180)

2026-10-19 03:18:26 +02:00

process_grants.go

Let module issue mint and deliver a bus process's account (issue 1181)

2026-10-19 02:55:29 +02:00

prov_applied_live_test.go

Split the unit level from the integration level outside cmd, builder, link, catalogue, inventory; merge-check.sh times and bounds the unit level (issue 895)

2026-10-17 20:41:57 +02:00

provisioner_live_test.go

Split the unit level from the integration level outside cmd, builder, link, catalogue, inventory; merge-check.sh times and bounds the unit level (issue 895)

2026-10-17 20:41:57 +02:00

provisioner_server_live_test.go

Split the unit level from the integration level outside cmd, builder, link, catalogue, inventory; merge-check.sh times and bounds the unit level (issue 895)

2026-10-17 20:41:57 +02:00

provisioner_test.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

provisioner.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

raise_live_test.go

Make a module's consumer from now and refuse a start word in consumes, so no part replays a week at its first start (issue 1279, ADR 0443)

2026-10-19 21:53:08 +02:00

raise.go

The bus's objects are raised on every start, and one switch says which bus

2026-09-27 02:59:05 +02:00

readiness_test.go

The move ends with the old broker going, not staying

2026-09-27 23:04:59 +02:00

readiness.go

The move ends with the old broker going, not staying

2026-09-27 23:04:59 +02:00

seattools_test.go

Rename node-hosts-file to node-hostname, and refuse one seat claimed under two names (hq ADR 0223)

2026-10-05 23:43:15 +02:00

seattraffic_test.go

Judge a machine root-free only on a positive, fresh measure, and believe a verified sender only there (hq ADR 0259 §8, review H2/H3)

2026-10-09 13:48:56 +02:00

seattraffic.go

Serve a trusted holder from a runtime of its own account, refuse it in the machine's runtime, and say while an agent can become root where it runs (hq ADR 0259 §8)

2026-10-09 13:48:56 +02:00

snapshot_live_test.go

Split the unit level from the integration level outside cmd, builder, link, catalogue, inventory; merge-check.sh times and bounds the unit level (issue 895)

2026-10-17 20:41:57 +02:00

snapshot_test.go

Grant the bus's own module the snapshot API and nothing else (hq ADR 0235)

2026-10-06 18:20:57 +02:00

state_integration_test.go

A state entry may say key-ttl and its bucket allows a time to live per key (issue 1154)

2026-10-18 20:53:42 +02:00

state_keyttl_test.go

A state entry may say key-ttl and its bucket allows a time to live per key (issue 1154)

2026-10-18 20:53:42 +02:00

state_test.go

Split the unit level from the integration level outside cmd, builder, link, catalogue, inventory; merge-check.sh times and bounds the unit level (issue 895)

2026-10-17 20:41:57 +02:00

state.go

A state entry may say key-ttl and its bucket allows a time to live per key (issue 1154)

2026-10-18 20:53:42 +02:00

states_agreement_test.go

issue 974: a rollout advances on events (a look asked by each plan saved, report and expired silent key), the 30 s ticker goes, and each tier send is said as sent

2026-10-17 13:28:34 +02:00

stream_names_agreement_test.go

Remove a restricted stream's consumer when the bus refuses to narrow it, so its wider filters deliver nothing more (ADR 0363 §6, review of PR 338)

2026-10-14 22:05:47 +02:00

streams_test.go

issue 974: two work-queue streams for the checks of pull requests (CHECKS_READY, CHECKS_OTHER), their workers, grants and writer

2026-10-17 13:53:22 +02:00

streams.go

Hear a merge's announcement from whichever module claims the delivery seat (issue 1211)

2026-10-19 11:59:21 +02:00

system_exports_live_test.go

The system-exports reload test waits for the event naming the user it connected, past the watchman's own (issue 1169)

2026-10-19 01:06:56 +02:00

system_exports_test.go

The bus's system account exports MESH's connect and disconnect events and connections request, heard only by the watchman (issue 1147)

2026-10-18 19:07:06 +02:00

users_test.go

Compose a bus user only for a module that can read an account

2026-10-04 17:32:50 +02:00

users.go

Grant a bus process an account scoped to its own declaration (issue 1180)

2026-10-19 02:44:38 +02:00

vault_calls_live_integration_test.go

Split the unit level from the integration level outside cmd, builder, link, catalogue, inventory; merge-check.sh times and bounds the unit level (issue 895)

2026-10-17 20:41:57 +02:00

vault_calls_live_test.go

Split the unit level from the integration level outside cmd, builder, link, catalogue, inventory; merge-check.sh times and bounds the unit level (issue 895)

2026-10-17 20:41:57 +02:00

waits_test.go

Let the tool runner's account hear the event families its manifest names (issue 745, ADR 0367)

2026-10-14 23:05:14 +00:00

waits.go

Let the tool runner's account hear the event families its manifest names (issue 745, ADR 0367)

2026-10-14 23:05:14 +00:00

witness_grants_test.go

Read how a module says each resource is ready, and send it to engines that read it (hq ADR 0240, to-be 48 Phase B)

2026-10-07 16:17:50 +02:00

worker_type_change_test.go

Split the unit level from the integration level outside cmd, builder, link, catalogue, inventory; merge-check.sh times and bounds the unit level (issue 895)

2026-10-17 20:41:57 +02:00

writers_test.go

The broker asserts the have bucket and grants each node its own keys of it, the controller none (issue 1136)

2026-10-18 19:04:55 +02:00

writers.go

The broker asserts the have bucket and grants each node its own keys of it, the controller none (issue 1136)

2026-10-18 19:04:55 +02:00