jochen d03e24f423 Age a restricted stream's dead letters out with it and never show their body (issue 728) ...

DEAD_LETTERS kept a message given up on MAIL forever and showed it whole to any caller of dead-letters, outside the grant and past MAIL's week. Per ADR 0376 §3-§6: the kept copy carries a per-message time to live of what is left of its stream's age (a copy already past it is kept without its body), DEAD_LETTERS and EVENTS allow per-message TTL, the list and show give no body or own headers for it, delivering it again needs a minute left and the copy keeps the time left, and its max-deliveries condition clears saying how many aged out undelivered and from which stream.

2026-10-15 14:11:37 +02:00

..

testdata

Ask a node's engine which of its directories the walk would refuse, read-only (issue 358)

2026-10-12 14:17:01 +02:00

agreement_catalogue_test.go

Judge tests that read another repository against what the check clones, never the desktop's checkout (issue 432)

2026-10-11 02:55:04 +02:00

agreement.go

Event names are checked now, per manifest and across the catalogue

2026-09-27 14:43:16 +02:00

broker_test.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

broker.go

Work slower than the window says so, and one address is the bus's

2026-09-28 09:51:50 +02:00

bus_module_emits_test.go

Raise every bus user's slow consumer and closed connection as S9, from the bus module's events (hq issue 270, ADR 0357)

2026-10-14 08:41:47 +02:00

callers_live_test.go

broker: grant each credential the tool calls that name it as the caller, and no other (hq issue 365)

2026-10-11 05:25:29 +02:00

callers_test.go

broker: grant each credential the tool calls that name it as the caller, and no other (hq issue 365)

2026-10-11 05:25:29 +02:00

callers.go

broker: grant each credential the tool calls that name it as the caller, and no other (hq issue 365)

2026-10-11 05:25:29 +02:00

cancelled_test.go

Keep a replay from moving the mesh backwards, and tighten the queue's edges (review of hq ADR 0219)

2026-10-05 19:45:45 +02:00

cancelled.go

Let a build agent be paused, have a build killed, and end an ask cancelled as it took it (hq ADR 0219)

2026-10-05 19:17:42 +02:00

consumer_from_now_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

consumer_upgrade_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

controller_asks_test.go

Ask the operator for a condition's answers and act on the warrant, so release, stop, start and restart can be answered from any channel that proves who answered (hq ADR 0259)

2026-10-09 16:22:34 +02:00

controller_buckets_test.go

Ask at most three at a time, wait out a refusal, need a router, and act only on a claimed open ask, as the review asked (hq ADR 0259)

2026-10-09 16:22:34 +02:00

controller_buckets.go

Ask the operator for a condition's answers and act on the warrant, so release, stop, start and restart can be answered from any channel that proves who answered (hq ADR 0259)

2026-10-09 16:22:34 +02:00

derived_test.go

Keep what a consumer gives up on until a person delivers it again or drops it

2026-10-08 18:32:58 +02:00

derived.go

Hear a restricted stream only from a module's own account, never the tool runner's (issue 727)

2026-10-15 14:11:37 +02:00

genesis_template_test.go

Read the one genesis bundle mesh-host carries now (hq issue 146, ADR 0331)

2026-10-13 01:16:10 +02:00

invokes_test.go

broker: grant each credential the tool calls that name it as the caller, and no other (hq issue 365)

2026-10-11 05:25:29 +02:00

issued_test.go

Let the controller ask an issued credential's tool in its own name, and seal it again over a remade pair (hq issue 526, ADR 0305)

2026-10-12 01:21:20 +02:00

jetstream_test.go

Serve the read verbs on the serving controller's own connection, and name every connection

2026-10-08 21:08:34 +02:00

jetstream.go

Age a restricted stream's dead letters out with it and never show their body (issue 728)

2026-10-15 14:11:37 +02:00

log_test.go

Let a module declare a log the controller creates and never removes (ADR 0297)

2026-10-11 19:22:43 +02:00

log.go

Let a module declare a log the controller creates and never removes (ADR 0297)

2026-10-11 19:22:43 +02:00

membership_test.go

The machine runs one tool runtime, loading every delivered bundle (hq ADR 0175, to-be 38 WP2.3)

2026-10-02 18:26:54 +02:00

membership.go

Let the tool runner's account hear the event families its manifest names (issue 745, ADR 0367)

2026-10-14 23:05:14 +00:00

modstreams_live_test.go

Remove a restricted stream's consumer when the bus refuses to narrow it, so its wider filters deliver nothing more (ADR 0363 §6, review of PR 338)

2026-10-14 22:05:47 +02:00

modstreams_test.go

Hear a restricted stream only from a module's own account, never the tool runner's (issue 727)

2026-10-15 14:11:37 +02:00

modstreams.go

Age a restricted stream's dead letters out with it and never show their body (issue 728)

2026-10-15 14:11:37 +02:00

msgttl_live_test.go

Age a restricted stream's dead letters out with it and never show their body (issue 728)

2026-10-15 14:11:37 +02:00

nats_golden_test.go

Grant the bus's own module the snapshot API and nothing else (hq ADR 0235)

2026-10-06 18:20:57 +02:00

nats_test.go

Ask a node's engine which of its directories the walk would refuse, read-only (issue 358)

2026-10-12 14:17:01 +02:00

nats.go

Hear a restricted stream only from a module's own account, never the tool runner's (issue 727)

2026-10-15 14:11:37 +02:00

onnats_test.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

onnats.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

raise_live_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

raise.go

The bus's objects are raised on every start, and one switch says which bus

2026-09-27 02:59:05 +02:00

readiness_test.go

The move ends with the old broker going, not staying

2026-09-27 23:04:59 +02:00

readiness.go

The move ends with the old broker going, not staying

2026-09-27 23:04:59 +02:00

seattools_test.go

Rename node-hosts-file to node-hostname, and refuse one seat claimed under two names (hq ADR 0223)

2026-10-05 23:43:15 +02:00

seattraffic_test.go

Judge a machine root-free only on a positive, fresh measure, and believe a verified sender only there (hq ADR 0259 §8, review H2/H3)

2026-10-09 13:48:56 +02:00

seattraffic.go

Serve a trusted holder from a runtime of its own account, refuse it in the machine's runtime, and say while an agent can become root where it runs (hq ADR 0259 §8)

2026-10-09 13:48:56 +02:00

snapshot_live_test.go

Grant the bus's own module the snapshot API and nothing else (hq ADR 0235)

2026-10-06 18:20:57 +02:00

snapshot_test.go

Grant the bus's own module the snapshot API and nothing else (hq ADR 0235)

2026-10-06 18:20:57 +02:00

state_test.go

Grant a bar one key of the state it shows, and per-machine state its own machine's key (hq ADR 0260)

2026-10-08 15:51:20 +02:00

state.go

Grant a bar one key of the state it shows, and per-machine state its own machine's key (hq ADR 0260)

2026-10-08 15:51:20 +02:00

states_agreement_test.go

Let a walk wait for its delivery's word, and serve the delivery's owner (hq ADR 0239)

2026-10-07 00:01:42 +02:00

stream_names_agreement_test.go

Remove a restricted stream's consumer when the bus refuses to narrow it, so its wider filters deliver nothing more (ADR 0363 §6, review of PR 338)

2026-10-14 22:05:47 +02:00

streams_test.go

Keep what a consumer gives up on until a person delivers it again or drops it

2026-10-08 18:32:58 +02:00

streams.go

Age a restricted stream's dead letters out with it and never show their body (issue 728)

2026-10-15 14:11:37 +02:00

users_test.go

Compose a bus user only for a module that can read an account

2026-10-04 17:32:50 +02:00

users.go

Hear a restricted stream only from a module's own account, never the tool runner's (issue 727)

2026-10-15 14:11:37 +02:00

waits_test.go

Let the tool runner's account hear the event families its manifest names (issue 745, ADR 0367)

2026-10-14 23:05:14 +00:00

waits.go

Let the tool runner's account hear the event families its manifest names (issue 745, ADR 0367)

2026-10-14 23:05:14 +00:00

witness_grants_test.go

Read how a module says each resource is ready, and send it to engines that read it (hq ADR 0240, to-be 48 Phase B)

2026-10-07 16:17:50 +02:00

worker_type_change_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

writers_test.go

Ask a node's engine which of its directories the walk would refuse, read-only (issue 358)

2026-10-12 14:17:01 +02:00

writers.go

Ask a node's engine which of its directories the walk would refuse, read-only (issue 358)

2026-10-12 14:17:01 +02:00