novox/mesh-controller
3
0
Fork 0
Code Issues Pull Requests 1 Releases Wiki Activity
Files
683b1ed693bcf4e28ea6314eb9931b7fac4ea752
mesh-controller/internal/catalogue
T
History
jschoubben 683b1ed693 The seat declares the facts its holder states 
The grant permitted the control plane to state what it applied and the seat said nothing about it, so
the check that every derived subscription has an owner found the catalogue subscribing to a subject
nothing publishes — which is exactly the fault that check exists for, pointed at me.

A seat carries the protocol of its role (novox/hq ADR 0129), so the facts are the mesh-controller
seat's `emits`. That is also what lets another module declare it consumes them. No accepts, so no work
queue is raised for the seat — only what its holder may say. The agreement test now holds all three
places to one another: the seat, the grant, and the words the mesh states them with.
2026-09-28 16:36:45 +02:00
..
accesses_test.go
catalogue: a module accesses operator-owned data, and does not own it
2026-09-05 22:10:58 +02:00
adoption_test.go
One entry per mapping, under the name the module itself uses
2026-09-23 02:32:28 +02:00
adoption.go
Say that the guard names the runtime's bridges where the filter names their addresses (hq ADR 0103)
2026-09-22 19:51:10 +02:00
amqp_is_not_a_provision_test.go
AMQP is not a provision: the bus seat delivers the bus, and the word is refused
2026-09-27 23:29:00 +02:00
artifact_store_seat_test.go
Rename the mesh's seats to mesh-*, keeping their interfaces
2026-09-26 23:07:09 +02:00
artifacts_test.go
An address is read from the node's settings where it is used, never recorded with a port
2026-09-23 23:49:31 +02:00
artifacts.go
An address is read from the node's settings where it is used, never recorded with a port
2026-09-23 23:49:31 +02:00
bootstrap_cycle_test.go
Rename mesh-control -> mesh-controller, substrate -> foundation
2026-09-16 18:40:40 +02:00
bound_into_files_test.go
catalogue: announce a same-node provider at the port it is published on
2026-09-09 23:02:50 +02:00
bound_into_files.go
identity: a consumer's identity fits the tightest backend, via a slug (ADR 0054)
2026-09-05 02:51:39 +02:00
broker_seat_test.go
AMQP is not a provision: the bus seat delivers the bus, and the word is refused
2026-09-27 23:29:00 +02:00
brokered_test.go
A consumer is a module on a machine, not a machine
2026-09-01 02:40:09 +02:00
build_test.go
The builder resolves the SDK from the mesh registry, and can publish packages
2026-09-16 10:27:26 +02:00
build.go
The builder resolves the SDK from the mesh registry, and can publish packages
2026-09-16 10:27:26 +02:00
co_located_test.go
Rename mesh-control -> mesh-controller, substrate -> foundation
2026-09-16 18:40:40 +02:00
computed_test.go
Write the registry's trust into the runtime's file and reload the runtime instead of restarting it; prefix reload-on like restart-on (hq ADR 0102)
2026-09-22 17:51:38 +02:00
contributes_test.go
fix: a require-only consumer of a parameterless provision still asks (and is minted a credential)
2026-09-06 23:20:58 +02:00
cron.go
catalogue: carry and validate a container schedule (ADR 0053)
2026-09-06 14:08:51 +02:00
declaration_test.go
The mesh composes the accounts; the module owns its server
2026-09-27 02:50:23 +02:00
declaration.go
A module's name may contain a dot, so the derived step adds none
2026-09-28 15:44:18 +02:00
dir_into_test.go
A collision is two places, not two spellings
2026-09-26 18:25:28 +02:00
dir_into.go
The assignment's own root is a place, and the manifest's maps are placed
2026-09-26 18:18:13 +02:00
domain_test.go
Rename the mesh's seats to mesh-*, keeping their interfaces
2026-09-26 23:07:09 +02:00
events.go
Event names are checked now, per manifest and across the catalogue
2026-09-27 14:43:16 +02:00
filtering_foundation_test.go
The foundation's ports are forwarded, not only accepted on input (issue 063)
2026-09-18 02:19:34 +02:00
filtering_test.go
The firewall opens the port the mesh itself runs on
2026-09-15 00:54:31 +02:00
filtering.go
One entry per mapping, under the name the module itself uses
2026-09-23 02:32:28 +02:00
foundation_manifests_test.go
AMQP is not a provision: the bus seat delivers the bus, and the word is refused
2026-09-27 23:29:00 +02:00
holdings_test.go
A store row keeps its seat's protocol, and a holder may take work from its queue
2026-09-28 02:08:56 +02:00
hosts_region_test.go
review: hold the hosts region through composition, and say so in plan
2026-09-27 00:05:41 +02:00
identity_test.go
Resync hq ADR references 0044-0054 -> 0039-0049 after the hq record reconciliation
2026-09-05 12:47:13 +02:00
identity.go
Resync hq ADR references 0044-0054 -> 0039-0049 after the hq record reconciliation
2026-09-05 12:47:13 +02:00
jails_into_test.go
A module declares its fail2ban jail; the mesh composes them per node (to-be 31)
2026-09-27 17:20:50 +02:00
jails_into.go
A module declares its fail2ban jail; the mesh composes them per node (to-be 31)
2026-09-27 17:20:50 +02:00
kept_test.go
An operator key, a second seal on every own secret, and the vault keeps the export
2026-09-20 23:56:49 +02:00
licence_test.go
catalogue: deliver a keyless same-node provider's served facts
2026-09-07 05:08:04 +02:00
machine_into_files_test.go
A module can name the mesh's range: ${machine:mesh-range} (novox/hq ADR 0112)
2026-09-27 16:52:00 +02:00
machine_into_files.go
The mesh owns the operator's ~/.ssh: account fact + home-scoped resources (to-be 29)
2026-09-27 17:50:56 +02:00
machineside_test.go
What review found in the port machinery, fixed
2026-09-01 21:54:05 +02:00
manifest.go
A version prepares its state before it runs
2026-09-28 12:43:15 +02:00
mounts_test.go
Review: a failure is the same by resource id, not by the host's words; bound files and /run/docker.sock are declared
2026-09-21 19:23:02 +02:00
names_test.go
catalogue: give host-network containers the mesh's names too
2026-09-07 03:44:28 +02:00
naming_test.go
Refuse an action where it was written, not on the machine
2026-09-01 02:55:56 +02:00
naming.go
A provision names the engine, because a consumer is coupled to one
2026-08-31 17:12:46 +02:00
needs_test.go
needs is now own-secrets, named for whose it is
2026-08-31 13:47:21 +02:00
no_subjects_test.go
Event names are checked now, per manifest and across the catalogue
2026-09-27 14:43:16 +02:00
port_into_test.go
Prove the untouched environment is the same map, not an equal one
2026-09-22 23:29:28 +02:00
port_into.go
A module is told its port in a container's environment too (hq issue 088)
2026-09-22 22:36:28 +02:00
prepares_test.go
A module's name may contain a dot, so the derived step adds none
2026-09-28 15:44:18 +02:00
print_rehearsal_test.go
The firewall opens the port the mesh itself runs on
2026-09-15 00:54:31 +02:00
provided_test.go
Facts carry the format as a template, so the control plane holds none (ADR 0120)
2026-09-27 01:33:20 +02:00
reflects_renamed_test.go
The restart-on rename reads both list shapes
2026-09-17 23:35:12 +02:00
resolve_loopback_test.go
A binding answered on this very node still carries an address
2026-09-14 21:11:37 +02:00
resolve_test.go
The broker credential resolves the mesh-broker seat, not the hub (issue 059)
2026-09-18 01:02:26 +02:00
resolve.go
A seat is handed over as one act, and the holder is on record
2026-09-27 23:22:20 +02:00
resolver_manifests_test.go
Name system seats by scope; let a module define its own (ADR 0121)
2026-09-27 14:30:56 +02:00
roster_test.go
The mesh owns the operator's ~/.ssh: account fact + home-scoped resources (to-be 29)
2026-09-27 17:50:56 +02:00
roster.go
The mesh owns the operator's ~/.ssh: account fact + home-scoped resources (to-be 29)
2026-09-27 17:50:56 +02:00
routing_test.go
a route composes its internal-network alias too, not only its public name
2026-09-25 16:51:38 +02:00
runonce_test.go
A run-once step may name what it reads: the pair run-once + restart-on is no longer refused (novox/hq ADR 0099)
2026-09-21 23:31:06 +02:00
schedule_test.go
catalogue: carry and validate a container schedule (ADR 0053)
2026-09-06 14:08:51 +02:00
seat_into_test.go
A store row keeps its seat's protocol, and a holder may take work from its queue
2026-09-28 02:08:56 +02:00
seat_into.go
An address is read from the node's settings where it is used, never recorded with a port
2026-09-23 23:49:31 +02:00
seats_declared_test.go
AMQP is not a provision: the bus seat delivers the bus, and the word is refused
2026-09-27 23:29:00 +02:00
seats_declared.go
A seat is handed over as one act, and the holder is on record
2026-09-27 23:22:20 +02:00
seats_test.go
The store owns the seat set, so only the control plane may judge a claim
2026-09-27 21:59:40 +02:00
seats.go
The seat declares the facts its holder states
2026-09-28 16:36:45 +02:00
secrets_in_environment_test.go
A module names who its secret files belong to (secrets-owner)
2026-09-21 10:19:00 +02:00
secrets_into_files_test.go
fix: fill a ptr-secret placeholder from the file-owner's credential, not the last consumer's
2026-09-06 13:46:55 +02:00
secrets_into_files.go
A module may hold several secrets from one provider, each a pair of its own
2026-09-21 20:28:16 +02:00
settings_test.go
A module can tell its provider what it needs
2026-08-29 23:35:43 +02:00
settings.go
Read the foundation's ports from each node's settings, wherever a port is used (hq ADR 0100)
2026-09-22 17:31:07 +02:00
several_contributions_test.go
contributes: a module's grant carries no value where it contributed several times
2026-09-24 18:54:35 +02:00
several_secrets_test.go
Review: one local name is still a local name; a local name is unique; recovery knows it; recipes read as instructions; a tag before a digest; ask fails at once when nothing serves
2026-09-21 21:03:22 +02:00
showcase_manifest_test.go
A module can be told which port it was given
2026-09-15 13:20:01 +02:00
ssh_client_test.go
The mesh owns the operator's ~/.ssh: account fact + home-scoped resources (to-be 29)
2026-09-27 17:50:56 +02:00
two_consumers_test.go
A consumer is a module on a machine, not a machine
2026-09-01 02:40:09 +02:00