jochen 48581af35c Grant the bus's own module the snapshot API and nothing else (hq ADR 0235) ...

The night's backup of the bus takes each stream through JetStream's snapshot
API, run by the nats module under its own account. The module holding
mesh-broker is composed that account: stream names and info, the snapshot
request, its flow-control acks, its own inbox — no write, which the writers
table checks. A bus module declaring anything else to say on the bus is
refused by module check rather than silently granted nothing. The genesis
user list is unchanged: the controller's grants are.

2026-10-06 18:20:57 +02:00

..

testdata

Grant the bus's own module the snapshot API and nothing else (hq ADR 0235)

2026-10-06 18:20:57 +02:00

agreement_catalogue_test.go

One runtime principal per node carries every assigned module's tools (hq ADR 0175, to-be 38 WP2.1)

2026-10-02 18:16:14 +02:00

agreement.go

Event names are checked now, per manifest and across the catalogue

2026-09-27 14:43:16 +02:00

broker_test.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

broker.go

Work slower than the window says so, and one address is the bus's

2026-09-28 09:51:50 +02:00

cancelled_test.go

Keep a replay from moving the mesh backwards, and tighten the queue's edges (review of hq ADR 0219)

2026-10-05 19:45:45 +02:00

cancelled.go

Let a build agent be paused, have a build killed, and end an ask cancelled as it took it (hq ADR 0219)

2026-10-05 19:17:42 +02:00

consumer_from_now_test.go

Name the issue the event consumer fix answers: 248

2026-10-05 17:15:49 +02:00

consumer_upgrade_test.go

A consumer a machine is bound to keeps the subject that works

2026-09-29 23:55:56 +02:00

controller_buckets_test.go

Say when the mesh is wrong: conditions, watchdogs, the bus's advisories, doctor (hq to-be 45 Phase 1)

2026-10-06 10:21:11 +02:00

controller_buckets.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

derived_test.go

A seat's holders pull one ask at a time from one shared worker (hq ADR 0190, issue 186)

2026-10-02 22:34:44 +02:00

derived.go

Heal what is known, under a brake, and say every repair (hq to-be 45 Phase 3)

2026-10-06 14:26:26 +02:00

genesis_template_test.go

A token is an account on the bus, and genesis can place the list

2026-09-29 17:36:50 +02:00

invokes_test.go

A tool's grant covers the machine-addressed subject, and a credential names the seats its module claims (hq ADR 0159)

2026-10-01 13:58:23 +02:00

jetstream_test.go

Derive a seat's stream and a module's consumer, and wire JetStream

2026-09-26 22:28:42 +02:00

jetstream.go

Name the issue the event consumer fix answers: 248

2026-10-05 17:15:49 +02:00

membership_test.go

The machine runs one tool runtime, loading every delivered bundle (hq ADR 0175, to-be 38 WP2.3)

2026-10-02 18:26:54 +02:00

membership.go

Module state is hq ADR 0201 after all: the derived-value record moved to 0202 on hq main

2026-10-04 11:02:42 +02:00

nats_golden_test.go

Grant the bus's own module the snapshot API and nothing else (hq ADR 0235)

2026-10-06 18:20:57 +02:00

nats_test.go

The node's runtime reads the consumers of the modules it carries (hq ADR 0198)

2026-10-03 22:30:55 +02:00

nats.go

Grant the bus's own module the snapshot API and nothing else (hq ADR 0235)

2026-10-06 18:20:57 +02:00

onnats_test.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

onnats.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

raise_live_test.go

A module may watch a role's events, and the catch-up turns out to be unnecessary

2026-09-27 17:22:30 +02:00

raise.go

The bus's objects are raised on every start, and one switch says which bus

2026-09-27 02:59:05 +02:00

readiness_test.go

The move ends with the old broker going, not staying

2026-09-27 23:04:59 +02:00

readiness.go

The move ends with the old broker going, not staying

2026-09-27 23:04:59 +02:00

seattools_test.go

Rename node-hosts-file to node-hostname, and refuse one seat claimed under two names (hq ADR 0223)

2026-10-05 23:43:15 +02:00

snapshot_live_test.go

Grant the bus's own module the snapshot API and nothing else (hq ADR 0235)

2026-10-06 18:20:57 +02:00

snapshot_test.go

Grant the bus's own module the snapshot API and nothing else (hq ADR 0235)

2026-10-06 18:20:57 +02:00

state_test.go

Assert every declared state's bucket on each push, before the memberships that name it (novox/hq ADR 0201)

2026-10-04 11:13:34 +02:00

state.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

states_agreement_test.go

Heal what is known, under a brake, and say every repair (hq to-be 45 Phase 3)

2026-10-06 14:26:26 +02:00

streams_test.go

The mesh issues an assignment's subjects: a membership per module on a machine (hq ADR 0160)

2026-10-01 14:43:26 +02:00

streams.go

Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

2026-10-06 14:41:15 +02:00

users_test.go

Compose a bus user only for a module that can read an account

2026-10-04 17:32:50 +02:00

users.go

Grant the bus's own module the snapshot API and nothing else (hq ADR 0235)

2026-10-06 18:20:57 +02:00

worker_type_change_test.go

A worker of the wrong type on a history-keeping stream is re-made to deliver from now on, never from the start (hq issue 207)

2026-10-03 11:07:29 +02:00

writers_test.go

Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

2026-10-06 14:41:15 +02:00

writers.go

Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

2026-10-06 14:41:15 +02:00