novox/mesh-controller
6
0
Fork 0
Code Issues Pull Requests 3 Releases Wiki Activity
Files
905f3363c9eddd9bd6b76df2ede268f9c677c375
mesh-controller/internal/catalogue
T
History
jochen bde4b61b3b The build role is the node-scoped seat node-build-agent, and its work is shared by every holder (hq ADR 0190) 
One build machine built everything, in a queue of one, because the seat was mesh-scoped and a
mesh seat has one holder. ADR 0190 makes building a node role: node-build-agent, held on every
machine that builds, with the work asked of the role and taken by whichever holder is idle. The
work subject of a node-scoped seat carries no node — that token is for a seat's tools, asked of
one machine (design 33 §4) — so holders on several machines read one queue; a test now says so.

The retired mesh-build-machine row stays while the builder module's registered manifest claims
it: a claim to a seat the mesh no longer defines is refused, and the machine holding it would be
unresolvable until build-agent replaces it. Removed once no manifest claims it.

The installer's genesis template (in the host's repository) still grants the controller the old
seat's subjects; its test here says so until that template names node-build-agent.
2026-10-02 22:31:55 +02:00
..
accesses_test.go
catalogue: a module accesses operator-owned data, and does not own it
2026-09-05 22:10:58 +02:00
adoption_test.go
The filter constrains what arrives from outside, and names no network
2026-09-29 01:01:29 +02:00
adoption.go
Say that the guard names the runtime's bridges where the filter names their addresses (hq ADR 0103)
2026-09-22 19:51:10 +02:00
amqp_is_not_a_provision_test.go
AMQP is not a provision: the bus seat delivers the bus, and the word is refused
2026-09-27 23:29:00 +02:00
artifact_store_alias_test.go
The artifact store's seat is named for its scope: mesh-artifact-store
2026-09-30 21:14:40 +02:00
artifact_store_seat_test.go
The artifact store's seat is named for its scope: mesh-artifact-store
2026-09-30 21:14:40 +02:00
artifacts_test.go
An address is read from the node's settings where it is used, never recorded with a port
2026-09-23 23:49:31 +02:00
artifacts.go
An address is read from the node's settings where it is used, never recorded with a port
2026-09-23 23:49:31 +02:00
bootstrap_cycle_test.go
Rename mesh-control -> mesh-controller, substrate -> foundation
2026-09-16 18:40:40 +02:00
bound_into_files_test.go
catalogue: announce a same-node provider at the port it is published on
2026-09-09 23:02:50 +02:00
bound_into_files.go
A module is told the name it is served under (hq 122)
2026-09-30 17:08:44 +02:00
broker_seat_test.go
The artifact store's seat is named for its scope: mesh-artifact-store
2026-09-30 21:14:40 +02:00
brokered_test.go
A pin names the module as well as the node; a node that answers twice is refused
2026-10-01 17:23:31 +02:00
build_system_test.go
An artifact says which operating system it is built for
2026-09-29 00:54:27 +02:00
build_test.go
The builder resolves the SDK from the mesh registry, and can publish packages
2026-09-16 10:27:26 +02:00
build.go
The machine runs one tool runtime, loading every delivered bundle (hq ADR 0175, to-be 38 WP2.3)
2026-10-02 18:26:54 +02:00
catalogue_check_test.go
The catalogue-wide checks run against the checkout beside this one by default
2026-09-30 22:10:42 +02:00
catrust_manifest_test.go
The trust module renders the authority it was bound to
2026-09-29 15:07:33 +02:00
chosen.go
A pin names the module as well as the node; a node that answers twice is refused
2026-10-01 17:23:31 +02:00
co_located_test.go
Rename mesh-control -> mesh-controller, substrate -> foundation
2026-09-16 18:40:40 +02:00
computed_test.go
Write the registry's trust into the runtime's file and reload the runtime instead of restarting it; prefix reload-on like restart-on (hq ADR 0102)
2026-09-22 17:51:38 +02:00
contributes_test.go
A setting reaches only what declares it, the mesh places its own files, registration refuses a name
2026-09-30 22:29:28 +02:00
cron.go
catalogue: carry and validate a container schedule (ADR 0053)
2026-09-06 14:08:51 +02:00
declaration_test.go
The mesh composes the accounts; the module owns its server
2026-09-27 02:50:23 +02:00
declaration.go
The runtime's credential belongs to the account it runs as (hq to-be 38 WP3)
2026-10-02 21:44:44 +02:00
dir_into_test.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
dir_into.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
domain_test.go
Rename the mesh's seats to mesh-*, keeping their interfaces
2026-09-26 23:07:09 +02:00
endpoint_test.go
A route that names an endpoint still carries that endpoint's port
2026-09-29 11:55:28 +02:00
endpoints_setting_test.go
An assignment configures an endpoint as one thing
2026-09-29 11:25:40 +02:00
events.go
Event names are checked now, per manifest and across the catalogue
2026-09-27 14:43:16 +02:00
filtering_foundation_test.go
The filter constrains what arrives from outside, and names no network
2026-09-29 01:01:29 +02:00
filtering_test.go
The hub relays the mesh passing through it
2026-10-02 11:17:09 +02:00
filtering.go
The hub relays the mesh passing through it
2026-10-02 11:17:09 +02:00
foundation_manifests_test.go
AMQP is not a provision: the bus seat delivers the bus, and the word is refused
2026-09-27 23:29:00 +02:00
go_bundle_test.go
A bundle in a compiled language may name which command it builds
2026-09-30 09:55:54 +02:00
holdings_test.go
A claim may name the verbs it serves for its seat (hq ADR 0160)
2026-10-01 15:18:34 +02:00
hosts_region_test.go
review: hold the hosts region through composition, and say so in plan
2026-09-27 00:05:41 +02:00
identity_test.go
Resync hq ADR references 0044-0054 -> 0039-0049 after the hq record reconciliation
2026-09-05 12:47:13 +02:00
identity.go
Resync hq ADR references 0044-0054 -> 0039-0049 after the hq record reconciliation
2026-09-05 12:47:13 +02:00
installation_test.go
A definition names no installation: the check, an operator's value, a context on the git seat
2026-09-30 18:38:06 +02:00
installation.go
A definition names no installation: the check, an operator's value, a context on the git seat
2026-09-30 18:38:06 +02:00
invokes_test.go
A module may invoke tools, and a manifest is checked where it is written
2026-09-30 16:12:43 +02:00
jails_into_test.go
A module declares its fail2ban jail; the mesh composes them per node (to-be 31)
2026-09-27 17:20:50 +02:00
jails_into.go
A module declares its fail2ban jail; the mesh composes them per node (to-be 31)
2026-09-27 17:20:50 +02:00
kept_test.go
An operator key, a second seal on every own secret, and the vault keeps the export
2026-09-20 23:56:49 +02:00
licence_test.go
catalogue: deliver a keyless same-node provider's served facts
2026-09-07 05:08:04 +02:00
machine_into_files_test.go
A module can name the mesh's range: ${machine:mesh-range} (novox/hq ADR 0112)
2026-09-27 16:52:00 +02:00
machine_into_files.go
The service manager is a node seat with the unit verbs, and a user shape names the account (hq ADR 0176, 0177)
2026-10-02 16:48:16 +02:00
machineside_test.go
What review found in the port machinery, fixed
2026-09-01 21:54:05 +02:00
manifest.go
Merge pull request 'The controller composes one tool runtime per node: its principal, the bundles, its process, and the gate (hq ADR 0175, to-be 38 WP2)' (#223) from feat/the-operators-machine into main
2026-10-02 19:27:52 +00:00
mounts_test.go
A filter module's own filter file counts as declared for a mount (hq ADR 0169)
2026-10-02 14:04:35 +02:00
names_served_test.go
A routed name resolves to the node whose proxy serves it, never to a provider merely told it (hq 178)
2026-10-01 02:03:50 +02:00
names_served.go
A routed name resolves to the node whose proxy serves it, never to a provider merely told it (hq 178)
2026-10-01 02:03:50 +02:00
names_test.go
No container is given the mesh's names; it resolves them
2026-09-30 14:38:07 +02:00
naming_test.go
Refuse an action where it was written, not on the machine
2026-09-01 02:55:56 +02:00
naming.go
A provision names the engine, because a consumer is coupled to one
2026-08-31 17:12:46 +02:00
needs_test.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
no_subjects_test.go
Event names are checked now, per manifest and across the catalogue
2026-09-27 14:43:16 +02:00
operators_machine_test.go
The service manager is a node seat with the unit verbs, and a user shape names the account (hq ADR 0176, 0177)
2026-10-02 16:48:16 +02:00
own_name_test.go
A module is told the name it is served under (hq 122)
2026-09-30 17:08:44 +02:00
own_secret_taken_test.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
pin_names_module_test.go
The first pass does not refuse two providers beside the consumer
2026-10-01 17:34:17 +02:00
placed_paths_test.go
The path-preservation proof resolves access ids to their default paths too
2026-10-01 00:01:41 +02:00
placement_test.go
A take acts on the preview it showed; a setting is judged where it is stored; a kept network and a minted secret are said (hq ADR 0163)
2026-10-02 11:01:09 +02:00
placement.go
An assignment places a module's directories and its accesses (hq 153)
2026-09-30 22:42:50 +02:00
port_into_test.go
Prove the untouched environment is the same map, not an equal one
2026-09-22 23:29:28 +02:00
port_into.go
No container is given the mesh's names; it resolves them
2026-09-30 14:38:07 +02:00
prepares_test.go
A module's name may contain a dot, so the derived step adds none
2026-09-28 15:44:18 +02:00
print_rehearsal_test.go
The filter constrains what arrives from outside, and names no network
2026-09-29 01:01:29 +02:00
provided_test.go
Facts carry the format as a template, so the control plane holds none (ADR 0120)
2026-09-27 01:33:20 +02:00
reach_test.go
Reach asks for names on a routed endpoint, and its port stays the manifest's
2026-09-29 02:50:41 +02:00
received_on_the_bus_test.go
The proxy is told its routes and the mesh on the bus, and serves internal names to the mesh only
2026-10-02 01:46:30 +02:00
reflects_renamed_test.go
The restart-on rename reads both list shapes
2026-09-17 23:35:12 +02:00
resolve_loopback_test.go
A binding answered on this very node still carries an address
2026-09-14 21:11:37 +02:00
resolve_test.go
The broker credential resolves the mesh-broker seat, not the hub (issue 059)
2026-09-18 01:02:26 +02:00
resolve.go
The first pass does not refuse two providers beside the consumer
2026-10-01 17:34:17 +02:00
resolver_manifests_test.go
The virtualisation capability grants the lab its daemon's socket
2026-10-02 14:46:17 +02:00
roster_test.go
A route's internal name says where the request arrives
2026-09-30 14:51:12 +02:00
roster.go
A route's internal name says where the request arrives
2026-09-30 14:51:12 +02:00
routing_test.go
A route's internal name says where the request arrives
2026-09-30 14:51:12 +02:00
runonce_test.go
A run-once step may name what it reads: the pair run-once + restart-on is no longer refused (novox/hq ADR 0099)
2026-09-21 23:31:06 +02:00
runtime_gate_test.go
A tool container on the runtime's image is refused once the runtime is registered (hq ADR 0175, to-be 38 WP2.4)
2026-10-02 18:30:14 +02:00
runtime_test.go
The runtime's credential belongs to the account it runs as (hq to-be 38 WP3)
2026-10-02 21:44:44 +02:00
runtime.go
A tool container on the runtime's image is refused once the runtime is registered (hq ADR 0175, to-be 38 WP2.4)
2026-10-02 18:30:14 +02:00
schedule_test.go
catalogue: carry and validate a container schedule (ADR 0053)
2026-09-06 14:08:51 +02:00
seat_into_test.go
A store row keeps its seat's protocol, and a holder may take work from its queue
2026-09-28 02:08:56 +02:00
seat_into.go
An address is read from the node's settings where it is used, never recorded with a port
2026-09-23 23:49:31 +02:00
seats_declared_test.go
A claim may name the verbs it serves for its seat (hq ADR 0160)
2026-10-01 15:18:34 +02:00
seats_declared.go
A claim may name the verbs it serves for its seat (hq ADR 0160)
2026-10-01 15:18:34 +02:00
seats_test.go
The build role is the node-scoped seat node-build-agent, and its work is shared by every holder (hq ADR 0190)
2026-10-02 22:31:55 +02:00
seats.go
The build role is the node-scoped seat node-build-agent, and its work is shared by every holder (hq ADR 0190)
2026-10-02 22:31:55 +02:00
secrets_in_environment_test.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
secrets_into_files_test.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
secrets_into_files.go
A module may hold several secrets from one provider, each a pair of its own
2026-09-21 20:28:16 +02:00
setting_into_test.go
A definition names no installation: the check, an operator's value, a context on the git seat
2026-09-30 18:38:06 +02:00
setting_into.go
A served value or a contribution's may be the operator's: ${setting:…} fills there too, refused by name when unset
2026-09-30 22:34:43 +02:00
settings_judge_test.go
A take acts on the preview it showed; a setting is judged where it is stored; a kept network and a minted secret are said (hq ADR 0163)
2026-10-02 11:01:09 +02:00
settings_test.go
A served value or a contribution's may be the operator's: ${setting:…} fills there too, refused by name when unset
2026-09-30 22:34:43 +02:00
settings.go
A take acts on the preview it showed; a setting is judged where it is stored; a kept network and a minted secret are said (hq ADR 0163)
2026-10-02 11:01:09 +02:00
several_contributions_test.go
contributes: a module's grant carries no value where it contributed several times
2026-09-24 18:54:35 +02:00
several_secrets_test.go
Review: one local name is still a local name; a local name is unique; recovery knows it; recipes read as instructions; a tag before a digest; ask fails at once when nothing serves
2026-09-21 21:03:22 +02:00
shared_credential_test.go
A provider with one credential shares it with every consumer, remade for all at once (hq ADR 0158)
2026-10-01 12:26:44 +02:00
short_form_port_protocol_test.go
A short-form port keeps its protocol and still gets its machine port
2026-09-30 16:58:23 +02:00
showcase_manifest_test.go
A module can be told which port it was given
2026-09-15 13:20:01 +02:00
ssh_client_test.go
The mesh owns the operator's ~/.ssh: account fact + home-scoped resources (to-be 29)
2026-09-27 17:50:56 +02:00
two_consumers_test.go
A consumer is a module on a machine, not a machine
2026-09-01 02:40:09 +02:00
vault_seat_test.go
The vault's seat, and a report that carries the machine's profile (hq ADR 0161)
2026-10-01 15:58:04 +02:00
verbs_test.go
The mesh's own verbs are the mesh-controller seat's tools
2026-09-30 17:39:38 +02:00
verbs.go
The controller seat gains a generic verb: command runs one line of the binary and answers what it printed
2026-10-02 16:53:27 +02:00
version_in_a_path_test.go
A resource can name the version of the build it uses
2026-09-30 10:03:55 +02:00