novox/mesh-controller
3
0
Fork 0
Code Issues Pull Requests 1 Releases Wiki Activity
Files
c9a0b1f9f435d365ba5e8934c0a528df04c3a56f
mesh-controller/internal/catalogue
T
History
jschoubben 603ad61142 The mesh issues an assignment's subjects: a membership per module on a machine (hq ADR 0160) 
For every module on every machine the controller composes what that instance serves — its machine's
address always, the module's plain address in a queue when it is alone or its definition says its
instances are interchangeable — the verbs of the seats it holds at the seats' subjects, where its
events land, and what it may reach, resolved the same way for the modules it invokes. Published
beside the node's declaration on `mesh.assignment.<node>.<module>`, last per subject in a stream
that allows direct reads, and the account may read exactly its own. Composed from the same records
the bus's accounts are, so what a runtime serves and what its account may are one composition.
`instances: interchangeable` is the one fact a definition states for it.

The shape issued is the shape the mesh already had, so nothing moves when the membership arrives;
the runtime that reads it instead of deriving it is the next piece.
2026-10-01 14:43:26 +02:00
..
accesses_test.go
catalogue: a module accesses operator-owned data, and does not own it
2026-09-05 22:10:58 +02:00
adoption_test.go
The filter constrains what arrives from outside, and names no network
2026-09-29 01:01:29 +02:00
adoption.go
Say that the guard names the runtime's bridges where the filter names their addresses (hq ADR 0103)
2026-09-22 19:51:10 +02:00
amqp_is_not_a_provision_test.go
AMQP is not a provision: the bus seat delivers the bus, and the word is refused
2026-09-27 23:29:00 +02:00
artifact_store_alias_test.go
The artifact store's seat is named for its scope: mesh-artifact-store
2026-09-30 21:14:40 +02:00
artifact_store_seat_test.go
The artifact store's seat is named for its scope: mesh-artifact-store
2026-09-30 21:14:40 +02:00
artifacts_test.go
An address is read from the node's settings where it is used, never recorded with a port
2026-09-23 23:49:31 +02:00
artifacts.go
An address is read from the node's settings where it is used, never recorded with a port
2026-09-23 23:49:31 +02:00
bootstrap_cycle_test.go
Rename mesh-control -> mesh-controller, substrate -> foundation
2026-09-16 18:40:40 +02:00
bound_into_files_test.go
catalogue: announce a same-node provider at the port it is published on
2026-09-09 23:02:50 +02:00
bound_into_files.go
A module is told the name it is served under (hq 122)
2026-09-30 17:08:44 +02:00
broker_seat_test.go
The artifact store's seat is named for its scope: mesh-artifact-store
2026-09-30 21:14:40 +02:00
brokered_test.go
A consumer is a module on a machine, not a machine
2026-09-01 02:40:09 +02:00
build_system_test.go
An artifact says which operating system it is built for
2026-09-29 00:54:27 +02:00
build_test.go
The builder resolves the SDK from the mesh registry, and can publish packages
2026-09-16 10:27:26 +02:00
build.go
A resource can name the version of the build it uses
2026-09-30 10:03:55 +02:00
catalogue_check_test.go
The catalogue-wide checks run against the checkout beside this one by default
2026-09-30 22:10:42 +02:00
catrust_manifest_test.go
The trust module renders the authority it was bound to
2026-09-29 15:07:33 +02:00
co_located_test.go
Rename mesh-control -> mesh-controller, substrate -> foundation
2026-09-16 18:40:40 +02:00
computed_test.go
Write the registry's trust into the runtime's file and reload the runtime instead of restarting it; prefix reload-on like restart-on (hq ADR 0102)
2026-09-22 17:51:38 +02:00
contributes_test.go
A setting reaches only what declares it, the mesh places its own files, registration refuses a name
2026-09-30 22:29:28 +02:00
cron.go
catalogue: carry and validate a container schedule (ADR 0053)
2026-09-06 14:08:51 +02:00
declaration_test.go
The mesh composes the accounts; the module owns its server
2026-09-27 02:50:23 +02:00
declaration.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
dir_into_test.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
dir_into.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
domain_test.go
Rename the mesh's seats to mesh-*, keeping their interfaces
2026-09-26 23:07:09 +02:00
endpoint_test.go
A route that names an endpoint still carries that endpoint's port
2026-09-29 11:55:28 +02:00
endpoints_setting_test.go
An assignment configures an endpoint as one thing
2026-09-29 11:25:40 +02:00
events.go
Event names are checked now, per manifest and across the catalogue
2026-09-27 14:43:16 +02:00
filtering_foundation_test.go
The filter constrains what arrives from outside, and names no network
2026-09-29 01:01:29 +02:00
filtering_test.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
filtering.go
Anything on this machine may call anything on this machine
2026-09-29 13:30:32 +02:00
foundation_manifests_test.go
AMQP is not a provision: the bus seat delivers the bus, and the word is refused
2026-09-27 23:29:00 +02:00
go_bundle_test.go
A bundle in a compiled language may name which command it builds
2026-09-30 09:55:54 +02:00
holdings_test.go
A holder by derivation is recorded before an assignment can unsettle it (hq 170)
2026-09-30 14:39:59 +02:00
hosts_region_test.go
review: hold the hosts region through composition, and say so in plan
2026-09-27 00:05:41 +02:00
identity_test.go
Resync hq ADR references 0044-0054 -> 0039-0049 after the hq record reconciliation
2026-09-05 12:47:13 +02:00
identity.go
Resync hq ADR references 0044-0054 -> 0039-0049 after the hq record reconciliation
2026-09-05 12:47:13 +02:00
installation_test.go
A definition names no installation: the check, an operator's value, a context on the git seat
2026-09-30 18:38:06 +02:00
installation.go
A definition names no installation: the check, an operator's value, a context on the git seat
2026-09-30 18:38:06 +02:00
invokes_test.go
A module may invoke tools, and a manifest is checked where it is written
2026-09-30 16:12:43 +02:00
jails_into_test.go
A module declares its fail2ban jail; the mesh composes them per node (to-be 31)
2026-09-27 17:20:50 +02:00
jails_into.go
A module declares its fail2ban jail; the mesh composes them per node (to-be 31)
2026-09-27 17:20:50 +02:00
kept_test.go
An operator key, a second seal on every own secret, and the vault keeps the export
2026-09-20 23:56:49 +02:00
licence_test.go
catalogue: deliver a keyless same-node provider's served facts
2026-09-07 05:08:04 +02:00
machine_into_files_test.go
A module can name the mesh's range: ${machine:mesh-range} (novox/hq ADR 0112)
2026-09-27 16:52:00 +02:00
machine_into_files.go
The mesh owns the operator's ~/.ssh: account fact + home-scoped resources (to-be 29)
2026-09-27 17:50:56 +02:00
machineside_test.go
What review found in the port machinery, fixed
2026-09-01 21:54:05 +02:00
manifest.go
The mesh issues an assignment's subjects: a membership per module on a machine (hq ADR 0160)
2026-10-01 14:43:26 +02:00
mounts_test.go
Review: a failure is the same by resource id, not by the host's words; bound files and /run/docker.sock are declared
2026-09-21 19:23:02 +02:00
names_served_test.go
A routed name resolves to the node whose proxy serves it, never to a provider merely told it (hq 178)
2026-10-01 02:03:50 +02:00
names_served.go
A routed name resolves to the node whose proxy serves it, never to a provider merely told it (hq 178)
2026-10-01 02:03:50 +02:00
names_test.go
No container is given the mesh's names; it resolves them
2026-09-30 14:38:07 +02:00
naming_test.go
Refuse an action where it was written, not on the machine
2026-09-01 02:55:56 +02:00
naming.go
A provision names the engine, because a consumer is coupled to one
2026-08-31 17:12:46 +02:00
needs_test.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
no_subjects_test.go
Event names are checked now, per manifest and across the catalogue
2026-09-27 14:43:16 +02:00
own_name_test.go
A module is told the name it is served under (hq 122)
2026-09-30 17:08:44 +02:00
own_secret_taken_test.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
placed_paths_test.go
The path-preservation proof resolves access ids to their default paths too
2026-10-01 00:01:41 +02:00
placement_test.go
An assignment places a module's directories and its accesses (hq 153)
2026-09-30 22:42:50 +02:00
placement.go
An assignment places a module's directories and its accesses (hq 153)
2026-09-30 22:42:50 +02:00
port_into_test.go
Prove the untouched environment is the same map, not an equal one
2026-09-22 23:29:28 +02:00
port_into.go
No container is given the mesh's names; it resolves them
2026-09-30 14:38:07 +02:00
prepares_test.go
A module's name may contain a dot, so the derived step adds none
2026-09-28 15:44:18 +02:00
print_rehearsal_test.go
The filter constrains what arrives from outside, and names no network
2026-09-29 01:01:29 +02:00
provided_test.go
Facts carry the format as a template, so the control plane holds none (ADR 0120)
2026-09-27 01:33:20 +02:00
reach_test.go
Reach asks for names on a routed endpoint, and its port stays the manifest's
2026-09-29 02:50:41 +02:00
reflects_renamed_test.go
The restart-on rename reads both list shapes
2026-09-17 23:35:12 +02:00
resolve_loopback_test.go
A binding answered on this very node still carries an address
2026-09-14 21:11:37 +02:00
resolve_test.go
The broker credential resolves the mesh-broker seat, not the hub (issue 059)
2026-09-18 01:02:26 +02:00
resolve.go
A provider with one credential shares it with every consumer, remade for all at once (hq ADR 0158)
2026-10-01 12:26:44 +02:00
resolver_manifests_test.go
No container is given the mesh's names; it resolves them
2026-09-30 14:38:07 +02:00
roster_test.go
A route's internal name says where the request arrives
2026-09-30 14:51:12 +02:00
roster.go
A route's internal name says where the request arrives
2026-09-30 14:51:12 +02:00
routing_test.go
A route's internal name says where the request arrives
2026-09-30 14:51:12 +02:00
runonce_test.go
A run-once step may name what it reads: the pair run-once + restart-on is no longer refused (novox/hq ADR 0099)
2026-09-21 23:31:06 +02:00
schedule_test.go
catalogue: carry and validate a container schedule (ADR 0053)
2026-09-06 14:08:51 +02:00
seat_into_test.go
A store row keeps its seat's protocol, and a holder may take work from its queue
2026-09-28 02:08:56 +02:00
seat_into.go
An address is read from the node's settings where it is used, never recorded with a port
2026-09-23 23:49:31 +02:00
seats_declared_test.go
The mesh's own verbs are the mesh-controller seat's tools
2026-09-30 17:39:38 +02:00
seats_declared.go
The mesh's own verbs are the mesh-controller seat's tools
2026-09-30 17:39:38 +02:00
seats_test.go
The store owns the seat set, so only the control plane may judge a claim
2026-09-27 21:59:40 +02:00
seats.go
A build says what it does on the bus, as it happens (novox/hq ADR 0157)
2026-10-01 00:43:07 +02:00
secrets_in_environment_test.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
secrets_into_files_test.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
secrets_into_files.go
A module may hold several secrets from one provider, each a pair of its own
2026-09-21 20:28:16 +02:00
setting_into_test.go
A definition names no installation: the check, an operator's value, a context on the git seat
2026-09-30 18:38:06 +02:00
setting_into.go
A served value or a contribution's may be the operator's: ${setting:…} fills there too, refused by name when unset
2026-09-30 22:34:43 +02:00
settings_test.go
A served value or a contribution's may be the operator's: ${setting:…} fills there too, refused by name when unset
2026-09-30 22:34:43 +02:00
settings.go
Merge main into the branch: the assignment's placement sits beside the mesh's own place (issue 174)
2026-09-30 23:47:09 +02:00
several_contributions_test.go
contributes: a module's grant carries no value where it contributed several times
2026-09-24 18:54:35 +02:00
several_secrets_test.go
Review: one local name is still a local name; a local name is unique; recovery knows it; recipes read as instructions; a tag before a digest; ask fails at once when nothing serves
2026-09-21 21:03:22 +02:00
shared_credential_test.go
A provider with one credential shares it with every consumer, remade for all at once (hq ADR 0158)
2026-10-01 12:26:44 +02:00
short_form_port_protocol_test.go
A short-form port keeps its protocol and still gets its machine port
2026-09-30 16:58:23 +02:00
showcase_manifest_test.go
A module can be told which port it was given
2026-09-15 13:20:01 +02:00
ssh_client_test.go
The mesh owns the operator's ~/.ssh: account fact + home-scoped resources (to-be 29)
2026-09-27 17:50:56 +02:00
two_consumers_test.go
A consumer is a module on a machine, not a machine
2026-09-01 02:40:09 +02:00
verbs_test.go
The mesh's own verbs are the mesh-controller seat's tools
2026-09-30 17:39:38 +02:00
verbs.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
version_in_a_path_test.go
A resource can name the version of the build it uses
2026-09-30 10:03:55 +02:00