mesh-controller

testdata

Restore the blank last line the patch route dropped from seven golden files, so the branch holds the reviewed tree (issue 875)

2026-10-16 08:29:21 +00:00

adoption.go

Admit a port from the machine's own local network, and never a public subnet (issue 154, ADR 0340)

2026-10-13 11:20:22 +02:00

artifacts.go

An address is read from the node's settings where it is used, never recorded with a port

2026-09-23 23:49:31 +02:00

backup_placement.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

bound_into_files.go

Let a requirement be optional, binding only a provider that already runs (hq issue 166, ADR 0330)

2026-10-13 01:53:18 +02:00

bound.go

Name the credential tool of a software-issued offer in the plan (issue 928)

2026-10-16 19:35:56 +02:00

build.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

busy.go

Hold a walk's first-machine gate while its busy container finishes its build

2026-10-13 00:53:10 +02:00

chosen.go

A pin names the module as well as the node; a node that answers twice is refused

2026-10-01 17:23:31 +02:00

collections.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

config_move.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

config.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

consumer_into_serves.go

List the provider-elsewhere store test, read a machine's domain as its profile, reuse the settings read once, and refuse a nested own name (hq ADR 0346, review 228)

2026-10-13 20:32:51 +02:00

consumers.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

core_credentials.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

cron.go

catalogue: carry and validate a container schedule (ADR 0053)

2026-09-06 14:08:51 +02:00

data.go

Leave out a module whose stored manifest has an unknown field, and raise it (hq ADR 0262 review)

2026-10-08 17:34:53 +02:00

declaration.go

Let a process say what it does on the bus (issue 1179)

2026-10-19 02:17:39 +02:00

delivery_seat.go

Review of issue 977: keep the plan's own order for its gates, hold a group only for a composed mesh-delivery, keep mark-ready one release, compare with the batch's start, fail a lone cycle (issue 977)

2026-10-17 21:37:37 +02:00

dir_into.go

Let an own secret name its owner (issue 1170)

2026-10-19 02:04:00 +02:00

environment_into.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

events.go

Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

2026-10-06 14:41:15 +02:00

files.go

issue 900: restore takes a reason and an override; owned paths cite ADR 0394 section 5

2026-10-16 11:30:59 +02:00

filtering.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

graphical_session.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

handed.go

Name the credential tool of a software-issued offer in the plan (issue 928)

2026-10-16 19:35:56 +02:00

health.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

identity.go

Bound a consumer's identity by the provision it requires (hq issue 263)

2026-10-06 02:16:20 +02:00

installation.go

Judge an upstream pin's host like any name, and harden the upstream unpack (review 35, hq issue 345)

2026-10-12 13:51:35 +02:00

jails_into.go

A changed jail filter restarts fail2ban

2026-10-02 23:28:25 +02:00

localnetwork.go

Admit a port from the machine's own local network, and never a public subnet (issue 154, ADR 0340)

2026-10-13 11:20:22 +02:00

logs.go

Let a module declare a log the controller creates and never removes (ADR 0297)

2026-10-11 19:22:43 +02:00

machine_into_files.go

Fill machine facts in a user's home, so an agent account named with a home is made there

2026-10-09 11:02:44 +02:00

manifest.go

Make a module's consumer from now and refuse a start word in consumes, so no part replays a week at its first start (issue 1279, ADR 0443)

2026-10-19 21:53:08 +02:00

naming.go

A provision names the engine, because a consumer is coupled to one

2026-08-31 17:12:46 +02:00

node_resolver.go

Step back from a rendered resolver file only, and compare a declared path cleaned (issue 412, review 80)

2026-10-12 17:08:55 +02:00

optional_requirements.go

Store optional requirements beside a plain requires list (hq issue 166, review of #281 )

2026-10-13 01:53:18 +02:00

outside_not_given_test.go

Make no value for an own secret issued outside the mesh that nobody gave (issue 401)

2026-10-12 17:15:12 +02:00

own_name_test.go

A module is told the name it is served under (hq 122)

2026-09-30 17:08:44 +02:00

own_secret_owner_test.go

Review round 1: assert the own secret's mode, not merely log it (issue 1170)

2026-10-19 03:18:22 +02:00

own_secret_prompt_test.go

Count an own secret's prompt by character and refuse {member} on a single secret (issue 789)

2026-10-15 15:27:06 +02:00

own_secret_taken_test.go

Replace a value given by hand like one the mesh made (hq ADR 0228)

2026-10-06 12:13:48 +02:00

pin_names_module_test.go

The first pass does not refuse two providers beside the consumer

2026-10-01 17:34:17 +02:00

placed_paths_test.go

The path-preservation proof resolves access ids to their default paths too

2026-10-01 00:01:41 +02:00

placement_test.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

placement.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

port_into_test.go

Prove the untouched environment is the same map, not an equal one

2026-09-22 23:29:28 +02:00

port_into.go

Compose a process's environment as a container's

2026-10-04 00:27:42 +02:00

predefined_test.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

predefined.go

Judge catalogue tests as the check does: the predefined list and templates read from the tree (issue 914)

2026-10-16 14:50:40 +02:00

prepares_test.go

A module's name may contain a dot, so the derived step adds none

2026-09-28 15:44:18 +02:00

print_rehearsal_test.go

The filter constrains what arrives from outside, and names no network

2026-09-29 01:01:29 +02:00

process_bus_test.go

Give a work-queue stream its one consumer, drop-only dead letters (issue 1178)

2026-10-19 02:33:22 +02:00

process_bus.go

Let a process say what it does on the bus (issue 1179)

2026-10-19 02:17:39 +02:00

process_env_test.go

Compose a process's environment as a container's

2026-10-04 00:27:42 +02:00

provided_test.go

Retire the networking bundle and what the control plane stops shipping (hq ADR 0226)

2026-10-06 14:59:28 +02:00

public_issuer_test.go

Judge tests that read another repository against what the check clones, never the desktop's checkout (issue 432)

2026-10-11 02:55:04 +02:00

published_ports_test.go

A container publishes only a port its module declares (hq issue 227)

2026-10-04 12:25:27 +02:00

reach_test.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

reads_test.go

Judge catalogue tests as the check does: the predefined list and templates read from the tree (issue 914)

2026-10-16 14:50:40 +02:00

reads.go

Name the vault's placed directories among a node's secret places, fail loudly on one that cannot be resolved, and keep the reads account out of every group (review 54, issue 418)

2026-10-12 14:30:00 +02:00

received_on_the_bus_test.go

The proxy is told its routes and the mesh on the bus, and serves internal names to the mesh only

2026-10-02 01:46:30 +02:00

recreates.go

Hold a record-policy move that changes a non-file/directory resource (issue 785)

2026-10-15 14:59:06 +02:00

reflects_renamed_test.go

The restart-on rename reads both list shapes

2026-09-17 23:35:12 +02:00

replaces_test.go

Say what each verb replaces, so the agent is pointed at it instead of a shell command (hq ADR 0245)

2026-10-07 20:44:47 +02:00

replay166_test.go

Replay issue 166 with only what the catalogue had before its fix (for mesh-lab R166)

2026-10-13 02:27:07 +02:00

replay279_test.go

Add the replays of issues 279 and 412, written with only what the catalogue had before each fix

2026-10-13 02:02:20 +02:00

replay412_test.go

Add the replays of issues 279 and 412, written with only what the catalogue had before each fix

2026-10-13 02:02:20 +02:00

replays_test.go

Replay issues 292 and 298 as tests the commit before each fix fails (hq ADR 0237)

2026-10-08 01:26:39 +02:00

resolve_keeps_references_test.go

A resolved manifest keeps a built reference in the store's own form, never the address it was reached by (hq ADR 0155)

2026-10-02 23:13:22 +02:00

resolve_loopback_test.go

A binding answered on this very node still carries an address

2026-09-14 21:11:37 +02:00

resolve_test.go

The broker credential resolves the mesh-broker seat, not the hub (issue 059)

2026-09-18 01:02:26 +02:00

resolve.go

Name the credential tool of a software-issued offer in the plan (issue 928)

2026-10-16 19:35:56 +02:00

resolved_path_test.go

Judge a definition's resolved paths where the definition is judged, by the node-engine's own rules, so a refusal never freezes a machine (review of #228 , issue 496)

2026-10-11 18:59:07 +02:00

resolver_file_is_the_uplinks_test.go

Let a module-declared seat carry needs, so mail-notifier can need node-notifier (issue 802)

2026-10-15 17:18:23 +02:00

resolver_manifests_test.go

Add the replay of issue 348, and refuse bind-dynamic now the catalogue binds once (hq issue 348)

2026-10-13 06:09:09 +02:00

retirement_event_test.go

Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

2026-10-06 14:41:15 +02:00

roster_test.go

A route's internal name says where the request arrives

2026-09-30 14:51:12 +02:00

roster.go

Test the resolver file as the uplink's, and refuse a second writer of a fact's path (hq ADR 0223)

2026-10-05 23:39:15 +02:00

routing_test.go

A route's internal name says where the request arrives

2026-09-30 14:51:12 +02:00

runonce_test.go

A run-once step may name what it reads: the pair run-once + restart-on is no longer refused (novox/hq ADR 0099)

2026-09-21 23:31:06 +02:00

runtime_gate_test.go

A tool container on the runtime's image is refused once the runtime is registered (hq ADR 0175, to-be 38 WP2.4)

2026-10-02 18:30:14 +02:00

runtime_health_test.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

runtime_test.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

runtime.go

Merge remote-tracking branch 'origin/main' into feat/900-node-files

2026-10-16 14:49:29 +02:00

schedule_test.go

catalogue: carry and validate a container schedule (ADR 0053)

2026-09-06 14:08:51 +02:00

seat_answers_before_local_test.go

A mesh seat's holder elsewhere answers before this machine's own provider (issue 258)

2026-10-05 21:14:01 +02:00

seat_contributions_test.go

Let a module-declared seat carry needs, so mail-notifier can need node-notifier (issue 802)

2026-10-15 17:18:23 +02:00

seat_contributions.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

seat_data_test.go

Narrow the bar test to what the controller owns for a moved bar; rendering is issue 915 (issue 914)

2026-10-16 14:52:13 +02:00

seat_data.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

seat_dependencies_test.go

Let a module-declared seat carry needs, so mail-notifier can need node-notifier (issue 802)

2026-10-15 17:18:23 +02:00

seat_dependencies.go

Let a module-declared seat carry needs, so mail-notifier can need node-notifier (issue 802)

2026-10-15 17:18:23 +02:00

seat_into_test.go

Tell a module where a mesh seat's holder is reached (hq ADR 0222)

2026-10-05 22:16:23 +02:00

seat_into.go

Tell a module where a mesh seat's holder is reached (hq ADR 0222)

2026-10-05 22:16:23 +02:00

seat_pass_test.go

Pass a seat held once to its only claimant when its recorded holder is assigned nowhere (issue 1317, ADR 0449)

2026-10-19 21:21:32 +00:00

seat_pass.go

Pass a seat held once to its only claimant when its recorded holder is assigned nowhere (issue 1317, ADR 0449)

2026-10-19 21:21:32 +00:00

seat_paths_test.go

Step back from a rendered resolver file only, and compare a declared path cleaned (issue 412, review 80)

2026-10-12 17:08:55 +02:00

seat_paths.go

Step back from a rendered resolver file only, and compare a declared path cleaned (issue 412, review 80)

2026-10-12 17:08:55 +02:00

seats_declared_test.go

Let a module-declared seat carry needs, so mail-notifier can need node-notifier (issue 802)

2026-10-15 17:18:23 +02:00

seats_declared.go

Give a work-queue stream its one consumer, drop-only dead letters (issue 1178)

2026-10-19 02:33:22 +02:00

seats_test.go

Merge remote-tracking branch 'origin/main' into feat/900-node-files

2026-10-16 14:49:29 +02:00

seats.go

issue 974: a rollout advances on events (a look asked by each plan saved, report and expired silent key), the 30 s ticker goes, and each tier send is said as sent

2026-10-17 13:28:34 +02:00

secret_family_test.go

Say a part waiting for the operator as needs-operator and pass its gate; add secret families (issue 386, hq ADR 0283)

2026-10-10 21:19:58 +02:00

secret_restart_test.go

Restart what reads a secret family member when the member is given again (issue 405)

2026-10-11 02:51:11 +02:00

secrets_in_environment_test.go

A module's own secret rotates when its definition says the module reads it at start (hq 180)

2026-10-01 11:41:49 +02:00

secrets_into_files_test.go

A module's own secret rotates when its definition says the module reads it at start (hq 180)

2026-10-01 11:41:49 +02:00

secrets_into_files.go

Make no value for an own secret issued outside the mesh that nobody gave (issue 401)

2026-10-12 17:15:12 +02:00

served_by_setting_test.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

served_own_names_test.go

List the provider-elsewhere store test, read a machine's domain as its profile, reuse the settings read once, and refuse a nested own name (hq ADR 0346, review 228)

2026-10-13 20:32:51 +02:00

served_own_names.go

List the provider-elsewhere store test, read a machine's domain as its profile, reuse the settings read once, and refuse a nested own name (hq ADR 0346, review 228)

2026-10-13 20:32:51 +02:00

setting_defaults_test.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

setting_defaults.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

setting_in_owner_test.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

setting_in_unit_test.go

Allow a setting in a unit's name only as a template's whole instance, never leading with a dash, at most 64 characters

2026-10-09 01:51:37 +02:00

setting_into_test.go

A definition names no installation: the check, an operator's value, a context on the git seat

2026-09-30 18:38:06 +02:00

setting_into.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

setting_takes_test.go

Judge ADR 0326 §3 only where a definition is written (hq issue 574)

2026-10-13 00:54:26 +02:00

setting_takes.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

settings_judge_test.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

settings_test.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

settings.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

several_contributions_test.go

contributes: a module's grant carries no value where it contributed several times

2026-09-24 18:54:35 +02:00

several_secrets_test.go

Review: one local name is still a local name; a local name is unique; recovery knows it; recipes read as instructions; a tag before a digest; ask fails at once when nothing serves

2026-09-21 21:03:22 +02:00

shared_account_test.go

Compose an account given only groups where its module wrote it (hq ADR 0252, issue 247)

2026-10-08 12:04:08 +02:00

shared_credential_test.go

A provider with one credential shares it with every consumer, remade for all at once (hq ADR 0158)

2026-10-01 12:26:44 +02:00

shares_test.go

Describe nfs-server's exports and test as per-node addresses, as the server exports them since the review (hq ADR 0263 rule 5)

2026-10-08 21:14:09 +02:00

shares.go

Describe nfs-server's exports and test as per-node addresses, as the server exports them since the review (hq ADR 0263 rule 5)

2026-10-08 21:14:09 +02:00

short_form_port_protocol_test.go

A short-form port keeps its protocol and still gets its machine port

2026-09-30 16:58:23 +02:00

showcase_manifest_test.go

Judge tests that read another repository against what the check clones, never the desktop's checkout (issue 432)

2026-10-11 02:55:04 +02:00

ssh_client_test.go

The ssh-client test offers every key ssh-client's files ask of forge-account, read from them (issue 985)

2026-10-17 12:43:21 +02:00

state_test.go

A state entry may say key-ttl and its bucket allows a time to live per key (issue 1154)

2026-10-18 20:53:42 +02:00

state.go

The checks running are readable through reads and carry when each started (issue 1155)

2026-10-18 20:55:18 +02:00

stream_work_queue_test.go

Give a work-queue stream its one consumer, drop-only dead letters (issue 1178)

2026-10-19 02:33:22 +02:00

streams_test.go

Hear a restricted stream only from a module's own account, never the tool runner's (issue 727)

2026-10-15 14:11:37 +02:00

streams.go

Give a work-queue stream its one consumer, drop-only dead letters (issue 1178)

2026-10-19 02:33:22 +02:00

template_test.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

template.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

templates_dir_test.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

terminal_keys.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

terminal_settings_test.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

the_bus_is_never_public_test.go

The bus is never public: the broker port is no longer a foundation opening

2026-10-02 22:52:22 +02:00

two_consumers_test.go

A consumer is a module on a machine, not a machine

2026-09-01 02:40:09 +02:00

two_resolvers_test.go

Retire the networking bundle and what the control plane stops shipping (hq ADR 0226)

2026-10-06 14:59:28 +02:00

unconsumed_placeholder_test.go

Let a shell parameter operator after a known word pass, so ${PORT:-8080} is not refused (issue 231)

2026-10-11 02:20:43 +02:00

unconsumed_placeholder.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

unhealthy_test.go

Raise a module's unhealthy urgent when its manifest says why (hq ADR 0355, issue 691)

2026-10-14 15:13:57 +02:00

unhealthy.go

Raise a module's unhealthy urgent when its manifest says why (hq ADR 0355, issue 691)

2026-10-14 15:13:57 +02:00

unknown_field.go

Place a left-out module's backup lines best effort, and refuse more identity keys (hq ADR 0262 review)

2026-10-08 18:27:50 +02:00

upgrade_test.go

Gate a release plan's first machine and roll a failed build back there (hq ADR 0236)

2026-10-06 18:56:54 +02:00

upgrade.go

Name the decision this builds: hq ADR 0236 (0235 is the bus's snapshot)

2026-10-06 18:56:54 +02:00

uplink_verbs_test.go

Name the paths a seat's holder owns, and refuse a claim or a declaration without the seat (issue 412)

2026-10-12 16:19:49 +02:00

upstream_file_test.go

Judge an upstream pin's host like any name, and harden the upstream unpack (review 35, hq issue 345)

2026-10-12 13:51:35 +02:00

vault_seat_test.go

Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

2026-10-16 08:28:38 +00:00

verbs_test.go

The mesh's own verbs are the mesh-controller seat's tools

2026-09-30 17:39:38 +02:00

verbs.go

Answer plans what-if as data, the document delivery-plan answers (issue 1324)

2026-10-19 21:40:26 +00:00

version_in_a_path_test.go

A gate judges its own send and the build it sent, and never puts the controller back behind its store (hq issue 352)

2026-10-09 17:15:40 +02:00

waits_test.go

Let the tool runner's account hear the event families its manifest names (issue 745, ADR 0367)

2026-10-14 23:05:14 +00:00

while_stopped_test.go

while-stopped names the container as the machine knows it (hq ADR 0189)

2026-10-04 04:18:22 +02:00

work_queue_consumer_test.go

Give a work-queue stream its one consumer, drop-only dead letters (issue 1178)

2026-10-19 02:33:22 +02:00

zones_test.go

The mesh's one resolver: its seat, a provider's address, zones, and a node's hosts file (hq ADR 0194, 0196, 0199)

2026-10-04 17:32:08 +02:00

zones.go

The mesh's one resolver: its seat, a provider's address, zones, and a node's hosts file (hq ADR 0194, 0196, 0199)

2026-10-04 17:32:08 +02:00