jochen ea1d3ed96d Merge main (hq ADR 0266) into the mesh-cli answer, and close what the confirmation review found ...

- The generic command verb only reads now (commandReads) and terminal-only
  commands are refused through any verb (terminalOnly). mesh-cli's
  ordinary line made neither check: `node account`, `token issue` and
  `secret export` from another node would have run. It now meets both, in
  the one function the command verb shares.
- The serving controller marks itself and its children never the terminal
  (ADR 0266); a line mesh-cli runs as the terminal drops that mark and
  carries MESH_CLI_TERMINAL, so it reads as the terminal it is.
- Two withholding tests searched the answer's text while JSON writes bytes
  as base64, so they held nothing. They search both now, each proved by
  disabling what it guards (Shown, the bus withholding, `calls` via Get).
- The control-node refusal is tested through the assign and unassign acts.

2026-10-09 13:08:48 +02:00

..

advisories_test.go

Keep what a consumer gives up on until a person delivers it again or drops it

2026-10-08 18:32:58 +02:00

advisories.go

Keep what a consumer gives up on until a person delivers it again or drops it

2026-10-08 18:32:58 +02:00

announce.go

A bundle stands on the toolchain it is compiled in (hq issue 211)

2026-10-03 22:18:20 +02:00

ask.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

build_seat_test.go

A build machine serves the seat its credential claims (hq ADR 0190, the handover)

2026-10-03 02:47:49 +02:00

build.go

Record the bases a build copies, keep them by the builds that stood on them, and copy each image once

2026-10-08 15:47:42 +02:00

builds_current_test.go

The build role is the node-scoped seat node-build-agent, and its work is shared by every holder (hq ADR 0190)

2026-10-02 22:31:55 +02:00

builds_nats_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

builds_nats.go

Serve the read verbs on the serving controller's own connection, and name every connection

2026-10-08 21:08:34 +02:00

builds.go

The controller asks the build role that has a holder, and hears both roles' outcomes (hq ADR 0190, the handover)

2026-10-03 02:51:03 +02:00

bus_nats.go

Deliver a dead letter again only where it is received, and never stop serving for the notices

2026-10-08 18:32:58 +02:00

bus_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

bus.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

calls_kept_test.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

calls_kept.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

calls_test.go

Answer a panicking verb with an error, say flag errors in the answer, and leave refused logins out of D15

2026-10-08 21:08:34 +02:00

calls.go

mesh-cli lines are calls, followed to their answer; the terminal does not follow assign (review of hq ADR 0272)

2026-10-09 12:48:12 +02:00

conformance_test.go

Hold the Go emitter to the shared fixtures

2026-09-26 23:40:59 +02:00

contracts_test.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

contracts.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

deadletters_test.go

Deliver a dead letter again only where it is received, and never stop serving for the notices

2026-10-08 18:32:58 +02:00

deadletters.go

Deliver a dead letter again only where it is received, and never stop serving for the notices

2026-10-08 18:32:58 +02:00

declare.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

enrol_bus_credential_test.go

1.7 finished: minting, the file delivered, and a test flake I caused

2026-09-27 03:19:41 +02:00

enrol_claim_test.go

Review of 083: finishing an enrolment whose token was spent takes proof of the key's private half, a live lease and a first delivery — a public key alone cannot replay a spent token; shutdown leaves held messages for the broker; identical builds supersede; what is held leaves room in the prefetch

2026-09-22 14:33:13 +02:00

enrol_proof_test.go

The enrolment proof's message has a known answer, repeated in the host's test

2026-09-22 14:33:33 +02:00

enrol_reply_probe_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

enrol_shape_test.go

A module may hold several secrets from one provider, each a pair of its own

2026-09-21 20:28:16 +02:00

enrol_tunnel_key_test.go

A token can be issued for a machine's tunnel key, and it joins through the tunnel

2026-10-08 02:06:19 +02:00

enrolment.go

A token can be issued for a machine's tunnel key, and it joins through the tunnel

2026-10-08 02:06:19 +02:00

events.go

Let a walk wait for its delivery's word, and serve the delivery's owner (hq ADR 0239)

2026-10-07 00:01:42 +02:00

handacts_test.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

handacts.go

Record a push that only moves recorded builds as the person's word, not a repair (hq issue 301)

2026-10-08 00:12:23 +02:00

health_test.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

health.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

heard_order_test.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

heard_test.go

Keep the account of the sent declaration over an older one (hq issue 267)

2026-10-06 01:45:35 +02:00

merges.go

Catch up on merges the bus announced and never handed over (hq issue 266)

2026-10-06 01:29:21 +02:00

meshcli_test.go

Merge main (hq ADR 0266) into the mesh-cli answer, and close what the confirmation review found

2026-10-09 13:08:48 +02:00

meshcli.go

mesh-cli lines are calls, followed to their answer; the terminal does not follow assign (review of hq ADR 0272)

2026-10-09 12:48:12 +02:00

order_test.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

order.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

pages_test.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

pages.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

profile_report_test.go

The vault's seat, and a report that carries the machine's profile (hq ADR 0161)

2026-10-01 15:58:04 +02:00

protocol_test.go

Hold the network statement's field names on the controller's side (hq ADR 0241)

2026-10-07 18:53:21 +02:00

protocol.go

Count the quiet after a restart from when the controller first saw the search pending

2026-10-09 12:37:18 +02:00

queue_test.go

Keep a replay from moving the mesh backwards, and tighten the queue's edges (review of hq ADR 0219)

2026-10-05 19:45:45 +02:00

queue.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

receive_fake_test.go

Report a provider that keeps failing a consumer in status (hq ADR 0224)

2026-10-06 00:13:23 +02:00

receive_nats_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

receive_nats.go

Deliver a dead letter again only where it is received, and never stop serving for the notices

2026-10-08 18:32:58 +02:00

receive.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

rekey_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

replay314_test.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

replay330_test.go

Keep what a consumer gives up on until a person delivers it again or drops it

2026-10-08 18:32:58 +02:00

report_retry_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

retirement.go

Derive data protection from a module's declared data (hq ADR 0233)

2026-10-06 16:47:49 +02:00

seattools.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

serve.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

stale_report_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

standby_nats_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

standing_test.go

Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

2026-10-06 14:41:15 +02:00

standing.go

Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

2026-10-06 14:41:15 +02:00

store_window_test.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

watched.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

window_test.go

The store window as a decision, and the problem moving it to the server

2026-09-27 00:05:52 +02:00

window.go

The consume side behind a seam, and the window wiring into the loop

2026-09-27 00:44:16 +02:00