650 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
jschoubben	7dbf7a19a1	Grants part: compose a principal for every own bus account, a tools bundle's with what it may remove, so the bus tools remove the controller's dead-letter consumer and the engine's acts on their own account (issue 1952 S5) ... Pins mesh-sdk 7000bd5.	2026-10-29 21:56:13 +01:00
jschoubben	e1fd3eb0f6	View: answer status from the buckets it reads and derive motion with mesh-sdk's MotionOf, so status leaves the controller and the keeper judges a delivery as the view does (issue 1952 V1)	2026-10-29 21:52:42 +01:00
jschoubben	73280f85c3	Assigner: write each condition it says as a finding too, and say it straight only until the take-over, so its holds reach the operator through the condition keeper and never twice (issue 1952 WM6)	2026-10-29 21:49:25 +01:00
jschoubben	b8e8981730	Grants part: hear root-not-free from the seat the take-over key names, never both, so the switch to the condition keeper moves it with the router (issue 1952 G1) ... Watchman: subscribe exactly what its grant lets it hear (buscompose.WatchmanHears). Both pin mesh-sdk 69fcb6c.	2026-10-29 21:46:29 +01:00
jschoubben	da787ae360	Watchman: hold mesh-watchdogs and write its watchdogs as findings, so health can leave the controller (issue 1952 WM1-WM5) ... The signals rows S1, S8, S9, S10, S11, S21 and the haves' unhealthy and needs-operator are pulses whose expiry is a finding; stuck keys and presence are its own findings; it keeps the dead letters from the lease write on its own consumer, lists and shows them, and refuses deliver and drop until the hand-act log's home (issue 1953). Tools read every state it keeps and start resync. Pins mesh-sdk 2a04bf0.	2026-10-29 21:44:18 +01:00
jschoubben	013b7420f6	mesh-grants: hold a grant only while the loaded list lacks its permissions, read from the part's own record of the lists it sealed, so a release whose bus tools are down still moves (issue 774)	2026-10-29 21:18:21 +01:00
jschoubben	c7fbc530da	mesh-grants: compose the user list from the running and the trunk manifest, and write a grant only once the loaded list carries it, so L3's parts never use a subject the bus has not loaded (issue 774)	2026-10-29 21:15:55 +01:00
jschoubben	98ad1aa252	Pin mesh-sdk 22c9ddd in the modules L3 changes, the L3 re-land group's sdk head (issue 774)	2026-10-29 21:07:00 +01:00
jschoubben	b01cf63237	Revert "Merge pull request 'Revert L3: its node-engine removed every held module on novox, the bus server among them (issue 774)' (#109) from revert/774-l3 into main" ... This reverts commit c1b4533201, reversing changes made to d8274204fb.	2026-10-29 21:05:14 +01:00
mesh-tools	883d976b5f	Merge pull request 'Builder: announce a done build again, so the controller composes a module whose composition and grant were lost (recovery of novox and ace, 2026-10-29)' (#111) from fix/announce-done-again into main	2026-10-29 19:47:58 +00:00
jschoubben	ba4bfea0a4	Remove the PR description draft from the branch; it is kept outside the repository	2026-10-29 17:59:28 +01:00
jschoubben	fb7ad5cd73	Add builder_announce_again so a done build can be taken in and composed again ... Recovery of photos and link2pay on novox, 2026-10-29: their composition and grant were lost and no tool wrote a done key again. Quick fix: rewrite the done key unchanged as a new revision. Thorough fix: ADR 0547, the node agent composes its own and the assigner stops waiting on controller compositions (design 47).	2026-10-29 17:58:39 +01:00
mesh-tools	5e931eac19	Merge pull request 'The assigner never keeps a want back because a provider is unhealthy, and the canary gates only modules that run (issue 1960)' (#110) from fix/1960-no-hold-spread into main	2026-10-29 15:35:28 +00:00
jschoubben	d54eab4052	Never keep a want back for an unhealthy provider, nor a first want for the canary where nothing runs: the module is wanted and its provider down is said (issue 1960) ... On novox on 2026-10-29 the assigner wrote no want for de-spiegel and link2pay (rule 5: no provider of route runs healthy) nor photos (rule 5: no provider of s3-bucket), and none where no node of a module was online (rule 3). A module with no want is on no list and nothing applies it; a site runs while the proxy in front of it is down. - Quick fix: skip rules 3 and 5 for the three modules' first wants. Leaves rule 5 holding every move and the canary holding new assignments. - Thorough fix, chosen: rule 5 holds no want; it is said per node (Outcome.Unreached, journaled once per words by the pass). The canary (rule 3) no longer holds the first want of a node that does not run the module. A node that runs it keeps the canary order: at an older composed and granted fingerprint of the new form its first want stays at what it runs; at an old-form build it waits for the canary as before (issue 1945); at an older fingerprint with no composition or grant it gets F. This departs from ADR 0429 §6, which makes every provider healthy a rule of every want. Tests: rows changed in the existing rule tests, and rows for today's modules (route-proxy down: de-spiegel and link2pay wanted; minio not healthy: photos moves; novox offline: a first want written, a move kept back).	2026-10-29 16:04:39 +01:00
mesh-tools	c1b4533201	Merge pull request 'Revert L3: its node-engine removed every held module on novox, the bus server among them (issue 774)' (#109) from revert/774-l3 into main	2026-10-29 08:59:55 +00:00
jschoubben	6771db22ae	Revert L3 (mesh-delivery, merge d827420): its node-engine removed every held module on novox, the bus server among them, at 08:54 CET on 2026-10-29 (issue 774) ... L3 lands again with two fixes: a held module is never removed, and the grants cover L3's new subjects.	2026-10-29 09:42:29 +01:00
mesh-tools	d8274204fb	Merge pull request 'L3: mesh-grants writes the wanted accounts and grants, the checker's try seat, placement alone after the lease (issue 774, ADR 0561), rebased onto L2' (#105) from feat/774-vault-mints-l2 into main	2026-10-29 07:44:27 +00:00
jschoubben	17c79f25f0	Merge remote-tracking branch 'origin/main' into l3-md-main	2026-10-29 02:15:27 +01:00
mesh-tools	d4cbfc1359	Merge pull request 'Assigner pins mesh-sdk 76f7c4d, which defines the seat mesh-delivery-checker, so L3's check can compose (issue 774)' (#108) from fix/assigner-pin-checker-seat into main	2026-10-28 23:59:03 +00:00
jschoubben	e0af965d8b	Assigner pins mesh-sdk 76f7c4d, which defines the seat mesh-delivery-checker: the check composes with the running assigner's mesh-sdk, so L3's checker claim is refused until this runs (issue 774, kind of issue 1585)	2026-10-29 00:35:07 +01:00
jschoubben	64d364a768	Assigner pins mesh-sdk 76f7c4d, a pull request's head holding 8eafc0c and 77b48a4: the checker refuses a pin to a merge commit on main (issue 774)	2026-10-29 00:20:03 +01:00
jschoubben	2caaa6fc92	Merge main into L3: the assigner pins mesh-sdk main d747c11, which holds both L3's sdk and the seed's held-as-today fix (issue 774)	2026-10-28 23:50:43 +01:00
mesh-tools	fa075dc880	Merge pull request 'Assigner: pin mesh-sdk 06b13ec, so a seed's brief shows what stays held as today (issue 1126)' (#107) from fix/1126-seed-held into main	2026-10-28 22:20:54 +00:00
jschoubben	f6df07605d	Merge remote-tracking branch 'origin/main' into l3r/774-vault-mints ... # Conflicts: # modules/mesh-delivery-assigner/cmd/mesh-delivery-assigner/seat_tools_test.go	2026-10-28 23:00:04 +01:00
jschoubben	fc3883b0b6	Assigner: pin mesh-sdk 77b48a4, so the seed's Approve names the differences it carries (issue 1126)	2026-10-28 22:41:03 +01:00
mesh-tools	5b2e5bc537	Merge pull request 'The checker writes a loud verdict where it cannot judge, so no Approve waits silently (issue 1733)' (#104) from fix/1733-no-hour into main	2026-10-28 21:29:56 +00:00
jschoubben	25953c6ae1	Assigner: pin mesh-sdk 06b13ec, so a seed's brief shows what stays held as today (issue 1126)	2026-10-28 22:18:31 +01:00
mesh-tools	38f89c6976	Merge pull request 'The assigner serves the seat mesh-placement's verbs on the seat's own name (issue 1126)' (#106) from fix/1126-seat-names into main	2026-10-28 21:14:13 +00:00
jschoubben	49ea5c96e3	Assigner: serve the seat mesh-placement's verbs as <seat>.<verb>, the name the tool runner serves a seat's verb from (issue 1126)	2026-10-28 22:07:05 +01:00
jschoubben	7692f201df	Pin mesh-sdk 8eafc0c, the L3 group's head on mesh-sdk main with #120 and #121 (issue 774)	2026-10-28 21:56:06 +01:00
jschoubben	09da8d741e	The assigner's laying again and its seed again know the lease write too, so a proposal laid again after it is judged as its first laying was (issue 774, ADR 0567 §8; re-review)	2026-10-28 21:54:47 +01:00
jschoubben	b2351a213d	Follow L2 under L3: the builder, checker, indexer and view read the seat mesh-placement's placement, the seat's Leased is the lease handed away, and the view keeps no read of the indexer's placement L2 removed (issue 774, ADR 0567 §8, ADR 0549 §3)	2026-10-28 21:54:47 +01:00
jschoubben	2abceb1913	Pin mesh-sdk 4e6e5cc, the L3 group's head rebased on L2, in the six modules the group changes (issue 774)	2026-10-28 21:54:47 +01:00
jschoubben	685810720e	mesh-grants: place by the catalogue's placement alone once the controller's lease is handed away, and refuse any other reader of the assignments in this repository (issue 774, ADR 0549 §3, §6) ... Why: after the lease write the assignments are frozen, so the part's union kept a module the catalogue takes off a node with its account, grant, membership and user-list entry. The lease is read as the assigner reads it (buscompose.LeaseHandedAway); before it, or with no placement on the bus, the union stands. The read stays declared until the first change after the lease write, named in modules/assignments-readers with the assigner; a TestGrants row refuses any other module.json that reads mesh-controller.assignments, as mesh-catalog's checks/placement does for the catalogue.	2026-10-28 21:54:47 +01:00
jschoubben	8e25926e91	mesh-grants: the node-engine's manifest is placed on every node, so its declared state is asserted and created as a placed module's, and it adds no account (issue 774, ADR 0563 §2, §3)	2026-10-28 21:54:47 +01:00
jschoubben	68628bfd78	Pin mesh-sdk 277a5bd, the L3 group's head, in the assigner, builder, checker, indexer, view and grants; the assigner's manifest test names mesh-grants.grants, its integration test no unused import (issue 774)	2026-10-28 21:54:47 +01:00
jschoubben	1dbb7c5740	mesh-delivery-view: node_trusts answers in one call whether every node's record names the vault's signing key, the gate before the controller's lease is handed away (issue 774, ADR 0550 §2, design 47 L3 s6b)	2026-10-28 21:54:47 +01:00
jschoubben	9e3d1d5e68	The assigner reads the catalogue's placement alone once the controller's lease is handed away, and reads the lease to know it (issue 774, ADR 0549 §5, §6)	2026-10-28 21:54:47 +01:00
jschoubben	9a70d697af	The view shows a row per module the catalogue's placement puts on a node, and reads the controller's assignments no more (issue 774, ADR 0549 §3)	2026-10-28 21:54:47 +01:00
jschoubben	a4116a1de7	Builder, checker and indexer count a build node's toolchain only where the catalogue's placement puts its build module, through mesh-sdk's one gate, and read the controller's assignments no more (issue 774, ADR 0549 §3, issue 1940)	2026-10-28 21:54:47 +01:00
jschoubben	6f721dd536	mesh-grants: say every placed module left without a grant, in the pass and as the condition mesh-grants.grant-missing once the lease is handed away (issue 1126, ADR 0547 §5) ... Why: the controller's grant writer skipped link2pay, snake, f1-circuits and txt-game in silence (it read the fingerprint by their unchanged commit, a build of the old form) and the take-in said 'its grant written'. The part already reads the fingerprint from the indexer's value, so those four are granted at their src2 done key's fingerprint; a row proves it. What a pass leaves without a grant (no fingerprint of the new form with the indexer's none2, a refused manifest, no hashed account) is now said rather than passed over. Quick: log it. Thorough (chosen): the pass's Missing, shown by the grants tool, and a warning condition raised and cleared on change, as consumer-differs is.	2026-10-28 21:54:47 +01:00
jschoubben	354b9ea396	mesh-delivery-assigner: read grants from the source the lease names (issue 774, ADR 0547 §4) ... Why: from the lease write the grants part's state grants is the source and the controller's bucket otherwise; the assigner follows the lease key (a pass only when the source changes), and neither bucket stops its start. Needs the group's mesh-sdk pin (GrantSource, LeaseHandedAway, the assigner a named reader of the lease).	2026-10-28 21:54:47 +01:00
jschoubben	3618831992	mesh-grants: write grants.<module>.<fp> in shadow into the state grants, say grant-written, and show every difference from the controller's in grants_grants (issue 774, ADR 0547 §5) ... Why: the assigner switches its grants source when the controller's lease is handed away; until then the written keys are compared with the controller's, so the switch rests on a measured equality. Needs the group's mesh-sdk pin (PartGrantKey) before it builds.	2026-10-28 21:54:47 +01:00
jschoubben	843a1589d7	Fold the seat verbs' test into the try tools test; pin the sdk head (issue 774)	2026-10-28 21:54:47 +01:00
jschoubben	fc6d5dcbdb	mesh-delivery-checker claims its seat and serves try, try-read and try-end by the tools' own code, so the try outlives the controller (ADR 0547 §10, issue 774)	2026-10-28 21:54:47 +01:00
jschoubben	6d709e1fc1	mesh-grants: grants_accept_hashes releases the clause 7 hold once, for exactly the held users of the held list, with why, said as hashes-accepted (issue 774, ADR 0561 §7, §9)	2026-10-28 21:54:35 +01:00
jschoubben	eb11b2c844	mesh-grants: hold a list that changes several loaded users' hashes at once with no rotation by the vault naming them, and raise user-list-held naming them (issue 774, ADR 0561 §7)	2026-10-28 21:54:35 +01:00
jschoubben	67e3ebf22f	mesh-grants: grants_accounts reads the account consumers' differences in shadow, where no condition is raised (issue 774, ADR 0561 §6, §9)	2026-10-28 21:54:35 +01:00
jschoubben	9b31746cdb	mesh-grants: raise a condition when an account consumer differs from its composed configuration, and bring one to it by hand with grants_consumer_match, never under the controller's lease (issue 774, ADR 0561 §6, §9)	2026-10-28 21:54:35 +01:00
jschoubben	ebad58f7e2	mesh-grants: create the durable consumers an account needs from the lease write, compared in shadow until then, so a module assigned after the controller leaves still hears what it consumes (issue 774, ADR 0561 §6)	2026-10-28 21:54:35 +01:00