579 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	e564eaf75f	Grants: write the hearings it withholds to its state withheld on change, so the self-check's probe D-heard reads them from the bus and not the controller's store (issue 1955)	2026-10-29 23:51:48 +01:00
jschoubben	a54d1acf45	View: answer builder_history from the builder's log, each build's end with its duration from its start (issue 1955, ADR 0571 §1)	2026-10-29 23:48:14 +01:00
jschoubben	e82ea89c23	Assigner: read the running commit of a reader of the manifests from the builder's log, and hold the buckets it starts without in one list so the start test skips them (issue 1955, ADR 0571 §1)	2026-10-29 23:48:14 +01:00
jschoubben	06b58bc83b	Indexer: take directories and outside-built registrations from the builder's log, watched from its start, so no build record of the controller's is read (issue 1955, ADR 0571 §1)	2026-10-29 23:48:14 +01:00
jschoubben	17c0734fb2	Builder: keep each build's start and end in its own module log build-log, and answer builder_builds_since from it, so readers and mesh-catalog read the builder's history without a bare stream (issue 1955, ADR 0571 §1, §9)	2026-10-29 23:48:14 +01:00
jschoubben	c045057ca0	Assigner: write who holds which seat from placement into seat-holders, only the keys a change moves, and answer it from placement's seats, so readers no longer ask the controller's seats (issue 1955, ADR 0571 §4) ... Pins mesh-sdk f9a496d.	2026-10-29 23:14:28 +01:00
jschoubben	b44f01f89c	Builder: write each build's start and end to its own log on the bus, and ask the seat artifact-store's held and hear its artifacts-gone, the controller's only until the lease write, so build history and the store's sweep leave the controller (issue 1955, ADR 0571 §1, §2) ... Pins mesh-sdk f9a496d.	2026-10-29 23:13:32 +01:00
jschoubben	229a3e9855	Assigner: from the lease write rule 7 reads a placed node's own composition digest from its have, an unplaced node gets no want and is said, and the controller's compositions are read only until then (issue 1955, ADR 0571 §6)	2026-10-29 23:10:31 +01:00
jschoubben	e5192f55ee	View: read no build record and no composition of the controller's: fingerprints against the builder's done keys alone, a move's judgement from the node agent's have (issue 1955, ADR 0571 §1, §6)	2026-10-29 23:08:46 +01:00
jschoubben	ee2f1efe78	Watchman: hold a failing network part at the machines it points at, as the controller does, so a machine others cannot reach is said once there and not as each reporter's own (issue 774) ... Pins mesh-sdk 6eae076.	2026-10-29 23:06:19 +01:00
jschoubben	8a91871de6	Watchman: raise machine-network, network-rewritten, network-unreachable, machine-units, relogin-needed and directory-used-as-found from each node's own health report, under the controller's keys, so these alerts outlive the controller's lease (issue 774) ... Pins mesh-sdk 94d0de5.	2026-10-29 23:01:03 +01:00
jschoubben	64a5074d58	Assigner: lay each held value of the group's own pull requests at their heads over its module's values in the composition check, judged against the head's declaration and named, so a check reads the held values itself (issue 1953 D7, ADR 0565 §5)	2026-10-29 22:43:27 +01:00
jschoubben	7b7796b6fa	Assigner: hold a want while a provision its module requires has no key yet, and say it once it stays without one past the delivery bound, so a module never starts without its database unseen (issue 1954 D1) ... Pins mesh-sdk 66ff33d.	2026-10-29 22:41:44 +01:00
jschoubben	f56eb62d8b	Assigner: hold a want until every provision its module consumes on that node is provided, and say a failed one as a finding, so a module never moves ahead of what it needs (issue 1954 D1, ADR 0570 §4) ... Pins mesh-sdk 6e39ed1.	2026-10-29 22:39:38 +01:00
jschoubben	78f03b7422	Watchman: say needs-operator from mesh-provisioner's provisions in waits, so the row the haves could not carry has its facts on the bus (issue 1954 D2) ... Pins mesh-sdk 4a96793.	2026-10-29 22:37:39 +01:00
jschoubben	3aec7f9b02	Assigner: hold the seat mesh-wants, keep a person's upgrade policy and judge moves by it, say a policy split with the controller as a finding, and answer the bus step, so the policies and the bus step leave the controller (issue 1953 D4-D6)	2026-10-29 22:34:08 +01:00
jschoubben	2488d839ab	Bridge, indexer and view: carry the catalogue's predefined list on its merged message, and keep it and each open pull request's config declarations in the indexer's states, so mesh-config reads them in place of the controller's mirror and pull-declares (issue 1953 D1-D3) ... The view's tools read both states. Pins mesh-sdk 2d2aa7b.	2026-10-29 22:29:04 +01:00
jschoubben	2531cd42b6	Checker: hold that the change's own failing test ends its level there, as mesh-sdk's build asks now do, so a failing check costs only its own tests (issue 1289) ... Pins mesh-sdk 2d2aa7b.	2026-10-29 22:24:50 +01:00
jschoubben	5235bb2e79	Assigner and grants part: record hand acts and warrants through the seat mesh-hand-acts, the controller's log only while that seat has no holder and the controller holds its lease (issue 1953 D8) ... Pins mesh-sdk 2d2aa7b in the L5 modules.	2026-10-29 22:24:00 +01:00
jschoubben	3b6f3af38e	Grants part: create a module's log with the max age it declares, so a log's entries age out as its manifest says (issue 1952) ... Its nats fixture gives the tools bundle's account a secret the tool runtime can reach, as mesh-sdk 2e5cc4f asks. Pins mesh-sdk 2e5cc4f.	2026-10-29 22:19:35 +01:00
jschoubben	15a15cbda5	Watchman: observe S1, S9 and S21 as the controller does and stop the needs-operator row, so the keeper's compare can empty with no condition lost (issue 1952 WM2, WM3, WM5) ... S1 is urgent after half an hour for a control node (the node running mesh-controller). S9 also hears the bus module's slow consumers and closed connections, each closure counted once. S21 is one finding per heard machine from its failed haves and its provisioner clients' reports (PROV_APPLIED). DEAD_LETTERS is counted again at a letter's age and every five minutes while letters are held, on the watchman's own pulse. needs-operator waits for L6: its inputs are not on the bus. Pins mesh-sdk b6ef01d.	2026-10-29 21:59:46 +01:00
jschoubben	7dbf7a19a1	Grants part: compose a principal for every own bus account, a tools bundle's with what it may remove, so the bus tools remove the controller's dead-letter consumer and the engine's acts on their own account (issue 1952 S5) ... Pins mesh-sdk 7000bd5.	2026-10-29 21:56:13 +01:00
jschoubben	e1fd3eb0f6	View: answer status from the buckets it reads and derive motion with mesh-sdk's MotionOf, so status leaves the controller and the keeper judges a delivery as the view does (issue 1952 V1)	2026-10-29 21:52:42 +01:00
jschoubben	73280f85c3	Assigner: write each condition it says as a finding too, and say it straight only until the take-over, so its holds reach the operator through the condition keeper and never twice (issue 1952 WM6)	2026-10-29 21:49:25 +01:00
jschoubben	b8e8981730	Grants part: hear root-not-free from the seat the take-over key names, never both, so the switch to the condition keeper moves it with the router (issue 1952 G1) ... Watchman: subscribe exactly what its grant lets it hear (buscompose.WatchmanHears). Both pin mesh-sdk 69fcb6c.	2026-10-29 21:46:29 +01:00
jschoubben	da787ae360	Watchman: hold mesh-watchdogs and write its watchdogs as findings, so health can leave the controller (issue 1952 WM1-WM5) ... The signals rows S1, S8, S9, S10, S11, S21 and the haves' unhealthy and needs-operator are pulses whose expiry is a finding; stuck keys and presence are its own findings; it keeps the dead letters from the lease write on its own consumer, lists and shows them, and refuses deliver and drop until the hand-act log's home (issue 1953). Tools read every state it keeps and start resync. Pins mesh-sdk 2a04bf0.	2026-10-29 21:44:18 +01:00
jschoubben	013b7420f6	mesh-grants: hold a grant only while the loaded list lacks its permissions, read from the part's own record of the lists it sealed, so a release whose bus tools are down still moves (issue 774)	2026-10-29 21:18:21 +01:00
jschoubben	c7fbc530da	mesh-grants: compose the user list from the running and the trunk manifest, and write a grant only once the loaded list carries it, so L3's parts never use a subject the bus has not loaded (issue 774)	2026-10-29 21:15:55 +01:00
jschoubben	98ad1aa252	Pin mesh-sdk 22c9ddd in the modules L3 changes, the L3 re-land group's sdk head (issue 774)	2026-10-29 21:07:00 +01:00
jschoubben	b01cf63237	Revert "Merge pull request 'Revert L3: its node-engine removed every held module on novox, the bus server among them (issue 774)' (#109) from revert/774-l3 into main" ... This reverts commit c1b4533201, reversing changes made to d8274204fb.	2026-10-29 21:05:14 +01:00
jschoubben	fb7ad5cd73	Add builder_announce_again so a done build can be taken in and composed again ... Recovery of photos and link2pay on novox, 2026-10-29: their composition and grant were lost and no tool wrote a done key again. Quick fix: rewrite the done key unchanged as a new revision. Thorough fix: ADR 0547, the node agent composes its own and the assigner stops waiting on controller compositions (design 47).	2026-10-29 17:58:39 +01:00
jschoubben	d54eab4052	Never keep a want back for an unhealthy provider, nor a first want for the canary where nothing runs: the module is wanted and its provider down is said (issue 1960) ... On novox on 2026-10-29 the assigner wrote no want for de-spiegel and link2pay (rule 5: no provider of route runs healthy) nor photos (rule 5: no provider of s3-bucket), and none where no node of a module was online (rule 3). A module with no want is on no list and nothing applies it; a site runs while the proxy in front of it is down. - Quick fix: skip rules 3 and 5 for the three modules' first wants. Leaves rule 5 holding every move and the canary holding new assignments. - Thorough fix, chosen: rule 5 holds no want; it is said per node (Outcome.Unreached, journaled once per words by the pass). The canary (rule 3) no longer holds the first want of a node that does not run the module. A node that runs it keeps the canary order: at an older composed and granted fingerprint of the new form its first want stays at what it runs; at an old-form build it waits for the canary as before (issue 1945); at an older fingerprint with no composition or grant it gets F. This departs from ADR 0429 §6, which makes every provider healthy a rule of every want. Tests: rows changed in the existing rule tests, and rows for today's modules (route-proxy down: de-spiegel and link2pay wanted; minio not healthy: photos moves; novox offline: a first want written, a move kept back).	2026-10-29 16:04:39 +01:00
jschoubben	6771db22ae	Revert L3 (mesh-delivery, merge d827420): its node-engine removed every held module on novox, the bus server among them, at 08:54 CET on 2026-10-29 (issue 774) ... L3 lands again with two fixes: a held module is never removed, and the grants cover L3's new subjects.	2026-10-29 09:42:29 +01:00
jschoubben	64d364a768	Assigner pins mesh-sdk 76f7c4d, a pull request's head holding 8eafc0c and 77b48a4: the checker refuses a pin to a merge commit on main (issue 774)	2026-10-29 00:20:03 +01:00
jschoubben	2caaa6fc92	Merge main into L3: the assigner pins mesh-sdk main d747c11, which holds both L3's sdk and the seed's held-as-today fix (issue 774)	2026-10-28 23:50:43 +01:00
mesh-tools	fa075dc880	Merge pull request 'Assigner: pin mesh-sdk 06b13ec, so a seed's brief shows what stays held as today (issue 1126)' (#107) from fix/1126-seed-held into main	2026-10-28 22:20:54 +00:00
jschoubben	f6df07605d	Merge remote-tracking branch 'origin/main' into l3r/774-vault-mints ... # Conflicts: # modules/mesh-delivery-assigner/cmd/mesh-delivery-assigner/seat_tools_test.go	2026-10-28 23:00:04 +01:00
jschoubben	fc3883b0b6	Assigner: pin mesh-sdk 77b48a4, so the seed's Approve names the differences it carries (issue 1126)	2026-10-28 22:41:03 +01:00
mesh-tools	5b2e5bc537	Merge pull request 'The checker writes a loud verdict where it cannot judge, so no Approve waits silently (issue 1733)' (#104) from fix/1733-no-hour into main	2026-10-28 21:29:56 +00:00
jschoubben	25953c6ae1	Assigner: pin mesh-sdk 06b13ec, so a seed's brief shows what stays held as today (issue 1126)	2026-10-28 22:18:31 +01:00
jschoubben	49ea5c96e3	Assigner: serve the seat mesh-placement's verbs as <seat>.<verb>, the name the tool runner serves a seat's verb from (issue 1126)	2026-10-28 22:07:05 +01:00
jschoubben	7692f201df	Pin mesh-sdk 8eafc0c, the L3 group's head on mesh-sdk main with #120 and #121 (issue 774)	2026-10-28 21:56:06 +01:00
jschoubben	09da8d741e	The assigner's laying again and its seed again know the lease write too, so a proposal laid again after it is judged as its first laying was (issue 774, ADR 0567 §8; re-review)	2026-10-28 21:54:47 +01:00
jschoubben	b2351a213d	Follow L2 under L3: the builder, checker, indexer and view read the seat mesh-placement's placement, the seat's Leased is the lease handed away, and the view keeps no read of the indexer's placement L2 removed (issue 774, ADR 0567 §8, ADR 0549 §3)	2026-10-28 21:54:47 +01:00
jschoubben	2abceb1913	Pin mesh-sdk 4e6e5cc, the L3 group's head rebased on L2, in the six modules the group changes (issue 774)	2026-10-28 21:54:47 +01:00
jschoubben	685810720e	mesh-grants: place by the catalogue's placement alone once the controller's lease is handed away, and refuse any other reader of the assignments in this repository (issue 774, ADR 0549 §3, §6) ... Why: after the lease write the assignments are frozen, so the part's union kept a module the catalogue takes off a node with its account, grant, membership and user-list entry. The lease is read as the assigner reads it (buscompose.LeaseHandedAway); before it, or with no placement on the bus, the union stands. The read stays declared until the first change after the lease write, named in modules/assignments-readers with the assigner; a TestGrants row refuses any other module.json that reads mesh-controller.assignments, as mesh-catalog's checks/placement does for the catalogue.	2026-10-28 21:54:47 +01:00
jschoubben	8e25926e91	mesh-grants: the node-engine's manifest is placed on every node, so its declared state is asserted and created as a placed module's, and it adds no account (issue 774, ADR 0563 §2, §3)	2026-10-28 21:54:47 +01:00
jschoubben	68628bfd78	Pin mesh-sdk 277a5bd, the L3 group's head, in the assigner, builder, checker, indexer, view and grants; the assigner's manifest test names mesh-grants.grants, its integration test no unused import (issue 774)	2026-10-28 21:54:47 +01:00
jschoubben	1dbb7c5740	mesh-delivery-view: node_trusts answers in one call whether every node's record names the vault's signing key, the gate before the controller's lease is handed away (issue 774, ADR 0550 §2, design 47 L3 s6b)	2026-10-28 21:54:47 +01:00
jschoubben	9e3d1d5e68	The assigner reads the catalogue's placement alone once the controller's lease is handed away, and reads the lease to know it (issue 774, ADR 0549 §5, §6)	2026-10-28 21:54:47 +01:00