Fixes issue 1723 (no tool reads the builder's build keys).
mesh-delivery-view gains two read tools: builder_builds (lists the keys of mesh-delivery-builder_builds as stored: module, fingerprint, state, by, step with nodes, manifest, artifacts with digests, toolchains, error; filter by module or state) and builder_build (one key by module and fp2, or by module alone / module at a commit through the indexer's fp2). The manifest gains the read mesh-delivery-builder.builds and the two tools; the SDK pin is the builder's (has BuilderBuild).
Acceptance criteria 1723/AC1-AC3 are on the issue; unit tests prove each. mesh-controller.try on f2379dfeea passed (merge-check.sh, 1m1s).
Fixes issue 1723 (no tool reads the builder's build keys).
mesh-delivery-view gains two read tools: `builder_builds` (lists the keys of mesh-delivery-builder_builds as stored: module, fingerprint, state, by, step with nodes, manifest, artifacts with digests, toolchains, error; filter by module or state) and `builder_build` (one key by module and fp2, or by module alone / module at a commit through the indexer's fp2). The manifest gains the read mesh-delivery-builder.builds and the two tools; the SDK pin is the builder's (has BuilderBuild).
Acceptance criteria 1723/AC1-AC3 are on the issue; unit tests prove each. mesh-controller.try on f2379dfeea2d passed (merge-check.sh, 1m1s).
Reviewed-by: reviewer-1723@shanks at f2379dfeea2db27ddda9775c1749a7ba9b0c215d
mesh/check failed: g14: fetch of novox/mesh-delivery#18: build_go_fetch on g14: nats: no responders available for request | f2379dfeea2d on 113f7aa933…
mesh/merge-gate head f2379dfeea2d merged into trunk 113f7aa93385 — pass: builds mesh-delivery-view → shanks; no bus step; every machine composes with the c…
Deliverynovox/mesh-delivery@f2379dfeea2d — delivered since 2026-10-22T08:34:11Z
Delivery plan — builds mesh-delivery-view → shanks; no bus step
tier 0: mesh-delivery-view
shanks: receives mesh-delivery-view
grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before mesh-delivery-view is judged on its first machine
Machines
mesh-delivery-view on every machine running it: sent
Transitions
2026-10-22 07:57 (new) → proposed (announced): novox/mesh-delivery#18's head announced
2026-10-22 08:02 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit
2026-10-22 08:02 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
2026-10-22 08:31 ready → published (merged): on the trunk its modules follow: merged there, and its walk opened — or nothing for a walk to move
2026-10-22 08:31 published → delivering (go): its walk started: let go by this owner in its group's order, by a person, or on the controller's own path — not a failed walk that carried a later commit for it, after which it waits for a walk of its own commit
2026-10-22 08:34 delivering → delivered (done): its walk is done, carrying its own commit: every machine of its deploy plan passed, or was left as its policy says
The commit's note under refs/notes/mesh-plan keeps every transition: git log --notes=mesh-plan.
<!-- mesh-delivery:view -->
**Delivery** `novox/mesh-delivery@f2379dfeea2d` — **delivered** since 2026-10-22T08:34:11Z
**Delivery plan** — builds mesh-delivery-view → shanks; no bus step
- tier 0: mesh-delivery-view
- shanks: receives mesh-delivery-view
- grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before mesh-delivery-view is judged on its first machine
**Machines**
- mesh-delivery-view on every machine running it: sent
**Transitions**
- 2026-10-22 07:57 (new) → proposed (announced): novox/mesh-delivery#18's head announced
- 2026-10-22 08:02 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit
- 2026-10-22 08:02 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
- 2026-10-22 08:31 ready → published (merged): on the trunk its modules follow: merged there, and its walk opened — or nothing for a walk to move
- 2026-10-22 08:31 published → delivering (go): its walk started: let go by this owner in its group's order, by a person, or on the controller's own path — not a failed walk that carried a later commit for it, after which it waits for a walk of its own commit
- 2026-10-22 08:34 delivering → delivered (done): its walk is done, carrying its own commit: every machine of its deploy plan passed, or was left as its policy says
The commit's note under `refs/notes/mesh-plan` keeps every transition: `git log --notes=mesh-plan`.
Merge check at f2379dfe
Judged: head f2379dfeea2d merged into trunk 113f7aa93385; read beside it: mesh-catalog 97a111e70abf, mesh-controller 3d4ad6fefb7c, mesh-controller-main 3d4ad6fefb7c, mesh-host 4065b45ae84f, mesh-tools e0fadc43d9dd
mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-delivery-view)
mesh/repo-check: PASS — its merge-check.sh passed
Delivery plan — builds mesh-delivery-view → shanks; no bus step
tier 0: mesh-delivery-view
shanks: receives mesh-delivery-view
grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before mesh-delivery-view is judged on its first machine
read by no module's build: modules/mesh-delivery-view/cmd/mesh-delivery-view-tools/main_test.go, modules/mesh-delivery-view/manifest_test.go
Run by the build seat on ace as build-1792655862323502229 (builds --log build-1792655862323502229).
--- the gate: mesh-delivery-view
mesh-delivery-view: ok, 4 tool(s), reads mesh-controller.assignments, mesh-controller.builds, mesh-delivery-builder.builds, mesh-delivery-gate.asks, mesh-delivery-indexer.candidates, mesh-delivery-indexer.modules, mesh-delivery-teller.answers, mesh-delivery-watchman.presence, mesh-delivery-watchman.stuck, node-engine.have, ready: view by unit every 30s
long-running resources without health: 0
files asking for a setting without saying whether it is trusted: 0
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-22T06:41:56Z says they run
composing every machine as the mesh is
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
composing every machine with the change
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-22T06:41:56Z
modules the change moves:
- mesh-delivery-view (changed)
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-config, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-provisioner, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-delivery-view
notes:
- modules/mesh-delivery-view/cmd/mesh-delivery-view-tools/main_test.go and modules/mesh-delivery-view/manifest_test.go read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
== ./modules/mesh-delivery-builder: go vet and the unit tests
ok mesh-delivery-builder 0.003s
ok mesh-delivery-builder/cmd/mesh-delivery-builder (cached)
ok mesh-delivery-builder/internal/build (cached)
== ./modules/mesh-delivery-builder: the integration tests (-tags integration)
ok mesh-delivery-builder 0.003s
ok mesh-delivery-builder/cmd/mesh-delivery-builder 2.425s
ok mesh-delivery-builder/internal/build (cached)
== ./modules/mesh-delivery-checker: go vet and the unit tests
ok mesh-delivery-checker 0.003s
ok mesh-delivery-checker/cmd/mesh-delivery-checker 0.007s
ok mesh-delivery-checker/cmd/mesh-delivery-checker-tools (cached)
ok mesh-delivery-checker/internal/check 0.039s
== ./modules/mesh-delivery-checker: the integration tests (-tags integration)
ok mesh-delivery-checker 0.004s
ok mesh-delivery-checker/cmd/mesh-delivery-checker 3.167s
ok mesh-delivery-checker/cmd/mesh-delivery-checker-tools (cached)
ok mesh-delivery-checker/internal/check 0.039s
== ./modules/mesh-delivery-forge-bridge: go vet and the unit tests
ok mesh-delivery-forge-bridge 0.003s
ok mesh-delivery-forge-bridge/cmd/mesh-delivery-forge-bridge (cached)
ok mesh-delivery-forge-bridge/internal/bridge 0.199s
== ./modules/mesh-delivery-forge-bridge: the integration tests (-tags integration)
ok mesh-delivery-forge-bridge 0.003s
ok mesh-delivery-forge-bridge/cmd/mesh-delivery-forge-bridge 4.267s
ok mesh-delivery-forge-bridge/internal/bridge 0.197s
== ./modules/mesh-delivery-indexer: go vet and the unit tests
ok mesh-delivery-indexer 0.003s
ok mesh-delivery-indexer/cmd/mesh-delivery-indexer (cached)
ok mesh-delivery-indexer/internal/index 0.044s
== ./modules/mesh-delivery-indexer: the integration tests (-tags integration)
ok mesh-delivery-indexer 0.003s
ok mesh-delivery-indexer/cmd/mesh-delivery-indexer 0.842s
ok mesh-delivery-indexer/internal/index 0.045s
== ./modules/mesh-delivery-teller: go vet and the unit tests
ok mesh-delivery-teller 0.002s
ok mesh-delivery-teller/cmd/mesh-delivery-teller (cached)
== ./modules/mesh-delivery-teller: the integration tests (-tags integration)
ok mesh-delivery-teller 0.002s
ok mesh-delivery-teller/cmd/mesh-delivery-teller (cached)
== ./modules/mesh-delivery-view: go vet and the unit tests
ok mesh-delivery-view 0.002s
ok mesh-delivery-view/cmd/mesh-delivery-cli (cached)
ok mesh-delivery-view/cmd/mesh-delivery-view (cached)
ok mesh-delivery-view/cmd/mesh-delivery-view-tools (cached)
ok mesh-delivery-view/internal/view (cached)
== ./modules/mesh-delivery-view: the integration tests (-tags integration)
ok mesh-delivery-view 0.002s
ok mesh-delivery-view/cmd/mesh-delivery-cli (cached)
ok mesh-delivery-view/cmd/mesh-delivery-view (cached)
ok mesh-delivery-view/cmd/mesh-delivery-view-tools (cached)
ok mesh-delivery-view/internal/view (cached)
== ./modules/mesh-delivery-watchman: go vet and the unit tests
ok mesh-delivery-watchman 0.003s
ok mesh-delivery-watchman/cmd/mesh-delivery-watchman (cached)
ok mesh-delivery-watchman/internal/watch (cached)
== ./modules/mesh-delivery-watchman: the integration tests (-tags integration)
ok mesh-delivery-watchman 0.003s
ok mesh-delivery-watchman/cmd/mesh-delivery-watchman (cached)
ok mesh-delivery-watchman/internal/watch (cached)
**Merge check** at `f2379dfe`
Judged: head `f2379dfeea2d` merged into trunk `113f7aa93385`; read beside it: mesh-catalog `97a111e70abf`, mesh-controller `3d4ad6fefb7c`, mesh-controller-main `3d4ad6fefb7c`, mesh-host `4065b45ae84f`, mesh-tools `e0fadc43d9dd`
- `mesh/merge-gate`: **PASS** — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-delivery-view)
- `mesh/repo-check`: **PASS** — its merge-check.sh passed
**Delivery plan** — builds mesh-delivery-view → shanks; no bus step
- tier 0: mesh-delivery-view
- shanks: receives mesh-delivery-view
- grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before mesh-delivery-view is judged on its first machine
- read by no module's build: modules/mesh-delivery-view/cmd/mesh-delivery-view-tools/main_test.go, modules/mesh-delivery-view/manifest_test.go
Run by the build seat on ace as `build-1792655862323502229` (`builds --log build-1792655862323502229`).
```
--- the gate: mesh-delivery-view
mesh-delivery-view: ok, 4 tool(s), reads mesh-controller.assignments, mesh-controller.builds, mesh-delivery-builder.builds, mesh-delivery-gate.asks, mesh-delivery-indexer.candidates, mesh-delivery-indexer.modules, mesh-delivery-teller.answers, mesh-delivery-watchman.presence, mesh-delivery-watchman.stuck, node-engine.have, ready: view by unit every 30s
long-running resources without health: 0
files asking for a setting without saying whether it is trusted: 0
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-22T06:41:56Z says they run
composing every machine as the mesh is
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
composing every machine with the change
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-22T06:41:56Z
modules the change moves:
- mesh-delivery-view (changed)
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-config, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-provisioner, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-delivery-view
notes:
- modules/mesh-delivery-view/cmd/mesh-delivery-view-tools/main_test.go and modules/mesh-delivery-view/manifest_test.go read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
== ./modules/mesh-delivery-builder: go vet and the unit tests
ok mesh-delivery-builder 0.003s
ok mesh-delivery-builder/cmd/mesh-delivery-builder (cached)
ok mesh-delivery-builder/internal/build (cached)
== ./modules/mesh-delivery-builder: the integration tests (-tags integration)
ok mesh-delivery-builder 0.003s
ok mesh-delivery-builder/cmd/mesh-delivery-builder 2.425s
ok mesh-delivery-builder/internal/build (cached)
== ./modules/mesh-delivery-checker: go vet and the unit tests
ok mesh-delivery-checker 0.003s
ok mesh-delivery-checker/cmd/mesh-delivery-checker 0.007s
ok mesh-delivery-checker/cmd/mesh-delivery-checker-tools (cached)
ok mesh-delivery-checker/internal/check 0.039s
== ./modules/mesh-delivery-checker: the integration tests (-tags integration)
ok mesh-delivery-checker 0.004s
ok mesh-delivery-checker/cmd/mesh-delivery-checker 3.167s
ok mesh-delivery-checker/cmd/mesh-delivery-checker-tools (cached)
ok mesh-delivery-checker/internal/check 0.039s
== ./modules/mesh-delivery-forge-bridge: go vet and the unit tests
ok mesh-delivery-forge-bridge 0.003s
ok mesh-delivery-forge-bridge/cmd/mesh-delivery-forge-bridge (cached)
ok mesh-delivery-forge-bridge/internal/bridge 0.199s
== ./modules/mesh-delivery-forge-bridge: the integration tests (-tags integration)
ok mesh-delivery-forge-bridge 0.003s
ok mesh-delivery-forge-bridge/cmd/mesh-delivery-forge-bridge 4.267s
ok mesh-delivery-forge-bridge/internal/bridge 0.197s
== ./modules/mesh-delivery-indexer: go vet and the unit tests
ok mesh-delivery-indexer 0.003s
ok mesh-delivery-indexer/cmd/mesh-delivery-indexer (cached)
ok mesh-delivery-indexer/internal/index 0.044s
== ./modules/mesh-delivery-indexer: the integration tests (-tags integration)
ok mesh-delivery-indexer 0.003s
ok mesh-delivery-indexer/cmd/mesh-delivery-indexer 0.842s
ok mesh-delivery-indexer/internal/index 0.045s
== ./modules/mesh-delivery-teller: go vet and the unit tests
ok mesh-delivery-teller 0.002s
ok mesh-delivery-teller/cmd/mesh-delivery-teller (cached)
== ./modules/mesh-delivery-teller: the integration tests (-tags integration)
ok mesh-delivery-teller 0.002s
ok mesh-delivery-teller/cmd/mesh-delivery-teller (cached)
== ./modules/mesh-delivery-view: go vet and the unit tests
ok mesh-delivery-view 0.002s
ok mesh-delivery-view/cmd/mesh-delivery-cli (cached)
ok mesh-delivery-view/cmd/mesh-delivery-view (cached)
ok mesh-delivery-view/cmd/mesh-delivery-view-tools (cached)
ok mesh-delivery-view/internal/view (cached)
== ./modules/mesh-delivery-view: the integration tests (-tags integration)
ok mesh-delivery-view 0.002s
ok mesh-delivery-view/cmd/mesh-delivery-cli (cached)
ok mesh-delivery-view/cmd/mesh-delivery-view (cached)
ok mesh-delivery-view/cmd/mesh-delivery-view-tools (cached)
ok mesh-delivery-view/internal/view (cached)
== ./modules/mesh-delivery-watchman: go vet and the unit tests
ok mesh-delivery-watchman 0.003s
ok mesh-delivery-watchman/cmd/mesh-delivery-watchman (cached)
ok mesh-delivery-watchman/internal/watch (cached)
== ./modules/mesh-delivery-watchman: the integration tests (-tags integration)
ok mesh-delivery-watchman 0.003s
ok mesh-delivery-watchman/cmd/mesh-delivery-watchman (cached)
ok mesh-delivery-watchman/internal/watch (cached)
```
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Fixes issue 1723 (no tool reads the builder's build keys).
mesh-delivery-view gains two read tools:
builder_builds(lists the keys of mesh-delivery-builder_builds as stored: module, fingerprint, state, by, step with nodes, manifest, artifacts with digests, toolchains, error; filter by module or state) andbuilder_build(one key by module and fp2, or by module alone / module at a commit through the indexer's fp2). The manifest gains the read mesh-delivery-builder.builds and the two tools; the SDK pin is the builder's (has BuilderBuild).Acceptance criteria 1723/AC1-AC3 are on the issue; unit tests prove each. mesh-controller.try on
f2379dfeeapassed (merge-check.sh, 1m1s).Reviewed-by: reviewer-1723@shanks at
f2379dfeeaDelivery
novox/mesh-delivery@f2379dfeea2d— delivered since 2026-10-22T08:34:11ZDelivery plan — builds mesh-delivery-view → shanks; no bus step
Machines
Transitions
The commit's note under
refs/notes/mesh-plankeeps every transition:git log --notes=mesh-plan.Merge check at
f2379dfeJudged: head
f2379dfeea2dmerged into trunk113f7aa93385; read beside it: mesh-catalog97a111e70abf, mesh-controller3d4ad6fefb7c, mesh-controller-main3d4ad6fefb7c, mesh-host4065b45ae84f, mesh-toolse0fadc43d9ddmesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-delivery-view)mesh/repo-check: PASS — its merge-check.sh passedDelivery plan — builds mesh-delivery-view → shanks; no bus step
Run by the build seat on ace as
build-1792655862323502229(builds --log build-1792655862323502229).