mesh-grants and the assigner: grant every node the served keys it composes with (issue 1126, group fix/1126-node-creds) #89

2026-10-27T20:31:42Z

mesh-tools commented

2026-10-27 20:31:42 +00:00

Delivery group fix/1126-node-creds with mesh-sdk and mesh-host; the assigner and mesh-grants pin mesh-sdk 7a8e9f97 exactly (main's #87 and #88 merged in; #88's holds untouched).

mesh-grants grants every node the keys a provider elsewhere serves from, taken from the running manifest and the trunk's manifest together (a provider running a build that serves none while the trunk adds domain is granted). The composition check gets frombus's new reads.

Tests: a TestGrants row for the running-plus-trunk union, failing without it. Unit suites of all nine modules and go vet -tags integration clean.

Non-blocking review notes are on issue 1126 (note 32).

Reviewed-by: review-1126d@shanks at bb7f2ff365

Delivery group fix/1126-node-creds with mesh-sdk and mesh-host; the assigner and mesh-grants pin mesh-sdk 7a8e9f97 exactly (main's #87 and #88 merged in; #88's holds untouched). mesh-grants grants every node the keys a provider elsewhere serves from, taken from the running manifest and the trunk's manifest together (a provider running a build that serves none while the trunk adds domain is granted). The composition check gets frombus's new reads. Tests: a TestGrants row for the running-plus-trunk union, failing without it. Unit suites of all nine modules and go vet -tags integration clean. Non-blocking review notes are on issue 1126 (note 32). Reviewed-by: review-1126d@shanks at bb7f2ff365c75fcd5605b17853fc56278ff86790

mesh-tools added 5 commits 2026-10-27 20:31:43 +00:00

Grant every node the keys a provider elsewhere serves from, and give the composition check frombus's new reads, pinning mesh-sdk cebc651 (issue 1126) ea3bfa5e6e

mesh-grants declares each module's served settings (catalogue.ServedSettings), so
the user list grants every other node's agent those keys of mesh-config_resolved
alone: shanks then settles what novox's mailu serves. The assigner's check of
every node reads no build, archive or served value: it composes as before.

Pin mesh-sdk 538ffba, the group's head, in the assigner and mesh-grants (issue 1126) a7d03f7c82

Merge remote-tracking branch 'origin/main' into fix/1126-node-creds e0cb285993

# Conflicts:
#	modules/mesh-delivery-assigner/go.mod
#	modules/mesh-delivery-assigner/go.sum

Grant the served keys of the trunk's manifest too, and pin mesh-sdk 7a8e9f9 in the assigner and mesh-grants on main's bus helpers (issue 1126, review round 1) c93f0d15e4

A node composing a consumer reads the served keys of the trunk's manifest of a
provider elsewhere, which may serve a setting the build it runs does not.

Merge remote-tracking branch 'origin/main' into fix/1126-node-creds

mesh/delivery merged: source.main moved to novox/mesh-delivery@68bdda1a4dbf

Details

mesh/delivery-group group fix/1126-node-creds merged: every member is merged

Details

mesh/check checking bb7f2ff365c7 on 68bdda1a4dbf | novox/mesh-delivery#89 in group fix/1126-node-creds

bb7f2ff365

mesh-tools commented

2026-10-27 20:31:50 +00:00

Delivery novox/mesh-delivery@bb7f2ff365c7 — merged since 2026-10-27T20:32:36Z

Source — source.main moved to novox/mesh-delivery@68bdda1a4d. Whether it reached the machines is mesh-delivery-view's, derived from source.main, the wants and the haves.

Group fix/1126-node-creds: novox/mesh-delivery@bb7f2ff365, novox/mesh-host@6a4718b712, novox/mesh-sdk@7a8e9f9706

Transitions

2026-10-27 20:31 (new) → proposed (announced): novox/mesh-delivery#89's head announced
2026-10-27 20:31 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false)
2026-10-27 20:32 ready → merged (merged): on the trunk its modules follow: merged there

The commit's note under refs/notes/mesh-plan keeps every transition of this change up to its merge: git log --notes=mesh-plan.

**Delivery** `novox/mesh-delivery@bb7f2ff365c7` — **merged** since 2026-10-27T20:32:36Z **Source** — source.main moved to novox/mesh-delivery@68bdda1a4dbf. Whether it reached the machines is `mesh-delivery-view`'s, derived from `source.main`, the wants and the haves. **Group** `fix/1126-node-creds`: novox/mesh-delivery@bb7f2ff365c7, novox/mesh-host@6a4718b712b2, novox/mesh-sdk@7a8e9f970648 **Transitions** - 2026-10-27 20:31 (new) → proposed (announced): novox/mesh-delivery#89's head announced - 2026-10-27 20:31 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false) - 2026-10-27 20:32 ready → merged (merged): on the trunk its modules follow: merged there The commit's note under `refs/notes/mesh-plan` keeps every transition of this change up to its merge: `git log --notes=mesh-plan`.

mesh-tools merged commit 68bdda1a4d into main

2026-10-27 20:32:34 +00:00

mesh-tools deleted branch fix/1126-node-creds

2026-10-27 20:32:34 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-delivery#89