mesh-grants: take-over and hand-back by the operator's Telegram Approve, the sealed list, and every grant the loaded list holds (issue 1945) #67

2026-10-26T12:18:38Z

mesh-tools commented

2026-10-26 12:18:38 +00:00

Group feat/1945-user-list-switch, one Approve. mesh-grants: grants_take_over / grants_hand_back ask the operator on Telegram and switch on the warranted yes after the refusals (differing users, users without a hash, the bus node's key and grants); every ask is closed on every end; grants_take_over_state says 'switched' only when the bus node loaded the grants part's list. It writes the composed list sealed to the bus node's key (object bucket mesh-grants-user-list, key user-list.sealed) and after take-over never advances it on a failed read or a user left out for want of a hash. Also: the controller's root-free verb for the messenger's verified sender (heard through its durable consumer), mesh-wireguard's provided manifest, route-proxy's loaded helper, retired verbs and a multiply held mesh seat's extra subscriptions named not counted. Try try-1793015702544734059 passed. Reviewed in many rounds (review-rootfree@shanks, review-switch@shanks).

Reviewed-by: review-switch@shanks at 5c76c9d3ac

Group feat/1945-user-list-switch, one Approve. mesh-grants: grants_take_over / grants_hand_back ask the operator on Telegram and switch on the warranted yes after the refusals (differing users, users without a hash, the bus node's key and grants); every ask is closed on every end; grants_take_over_state says 'switched' only when the bus node loaded the grants part's list. It writes the composed list sealed to the bus node's key (object bucket mesh-grants-user-list, key user-list.sealed) and after take-over never advances it on a failed read or a user left out for want of a hash. Also: the controller's root-free verb for the messenger's verified sender (heard through its durable consumer), mesh-wireguard's provided manifest, route-proxy's loaded helper, retired verbs and a multiply held mesh seat's extra subscriptions named not counted. Try try-1793015702544734059 passed. Reviewed in many rounds (review-rootfree@shanks, review-switch@shanks). Reviewed-by: review-switch@shanks at 5c76c9d3ac84a3c5bc2bf322938a00129520b5fa

mesh-tools added 11 commits 2026-10-26 12:18:38 +00:00

mesh-grants: take mesh-wireguard's manifest from mesh-sdk, where the mesh provides it, so its node-tools grants are composed (issue 1945) da7baa5e39

mesh-grants: ask the controller's root-free verb and wake on its condition events, so a verified sender is composed (issue 1945) 2a94d16834

The part composed every membership with no root-free input, so telegram's verified-sender was dropped and the membership held as a shadow
difference. It now asks mesh-controller.root-free for the machines a composition needs, per pass, failing closed and said once, and wakes
on root-not-free condition-raised and condition-cleared.

mesh-grants: hear the condition events through the controller's durable consumer and acknowledge them; the provided mesh-wireguard manifest always wins (issue 1945) ce72b67cef

mesh-grants: take-over and hand-back are asked of the operator on their channel and run on their yes after the refusals; take-over no longer always refused; grants_take_over_state (issue 1945) 75d0eb32be

mesh-grants: derive that a bundle loads from build.artifacts, as the indexer's manifest has no derived bundles, so route-proxy's helper is carried (issue 1945) 9a569bfb8d

mesh-grants: a retired verb and a multiply claimed mesh seat's added subjects are named, not counted, in the comparison (issue 1945) b0b1cf4f01

mesh-grants: an open take-over ask is always closed (router record, expiry, failed publish, any outcome), the switch is said recorded not switched, the refusal condition is cleared, the excuse is limited to the claiming machines' subscriptions (issue 1945) 4b23db28b3

mesh-grants writes the user list sealed to the bus node and names it in user-list.sealed; the switch turns that key; take-over state says switched only once the bus node loaded it (ADR 0547 clauses 7, 8; issue 1945) a092ee9ff9

The bus node can only take over a list that exists: each pass composes the accounts block with the vault's hashes, seals
it to the key the bus node says in its have, puts it in the part's own object bucket by digest and writes the key with
digest, revision, user count, users left out and which list to follow. take-over is refused, naming why, while no list is
sealed to the bus node's current key or the loaded list does not grant the bus node its read.

Review of fix/1945-takeover-blockers: no responders on the router's record is an error, not 'no record'; an answer whose
record cannot be reached is not closed; an ask that failed to publish is taken back at the router; an error acting on an
answer is logged. Pins mesh-sdk 175a5567.

Pin mesh-sdk at the group's head 83ee7769 (issue 1945) 29cfb8c177

mesh-grants: after take-over the list in force is not replaced by one composed past a failed read or one dropping its users for want of a hash; the switch's effect says when the bus node does not watch the key (review of the switch, issue 1945). Pins mesh-sdk c2a410bb. f55f150896

mesh-grants: a list in force with no users kept is checked against the users the bus loaded, so the first list after take-over keeps every user (review of the switch, issue 1945)

mesh/delivery merged: source.main moved to novox/mesh-delivery@71f786f14662

Details

mesh/delivery-group group feat/1945-user-list-switch merged: every member is merged

Details

mesh/check being carried to 5c76c9d3ac84 on 71f786f14662 | novox/mesh-delivery#67 in group feat/1945-user-list-switch

5c76c9d3ac

mesh-tools commented

2026-10-26 12:18:43 +00:00

Delivery novox/mesh-delivery@5c76c9d3ac84 — merged since 2026-10-26T12:21:53Z

Source — source.main moved to novox/mesh-delivery@71f786f146. Whether it reached the machines is mesh-delivery-view's, derived from source.main, the wants and the haves.

Group feat/1945-user-list-switch: novox/mesh-catalog@c9414b1c98, novox/mesh-controller@09d2cc5056, novox/mesh-delivery@5c76c9d3ac, novox/mesh-host@e88ddab241, novox/mesh-sdk@c2a410bb63

Transitions

2026-10-26 12:18 (new) → proposed (announced): novox/mesh-delivery#67's head announced
2026-10-26 12:18 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false)
2026-10-26 12:21 ready → merged (merged): on the trunk its modules follow: merged there

The commit's note under refs/notes/mesh-plan keeps every transition of this change up to its merge: git log --notes=mesh-plan.

**Delivery** `novox/mesh-delivery@5c76c9d3ac84` — **merged** since 2026-10-26T12:21:53Z **Source** — source.main moved to novox/mesh-delivery@71f786f14662. Whether it reached the machines is `mesh-delivery-view`'s, derived from `source.main`, the wants and the haves. **Group** `feat/1945-user-list-switch`: novox/mesh-catalog@c9414b1c9856, novox/mesh-controller@09d2cc5056ef, novox/mesh-delivery@5c76c9d3ac84, novox/mesh-host@e88ddab24170, novox/mesh-sdk@c2a410bb6376 **Transitions** - 2026-10-26 12:18 (new) → proposed (announced): novox/mesh-delivery#67's head announced - 2026-10-26 12:18 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false) - 2026-10-26 12:21 ready → merged (merged): on the trunk its modules follow: merged there The commit's note under `refs/notes/mesh-plan` keeps every transition of this change up to its merge: `git log --notes=mesh-plan`.

mesh-tools commented

2026-10-26 12:18:46 +00:00

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-tools commented

2026-10-26 12:18:52 +00:00

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-tools merged commit 71f786f146 into main

2026-10-26 12:21:51 +00:00

mesh-tools deleted branch feat/1945-user-list-switch

2026-10-26 12:21:51 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-delivery#67