The bus node writes the newest signed bus user list by itself, without a want (ADR 0547 bridge, issue 1945) #143

Merged

mesh-tools merged 2 commits from fix/1945-user-list-follows into main 2026-10-25 21:16:07 +00:00

Conversation 1 Commits 2 Files Changed 11

+987 -30

2 Commits

Author	SHA1	Message	Date
jschoubben	5e71ab6ae6	Count the bus's users from the list a digest names, take only a composition of this node and module, and refuse a list that would lock the mesh out (review of the bridge, ADR 0547 §8) ... B1: the controller sends the user list by digest (over 64 KiB), so its users are counted from the list as resolved, not from the composition's inline content, which is empty then. R1: a composition signed for another node or module than its key names is no source. R2: a list without the controller's own user, or one that drops more than half the users of the file on the machine, is not written; the have says why and the file on the machine is kept.	2026-10-25 22:00:05 +01:00
jschoubben	3f02bd7ff6	The bus node writes the bus's user list alone from the newest composition of the bus module, with no want, and says it in the bus module's have (ADR 0547 §8, issue 1945) ... The list reached the bus only through a want of the bus module, which nobody writes (ADR 0539 §15): on 2026-10-25 it stood from 11:23 to 20:50 and was put back by hand. The node agent now follows its composition bucket for the newest signed composition carrying the user list, writes that file alone through the apply's file step when it differs (mode 0600, read back, recorded as the module's), moves nothing that reads it (the bus module's entrypoint reloads the server in place), never goes back to an older list, looks again after every apply of the bus module, and says source, revision, wanted and written digests, users and any error in the bus module's have (mesh-sdk UserListWritten). Read with mesh-delivery-view.node_haves (module nats); the bus's own nats_user_can says in_force once it reloaded.	2026-10-25 21:50:49 +01:00