jschoubben 3f02bd7ff6 The bus node writes the bus's user list alone from the newest composition of the bus module, with no want, and says it in the bus module's have (ADR 0547 §8, issue 1945) ...

The list reached the bus only through a want of the bus module, which nobody writes (ADR 0539 §15): on 2026-10-25 it
stood from 11:23 to 20:50 and was put back by hand. The node agent now follows its composition bucket for the newest
signed composition carrying the user list, writes that file alone through the apply's file step when it differs
(mode 0600, read back, recorded as the module's), moves nothing that reads it (the bus module's entrypoint reloads the
server in place), never goes back to an older list, looks again after every apply of the bus module, and says source,
revision, wanted and written digests, users and any error in the bus module's have (mesh-sdk UserListWritten).

Read with mesh-delivery-view.node_haves (module nats); the bus's own nats_user_can says in_force once it reloaded.

2026-10-25 21:50:49 +01:00

..

access_test.go

Give every module an identity and keep shared folders through ACL entries (hq ADR 0325, issue 567)

2026-10-12 18:43:04 +02:00

agent_home_guard_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

agent_home_guard.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

alone_test.go

The bus node writes the bus's user list alone from the newest composition of the bus module, with no want, and says it in the bus module's have (ADR 0547 §8, issue 1945)

2026-10-25 21:50:49 +01:00

alone.go

The bus node writes the bus's user list alone from the newest composition of the bus module, with no want, and says it in the bus module's have (ADR 0547 §8, issue 1945)

2026-10-25 21:50:49 +01:00

apply_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

apply.go

Take a container left set aside as the next apply's, and bound an apply to 30 minutes (issue 1945)

2026-10-25 12:18:50 +01:00

archive_removal_test.go

An archive can be undeclared, and undeclaring one no longer stops the apply (hq issue 162)

2026-10-04 12:20:41 +02:00

archive_replace_test.go

Make an unpacked archive exactly the archive (novox/hq issue 220)

2026-10-04 00:17:50 +02:00

archive_unpacked.go

An archive can be undeclared, and undeclaring one no longer stops the apply (hq issue 162)

2026-10-04 12:20:41 +02:00

archive.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

block_test.go

review: rebuild a file the mesh once wrote whole, keep links, give back a missing line end, and release a hold only after the write (hq issue 128)

2026-09-27 00:09:34 +02:00

block.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

busy_test.go

Set a running container aside until its replacement runs, and put it back when the replacement does not come up (issue 1945)

2026-10-25 12:14:41 +01:00

busy.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

container_groups_test.go

Pass a container's groups to the runtime as supplementary groups and report container-groups (issues 1637, ADR 0480 clause 7)

2026-10-21 15:34:37 +02:00

containers_kept_test.go

Take a container left set aside as the next apply's, and bound an apply to 30 minutes (issue 1945)

2026-10-25 12:18:50 +01:00

declared_home_test.go

Let a declared account only add a home, never take one over, and match it by name alone, so no declaration hands another account's .ssh away (issue 1542, review round 1)

2026-10-20 23:32:27 +00:00

exec_killed_test.go

Run an apply in a context the bus's loss cannot end, and say why a killed command was killed (issue 1945)

2026-10-25 12:09:28 +01:00

facts_test.go

A take is a comparison: the host's facts, former targets, and strays (hq ADR 0163)

2026-10-01 21:24:37 +02:00

file_handover_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

filled_apply_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

filled_library_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

filled_runtime_roots_test.go

Judge a filled write with the roots the last apply read, asking no runtime per file (issue 1138)

2026-10-19 00:11:58 +02:00

filled_test.go

The bus node writes the bus's user list alone from the newest composition of the bus module, with no want, and says it in the bus module's have (ADR 0547 §8, issue 1945)

2026-10-25 21:50:49 +01:00

filled.go

Make no container before a file it mounts is there, and clear the empty directory a runtime left at a file's path (issue 1873)

2026-10-22 22:29:39 +02:00

former_archive_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

found_is_said_test.go

Give a handed-over directory through no link on every apply, not only the first (hq issue 356, review)

2026-10-09 19:58:27 +02:00

found_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

giveback_test.go

Say in the plan that a unit is restored only if it is still as the mesh held it

2026-10-09 02:03:51 +02:00

groups_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

groups.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

handover_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

health_check_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

hold_test.go

Set a running container aside until its replacement runs, and put it back when the replacement does not come up (issue 1945)

2026-10-25 12:14:41 +01:00

hold.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

home_links_test.go

Read the homes in one order, so their test does not depend on a map's

2026-10-09 12:36:56 +02:00

home_links.go

Read the homes in one order, so their test does not depend on a map's

2026-10-09 12:36:56 +02:00

home_parents_test.go

Parents the host makes inside an owner's home are the owner's (hq ADR 0182, to-be 41)

2026-10-04 04:07:40 +02:00

homes_linux.go

Keep a module directory's setgid bit, warn about a refused runner, and restart the runner when it leaves (hq ADR 0334 review)

2026-10-13 00:11:50 +02:00

homes_other.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

identities_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

identities.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

inspect_scope_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

into_handover_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

into_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

into.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

judge_directories_test.go

Make the apply tests fit the checker's isolated step: accept any who in the refused line, skip aloud where no group can be set (issue 1919, R4g)

2026-10-23 18:54:53 +02:00

keep.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

library_linux.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

library_test.go

Make the apply tests fit the checker's isolated step: accept any who in the refused line, skip aloud where no group can be set (issue 1919, R4g)

2026-10-23 18:54:53 +02:00

library.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

logging_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

maintenance_window_test.go

Set a running container aside until its replacement runs, and put it back when the replacement does not come up (issue 1945)

2026-10-25 12:14:41 +01:00

maintenance_window.go

Let a planned maintenance window fail no apply (hq issue 291)

2026-10-07 13:11:03 +02:00

mesh_dirs_apply_linux.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

mesh_dirs_gate_test.go

Give a mesh directory its mode and owner only through a descriptor, and gate what the walk refuses (issue 358)

2026-10-12 14:00:53 +02:00

mesh_dirs_linux.go

Judge a node's directories read-only before the walk refuses any (issue 358)

2026-10-12 13:57:52 +02:00

mesh_dirs_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

mesh_dirs.go

Take a directory in the mesh's own tree that the engine's account owns as the mesh's, not as found (issue 1873)

2026-10-22 22:23:04 +02:00

mesh_names_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

mesh_tree_found_test.go

Judge the mesh's tree by where a path leads, not only by its text (issue 1873, review)

2026-10-22 22:27:45 +02:00

mode_test.go

Refuse a declaration for the other mode, or older than the mesh's last, and say what an apply would change first

2026-09-23 23:15:28 +02:00

mode.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

module_results_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

module_results.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

module_scope_test.go

Leave a record another module's composition now holds, whatever its type, instead of removing it in the node's own apply; a removed module holds nothing back (issue 1944, issue 1945)

2026-10-25 02:54:58 +02:00

mount_waits_test.go

Make no container before a file it mounts is there, and clear the empty directory a runtime left at a file's path (issue 1873)

2026-10-22 22:29:39 +02:00

mount_waits.go

Make no container before a file it mounts is there, and clear the empty directory a runtime left at a file's path (issue 1873)

2026-10-22 22:29:39 +02:00

move_out_linux.go

Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)

2026-10-17 16:09:33 +00:00

move_out_other.go

Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)

2026-10-17 16:09:33 +00:00

move_out_test.go

Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)

2026-10-17 16:09:33 +00:00

move_out.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

opening_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

opening.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

ownership_test.go

Feature 57 (config and provisioning): release mesh-host, the reviewed release branch on top of main

2026-10-16 08:24:13 +00:00

placed.go

Keep libraries under groups of their own, and give modules users in them (hq ADR 0328, issue 567)

2026-10-12 22:11:09 +02:00

placement_guard_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

placement_guard.go

Let a declared account only add a home, never take one over, and match it by name alone, so no declaration hands another account's .ssh away (issue 1542, review round 1)

2026-10-20 23:32:27 +00:00

placement_homes_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

plan_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

plan.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

process_step_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

process_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

process_witness_test.go

Roll a core build back by a witness that is not the new build (hq to-be 45 Phase 4)

2026-10-06 18:23:56 +02:00

process.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

reads_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

references_test.go

Read a file's object from the node's own bucket, declaration-files-<node>, never a shared one (issue 1695, ADR 0486 §2)

2026-10-21 15:41:09 +02:00

references.go

Read a file's object from the node's own bucket, declaration-files-<node>, never a shared one (issue 1695, ADR 0486 §2)

2026-10-21 15:41:09 +02:00

refused_directory_test.go

Say both a gated module and a machine stop, and count skipped apart (review of #83)

2026-10-11 18:51:04 +02:00

removal_order_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

remove_file_test.go

An undeclared file is deleted only when it holds what the host wrote; otherwise moved aside (hq issue 241)

2026-10-05 01:30:42 +02:00

replace_image_test.go

Take a container left set aside as the next apply's, and bound an apply to 30 minutes (issue 1945)

2026-10-25 12:18:50 +01:00

replay358_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

restart_order_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

root_moved_test.go

Keep the walk's paths as bytes, forget a walk root superseded, and leave other mounts unread (hq issue 361 review)

2026-10-10 01:10:56 +02:00

root_moved.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

roots.go

Keep libraries under groups of their own, and give modules users in them (hq ADR 0328, issue 567)

2026-10-12 22:11:09 +02:00

runonce_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

runtime_roots_more_test.go

Ask the running runtimes where they keep their data, and read every form a unit says it in

2026-10-09 01:22:11 +02:00

runtime_roots_test.go

Read every runtime's data root, keep when a directory was found, and key a hand-over to its resource

2026-10-09 00:55:21 +02:00

schedule_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

schedule.go

The node agent runs in the node-engine: watches the wants and compositions on the link, applies one module's composition, asks the backup, writes the haves (R6-A A1, A5, A6)

2026-10-24 16:39:51 +02:00

sealed_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

ssh_home_test.go

Say every directory used as found, let a person hand it over, and refuse the runtime's data and any .ssh

2026-10-09 00:28:01 +02:00

stateless_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

stayed_running_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

step_failed_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

store_away_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

store_away.go

Let a planned maintenance window fail no apply (hq issue 291)

2026-10-07 13:11:03 +02:00

strays.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

takeover_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

takeover.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

test_hooks.go

Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)

2026-10-17 16:09:33 +00:00

testing_dirs.go

Raise a process-form controller at genesis as the container it replaces (hq issue 223)

2026-10-04 01:47:33 +02:00

user_numeric_test.go

An owner may be a number the machine has never heard of

2026-09-01 23:45:02 +02:00

user_test.go

Refuse to take over a system account as one that never becomes root

2026-10-09 10:07:52 +02:00

user_unix.go

A user, bytes, and an archive — because most of what people install is

2026-08-30 03:22:38 +02:00

user.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

userscope_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

vault_sealed_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

vocabulary_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

walk_linux.go

Give no account a home, keep old data's sub-paths for the warrant, and never hand out setgid (hq ADR 0328 review)

2026-10-12 22:18:16 +02:00

walk_other.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

walk.go

Give no account a home, keep old data's sub-paths for the warrant, and never hand out setgid (hq ADR 0328 review)

2026-10-12 22:18:16 +02:00

whole_test.go

A file written over is given its kept original back when undeclared (hq ADR 0118, 0102)

2026-10-04 12:54:16 +02:00

whole.go

An undeclared file is deleted only when it holds what the host wrote; otherwise moved aside (hq issue 241)

2026-10-05 01:30:42 +02:00