jschoubben d3ee49d6f3 F-host 2, ENG-5: on a fresh mesh the bootstrap pushes the holders' own images to the store on its loopback with no credential, and names them under the seat's reach (lead's design limit, review of issue 1966) ...

The store's front is distribution's program, a bundle the mesh builds, so nothing serves it before the builder: the
bootstrap's /v2/ wait and its pushes now go to the loopback port the store's manifest publishes, as the publish contract
allows on the store's own node. The one-off credential and its file go: the runtime could not carry it on a push, and no
push needs it. The tags list is asked for the repository being published, not always the control plane's.

Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig

2026-11-04 16:29:56 +01:00

..

accounts

Revert "Merge pull request 'Revert L3: its node-engine removed every held module on novox, the bus server among them (issue 774)' (#174) from revert/774-l3 into main"

2026-10-29 21:04:13 +01:00

agent

F-host 3: the agent's tests of a pull waiting on its holder wait for the loop to come to rest, not 50-100 ms, before they count applies (review of issue 1966)

2026-11-04 16:26:16 +01:00

apply

ENG-8, ENG-9, ENG-11: a failed pull from a store is tried again once per settled of the store's holder, heard on every node, and the failed have says whom it waits on and what triggered the last retry (design 51, issue 1966; needs mesh-sdk request R1, R2)

2026-11-04 11:49:44 +01:00

beside

Take the catalogue's composition rules into the node-engine

2026-11-02 19:15:55 +01:00

bootstrap

F-host 2, ENG-5: on a fresh mesh the bootstrap pushes the holders' own images to the store on its loopback with no credential, and names them under the seat's reach (lead's design limit, review of issue 1966)

2026-11-04 16:29:56 +01:00

bundle

Take the node-engine's parser from mesh-sdk: remaining imports (issue 1392)

2026-10-20 11:17:14 +00:00

compose

ENG-3, ENG-4: the node-engine keeps no seat table of its own (mesh-contracts' list through mesh-sdk), answers ${seat:...:reach} for both names of the store, and reads both reference forms in composition, image seat and bootstrap (ADR 0605 §9, design 26, issue 1966)

2026-11-04 12:11:34 +01:00

composer

The node-engine speaks operator-channel, mesh-vault and node-engine through their contracts and clients; it serves no pull-waits

2026-11-04 14:02:44 +01:00

filling

Remove the mesh-cli forward to the controller

2026-11-02 11:28:35 +01:00

firewall

Take the node-engine's parser from mesh-sdk: remaining imports (issue 1392)

2026-10-20 11:17:14 +00:00

identity

mesh-host enrol redeems through the seat mesh-enrolment and refuses an answer the token's key did not sign

2026-11-02 01:49:01 +01:00

image

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

inventory

Repoint ADR references after HQ consolidated 65 records to 23

2026-08-28 23:33:44 +02:00

judge

The node-engine owns the composition it alone runs (H1, H2)

2026-11-02 18:24:05 +01:00

link

ENG-9: a failed have carries the pull it waits on, read through node_haves

2026-11-04 14:02:44 +01:00

liveness

Apply a module again when the engine holds no record of its resources or its health says one is missing, and move a module with nothing to back up without a backup (issue 1944, issue 1945)

2026-10-25 10:59:21 +01:00

network

Write each node's health report into its own key of mesh-host_health on a change, so the watchman raises the machine's alerts without the controller (issue 774, the operator's alert table)

2026-10-29 22:56:14 +01:00

nodegrant

The node whole publishes its compositions and answers a candidate (H6)

2026-11-02 18:39:12 +01:00

outward

Report the networks the outward links are on, for the local network (issue 154, ADR 0340)

2026-10-13 11:20:21 +02:00

overlay

Merge five moved overlay tests into two, offsetting the tests this release adds

2026-11-02 18:39:51 +01:00

profile

The node-engine reports reads-wants; a failed apply is said; the have's fingerprint and digest follow its health (R6-A A6)

2026-10-24 16:43:26 +02:00

reachable

Report what an adopted node holds, its firewall and what is reachable, and speak unasked when that changes (hq ADR 0100)

2026-09-22 17:22:31 +02:00

selfcompose

The node-engine speaks operator-channel, mesh-vault and node-engine through their contracts and clients; it serves no pull-waits

2026-11-04 14:02:44 +01:00

store

Stop between applies and save the node's state as one writer, so a stop never cuts a save off and loses its records (issue 1585)

2026-11-04 10:36:48 +01:00

system

Drop the never-ran reading: a start timestamp of 0 does not mean a one-shot never ran (issue 1126)

2026-10-28 14:29:16 +01:00

takein

The node-engine owns the composition it alone runs (H1, H2)

2026-11-02 18:24:05 +01:00

tunnel

A taken tunnel's found configuration is retired once the take is proven (hq ADR 0119)

2026-09-27 00:47:57 +02:00

units

Take the node-engine's parser from mesh-sdk: remaining imports (issue 1392)

2026-10-20 11:17:14 +00:00

upgrade

Merge remote-tracking branch 'origin/main' into feat/r6

2026-10-24 23:00:09 +02:00

userlist

Read the bus's user-list file's place from what the node runs, not from the controller's compositions

2026-11-02 11:34:15 +01:00

validate

The node-engine owns the composition it alone runs (H1, H2)

2026-11-02 18:24:05 +01:00

witness

The witness judges the tool runner's process by its id, <its module>.runtime, which the composition gives only the module whose manifest says it is the tool runner, never by a name (ADR 0601 §4; review round 1, finding 4)

2026-11-03 14:02:01 +01:00