jschoubben 65cd7b4787 Retire a daemon's running build instead of deleting it before the restart (issue 734) ...

A process no witness judges had its directory removed before the new bundle
was unpacked and the unit restarted, so the old process ran on in a deleted
working directory: mesh-build-go's `go version` probe failed with "getwd: no
such file or directory" and refused three checks on ace on 2026-10-26, each in
the second a new build of it arrived.

Every process is now replaced the way a judged one is: its build is renamed
under .witness/<name>/retired/ and deleted only once nothing runs from it.
"Runs from it" now counts a process's working directory as well as its image,
so the children a daemon starts keep the directory too. Forget keeps a retired
build that still drains, and the witness's sweep covers every process it keeps
a directory for, judged or not.

Two unit-file tests are folded into one, so the unit count goes down by one.

2026-10-26 15:01:55 +01:00

..

access_test.go

Give every module an identity and keep shared folders through ACL entries (hq ADR 0325, issue 567)

2026-10-12 18:43:04 +02:00

agent_home_guard_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

agent_home_guard.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

alone_test.go

The bus node writes the bus's user list alone from the newest composition of the bus module, with no want, and says it in the bus module's have (ADR 0547 §8, issue 1945)

2026-10-25 21:50:49 +01:00

alone.go

The bus node writes the bus's user list alone from the newest composition of the bus module, with no want, and says it in the bus module's have (ADR 0547 §8, issue 1945)

2026-10-25 21:50:49 +01:00

apply_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

apply.go

Take a container left set aside as the next apply's, and bound an apply to 30 minutes (issue 1945)

2026-10-25 12:18:50 +01:00

archive_removal_test.go

An archive can be undeclared, and undeclaring one no longer stops the apply (hq issue 162)

2026-10-04 12:20:41 +02:00

archive_replace_test.go

Make an unpacked archive exactly the archive (novox/hq issue 220)

2026-10-04 00:17:50 +02:00

archive_unpacked.go

An archive can be undeclared, and undeclaring one no longer stops the apply (hq issue 162)

2026-10-04 12:20:41 +02:00

archive.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

block_test.go

review: rebuild a file the mesh once wrote whole, keep links, give back a missing line end, and release a hold only after the write (hq issue 128)

2026-09-27 00:09:34 +02:00

block.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

busy_test.go

Set a running container aside until its replacement runs, and put it back when the replacement does not come up (issue 1945)

2026-10-25 12:14:41 +01:00

busy.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

container_groups_test.go

Pass a container's groups to the runtime as supplementary groups and report container-groups (issues 1637, ADR 0480 clause 7)

2026-10-21 15:34:37 +02:00

containers_kept_test.go

Take a container left set aside as the next apply's, and bound an apply to 30 minutes (issue 1945)

2026-10-25 12:18:50 +01:00

declared_home_test.go

Let a declared account only add a home, never take one over, and match it by name alone, so no declaration hands another account's .ssh away (issue 1542, review round 1)

2026-10-20 23:32:27 +00:00

exec_killed_test.go

Run an apply in a context the bus's loss cannot end, and say why a killed command was killed (issue 1945)

2026-10-25 12:09:28 +01:00

facts_test.go

A take is a comparison: the host's facts, former targets, and strays (hq ADR 0163)

2026-10-01 21:24:37 +02:00

file_handover_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

filled_apply_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

filled_library_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

filled_runtime_roots_test.go

Judge a filled write with the roots the last apply read, asking no runtime per file (issue 1138)

2026-10-19 00:11:58 +02:00

filled_test.go

The bus node writes the bus's user list alone from the newest composition of the bus module, with no want, and says it in the bus module's have (ADR 0547 §8, issue 1945)

2026-10-25 21:50:49 +01:00

filled.go

Make no container before a file it mounts is there, and clear the empty directory a runtime left at a file's path (issue 1873)

2026-10-22 22:29:39 +02:00

former_archive_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

found_is_said_test.go

Give a handed-over directory through no link on every apply, not only the first (hq issue 356, review)

2026-10-09 19:58:27 +02:00

found_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

giveback_test.go

Say in the plan that a unit is restored only if it is still as the mesh held it

2026-10-09 02:03:51 +02:00

groups_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

groups.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

handover_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

health_check_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

hold_test.go

Set a running container aside until its replacement runs, and put it back when the replacement does not come up (issue 1945)

2026-10-25 12:14:41 +01:00

hold.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

home_links_test.go

Read the homes in one order, so their test does not depend on a map's

2026-10-09 12:36:56 +02:00

home_links.go

Read the homes in one order, so their test does not depend on a map's

2026-10-09 12:36:56 +02:00

home_parents_test.go

Parents the host makes inside an owner's home are the owner's (hq ADR 0182, to-be 41)

2026-10-04 04:07:40 +02:00

homes_linux.go

Keep a module directory's setgid bit, warn about a refused runner, and restart the runner when it leaves (hq ADR 0334 review)

2026-10-13 00:11:50 +02:00

homes_other.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

identities_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

identities.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

inspect_scope_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

into_handover_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

into_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

into.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

judge_directories_test.go

Make the apply tests fit the checker's isolated step: accept any who in the refused line, skip aloud where no group can be set (issue 1919, R4g)

2026-10-23 18:54:53 +02:00

keep.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

library_linux.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

library_test.go

Make the apply tests fit the checker's isolated step: accept any who in the refused line, skip aloud where no group can be set (issue 1919, R4g)

2026-10-23 18:54:53 +02:00

library.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

logging_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

maintenance_window_test.go

Set a running container aside until its replacement runs, and put it back when the replacement does not come up (issue 1945)

2026-10-25 12:14:41 +01:00

maintenance_window.go

Let a planned maintenance window fail no apply (hq issue 291)

2026-10-07 13:11:03 +02:00

mesh_dirs_apply_linux.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

mesh_dirs_gate_test.go

Give a mesh directory its mode and owner only through a descriptor, and gate what the walk refuses (issue 358)

2026-10-12 14:00:53 +02:00

mesh_dirs_linux.go

Judge a node's directories read-only before the walk refuses any (issue 358)

2026-10-12 13:57:52 +02:00

mesh_dirs_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

mesh_dirs.go

Take a directory in the mesh's own tree that the engine's account owns as the mesh's, not as found (issue 1873)

2026-10-22 22:23:04 +02:00

mesh_names_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

mesh_tree_found_test.go

Judge the mesh's tree by where a path leads, not only by its text (issue 1873, review)

2026-10-22 22:27:45 +02:00

mode_test.go

Refuse a declaration for the other mode, or older than the mesh's last, and say what an apply would change first

2026-09-23 23:15:28 +02:00

mode.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

module_results_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

module_results.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

module_scope_test.go

Leave a record another module's composition now holds, whatever its type, instead of removing it in the node's own apply; a removed module holds nothing back (issue 1944, issue 1945)

2026-10-25 02:54:58 +02:00

mount_waits_test.go

Make no container before a file it mounts is there, and clear the empty directory a runtime left at a file's path (issue 1873)

2026-10-22 22:29:39 +02:00

mount_waits.go

Make no container before a file it mounts is there, and clear the empty directory a runtime left at a file's path (issue 1873)

2026-10-22 22:29:39 +02:00

move_out_linux.go

Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)

2026-10-17 16:09:33 +00:00

move_out_other.go

Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)

2026-10-17 16:09:33 +00:00

move_out_test.go

Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)

2026-10-17 16:09:33 +00:00

move_out.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

opening_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

opening.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

ownership_test.go

Feature 57 (config and provisioning): release mesh-host, the reviewed release branch on top of main

2026-10-16 08:24:13 +00:00

placed.go

Keep libraries under groups of their own, and give modules users in them (hq ADR 0328, issue 567)

2026-10-12 22:11:09 +02:00

placement_guard_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

placement_guard.go

Let a declared account only add a home, never take one over, and match it by name alone, so no declaration hands another account's .ssh away (issue 1542, review round 1)

2026-10-20 23:32:27 +00:00

placement_homes_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

plan_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

plan.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

process_step_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

process_test.go

Retire a daemon's running build instead of deleting it before the restart (issue 734)

2026-10-26 15:01:55 +01:00

process_witness_test.go

Retire a daemon's running build instead of deleting it before the restart (issue 734)

2026-10-26 15:01:55 +01:00

process.go

Retire a daemon's running build instead of deleting it before the restart (issue 734)

2026-10-26 15:01:55 +01:00

reads_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

references_test.go

Read a file's object from the node's own bucket, declaration-files-<node>, never a shared one (issue 1695, ADR 0486 §2)

2026-10-21 15:41:09 +02:00

references.go

Read a file's object from the node's own bucket, declaration-files-<node>, never a shared one (issue 1695, ADR 0486 §2)

2026-10-21 15:41:09 +02:00

refused_directory_test.go

Say both a gated module and a machine stop, and count skipped apart (review of #83)

2026-10-11 18:51:04 +02:00

removal_order_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

remove_file_test.go

An undeclared file is deleted only when it holds what the host wrote; otherwise moved aside (hq issue 241)

2026-10-05 01:30:42 +02:00

replace_image_test.go

Take a container left set aside as the next apply's, and bound an apply to 30 minutes (issue 1945)

2026-10-25 12:18:50 +01:00

replay358_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

restart_order_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

root_moved_test.go

Keep the walk's paths as bytes, forget a walk root superseded, and leave other mounts unread (hq issue 361 review)

2026-10-10 01:10:56 +02:00

root_moved.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

roots.go

Keep libraries under groups of their own, and give modules users in them (hq ADR 0328, issue 567)

2026-10-12 22:11:09 +02:00

runonce_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

runtime_roots_more_test.go

Ask the running runtimes where they keep their data, and read every form a unit says it in

2026-10-09 01:22:11 +02:00

runtime_roots_test.go

Read every runtime's data root, keep when a directory was found, and key a hand-over to its resource

2026-10-09 00:55:21 +02:00

schedule_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

schedule.go

The node agent runs in the node-engine: watches the wants and compositions on the link, applies one module's composition, asks the backup, writes the haves (R6-A A1, A5, A6)

2026-10-24 16:39:51 +02:00

sealed_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

ssh_home_test.go

Say every directory used as found, let a person hand it over, and refuse the runtime's data and any .ssh

2026-10-09 00:28:01 +02:00

stateless_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

stayed_running_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

step_failed_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

store_away_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

store_away.go

Let a planned maintenance window fail no apply (hq issue 291)

2026-10-07 13:11:03 +02:00

strays.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

takeover_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

takeover.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

test_hooks.go

Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)

2026-10-17 16:09:33 +00:00

testing_dirs.go

Raise a process-form controller at genesis as the container it replaces (hq issue 223)

2026-10-04 01:47:33 +02:00

user_numeric_test.go

An owner may be a number the machine has never heard of

2026-09-01 23:45:02 +02:00

user_test.go

Refuse to take over a system account as one that never becomes root

2026-10-09 10:07:52 +02:00

user_unix.go

A user, bytes, and an archive — because most of what people install is

2026-08-30 03:22:38 +02:00

user.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

userscope_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

vault_sealed_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

vocabulary_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

walk_linux.go

Give no account a home, keep old data's sub-paths for the warrant, and never hand out setgid (hq ADR 0328 review)

2026-10-12 22:18:16 +02:00

walk_other.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

walk.go

Give no account a home, keep old data's sub-paths for the warrant, and never hand out setgid (hq ADR 0328 review)

2026-10-12 22:18:16 +02:00

whole_test.go

A file written over is given its kept original back when undeclared (hq ADR 0118, 0102)

2026-10-04 12:54:16 +02:00

whole.go

An undeclared file is deleted only when it holds what the host wrote; otherwise moved aside (hq issue 241)

2026-10-05 01:30:42 +02:00