jschoubben cbe8528f91 Resolve ${secret:<name>} through this node's provision keys, and check the reference by the vault's own name (issue 1954 L6-E1, E2; ADR 0570 clauses 1, 6; ADR 0094) ...

- A placeholder is `${secret:<name>}`, the name the module calls the credential (catalogue.SecretLocal): the local
  name where it keeps several values of one provision, else the provision. The `<provision>.<local>` form goes.
- The engine finds the one key under `<node>.<module>.` of mesh-provisioner's `provisions` going by that name. That is
  what node.<node> may read, by a watch to its caught-up mark; plans are not read.
- The reference's ID must be a credential name of that provision (provisions.VaultName). The vault's answer must carry
  exactly that name and generation. Anything else refuses the write, naming both.

Pins mesh-sdk 66ff33d. Tests: rows in TestAWriteAndAnApplyOfTheSameFileSerialise (a local name, a name no provision
goes by, a reference to no credential of the provision, a mismatched answer).

2026-10-29 22:41:44 +01:00

..

applied_store.go

Keep the node's own as it runs from an engine's first start, and refuse the node's own apply removing a module no want removed (issue 774, review round 1)

2026-10-29 21:25:51 +01:00

apply_context_test.go

Take a container left set aside as the next apply's, and bound an apply to 30 minutes (issue 1945)

2026-10-25 12:18:50 +01:00

applywhole_test.go

The node agent runs in the node-engine: watches the wants and compositions on the link, applies one module's composition, asks the backup, writes the haves (R6-A A1, A5, A6)

2026-10-24 16:39:51 +02:00

authority_test.go

Keep the node's own as it runs from an engine's first start, and refuse the node's own apply removing a module no want removed (issue 774, review round 1)

2026-10-29 21:25:51 +01:00

authority.go

The node keeps the mesh's own certificate it applies, from its kept declaration at start, for its record; one agent test folded to hold the count (issue 1126, ADR 0555 §3)

2026-10-26 19:24:36 +01:00

backup_event_test.go

The node agent waits for a backup's end on the holder's event, not by polling; the manifest consumes it (R6-A A5)

2026-10-24 17:03:30 +02:00

backup_nothing_test.go

Apply a module again when the engine holds no record of its resources or its health says one is missing, and move a module with nothing to back up without a backup (issue 1944, issue 1945)

2026-10-25 10:59:21 +01:00

busy_test.go

The node-engine hears no declaration: the queue, orders, put-backs, unsaid, numbers and news go; a session says the facts in the node-engine's own order, and the first have proves a build (R6-A A7, A8)

2026-10-24 16:25:11 +02:00

empty_write_test.go

Refuse an apply that would write a provisioner's file empty, read the node's own filled paths, and name the node's own composition when its apply fails (issue 1944, issue 1945)

2026-10-25 01:49:00 +02:00

engineseat.go

Revert "Merge pull request 'Revert L3: its node-engine removed every held module on novox, the bus server among them (issue 774)' (#174) from revert/774-l3 into main"

2026-10-29 21:04:13 +01:00

file_references_test.go

Compose a file that runs as the node last wrote it, so a stale kept declaration's export no longer names a swept object (issue 924)

2026-10-29 21:04:17 +01:00

filling_test.go

Resolve ${secret:<name>} through this node's provision keys, and check the reference by the vault's own name (issue 1954 L6-E1, E2; ADR 0570 clauses 1, 6; ADR 0094)

2026-10-29 22:41:44 +01:00

filling.go

Resolve ${secret:<name>} through this node's provision keys, and check the reference by the vault's own name (issue 1954 L6-E1, E2; ADR 0570 clauses 1, 6; ADR 0094)

2026-10-29 22:41:44 +01:00

found_test.go

Revert "Merge pull request 'Revert L3: its node-engine removed every held module on novox, the bus server among them (issue 774)' (#174) from revert/774-l3 into main"

2026-10-29 21:04:13 +01:00

found.go

Revert "Merge pull request 'Revert L3: its node-engine removed every held module on novox, the bus server among them (issue 774)' (#174) from revert/774-l3 into main"

2026-10-29 21:04:13 +01:00

healthowed_test.go

Reconcile a module from the machine's facts at engine start and at each edge of a declared-running resource going down (issue 1957, ADR 0568)

2026-10-28 18:12:35 +01:00

inactive_test.go

Reconcile a module from the machine's facts at engine start and at each edge of a declared-running resource going down (issue 1957, ADR 0568)

2026-10-28 18:12:35 +01:00

inactive.go

Reconcile a module from the machine's facts at engine start and at each edge of a declared-running resource going down (issue 1957, ADR 0568)

2026-10-28 18:12:35 +01:00

join_tunnel_test.go

A joining machine dials the bus once the hub has answered its tunnel

2026-10-08 01:33:30 +02:00

join_tunnel.go

A joining machine dials the bus once the hub has answered its tunnel

2026-10-08 01:33:30 +02:00

judge_directories.go

What runs is the agent's compositions plus the kept declaration's rest: health, filling, take act, directories and the others held out of an apply read it; a restart trusts the node-engine's own haves; the bed tests run off Arch (review round 1)

2026-10-24 18:13:40 +02:00

libraries_test.go

Revert "Merge pull request 'Revert L3: its node-engine removed every held module on novox, the bus server among them (issue 774)' (#174) from revert/774-l3 into main"

2026-10-29 21:04:13 +01:00

libraries.go

What runs is the agent's compositions plus the kept declaration's rest: health, filling, take act, directories and the others held out of an apply read it; a restart trusts the node-engine's own haves; the bed tests run off Arch (review round 1)

2026-10-24 18:13:40 +02:00

main_test.go

apply FILE is no hand path: mesh-compose and a want are (ADR 0539 clause 10); genesis keeps the carried bundle

2026-10-24 16:55:23 +02:00

main.go

Fill a provision's ${secret:} at the write from the vault's value sealed to this machine, so the provisioner's client never holds it (issue 1954 L6-E1, E2; ADR 0570 clause 6)

2026-10-29 22:36:53 +01:00

meshcli.go

The node-engine hears no declaration: the queue, orders, put-backs, unsaid, numbers and news go; a session says the facts in the node-engine's own order, and the first have proves a build (R6-A A7, A8)

2026-10-24 16:25:11 +02:00

module_facts_test.go

Take the node-engine's parser and validator from mesh-sdk: pin, README and cmd imports (issue 1392)

2026-10-20 11:15:23 +00:00

move_out_test.go

Prove move-out on a machine that is not Arch (issue 1024)

2026-10-17 16:16:02 +00:00

movesecret_test.go

Feature 57 (config and provisioning): release mesh-host, the reviewed release branch on top of main

2026-10-16 08:24:13 +00:00

movesecret.go

The node-engine hears no declaration: the queue, orders, put-backs, unsaid, numbers and news go; a session says the facts in the node-engine's own order, and the first have proves a build (R6-A A7, A8)

2026-10-24 16:25:11 +02:00

network_test.go

Take the node-engine's parser and validator from mesh-sdk: pin, README and cmd imports (issue 1392)

2026-10-20 11:15:23 +00:00

no_check_script_test.go

Delete merge-check.sh; the checker's levels run what it ran (issue 1295, S3; ADR 0529)

2026-10-23 15:26:03 +02:00

nodeagent_integration_test.go

Revert "Merge pull request 'Revert L3: its node-engine removed every held module on novox, the bus server among them (issue 774)' (#174) from revert/774-l3 into main"

2026-10-29 21:04:13 +01:00

nodeagent.go

Keep the node's own as it runs from an engine's first start, and refuse the node's own apply removing a module no want removed (issue 774, review round 1)

2026-10-29 21:25:51 +01:00

nodeclare_test.go

The node-engine hears no declaration: the queue, orders, put-backs, unsaid, numbers and news go; a session says the facts in the node-engine's own order, and the first have proves a build (R6-A A7, A8)

2026-10-24 16:25:11 +02:00

nodekey_test.go

The engine states its key again until it hears the vault's key, and at a slow interval after, so a vault delivered after it or a changed vault key is heard (review of the adoption handing, ADR 0547 clause 9)

2026-10-26 12:03:12 +01:00

nodekey.go

The engine states its key again until it hears the vault's key, and at a slow interval after, so a vault delivered after it or a changed vault key is heard (review of the adoption handing, ADR 0547 clause 9)

2026-10-26 12:03:12 +01:00

ownresync.go

A read the bus did not answer is tried again after a bound, never kept as an answer: the shadow's answer, the node's composition and the own-secret step (issue 1126)

2026-10-28 12:11:08 +01:00

probe_test.go

The node-engine hears no declaration: the queue, orders, put-backs, unsaid, numbers and news go; a session says the facts in the node-engine's own order, and the first have proves a build (R6-A A7, A8)

2026-10-24 16:25:11 +02:00

probe.go

Take the node-engine's parser and validator from mesh-sdk: pin, README and cmd imports (issue 1392)

2026-10-20 11:15:23 +00:00

provision_secrets.go

Resolve ${secret:<name>} through this node's provision keys, and check the reference by the vault's own name (issue 1954 L6-E1, E2; ADR 0570 clauses 1, 6; ADR 0094)

2026-10-29 22:41:44 +01:00

reads-outside

Mark the packages whose tests read files outside their directory, found by the review (issue 1935)

2026-10-24 04:39:01 +02:00

recorded_test.go

Reconcile a module from the machine's facts at engine start and at each edge of a declared-running resource going down (issue 1957, ADR 0568)

2026-10-28 18:12:35 +01:00

rekey_test.go

Stop nothing the mesh cannot replace, give the tunnel back on failure, and take it over after enrolment

2026-09-24 00:02:08 +02:00

replay233_test.go

Take the node-engine's parser and validator from mesh-sdk: pin, README and cmd imports (issue 1392)

2026-10-20 11:15:23 +00:00

restarts_words_test.go

Say an unhealthy resource's restart count as the engine's own since it began watching

2026-10-12 10:47:07 +02:00

runs_as_written.go

Compose a file that runs as the node last wrote it, so a stale kept declaration's export no longer names a swept object (issue 924)

2026-10-29 21:04:17 +01:00

trust.go

Revert "Merge pull request 'Revert L3: its node-engine removed every held module on novox, the bus server among them (issue 774)' (#174) from revert/774-l3 into main"

2026-10-29 21:04:13 +01:00

units_test.go

Revert "Merge pull request 'Revert L3: its node-engine removed every held module on novox, the bus server among them (issue 774)' (#174) from revert/774-l3 into main"

2026-10-29 21:04:13 +01:00

userlist.go

Bring in the adoption handing; the bus node writes nothing before it heard the switch, retries the key's watch and keeps the follow last heard, and an apply never writes the controller's list while the grants part's is followed (review of the switch, issue 1945)

2026-10-26 12:30:07 +01:00

vaultbox_nats_test.go

The node-engine hears no declaration: the queue, orders, put-backs, unsaid, numbers and news go; a session says the facts in the node-engine's own order, and the first have proves a build (R6-A A7, A8)

2026-10-24 16:25:11 +02:00

version_from_path_test.go

A delivered host reads its version from where it sits

2026-09-30 12:40:00 +02:00

whatruns_test.go

Revert "Merge pull request 'Revert L3: its node-engine removed every held module on novox, the bus server among them (issue 774)' (#174) from revert/774-l3 into main"

2026-10-29 21:04:13 +01:00

witnessing_test.go

The node-engine hears no declaration: the queue, orders, put-backs, unsaid, numbers and news go; a session says the facts in the node-engine's own order, and the first have proves a build (R6-A A7, A8)

2026-10-24 16:25:11 +02:00

witnessing.go

The node-engine hears no declaration: the queue, orders, put-backs, unsaid, numbers and news go; a session says the facts in the node-engine's own order, and the first have proves a build (R6-A A7, A8)

2026-10-24 16:25:11 +02:00