jschoubben fe9533c186 The node-engine's bus watch never holds the client back: it keeps the newest update per key while its reader is busy (issue 1966) ...

Live fault 2026-11-08: node-engines on two machines logged only "nats: slow consumer, messages dropped" and applied nothing. The
client's watch sends into its channel from inside the subscription's callback; KVWatch forwarded that channel to its reader
blocking, and the reader (composing for minutes) stopped draining, so the subscription's pending limit overflowed.

Quick fix: a larger buffer on the watch's channel; it only moves the limit. Thorough fix (chosen): the forwarder always drains the
client's channel and, while its reader is busy, coalesces the pending updates by key (newest value and revision, first-seen
order, Caught kept in its place), so no reader's pace can back the client up, whatever the burst. A slow consumer error now
names its subscription and what it holds pending.

Claude-Session: https://claude.ai/code/session_01NcbgfFfQ4Z9UE5jK32PmE5

2026-11-08 00:26:33 +01:00

..

testdata

Witness the node tools alone: the controller's lease names no build any more

2026-11-02 11:22:21 +01:00

access_act_test.go

Node-engine: seat-list and seat-list-again answer every operator's session and the healers, no other caller (ADR 0636 §7; issue 1966)

2026-11-05 14:45:43 +01:00

asktool_nats_test.go

A composition is applied only when the controller or the operator signed it; the node agent's integration tests on an embedded bus (R6-A A9, A1, A5)

2026-10-24 16:42:11 +02:00

bus.go

Node-engine: the have, the node's facts, the record, the health report and the data items are the seat's contract types, written through the node-engine client; the interim bridge is gone (Have group, ADR 0634 §1, §4; issue 1966)

2026-11-05 15:21:48 +01:00

composedstate.go

Node-engine: a composition, its codec, digest and keys come from the node-engine client; the candidate answer and its limits from the seat's contract; the declared packages are the engine's own (H-2, H-3, ADR 0634 §1; issue 1966)

2026-11-05 15:10:45 +01:00

enginedata.go

Node-engine: the have, the node's facts, the record, the health report and the data items are the seat's contract types, written through the node-engine client; the interim bridge is gone (Have group, ADR 0634 §1, §4; issue 1966)

2026-11-05 15:21:48 +01:00

enginepackages.go

Node-engine: a composition, its codec, digest and keys come from the node-engine client; the candidate answer and its limits from the seat's contract; the declared packages are the engine's own (H-2, H-3, ADR 0634 §1; issue 1966)

2026-11-05 15:10:45 +01:00

engineseat.go

Node-engine: seat-list and seat-list-again answer every operator's session and the healers, no other caller (ADR 0636 §7; issue 1966)

2026-11-05 14:45:43 +01:00

enrol_seat_test.go

Merge branch 'b6/registry' into feat/registry-milestone

2026-11-05 15:48:43 +01:00

enrol_seat.go

The node-engine follows the module-assignment seat: assignments, not placement; the seat's packages move to mesh-contracts and mesh-delivery (issue 1966)

2026-11-05 22:08:40 +01:00

enrol.go

Node-engine: the seats are called by their names mesh-module-assigner and mesh-node-enroller (ADR 0634 §9; H-5; issue 1966)

2026-11-05 14:17:46 +01:00

files_nats_test.go

Read a file's object from the node's own bucket, declaration-files-<node>, never a shared one (issue 1695, ADR 0486 §2)

2026-10-21 15:41:09 +02:00

files_node_test.go

Read a file's object from the node's own bucket, declaration-files-<node>, never a shared one (issue 1695, ADR 0486 §2)

2026-10-21 15:41:09 +02:00

files.go

Node-engine: logins, signers, enrolment tokens and redeems, and the grants part's sealed user list come from the vault and node-enroller clients and the grants state package; no file imports go/delivery (ADR 0634 §1, §4; issue 1966)

2026-11-05 15:47:59 +01:00

findings.go

Node-engine: reads the seat list through the seat mesh-catalog, holds what is new until it was read, writes its finding after five minutes; verbs seat-list and seat-list-again; whole-module case against a stand-in of the seat (H-7, ADR 0636 §1, §7, §8; issue 1966)

2026-11-05 14:26:15 +01:00

handacts.go

Node-engine: the value version comes from mesh-sdk go/keys, not go/delivery (H-2, ADR 0634 §1, §4; issue 1966)

2026-11-05 14:59:39 +01:00

handover_test.go

Node-engine: seat-list and seat-list-again answer every operator's session and the healers, no other caller (ADR 0636 §7; issue 1966)

2026-11-05 14:45:43 +01:00

handover.go

Open every link with no signer instead of following the controller's key

2026-11-02 11:24:05 +01:00

have_nats_integration_test.go

Node-engine: the have, the node's facts, the record, the health report and the data items are the seat's contract types, written through the node-engine client; the interim bridge is gone (Have group, ADR 0634 §1, §4; issue 1966)

2026-11-05 15:21:48 +01:00

have_test.go

The node-engine follows the module-assignment seat: assignments, not placement; the seat's packages move to mesh-contracts and mesh-delivery (issue 1966)

2026-11-05 22:08:40 +01:00

have.go

The node-engine follows the module-assignment seat: assignments, not placement; the seat's packages move to mesh-contracts and mesh-delivery (issue 1966)

2026-11-05 22:08:40 +01:00

health_test.go

Node-engine: the have, the node's facts, the record, the health report and the data items are the seat's contract types, written through the node-engine client; the interim bridge is gone (Have group, ADR 0634 §1, §4; issue 1966)

2026-11-05 15:21:48 +01:00

hearing_nats.go

The node-engine's bus watch never holds the client back: it keeps the newest update per key while its reader is busy (issue 1966)

2026-11-08 00:26:33 +01:00

hearing.go

The node-engine hears no declaration: the queue, orders, put-backs, unsaid, numbers and news go; a session says the facts in the node-engine's own order, and the first have proves a build (R6-A A7, A8)

2026-10-24 16:25:11 +02:00

history_integration_test.go

The node-engine follows the module-assignment seat: assignments, not placement; the seat's packages move to mesh-contracts and mesh-delivery (issue 1966)

2026-11-05 22:08:40 +01:00

judge_directories_test.go

Judge a node's directories read-only before the walk refuses any (issue 358)

2026-10-12 13:57:52 +02:00

logins_test.go

Node-engine: logins, signers, enrolment tokens and redeems, and the grants part's sealed user list come from the vault and node-enroller clients and the grants state package; no file imports go/delivery (ADR 0634 §1, §4; issue 1966)

2026-11-05 15:47:59 +01:00

logins.go

Node-engine: logins, signers, enrolment tokens and redeems, and the grants part's sealed user list come from the vault and node-enroller clients and the grants state package; no file imports go/delivery (ADR 0634 §1, §4; issue 1966)

2026-11-05 15:47:59 +01:00

messages_test.go

Say the node's facts in its haves alone, and enrol through the seat alone

2026-11-02 11:27:28 +01:00

messages.go

Node-engine: the have, the node's facts, the record, the health report and the data items are the seat's contract types, written through the node-engine client; the interim bridge is gone (Have group, ADR 0634 §1, §4; issue 1966)

2026-11-05 15:21:48 +01:00

movesecret_test.go

Read the vault's structured move-in refusal and take a value it holds another of as superseded, so the move is not asked again for ever (issue 774)

2026-10-30 18:36:38 +01:00

movesecret.go

Node-engine: reads the seat list through the seat mesh-catalog, holds what is new until it was read, writes its finding after five minutes; verbs seat-list and seat-list-again; whole-module case against a stand-in of the seat (H-7, ADR 0636 §1, §7, §8; issue 1966)

2026-11-05 14:26:15 +01:00

nodehealth.go

Node-engine: the have, the node's facts, the record, the health report and the data items are the seat's contract types, written through the node-engine client; the interim bridge is gone (Have group, ADR 0634 §1, §4; issue 1966)

2026-11-05 15:21:48 +01:00

nothing_alive_test.go

The node-engine hears no declaration: the queue, orders, put-backs, unsaid, numbers and news go; a session says the facts in the node-engine's own order, and the first have proves a build (R6-A A7, A8)

2026-10-24 16:25:11 +02:00

pinned_test.go

The engine dials as the login the vault's node-logins names

2026-11-02 01:49:01 +01:00

pinned.go

A first node gets as far as its own bus: three faults on the way

2026-09-29 15:42:43 +02:00

record.go

Node-engine: the have, the node's facts, the record, the health report and the data items are the seat's contract types, written through the node-engine client; the interim bridge is gone (Have group, ADR 0634 §1, §4; issue 1966)

2026-11-05 15:21:48 +01:00

replay331_test.go

A composition is applied only when the controller or the operator signed it; the node agent's integration tests on an embedded bus (R6-A A9, A1, A5)

2026-10-24 16:42:11 +02:00

rotate_integration_test.go

Node-engine: logins, signers, enrolment tokens and redeems, and the grants part's sealed user list come from the vault and node-enroller clients and the grants state package; no file imports go/delivery (ADR 0634 §1, §4; issue 1966)

2026-11-05 15:47:59 +01:00

rotate_nats.go

The engine test-dials, switches, confirms, drops and falls back across a rotation of its login

2026-11-02 01:49:01 +01:00

rotate_test.go

Node-engine: logins, signers, enrolment tokens and redeems, and the grants part's sealed user list come from the vault and node-enroller clients and the grants state package; no file imports go/delivery (ADR 0634 §1, §4; issue 1966)

2026-11-05 15:47:59 +01:00

rotate.go

gofmt the files the group try listed

2026-11-06 01:38:43 +01:00

roused_test.go

A machine that wakes or moves says so, instead of waiting to be told

2026-08-31 10:21:26 +02:00

run.go

Node-engine: seat-list and seat-list-again answer every operator's session and the healers, no other caller (ADR 0636 §7; issue 1966)

2026-11-05 14:45:43 +01:00

seats_for_tests_test.go

The link tests are given the seat list as the node-engine gives it from the bus, so the node seat has its verbs to serve (issue 1966)

2026-11-06 01:43:37 +01:00

session_test.go

Say the node's facts in its haves alone, and enrol through the seat alone

2026-11-02 11:27:28 +01:00

session.go

Node-engine: the have, the node's facts, the record, the health report and the data items are the seat's contract types, written through the node-engine client; the interim bridge is gone (Have group, ADR 0634 §1, §4; issue 1966)

2026-11-05 15:21:48 +01:00

setuid_search_test.go

Revert "Merge pull request 'Revert L3: its node-engine removed every held module on novox, the bus server among them (issue 774)' (#174) from revert/774-l3 into main"

2026-10-29 21:04:13 +01:00

transient.go

Retry an apply, a fetch by digest and a have write that met the bus reloading, and keep the cause in the have

2026-10-25 23:37:02 +01:00

watch_coalesce_test.go

The node-engine's bus watch never holds the client back: it keeps the newest update per key while its reader is busy (issue 1966)

2026-11-08 00:26:33 +01:00

watch.go

The node-engine's bus watch never holds the client back: it keeps the newest update per key while its reader is busy (issue 1966)

2026-11-08 00:26:33 +01:00

witnessing_nats_test.go

Witness the node tools alone: the controller's lease names no build any more

2026-11-02 11:22:21 +01:00

witnessing.go

ENG-2: the node's record says the capabilities its tool runner states of its calls, asked of the runner's PING at each report (issue 1966)

2026-11-04 11:41:11 +01:00