560 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
jschoubben	e44cbaf57f	A module with no floor holds no head back; a merge among its changes reads not yet on the machines (review of issue 1280, ADR 0556 clause 2)	2026-10-26 21:12:48 +01:00
jschoubben	1f70c4c0aa	A settle ask's group begins with a colon, which no branch name holds, so a branch named settle/... still merges on its Approve (review of issue 1280)	2026-10-26 21:12:31 +01:00
jschoubben	5ecda46124	A settle ask's group and the act its options bind, shared by the gate and the teller (ADR 0556 clause 5)	2026-10-26 21:12:31 +01:00
jschoubben	aa8e9afc7c	A module's floor counts every running have, healthy or not; health stays in its words (ADR 0556 clause 2, insight)	2026-10-26 21:12:31 +01:00
jschoubben	54a8afac73	The view's reach carries the reached head and each change's source revision; nothing records a merge as delivered (ADR 0556 v8)	2026-10-26 21:12:31 +01:00
jschoubben	43de3c937d	Layouts of the indexer's taken and the view's reach, and the delivery seat's settle verb, so whether a merge is on the machines can be derived (issue 1280, ADR 0556)	2026-10-26 21:12:31 +01:00
jschoubben	03dce12378	The standing test keeps c failing alone after its ask is dropped, so its only recovery is its retirement: clearing every failure at once raced the loop's read of the new list under load (issue 1126; the hidden failure of try-1793042418286545971, issue 1901)	2026-10-26 20:33:23 +01:00
mesh-tools	dae8e288d2	Merge pull request 'A change that adds a compiled binary is refused, in any repository (issue 1577)' (#99) from fix/1577-checker-refuses-binaries into main	2026-10-26 19:32:25 +00:00
jschoubben	dd9d9d5b5f	Compare haves with SameHave in the round-trip tests, now that a have carries a list (issue 1126)	2026-10-26 20:20:12 +01:00
jschoubben	2c0ab3a592	A have carries the values a self-composing node's running composition holds sealed to its key, so its composer reuses them after a restart (review of L2, round 2; issue 1126, ADR 0547 §3)	2026-10-26 20:19:54 +01:00
jschoubben	47a66e3c0d	Take a crashed file's cause only from what the run wrote after the last test, give a subtest's panic to that subtest, and keep the SDK's test count (issue 1901, review round 1)	2026-10-26 20:17:42 +01:00
jschoubben	3968849b1b	Review of L2: the export is a placement file at its version with its modules (S1); a node asks the vault only when a module placed on it declares an own secret, so one with none composes whether or not the vault answers (H8's failure) (issue 1126)	2026-10-26 20:08:32 +01:00
jschoubben	02f50bd9d6	A build seat's capacity follows its node's build CPU, and a running ask says its phases ... Since the build CPU cap (issue 1806) shanks' mesh-build-go kept capacity 3 inside a 12-core slice: three full checks got about 4 cores each and ran past the 30-minute step bound (issue 1890). The puller now judges by min(configured, floor(slice quota cores / cores-per-step)), the quota read live from its cgroup, says it on change and writes capacity.<node> to the pauses state. A run's phases (fetch and merge, digest, tests) are logged with the ask id and written to its running step key; Asker.Wait hands every step value to a WithStepSeen hook.	2026-10-26 19:52:54 +01:00
jschoubben	81ec7bd7de	Drop the failure contract's unused version constant: a result names its build module with By (issue 1901)	2026-10-26 19:50:17 +01:00
jschoubben	fe11db9293	MergeInto also names programs a commit of the branch added and a later one removed: the merge commit would keep the blob in history (issue 1577)	2026-10-26 19:47:17 +01:00
jschoubben	e40dd0f56a	One failure contract for a build step's failed test, its parsers and a conformance kit every build module runs (issue 1901) ... Each build module parsed its own test runner's output, so a fix in one never reached the others: a failed node --test run was worded by a passing line of its first file. buildstep.Failure names the test, its file, its cause and its own output; ReadGoTest (moved from mesh-build-go) and ReadTAP fill it; package conformance holds every build module to it with runner output captured with the build nodes' own toolchains.	2026-10-26 19:45:35 +01:00
jschoubben	9713c3023a	Placement carries a settings-form module's config values, which mesh-config does not hold, and the export writes them (issue 1126, ADR 0555 §1): the media modules on one node would compose without them	2026-10-26 19:38:37 +01:00
jschoubben	53c2def1a5	VaultSecretChanged is a variable (its seat is), and gofmt (issue 1126)	2026-10-26 19:25:19 +01:00
jschoubben	f55b34febc	A node composing its own hears the vault's secret-changed, names and generations only (issue 1126, ADR 0547 §2)	2026-10-26 19:25:09 +01:00
jschoubben	944a35d200	A node's record carries the mesh's own certificate as the machine holds it, and frombus composes with the composing node's (issue 1126, ADR 0555 §3)	2026-10-26 19:23:06 +01:00
jschoubben	7d81e8326f	frombus gives the composing node's core credentials as the vault's boxes sealed to it, from the same own secrets (issue 1126, ADR 0349 §16, ADR 0550 §5)	2026-10-26 19:22:58 +01:00
jschoubben	91413de335	compose names the pair credentials a node's composition reads as consumer and provider, and frombus asks them sealed before it composes (issue 1126, ADR 0550 §5)	2026-10-26 19:18:46 +01:00
jschoubben	6447a1c6d4	placement-seed writes each node's first placement file from the controller's export, checked before anything is written, once (issue 1126, ADR 0549 §4, ADR 0555 §6)	2026-10-26 19:17:45 +01:00
jschoubben	4d5f430224	A want the node composes itself says so (Self) and names the build alone; every other want names its composition as before, so no caller of the old form changes (issue 1126, ADR 0547 §2)	2026-10-26 19:13:56 +01:00
jschoubben	dfe3ba9475	frombus exports a node's placement from a composition input, Input's inverse for what a person decides, and the controller's seat declares placement-export (issue 1126, ADR 0555 §6)	2026-10-26 19:11:34 +01:00
jschoubben	f1d7c7377d	frombus reads the composing node's own secrets sealed to it, and node principals may ask the vault's own in their own name (issue 1126, ADR 0550 §5)	2026-10-26 19:03:00 +01:00
jschoubben	22bc4dc8ef	MergeInto names the changed files that are compiled programs, read in the workspace, so a check can refuse build output (issue 1577)	2026-10-26 18:59:35 +01:00
jschoubben	b72de2b75a	A node applying what it composed refuses a composition that stands in for anything its input lacks, the bus's user list alone held out (issue 1126, ADR 0547 §2)	2026-10-26 18:59:05 +01:00
jschoubben	6df0dfe208	Node principals read what they compose their own modules from; the composer copy is held per user to the controller's grants plus exactly these (issue 1126, ADR 0547 §2, ADR 0549 §3)	2026-10-26 18:44:06 +01:00
jschoubben	9532b78724	A node's own want names no composition from the second milestone: the node composes its own (issue 1126, ADR 0547 §2)	2026-10-26 18:41:33 +01:00
jschoubben	e49309d61c	A want names the build alone from the second milestone, and the yes a person gave; a have waits for that yes with its judgement (issue 1126, ADR 0547 §2, §3)	2026-10-26 18:39:46 +01:00
jschoubben	9789c8379a	Node principals read every node's own facts, where its record rides; the composer copy is checked to grant all the controller's grants and only that and the issue 1790 rows more (issue 1126, ADR 0555 §3)	2026-10-26 18:33:36 +01:00
jschoubben	2b0689f654	A node's record rides in its own have key, <node>.node: no bucket, writer or grant of its own, and its key's change is what readers hear (issue 1126, ADR 0555 §3)	2026-10-26 18:29:45 +01:00
jschoubben	5b1e990eb4	The tunnel found at adoption and the names of the hub's peers are kept in the placement; whether the hub took it over and who enrolled under a peer's key are read from placement and records, as the controller reads them (issue 1126, ADR 0555)	2026-10-26 18:26:11 +01:00
jschoubben	a431746c0e	What a person decides of a node lives in its placement file and what the machine observes in its record; two nodes on one address or two hubs are refused (issue 1126, K2)	2026-10-26 18:17:59 +01:00
jschoubben	5db53e738f	Name the catalogue repository whose placement files are read (issue 1126, ADR 0549 §1)	2026-10-26 18:10:25 +01:00
jschoubben	9f7f50de8d	A merged message of the catalogue carries its placement files, so the indexer reads placement at the merge without asking the forge again (issue 1126, ADR 0549 §2)	2026-10-26 18:08:59 +01:00
jschoubben	bdd4c7b875	The judgement of a move is a pure function in mesh-sdk, so a node agent judges what it composed against what it runs (issue 1126, ADR 0547 §3, ADR 0377 §3)	2026-10-26 18:07:20 +01:00
jschoubben	e982072443	frombus fills the composition's input from placement, node records, the indexer's manifests and mesh-config's slice, so one composer serves the node agent, the check and the grants part (issue 1126, ADR 0547 §2, ADR 0549 §3)	2026-10-26 18:06:04 +01:00
jschoubben	146cd858a3	Placement and the node record have one layout in mesh-sdk, so the indexer, the node agents and the composition check read them alike (issue 1126, ADR 0549 §1-§2, ADR 0547 §2)	2026-10-26 18:02:13 +01:00
mesh-tools	a7a1fbd34e	Merge pull request 'A module waits for a state created after it starts (issue 1790)' (#97) from fix/1790-state-appears into main	2026-10-26 14:47:31 +00:00
mesh-tools	1888d1d230	Merge pull request 'A git or ssh-keygen failure keeps its own words (forgekey.Said)' (#96) from fix/fetch-reads-all into main	2026-10-26 14:47:25 +00:00
mesh-tools	960d6c34d2	Merge pull request 'The composer gives build modules the node's share: idle, capped builds (issue 1806, ADR 0553/0554, change B)' (#95) from fix/build-cpu-yields-compose into main	2026-10-26 14:31:13 +00:00
jschoubben	ff81bdf8cc	Keep git's own words in a fetch's reason: a bare "error:" line no longer stands for the forge's refusal ... The mirror of jschoubben/car-hunter on ace said only "git -C: error:": git writes a bare "error:" before the forge's message, and the reason kept the first non-empty line. forgekey.Said keeps every line that says something, leaves bare prefixes out, joins them and bounds them at 600 bytes; every git and ssh-keygen reason of buildstep and forgekey goes through it, and the mirror's commands are named by their verb, not by -C.	2026-10-26 15:26:29 +01:00
jschoubben	65ee43f075	Merge remote-tracking branch 'origin/main' into fix/1790-state-appears	2026-10-26 15:24:34 +01:00
jschoubben	c3e8fc4ba6	process: an awaited bucket says loudly once when the bus refuses hearing its creation, and hears it again and binds at each reconnect (issue 1790, review)	2026-10-26 15:24:33 +01:00
mesh-tools	75be8acbad	Merge pull request 'Build seats yield: the decoder, buildcpu and NodeLimits (issue 1806, ADR 0553/0554, change A)' (#94) from fix/build-cpu-yields into main	2026-10-26 14:22:47 +00:00
mesh-tools	d103ed88ab	Merge pull request 'forgekey: a command starts in a directory that exists (issue 734)' (#93) from fix/daemon-dir-kept into main	2026-10-26 14:15:57 +00:00
jschoubben	3ac644baef	process: gofmt the integration fixture (issue 1790)	2026-10-26 15:13:25 +01:00
jschoubben	fd7d93333e	Keep a failed toolchain probe a loud refusal; only the command directory is fixed (issue 734, review round 1) ... Declining an ask whose probe failed would turn a truly broken toolchain into a wait of up to the decline bound that then fails with an empty "needs a node with" reason. With the node-engine no longer deleting a running build and commands started in a directory that exists, the getwd cause is gone, so the guard's refusal stays as it was. The decline refactor goes with it.	2026-10-26 15:11:04 +01:00