4 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	7b02f63daf	Refuse a key-value write too large for its bucket before it is put (issue 774) ... mesh-grants' sealed grants and the controller's merge record each met "message size exceeds maximum" (JetStream 10054) only after the put, and a writer that retries looped on a value that can never land; an update over the limit was even answered as a revision mismatch, which every compare-and-set writer retries. Quick fix: cap the two values in their modules. Thorough fix, chosen because the kind was met twice and every module writes through the SDK: the package kvlimit checks a value against its bucket's largest message (read from its stream and kept) before the put, naming the bucket, the key, the size and the limit, and turns the bus's own refusal into the same *TooLarge (errors.Is kvlimit.ErrTooLarge), so no writer retries it. The SDK's own writers use it: process.State (Put, Create, CreateTTL, Update), process.AwaitedBucket, the runtime state of a bundle (stdio KeptState, against the module state's 256 KiB) and mesh-hand-compose. A value that can outgrow its bucket is split over keys or kept in the object store with its name in the key.	2026-10-30 18:02:18 +01:00
jschoubben	c3e8fc4ba6	process: an awaited bucket says loudly once when the bus refuses hearing its creation, and hears it again and binds at each reconnect (issue 1790, review)	2026-10-26 15:24:33 +01:00
jschoubben	d515c71e1c	process: a bucket missing at a part's start is bound when the bus says it was created, keeping what was written meanwhile; buscompose grants each principal the creation of the buckets it may bind (issue 1790) ... Since the grants part creates a manifest's buckets after a delivery (ADR 0547), a module restarted by that delivery can open a new state before it exists; OptionalBucket answered nil and the part never looked again (mesh-delivery's checker and builder, state hearing, 2026-10-26). AwaitBucket binds on the server's STREAM.CREATED advisory, or at the next use, and writes the latest value kept per key. The copied composer's agreement test leaves that one row out: the controller's list is no longer loaded since the take-over.	2026-10-26 15:11:00 +01:00
jschoubben	e0d1de0475	process: a part opens what it cannot work without as essential, the rest as optional (issue 1945) ... The delivery builder exited twice on 2026-10-25 for a bucket the bus refused at start, though it could build without it: a grant reaches the bus with a delivery, so a refusal at start is often only a grant not there yet. EssentialBucket stops a start naming the bucket and its grant; OptionalBucket and NotWatched say what is not heard and go on. Here so the seven delivery parts take one copy, not seven.	2026-10-25 22:12:20 +01:00