11 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	7b02f63daf	Refuse a key-value write too large for its bucket before it is put (issue 774) ... mesh-grants' sealed grants and the controller's merge record each met "message size exceeds maximum" (JetStream 10054) only after the put, and a writer that retries looped on a value that can never land; an update over the limit was even answered as a revision mismatch, which every compare-and-set writer retries. Quick fix: cap the two values in their modules. Thorough fix, chosen because the kind was met twice and every module writes through the SDK: the package kvlimit checks a value against its bucket's largest message (read from its stream and kept) before the put, naming the bucket, the key, the size and the limit, and turns the bus's own refusal into the same *TooLarge (errors.Is kvlimit.ErrTooLarge), so no writer retries it. The SDK's own writers use it: process.State (Put, Create, CreateTTL, Update), process.AwaitedBucket, the runtime state of a bundle (stdio KeptState, against the module state's 256 KiB) and mesh-hand-compose. A value that can outgrow its bucket is split over keys or kept in the object store with its name in the key.	2026-10-30 18:02:18 +01:00
jschoubben	902e3c9e96	Refuse placement files on a forge message and delete placement-seed: no repository holds placement (ADR 0567 §11, issue 1126)	2026-10-28 18:09:38 +01:00
jschoubben	3968849b1b	Review of L2: the export is a placement file at its version with its modules (S1); a node asks the vault only when a module placed on it declares an own secret, so one with none composes whether or not the vault answers (H8's failure) (issue 1126)	2026-10-26 20:08:32 +01:00
jschoubben	6447a1c6d4	placement-seed writes each node's first placement file from the controller's export, checked before anything is written, once (issue 1126, ADR 0549 §4, ADR 0555 §6)	2026-10-26 19:17:45 +01:00
jschoubben	748c564cdf	Merge main (the R4g finish: the composer command) into feat/r6 (issue 1943) ... main's mesh-compose is the composer command (ADR 0482 clause 4) and keeps its name, which composer.Package and the build steps name; feat/r6's hand path tool, which composes one module for one node and signs it with the operator's key (ADR 0539 clause 10), moves to cmd/mesh-hand-compose.	2026-10-24 23:01:18 +02:00
jschoubben	d8da8f1d36	Sign a composition with a trusted key and compose one by hand with mesh-compose (issue 1943, S5) ... The node-engine applies only a composition signed by the controller or the operator, and when the controller cannot compose its own fix the operator composes, signs and writes one at the terminal (ADR 0539 clauses 3 and 10).	2026-10-24 16:36:14 +02:00
jschoubben	bfc3883af9	Read a manifest's fallback to a predefined key in the composer as the indexer reads it, or against the list a request or -catalogue gives: a run never holds the catalogue's predefined.json, and the composition refused pacman and xterm for it (ADR 0348 §7)	2026-10-24 14:57:10 +02:00
jschoubben	d9fa5536a8	Mark the packages whose tests read files outside their directory, found by the review (issue 1935)	2026-10-24 04:38:58 +02:00
jschoubben	66bf26c0d7	Let the composer read its request from a file, since a run step hands it no standard input (issue 1622)	2026-10-24 04:10:31 +02:00
jschoubben	20d18eb4f5	Give mesh-sdk a composer command, so a program linking one mesh-sdk can have another commit's composition judged (issue 1621)	2026-10-24 03:51:35 +02:00
jschoubben	d7375c9811	Add mesh-pack: a hand build with the build module's recipe and mesh-sdk's own pack (F1)	2026-10-23 16:12:23 +02:00