jschoubben eff81f1220 Never refuse a node for a held module's stand-in by its own runtime's rules (issue 774) ...

On 2026-10-30 at 21:04 mesh-self-check (ace) and mesh-conditions, mesh-healers (novox) were placed before
their bus accounts were issued. Each was held for "needs a secret called broker and none was made"; its bare
stub then lost its own secrets and was refused by ownRuntimes ("runs as its own account and declares no own
secret broker"), a refusal no culprit takes, so 74 modules on ace and 79 on novox failed. A held runtime's stub
met the same kind earlier today ("its build produced 0 bundle(s)").

Quick fix: let the bare stub keep its broker own secret, for this one rule.
Thorough fix (chosen, the fourth of the kind today): a held module's stand-in (Stubbed) has no runtime
composed at all, so no rule about its runtime, bundle or broker can refuse it: ownRuntimes passes it over and
runtimeProcess composes none for a held runtime (what runs of either is carried, as before). A module of its
own account left without its runtime by a held runtime is refused with a typed NoRuntimeToRunError, which makes
the held runtime the culprit, so those modules are held after it and the node composes the rest.

2026-10-30 21:18:06 +01:00

..

frombus

Never refuse a node for a held module's stand-in by its own runtime's rules (issue 774)

2026-10-30 21:18:06 +01:00

fromruntime

Read the bus through a module's declared states in frombus, with the runtime's adapter in fromruntime, so mesh-provisioner and disk-load compose from one reader instead of two copies (issue 1955)

2026-10-29 23:31:34 +01:00

judge

Keep as today what a node keeps today and what is held only behind it, saying how; a stub hands and collects nothing of its own (issue 1126)

2026-10-28 23:49:22 +01:00

composed_test.go

A runtime that already dropped a carried module's tools serves them again, read from what runs and its build (issue 1126, review)

2026-10-29 21:03:16 +01:00

composed.go

A runtime that already dropped a carried module's tools serves them again, read from what runs and its build (issue 1126, review)

2026-10-29 21:03:16 +01:00

credentials_needed.go

compose names the pair credentials a node's composition reads as consumer and provider, and frombus asks them sealed before it composes (issue 1126, ADR 0550 §5)

2026-10-26 19:18:46 +01:00

credentials_test.go

Foresee a bus account not yet issued in a composition asked ahead of the Approve, so a module with its own account can be placed (issue 774)

2026-10-30 20:33:05 +01:00

credentials.go

Foresee a bus account not yet issued in a composition asked ahead of the Approve, so a module with its own account can be placed (issue 774)

2026-10-30 20:33:05 +01:00

fixture_test.go

Test the private network and the rest of the mesh over an Input (issues 1360, 1361). Tests ported from mesh-control 6c2a8d62 network_test.go and seat_pass_test.go with their values; written after the code, checked by breaking each rule in turn and seeing a test fail. Store-backed ones are rebuilt as Inputs; overlayPlace's own refusal of an endpoint off the tunnel's port, namesInTheMesh and the resolver's roster test are the controller's or the rendering's (1363).

2026-10-20 06:24:18 +00:00

input.go

A module composed as what runs of it serves its tools as they run, so the runtime no longer drops it (issue 1126)

2026-10-29 21:03:16 +01:00

network_test.go

Keep a machine that does not resolve on the private network at its place, so one machine's modules refuse only its own declaration (issue 1833)

2026-10-22 15:03:17 +02:00

network.go

A refusal for want of a provider names the modules another node cannot run in this composition, and a refusal naming no placed module is answered at once (issue 1126, probe #532)

2026-10-28 01:39:07 +01:00

node_test.go

Count a machine that does not resolve and holds a place as on the network for its name and the mesh's sources too (issue 1833)

2026-10-22 15:26:48 +02:00

node.go

Compose a node's placed data items from the bus and move the readings layout into the sdk, so disk-load measures without a composed file and restic, mounts, nfs-server and the self-check read one layout (issue 1955, ADR 0571 clause 3)

2026-10-29 23:16:56 +01:00

one_machine_alone_test.go

Count a machine that does not resolve and holds a place as on the network for its name and the mesh's sources too (issue 1833)

2026-10-22 15:26:48 +02:00

render.go

Compose each node's provisioning plans from the bus alone, in a Planning mode that reads no secret, so mesh-provisioner composes the plans the controller did (issue 1954 L6-P1, ADR 0570 clause 2)

2026-10-29 22:31:02 +01:00

rendering_test.go

Test the place half of the rendering over an Input (issue 1363). Fixtures from mesh-control 6c2a8d62 sendable_integration_test.go (the store, the given port) and local_network_test.go (the networks); written after the code, each rule broken in turn and a test seen to fail. Unit level 1.05 s of 2 s.

2026-10-20 06:35:09 +00:00

rendering.go

Compose as the controller does, so a node's shadow can answer same (issue 1126, C1 C2 C3 C5 C6, T1)

2026-10-28 09:36:36 +01:00

resolve_test.go

Compose a licence key the Input does not carry with a stand-in named foreseen; keep empty only where Keys is given and lacks the holder (review round 1, finding 3). The test failed first

2026-10-20 07:01:50 +00:00

resolve.go

A refusal for want of a provider names the modules another node cannot run in this composition, and a refusal naming no placed module is answered at once (issue 1126, probe #532)

2026-10-28 01:39:07 +01:00

rest_test.go

Test the private network and the rest of the mesh over an Input (issues 1360, 1361). Tests ported from mesh-control 6c2a8d62 network_test.go and seat_pass_test.go with their values; written after the code, checked by breaking each rule in turn and seeing a test fail. Store-backed ones are rebuilt as Inputs; overlayPlace's own refusal of an endpoint off the tunnel's port, namesInTheMesh and the resolver's roster test are the controller's or the rendering's (1363).

2026-10-20 06:24:18 +00:00

rest.go

A refusal for want of a provider names the modules another node cannot run in this composition, and a refusal naming no placed module is answered at once (issue 1126, probe #532)

2026-10-28 01:39:07 +01:00

seats_test.go

Test the private network and the rest of the mesh over an Input (issues 1360, 1361). Tests ported from mesh-control 6c2a8d62 network_test.go and seat_pass_test.go with their values; written after the code, checked by breaking each rule in turn and seeing a test fail. Store-backed ones are rebuilt as Inputs; overlayPlace's own refusal of an endpoint off the tunnel's port, namesInTheMesh and the resolver's roster test are the controller's or the rendering's (1363).

2026-10-20 06:24:18 +00:00