jschoubben
376a8b0fb5
A declaration's renamed-from moves the value with its trust and opens a window per node, closed on delivered and, for a returning node-engine, on manifest-reads-changed (ADR 0618). A value no manifest reads is marked retiring only once no node runs a build that reads it, asked once, removed only on the Approve (a secret through the seat mesh-vault's retire). New state in the old sections (ADR 0619), the stream config-events, the tools config_renames, config_rename_again, config_rename_close, config_retiring and the seat verb renames. Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig
79 lines
1.5 KiB
JSON
79 lines
1.5 KiB
JSON
{
|
|
"module": "mesh-conditions",
|
|
"version": "1",
|
|
"runs-as": "mesh-conditions",
|
|
"claims": [
|
|
{
|
|
"name": "mesh-conditions",
|
|
"scope": "mesh",
|
|
"serves": [
|
|
"conditions",
|
|
"silence",
|
|
"resync"
|
|
]
|
|
}
|
|
],
|
|
"reads": [
|
|
"mesh-delivery-watchman.findings",
|
|
"mesh-self-check.findings",
|
|
"mesh-healers.findings",
|
|
"mesh-delivery-assigner.findings",
|
|
"messenger.findings",
|
|
"mesh-provisioner.findings",
|
|
"artifact-store-tools.findings",
|
|
"mesh-config.findings",
|
|
"mesh-healers.attempts",
|
|
"mesh-delivery-assigner.wants",
|
|
"node-engine.have",
|
|
"mesh-delivery-assigner.placement"
|
|
],
|
|
"state": [
|
|
"conditions",
|
|
{
|
|
"name": "history",
|
|
"ttl-seconds": 7776000
|
|
},
|
|
"held",
|
|
{
|
|
"name": "bounds",
|
|
"key-ttl": true
|
|
}
|
|
],
|
|
"own-secrets": {
|
|
"broker": "${dir:state}/broker"
|
|
},
|
|
"secrets-owner": "mesh-conditions",
|
|
"resources": [
|
|
{
|
|
"id": "account",
|
|
"type": "user",
|
|
"name": "mesh-conditions",
|
|
"shell": "/usr/bin/nologin",
|
|
"home": "/var/lib/mesh-conditions"
|
|
},
|
|
{
|
|
"id": "state",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"owner": "mesh-conditions",
|
|
"place": ".",
|
|
"unknown": "program"
|
|
}
|
|
],
|
|
"build": {
|
|
"artifacts": [
|
|
{
|
|
"name": "tools",
|
|
"kind": "bundle",
|
|
"language": "go",
|
|
"system": "arch",
|
|
"from": "cmd/mesh-conditions",
|
|
"binary": "mesh-conditions",
|
|
"loads": [
|
|
"mesh-conditions"
|
|
]
|
|
}
|
|
]
|
|
}
|
|
}
|