jschoubben
7968f70e4a
mesh/merge-gate fail: builds dunst, messenger, sudo, new: modules/desk-channel, modules/telegram → ace, g14, novox, shanks; no bus step; a manifest the cha…
mesh/repo-check fail: its merge-check.sh failed: files asking for a setting without saying whether it is trusted: 20
mesh/delivery superseded: a newer head of the same pull request
The review of 2026-10-09 (H4). The desk ran in the operator's runtime, where agents run; it now runs as the account desk-channel, as telegram does. A link's code is shown only on a named machine whose notifier said in the last five minutes that it is not paused, and is sent secret, so the notifier keeps it out of the history every caller of the verbs reads; while no such machine exists the desk says it cannot send, and the router starts no link.
92 lines
1.7 KiB
JSON
92 lines
1.7 KiB
JSON
{
|
|
"module": "desk-channel",
|
|
"version": "1",
|
|
"slug": "desk",
|
|
"runs-as": "desk-channel",
|
|
"claims": [
|
|
{
|
|
"name": "channel",
|
|
"scope": "mesh",
|
|
"kind": "desktop",
|
|
"capabilities": [
|
|
"deliver",
|
|
"silent",
|
|
"loud",
|
|
"edit",
|
|
"private",
|
|
"choice",
|
|
"exact-render"
|
|
]
|
|
},
|
|
{
|
|
"name": "intake",
|
|
"scope": "mesh",
|
|
"kind": "desktop"
|
|
}
|
|
],
|
|
"consumes": [
|
|
"dunst.action-chosen",
|
|
"dunst.started",
|
|
"dunst.paused"
|
|
],
|
|
"invokes": [
|
|
"seat:node-notifier.send"
|
|
],
|
|
"state": [
|
|
{
|
|
"name": "shown",
|
|
"ttl-seconds": 2592000
|
|
}
|
|
],
|
|
"own-secrets": {
|
|
"broker": "${dir:state}/broker"
|
|
},
|
|
"secrets-owner": "desk-channel",
|
|
"tools": [
|
|
"desk_channel_status"
|
|
],
|
|
"resources": [
|
|
{
|
|
"id": "account",
|
|
"type": "user",
|
|
"name": "desk-channel",
|
|
"shell": "/usr/bin/nologin",
|
|
"home": "/var/lib/desk-channel"
|
|
},
|
|
{
|
|
"id": "state",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"owner": "desk-channel",
|
|
"place": "."
|
|
},
|
|
{
|
|
"id": "settings",
|
|
"type": "file",
|
|
"path": "${dir:state}/settings.json",
|
|
"mode": "0600",
|
|
"owner": "desk-channel",
|
|
"merge": "json",
|
|
"content": "{\n \"desktop-machines\": []\n}\n"
|
|
}
|
|
],
|
|
"build": {
|
|
"artifacts": [
|
|
{
|
|
"name": "tools",
|
|
"kind": "bundle",
|
|
"language": "go",
|
|
"system": "arch",
|
|
"from": "cmd/desk-channel",
|
|
"binary": "desk-channel",
|
|
"loads": [
|
|
"desk-channel"
|
|
],
|
|
"env": {
|
|
"MESH_DESK_SETTINGS": "${dir:state}/settings.json"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|