jschoubben
ff79defc2b
The review of 2026-10-09: the router read the absence of an agent-root condition as a pass, and its minute hung on a break-glass file, taking the work it already held. An approval now rests on the controller's verb root-free, asked live for the router's machine and the channel's, failing closed on every other answer, and a stale word on the kinds promises no verified sender. Break-glass runs in the minute, says on every channel what root did, and ends the router's own open questions. An ask offering an approval is answered only where it could be approved; a message says who asks, what each answer does and what expiry does. The router's own asks bind the account they are about; a link is checked against one per kind as it is made; an unlinked account does not come back by a code within a day; a fresh link is unlinked from the desk; no link begins while the desk cannot show its code, and a code is marked secret on every path. Links are bounded per account in the router's state; a warrant's message id cannot be foreseen. Moves to mesh-sdk 76902998 (canonical digests).
154 lines
2.7 KiB
JSON
154 lines
2.7 KiB
JSON
{
|
|
"module": "messenger",
|
|
"version": "1",
|
|
"slug": "msgr",
|
|
"runs-as": "messenger",
|
|
"seats": [
|
|
{
|
|
"name": "operator-channel",
|
|
"scope": "mesh",
|
|
"serves": [
|
|
"open",
|
|
"history",
|
|
"notify",
|
|
"asks"
|
|
],
|
|
"accepts": [
|
|
"ask",
|
|
"cancel"
|
|
],
|
|
"emits": [
|
|
"decided"
|
|
],
|
|
"by-caller": [
|
|
"ask",
|
|
"cancel",
|
|
"decided"
|
|
],
|
|
"records": [
|
|
"asks"
|
|
]
|
|
},
|
|
{
|
|
"name": "channel",
|
|
"scope": "mesh",
|
|
"kinded": true,
|
|
"accepts": [
|
|
"show",
|
|
"edit",
|
|
"send"
|
|
]
|
|
},
|
|
{
|
|
"name": "intake",
|
|
"scope": "mesh",
|
|
"kinded": true,
|
|
"emits": [
|
|
"choice",
|
|
"link",
|
|
"failed",
|
|
"standing"
|
|
],
|
|
"proofs": [
|
|
"code"
|
|
]
|
|
}
|
|
],
|
|
"claims": [
|
|
{
|
|
"name": "operator-channel",
|
|
"scope": "mesh",
|
|
"serves": [
|
|
"open",
|
|
"history",
|
|
"notify",
|
|
"asks"
|
|
]
|
|
}
|
|
],
|
|
"uses": [
|
|
"channel"
|
|
],
|
|
"consumes": [
|
|
"mesh-controller.condition-raised",
|
|
"mesh-controller.condition-changed",
|
|
"mesh-controller.condition-cleared",
|
|
"intake.choice",
|
|
"intake.link",
|
|
"intake.failed",
|
|
"intake.standing"
|
|
],
|
|
"emits": [
|
|
"refused"
|
|
],
|
|
"invokes": [
|
|
"seat:mesh-controller.conditions",
|
|
"seat:mesh-controller.root-free"
|
|
],
|
|
"state": [
|
|
"open",
|
|
"sent",
|
|
{
|
|
"name": "asks",
|
|
"ttl-seconds": 2592000
|
|
},
|
|
"identities"
|
|
],
|
|
"own-secrets": {
|
|
"broker": "${dir:state}/broker"
|
|
},
|
|
"secrets-owner": "messenger",
|
|
"tools": [
|
|
"messenger_status",
|
|
"messenger_recent",
|
|
"messenger_test",
|
|
"messenger_check",
|
|
"messenger_identities",
|
|
"messenger_unlink"
|
|
],
|
|
"resources": [
|
|
{
|
|
"id": "account",
|
|
"type": "user",
|
|
"name": "messenger",
|
|
"shell": "/usr/bin/nologin",
|
|
"home": "/var/lib/messenger"
|
|
},
|
|
{
|
|
"id": "state",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"place": ".",
|
|
"owner": "messenger"
|
|
},
|
|
{
|
|
"id": "settings",
|
|
"type": "file",
|
|
"path": "${dir:state}/settings.json",
|
|
"mode": "0600",
|
|
"merge": "json",
|
|
"content": "{\n \"time-zone\": \"\"\n}\n",
|
|
"owner": "messenger"
|
|
}
|
|
],
|
|
"build": {
|
|
"artifacts": [
|
|
{
|
|
"name": "tools",
|
|
"kind": "bundle",
|
|
"language": "go",
|
|
"system": "arch",
|
|
"from": "cmd/messenger",
|
|
"binary": "messenger",
|
|
"loads": [
|
|
"messenger"
|
|
],
|
|
"env": {
|
|
"MESH_MESSENGER_SETTINGS": "${dir:state}/settings.json",
|
|
"MESH_MESSENGER_STATE": "${dir:state}"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|