jschoubben
0284204989
The review of 2026-10-09 (H4). The desk ran in the operator's runtime, where agents run; it now runs as the account desk-channel, as telegram does. A link's code is shown only on a named machine whose notifier said in the last five minutes that it is not paused, and is sent secret, so the notifier keeps it out of the history every caller of the verbs reads; while no such machine exists the desk says it cannot send, and the router starts no link.
92 lines
1.7 KiB
JSON
92 lines
1.7 KiB
JSON
{
|
|
"module": "desk-channel",
|
|
"version": "1",
|
|
"slug": "desk",
|
|
"runs-as": "desk-channel",
|
|
"claims": [
|
|
{
|
|
"name": "channel",
|
|
"scope": "mesh",
|
|
"kind": "desktop",
|
|
"capabilities": [
|
|
"deliver",
|
|
"silent",
|
|
"loud",
|
|
"edit",
|
|
"private",
|
|
"choice",
|
|
"exact-render"
|
|
]
|
|
},
|
|
{
|
|
"name": "intake",
|
|
"scope": "mesh",
|
|
"kind": "desktop"
|
|
}
|
|
],
|
|
"consumes": [
|
|
"dunst.action-chosen",
|
|
"dunst.started",
|
|
"dunst.paused"
|
|
],
|
|
"invokes": [
|
|
"seat:node-notifier.send"
|
|
],
|
|
"state": [
|
|
{
|
|
"name": "shown",
|
|
"ttl-seconds": 2592000
|
|
}
|
|
],
|
|
"own-secrets": {
|
|
"broker": "${dir:state}/broker"
|
|
},
|
|
"secrets-owner": "desk-channel",
|
|
"tools": [
|
|
"desk_channel_status"
|
|
],
|
|
"resources": [
|
|
{
|
|
"id": "account",
|
|
"type": "user",
|
|
"name": "desk-channel",
|
|
"shell": "/usr/bin/nologin",
|
|
"home": "/var/lib/desk-channel"
|
|
},
|
|
{
|
|
"id": "state",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"owner": "desk-channel",
|
|
"place": "."
|
|
},
|
|
{
|
|
"id": "settings",
|
|
"type": "file",
|
|
"path": "${dir:state}/settings.json",
|
|
"mode": "0600",
|
|
"owner": "desk-channel",
|
|
"merge": "json",
|
|
"content": "{\n \"desktop-machines\": []\n}\n"
|
|
}
|
|
],
|
|
"build": {
|
|
"artifacts": [
|
|
{
|
|
"name": "tools",
|
|
"kind": "bundle",
|
|
"language": "go",
|
|
"system": "arch",
|
|
"from": "cmd/desk-channel",
|
|
"binary": "desk-channel",
|
|
"loads": [
|
|
"desk-channel"
|
|
],
|
|
"env": {
|
|
"MESH_DESK_SETTINGS": "${dir:state}/settings.json"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|