diff --git a/format/seat-definition.schema.json b/format/seat-definition.schema.json index dfba914..d162c07 100644 --- a/format/seat-definition.schema.json +++ b/format/seat-definition.schema.json @@ -339,22 +339,13 @@ "type": "object", "description": "a JSON Schema" }, - "callers": { - "type": "array", - "minItems": 1, - "items": { - "type": "string", - "pattern": "^(operator|healers|persons|sessions|invokers|seat:[a-z][a-z0-9-]*|module:[a-z][a-z0-9-]*|holder:[a-z][a-z0-9-]*@same-node)$" - }, - "description": "who may call: a list of operator, healers, persons (any person the tool runner proves), sessions (an agent session it proves), invokers (every module whose manifest declares the verb in invokes), seat: (a holder role), module:, or holder:@same-node (the holder of that seat on the node of the verb's holder); the grants part reads it as its one source of caller limits (design 47 G, 336 and 392). A verb naming none takes the default of its class (391)" - }, "class": { "enum": [ "read", "act", "warrant" ], - "description": "read: invokers, persons and sessions; act: operator and sessions; warrant: operator alone, with needs-approval (design 47 G 391). A verb that names no class is a read, whether it is on main or design 47 G adds it, and nothing refuses a verb for naming none (design 47 G 456)" + "description": "read: invokers, persons and sessions; act and warrant: operator, sessions and invokers (design 47 G 610); no verb names its callers, and a definition naming a `callers` is refused. A verb that names no class is a read, whether it is on main or design 47 G adds it, and nothing refuses a verb for naming none (design 47 G 456)" }, "needs-approval": { "type": "boolean", @@ -390,15 +381,6 @@ }, "by-caller": { "type": "boolean" - }, - "callers": { - "type": "array", - "minItems": 1, - "items": { - "type": "string", - "pattern": "^(operator|healers|persons|sessions|invokers|seat:[a-z][a-z0-9-]*|module:[a-z][a-z0-9-]*|holder:[a-z][a-z0-9-]*@same-node)$" - }, - "description": "who may call: a list of operator, healers, persons (any person the tool runner proves), sessions (an agent session it proves), invokers (every module whose manifest declares the verb in invokes), seat: (a holder role), module:, or holder:@same-node (the holder of that seat on the node of the verb's holder); the grants part reads it as its one source of caller limits (design 47 G, 336 and 392). A verb naming none takes the default of its class (391)" } } }, diff --git a/health-and-repair/seats/mesh-conditions/seat.json b/health-and-repair/seats/mesh-conditions/seat.json index ceec115..e5d45a8 100644 --- a/health-and-repair/seats/mesh-conditions/seat.json +++ b/health-and-repair/seats/mesh-conditions/seat.json @@ -99,11 +99,7 @@ "type": "object", "description": "what was raised and cleared again" }, - "callers": [ - "operator", - "healers", - "sessions" - ] + "class": "act" } ], "events": [ diff --git a/identity-and-access/seats/mesh-vault/seat.json b/identity-and-access/seats/mesh-vault/seat.json index 749f148..84c7260 100644 --- a/identity-and-access/seats/mesh-vault/seat.json +++ b/identity-and-access/seats/mesh-vault/seat.json @@ -597,9 +597,6 @@ "name": "retire", "optional": true, "description": "Retire one module's own secret, by node, module and name, on the operator's warrant bound to exactly those three (design 32 *A value no longer read*). Emits own-retired.", - "callers": [ - "seat:mesh-config" - ], "input": { "type": "object", "properties": { @@ -643,7 +640,8 @@ "required": [ "retired" ] - } + }, + "class": "act" } ], "description": "The mesh's secrets. accept and move-asks, which no holder served and nothing called, are left out (ADR 0620 §3). The vault's own events stay under its own subjects (ADR 0620 §2).", diff --git a/operator-and-conversation/seats/operator-channel/seat.json b/operator-and-conversation/seats/operator-channel/seat.json index 38d9ad2..31f7db8 100644 --- a/operator-and-conversation/seats/operator-channel/seat.json +++ b/operator-and-conversation/seats/operator-channel/seat.json @@ -189,10 +189,6 @@ "name": "ask-again", "description": "Offer a held-back ask now, on a channel that is ready: the asker's ask kept open behind its newer asks (design 47 G 83, 394).", "class": "act", - "callers": [ - "operator", - "healers" - ], "input": { "type": "object", "properties": { diff --git a/seats/mesh-broker/seat.json b/seats/mesh-broker/seat.json index 69c0849..fc42bdf 100644 --- a/seats/mesh-broker/seat.json +++ b/seats/mesh-broker/seat.json @@ -11,9 +11,6 @@ { "name": "list", "description": "Every entry the bus module created, its template, its settings and its fill against its cap.", - "callers": [ - "invokers" - ], "input": { "type": "object", "properties": { @@ -64,9 +61,6 @@ { "name": "show", "description": "One entry, its template, settings and fill.", - "callers": [ - "invokers" - ], "input": { "$ref": "#/defs/Named" }, @@ -78,9 +72,6 @@ { "name": "check", "description": "Compare what the bus holds with what was asked, entry by entry; a difference that only grows is said as such.", - "callers": [ - "invokers" - ], "input": { "type": "object", "properties": { @@ -136,9 +127,6 @@ { "name": "orphans", "description": "Entries the bus holds that no manifest asks for; never one whose manifest the judge refused or outgrew, nor one of the foundation's old sections.", - "callers": [ - "invokers" - ], "input": { "type": "object", "properties": {}, @@ -164,9 +152,6 @@ { "name": "create", "description": "Create one entry now.", - "callers": [ - "module:nats" - ], "input": { "$ref": "#/defs/Entry" }, @@ -179,9 +164,6 @@ { "name": "apply", "description": "Apply a difference that only grows: a larger cap, a longer age.", - "callers": [ - "module:nats" - ], "input": { "$ref": "#/defs/Named" }, @@ -194,9 +176,6 @@ { "name": "recreate", "description": "Rebuild an entry whose settings differ in a way that cannot grow, from its data where the storage type allows, after a stream snapshot.", - "callers": [ - "module:nats" - ], "input": { "$ref": "#/defs/Warranted" }, @@ -209,9 +188,6 @@ { "name": "drop", "description": "Remove one orphan, after a stream snapshot.", - "callers": [ - "module:nats" - ], "input": { "$ref": "#/defs/Warranted" }, diff --git a/seats/mesh-config/seat.json b/seats/mesh-config/seat.json index a92bc0a..9054314 100644 --- a/seats/mesh-config/seat.json +++ b/seats/mesh-config/seat.json @@ -64,9 +64,6 @@ } } }, - "callers": [ - "invokers" - ], "answer": { "type": "object", "properties": { diff --git a/seats/node-engine/seat.json b/seats/node-engine/seat.json index 3156047..ddab4d6 100644 --- a/seats/node-engine/seat.json +++ b/seats/node-engine/seat.json @@ -694,11 +694,6 @@ { "name": "seat-list", "description": "The seat list this engine holds and what it waits for (novox/hq ADR 0636 §7): each seat's source (trunk or bootstrap) and digest, the seats held from the bootstrap alone, the definitions refused, the last error and whether the seat mesh-catalog has answered. Read-only.", - "callers": [ - "persons", - "sessions", - "healers" - ], "input": { "type": "object", "properties": {} @@ -710,11 +705,6 @@ { "name": "seat-list-again", "description": "Make this engine read the seat list from the seat mesh-catalog now (novox/hq ADR 0636 §7), the recovery of a list unread; it answers what it holds afterwards, and the error when the read failed. A read that changed nothing still ends the engine's wait.", - "callers": [ - "persons", - "sessions", - "healers" - ], "input": { "type": "object", "properties": {} @@ -727,10 +717,6 @@ "name": "first-views", "description": "The node-engine's first views of the owners' states it follows (design 47 G 422, 204): per owner and state, the tool it asks, the revision its picture holds and why it is behind, when it asked and was answered, how many asks and whether its condition is raised; served by mesh-sdk's runtime as the view's read tool.", "class": "read", - "callers": [ - "persons", - "healers" - ], "input": { "type": "object", "properties": {} @@ -755,10 +741,6 @@ "name": "first-view-again", "description": "Ask the node-engine's first view of an owner's state again now, by hand (design 47 G 422, 204): a hand act, its caller and why kept in the status first-views reads; served by mesh-sdk's runtime as the view's again tool.", "class": "act", - "callers": [ - "operator", - "healers" - ], "input": { "type": "object", "required": [ @@ -837,11 +819,6 @@ { "name": "process-builds", "description": "The build each process on this node was started with (design 47 *The revision view*): per service and container the fingerprint the node-engine handed it in MESH_FINGERPRINT, or why it is unknown, and when it started. Narrowed by module. Reads only.", - "callers": [ - "persons", - "sessions", - "healers" - ], "input": { "type": "object", "properties": {