novox/mesh-controller
18
0
Fork 0
Code Issues Pull Requests 4 Releases Wiki Activity

Prepare every send as the controller's composition did: make the own secrets a file names, and ask the vault every time (issues 1385, 1386)

Browse Source 
mesh-sdk's composition refuses a module's file that names an own secret not made yet in every mode, where the controller's Allocating composition made it on the way; and it asked the vault on every send, where a send whose kept box was valid composed with no stand-in and so never performed. prepareSend, before the composition of every send, makes the own secrets no row holds (not the handed, not the outside-issued, not one the composition would refuse) and asks the vault for the core's credentials, keeping the boxes it answers and returning the modules the controller seals itself. perform no longer asks the vault.
This commit is contained in:
mesh-tools
2026-10-20 10:09:06 +00:00
parent 157d1599b4
commit 11e005fe38
2 changed files with 96 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cmd/mesh-controller/compose_sdk.go
+5 -4
View File
@@ -228,7 +228,10 @@ func composeSend(ctx context.Context, open *stores, node string) (sendable, erro
func composeSendValidated(ctx context.Context, open *stores, node string) (sendable, []string, error) {
// The core modules whose credentials the controller sealed itself because the vault was silent and no box was kept
// (ADR 0396): the composition stands in a vault box for each, and a send carries the controller's own seal instead.
var byController []string
byController, err := prepareSend(ctx, open, node)
if err != nil {
return sendable{}, nil, err
}
for attempt := 0; ; attempt++ {
in, err := inputFor(ctx, open)
if err != nil {
@@ -276,11 +279,9 @@ func composeSendValidated(ctx context.Context, open *stores, node string) (senda
return sendable{}, nil, fmt.Errorf("%s was composed twice and still names what only a send makes (%s): nothing is sent "+
"that stands in for a value", node, strings.Join(left, "; "))
}
_, sealed, err := performSend(ctx, open, in, node, d)
if err != nil {
if _, err := perform(ctx, open, in, node, d); err != nil {
return sendable{}, nil, err
}
byController = sealed
// What was made is in the stores now: the next read is a fresh one.
forgetInput(ctx)
}