Merge pull request 'A mergeable file's own keys are the terminal's (hq issue 340)' (#172) from fix/340-a-mergeable-files-own-keys-are-the-terminals into main

internal/catalogue/terminal_keys.go

@@ -1,8 +1,10 @@
 package catalogue
 
 import (
+	"encoding/json"
 	"fmt"
 	"sort"
+	"strings"
 )
 
 // Which settings are the controller's terminal's alone (novox/hq issue 339).
@@ -23,6 +25,14 @@ import (
 //     change through a verb, and the safe reading of a file that says nothing is that it is one of them (fail
 //     closed). `"trusted": false` is the opt-out, for a file nothing trusts: a person's own notifier settings.
 //     `module check` lists the files that say nothing, so an author can opt one out where that is true.
+//     **A mergeable file asks for every key its own content names** (novox/hq issue 340): a setting of that key
+//     lands in the file as a `${setting:…}` would, without the file ever spelling one. The agent's module keeps the
+//     managed settings and tool servers every Claude Code session on a node obeys in one, and through a verb an
+//     agent could have given every person's session a hook of its own.
+//
+//  4. **A module's whole layer, when it has a mergeable file not marked `"trusted": false`** (novox/hq issue 340,
+//     TrustedMergeable). A mergeable file takes any key a layer sets, not only those its content names, so no list
+//     of keys covers it: an empty runtime configuration a provider reads would take a `url` of the caller's.
 //
 // Derived from the manifest, never listed by hand, so a provider or a trusted file added tomorrow is covered.
 
@@ -53,10 +63,8 @@ func TerminalKeys(m Manifest) []string {
 		if trusted, said := r[TrustedField].(bool); said && !trusted {
 			continue
 		}
-		if content, ok := r["content"].(string); ok {
-			for _, asked := range settingsUsed(content) {
-				keys[asked] = true
-			}
+		for _, asked := range asksFor(r) {
+			keys[asked] = true
 		}
 	}
 	delete(keys, PlacesSetting)
@@ -77,8 +85,7 @@ func UnsaidTrust(m Manifest) []string {
 		if fmt.Sprint(r["type"]) != "file" {
 			continue
 		}
-		content, _ := r["content"].(string)
-		if len(settingsUsed(content)) == 0 {
+		if len(asksFor(r)) == 0 {
 			continue
 		}
 		if _, said := r[TrustedField]; !said {
@@ -89,6 +96,47 @@ func UnsaidTrust(m Manifest) []string {
 	return out
 }
 
+// TrustedMergeable is every mergeable file of a module not marked `"trusted": false`, by id (novox/hq issue 340).
+// A mergeable file takes any key a layer sets, not only those its content names: an empty runtime configuration a
+// provider reads takes a `url` of a caller's as surely as a declared one. So a module holding one has its whole
+// layer set at the controller's terminal; a verb may read it and change nothing.
+func TrustedMergeable(m Manifest) []string {
+	var out []string
+	for _, r := range m.Resources {
+		if fmt.Sprint(r["type"]) != "file" {
+			continue
+		}
+		if how, _ := r["merge"].(string); how == "" {
+			continue
+		}
+		if trusted, said := r[TrustedField].(bool); said && !trusted {
+			continue
+		}
+		out = append(out, fmt.Sprint(r["id"]))
+	}
+	sort.Strings(out)
+	return out
+}
+
+// asksFor is every setting a file resource asks for: each `${setting:…}` in its content and, for a mergeable file,
+// every key at the top of the content it merges into (novox/hq issue 340). Those are the keys the file declares it
+// takes: a layer's value for one of them lands in it as surely as a placeholder would be filled. A key the content
+// does not name may land too, but nothing reading the file was written to read it.
+func asksFor(r map[string]any) []string {
+	content, _ := r["content"].(string)
+	asked := settingsUsed(content)
+	if how, _ := r["merge"].(string); how != "" && strings.TrimSpace(content) != "" {
+		var base map[string]any
+		if json.Unmarshal([]byte(content), &base) == nil {
+			for key := range base {
+				asked = append(asked, key)
+			}
+		}
+	}
+	sort.Strings(asked)
+	return asked
+}
+
 // TrustProblems are the ways a manifest states `trusted` wrongly: anything but true or false, or on anything but
 // a file. Refused at registration and by `module check`.
 func TrustProblems(m Manifest) []string {

internal/catalogue/terminal_settings_test.go

@@ -141,6 +141,9 @@ func TestTerminalKeysAreDerived(t *testing.T) {
 		{"id": "note", "type": "file", "path": "/var/lib/power/note", "trusted": false, "content": "${setting:greeting}\n"},
 		// Unmarked counts as trusted (fail closed): only `"trusted": false` lets a verb change what a file asks for.
 		{"id": "unmarked", "type": "file", "path": "/etc/power/unmarked", "content": "${setting:unmarked}\n"}}}
+	agent := Manifest{Module: "claude-code", Resources: []map[string]any{{"id": "settings", "type": "file",
+		"path": "/var/lib/agent/settings.json", "merge": MergeJSON,
+		"content": "{\n  \"role\": \"\",\n  \"mcp_servers\": {},\n  \"managed_settings\": {}\n}\n"}}}
 	for _, c := range []struct {
 		m    Manifest
 		want string
@@ -149,6 +152,13 @@ func TestTerminalKeysAreDerived(t *testing.T) {
 		{keycloak, "places,accesses,issuer,token-path"},
 		{power, "places,accesses,handle-lid-switch,unmarked"},
 		{Manifest{Module: "plain"}, "places,accesses"},
+		// A mergeable file asks for every key its own content names (novox/hq issue 340): the agent's module keeps
+		// what every Claude Code session on a node obeys in one.
+		{agent, "places,accesses,managed_settings,mcp_servers,role"},
+		{Manifest{Module: "notifier", Resources: []map[string]any{{"id": "look", "type": "file", "path": "/var/lib/n/look.json",
+			"merge": MergeJSON, "trusted": false, "content": `{"font": 13}`}}}, "places,accesses"},
+		{Manifest{Module: "empty", Resources: []map[string]any{{"id": "config", "type": "file", "path": "/var/lib/e/c.json",
+			"merge": MergeJSON, "content": `{}`}}}, "places,accesses"},
 	} {
 		if got := strings.Join(TerminalKeys(c.m), ","); got != c.want {
 			t.Errorf("%s: %s; want %s", c.m.Module, got, c.want)
@@ -166,6 +176,13 @@ func TestAFileSaysWhetherItsSettingsAreTrusted(t *testing.T) {
 	if got := strings.Join(UnsaidTrust(m), ","); got != "unsaid" {
 		t.Errorf("unsaid: %s; want unsaid", got)
 	}
+	// A mergeable file that names keys asks for them, so it is named too; one that names none asks for nothing.
+	merged := Manifest{Module: "agent", Resources: []map[string]any{
+		{"id": "settings", "type": "file", "path": "/a", "merge": MergeJSON, "content": `{"managed_settings": {}}`},
+		{"id": "blank", "type": "file", "path": "/b", "merge": MergeJSON, "content": `{}`}}}
+	if got := strings.Join(UnsaidTrust(merged), ","); got != "settings" {
+		t.Errorf("unsaid: %s; want settings", got)
+	}
 	for _, bad := range []map[string]any{
 		{"id": "x", "type": "file", "path": "/etc/x", "trusted": "yes", "content": "${setting:a}"},
 		{"id": "y", "type": "directory", "trusted": true},