novox/mesh-controller
3
0
Fork 0
Code Issues Pull Requests 1 Releases Wiki Activity

A machine may bind its consumer #102

Merged
jschoubben merged 3 commits from fix/a-node-may-bind-its-consumer into main 2026-09-27 23:18:20 +00:00
Conversation 0 Commits 3 Files Changed 2
+10 -2
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 64d154d9d7 - Show all commits
internal/broker/nats.go
+10 -2
View File
@@ -244,8 +244,16 @@ func PermissionsFor(p Principal) (Permissions, error) {
case KindNode:
// A host publishes its own node's control traffic and subscribes its own declaration —
// and nothing of any other node's.
pub = []string{"mesh.control." + p.Node + ".>"}
sub = []string{"mesh.node." + p.Node + ".declare"}
// And what the host does with its consumer, nothing more: binding to it asks the server
// about it (CONSUMER.INFO) and hears the answer on its own inbox; hearing a declaration
// acknowledges it. Found the first time a machine dialled a permissioned server: refused
// for both, and "this node cannot read its declarations" (2026-09-28).
pub = []string{
"mesh.control." + p.Node + ".>",
"$JS.API.CONSUMER.INFO.NODES." + p.Node,
"$JS.ACK.NODES." + p.Node + ".>",
}
sub = []string{"mesh.node." + p.Node + ".declare", p.inbox()}
case KindModule:
// 1. Its own namespace: it publishes its events there and serves its tools there. Nothing