novox/mesh-controller

A module may declare a stream of its own, heard only by the consumers its trusted config value grants (hq issue 718, ADR 0363) #338

Merged

mesh-admin merged 3 commits from fix-718-module-streams-and-grants into main

2026-10-14 20:13:34 +00:00

Author	SHA1	Message	Date
jochen	743e6478a7	Remove a restricted stream's consumer when the bus refuses to narrow it, so its wider filters deliver nothing more (ADR 0363 §6, review of PR 338) mesh/merge-gate head 743e6478a76c merged into trunk c2ec0a601acb — pass: builds build-agent, mesh-controller, route-proxy → ace, g14, novox, shanks; no bus… Details mesh/repo-check head 743e6478a76c merged into trunk c2ec0a601acb — pass: its merge-check.sh passed Details mesh/delivery delivered Details	2026-10-14 22:05:47 +02:00
jochen	ede2772b3c	Deliver a module stream's given-up message again only while its consumer is still granted it (ADR 0363 §7) mesh/merge-gate head ede2772b3c90 merged into trunk c2ec0a601acb — pass: builds build-agent, mesh-controller, route-proxy → ace, g14, novox, shanks; no bus… Details mesh/repo-check head ede2772b3c90 merged into trunk c2ec0a601acb — pass: its merge-check.sh passed Details mesh/delivery superseded: a newer head of the same pull request Details	2026-10-14 21:55:55 +02:00
jochen	ee13e75bf3	Let a module declare a stream of its own and restrict who hears it by a trusted config value (hq issue 718, ADR 0363) mesh-mail's events must live on a stream of their own and reach only the modules the operator granted an account (ADR 0359 §2, §4). The controller now creates a module's declared stream, publishes its events on mesh.stream.<module>.event.<event>, and composes a consumer's durable consumer, filters and bus grants on a restricted stream only where its consumes asks and the provider's trusted value names it; a consumer that loses its grant has its consumer removed on the next assertion. Nothing changes while no manifest declares a stream.	2026-10-14 21:52:45 +02:00