Mail seats: a declared seat carries needs; a secret given is told once (issues 802, 835) #345

Merged

mesh-tools merged 5 commits from feat/mail-seats into main 2026-10-15 17:44:20 +00:00

Conversation 4 Commits 5 Files Changed 19

+643 -65

5 Commits

Author	SHA1	Message	Date
jochen	5cf8938f55	Let the genesis test accept a degradable grant missing from the installer's list (issue 835) ... Forge check of mesh-controller#345: the merge check clones mesh-host at the commit the machines run, not its main, so a change that only edits mesh-host's examples (the operator-channel.tell grant) can never be seen there until mesh-host's own module next builds. operator-channel.tell is the one grant with a fallback for a refusal (the secret-given condition, ADR 0380 §9), so mark it degradable and let TestTheInstallersFirstUserListIsWhatTheControllerWouldCompose pass without it while every other grant stays required.	2026-10-15 19:29:13 +02:00
jochen	a18c17d3cc	Name the machine in the secret-given message (issue 835, review round 2) ... ADR 0380 §1 says the message names the module and the machine it is for; the words named no machine at the terminal and only the desk's machine at the desk. The headline now ends "on <node>" and the tell carries "subject": <node> in both cases. Also covers two gaps review round 2 flagged: a tell failure other than ErrNothingServes/ErrGrantRefused surfaces and raises no condition, and the terminal's hand act now names who asked (not just where), extracted into terminalGiveHandAct so it is testable on its own.	2026-10-15 18:45:03 +02:00
jochen	5f24a47df6	Refresh captured mesh-host at c3b2fce, carrying the operator-channel.tell grant (issue 835) ... mesh-host joined feat/mail-seats to add the controller's new operator-channel.tell publish subject to its genesis user list. Moved per testdata/beside/CAPTURED's own recipe (git archive, never by hand); the refreshed snapshot also carries main's drift since the last capture (ADR 0338's store placement). TestTheInstallersFirstUserListIsWhatTheControllerWouldCompose now passes; merge-check.sh green.	2026-10-15 17:55:30 +02:00
jochen	435468c151	A secret given tells the operator once, opens no condition (issue 835) ... ADR 0380: giving a module's own secret now asks the operator channel's tell over the bus, naming the secret, where, when and who asked, and raises no secret-given condition. Until nothing serves tell yet, or the controller's grant is refused (link.ErrNothingServes / the new link.ErrGrantRefused), the condition is raised exactly as before, so the change composes whichever side of issue 797 merges first. A successful tell also retires every open secret-given condition. The terminal's own secret accept now records a hand act too, as the desk path already did. The controller's bus grant for operator-channel.tell is added to the composed config (golden fixture updated).	2026-10-15 17:45:45 +02:00
jochen	b5a441a978	Let a module-declared seat carry needs, so mail-notifier can need node-notifier (issue 802) ... ADR 0220's dependency mechanism served compiled seats only and retired its one user with node-resolver-config (commit f68521da). ADR 0378 S8 revives it for module-declared seats: SeatDeclaration gains Needs, judged by the catalogue check (node scope only, a name that resolves to a node seat somewhere in the catalogue, never itself), and DependsOn now takes the catalogue so a claimed seat's needs are found wherever they are declared.	2026-10-15 17:18:23 +02:00