Broker: the grants part may create a placed module's declared buckets, logs and streams, creation only (issue 1790; the operator's one-grant exception) #469

Merged

mesh-tools merged 1 commits from fix/1790-grants-create-buckets into main 2026-10-26 08:17:20 +00:00

Conversation 2 Commits 1 Files Changed 4

+143 -1

1 Commits

Author	SHA1	Message	Date
jschoubben	6927b02d4d	Grant the grants part creating the streams manifests declare, so a new module state no longer waits for a controller start ... The operator's one more grant in the frozen controller's composer (2026-10-26 08:54), beside the memberships grant of 22:31 (ADR 0547 clause 1 and 5): mesh-grants' principal may publish $JS.API.STREAM.CREATE.<stream> and $JS.API.STREAM.INFO.<stream> for each bucket (KV_<module>_<state>), log (LOG_<module>_<log>) and module stream a placed module's manifest declares, each by its own name, and nothing wider. The writers table lets it create, never update or delete. Byte-equal with mesh-sdk's buscompose (fix/1790-grants-create-buckets), whose expected lists this code wrote; the same test file holds both copies. Nothing else changes, and the mesh-sdk pin stays. Research 072: moves the grants piece (the grants part split out of the controller) one step, the creation of a module's declared bus objects; the controller's raise at start stays until it loses its lease. Issue: 1790	2026-10-26 09:02:44 +01:00