jschoubben 9fd5971212 A tool's grant covers the machine-addressed subject, and a credential names the seats its module claims (hq ADR 0159) ...

`invokes: [<module>.<tool>]` now grants `mesh.mod.<module>.tool.<tool>` and the same with the
machine as its last token, which is how a call reaches one machine's instance. The broker
credential the mesh writes carries `claims`: each seat the module claims, its scope, and the verbs
the seat promises, so the runtime serves them on the seat's subjects; the holder's grant, composed
from the holding, is what admits the subscription.

2026-10-01 13:58:23 +02:00

..

testdata

The mesh's own verbs are the mesh-controller seat's tools

2026-09-30 17:39:38 +02:00

agreement_catalogue_test.go

The artifact store's seat is named for its scope: mesh-artifact-store

2026-09-30 21:14:40 +02:00

agreement.go

Event names are checked now, per manifest and across the catalogue

2026-09-27 14:43:16 +02:00

broker_test.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

broker.go

Work slower than the window says so, and one address is the bus's

2026-09-28 09:51:50 +02:00

consumer_upgrade_test.go

A consumer a machine is bound to keeps the subject that works

2026-09-29 23:55:56 +02:00

derived_test.go

A node's declaration consumer, which only the mesh can make

2026-09-27 01:24:46 +02:00

derived.go

The controller takes one announcement at a time

2026-09-30 21:37:53 +02:00

genesis_template_test.go

A token is an account on the bus, and genesis can place the list

2026-09-29 17:36:50 +02:00

invokes_test.go

A tool's grant covers the machine-addressed subject, and a credential names the seats its module claims (hq ADR 0159)

2026-10-01 13:58:23 +02:00

jetstream_test.go

Derive a seat's stream and a module's consumer, and wire JetStream

2026-09-26 22:28:42 +02:00

jetstream.go

The controller takes one announcement at a time

2026-09-30 21:37:53 +02:00

nats_golden_test.go

The enrolment user is per token, and it has an inbox

2026-09-27 01:31:34 +02:00

nats_test.go

A build says what it does on the bus, as it happens (novox/hq ADR 0157)

2026-10-01 00:43:07 +02:00

nats.go

A tool's grant covers the machine-addressed subject, and a credential names the seats its module claims (hq ADR 0159)

2026-10-01 13:58:23 +02:00

onnats_test.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

onnats.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

raise_live_test.go

A module may watch a role's events, and the catch-up turns out to be unnecessary

2026-09-27 17:22:30 +02:00

raise.go

The bus's objects are raised on every start, and one switch says which bus

2026-09-27 02:59:05 +02:00

readiness_test.go

The move ends with the old broker going, not staying

2026-09-27 23:04:59 +02:00

readiness.go

The move ends with the old broker going, not staying

2026-09-27 23:04:59 +02:00

seattools_test.go

The mesh's own verbs are the mesh-controller seat's tools

2026-09-30 17:39:38 +02:00

states_agreement_test.go

The seat declares the facts its holder states

2026-09-28 16:36:45 +02:00

streams_test.go

The controller takes one announcement at a time

2026-09-30 21:37:53 +02:00

streams.go

A build says what it does on the bus, as it happens (novox/hq ADR 0157)

2026-10-01 00:43:07 +02:00

users_test.go

The bus account has JetStream, and the control plane's client has its own inbox

2026-09-28 01:40:10 +02:00

users.go

A module may invoke tools, and a manifest is checked where it is written

2026-09-30 16:12:43 +02:00