jschoubben
4194e93a67
The grants part grants a seat verb only to a module that names it in invokes (GR8), so a call missing from a manifest is refused live. Listed every module's seat-verb calls in code (constant clients, seatlist.HolderOf, operatorask, buildrun's drops and puts) against its invokes: the teller asks who holds operator-channel (operatorask.Bucket) and the checker drops asks of the image build seat. Every asker of a build seat names the queues it asks as seat:<seat>.accept.<queue> (A-231): the runner check and delivery, the assigner check, the builder delivery, the checker check and recheck; the indexer had its entry. The validator judges that form through mesh-sdk's catalogue.QueueInvoke against the kinds the seat accepts. mesh-grants: a consumed seat view whose seat has no holder on record grants nothing instead of refusing the whole module (TestGrants); TestCallersAndWhyRefused and TestSentStoresRead take §610's class defaults. Builds: design 47 G §544, §601, §610, §616, A-231, A-179 Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h
222 lines
4.8 KiB
JSON
222 lines
4.8 KiB
JSON
{
|
|
"module": "mesh-delivery-pipeline",
|
|
"version": "0.1",
|
|
"slug": "pipeline",
|
|
"claims": [
|
|
{
|
|
"name": "mesh-pipeline-runner",
|
|
"scope": "mesh",
|
|
"serves": [
|
|
"run",
|
|
"start",
|
|
"show",
|
|
"list",
|
|
"stands",
|
|
"why-carried",
|
|
"kept",
|
|
"review",
|
|
"rerun",
|
|
"accept",
|
|
"cancel",
|
|
"ask-again",
|
|
"release"
|
|
]
|
|
}
|
|
],
|
|
"tools": [
|
|
"runner_first_views",
|
|
"runner_first_view_again",
|
|
"runner_health",
|
|
"runner_waits",
|
|
"runner_release",
|
|
"runner_unlogged",
|
|
"runner_unlogged_append"
|
|
],
|
|
"consumes": [
|
|
"mesh-delivery-indexer.take-in.taken",
|
|
"mesh-builds.package-published",
|
|
"mesh-builds.toolchain-agreed",
|
|
"mesh-builds.step-ended",
|
|
"mesh-delivery-builder.build.ended.**",
|
|
"operator-channel.decided",
|
|
"node-build-go.step-ended",
|
|
"node-build-node.step-ended",
|
|
"node-build-image.step-ended",
|
|
"node-build-go.ask-taken",
|
|
"node-build-node.ask-taken",
|
|
"node-build-image.ask-taken",
|
|
"node-engine.running",
|
|
"mesh-wants.step-ended",
|
|
"mesh-catalog.registration-changed",
|
|
"mesh-catalog.catalog-revision",
|
|
"mesh-conditions.findings-asked",
|
|
"mesh-delivery.recovery-merged",
|
|
"mesh-catalog.seat-definition-changed",
|
|
"mesh-catalog.seat-definition-removed"
|
|
],
|
|
"invokes": [
|
|
"seat:mesh-catalog.seat-definitions",
|
|
"seat:mesh-catalog.registrations",
|
|
"seat:mesh-catalog.revision",
|
|
"seat:mesh-hand-acts.hand-act",
|
|
"seat:mesh-catalog.outdated",
|
|
"seat:git.pull",
|
|
"seat:mesh-module-assigner.assignments",
|
|
"seat:mesh-grants.grants-for",
|
|
"seat:mesh-builds.step",
|
|
"seat:mesh-wants.step",
|
|
"seat:node-build-go.check.step",
|
|
"seat:node-build-node.check.step",
|
|
"seat:node-build-image.check.step",
|
|
"seat:node-build-go.delivery.step",
|
|
"seat:node-build-node.delivery.step",
|
|
"seat:node-build-image.delivery.step",
|
|
"seat:node-build-go.drop",
|
|
"seat:node-build-node.drop",
|
|
"seat:node-build-image.drop",
|
|
"seat:node-build-go.accept.check",
|
|
"seat:node-build-go.accept.delivery",
|
|
"seat:node-build-node.accept.check",
|
|
"seat:node-build-node.accept.delivery",
|
|
"seat:node-build-image.accept.check",
|
|
"seat:node-build-image.accept.delivery"
|
|
],
|
|
"uses": [
|
|
"operator-channel"
|
|
],
|
|
"state": [
|
|
{
|
|
"name": "pipelines",
|
|
"history": 1,
|
|
"max-mib": 256
|
|
},
|
|
{
|
|
"name": "kept",
|
|
"history": 1,
|
|
"max-mib": 128
|
|
},
|
|
{
|
|
"name": "aged",
|
|
"history": 1
|
|
},
|
|
{
|
|
"name": "recoveries",
|
|
"history": 1
|
|
},
|
|
{
|
|
"name": "toolchains",
|
|
"history": 1
|
|
},
|
|
{
|
|
"name": "bounds",
|
|
"history": 1,
|
|
"key-ttl": true
|
|
},
|
|
{
|
|
"name": "findings",
|
|
"history": 1
|
|
},
|
|
{
|
|
"name": "first-views",
|
|
"history": 1
|
|
},
|
|
{
|
|
"name": "consumers",
|
|
"history": 1
|
|
}
|
|
],
|
|
"streams": [
|
|
{
|
|
"name": "mesh-delivery-pipeline-findings",
|
|
"events": [
|
|
"finding-written.*",
|
|
"finding-cleared.*",
|
|
"findings-stated.*"
|
|
],
|
|
"max-age-days": 7,
|
|
"max-mib": 16
|
|
}
|
|
],
|
|
"objects": [
|
|
{
|
|
"name": "step-outputs",
|
|
"max-mib": 1024
|
|
},
|
|
{
|
|
"name": "sent-objects",
|
|
"max-mib": 256
|
|
}
|
|
],
|
|
"own-secrets": {
|
|
"broker": "${dir:state}/broker"
|
|
},
|
|
"secrets-owner": "mesh-delivery-pipeline",
|
|
"resources": [
|
|
{
|
|
"id": "account",
|
|
"type": "user",
|
|
"name": "mesh-delivery-pipeline",
|
|
"shell": "/usr/bin/nologin",
|
|
"home": "/var/lib/mesh-delivery-pipeline"
|
|
},
|
|
{
|
|
"id": "state",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"owner": "mesh-delivery-pipeline",
|
|
"place": ".",
|
|
"unknown": "program"
|
|
},
|
|
{
|
|
"id": "pipeline",
|
|
"type": "process",
|
|
"name": "mesh-delivery-pipeline",
|
|
"artifact": "program",
|
|
"run": [
|
|
"./mesh-delivery-pipeline"
|
|
],
|
|
"env": {
|
|
"MESH_BROKER_FILE": "${dir:state}/broker"
|
|
},
|
|
"user": "mesh-delivery-pipeline",
|
|
"health": {
|
|
"kind": "tool",
|
|
"tool": "runner_health"
|
|
}
|
|
}
|
|
],
|
|
"build": {
|
|
"artifacts": [
|
|
{
|
|
"name": "program",
|
|
"kind": "bundle",
|
|
"language": "go",
|
|
"system": "arch",
|
|
"from": "cmd/mesh-delivery-pipeline",
|
|
"binary": "mesh-delivery-pipeline",
|
|
"needs": [
|
|
"mesh-delivery-assigner:program"
|
|
]
|
|
},
|
|
{
|
|
"name": "tools",
|
|
"kind": "bundle",
|
|
"language": "go",
|
|
"system": "arch",
|
|
"from": "cmd/mesh-delivery-pipeline-tools",
|
|
"binary": "mesh-delivery-pipeline-tools",
|
|
"loads": [
|
|
"mesh-delivery-pipeline-tools"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"logs": [
|
|
{
|
|
"name": "step-log",
|
|
"max-age-days": 100,
|
|
"max-mib": 128
|
|
}
|
|
]
|
|
}
|