jschoubben
4194e93a67
The grants part grants a seat verb only to a module that names it in invokes (GR8), so a call missing from a manifest is refused live. Listed every module's seat-verb calls in code (constant clients, seatlist.HolderOf, operatorask, buildrun's drops and puts) against its invokes: the teller asks who holds operator-channel (operatorask.Bucket) and the checker drops asks of the image build seat. Every asker of a build seat names the queues it asks as seat:<seat>.accept.<queue> (A-231): the runner check and delivery, the assigner check, the builder delivery, the checker check and recheck; the indexer had its entry. The validator judges that form through mesh-sdk's catalogue.QueueInvoke against the kinds the seat accepts. mesh-grants: a consumed seat view whose seat has no holder on record grants nothing instead of refusing the whole module (TestGrants); TestCallersAndWhyRefused and TestSentStoresRead take §610's class defaults. Builds: design 47 G §544, §601, §610, §616, A-231, A-179 Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h
152 lines
3.1 KiB
JSON
152 lines
3.1 KiB
JSON
{
|
|
"module": "mesh-delivery-teller",
|
|
"version": "0.1",
|
|
"slug": "teller",
|
|
"tools": [
|
|
"teller_end_ask",
|
|
"teller_answers",
|
|
"teller_read_answers",
|
|
"teller_first_views",
|
|
"teller_first_view_again",
|
|
"teller_widens_said"
|
|
],
|
|
"invokes": [
|
|
"mesh-delivery-assigner.assigner_read_asks",
|
|
"mesh-delivery-view.view_read_answers",
|
|
"seat:mesh-hand-acts.hand-act",
|
|
"seat:mesh-catalog.registrations",
|
|
"seat:mesh-broker.show",
|
|
"seat:operator-channel.notify",
|
|
"seat:mesh-module-assigner.assignments"
|
|
],
|
|
"consumes": [
|
|
"mesh-conditions.findings-asked",
|
|
"mesh-delivery-assigner.views.asks",
|
|
"mesh-delivery-view.views.answers",
|
|
"mesh-catalog.registration-changed",
|
|
"mesh-pipeline-runner.pipeline-ended",
|
|
"mesh-delivery.recovery-merged",
|
|
"mesh-delivery.record-opened",
|
|
"mesh-broker.recreated",
|
|
"mesh-broker.dropped"
|
|
],
|
|
"emits": [
|
|
"answered",
|
|
"ask-ended",
|
|
"views.answers"
|
|
],
|
|
"state": [
|
|
{
|
|
"name": "answers",
|
|
"history": 5
|
|
},
|
|
{
|
|
"name": "asked",
|
|
"history": 1
|
|
},
|
|
{
|
|
"name": "ends",
|
|
"history": 1
|
|
},
|
|
{
|
|
"name": "first-views",
|
|
"history": 1
|
|
},
|
|
{
|
|
"name": "widens-said",
|
|
"history": 1
|
|
},
|
|
{
|
|
"name": "teller-marks",
|
|
"history": 1
|
|
}
|
|
],
|
|
"uses": [
|
|
"operator-channel"
|
|
],
|
|
"own-secrets": {
|
|
"broker": "${dir:state}/broker"
|
|
},
|
|
"secrets-owner": "mesh-delivery-teller",
|
|
"resources": [
|
|
{
|
|
"id": "account",
|
|
"type": "user",
|
|
"name": "mesh-delivery-teller",
|
|
"shell": "/usr/bin/nologin",
|
|
"home": "/var/lib/mesh-delivery-teller"
|
|
},
|
|
{
|
|
"id": "state",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"owner": "mesh-delivery-teller",
|
|
"place": ".",
|
|
"unknown": "program"
|
|
},
|
|
{
|
|
"id": "teller",
|
|
"type": "process",
|
|
"name": "mesh-delivery-teller",
|
|
"artifact": "program",
|
|
"run": [
|
|
"./mesh-delivery-teller"
|
|
],
|
|
"env": {
|
|
"MESH_BROKER_FILE": "${dir:state}/broker"
|
|
},
|
|
"user": "mesh-delivery-teller",
|
|
"health": {
|
|
"kind": "unit"
|
|
}
|
|
}
|
|
],
|
|
"build": {
|
|
"artifacts": [
|
|
{
|
|
"name": "program",
|
|
"kind": "bundle",
|
|
"language": "go",
|
|
"system": "arch",
|
|
"from": "cmd/mesh-delivery-teller",
|
|
"binary": "mesh-delivery-teller"
|
|
},
|
|
{
|
|
"name": "tools",
|
|
"kind": "bundle",
|
|
"language": "go",
|
|
"system": "arch",
|
|
"from": "cmd/mesh-delivery-teller-tools",
|
|
"binary": "mesh-delivery-teller-tools",
|
|
"loads": [
|
|
"mesh-delivery-teller-tools"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"requires": [
|
|
{
|
|
"name": "findings",
|
|
"storage": "key-value",
|
|
"template": "state",
|
|
"options": {
|
|
"history": 1
|
|
}
|
|
},
|
|
{
|
|
"name": "finding-events",
|
|
"storage": "stream",
|
|
"template": "events",
|
|
"options": {
|
|
"events": [
|
|
"finding-written.*",
|
|
"finding-cleared.*",
|
|
"findings-stated.*"
|
|
],
|
|
"max-age-days": 7,
|
|
"max-mib": 16
|
|
}
|
|
}
|
|
]
|
|
}
|