diff --git a/internal/link/handacts.go b/internal/link/handacts.go index cfffffd..fec231f 100644 --- a/internal/link/handacts.go +++ b/internal/link/handacts.go @@ -52,17 +52,19 @@ const ( // ActManifestReads reads the reader capabilities this engine states (novox/hq ADR 0618 §3). ActManifestReads = nodeengine.VerbManifestReads // ActSeatList reads the seat list this engine holds and what it waits for; ActSeatListAgain makes it read the list now - // (novox/hq ADR 0636 §7). The node-engine seat's definition carries both verbs, which answer only the operator and the - // healers. - ActSeatList = "seat-list" - ActSeatListAgain = "seat-list-again" + // (novox/hq ADR 0636 §7). The node-engine seat's definition carries both verbs. + ActSeatList = nodeengine.VerbSeatList + ActSeatListAgain = nodeengine.VerbSeatListAgain ) -// SeatListCallers are who may call the engine's two seat-list verbs: every operator's session and the healers (novox/hq -// ADR 0636 §7, the node-engine seat's definition: the operator and the healers). +// SeatListCallers are who may call the engine's two seat-list verbs (novox/hq ADR 0636 §7). The read is open to every +// proved caller: the record limits only the read again, and the list holds nothing secret. The read again answers the +// operator's sessions and the healers. A call through the mesh MCP server, and nox, is proved only as its machine's tool +// runner (.node-tools, issue 627), so node-tools stands for an operator's session until a session is proved; without +// it the verb answered nobody but the healers, and no healer calls it (issue 1966). var SeatListCallers = stdio.VerbCallers{ - ActSeatList: {stdio.AnyPerson, "mesh-healers"}, - ActSeatListAgain: {stdio.AnyPerson, "mesh-healers"}, + ActSeatList: {stdio.AnyCaller}, + ActSeatListAgain: {stdio.AnyPerson, "node-tools", "mesh-healers"}, } // The states of an act: asked, done and refused are also the seat's events. diff --git a/internal/link/handover_test.go b/internal/link/handover_test.go index 54665ae..58f4332 100644 --- a/internal/link/handover_test.go +++ b/internal/link/handover_test.go @@ -301,8 +301,13 @@ func TestALinkThatHearsHandOversIsGivenTheQueues(t *testing.T) { {"packages", EngineToolSubject("packages", "n1") + " " + `{"write":true}`, `"key":null,"wrote":true`}, {"packages", EngineToolSubject("packages", "n1") + " " + `{"write":"true"}`, `"note":"the engine has written no key for this node yet`}, {"manifest-reads", EngineToolSubject("manifest-reads", "n1"), `"manifest-reads":["form:a","seat:b"],"node":"n1","stated-at":"2026-11-04T10:00:00Z","v":1`}, - // ADR 0636 §7: the seat-list verbs answer every operator's session and the healers, no other module. + // ADR 0636 §7: the read seat-list answers every proved caller; seat-list-again every operator's session, proved + // as a person or, through the mesh MCP server, as its machine's tool runner (issue 627, issue 1966), and the + // healers, no other module. {"seat-list", "mesh.seat.node-engine.call.seat-list.n1.person~jochen", `"held":true`}, + {"seat-list", "mesh.seat.node-engine.call.seat-list.n1.shanks~node-tools", `"held":true`}, + {"seat-list", "mesh.seat.node-engine.call.seat-list.n1.ace~messenger", `"held":true`}, + {"seat-list-again", "mesh.seat.node-engine.call.seat-list-again.n1.shanks~node-tools", `"read":true`}, {"seat-list-again", "mesh.seat.node-engine.call.seat-list-again.n1.person~jochen", `"read":true`}, {"seat-list-again", "mesh.seat.node-engine.call.seat-list-again.n1.ace~mesh-healers", `"read":true`}, {"seat-list-again", "mesh.seat.node-engine.call.seat-list-again.n1.ace~messenger", `not on the holder's caller list for seat-list-again`},