The node-engine owns the composition it alone runs (H1, H2)

ADR 0593 §1 and §7: compose, its bus reader and runtime reader, takein, validate, the overlay generator, the composer's run and mesh-compose, and the judgement of a move leave mesh-sdk for the node-engine's internal packages, so no other module composes and a change to them rebuilds only the node-engine. The shapes others read (the composer's request and verdict, the overlay's names, compositions and answers) stay in mesh-sdk. The node's grant is now a golden file of what the grants part composes, since the composer of the bus's user list leaves mesh-sdk too. Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL
2026-11-02 18:24:05 +01:00
parent 98fbc490a4
commit 9a12f2851f
218 changed files with 33022 additions and 54 deletions
@@ -0,0 +1,106 @@
+{
+  "module": "desk-channel",
+  "version": "1",
+  "slug": "desk",
+  "runs-as": "desk-channel",
+  "claims": [
+    {
+      "name": "channel",
+      "scope": "mesh",
+      "kind": "desktop",
+      "capabilities": [
+        "deliver",
+        "silent",
+        "loud",
+        "edit",
+        "private",
+        "choice",
+        "exact-render"
+      ]
+    },
+    {
+      "name": "intake",
+      "scope": "mesh",
+      "kind": "desktop"
+    }
+  ],
+  "consumes": [
+    "dunst.action-chosen",
+    "dunst.started",
+    "dunst.paused"
+  ],
+  "invokes": [
+    "seat:node-notifier.send"
+  ],
+  "state": [
+    {
+      "name": "shown",
+      "ttl-seconds": 2592000
+    }
+  ],
+  "own-secrets": {
+    "broker": "${dir:state}/broker"
+  },
+  "secrets-owner": "desk-channel",
+  "tools": [
+    "desk_channel_status"
+  ],
+  "config": {
+    "desktop-machines": {
+      "type": "list",
+      "description": "The machines, by node name, whose desktop shows the operator's questions and notifications, in the order they are tried; empty shows them on none.",
+      "trusted": true,
+      "default": []
+    }
+  },
+  "resources": [
+    {
+      "id": "account",
+      "type": "user",
+      "name": "desk-channel",
+      "shell": "/usr/bin/nologin",
+      "home": "/var/lib/desk-channel"
+    },
+    {
+      "id": "state",
+      "type": "directory",
+      "mode": "0700",
+      "owner": "desk-channel",
+      "place": ".",
+      "unknown": "program"
+    },
+    {
+      "id": "settings",
+      "type": "file",
+      "path": "${dir:state}/settings.json",
+      "mode": "0600",
+      "owner": "desk-channel",
+      "takes-config": ["desktop-machines"],
+      "merge": "json",
+      "template": "files/settings.json"
+    }
+  ],
+  "build": {
+    "artifacts": [
+      {
+        "name": "tools",
+        "kind": "bundle",
+        "language": "go",
+        "system": "arch",
+        "from": "cmd/desk-channel",
+        "binary": "desk-channel",
+        "loads": [
+          "desk-channel"
+        ],
+        "env": {
+          "MESH_DESK_SETTINGS": "${dir:state}/settings.json"
+        }
+      },
+      {
+        "name": "files",
+        "kind": "archive",
+        "from": "files"
+      }
+    ]
+  }
+}