The node-engine owns the composition it alone runs (H1, H2)

ADR 0593 §1 and §7: compose, its bus reader and runtime reader, takein, validate, the overlay generator, the composer's run and mesh-compose, and the judgement of a move leave mesh-sdk for the node-engine's internal packages, so no other module composes and a change to them rebuilds only the node-engine. The shapes others read (the composer's request and verdict, the overlay's names, compositions and answers) stay in mesh-sdk. The node's grant is now a golden file of what the grants part composes, since the composer of the bus's user list leaves mesh-sdk too. Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL
2026-11-02 18:24:05 +01:00
parent 98fbc490a4
commit 9a12f2851f
218 changed files with 33022 additions and 54 deletions
@@ -0,0 +1,50 @@
+package validate
+
+import (
+	"strings"
+	"testing"
+)
+
+// **The validator a controller imports is the host's**: a declaration the host takes passes, and one
+// it refuses is refused with the host's own words, every problem at once.
+func TestTheValidatorIsTheHosts(t *testing.T) {
+	good := `{"declaration": 1, "resources": [{"id": "d", "type": "directory", "path": "/var/lib/x", "mode": "0755"}]}`
+	if problems := Declaration([]byte(good)); problems != nil {
+		t.Fatalf("a declaration the host takes was refused: %v", problems)
+	}
+	// And one carrying the lease epoch and sequence the controller sends it under (novox/hq to-be 45
+	// §6): a controller validating with this package may send them.
+	ordered := `{"declaration": 1, "epoch": 57, "sequence": 3, "resources": [{"id": "d", "type": "directory", "path": "/var/lib/x", "mode": "0755"}]}`
+	if problems := Declaration([]byte(ordered)); problems != nil {
+		t.Fatalf("a declaration carrying its order was refused: %v", problems)
+	}
+	// And one carrying a file's owner-at-runtime and the files the provisioner fills (novox/hq ADR 0349 §5): the
+	// reader takes them before any controller sends them.
+	owned := `{"declaration": 1, "filled_files": ["/etc/x"], "resources": [{"id": "f", "type": "file", "path": "/etc/x", "content": "a", "owner-at-runtime": "owned"}]}`
+	if problems := Declaration([]byte(owned)); problems != nil {
+		t.Fatalf("a declaration saying who owns a file at runtime was refused: %v", problems)
+	}
+	// And one naming the provisioner client's account (novox/hq ADR 0349 §4).
+	named := `{"declaration": 1, "provisioner_account": "mesh-node-provisioner", "filled_files": ["/etc/x"], "resources": [{"id": "f", "type": "file", "path": "/etc/x", "content": "a", "owner-at-runtime": "owned"}]}`
+	if problems := Declaration([]byte(named)); problems != nil {
+		t.Fatalf("a declaration naming the provisioner client's account was refused: %v", problems)
+	}
+	for _, bad := range []string{
+		`{"declaration": 1, "provisioner_account": "root", "resources": [{"id": "f", "type": "file", "path": "/etc/x", "content": "a"}]}`,
+		`{"declaration": 1, "filled_files": ["/etc/none"], "resources": [{"id": "f", "type": "file", "path": "/etc/x", "content": "a", "owner-at-runtime": "owned"}]}`,
+		`{"declaration": 1, "resources": []}`,
+		`{"declaration": 99, "resources": [{"id": "d", "type": "directory", "path": "/x"}]}`,
+		`{"declaration": 1, "resources": [{"id": "d", "type": "nothing-the-host-knows"}]}`,
+		`not json`,
+	} {
+		problems := Declaration([]byte(bad))
+		if len(problems) == 0 {
+			t.Errorf("a declaration the host refuses was passed: %s", bad)
+		}
+		for _, p := range problems {
+			if strings.TrimSpace(p) == "" {
+				t.Errorf("a problem said nothing, for %s", bad)
+			}
+		}
+	}
+}