The node-engine's declared state acts: created by the grants part as a placed module's, its manifest placed on every node, and written by each node's engine under its own keys alone (issue 774, ADR 0563 §2, §3)

2026-10-28 10:13:07 +01:00
parent 277a5bd34d
commit 11b3e6a95d
5 changed files with 46 additions and 1 deletions
@@ -64,7 +64,8 @@ func engineBeyond(user, g string) bool {
 		return false
 	}
 	return strings.HasPrefix(g, "mesh.seat."+EngineSeat+".") && strings.Contains(g, "."+node) ||
-		strings.HasPrefix(g, "$SRV.") || strings.Contains(g, ".node-engine-"+node)
+		strings.HasPrefix(g, "$SRV.") || strings.Contains(g, ".node-engine-"+node) ||
+		strings.Contains(g, "KV_"+EngineActsBucket) || strings.HasPrefix(g, "$KV."+EngineActsBucket+"."+node+".")
 }

 // createsAnAccountsConsumer is the grants part's create and read of a durable consumer an account needs, by its stream