TLS-1, TLS-2, TLS-3: the runner declares its own secret ledgers, refuses a bundle tool named as a ledger repair, and states the capabilities of its calls in its PING (issue 1966)

Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig
2026-11-04 11:40:03 +01:00
parent 84ede95c4a
commit 8b1ab467a9
8 changed files with 153 additions and 6 deletions
@@ -3,10 +3,38 @@ package runtime
 import (
 	"encoding/json"
 	"fmt"
+	"sort"

 	"git.novox.be/novox/mesh-sdk/go/buscalls"
 )

+// The capabilities the tool runner states of the calls it answers (novox/hq ADR 0595 §9, ADR 0597; design 25 § 12.4): each is
+// a family of the methods a bundle asks it, named so a manifest's `capabilities` can ask for it, and stated in its announcement
+// (announce.Capabilities) for its machine's node-engine to take into the node's record. A module whose manifest asks for one is
+// held off a machine whose runner does not state it.
+const (
+	CapBusStateCalls = "bus-state-calls"
+	CapLedgerCalls   = "ledger-calls"
+)
+
+// callFamilies are the methods each capability stands for, the ones BusState and BusStateWatch answer.
+var callFamilies = map[string][]string{
+	CapBusStateCalls: {buscalls.ObjectsPut, buscalls.ObjectsGet, buscalls.ObjectsList, buscalls.ObjectsDelete, buscalls.ObjectsInfo,
+		buscalls.ObjectsWatch, buscalls.StreamRead, buscalls.StreamFill, buscalls.WorkQueueSize, buscalls.WorkQueueDead},
+	CapLedgerCalls: {buscalls.LedgerApply, buscalls.LedgerGet, buscalls.LedgerHistory, buscalls.LedgerWatch, buscalls.LedgerQuery,
+		buscalls.LedgerRebuild, buscalls.LedgerReindex, buscalls.LedgerSnapshot, buscalls.LedgerLag},
+}
+
+// CallCapabilities is every capability of the calls this runner answers, sorted.
+func CallCapabilities() []string {
+	out := make([]string, 0, len(callFamilies))
+	for c := range callFamilies {
+		out = append(out, c)
+	}
+	sort.Strings(out)
+	return out
+}
+
 // BusState answers a bundle's calls on its module's bus state in the new form (mesh-sdk buscalls; novox/hq ADR 0595
 // §9, design 25 § 12.5; issue 1966): each as the module whose bundle asks, never a module the request names, so a
 // bundle reaches its own module's bindings alone.