node-tools in Go: the node's runtime, launch-only, wire-compatible with the TypeScript (hq ADR 0193)

The runtime knows no language, so nothing ties it to Node.js. This ports its serve mode — the pinned bus connection and patient connect, following memberships, launching every served bundle over MCP on stdio with its own environment, a child's emit published as its module, each tool, the tools verb and seat verbs served where the mesh issued them, and the console on loopback — to one static binary. Same subjects, request and reply bodies, event headers and MCP answers. The TypeScript stays: it is still the runtime inside the per-module containers until WP4c. Tests run against a real bus and share the TypeScript fixtures.
2026-10-03 21:21:52 +02:00
parent 26e7fcb4cb
commit e45389f75a
25 changed files with 2788 additions and 0 deletions
@@ -0,0 +1,378 @@
+// Package runtime is the node's tool runtime (novox/hq ADR 0175, ADR 0193), the Go port of
+// node-tools' runtime.ts in its launch-only form: it launches every assigned module's bundle,
+// serves each module's tools on that module's subjects and each held seat's verbs on the seat's,
+// and answers for every module the verb that says what it serves. It imports nothing and knows no
+// language.
+package runtime
+
+import (
+	"encoding/json"
+	"fmt"
+	"os"
+	"path/filepath"
+	"sort"
+	"strings"
+	"sync"
+
+	"github.com/novox/mesh-tools/node-tools/internal/bus"
+	"github.com/novox/mesh-tools/node-tools/internal/launch"
+)
+
+// ToolsVerb is the verb every module's runtime answers for it (ADR 0152): its tools, from the code
+// that answers them.
+const ToolsVerb = "tools"
+
+// Words the mesh sets for the runtime (ADR 0175, ADR 0192).
+const (
+	ToolModules     = "MESH_TOOL_MODULES"
+	ToolEnv         = "MESH_TOOL_ENV"
+	OperatorAccount = "MESH_OPERATOR_ACCOUNT"
+	OperatorHome    = "MESH_OPERATOR_HOME"
+)
+
+// Served is one module this runtime serves and its entrypoints.
+type Served struct {
+	Module      string
+	Entrypoints []string
+}
+
+// ToolsAnswer is what `tools` answers for one module.
+type ToolsAnswer struct {
+	Module string       `json:"module"`
+	Tools  []ListedTool `json:"tools"`
+	Failed string       `json:"failed,omitempty"`
+}
+
+// ListedTool is one tool as a module's `tools` answer lists it.
+type ListedTool struct {
+	Name        string          `json:"name"`
+	Description string          `json:"description"`
+	Input       json.RawMessage `json:"input"`
+	Subjects    []string        `json:"subjects,omitempty"`
+}
+
+// ServedModulesFrom reads MESH_TOOL_MODULES: `<module>=<entrypoint>` entries, comma-separated, several
+// per module. The one-module form — a bare path, or the runtime's own module — is the per-module
+// containers' (to-be 38 WP4c) and refused here: the node's runtime imports nothing.
+func ServedModulesFrom(spec, own string) ([]Served, error) {
+	order := []string{}
+	by := map[string][]string{}
+	for _, raw := range strings.Split(spec, ",") {
+		entry := strings.TrimSpace(raw)
+		if entry == "" {
+			continue
+		}
+		module, path, ok := strings.Cut(entry, "=")
+		module, path = strings.TrimSpace(module), strings.TrimSpace(path)
+		if !ok || module == "" || path == "" || module == own {
+			return nil, fmt.Errorf("%s: %q is not <module>=<entrypoint> of another module; the node's "+
+				"runtime launches the bundles it is given and imports nothing (novox/hq ADR 0193)", ToolModules, entry)
+		}
+		if _, seen := by[module]; !seen {
+			order = append(order, module)
+		}
+		by[module] = append(by[module], path)
+	}
+	out := make([]Served, 0, len(order))
+	for _, m := range order {
+		out = append(out, Served{Module: m, Entrypoints: by[m]})
+	}
+	return out, nil
+}
+
+// TakeToolEnvs reads the composed environments (ADR 0192) and removes them from the process's, so no
+// bundle finds another's there.
+func TakeToolEnvs() (map[string]map[string]string, error) {
+	raw := os.Getenv(ToolEnv)
+	os.Unsetenv(ToolEnv)
+	out := map[string]map[string]string{}
+	if raw == "" {
+		return out, nil
+	}
+	var parsed map[string]map[string]any
+	if err := json.Unmarshal([]byte(raw), &parsed); err != nil {
+		return nil, fmt.Errorf(`%s is not JSON of the shape {"<module>": {"<word>": "<value>"}}: %w`, ToolEnv, err)
+	}
+	for module, words := range parsed {
+		own := map[string]string{}
+		for k, v := range words {
+			if s, ok := v.(string); ok {
+				own[k] = s
+			} else {
+				b, _ := json.Marshal(v)
+				own[k] = string(b)
+			}
+		}
+		out[module] = own
+	}
+	return out, nil
+}
+
+type registration struct {
+	module string // the module's own name, or a seat's
+	owner  string // the module whose bundle made it
+	tools  []launch.Tool
+}
+
+// Run launches, binds and serves. It answers a stop function.
+func Run(conn *bus.Conn, served []Served, envs map[string]map[string]string, logf func(string, ...any)) (func(), error) {
+	if account := os.Getenv(OperatorAccount); account != "" {
+		home := ""
+		if h := os.Getenv(OperatorHome); h != "" {
+			home = " (home " + h + ")"
+		}
+		logf("[mesh-tools] the operator's account here is %s%s", account, home)
+	}
+	modules := make([]string, 0, len(served))
+	isServed := map[string]bool{}
+	for _, s := range served {
+		modules = append(modules, s.Module)
+		isServed[s.Module] = true
+		conn.Follow(s.Module)
+	}
+	node := conn.Node()
+
+	base := os.Environ()
+	envFor := func(module string) []string {
+		words := map[string]string{}
+		for _, kv := range base {
+			if k, v, ok := strings.Cut(kv, "="); ok && k != ToolEnv {
+				words[k] = v
+			}
+		}
+		for k, v := range envs[module] {
+			words[k] = v
+		}
+		words["MESH_SERVED_MODULE"] = module
+		words["MESH_MODULE"] = module
+		if node != "" {
+			words["MESH_NODE"] = node
+		}
+		out := make([]string, 0, len(words))
+		for k, v := range words {
+			out = append(out, k+"="+v)
+		}
+		sort.Strings(out)
+		return out
+	}
+
+	failed := map[string]string{}
+	var registrations []registration
+	var stops []func()
+	for _, s := range served {
+		for _, entry := range s.Entrypoints {
+			path, _ := filepath.Abs(entry)
+			module := s.Module
+			fail := func(why string) {
+				failed[module] = why
+				logf("[mesh-tools] %s's bundle %s failed to load: %s; its tools are not served here", module, entry, why)
+			}
+			if !launch.Executable(path) {
+				fail(path + " is not executable; a bundle the runtime serves is started, never imported, and its build makes it executable (novox/hq ADR 0193)")
+				continue
+			}
+			child, err := launch.Start(module, path, envFor(module), func(params json.RawMessage) error {
+				var env bus.Envelope
+				if err := json.Unmarshal(params, &env); err != nil {
+					return fmt.Errorf("not an event envelope: %w", err)
+				}
+				return conn.PublishAs(module, env)
+			}, logf)
+			if err != nil {
+				fail(err.Error())
+				continue
+			}
+			stops = append(stops, child.Stop)
+			for _, r := range child.Registrations {
+				registrations = append(registrations, registration{module: r.Module, owner: module, tools: r.Tools})
+			}
+		}
+	}
+
+	claimed := map[string]bool{}
+	for _, m := range modules {
+		if mem := conn.Membership(m); mem != nil {
+			for _, s := range mem.Seats {
+				claimed[s.Seat] = true
+			}
+		}
+	}
+	var own []registration
+	for _, r := range registrations {
+		switch {
+		case isServed[r.module]:
+			own = append(own, r)
+		case claimed[r.module]:
+		default:
+			logf(`[mesh-tools] %s registers tools under "%s", which is neither a module served here nor a seat one of them claims; not served until the mesh issues the claim`, r.owner, r.module)
+		}
+	}
+	stopAll := func() {
+		for i := len(stops) - 1; i >= 0; i-- {
+			stops[i]()
+		}
+	}
+	for _, r := range own {
+		seen := map[string]bool{}
+		for _, t := range r.tools {
+			if t.Name == ToolsVerb {
+				stopAll()
+				return nil, fmt.Errorf(`%s names a tool "%s", which is the verb the runtime answers for every module with what it serves (novox/hq ADR 0152) — refused, rename it`, r.module, ToolsVerb)
+			}
+			if seen[t.Name] {
+				stopAll()
+				return nil, fmt.Errorf("%s exposes two tools named %s — refused", r.module, t.Name)
+			}
+			seen[t.Name] = true
+		}
+	}
+
+	var names []string
+	byModule := map[string][]launch.Tool{}
+	for _, r := range own {
+		for _, t := range r.tools {
+			t := t
+			stop, err := conn.Handle(r.module+"."+t.Name, func(body json.RawMessage) (any, error) {
+				return t.Run(argsOf(body))
+			})
+			if err != nil {
+				logf("[mesh-tools] cannot serve %s.%s: %v", r.module, t.Name, err)
+				continue
+			}
+			names = append(names, r.module+"."+t.Name)
+			stops = append(stops, stop)
+		}
+		byModule[r.module] = append(byModule[r.module], r.tools...)
+	}
+	for _, module := range modules {
+		module := module
+		tools := byModule[module]
+		why := failed[module]
+		if len(tools) == 0 && why == "" {
+			continue // a pure-events module: silent, as it always was
+		}
+		stop, err := conn.Handle(module+"."+ToolsVerb, func(json.RawMessage) (any, error) {
+			answer := ToolsAnswer{Module: module, Tools: []ListedTool{}, Failed: why}
+			for _, t := range tools {
+				answer.Tools = append(answer.Tools, ListedTool{Name: t.Name, Description: t.Description,
+					Input: t.Input, Subjects: subjectsOf(conn, module, t.Name)})
+			}
+			return answer, nil
+		})
+		if err == nil {
+			stops = append(stops, stop)
+		}
+	}
+
+	failedNames := make([]string, 0, len(failed))
+	for _, m := range modules {
+		if _, f := failed[m]; f {
+			failedNames = append(failedNames, m)
+		}
+	}
+	line := fmt.Sprintf("[mesh-tools] serving %d tool(s) for %d module(s): %s", len(names), len(modules), orNone(names))
+	if len(failedNames) > 0 {
+		line += fmt.Sprintf("; not serving %s, whose bundle(s) failed to load", strings.Join(failedNames, ", "))
+	}
+	logf("%s", line)
+	stops = append(stops, serveSeats(conn, modules, registrations, logf))
+	conn.Flush()
+	return stopAll, nil
+}
+
+func orNone(names []string) string {
+	if len(names) == 0 {
+		return "(none)"
+	}
+	return strings.Join(names, ", ")
+}
+
+// argsOf is a call's arguments as the tool receives them: an object, `{}` for none.
+func argsOf(body json.RawMessage) json.RawMessage {
+	trimmed := strings.TrimSpace(string(body))
+	if trimmed == "" || trimmed == "null" {
+		return json.RawMessage("{}")
+	}
+	return body
+}
+
+// subjectsOf is where a tool is answered as the mesh issued it: the plain subject first, then this
+// machine's; nothing before a membership is issued.
+func subjectsOf(conn *bus.Conn, module, tool string) []string {
+	m := conn.Membership(module)
+	if m == nil {
+		return nil
+	}
+	var plain, mine []string
+	for _, s := range m.Serves {
+		subject := strings.ReplaceAll(s.Subject, "{tool}", tool)
+		if s.Queue != "" {
+			plain = append(plain, subject)
+		} else {
+			mine = append(mine, subject)
+		}
+	}
+	return append(plain, mine...)
+}
+
+// serveSeats serves every verb of every seat a served module holds, where the mesh issued it, by
+// the tool of the same name registered under the seat's name (ADR 0159, 0160) — and serves again
+// whenever a membership changes. Whether this machine holds the seat is the bus's to decide.
+func serveSeats(conn *bus.Conn, modules []string, registrations []registration, logf func(string, ...any)) func() {
+	impl := map[string]map[string]launch.Tool{}
+	for _, r := range registrations {
+		if impl[r.module] == nil {
+			impl[r.module] = map[string]launch.Tool{}
+		}
+		for _, t := range r.tools {
+			impl[r.module][t.Name] = t
+		}
+	}
+	var mu sync.Mutex
+	var stops []func()
+	serve := func() {
+		mu.Lock()
+		defer mu.Unlock()
+		for _, s := range stops {
+			s()
+		}
+		stops = nil
+		have := map[string]bool{}
+		for _, module := range modules {
+			m := conn.Membership(module)
+			if m == nil {
+				continue
+			}
+			for _, v := range m.Seats {
+				if have[v.Subject] {
+					continue
+				}
+				have[v.Subject] = true
+				t, ok := impl[v.Seat][v.Verb]
+				if !ok {
+					logf("[mesh-tools] %s claims %s and implements no %s, which that seat promises; not served", module, v.Seat, v.Verb)
+					continue
+				}
+				stop, err := conn.HandleSubject(v.Subject, func(body json.RawMessage) (any, error) {
+					return t.Run(argsOf(body))
+				})
+				if err != nil {
+					logf("[mesh-tools] cannot serve %s's %s on %s: %v", v.Seat, v.Verb, v.Subject, err)
+					continue
+				}
+				stops = append(stops, stop)
+				logf("[mesh-tools] serving %s's %s on %s, admitted where %s holds the seat", v.Seat, v.Verb, v.Subject, module)
+			}
+		}
+	}
+	serve()
+	conn.OnMembership(func(bus.Membership) { go func() { serve(); conn.Flush() }() })
+	return func() {
+		mu.Lock()
+		defer mu.Unlock()
+		for _, s := range stops {
+			s()
+		}
+		stops = nil
+	}
+}
@@ -0,0 +1,251 @@
+package runtime
+
+import (
+	"encoding/json"
+	"os"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/novox/mesh-tools/node-tools/internal/bus"
+	mt "github.com/novox/mesh-tools/node-tools/internal/meshtest"
+)
+
+func connect(t *testing.T, module, node string) *bus.Conn {
+	t.Helper()
+	c, err := bus.Connect(bus.Credential{URL: mt.URL(t), Module: module, Node: node})
+	if err != nil {
+		t.Fatal(err)
+	}
+	c.Logf = func(string, ...any) {}
+	t.Cleanup(c.Close)
+	return c
+}
+
+func call(t *testing.T, asker *bus.Conn, key string, args any) (string, error) {
+	t.Helper()
+	got, err := asker.Ask(key, args, "")
+	return string(got.Result), err
+}
+
+func same(t *testing.T, got, want string) {
+	t.Helper()
+	var a, b any
+	if json.Unmarshal([]byte(got), &a) != nil || json.Unmarshal([]byte(want), &b) != nil {
+		t.Fatalf("not JSON: got %s want %s", got, want)
+	}
+	ga, _ := json.Marshal(a)
+	gb, _ := json.Marshal(b)
+	if string(ga) != string(gb) {
+		t.Errorf("got %s, want %s", got, want)
+	}
+}
+
+// The node's runtime serves five modules' bundles on one credential — two TypeScript, one broken,
+// one Python, one written against the protocol — and follows a re-issued membership (ADR 0175, 0193).
+func TestTheNodesRuntimeServesFiveModulesAndFollowsAReissuedMembership(t *testing.T) {
+	mesh := mt.New(t)
+	mesh.Issue(t, mt.MembershipOf("alpha", "anchor", true, nil))
+	mesh.Issue(t, mt.MembershipOf("beta", "anchor", false, map[string][]string{"node-shelf": {"list", "clear"}}))
+	mesh.Issue(t, mt.MembershipOf("gamma", "anchor", false, nil))
+	mesh.Issue(t, mt.MembershipOf("delta", "anchor", false, map[string][]string{"node-lamp": {"on"}}))
+	mesh.Issue(t, mt.MembershipOf("epsilon", "anchor", false, nil))
+	nodeTools := connect(t, "node-tools", "anchor")
+	asker := connect(t, "console", "workstation")
+	logs := &mt.Logs{}
+	t.Setenv("MESH_OPERATOR_ACCOUNT", "somebody")
+	t.Setenv("MESH_OPERATOR_HOME", "/home/somebody")
+	stop, err := Run(nodeTools, []Served{
+		{"alpha", []string{mt.Fixture("many-alpha.serve.mjs")}},
+		{"beta", []string{mt.Fixture("many-beta.serve.mjs")}},
+		{"gamma", []string{mt.Fixture("many-broken.serve.mjs")}},
+		{"delta", []string{mt.Fixture("many-delta.py")}},
+		{"epsilon", []string{mt.Fixture("many-epsilon.mjs")}},
+	}, nil, logs.Logf)
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer stop()
+	if !logs.Has("the operator's account here is somebody (home /home/somebody)") {
+		t.Errorf("the operator was not said:\n%s", logs.All())
+	}
+	if !logs.Has("gamma's bundle", "many-broken.serve.mjs failed to load: gamma's bundle exited (1): Error: gamma's bundle cannot find its client; its tools are not served here") {
+		t.Errorf("the broken bundle was not named with its own words:\n%s", logs.All())
+	}
+	if !logs.Has("serving 8 tool(s) for 5 module(s): alpha.one, alpha.two, beta.three, beta.four, beta.five, delta.greet, delta.die, epsilon.seven; not serving gamma") {
+		t.Errorf("not serving what it should:\n%s", logs.All())
+	}
+
+	for key, want := range map[string]string{
+		"alpha.one": `{"alpha":1}`, "alpha.one@anchor": `{"alpha":1}`, "beta.three@anchor": `{"beta":3}`,
+		"beta.four@anchor": `{"beta":4}`, "beta.five@anchor": `{"beta":5}`,
+		"seat:node-shelf.list@anchor": `{"shelf":["a","b"]}`, "seat:node-shelf.clear@anchor": `{"cleared":true}`,
+		"seat:node-lamp.on@anchor": `{"on":true,"language":"python"}`, "epsilon.seven@anchor": `{"epsilon":7,"via":"stdio"}`,
+	} {
+		got, err := call(t, asker, key, map[string]any{})
+		if err != nil {
+			t.Errorf("%s: %v", key, err)
+			continue
+		}
+		same(t, got, want)
+	}
+	if _, err := call(t, asker, "beta.three", map[string]any{}); err == nil || !strings.Contains(err.Error(), "no responders") {
+		t.Errorf("beta was not issued the plain subject, and answered on it: %v", err)
+	}
+	got, err := call(t, asker, "delta.greet@anchor", map[string]any{"who": "mesh"})
+	if err != nil {
+		t.Fatal(err)
+	}
+	same(t, got, `{"greeting":"hello mesh","language":"python"}`)
+
+	// A launched tool that emits does so as its module, through the runtime.
+	landed := mesh.NextEvent(t, "mesh.mod.*.event.>")
+	got, err = call(t, asker, "alpha.two", map[string]any{})
+	if err != nil {
+		t.Fatal(err)
+	}
+	same(t, got, `{"alpha":2}`)
+	select {
+	case subject := <-landed:
+		if subject != "mesh.mod.alpha.event.happened" {
+			t.Errorf("the event landed on %s", subject)
+		}
+	case <-time.After(5 * time.Second):
+		t.Error("the event never landed")
+	}
+
+	// A bundle that dies mid-call is said, and started again on its next call.
+	if _, err := call(t, asker, "delta.die@anchor", map[string]any{}); err == nil {
+		t.Error("a bundle that died answered")
+	}
+	got, err = call(t, asker, "delta.greet@anchor", map[string]any{"who": "again"})
+	if err != nil {
+		t.Fatalf("not started again: %v", err)
+	}
+	same(t, got, `{"greeting":"hello again","language":"python"}`)
+
+	// `tools` answers for each, and why gamma serves nothing.
+	gamma, err := call(t, asker, "gamma.tools@anchor", map[string]any{})
+	if err != nil {
+		t.Fatal(err)
+	}
+	same(t, gamma, `{"module":"gamma","tools":[],"failed":"gamma's bundle exited (1): Error: gamma's bundle cannot find its client"}`)
+	beta, _ := call(t, asker, "beta.tools@anchor", map[string]any{})
+	var answer ToolsAnswer
+	_ = json.Unmarshal([]byte(beta), &answer)
+	if len(answer.Tools) != 3 || answer.Tools[0].Name != "three" || strings.Join(answer.Tools[0].Subjects, ",") != "mesh.mod.beta.tool.three.anchor" {
+		t.Errorf("beta's tools answer: %s", beta)
+	}
+
+	// Re-issued mid-run, now answering for the module anywhere: served without a restart.
+	mesh.Issue(t, mt.MembershipOf("beta", "anchor", true, map[string][]string{"node-shelf": {"list", "clear"}}))
+	mt.Until(t, func() error { _, err := call(t, asker, "beta.three", map[string]any{}); return err })
+	got, err = call(t, asker, "seat:node-shelf.list@anchor", map[string]any{})
+	if err != nil {
+		t.Fatal(err)
+	}
+	same(t, got, `{"shelf":["a","b"]}`)
+}
+
+// Each bundle is given its own environment and none of another's (ADR 0192), and the composed
+// environments are not left in the runtime's.
+func TestEachBundleIsGivenItsOwnEnvironment(t *testing.T) {
+	mesh := mt.New(t)
+	for _, m := range []string{"gamma", "delta", "zeta"} {
+		mesh.Issue(t, mt.MembershipOf(m, "anchor", false, nil))
+	}
+	nodeTools := connect(t, "node-tools", "anchor")
+	asker := connect(t, "console", "workstation")
+	t.Setenv("MESH_OPERATOR_ACCOUNT", "somebody")
+	t.Setenv(ToolEnv, `{"gamma":{"GAMMA_CONFIG_FILE":"/var/lib/mesh/gamma/config.json"},"delta":{"DELTA_TOKEN_FILE":"/var/lib/mesh/delta/token"},"zeta":{"ZETA_URL":"http://127.0.0.1:3000"}}`)
+	envs, err := TakeToolEnvs()
+	if err != nil {
+		t.Fatal(err)
+	}
+	if _, left := os.LookupEnv(ToolEnv); left {
+		t.Error("the composed environments were left in the runtime's")
+	}
+	logs := &mt.Logs{}
+	stop, err := Run(nodeTools, []Served{
+		{"gamma", []string{mt.Fixture("env-gamma.serve.mjs")}},
+		{"delta", []string{mt.Fixture("env-delta.serve.mjs")}},
+		{"zeta", []string{mt.Fixture("env-zeta.mjs")}},
+	}, envs, logs.Logf)
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer stop()
+	for key, want := range map[string]string{
+		"gamma.given@anchor": `{"mine":"/var/lib/mesh/gamma/config.json","theirs":null,"runtime":"somebody","composed":null}`,
+		"delta.given@anchor": `{"mine":"/var/lib/mesh/delta/token","theirs":null}`,
+		"zeta.given@anchor":  `{"mine":"http://127.0.0.1:3000","theirs":null,"composed":null}`,
+	} {
+		got, err := call(t, asker, key, map[string]any{})
+		if err != nil {
+			t.Fatalf("%s: %v\n%s", key, err, logs.All())
+		}
+		same(t, got, want)
+	}
+}
+
+// An entrypoint that is not executable is refused by name, and the others serve (ADR 0193).
+func TestAnEntrypointThatIsNotExecutableIsRefused(t *testing.T) {
+	mesh := mt.New(t)
+	mesh.Issue(t, mt.MembershipOf("alpha", "anchor", false, nil))
+	mesh.Issue(t, mt.MembershipOf("plain", "anchor", false, nil))
+	nodeTools := connect(t, "node-tools", "anchor")
+	asker := connect(t, "console", "workstation")
+	logs := &mt.Logs{}
+	stop, err := Run(nodeTools, []Served{
+		{"alpha", []string{mt.Fixture("many-alpha.serve.mjs")}},
+		{"plain", []string{mt.Fixture("many-alpha.mjs")}},
+	}, nil, logs.Logf)
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer stop()
+	if !logs.Has("plain's bundle", "many-alpha.mjs failed to load:", "is not executable; a bundle the runtime serves is started, never imported") {
+		t.Errorf("the non-executable entrypoint was not refused by name:\n%s", logs.All())
+	}
+	got, err := call(t, asker, "alpha.one@anchor", map[string]any{})
+	if err != nil {
+		t.Fatal(err)
+	}
+	same(t, got, `{"alpha":1}`)
+}
+
+// A launched bundle is told the module it serves, so its seat's verbs stay the seat's (ADR 0193).
+func TestALaunchedBundleRegisteringItsSeatFirstServesTheSeat(t *testing.T) {
+	mesh := mt.New(t)
+	mesh.Issue(t, mt.MembershipOf("theta", "anchor", false, map[string][]string{"node-shelf": {"list"}}))
+	nodeTools := connect(t, "node-tools", "anchor")
+	asker := connect(t, "console", "workstation")
+	stop, err := Run(nodeTools, []Served{{"theta", []string{mt.Fixture("served-seat-first.mjs")}}},
+		map[string]map[string]string{"theta": {"THETA_WORD": "given"}}, (&mt.Logs{}).Logf)
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer stop()
+	got, err := call(t, asker, "theta.own@anchor", map[string]any{})
+	if err != nil {
+		t.Fatal(err)
+	}
+	same(t, got, `{"theta":"given"}`)
+	got, err = call(t, asker, "seat:node-shelf.list@anchor", map[string]any{})
+	if err != nil {
+		t.Fatal(err)
+	}
+	same(t, got, `{"shelf":["x"]}`)
+}
+
+func TestToolModulesNamesOtherModulesOnly(t *testing.T) {
+	got, err := ServedModulesFrom(" alpha=/a/tools/index.serve.mjs, beta=/b/one, beta=/b/two ", "node-tools")
+	if err != nil || len(got) != 2 || got[1].Module != "beta" || len(got[1].Entrypoints) != 2 {
+		t.Fatalf("%v %v", got, err)
+	}
+	for _, bad := range []string{"/mine/index.js", "node-tools=/own.js", "=/x"} {
+		if _, err := ServedModulesFrom(bad, "node-tools"); err == nil {
+			t.Errorf("%q was accepted", bad)
+		}
+	}
+}