Clean prepaid SoT, identity mailbox, public access planes, leaf policy, fleet spawn
Some checks are pending
offline / test (push) Waiting to run
Some checks are pending
offline / test (push) Waiting to run
Persist account-balance books; edge caches prepaid from books. Add zappier-identity, verae-nats-accounts, verae-jobs-events, verae-access-staff, zapier-decisions. Edge binds loopback; lan-134 stays off; HTTP services prefer local spawn.
This commit is contained in:
parent
345aeeead9
commit
ddf772454b
153 changed files with 2236 additions and 116 deletions
12
packages/verae-nats-accounts/test/policy.test.js
Normal file
12
packages/verae-nats-accounts/test/policy.test.js
Normal file
|
|
@ -0,0 +1,12 @@
|
|||
import { test } from 'node:test';
|
||||
import assert from 'node:assert/strict';
|
||||
import { leafAllowed, loadPolicy } from '../src/policy.js';
|
||||
|
||||
test('leaf may archive and jobs, never billing', () => {
|
||||
assert.equal(leafAllowed('verae.archive.put'), true);
|
||||
assert.equal(leafAllowed('verae.archive.reply.abc'), true);
|
||||
assert.equal(leafAllowed('verae.zapier.jobs.watch'), true);
|
||||
assert.equal(leafAllowed('verae.billing.balance.adjust'), false);
|
||||
assert.equal(leafAllowed('verae.billing.statement.get'), false);
|
||||
assert.ok(loadPolicy().accounts.LEAF.deny_publish.includes('verae.billing.>'));
|
||||
});
|
||||
Loading…
Add table
Add a link
Reference in a new issue