RnD/machineGroupControl
3
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

feat(commands): adopt unified command envelope — msg.origin provenance

Browse Source 
Resolve command origin via msg.origin (registry-stamped, default parent) with a
legacy fallback to the previous payload.source/msg.source field. Feeds the
existing mode/allowedSources arbitration unchanged.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
znetsixe
2026-05-29 18:41:17 +02:00
parent f18f3cc673
commit 19720bd67f
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/commands/handlers.js
View File

@@ -23,12 +23,20 @@ function _gate(source, action, msg) {
if (!source.isValidActionForMode(action, source.mode)) return false; if (!source.isValidActionForMode(action, source.mode)) return false;
} }
if (typeof source?.isValidSourceForMode === 'function') { if (typeof source?.isValidSourceForMode === 'function') {
const src = (typeof msg?.source === 'string' && msg.source) ? msg.source : 'parent'; if (!source.isValidSourceForMode(_origin(msg), source.mode)) return false;
if (!source.isValidSourceForMode(src, source.mode)) return false;
} }
return true; return true;
} }
// Resolve the command origin (control authority: parent | GUI | fysical).
// The shared commandRegistry stamps msg.origin (default 'parent'); legacy flows
// carried it as msg.source. Prefer the legacy field when present so existing
// flows keep working, otherwise use the registry-stamped msg.origin.
function _origin(msg) {
if (typeof msg?.source === 'string' && msg.source) return msg.source;
return (typeof msg?.origin === 'string' && msg.origin) ? msg.origin : 'parent';
}
exports.setMode = (source, msg) => { exports.setMode = (source, msg) => {
// set.mode is a status-level operation — allowed in every mode by the // set.mode is a status-level operation — allowed in every mode by the
// default schema (incl. maintenance). The gate still fires so an // default schema (incl. maintenance). The gate still fires so an