jschoubben
dc2b0641bf
Merge remote-tracking branch 'origin/main' into feat/files-through-the-store
2026-10-21 15:10:43 +02:00
jschoubben
b54640e386
Post conversions to the document server's documented /converter path (issue 1596)
2026-10-21 15:10:35 +02:00
jschoubben
6358041eca
Convert a Word, spreadsheet, slide, text or web document to PDF through the converter before printing it (issue 1600)
2026-10-21 15:09:47 +02:00
jschoubben
657b38ccd1
Print a web link: the device process fetches it bounded, never inside the mesh or the machine, stores it under its SHA-256 and prints that (issue 1599)
2026-10-21 15:07:34 +02:00
jschoubben
e959cf339b
Make printer.print take exactly one of object, path with node, or url, send a machine's file through its node-files, and check the printer's formats first (issue 1598)
2026-10-21 15:05:03 +02:00
jschoubben
cb226c6fef
File a scan from the store by the link the device process signs, not by parts over the bus (issue 1601)
2026-10-21 15:01:09 +02:00
jschoubben
278014fd79
Add the converter process: take convert-asks, have the document server make the PDF with a token only it holds, and put it to the target link (issue 1596)
2026-10-21 14:58:41 +02:00
jschoubben
caae838a2a
Claim document-converter and serve convert: queue the ask for the converter and read its answer, holding no credential (issue 1595)
2026-10-21 14:55:47 +02:00
jschoubben
6ee3507af0
Serve node-files.upload and download: a machine's file goes into a bucket and an object comes out of one, by short links, never over the bus (issue 1597)
2026-10-21 14:54:17 +02:00
jschoubben
06ca1b7fb9
Serve object-store.link: a signed link to one object, signed with the bucket's link key, for the consumer and its shares; retire the root-signed minio_presigned_url (issue 1516)
2026-10-21 14:52:14 +02:00
mesh-tools
90ecba4e50
Merge pull request 'Capture automx's live answers as fixtures and add a read-only tool for its database rows, before R4d replaces it (issue 1630)' ( #415 ) from feat/r4d-automx into main
2026-10-21 12:47:49 +00:00
jschoubben
5b3fd1008a
Make a link key per bucket, limited to get and put of its objects and kept as minio's own secret, so links are not signed by the root account (issue 1594)
2026-10-21 14:47:14 +02:00
mesh-tools
671ab9a3ba
Merge pull request 'Pin gitea, keycloak, mesh-provisioner-client, postgres and route-adapter to a mesh-sdk commit on main, so a fresh go mod download resolves them once the feature branch goes (issue 1663)' ( #414 ) from fix/1663-sdk-pins-on-main into main
2026-10-21 12:30:06 +00:00
jschoubben
0a7c58766c
Pin gitea, keycloak, mesh-provisioner-client, postgres and route-adapter to a commit of mesh-sdk main, since the pinned one is on a feature branch only (issue 1663)
mesh/merge-gate head 0a7c58766c20 merged into trunk 4efac366cebb — pass: builds gitea, keycloak, mesh-provisioner-client, postgres, route-adapter → ace, g1…
mesh/repo-check head 0a7c58766c20 merged into trunk 4efac366cebb — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-…
mesh/delivery delivering: 0 machine step(s) passed
2026-10-21 14:07:01 +02:00
jschoubben
454c5662dd
Add automx_rows, a read-only tool for the rows automx answers from (issue 1630)
mesh/merge-gate head 454c5662ddcb merged into trunk 671ab9a3ba7b — pass: builds mailu, sent nowhere; no bus step; 1 wait(s) for a person; every machine com…
mesh/repo-check head 454c5662ddcb merged into trunk 671ab9a3ba7b — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-…
mesh/delivery delivering: 0 machine step(s) passed
2026-10-21 14:02:37 +02:00
jschoubben
8fba5e831b
Capture what automx answers today, before a Go program replaces it (issue 1630)
2026-10-21 13:59:58 +02:00
mesh-tools
4efac366ce
Merge pull request 'Pin mesh-provisioner, mesh-vault and rofi to a mesh-sdk commit on main, so a fresh go mod download (mesh-build-go's fetch) resolves them (issue 1659)' ( #413 ) from fix/1659-fetch-pseudo-version into main
2026-10-21 11:40:06 +00:00
mesh-tools
38ac738d84
Merge pull request 'Add netcheck_request: one HTTP request and its whole answer, so a service's live answers can be captured, refusing loopback, unspecified and link-local addresses (issue 1643)' ( #412 ) from fix/1643-http-request into main
2026-10-21 11:27:33 +00:00
jschoubben
92c5e1d9ae
Pin mesh-provisioner, mesh-vault and rofi to a commit of mesh-sdk main, since the pinned one is on no branch and no fetch can resolve it (issue 1659)
mesh/merge-gate head 92c5e1d9aea8 merged into trunk 38ac738d8463 — pass: builds mesh-provisioner, mesh-vault, rofi → g14, novox, shanks; no bus step; every…
mesh/repo-check head 92c5e1d9aea8 merged into trunk 38ac738d8463 — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-…
2026-10-21 13:14:57 +02:00
jschoubben
a01e1ea7fb
Refuse a host in a short or legacy numeric form (127.1, 2130706433, 0x7f.0.0.1) in netcheck_request before any lookup, so the refusal does not depend on the resolver
mesh/merge-gate head a01e1ea7fb64 merged into trunk d74c1cb995a4 — pass: builds netcheck → ace, g14, novox, shanks; no bus step; every machine composes wit…
mesh/repo-check head a01e1ea7fb64 merged into trunk d74c1cb995a4 — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-…
2026-10-21 13:07:08 +02:00
mesh-tools
d74c1cb995
Merge pull request 'Read manifests that name shares: mesh-build-go and mesh-build-node take mesh-sdk 465beb4 (issue 1657)' ( #411 ) from feat/files-through-the-store-builders into main
2026-10-21 11:01:03 +00:00
jschoubben
2d30dc2f1e
Read manifests that name shares: mesh-build-go and mesh-build-node take mesh-sdk 465beb4 (issue 1657)
mesh/merge-gate head 2d30dc2f1ef7 merged into trunk b5dbfbb78450 — pass: builds mesh-build-go, mesh-build-node → g14, novox, shanks; no bus step; every mac…
mesh/repo-check head 2d30dc2f1ef7 merged into trunk b5dbfbb78450 — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-…
2026-10-21 12:52:28 +02:00
mesh-tools
b5dbfbb784
Merge pull request 'Pack archive artifacts in mesh-build-go, a module's directory or a pinned file, and refuse any path that leads out of the module through a link (issue 1589, ADR 0478 §1)' ( #408 ) from fix/1589-archive-artifacts into main
2026-10-21 10:34:00 +00:00
mesh-tools
e9e85365b5
Refuse loopback, unspecified and link-local addresses in netcheck_request, on the address dialled, and use no proxy
2026-10-21 10:27:44 +00:00
mesh-tools
710cfbd622
Merge pull request 'Let the build modules answer their own step results and toolchains, so a fetch's workspace and a build's digest can be read (issue 1562, build-module half)' ( #410 ) from fix/1562-read-steps into main
2026-10-21 10:26:13 +00:00
mesh-tools
940594b074
Merge pull request 'Make dev-tools, lab and the build modules need the go and nodejs modules instead of declaring the toolchain packages, step B of issue 1573 (ADR 0477 §4)' ( #409 ) from fix/1573b-toolchain-users into main
2026-10-21 10:21:02 +00:00
mesh-tools
ff849d9f62
Add netcheck_request: one HTTP request and its whole answer, so a service's live answers can be captured (issue 1643)
2026-10-21 10:08:59 +00:00
mesh-tools
f0c8958dd2
Merge pull request 'Apply a patch in the forge tool itself when the forge's diffpatch answers 500, so a patch whose context holds a non-ASCII character is taken (issue 1604)' ( #407 ) from fix/1604-patch-applied into main
2026-10-21 10:08:48 +00:00
mesh-tools
c33b83dce7
Read a build module's steps and toolchains states with its own tools, so a step's result and the reported toolchain can be checked live (issue 1562)
mesh/merge-gate head c33b83dce7d5 merged into trunk 940594b07478 — pass: builds mesh-build-go, mesh-build-node → g14, novox, shanks; no bus step; every mac…
mesh/repo-check head c33b83dce7d5 merged into trunk 940594b07478 — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-…
mesh/delivery covered: a later merge that contains it was delivered: novox/mesh-catalog@e023f69989ab (merged as b5dbfbb7 into main, walk plan-17925769516…
2026-10-21 09:57:16 +00:00
mesh-tools
36259f3406
Update the build modules' manifest tests for the toolchain provisions (issue 1573)
mesh/merge-gate head 36259f3406f7 merged into trunk f0c8958dd217 — pass: builds dev-tools, lab, mesh-build-go, mesh-build-node → ace, g14, novox, shanks; n…
mesh/repo-check head 36259f3406f7 merged into trunk f0c8958dd217 — pass: THE CHANGE ALTERS ITS OWN CHECK (merge-check.sh): main's version judged it; the ch…
mesh/delivery covered: a later merge that contains it was delivered: novox/mesh-catalog@e023f69989ab (merged as b5dbfbb7 into main, walk plan-17925769516…
2026-10-21 09:53:48 +00:00
mesh-tools
e023f69989
Compare an archive's tar stream with the build agent's always and its digest only under the Go it was captured with (issue 1589)
mesh/merge-gate head e023f69989ab merged into trunk 710cfbd622d7 — pass: builds mesh-build-go → g14, novox, shanks; no bus step; every machine composes wit…
mesh/repo-check head e023f69989ab merged into trunk 710cfbd622d7 — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-…
2026-10-21 09:52:22 +00:00
mesh-tools
324e331184
Anchor patch hunks as git apply does, refuse patches touching non-100644 files by their real mode, survive bare-CR context lines (issue 1604 review)
mesh/merge-gate head 324e331184da merged into trunk 0f2cee1bea4e — pass: builds gitea → novox; no bus step; every machine composes with the change as it di…
mesh/repo-check head 324e331184da merged into trunk 0f2cee1bea4e — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-…
mesh/delivery covered: a later merge that contains it was delivered: novox/mesh-catalog@e023f69989ab (merged as b5dbfbb7 into main, walk plan-17925769516…
2026-10-21 09:52:10 +00:00
mesh-tools
d8d153295a
Say in the go and nodejs READMEs that they are now the only declarers (issue 1573)
2026-10-21 09:51:22 +00:00
mesh-tools
bda75011a1
Say in the build modules' READMEs where the packages come from (issue 1573)
2026-10-21 09:50:55 +00:00
mesh-tools
9d1f152603
Wire the toolchains check into the merge check (issue 1573)
2026-10-21 09:50:46 +00:00
mesh-tools
c4cd7a1b16
Check that only the go and nodejs modules declare the toolchain packages (issue 1573)
2026-10-21 09:50:14 +00:00
mesh-tools
7753c27042
Make dev-tools, lab and the two build modules require the toolchain provisions instead of declaring the packages (issue 1573)
2026-10-21 09:49:50 +00:00
mesh-tools
ef154705b9
Make an archive's digest independent of the umask of the account that packs it (issue 1589)
2026-10-21 09:49:13 +00:00
mesh-tools
d7e6074d97
Refuse a build output directory that is a link out of the module (issue 1589)
2026-10-21 09:46:47 +00:00
mesh-tools
800d6624d5
Refuse an archive of a module directory that is a link out of the workspace's tree (issue 1589)
2026-10-21 09:45:58 +00:00
mesh-tools
0f2cee1bea
Merge pull request 'Add the go and nodejs modules that own the toolchain packages on a node, step A of issue 1573 (ADR 0477 §4)' ( #406 ) from fix/1573a-toolchain-owners into main
2026-10-21 09:36:49 +00:00
mesh-tools
5efd84e93e
Merge pull request 'Build with the node's installed Go and Node, never a pinned or downloaded toolchain, so builds match what the nodes run (issue 1572, ADR 0477)' ( #403 ) from fix/1572-installed-toolchain into main
2026-10-21 09:27:17 +00:00
mesh-tools
ceb42b0e92
Say in the go and nodejs READMEs what holds at this step, and what holds once the users require them (review of issue 1573 step A)
mesh/merge-gate head ceb42b0e920e merged into trunk 5efd84e93e38 — pass: builds new: modules/go, modules/nodejs, sent nowhere; no bus step; every machine c…
mesh/repo-check head ceb42b0e920e merged into trunk 5efd84e93e38 — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-…
2026-10-21 09:25:23 +00:00
mesh-tools
e5cfcb316a
Fall back to the tool's own patch applier when the forge answers 500, with tests (issue 1604)
2026-10-21 09:21:59 +00:00
mesh-tools
025d62478a
Add the go and nodejs modules, which own the toolchain packages and provide go-toolchain and node-toolchain (issue 1573)
2026-10-21 09:21:19 +00:00
mesh-tools
e6053262e4
Apply a unified diff in the forge tool itself, for the patches the forge's diffpatch refuses (issue 1604)
2026-10-21 09:20:25 +00:00
mesh-tools
6993ef003c
Refuse an archive whose directory leads out of the module through a symlinked parent (review of issue 1589)
2026-10-21 09:19:03 +00:00
mesh-tools
406ee69732
Add the pinned release the archive tests serve (issue 1589)
2026-10-21 09:13:40 +00:00
mesh-tools
8bfa626a8b
Test archive artifacts against build-agent's own digests (issue 1589)
2026-10-21 09:13:32 +00:00
mesh-tools
bfd6b7c7ce
Say the build tool packs archives, give the module a client for pinned files, and record how the digests were captured (issue 1589)
2026-10-21 09:12:55 +00:00
jschoubben
mesh-tools