gitea: clear duplicate mesh-tools tokens by id and back off a failed mint (hq issue 739) #314
Closed
mesh-tools
wants to merge 1 commits from
fix/739-token-duplicates into main
pull from: fix/739-token-duplicates
merge into: :main
:main
:fix/739-token-duplicates
:pkg/57-v2-vault-verbs
:feat/57-config-and-provisioning
:fix/270-nats-emits-bus-faults
:fix/claude-code-tips-preference
:fix/628-modules-declare-every-package-they-need
:fix/613-home-network-shares
:feat/328-a-containers-process-groups
:fix/418-node-reads
:fix/345-reminder-test
:fix/459-a-stop-stops-only-its-own
:feat/bus-websocket-listener
:fix/383-a-proposal-reads-whole-on-the-phone
:feat/asks-answered-on-any-channel
:fix/tool-gaps-dns-outage
:feat/the-agent-runs-as-its-own-account
:fix/340-tool-servers-only-from-the-terminal
:feat/the-store-collects-nightly-again
:feat/dbus-module
1
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
|
|
ee2160d00c |
Drop every mesh-tools token by id when the forge holds two, and stop re-minting on every call (hq issue 739)
mesh/merge-gate head ee2160d00c22 merged into trunk c71c513027e5 — fail: builds gitea → novox; no bus step; head ee2160d00c22 does not merge cleanly into t…
mesh/repo-check head ee2160d00c22 merged into trunk c71c513027e5 — fail: head ee2160d00c22 does not merge cleanly into trunk c71c513027e5: in conflict modu…
mesh/delivery stopped: the pull request closed unmerged
On 2026-10-14 from 22:28 local the forge held two tokens named mesh-tools. gitea refuses a delete by such a name with 422 "multiple matches", so every gitea tool call re-entered the mint, made two basic-auth calls that hash the admin password, and failed: several times a minute, on a control-node that was already overloaded, and mesh-delivery could read neither open pulls nor views. The watcher and the tools run as separate bundles, so the in-process sharing of one token source does not cover them; two mints racing leave two tokens by the name, because the forge's check that a name is unused is not atomic. A 422 on the delete by name now lists the account's tokens and drops each one carrying the name by its id, then mints. A failed mint is not asked of the forge again for 30 s: the same error is answered without a call. |