Something went wrong. Try again.
Monorepo for Tangled tangled.org
Something went wrong. Try again.
Commits on dwn/priv-knot
dawn 03a6b999 knot-index: config at construction and claim_ready from the key work dwn/priv-knot
Signed-off-by: dawn <dawn@tangled.org>
knot-index: config at construction and claim_ready from the key work dwn/priv-knot
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 4230478d knot-cobs: a private registration is collaborators-only by construction
Signed-off-by: dawn <dawn@tangled.org>
knot-cobs: a private registration is collaborators-only by construction
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn d0e5c2b4 knot-sim: kill the lease writer mid-save and check what boots back
Signed-off-by: dawn <dawn@tangled.org>
knot-sim: kill the lease writer mid-save and check what boots back
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 30816bc8 knot-sim: test that strangers never see private repos across seeds
Signed-off-by: dawn <dawn@tangled.org>
knot-sim: test that strangers never see private repos across seeds
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn e9b4ef37 knot-sim: run private repos, leases and syncers through the sim
Signed-off-by: dawn <dawn@tangled.org>
knot-sim: run private repos, leases and syncers through the sim
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 826e6bfd knot-xrpc: test every repo route for private repos looking missing
Signed-off-by: dawn <dawn@tangled.org>
knot-xrpc: test every repo route for private repos looking missing
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn a28f9fc8 knot-xrpc: list every route and lint for unlisted routes and internal grants
Signed-off-by: dawn <dawn@tangled.org>
knot-xrpc: list every route and lint for unlisted routes and internal grants
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn a805b6f2 knot-sim: test that a full h3 handshake's first request isn't early data
Signed-off-by: dawn <dawn@tangled.org>
knot-sim: test that a full h3 handshake's first request isn't early data
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 3243a8a9 knot-sim: test private repos over h3, with and without 0-rtt
Signed-off-by: dawn <dawn@tangled.org>
knot-sim: test private repos over h3, with and without 0-rtt
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 7c0bf393 knot-sim: share test helpers between test files
Signed-off-by: dawn <dawn@tangled.org>
knot-sim: share test helpers between test files
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 0f551f5d knot-ssh: test that private repos look missing over ssh in every address form
Signed-off-by: dawn <dawn@tangled.org>
knot-ssh: test that private repos look missing over ssh in every address form
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn f664d456 knot-ssh: share test helpers between test files
Signed-off-by: dawn <dawn@tangled.org>
knot-ssh: share test helpers between test files
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 769c6350 knot2: test that an indigo client never sees a private repo on the firehose
Signed-off-by: dawn <dawn@tangled.org>
knot2: test that an indigo client never sees a private repo on the firehose
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn cde8b6a2 knot-xrpc: test that listRepos pages never give a private repo a slot
Signed-off-by: dawn <dawn@tangled.org>
knot-xrpc: test that listRepos pages never give a private repo a slot
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 8195bc5a knot-xrpc: test that private repos never reach the firehose or the sync reads
Signed-off-by: dawn <dawn@tangled.org>
knot-xrpc: test that private repos never reach the firehose or the sync reads
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 19cd9658 knot-xrpc: check lapse notices against a model over random lease changes
Signed-off-by: dawn <dawn@tangled.org>
knot-xrpc: check lapse notices against a model over random lease changes
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 2410bb41 knot-xrpc: test lapse notices over time and restarts without sleeping
Signed-off-by: dawn <dawn@tangled.org>
knot-xrpc: test lapse notices over time and restarts without sleeping
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 7d548242 knot-xrpc: test that a syncer loses a private repo when its lease runs out
Signed-off-by: dawn <dawn@tangled.org>
knot-xrpc: test that a syncer loses a private repo when its lease runs out
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 26c3bf83 knot-xrpc: share answer and fixture helpers between test files
Signed-off-by: dawn <dawn@tangled.org>
knot-xrpc: share answer and fixture helpers between test files
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 9836537b knot-xrpc: let tests move the clock and mint tokens for that time
Signed-off-by: dawn <dawn@tangled.org>
knot-xrpc: let tests move the clock and mint tokens for that time
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 5b271ac3 knot-xrpc: share the private repo test setup between test files
Signed-off-by: dawn <dawn@tangled.org>
knot-xrpc: share the private repo test setup between test files
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 729f86e0 knot2: tell syncers about private writes, deleted repos and lapsed leases
Signed-off-by: dawn <dawn@tangled.org>
knot2: tell syncers about private writes, deleted repos and lapsed leases
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 7244825d knot-atproto: find where to notify a syncer from its did doc
Signed-off-by: dawn <dawn@tangled.org>
knot-atproto: find where to notify a syncer from its did doc
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn f423deff knot2: let the spindle a repo names read it while it's private
Signed-off-by: dawn <dawn@tangled.org>
knot2: let the spindle a repo names read it while it's private
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 6266f234 knot2: add listRepoOps and listSpaces so syncers can find and catch up on private repos
Signed-off-by: dawn <dawn@tangled.org>
knot2: add listRepoOps and listSpaces so syncers can find and catch up on private repos
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 61d4f0e2 knot2: let a syncer read a private repo while a member holds a lease
Signed-off-by: dawn <dawn@tangled.org>
knot2: let a syncer read a private repo while a member holds a lease
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 57c33efb knot-xrpc: tell syncers apart from users and check their tokens without a pds
Signed-off-by: dawn <dawn@tangled.org>
knot-xrpc: tell syncers apart from users and check their tokens without a pds
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 24905afb knot-config: add the list of services allowed to sync private repos
Signed-off-by: dawn <dawn@tangled.org>
knot-config: add the list of services allowed to sync private repos
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 8e1e8bd1 lexicons: add the lexicons for syncing private repos
Signed-off-by: dawn <dawn@tangled.org>
lexicons: add the lexicons for syncing private repos
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 76ef0504 knot-xrpc: keep read leases across restarts and add renewLease
Signed-off-by: dawn <dawn@tangled.org>
knot-xrpc: keep read leases across restarts and add renewLease
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 5a0bad65 knot-acl: renew a member's read lease when they read a private repo
Signed-off-by: dawn <dawn@tangled.org>
knot-acl: renew a member's read lease when they read a private repo
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 1dca0284 knot-index: hold read leases and the private repos each member reads
Signed-off-by: dawn <dawn@tangled.org>
knot-index: hold read leases and the private repos each member reads
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn b50a9737 knot-config: add how long a member's read lease lasts
Signed-off-by: dawn <dawn@tangled.org>
knot-config: add how long a member's read lease lasts
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 74c7c670 knot2: test cloning and pushing private repos over https
Signed-off-by: dawn <dawn@tangled.org>
knot2: test cloning and pushing private repos over https
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 35848b31 knot2: let members clone private repos over https with a token
Signed-off-by: dawn <dawn@tangled.org>
knot2: let members clone private repos over https with a token
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn d2e96eb6 knot2: keep private repos out of the firehose and public listings
Signed-off-by: dawn <dawn@tangled.org>
knot2: keep private repos out of the firehose and public listings
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn be691a29 knot-ssh: make private repos look missing to outsiders and check pushes first
Signed-off-by: dawn <dawn@tangled.org>
knot-ssh: make private repos look missing to outsiders and check pushes first
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 6244b7d1 knot-acl: let an ssh key read what the account behind it can read
Signed-off-by: dawn <dawn@tangled.org>
knot-acl: let an ssh key read what the account behind it can read
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn c000c403 knot2: let only the owner and unblocked collaborators read a private repo
Signed-off-by: dawn <dawn@tangled.org>
knot2: let only the owner and unblocked collaborators read a private repo
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 46394847 knot2: pass who is asking into every read check
Signed-off-by: dawn <dawn@tangled.org>
knot2: pass who is asking into every read check
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn c710faf0 knot2: make sure only a verified token can say who is asking
Signed-off-by: dawn <dawn@tangled.org>
knot2: make sure only a verified token can say who is asking
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn e4acbfe5 knot2: don't allow forking or importing a private repo
Signed-off-by: dawn <dawn@tangled.org>
knot2: don't allow forking or importing a private repo
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
knot2: let a repo be created as private
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn b1568338 knot2: check who can read a repo before serving its tickets and comments
Signed-off-by: dawn <dawn@tangled.org>
knot2: check who can read a repo before serving its tickets and comments
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 1273c93c knot-index: hand out tickets and comments from one place only
Signed-off-by: dawn <dawn@tangled.org>
knot-index: hand out tickets and comments from one place only
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 223caa42 knot2: check who can read a repo before serving its lfs files
Signed-off-by: dawn <dawn@tangled.org>
knot2: check who can read a repo before serving its lfs files
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn d5452936 knot2: add a lint that catches repo opens skipping the read check
Signed-off-by: dawn <dawn@tangled.org>
knot2: add a lint that catches repo opens skipping the read check
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 32cb2c83 knot2: check who can push before accepting a push
Signed-off-by: dawn <dawn@tangled.org>
knot2: check who can push before accepting a push
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 68f12461 knot2: check who can read a repo before opening its git
Signed-off-by: dawn <dawn@tangled.org>
knot2: check who can read a repo before opening its git
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn 0ecc45d0 knot-index: count access changes separately from other index changes
Signed-off-by: dawn <dawn@tangled.org>
knot-index: count access changes separately from other index changes
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
dawn d715a491 knot-edge: stop calling a full h3 handshake's first request early data
Signed-off-by: dawn <dawn@tangled.org>
knot-edge: stop calling a full h3 handshake's first request early data
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
Seongmin Lee 129ad646 gitmirror-sync: only sync `refs/heads` and `refs/tags`
Signed-off-by: Seongmin Lee <git@boltless.me>
gitmirror-sync: only sync `refs/heads` and `refs/tags`
Signed-off-by: Seongmin Lee <git@boltless.me>
Seongmin Lee committed
Seongmin Lee 3bcaaffd gitmirror: fetch on staging area, don't use reflogs
Signed-off-by: Seongmin Lee <git@boltless.me>
gitmirror: fetch on staging area, don't use reflogs
Signed-off-by: Seongmin Lee <git@boltless.me>
Seongmin Lee committed
Seongmin Lee ea70963c knot-git: use absolute path for alternates
Signed-off-by: Seongmin Lee <git@boltless.me>
knot-git: use absolute path for alternates
Signed-off-by: Seongmin Lee <git@boltless.me>
Seongmin Lee committed
Seongmin Lee 816f4a54 nix,gix-pack: welcome back mmap!
Signed-off-by: Seongmin Lee <git@boltless.me>
nix,gix-pack: welcome back mmap!
Signed-off-by: Seongmin Lee <git@boltless.me>
Seongmin Lee committed
lexicons/org,web: fix codegen
Signed-off-by: Seongmin Lee <git@boltless.me>
Seongmin Lee committed
Seongmin Lee de280799 web: use `org.tangled.*` endpoints for spindle calls
Signed-off-by: Seongmin Lee <git@boltless.me>
web: use `org.tangled.*` endpoints for spindle calls
Signed-off-by: Seongmin Lee <git@boltless.me>
Seongmin Lee committed
Seongmin Lee 6b86c9c3 lexicons,web: `org.tangled.ci.*` lexicons patch
Signed-off-by: Seongmin Lee <git@boltless.me>
lexicons,web: `org.tangled.ci.*` lexicons patch
Signed-off-by: Seongmin Lee <git@boltless.me>
Seongmin Lee committed
Seongmin Lee b7beac96 knot2: notify spindle on git push event
Signed-off-by: Seongmin Lee <git@boltless.me>
knot2: notify spindle on git push event
Signed-off-by: Seongmin Lee <git@boltless.me>
Seongmin Lee committed
Seongmin Lee 5b58b848 web: show error on target branch selector against non-git repo
Signed-off-by: Seongmin Lee <git@boltless.me>
web: show error on target branch selector against non-git repo
Signed-off-by: Seongmin Lee <git@boltless.me>
Seongmin Lee committed