core by tangled.org · Tangled

Monorepo for Tangled tangled.org

Commits on priv-data

spindle: warn when a private repo's builds go to the shared nix

committed 1d ago

spindle,xrpc/serviceauth: only show a private repo's pipelines and logs to readers with a knot

committed 1d ago

spindle: sign the clone inside the workflow with a token from the

committed 1d ago

spindle/mill: share the code that asks the mill and waits for its

committed 1d ago

web: tell a private repo's spindle that the owner picked

committed 1d ago

api,lexicons,spindle: let a private repo's owner declare it to the

committed 1d ago

api,cmd/cborgen: regenerate for the private repo

committed 1d ago

spindle: listen before reading knots so they can fetch our did

committed 1d ago

gitutil,spindle: sign git's own fetches from knots

committed 1d ago

spindle: sign every knot read with spindle's own

committed 1d ago

gitclient,sitesd,spindle: send every knot request through one

committed 1d ago

knot2/knot-xrpc: give a repo's spindle read access to its

committed 1d ago

knotmirror: send knot notices to every instance of a

committed 1d ago

knotmirror: only proxy the reads each service is configured

committed 1d ago

bobbin: sync private repos from the mirror's notices instead of polling every

committed 1d ago

knot2: resend a private repo's deletion until its indexers get

committed 1d ago

localinfra/pc: sync private repos through the

committed 1d ago

bobbin: only take a private repo from the knot it lives

committed 1d ago

bobbin: sync private repos through the mirror and resync as soon as a knot reports a

committed 1d ago

knotmirror: proxy private repo reads and knot notices for our

committed 1d ago

knotmirror: don't reuse service token ids after a

committed 1d ago

knot-config: allow a lease ttl on default indexer

committed 1d ago

knot2: retry lease notices on the next sweep when an indexer is

committed 1d ago

lexicons,knot2: tell an indexer when it can start reading a private

committed 1d ago

knot2: model the indexer ttl in the private

committed 1d ago

knot2: allow indexers per entry and block them per

committed 1d ago

knot2: store a lease's renewal and bound its ttl per

committed 1d ago

lexicons,knot2: add indexer allow and blocks

committed 1d ago

knot2: a ban takes the account off every repo's

committed 1d ago

knot2: decide who can access a private repo in one

committed 1d ago

knot2,lexicons: call syncers

committed 1d ago

knot2: answer a listed syncer without a lease like a

committed 1d ago

knot2: keep private lfs objects out of shared

committed 1d ago

knot2: test that forks, patches, lfs, deletes and revocations keep private repos

committed 1d ago

knot2: check every non-reader on every read route in private sim

committed 1d ago

knot2: let a repo's readers mint read tokens for its

committed 1d ago

lexicons,knot2: publish a private repo when its owner sets the manifest

committed 1d ago

knot2: tell a syncer right away when a repo takes it off its

committed 1d ago

lexicons,knot2: lease private repos per syncer and stop git use from renewing

committed 1d ago

knot2: serve a syncer only the private repos that list

committed 1d ago

lexicons,knot2: give each private repo its own syncer list that only its owner

committed 1d ago

knot-index: config at construction and claim_ready from the key

committed 1d ago

knot-cobs: a private registration is collaborators-only by

committed 1d ago

knot-sim: kill the lease writer mid-save and check what boots

committed 1d ago

knot-sim: test that strangers never see private repos across

committed 1d ago

knot-sim: run private repos, leases and syncers through the

committed 1d ago

knot-xrpc: test every repo route for private repos looking

committed 1d ago

knot-xrpc: list every route and lint for unlisted routes and internal

committed 1d ago

knot-sim: test that a full h3 handshake's first request isn't early

committed 1d ago

knot-sim: test private repos over h3, with and without

committed 1d ago

knot-sim: share test helpers between test

committed 1d ago

knot-ssh: test that private repos look missing over ssh in every address

committed 1d ago

knot-ssh: share test helpers between test

committed 1d ago

knot2: test that an indigo client never sees a private repo on the

committed 1d ago

knot-xrpc: test that listRepos pages never give a private repo a

committed 1d ago

knot-xrpc: test that private repos never reach the firehose or the sync

committed 1d ago

knot-xrpc: check lapse notices against a model over random lease

committed 1d ago

knot-xrpc: test lapse notices over time and restarts without

committed 1d ago

knot-xrpc: test that a syncer loses a private repo when its lease runs

committed 1d ago

knot-xrpc: share answer and fixture helpers between test

committed 1d ago