spindle · core · Tangled

Monorepo for Tangled tangled.org

core spindle

22 folders · 100 files

ptr.pet · spindle: warn when a private repo's builds go to the shared nix cache · 1d ago

spindle: cleanup before refactor

spindle/{artifactstore,engine}: stop deleting a workflow's log when the log directory is also the archive

docs,nix/modules,spindle/{config,xrpc}: turn on cors for the spindle by default

spindle,xrpc/serviceauth: only show a private repo's pipelines and logs to readers with a knot token

spindle: warn when a private repo's builds go to the shared nix cache

spindle: warn when a private repo's builds go to the shared nix cache

spindle: sign every knot read with spindle's own key

spindle: sign the clone inside the workflow with a token from the spindle

spindle,xrpc/serviceauth: share test setup instead of copying it per test

spindle: warn when a private repo's builds go to the shared nix cache

spindle: warn when a private repo's builds go to the shared nix cache

spindle: run pipelines from knot2's notifyEvent

spindle/{quota,nixcache,engine}: evict nix paths and `cache:` entries in one least recently used order

spindle/mill: fail a workflow right away when no executor has its labels

spindle: serve a did:web document behind a signing key the operator brings

spindle/{config,engine,nixcache,pemkey}: give each run a token for its repo's attic cache

spindle/xrpc: list and read pipelines that a cron schedule started

spindle/{quota,nixcache,engine}: evict nix paths and `cache:` entries in one least recently used order

spindle: refuse secret keys that aren't identifiers

spindle: add generic CI cache

spindle,xrpc/serviceauth: share test setup instead of copying it per test

spindle,xrpc/serviceauth: only show a private repo's pipelines and logs to readers with a knot token

account_job_test.go

jetstream,appview,deliberi: read events with our own client and drop bluesky-social/jetstream

admission_pause.go

docs,spindle: send nothing for a paused owner's repos, webhooks included

allowlist_test.go

spindle: take admins, admission and invite codes the way knot2 does

backfill_later_test.go

jetstream,appview,deliberi: read events with our own client and drop bluesky-social/jetstream

backfill_marks_test.go

spindle,xrpc/serviceauth: share test setup instead of copying it per test

backfill_skip_test.go

spindle,xrpc/serviceauth: share test setup instead of copying it per test

banned_actor_test.go

spindle: run nothing for a banned pusher or pull author

spindle: legacy casbin rekey via tap resync nudge

collaborator_marks_test.go

jetstream,appview,deliberi: read events with our own client and drop bluesky-social/jetstream

collaborator_sync_test.go

spindle: write the collaborator row before granting its access

collaborators.go

spindle: write collaborators the same way from a full sync and from single records

debug_keys_test.go

spindle: check debug ssh keys against the people who can push

gitclient,sitesd,spindle: send every knot request through one client

declare_repo_test.go

spindle,xrpc/serviceauth: only show a private repo's pipelines and logs to readers with a knot token

engine_microvm_linux.go

spindle: check debug ssh keys against the people who can push

engine_microvm_other_test.go

spindle: start without the microvm engine where it can't run

engine_microvm_other.go

spindle: check debug ssh keys against the people who can push

spindle: run its tests in parallel

spindle: make the tests wait for an event to be applied, not just read

filter_workflows_test.go

workflow,knotserver,spindle: keep pipeline specs in workflow instead of the sh.tangled types

http_server_test.go

spindle: time out slow http clients

hydrant_pending_test.go

spindle: catch up on what jetstream missed

hydrant_test.go

spindle: serve the ci routes under org.tangled only

jetstream,spindle: drop duplicated code

identity_route_test.go

spindle: sign every knot read with spindle's own key

ingest_shards_test.go

jetstream,appview,deliberi: read events with our own client and drop bluesky-social/jetstream

ingest_shards.go

jetstream,appview,deliberi: read events with our own client and drop bluesky-social/jetstream

ingester_enrollment_test.go

spindle,xrpc/serviceauth: share test setup instead of copying it per test

ingester_test.go

jetstream,appview,deliberi: read events with our own client and drop bluesky-social/jetstream

jetstream,appview,deliberi: read events with our own client and drop bluesky-social/jetstream

instance_lock_other.go

spindle: refuse to start a second spindle on the same database

instance_lock_test.go

spindle: refuse to start a second spindle on the same database

instance_lock_unix.go

spindle: refuse to start a second spindle on the same database

job_workers_test.go

spindle: create blocked pipelines from event stream

load_pipeline_test.go

gitutil,spindle: sign git's own fetches from knots too

spindle: run its tests in parallel

spindle: improve the logging situation

*: swap links to new docs

nix_cache_grant_test.go

spindle/{config,engine,nixcache,pemkey}: give each run a token for its repo's attic cache

notify_admission_test.go

spindle: use a fixed set of repo locks and never hold one during a knot request

notify_event_test.go

spindle: trigger manual pipelines via `org.tangled.event.notifyEvent`

notify_event.go

gitutil,spindle: sign git's own fetches from knots too

notify_shutdown_test.go

spindle: end a push's git work when the spindle shuts down

notify_slots_test.go

spindle,xrpc/serviceauth: share test setup instead of copying it per test

notify_status_test.go

spindle,xrpc/serviceauth: share test setup instead of copying it per test

pause_atomic_test.go

spindle: create blocked pipelines from event stream

spindle: pause the repos of an owner taken off the allow-list

pause_webhook_test.go

spindle,xrpc/serviceauth: share test setup instead of copying it per test

permissions_test.go

jetstream,appview,deliberi: read events with our own client and drop bluesky-social/jetstream

pull_backlog_test.go

docs,nix,spindle: share the job pool and notify slots fairly across knots

pull_pipelines_test.go

spindle: make the tests wait for an event to be applied, not just read

pull_trust_test.go

spindle/{engine,engines/microvm}: give untrusted runs no nix cache upload

pull_versions_test.go

spindle,xrpc/serviceauth: share test setup instead of copying it per test

spindle: make the tests wait for an event to be applied, not just read

spindle: create blocked pipelines from event stream

record_marks_test.go

docs,spindle: send nothing for a paused owner's repos, webhooks included

repo_job_backoff_test.go

docs,spindle: send nothing for a paused owner's repos, webhooks included

repo_job_limits_test.go

spindle,xrpc/serviceauth: share test setup instead of copying it per test

repo_jobs_test.go

spindle,xrpc/serviceauth: share test setup instead of copying it per test

docs,nix,spindle: share the job pool and notify slots fairly across knots

repo_locks_cleanup_test.go

spindle,xrpc/serviceauth: share test setup instead of copying it per test

repo_locks_test.go

spindle,xrpc/serviceauth: share test setup instead of copying it per test

docs,spindle: send nothing for a paused owner's repos, webhooks included

repo_retry_cap_test.go

spindle,xrpc/serviceauth: share test setup instead of copying it per test

repo_retry_test.go

spindle: ingest org.tangled records from jetstream and drop the knot1 feeds

spindle: tick the repo retry loop every 50 ms in tests instead of 10 s

docs,spindle: keep a repo's secrets when its manifest goes missing unless the knot says the repo was deleted

spindle,xrpc/serviceauth: only show a private repo's pipelines and logs to readers with a knot token

retry_approval_test.go

spindle: refuse to retry a blocked pipeline that was cancelled before anyone approved it

run_env_test.go

workflow,knotserver,spindle: keep pipeline specs in workflow instead of the sh.tangled types

run_pipeline_test.go

gitutil,spindle: sign git's own fetches from knots too

schedule_test.go

spindle,xrpc/serviceauth: share test setup instead of copying it per test

gitclient,spindle: use git smart-http v2 protocol over xrpc

spindle: legacy secret migration via tap resync nudge

spindle: listen before reading knots so they can fetch our did doc

spindle: warn when a private repo's builds go to the shared nix cache

source_repo_test.go

spindle: serve the ci routes under org.tangled only

startup_migrations_test.go

spindle: backfill with an embedded hydrant instead of tap

startup_migrations.go

spindle: backfill with an embedded hydrant instead of tap

torture_admission_test.go

spindle/{db,quota}: index a repo's attic cache objects with their quota

torture_engine_test.go

workflow,knotserver,spindle: keep pipeline specs in workflow instead of the sh.tangled types

torture_ingest_test.go

jetstream,appview,deliberi: read events with our own client and drop bluesky-social/jetstream

torture_notify_abuse_test.go

spindle: trim the torture harness

torture_notify_test.go

spindle: trim the torture harness

torture_pool_test.go

spindle: trim the torture harness

torture_queue_test.go

spindle: create blocked pipelines from event stream

torture_soak_test.go

jetstream,appview,deliberi: read events with our own client and drop bluesky-social/jetstream

torture_test.go

spindle: trim the torture harness

torture_world_test.go

gitclient,spindle: use git smart-http v2 protocol over xrpc

spindle: trim the torture harness

wipe_claim_test.go

docs,spindle: keep a repo's secrets when its manifest goes missing unless the knot says the repo was deleted

cilogs,spindle: follow renamed lexicons

jetstream,spindle: drop duplicated code

spindle,xrpc/serviceauth: share test setup instead of copying it per test

workflow_defs_test.go

spindle: read workflow definitions from the knot instead of fetching the repo

workflow_defs.go

spindle: serve the ci routes under org.tangled only

workflow_limits_test.go

gitutil,spindle: sign git's own fetches from knots too

workflow_limits.go

spindle: refuse a workflow dir with too many files

workflow_read_test.go

gitclient,spindle: use git smart-http v2 protocol over xrpc

workflow_read.go

gitclient,spindle: use git smart-http v2 protocol over xrpc