Cryptograss:Moods/uploads-and-embeds/todo: Difference between revisions

From PickiPedia: A knowledge base of bluegrass, old time psychedelic jams, and other public domain music
Jump to navigationJump to search
Magent (talk | contribs)
#132 dead PRs closed
Magent (talk | contribs)
Magenta video upload deployed; first real test
Line 2: Line 2:


<todo>
<todo>
- task: 'First real video from a Mood: send a short clip from the composer and check its ReleaseDraft page'
  who: SkymanJenkins
  kind: test
  note: Everything is deployed (delivery-kid 10707de0; magenta shows video in the composer). Report back what the bar, PickiPedia's permission page and the 🎬 line did.
- task: 'Merge maybelle-config#179 and deploy delivery-kid: pin/unpin by CID need finalize auth'
- task: 'Merge maybelle-config#179 and deploy delivery-kid: pin/unpin by CID need finalize auth'
   who: jMyles
   who: jMyles
Line 7: Line 11:
   link: https://github.com/cryptograss/maybelle-config/pull/179
   link: https://github.com/cryptograss/maybelle-config/pull/179
   note: 'Found in the auth audit: any upload token (every signed-in wiki account has one in page source) could unpin any release. Pre-existing; worth deploying ahead of #178.'
   note: 'Found in the auth audit: any upload token (every signed-in wiki account has one in page source) could unpin any release. Pre-existing; worth deploying ahead of #178.'
   done: true
   done: '2026-10-10, live: delivery-kid 10707de0, magenta offers videos'
- task: Add delivery_kid_upload_key to the vault, merge maybelle-config#178 and memory-lane#153, deploy delivery-kid and maybelle
- task: Add delivery_kid_upload_key to the vault, merge maybelle-config#178 and memory-lane#153, deploy delivery-kid and maybelle
   who: jMyles
   who: jMyles
Line 13: Line 17:
   link: https://github.com/cryptograss/memory-lane/pull/153
   link: https://github.com/cryptograss/memory-lane/pull/153
   note: 'Videos from a Mood to delivery-kid. The new secret is an upload-only key (openssl rand -hex 32): it signs upload tokens and nothing else, and magenta gets it instead of the main API key. The feature stays off until the secret, both PRs and both deploys are in. Then try a short clip.'
   note: 'Videos from a Mood to delivery-kid. The new secret is an upload-only key (openssl rand -hex 32): it signs upload tokens and nothing else, and magenta gets it instead of the main API key. The feature stays off until the secret, both PRs and both deploys are in. Then try a short clip.'
   done: true
   done: '2026-10-10, live: delivery-kid 10707de0, magenta offers videos'
- task: 'Merge pickipedia#142: the rest of Common.css into the repo'
- task: 'Merge pickipedia#142: the rest of Common.css into the repo'
   who: jMyles
   who: jMyles

Revision as of 16:38, 10 October 2026

What this Mood is waiting on, and who has it.

  • ☐
    First real video from a Mood: send a short clip from the composer and check its ReleaseDraft page
    test · SkymanJenkins
    Everything is deployed (delivery-kid 10707de0; magenta shows video in the composer). Report back what the bar, PickiPedia's permission page and the 🎬 line did.
  • ☐
    Blank MediaWiki:Common.js now; blank MediaWiki:Common.css once pickipedia#142 is deployed
    edit · jMyles
    Common.js: safe to blank today (#140 is live). Common.css: still carries listening-list, record-box and podcast-art styles until #142 deploys; then blank it too.
  • ☐
    Decide: unpin all 11 Coconut remnants?
    decision · jMyles
    Eight are yours, three are Sky's. Unpinning deletes them from delivery-kid for good. Say yes and magent writes the one-off cleanup.
  • ☐
    Clear the three superseded uploads from staging (about 800 MB)
    decide · jMyles
    Station Inn (6072d82c) and Seven Bridges Road (80d575cc) are published byte for byte; the first melodica attempt (50881aeb) was published from another copy.
  • ☐
    Unpin the eleven Coconut remnants
    code · magent
    Sky checked: nothing to keep. The list page is the record.
  • ☐
    Decide how to close the RSS SSRF: whitelist, or network egress rules
    decide · jMyles
    $wgRSSUrlWhitelist is '*'. The feed hosts come from the wiki, so a static whitelist taxes adding podcasts; denying the wiki container egress to private ranges does not. magent leans to the second.
  • ☐
  • ☐
    Cancel the Coconut account and drop its key from the vault
    admin · jMyles
    The only item still costing money.
  • ☐
    Upload to delivery-kid from magenta, with progress visible there
    code · magent
    Step 1 in review: memory-lane#153 + maybelle-config#178, upload authority only (Justin, 10 Oct). Finalizing is not coming to magenta; it stays the wiki's finalize-release right. Next: transcode/pin progress in the Mood; Android share target.
Done (28)