Cryptograss:Moods/uploads-and-embeds/todo: Difference between revisions
From PickiPedia: A knowledge base of bluegrass, old time psychedelic jams, and other public domain music
Jump to navigationJump to search
Upload-only key for magenta; new vault secret |
m Merged, says GitHub: https://github.com/cryptograss/maybelle-config/pull/179 |
||
| Line 7: | Line 7: | ||
link: https://github.com/cryptograss/maybelle-config/pull/179 | link: https://github.com/cryptograss/maybelle-config/pull/179 | ||
note: 'Found in the auth audit: any upload token (every signed-in wiki account has one in page source) could unpin any release. Pre-existing; worth deploying ahead of #178.' | note: 'Found in the auth audit: any upload token (every signed-in wiki account has one in page source) could unpin any release. Pre-existing; worth deploying ahead of #178.' | ||
done: true | |||
- task: Add delivery_kid_upload_key to the vault, merge maybelle-config#178 and memory-lane#153, deploy delivery-kid and maybelle | - task: Add delivery_kid_upload_key to the vault, merge maybelle-config#178 and memory-lane#153, deploy delivery-kid and maybelle | ||
who: jMyles | who: jMyles | ||
Revision as of 15:52, 10 October 2026
What this Mood is waiting on, and who has it.
- ☐Add delivery_kid_upload_key to the vault, merge maybelle-config#178 and memory-lane#153, deploy delivery-kid and maybelleVideos from a Mood to delivery-kid. The new secret is an upload-only key (openssl rand -hex 32): it signs upload tokens and nothing else, and magenta gets it instead of the main API key. The feature stays off until the secret, both PRs and both deploys are in. Then try a short clip.
- ☐Blank MediaWiki:Common.js now; blank MediaWiki:Common.css once pickipedia#142 is deployedCommon.js: safe to blank today (#140 is live). Common.css: still carries listening-list, record-box and podcast-art styles until #142 deploys; then blank it too.
- ☐Decide: unpin all 11 Coconut remnants?Eight are yours, three are Sky's. Unpinning deletes them from delivery-kid for good. Say yes and magent writes the one-off cleanup.
- ☐Clear the three superseded uploads from staging (about 800 MB)Station Inn (6072d82c) and Seven Bridges Road (80d575cc) are published byte for byte; the first melodica attempt (50881aeb) was published from another copy.
- ☐Unpin the eleven Coconut remnantsSky checked: nothing to keep. The list page is the record.
- ☐Decide how to close the RSS SSRF: whitelist, or network egress rules$wgRSSUrlWhitelist is '*'. The feed hosts come from the wiki, so a static whitelist taxes adding podcasts; denying the wiki container egress to private ranges does not. magent leans to the second.
- ☐
- ☐Close the dead PRs in maybelle-config#132#69, #74 and #75 would restore the deleted Coconut code; #86 has its reasoning posted.
- ☐Cancel the Coconut account and drop its key from the vaultThe only item still costing money.
- ☐Upload to delivery-kid from magenta, with progress visible thereStep 1 in review: memory-lane#153 + maybelle-config#178, upload authority only (Justin, 10 Oct). Finalizing is not coming to magenta; it stays the wiki's finalize-release right. Next: transcode/pin progress in the Mood; Android share target.
Done (26)
- ☑Merge maybelle-config#179 and deploy delivery-kid: pin/unpin by CID need finalize authFound in the auth audit: any upload token (every signed-in wiki account has one in page source) could unpin any release. Pre-existing; worth deploying ahead of #178.
- ☑Merge pickipedia#142: the rest of Common.css into the repoThen both Common pages can be blank.
- ☑Merge pickipedia#141: video embeds stop floating (the one-letter-wide heading)One CSS rule; deploy brings it.
- ☑Merge maybelle#177: delivery-kid startup comment says what it doesComment only; no deploy needed.
- ☑Decide: Nine Pound Hammer (Pushups) is released twiceNot a duplicate: two different videos of the exercise (June, 71 MB, block 20839779; October, 472 MB, block 24835321). Nothing to prune.
- ☑Merge pickipedia#140: zine pages arrive styled (no flash), then paste Common.js and Common.cssReworked 10 Oct: the server sends the page already styled; before/after screenshots linked in the PR. Paste order no longer matters. After deploy, whenever convenient: MediaWiki:Common.js from User:Magent/Common.js_after_zine and MediaWiki:Common.css from User:Magent/Common.css_after_zine (raw).
- ☑Merge pickipedia#139: video player on Blue Railroad Release pagesNine Pound Hammer (Pushups) shows no player because its file_type is the bare word "video". Jenkins deploys it after merge. (Retargeted to production, where PRs go.)
- ☑Merge maybelle#176: stop tracking the .pyc files #175 committedHousekeeping only; nothing to deploy.
- ☑Paste the replacement MediaWiki:Common.jsReady: the #131 modules are live. Copy the raw text (md5 6bb8dbdd207b85b09e86bbb76ebfe718) over MediaWiki:Common.js. Needs interface-admin. Until then the Instrument form alerts twice.
- ☑Publish the remaining stuck recordings, one at a time, tab open until it says pinnedAll five published 9 Oct, each with its Release page: White Rabbit Intro, Bundy, Spotify Wrapped, Nine Pound Hammer (Pushups) — the 472 MB Blue Railroad clip — and barber-pole-on-moone.
- ☑Rescue the MOOS hallway water jam draftNeeded no rescue: SkymanJenkins finalized it at 00:28Z on 9 Oct, and it plays. The 'no draft.json' reading was wrong.
- ☑Make finalize survive the tab closing, and run one long encode at a timePR open (9 Oct): finalize is a job of delivery-kid's own, one at a time, queued ones told so; a restart marks stranded drafts failed; and delivery-kid now writes the CID to ReleaseDraft itself, so a pin nobody watched still gets its Release page (the Sonic Offerings gap). Merge and deploy are on #magenta-interface's list. Until it's deployed: tab open while a video finalizes.
- ☑
- ☑
- ☑Test whether Opus audio plays on SafariIt does: Sky played MOOS hallway water jam (AV1 + Opus, checked with ffprobe) in Safari with sound.
- ☑
- ☑
- ☑Delivery-kid --rebuild deploy for #138 and #170Running 6c2d3486.
- ☑Unstick the wiki's deploy (pickipedia#135)#134's todo tag failed Jenkins' check-classes gate, so nothing deployed after 5 October. The gate now also runs in GitHub CI.
- ☑
- ☑Publish learning terrapin outside Denver venueFailed six times under Coconut in June.
- ☑
- ☑Check the draft_type of the stuck draftsAll content; the old drafts load fine.
- ☑Check the Coconut remnants for anything worth keeping
- ☑Merge pickipedia#131, #126, #133, #134 and maybelle#152
- ☑Fix the heading that renders one letter per line on User:JMyles/The Algorithm and The MuseLive today, with the zine CSS. Looks like the video player squeezing the grid column.