Cryptograss:Moods/uploads-and-embeds/todo: Difference between revisions
From PickiPedia: A knowledge base of bluegrass, old time psychedelic jams, and other public domain music
Jump to navigationJump to search
m Merged, says GitHub: https://github.com/cryptograss/memory-lane/pull/158 |
OAuth 401: #184 |
||
| Line 2: | Line 2: | ||
<todo> | <todo> | ||
- task: 'Fix PickiPedia OAuth (401 on every sign-in and → PickiPedia): vault pickipedia_oauth_secret_key = the previous pickipedia_secret_key, merge maybelle-config#184, deploy the wiki' | |||
who: jMyles | |||
kind: deploy | |||
link: https://github.com/cryptograss/maybelle-config/pull/184 | |||
note: 'Today''s $wgSecretKey rotation re-keyed the HMACs of every OAuth consumer secret. Also check delivery-kid: if delivery_kid_api_key rotated, redeploy delivery-kid so the wiki''s tokens match it.' | |||
- task: 'Merge memory-lane#158 and deploy maybelle with --rebuild: iPhone photos (HEIC) in Moods' | - task: 'Merge memory-lane#158 and deploy maybelle with --rebuild: iPhone photos (HEIC) in Moods' | ||
who: jMyles | who: jMyles | ||
Revision as of 21:10, 10 October 2026
What this Mood is waiting on, and who has it.
- ☐Fix PickiPedia OAuth (401 on every sign-in and → PickiPedia): vault pickipedia_oauth_secret_key = the previous pickipedia_secret_key, merge maybelle-config#184, deploy the wikiToday's $wgSecretKey rotation re-keyed the HMACs of every OAuth consumer secret. Also check delivery-kid: if delivery_kid_api_key rotated, redeploy delivery-kid so the wiki's tokens match it.
- ☐First real video from a Mood: send a short clip from the composer and check its ReleaseDraft pageEverything is deployed (delivery-kid 10707de0; magenta shows video in the composer). Report back what the bar, PickiPedia's permission page and the 🎬 line did.
- ☐Blank MediaWiki:Common.js now; blank MediaWiki:Common.css once pickipedia#142 is deployedCommon.js: safe to blank today (#140 is live). Common.css: still carries listening-list, record-box and podcast-art styles until #142 deploys; then blank it too.
- ☐Decide: unpin all 11 Coconut remnants?Eight are yours, three are Sky's. Unpinning deletes them from delivery-kid for good. Say yes and magent writes the one-off cleanup.
- ☐Clear the three superseded uploads from staging (about 800 MB)Once pickipedia#143 is deployed: on each draft, open "Abandon this draft" and press "Abandon — delete files". Station Inn (6072d82c), Seven Bridges Road (80d575cc), Melodica overdub (50881aeb).
- ☐Unpin the eleven Coconut remnantsSky checked: nothing to keep. The list page is the record.
- ☐Decide how to close the RSS SSRF: whitelist, or network egress rules$wgRSSUrlWhitelist is '*'. The feed hosts come from the wiki, so a static whitelist taxes adding podcasts; denying the wiki container egress to private ranges does not. magent leans to the second.
- ☐
- ☐Cancel the Coconut account and drop its key from the vaultThe only item still costing money.
- ☐Upload to delivery-kid from magenta, with progress visible thereStep 1 in review: memory-lane#153 + maybelle-config#178, upload authority only (Justin, 10 Oct). Finalizing is not coming to magenta; it stays the wiki's finalize-release right. Next: transcode/pin progress in the Mood; Android share target.
- ☐Strip GPS and other metadata from JPEG/PNG photos sent into Moods, as HEIC now isFollow-up to memory-lane#158: phone JPEGs are stored with their EXIF, position included, and Moods are public.
Done (31)
- ☑Merge memory-lane#158 and deploy maybelle with --rebuild: iPhone photos (HEIC) in MoodsAdds Pillow + pillow-heif, so the image needs rebuilding. Converted photos lose their GPS metadata on the way in.
- ☑Merge pickipedia#143 and maybelle-config#180, deploy delivery-kid"Abandon — delete files" on ReleaseDraft pages never deleted anything (it waited on a cleanup script removed in #84); now it does, and delivery-kid refuses mid-finalize.
- ☑Merge memory-lane#156 and deploy maybelle: the video picker accepts by extensionSky's Mac greyed out videos in the picker with video/* alone. Until then, dragging a video onto the message box works.
- ☑Merge maybelle-config#179 and deploy delivery-kid: pin/unpin by CID need finalize authFound in the auth audit: any upload token (every signed-in wiki account has one in page source) could unpin any release. Pre-existing; worth deploying ahead of #178.
- ☑Add delivery_kid_upload_key to the vault, merge maybelle-config#178 and memory-lane#153, deploy delivery-kid and maybelleVideos from a Mood to delivery-kid. The new secret is an upload-only key (openssl rand -hex 32): it signs upload tokens and nothing else, and magenta gets it instead of the main API key. The feature stays off until the secret, both PRs and both deploys are in. Then try a short clip.
- ☑Merge pickipedia#142: the rest of Common.css into the repoThen both Common pages can be blank.
- ☑Merge pickipedia#141: video embeds stop floating (the one-letter-wide heading)One CSS rule; deploy brings it.
- ☑Merge maybelle#177: delivery-kid startup comment says what it doesComment only; no deploy needed.
- ☑Decide: Nine Pound Hammer (Pushups) is released twiceNot a duplicate: two different videos of the exercise (June, 71 MB, block 20839779; October, 472 MB, block 24835321). Nothing to prune.
- ☑Merge pickipedia#140: zine pages arrive styled (no flash), then paste Common.js and Common.cssReworked 10 Oct: the server sends the page already styled; before/after screenshots linked in the PR. Paste order no longer matters. After deploy, whenever convenient: MediaWiki:Common.js from User:Magent/Common.js_after_zine and MediaWiki:Common.css from User:Magent/Common.css_after_zine (raw).
- ☑Merge pickipedia#139: video player on Blue Railroad Release pagesNine Pound Hammer (Pushups) shows no player because its file_type is the bare word "video". Jenkins deploys it after merge. (Retargeted to production, where PRs go.)
- ☑Merge maybelle#176: stop tracking the .pyc files #175 committedHousekeeping only; nothing to deploy.
- ☑Paste the replacement MediaWiki:Common.jsReady: the #131 modules are live. Copy the raw text (md5 6bb8dbdd207b85b09e86bbb76ebfe718) over MediaWiki:Common.js. Needs interface-admin. Until then the Instrument form alerts twice.
- ☑Publish the remaining stuck recordings, one at a time, tab open until it says pinnedAll five published 9 Oct, each with its Release page: White Rabbit Intro, Bundy, Spotify Wrapped, Nine Pound Hammer (Pushups) — the 472 MB Blue Railroad clip — and barber-pole-on-moone.
- ☑Rescue the MOOS hallway water jam draftNeeded no rescue: SkymanJenkins finalized it at 00:28Z on 9 Oct, and it plays. The 'no draft.json' reading was wrong.
- ☑Make finalize survive the tab closing, and run one long encode at a timePR open (9 Oct): finalize is a job of delivery-kid's own, one at a time, queued ones told so; a restart marks stranded drafts failed; and delivery-kid now writes the CID to ReleaseDraft itself, so a pin nobody watched still gets its Release page (the Sonic Offerings gap). Merge and deploy are on #magenta-interface's list. Until it's deployed: tab open while a video finalizes.
- ☑Close the dead PRs in maybelle-config#132#69, #74 and #75 would restore the deleted Coconut code; #86 has its reasoning posted.
- ☑
- ☑
- ☑Test whether Opus audio plays on SafariIt does: Sky played MOOS hallway water jam (AV1 + Opus, checked with ffprobe) in Safari with sound.
- ☑
- ☑
- ☑Delivery-kid --rebuild deploy for #138 and #170Running 6c2d3486.
- ☑Unstick the wiki's deploy (pickipedia#135)#134's todo tag failed Jenkins' check-classes gate, so nothing deployed after 5 October. The gate now also runs in GitHub CI.
- ☑
- ☑Publish learning terrapin outside Denver venueFailed six times under Coconut in June.
- ☑
- ☑Check the draft_type of the stuck draftsAll content; the old drafts load fine.
- ☑Check the Coconut remnants for anything worth keeping
- ☑Merge pickipedia#131, #126, #133, #134 and maybelle#152
- ☑Fix the heading that renders one letter per line on User:JMyles/The Algorithm and The MuseLive today, with the zine CSS. Looks like the video player squeezing the grid column.