Cryptograss:Moods/uploads-and-embeds/todo

The things this Mood is waiting on, and who has them. Kept here rather than in chat, because a queue that lives in scrollback is a queue nobody can see.

- task: Merge pickipedia#131 — three features out of MediaWiki:Common.js into the extension
  who: jMyles
  kind: merge
  link: https://github.com/cryptograss/pickipedia/pull/131
  note: Re-verified 8 October — Common.js has not been edited since 15 September, so the byte-identical comparison in the PR still holds. CI covers it now that #126 is merged.

- task: Deploy pickipedia, then paste the replacement Common.js — in that order
  who: jMyles
  kind: deploy
  link: https://pickipedia.xyz/wiki/User:Magent/Common.js_after_131
  note: Copy the RAW text, not the rendered page — index.php?title=User:Magent/Common.js_after_131&action=raw. Deploy first; pasting before the extension has the code removes the features for however long the gap is. Between deploy and paste the Instrument form alerts twice, because both copies register. Needs interface-admin, which only jMyles has.

- task: Merge maybelle#138 — surround audio bitrate
  who: jMyles
  kind: merge
  link: https://github.com/cryptograss/maybelle-config/pull/138
  note: 5.1 was being published at the stereo rate, about 21k a channel. Mono and stereo deliberately untouched, with a test pinning that.

- task: Merge maybelle#152 — the audit stops calling our own records deletable
  who: jMyles
  kind: merge
  link: https://github.com/cryptograss/maybelle-config/pull/152
  note: Also adds the CI job that runs the audit's tests, which nothing was running. Both jobs green on the PR.

- task: One delivery-kid --rebuild deploy once #138 and #152 are in
  who: jMyles
  kind: deploy
  note: Running e4e00ed4 since 5 October, so everything through #137 is live and neither of those two is.

- task: Decide how to close the RSS SSRF — whitelist, or network egress rules
  who: jMyles
  kind: decide
  link: https://github.com/cryptograss/pickipedia/issues/102
  note: Confirmed real — LocalSettings.php sets $wgRSSUrlWhitelist to "*", so any page can make the server fetch any URL. The feed hosts are not a fixed list in code; podcast_config.py reads them off {{PodcastFeed}} templates in Category:Podcasts, so a static whitelist breaks the Firehose whenever anyone adds a podcast. The alternative is denying the wiki container egress to link-local and private ranges. magent's view: the second, but it is a judgement call about how much friction to accept, so it is yours.

- task: Answer the four questions about the two uploads that vanished on 24 September
  who: jMyles
  kind: reply
  link: https://github.com/cryptograss/maybelle-config/issues/139
  note: The exact error text would settle it. Best guess is Caddy dropping POST bodies over HTTP/3, which is our own #79 from April, still unresolved.

- task: Close the dead PRs in maybelle-config#132
  who: jMyles
  kind: review
  link: https://github.com/cryptograss/maybelle-config/issues/132
  note: #69, #74 and #75 would restore the Coconut code deleted in #129. #86 now carries its own reasoning for closing.

- task: Cancel the Coconut account and drop its key from the vault
  who: jMyles
  kind: admin
  note: The only item still costing money. The code has been gone since #129.

- task: Move the zine styling with its stylesheet, emptying Common.js for good
  who: magent
  kind: code
  note: The last thing left in that page. Held back from #131 on purpose: it is bound to classes in MediaWiki:Common.css, and moving the script alone would split one feature across two homes.

- task: Delete the phantom orphan-draft cleanup promised by delivery-kid's startup docstring
  who: magent
  kind: code
  note: main.py says it runs an initial cleanup and a periodic task. Neither exists in the code. One-line fix, but it sent me looking for a scheduler that was never there.

- task: Test whether Opus audio plays on Safari
  who: magent
  kind: test
  note: Never tested, and it applies to everything we have ever published, not just surround. If a video on the wiki is silent on an iPhone, this is the first thing to check.

- task: Merge pickipedia#126 — CI for that repository
  who: jMyles
  kind: merge
  link: https://github.com/cryptograss/pickipedia/pull/126
  done: 2026-10-08

- task: Merge pickipedia#133 — stop a podcast feed deciding what the import bot writes
  who: jMyles
  kind: merge
  link: https://github.com/cryptograss/pickipedia/pull/133
  done: 2026-10-08
  note: Closed #101. Feed titles and descriptions were interpolated into template calls raw.