archipelago
559883b007
Merge commit '1971aeb3' into work/post-190-onchain-stream
2026-10-06 06:43:40 -04:00
archipelago
2e761666d5
Stream confirmed on-chain file deliveries into the owned cache
2026-10-06 06:43:19 -04:00
archipelago
1971aeb3e3
Fail closed on corrupt peer records before content authentication
2026-10-06 06:40:59 -04:00
archipelago
b8e512fed6
Keep authentication failures refundable and bound inline peer previews
2026-10-06 06:27:06 -04:00
archipelago
8ffbf5ff6e
Check on-chain item visibility and reduce test debug-data pressure
2026-10-06 06:17:49 -04:00
archipelago
744923f7d3
Merge branch 'work/post-190-session-key' into work/post-190-peer-content-auth
2026-10-06 06:09:26 -04:00
archipelago
140f4d91cd
Correct cached purchase test case tuple after API update
2026-10-06 06:09:25 -04:00
archipelago
a9edcd6b3e
Verify scoped peer identity proofs before restricted content access
2026-10-06 06:07:55 -04:00
archipelago
6fba95fe5a
Exercise existing purchase regressions through streamed Files copies
2026-10-06 06:03:20 -04:00
archipelago
9ce04627dd
Stream purchased files into durable cache and avoid duplicate concurrent payments
2026-10-06 05:48:05 -04:00
archipelago
df7677d23f
Keep payment assertion outside borrowed regression future
2026-10-06 05:39:24 -04:00
archipelago
2fee0339cb
Prepare large paid files on disk and stream peer responses in bounded chunks
2026-10-06 05:31:19 -04:00
archipelago
051dc7e3df
Generate paid previews server-side and enforce sharing boundaries
2026-10-06 05:18:53 -04:00
yaya
2fad10c8de
Show DATUM login credentials and document complete app launch requirements
2026-10-06 08:13:20 +01:00
yaya
3fc37642cd
fix(apps): preserve manifest presentation during installation
2026-10-06 08:13:20 +01:00
archipelago
57923b0a5f
fix: synchronize doctor through host namespace before reconciliation
2026-10-06 02:42:50 -04:00
archipelago
a2e6138279
Keep permission regression probe independent of private checkout paths
2026-10-06 01:34:57 -04:00
archipelago
aa10bd1247
Fail closed when persistent session signing material is unavailable
2026-10-06 01:30:04 -04:00
archipelago
7e11f78eb4
Recover stale authenticated CSRF cookies and distinguish interface fetch failures
2026-10-06 01:08:31 -04:00
archipelago
2fa82e4506
Keep peer file downloads and previews on mandatory FIPS transport
2026-10-06 00:53:34 -04:00
archipelago
e54f83df8f
Add signed node-scoped demo catalogs and retained app media sessions
2026-10-06 00:53:34 -04:00
archipelago
131c39cf74
Restrict orphan container cleanup to its owning user and Podman storage
2026-10-06 00:52:40 -04:00
archipelago
104e0601ff
Use the existing futures-util dependency for media streaming
2026-10-05 23:57:12 -04:00
archipelago
bf7fb425eb
Require FIPS for peer playback and stream owned media with bounded reads
2026-10-05 23:52:44 -04:00
archipelago
9af49291e9
Bind accepted npub requests to peer identities and serialize cancellation
2026-10-05 23:52:44 -04:00
archipelago
fefcbfdbc4
Accept authenticated npub-only peering replies with validated DID keys
2026-10-05 23:52:44 -04:00
archipelago
83ba98ab42
Guide AI connection setup with private node credentials and explicit providers
2026-10-05 23:41:29 -04:00
archipelago
10d31ae13c
Persist encrypted peer approval delivery and bind discovery invite identities
2026-10-05 22:27:43 -04:00
archipelago
e97f958f45
fix: bound monitoring subprocesses and collect fresh system readings
2026-10-05 21:31:32 -04:00
archipelago
041f1fa2d3
fix: report collected fleet metrics and distinguish unavailable readings
2026-10-05 20:31:40 -04:00
archipelago
9a041bed18
fix: send peer replies through managed Nostr relays
2026-10-05 19:53:05 -04:00
archipelago
053f03be49
fix: validate legacy JSON before migrating encrypted state
2026-10-05 19:53:05 -04:00
archipelago
446fa7b7fd
fix: retain management guard through legacy runtime install and rollback
2026-10-05 15:08:42 -04:00
archipelago
daac47cac4
fix: harden node upgrades and prepare 1.9.0-alpha
2026-10-05 12:43:49 -04:00
archipelago
2c1bcacf0a
Test Nostr encryption compatibility and forged relay messages
Demo images / Build & push demo images (push) Failing after 52s
2026-10-05 10:00:41 -04:00
archipelago
f1d0092e57
Validate app owner keys and match identity picker whitespace rules
2026-10-05 09:31:46 -04:00
archipelago
7dfb0e0013
Merge opt-in app owner identity placeholder
...
nevent1qqs9d76qm6f5xj2vrtjfnkqz5exrc8r0s9zev4f672kqyd0wjh7wwvqpz3mhxue69uhhyetvv9ujumn8d96zuer9wcx2tvaw
2026-10-05 09:29:18 -04:00
archipelago
775d7b9877
Merge Nostr 0.44 security fixes
...
nevent1qqsgj7l3gewl20m6xxxeu89zsmjy9prvc9g8ggkr6cysa5p9tc3hc2gpz3mhxue69uhhyetvv9ujumn8d96zuer9wcyr3wqc
2026-10-05 09:29:08 -04:00
TheCryptoDonkey
c18ebd7f5b
fix: update nostr to 0.44.7 and nostr-relay-pool to 0.44.3
...
Patch releases within 0.44 that clear eleven RustSec advisories against
the versions in the lock: RUSTSEC-2026-0216, -0219, -0224 to -0232.
They cover NIP-04 and NIP-44 decryption panics and resource exhaustion,
Debug output exposing NIP-46 and NIP-60 credentials, and the relay pool's
handling of unverified events. No other package changes.
2026-10-03 11:11:06 +02:00
TheCryptoDonkey
494d248356
feat: add NODE_IDENTITY_PUBKEYS derived-env placeholder
...
Lets an app grant the node's users owner rights, e.g. a Blossom server's
allowed uploaders. The value is the Nostr keys of the identities the app
identity picker offers for NIP-07 signing, chosen by the same rule as
NostrIdentityPicker.vue, so the node's own appliance identity is never
included. It is resolved only for manifests that template it, and an
empty set is an error rather than an empty owner list.
identity.list now shares its is_node test with the new helper.
2026-10-03 11:10:29 +02:00
archipelago
d6e0c142c6
Return retryable payment status errors and record NPM release gate
2026-10-01 14:24:24 -04:00
archipelago
f4d3455496
Fix paid-file recovery, app lifecycle regressions and wallet controls
Demo images / Build & push demo images (push) Failing after 1m10s
2026-10-01 10:31:55 -04:00
archipelago
6d5f3ffb85
fix: select NPM admin port regardless of binding order
Demo images / Build & push demo images (push) Failing after 34s
2026-09-30 18:24:35 -04:00
archipelago
96fb5a4f19
fix: prevent stale snapshots resurrecting orphaned dashboards
Demo images / Build & push demo images (push) Failing after 36s
2026-09-30 17:45:18 -04:00
archipelago
02b840f2d1
chore: prepare 1.8.22-alpha release candidate
Demo images / Build & push demo images (push) Failing after 36s
2026-09-30 16:45:43 -04:00
archipelago
c82c1eee98
fix: prevent NPM tunnel collisions and false app health restarts
2026-09-30 16:30:40 -04:00
archipelago
c1e20a71ae
Check companion dashboards and omit headless UI waiting messages
Demo images / Build & push demo images (push) Failing after 37s
2026-09-30 13:28:37 -04:00
archipelago
2f1a3ade07
Promote runtime manifests before starting app reconciliation
2026-09-30 12:50:46 -04:00
archipelago
d50be13232
Normalize Mempool frontend aliases in restored app inventory
2026-09-30 12:41:15 -04:00
archipelago
5ab65f7581
Preserve apostrophes in Quadlet commands and record funded acceptance
2026-09-30 12:08:35 -04:00
archipelago