2,955 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Libby	a558f3ad3b	cultmesh-py: pin details.field on the message_invalid refusals of a malformed or unstorable put ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 09:14:12 +00:00
Libby	8f71bff69c	cultnet error contract: one message_invalid code replaces malformed_document_put/delete ... Q6-A of docs/cultnet-error-contract-cut.md. message_invalid joins the closed cultnet.error.v0 code enum (both schema copies), with details.field naming the request field at fault ("message" when the whole frame cannot be read). C# ForMessageInvalid, Rust CultNetErrorCode::MessageInvalid, TS cultNetMessageInvalidError and Python message_invalid_error all write the same captured bytes (error-vectors.json plus the C# and Rust cases). cultmesh-py and cultmesh-ts refuse malformed puts and deletes with it; the C# subscription servers use it for the missing subscriptionId. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 09:14:12 +00:00
Libby	fd119ea36c	Merge pull request 'cultmesh-ts: write authority decide timeout counts as a typed refusal' (#40) from libby/ts-decide-timeout into main	2026-11-08 09:13:11 +00:00
Libby	386f036849	cultmesh-ts: test that a grant arriving after the decide timeout is refused and never reaches the handler ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 09:13:08 +00:00
Libby	43abf9762f	cultmesh-ts: refuse an unusable writeAuthorityTimeoutMs at construction ... Review finding: NaN, Infinity or >2^31-1 becomes a 1 ms Node timer and would refuse every write that is not instant; 0 and negatives were silently clamped. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 05:59:25 +00:00
Libby	3f150799f0	cultmesh-ts: write authority decide timeout counts as a typed refusal ... A never-settling decide() held up the later frames of its session. The server now races it against writeAuthorityTimeoutMs (default 5000) and refuses with write_not_authorized on expiry. The granted-path test now asserts the canonical schemaId the authority saw. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 05:50:07 +00:00
Libby	e8b2e44496	Merge pull request 'semver-policy: exact commands for reading the workflow at the tagged sha; evidence for the cultcache-ts-v0.15.0 run' (#39) from eureka/tag-sha-workflow-step into main	2026-11-08 03:52:59 +00:00
Eureka	3dd9bde017	semver-policy: exact commands for the before-pushing-a-tag step, and the 0.15.0 run's evidence ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 03:51:27 +00:00
Libby	cbae9ec6fe	Merge pull request 'docs: drop stale cultcache-ts tag-trigger claim from the content map' (#38) from libby/ts-tag-trigger-docs into main	2026-11-08 03:49:17 +00:00
Libby	6822da6187	semver-policy, content-map: follow review of the cultcache-ts tag-trigger text ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 03:49:16 +00:00
Libby	5155c5b834	content-map: no cultcache-ts tag triggers publish-packages on main ... The C5 plan still said the cultcache-ts tag triggers the npm publish; F16 and the workflow say it does not. npm view 404 re-checked 2026-11-08. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 03:48:36 +00:00
Libby	250d616f8f	Merge pull request 'cultmesh-ts: write authority for the RUDP document server' (#37) from libby/cultmesh-ts-write-authority into main	2026-11-07 20:21:27 +00:00
Libby	3f4139549e	cultmesh-ts: CHANGELOG states the refusal size bound ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 20:21:26 +00:00
Libby	ada30be84e	cultmesh-ts: gate before shard refusal, bound the refusal, harden tests ... A put with wrong-typed shard fields is judged with null shard fields first, then refused as malformed once granted. The refusal's record key and reason are clipped so it fits maxPayloadBytes. The allocation test watches transient allocations; catch-path and delete tests assert ids, operation, reply count, onError and handlers. README/CHANGELOG no longer claim the schema is resolved after the gate. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 20:13:49 +00:00
Libby	1689b62597	cultmesh-ts: gate unreadable writes, malformed refusals, payload tests ... A frame that fails to decode or parse is judged as the write it looks like, so an ungranted peer gets write_not_authorized instead of silence; a granted peer gets onError and a malformed_document_put/delete refusal. Adds raw-frame tests (int, 2**70, oversized claimed length, non-decoding, non-map document) and the timing residual note. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 19:57:42 +00:00
Libby	1bc05d7b06	cultmesh-ts: document server asks a write authority before applying a peer put or delete ... Deny by default with a grant-all opt-in; the gate runs before the put is sized, resolved or decoded; refusal is the typed write_not_authorized. Adds onDocumentDeleteRaw, refuses wrong-typed shard fields before the gate, grants all writes in the existing server tests, and ports the cultmesh-py remote-write-authority tests (no forwarding). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 19:52:42 +00:00
Libby	474e27fcb3	WIP B	2026-11-07 19:36:40 +00:00
Libby	f0731c6b91	Merge pull request 'cultnet-ts: typed write_not_authorized factory and canonical schema id' (#36) from libby/cultnet-ts-write-refusal into main	2026-11-07 19:36:36 +00:00
Libby	2016ad7457	cultnet-ts: write_not_authorized blank-reason check is C# IsNullOrWhiteSpace ... Review: trim() differs from string.IsNullOrWhiteSpace on U+0085 and U+FEFF; use the package's isNullOrWhiteSpaceCSharp and pin both in the test. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 19:36:32 +00:00
Libby	d0c0156874	cultnet-ts: typed write_not_authorized factory and canonical schema id ... cultNetWriteNotAuthorizedError(recordKey, reason?) writes the C# ForRemoteWriteRefused bytes (pinned to error-vectors.json). CultNetDocumentRegistry.canonicalSchemaId resolves the id a put or delete writes under, from the id alone, for a server's write authority. No behaviour change for existing callers; the registry already had a delete apply. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 19:35:21 +00:00
Libby	10c1f4dd00	Merge pull request 'cultmesh-rs: a sink's refusal of a put is a typed write_not_authorized' (#35) from libby/cultmesh-rs-typed-refusal into main	2026-11-07 19:31:48 +00:00
Libby	74ccfaf67a	cultmesh-rs: a sink's refusal of a put is a typed write_not_authorized ... The RUDP document server sent a host sink's refusal as an untyped Error (code None). It now sends write_not_authorized with details naming the record, as C#, TS and Python do; the text stays the fixed variant text, never the sink's. The rejection carries the put's record_key. Other rejections stay untyped. Unit test pins the bytes to the error-vectors.json write_not_authorized vector; integration tests check code/details on the wire and that a refused put reaches no sink. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 19:30:54 +00:00
Libby	608ddb94f7	Merge pull request 'cultmesh-py: bind the TCP+UDP pair for port 0 without the race' (#34) from libby/cultmesh-py-port-race into main	2026-11-07 19:28:51 +00:00
Libby	cff68d5528	cultmesh-py: bind test proves only the UDP number was taken ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 19:28:50 +00:00
Libby	e0f5e13a1b	cultmesh-py: bind the TCP+UDP pair for port 0 without the race ... CultMeshLocalServer.start bound TCP to port 0 and then bound UDP to whatever number the kernel picked, failing with EADDRINUSE whenever another process held that number for UDP (this host has hundreds of UDP listeners), and left the accept thread running on failure. Port 0 now retries with a fresh pair (bounded); both sockets bind before any thread starts; an explicit port still fails honestly. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 19:25:38 +00:00
Libby	e2dc04e724	Merge pull request 'cultmesh-py: peer writes need a write authority (default-deny)' (#33) from libby/cultmesh-py-remote-write-authority into main	2026-11-07 19:19:27 +00:00
Libby	87c4ac366d	cultmesh-py: refuse wrong-typed shard fields before the write gate ... A non-string shardId or non-int shardEpoch (bool is not int) on a put or delete is a malformed_document_put/delete before the authority is asked, so a shard-scoped authority cannot be bypassed by a shard the store would file under str(shardId). The authority receives the fields as sent. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 19:19:26 +00:00
Libby	f074c3d45f	cultmesh-py: document why schema resolution precedes the write gate ... Comment at the gate and a README residual; no behaviour change. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 19:17:30 +00:00
Libby	61a1d872b3	cultmesh-py: gate runs before an ungranted peer's payload is touched ... raw_put_target resolves only a put of the wire shape (string key, bytes payload), so an int payload is never converted (bytes(10**9)) before the authority speaks. Shard fields of the wrong type reach the authority as None. Tests: huge payload refused without allocating, RUDP peer path (endpoint and transport), shard types. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 19:14:12 +00:00
Libby	2947e15088	cultmesh-py: peer writes need a write authority (default-deny) ... Finishes the remote-write gate: exports, daemon --allow-peer-writes, the gate is total (an ungranted peer learns nothing from malformed/unowned-put replies), existing server tests grant explicitly, 12 tests port RemoteWriteAuthorityTests (forwarding has no Python counterpart), refusal bytes pinned to error-vectors.json. README documents the breaking change. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 19:07:32 +00:00
Libby	7a721204ae	WIP cultmesh-py: remote write authority gate (not finished, not for merge) ... Adds write_authority.py, node.raw_put_target/raw_delete_target, the gate in _handle_raw_put/_handle_raw_delete with the peer passed in, and serve_node/serve params. Missing: __init__ exports and imports in facade.py/session.py, daemon --allow-peer-writes, tests, README and Breaking note. Untested. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 16:59:47 +00:00
Libby	d00222761c	Merge pull request 'Docs: cultcache-ts publishing is off; tag runs use the tagged workflow' (#32) from libby/publish-docs-cleanup into main cultcache-ts-v0.15.0	2026-11-07 16:53:04 +00:00
Libby	bf5a09bd04	publish-packages: say that cultcache-ts publishing is off; keep the tag pin readable ... The header comment, semver-policy and F16 of the content map still listed cultcache-ts-v* as a trigger. They now say publishing is deliberately off and that a tag run uses the workflow at the tagged commit (cultcache-ts-v0.15.0 sits on 7d292085, before the guard). semver-policy gains a "Before pushing a tag" note. The guard's comment moves above `tags:`: inside the list it broke the three `workflow:` tests of check-changelog-semver.test.mjs, which read `tags:` followed directly by its items. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 16:53:03 +00:00
Libby	e75285c067	Merge pull request 'publish-packages: cultcache-ts-v* tags no longer trigger publish' (#31) from libby/disable-cultcache-ts-tag-publish into main	2026-11-07 16:38:12 +00:00
Libby	8569825630	publish-packages: stop cultcache-ts-v* tags from triggering the npm publish ... Publishing @gamecult/cultcache-ts is deliberately disabled until ruled on, and whether NPM_TOKEN is set is unknown. The other tag patterns and workflow_dispatch are unchanged. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 16:38:11 +00:00
Libby	7d29208539	Merge pull request 'cultcache-ts 0.15.0: fold 0.14.1, 0.14.2 and Unreleased; raise consumer ranges' (#30) from libby/cultcache-ts-0.15.0 into main	2026-11-07 16:34:31 +00:00
Libby	7ac9e60bdc	cultcache-ts 0.15.0: fold the untagged 0.14.1/0.14.2 and Unreleased into one entry ... 0.14.1 and 0.14.2 were never tagged; cultcache-ts-v0.14.0 is the last release. The Unreleased exports (SchemaConflictError, schemaIdentityOf, the document payload codec) are in no tagged release, which is what failed the declared-ranges check. Package and lockfile go to 0.15.0 and every consumer range (cultnet-ts, cultmesh-ts, cultmesh-browser) moves to ^0.15.0, since a 0.x caret does not admit a new minor. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 16:31:04 +00:00
Libby	da515b0f5e	Merge pull request 'Fix build:ts: one text-only error factory in cultnet-ts (6 TS2345 in cultmesh-ts)' (#29) from libby/cultmesh-ts-error-message-sites into main	2026-11-07 16:27:31 +00:00
Libby	d0fcd3e36e	cultnet-ts, cultmesh-ts: one factory for the text-only error message ... PR #20 made routingHint, code and details required on CultNetErrorMessage; six call sites in cultmesh-ts still built the message without them, so build:ts failed with TS2345. cultnet-ts now owns cultNetTextError(error), the legacy-union decode uses it too, and the call sites and two test expectations call it. The types are unchanged. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 16:27:24 +00:00
Libby	8477d8dc74	Merge pull request 'npm: scope cultnet-ts, cultmesh-ts, cultmesh-browser under @gamecult' (#28) from libby/scope-npm-packages into main	2026-11-07 16:25:15 +00:00
Libby	286a9af389	npm: scope cultnet-ts, cultmesh-ts and cultmesh-browser under @gamecult ... Unscoped npm names are unclaimed and open to dependency confusion; cultcache-ts was already @gamecult/cultcache-ts. package.json names, intra-repo dependencies, package-lock, import specifiers (src, tests, samples, docs/start, first-call docs test), the workspace list in run-typescript-workspaces, the verify-eve module map and package READMEs now use the scoped names. Directory names, workspace paths in CI and release tag prefixes are unchanged. Historical cut docs and past CHANGELOG entries keep the old names. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 16:25:10 +00:00
Libby	655cb2c909	Merge pull request 'cultcache-rs: pin the one-global rule on load_soa (PR #15 gap)' (#27) from libby/cultcache-rs-load-soa-global-test into main	2026-11-07 16:18:28 +00:00
Libby	08715ac55c	cultcache-rs: pin the one-global rule on load_soa ... load_soa installs a whole table and checks it with refuse_second_globals, but no test reached that call (PR #15 covered put paths and pull_all). A table holding two records of a global type is refused with CultCacheSecondGlobal and the prior view survives; a table with one global loads and replaces the view. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 16:17:05 +00:00
Libby	ec7a009b02	Merge pull request 'cultnet: add unsupported_schema_version to the closed cultnet.error.v0 code set' (#26) from libby/error-code-unsupported-schema-version into main	2026-11-07 16:16:17 +00:00
Libby	d18def46b3	Merge remote-tracking branch 'origin/main' into t26	2026-11-07 12:27:39 +00:00
Libby	f1cdbfdfd7	Merge pull request 'cultnet-ts selection/v1 carriers + error code/details' (#20) from libby/cultnet-ts-selection-v1 into main	2026-11-07 12:27:32 +00:00
Libby	fc184b0888	Merge remote-tracking branch 'origin/main' into t20 ... # Conflicts: # packages/cultnet-ts/src/contracts.ts # packages/cultnet-ts/src/index.ts	2026-11-07 12:26:32 +00:00
Libby	1718a50642	Merge pull request 'cultnet-py multi-peer RUDP socket server' (#19) from libby/cultnet-py-multipeer-server into main	2026-11-07 12:26:06 +00:00
Libby	95a4680dfe	Merge remote-tracking branch 'origin/main' into t19	2026-11-07 12:25:23 +00:00
Libby	33cadb25fa	Merge pull request 'cultmesh-py/rs authority route verification' (#18) from libby/cultmesh-route-verification into main	2026-11-07 12:25:15 +00:00