cultmesh-py: peer writes need a write authority (default-deny) #33

Merged

libby merged 4 commits from libby/cultmesh-py-remote-write-authority into main 2026-11-07 19:19:28 +00:00

Conversation 0 Commits 4 Files changed 11 +570 -22

libby commented 2026-11-07 19:07:33 +00:00

Member

Copy link

Mirrors C# CultNetDatabaseServer.Authorize / ICultNetRemoteWriteAuthority.

Breaking (0.x): a served node refuses every peer document_put_raw/document_delete unless a write_authority grants it. Refusal is a typed write_not_authorized error carrying the record key (bytes pinned to error-vectors.json). An authority that raises or returns nothing refuses. CultMeshGrantAllWrites and daemon --allow-peer-writes are the explicit opt-in. serve_node and session.serve take write_authority.

The gate runs before any other judgment of the put, so a refused peer learns nothing about what is registered. Malformed puts reach the gate under the ids as sent.

Tests: 12 in test_remote_write_authority.py port the C# behaviours (forwarding has no Python counterpart: this server does not forward). Existing server-put tests now pass CultMeshGrantAllWrites().

Verification: cultnet-py 142 OK; cultmesh-py 132 OK on a clean run. cultmesh-py intermittently fails with EADDRINUSE (TCP/UDP port pair) on this host, identically on unmodified main (3/3 runs failed there), so not introduced here.

Brokkr's Blender add-on relies on peer writes; separate PR passes grant-all.

🤖 Generated with Claude Code

Mirrors C# `CultNetDatabaseServer.Authorize` / `ICultNetRemoteWriteAuthority`. **Breaking (0.x):** a served node refuses every peer `document_put_raw`/`document_delete` unless a `write_authority` grants it. Refusal is a typed `write_not_authorized` error carrying the record key (bytes pinned to `error-vectors.json`). An authority that raises or returns nothing refuses. `CultMeshGrantAllWrites` and daemon `--allow-peer-writes` are the explicit opt-in. `serve_node` and `session.serve` take `write_authority`. The gate runs before any other judgment of the put, so a refused peer learns nothing about what is registered. Malformed puts reach the gate under the ids as sent. Tests: 12 in `test_remote_write_authority.py` port the C# behaviours (forwarding has no Python counterpart: this server does not forward). Existing server-put tests now pass `CultMeshGrantAllWrites()`. Verification: cultnet-py 142 OK; cultmesh-py 132 OK on a clean run. cultmesh-py intermittently fails with `EADDRINUSE` (TCP/UDP port pair) on this host, identically on unmodified main (3/3 runs failed there), so not introduced here. Brokkr's Blender add-on relies on peer writes; separate PR passes grant-all. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

libby added 2 commits 2026-11-07 19:07:33 +00:00

WIP cultmesh-py: remote write authority gate (not finished, not for merge) ... 7a721204ae

Adds write_authority.py, node.raw_put_target/raw_delete_target, the gate in
_handle_raw_put/_handle_raw_delete with the peer passed in, and serve_node/serve params.
Missing: __init__ exports and imports in facade.py/session.py, daemon --allow-peer-writes,
tests, README and Breaking note. Untested.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

cultmesh-py: peer writes need a write authority (default-deny) ... 2947e15088

Finishes the remote-write gate: exports, daemon --allow-peer-writes, the gate is
total (an ungranted peer learns nothing from malformed/unowned-put replies),
existing server tests grant explicitly, 12 tests port RemoteWriteAuthorityTests
(forwarding has no Python counterpart), refusal bytes pinned to error-vectors.json.
README documents the breaking change.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

libby referenced this pull request from GameCult/Brokkr 2026-11-07 19:08:34 +00:00

Blender add-on: pass CultMeshGrantAllWrites() to its served node #4

libby referenced this pull request from a commit 2026-11-07 19:08:36 +00:00

Blender add-on: grant peer writes explicitly to its served node

libby added 1 commit 2026-11-07 19:14:15 +00:00

cultmesh-py: gate runs before an ungranted peer's payload is touched ... 61a1d872b3

raw_put_target resolves only a put of the wire shape (string key, bytes payload),
so an int payload is never converted (bytes(10**9)) before the authority speaks.
Shard fields of the wrong type reach the authority as None. Tests: huge payload
refused without allocating, RUDP peer path (endpoint and transport), shard types.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

libby added 1 commit 2026-11-07 19:17:31 +00:00

cultmesh-py: document why schema resolution precedes the write gate ... f074c3d45f

Comment at the gate and a README residual; no behaviour change.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

libby merged commit e2dc04e724 into main 2026-11-07 19:19:28 +00:00

libby referenced this pull request from a commit 2026-11-07 19:19:29 +00:00

Merge pull request 'cultmesh-py: peer writes need a write authority (default-deny)' (#33) from libby/cultmesh-py-remote-write-authority into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

GameCult/CultLib!33

No description provided.