Skip to main content

max / makenotwork

Strip historical narrative from documentation
Author: Max Johnson <me@maxj.phd> · 2026-08-31 11:38 UTC
Signed with PGP, not checked
Commit: 19009e5641755163403a779caa4f783cf7bb1e38
Parent: ac3a09d
284 files changed, +1694 insertions, -2422 deletions
M mnw-cli/README.md +5 -6
@@ -27,9 +27,9 @@
27 27 | Layer | Modules | Role |
28 28 |-------|---------|------|
29 29 | SSH | `ssh/handler.rs`, `ssh/mod.rs` | Connection handling, public key auth, channel dispatch |
30 - | TUI | `tui/mod.rs` + 9 screen modules | Interactive terminal UI via [ratatui](https://ratatui.rs/) |
30 + | TUI | `tui/mod.rs` + the screen modules | Interactive terminal UI via [ratatui](https://ratatui.rs/) |
31 31 | Commands | `commands.rs` | Non-interactive text output for scripting |
32 - | API | `api.rs` | HTTP client for MNW internal API (50+ methods) |
32 + | API | `api.rs` | HTTP client for the MNW internal API |
33 33 | SFTP | `ssh/sftp.rs` | File upload handling with per-user staging |
34 34 | Git | `ssh/git.rs` | Git proxy (upload-pack, receive-pack) via subprocess |
35 35 | Staging | `staging.rs` | 1 GB per-user upload quota, 24h TTL auto-cleanup |
@@ -104,8 +104,8 @@
104 104 no separate deploy step and no manual `scp`. See `../sando/deploy/README.md`.
105 105
106 106 It runs on hetzner as a systemd service with security hardening
107 - (ProtectSystem=strict, PrivateTmp, NoNewPrivileges). The old
108 - `deploy/deploy.sh` is a retired reference, not a supported path.
107 + (ProtectSystem=strict, PrivateTmp, NoNewPrivileges). `deploy/deploy.sh` is a
108 + retired reference, not a supported path: do not run it.
109 109
110 110 ## Key Paths
111 111
@@ -113,11 +113,10 @@
113 113 |------|-------|
114 114 | SSH server + auth | `src/ssh/handler.rs` |
115 115 | TUI app state + event loop | `src/tui/mod.rs` |
116 - | API client (50+ methods) | `src/api.rs` |
116 + | API client | `src/api.rs` |
117 117 | Non-interactive commands | `src/commands.rs` |
118 118 | SFTP + staging | `src/ssh/sftp.rs`, `src/staging.rs` |
119 119 | Git proxy | `src/ssh/git.rs` |
120 - | Deploy script (retired) | `deploy/deploy.sh` |
121 120 | systemd unit | `deploy/mnw-cli.service` |
122 121
123 122 ## Contributing
M multithreaded/CONTRIBUTING.md +1 -2
@@ -215,8 +215,7 @@
215 215 server: same worktree, same sha, same release bundle, installed on testnot-1 and
216 216 prod-1 after the server's swap. A normal MNW deploy carries it, and it inherits
217 217 the whole gate ladder (native build, migration dry run against mt's own dump,
218 - tests, burn-in, node health). `deploy/deploy-hetzner.sh`, which cross-compiled on
219 - macOS and scp'd to `root@`, is gone.
218 + tests, burn-in, node health).
220 219
221 220 The astra instance (aarch64) still has its own script, because Sando builds only
222 221 on x86_64 fw13:
M sando/README.md +37 -51
M server/CONTRIBUTING.md +4 -6
M server/build.rs +37 -203
M server/openapi.json +1 -1
M bento/deploy/README.md +14 -18
M mnw-cli/docs/architecture.md +8 -8
M mnw-cli/src/main.rs +2 -5
M multithreaded/deploy/README.md +46 -57
M multithreaded/docs/architecture.md +3 -3
M multithreaded/docs/oauth_flow.md +1 -1
M multithreaded/src/auth.rs +5 -7
M multithreaded/src/error_page.rs +5 -5
M multithreaded/src/internal_auth.rs +6 -8
M multithreaded/src/static_assets.rs +5 -10
M multithreaded/src/storage.rs +1 -1
M pom/deploy/README.md +30 -43
M pom/docs/architecture.md +3 -3
M pom/src/api.rs +4 -5
M pom/src/config.rs +2 -2
M pom/src/dashboard.rs +4 -4
M pom/src/display.rs +2 -3
M pom/src/peer.rs +2 -2
M sando/deploy/README.md +41 -54
M server/deploy/SSH_ACCESS.md +5 -7
M server/docs/architecture.md +6 -8
M server/docs/design-system.md +19 -20
M server/docs/frontend.md +153 -94
M server/docs/patterns.md +1 -1
M server/docs/performance_philosophy.md +1 -1
M server/docs/troubleshooting.md +7 -8
M server/src/auth.rs +2 -2
M server/src/background.rs +5 -6
M server/src/build_runner.rs +1 -1
M server/src/cloudflare.rs +1 -1
M server/src/config.rs +1 -1
M server/src/constants.rs +8 -11
M server/src/csrf.rs +4 -7
M server/src/deploy_lint.rs +7 -8
M server/src/error.rs +1 -1
M server/src/fee_calculator.rs +6 -13
M server/src/formatting.rs +5 -7
M server/src/git_ssh.rs +19 -29
M server/src/lib.rs +5 -8
M server/src/main.rs +2 -2
M server/src/markdown.rs +1 -1
M server/src/metrics.rs +10 -13
M server/src/oauth_scope.rs +1 -1
M server/src/openapi.rs +12 -15
M server/src/pricing.rs +2 -2
M server/src/security_signals.rs +4 -7
M server/src/shell.rs +11 -16
M server/src/site_docs.rs +3 -8
M server/src/storage.rs +15 -17
M server/src/synckit_auth.rs +3 -3
M server/src/synckit_billing.rs +4 -6
M server/src/theming.rs +2 -2
M server/static/dashboard-import-inline.js +3
M server/tests/README.md +7 -7
M server/tests/frontend_globals.rs +20 -83
M server/tests/frontend_payload.rs +21 -41
M server/tests/handwritten_confirm.rs +24 -57
M server/tests/head_meta_seal.rs +2 -8
M server/tests/migration_hygiene.rs +1 -2
M server/tests/test_hygiene.rs +27 -40
M server/tests/untested_money_paths.rs +5 -13
M shared/custom-pages/README.md +9 -10
M shared/git-command/README.md +8 -14
M shared/mnw-assumptions/README.md +5 -6
M shared/subst/README.md +3 -5
M wam/src/main.rs +2 -3
M bento/daemon/src/artifact_record.rs +7 -7
M bento/daemon/src/config.rs +4 -4
M bento/daemon/src/engine.rs +14 -18
M bento/daemon/src/handoff.rs +2 -2
M bento/daemon/src/retention.rs +3 -3
M bento/daemon/src/routes.rs +7 -7
M bento/daemon/src/runner.rs +55 -93
M bento/daemon/src/topology.rs +14 -19
M bento/driver/src/lib.rs +2 -2
M mnw-cli/src/ssh/git.rs +5 -9
M mnw-cli/src/tui/mod.rs +3 -4
M pom/src/alerts/mod.rs +9 -11
M pom/src/checks/rdap.rs +1 -1
M pom/src/checks/whois.rs +2 -2
M pom/src/cli/transition.rs +1 -1
M pom/src/db/incidents.rs +2 -2
M sando/daemon/src/backup.rs +10 -12
M sando/daemon/src/build.rs +3 -3
M sando/daemon/src/bundle.rs +3 -4
M sando/daemon/src/classify.rs +3 -4
M sando/daemon/src/config.rs +12 -19
M sando/daemon/src/deploy.rs +20 -30
M sando/daemon/src/domain.rs +12 -20
M sando/daemon/src/error.rs +2 -2
M sando/daemon/src/events.rs +1 -2
M sando/daemon/src/gates.rs +26 -42
M sando/daemon/src/intake.rs +1 -1
M sando/daemon/src/outcome.rs +11 -13
M sando/daemon/src/reconcile.rs +4 -5
M sando/daemon/src/retention.rs +6 -9
M sando/daemon/src/runs.rs +18 -22
M sando/daemon/src/state.rs +4 -5
M sando/daemon/src/topology.rs +24 -30
M server/src/bin/mnw-admin.rs +1 -1
M server/src/db/cart.rs +3 -3
M server/src/db/content_insertions.rs +1 -2
M server/src/db/enums.rs +4 -5
M server/src/db/follower_exports.rs +9 -9
M server/src/db/follows.rs +2 -2
M server/src/db/gallery_images.rs +1 -1
M server/src/db/issues.rs +1 -1
M server/src/db/license_keys.rs +4 -4
M server/src/db/lists.rs +7 -9
M server/src/db/oauth.rs +5 -7
M server/src/db/ota.rs +3 -3
M server/src/db/pending_refunds.rs +1 -1
M server/src/db/pending_s3_deletions.rs +1 -2
M server/src/db/pending_uploads.rs +4 -4
M server/src/db/project_members.rs +3 -3
M server/src/db/projects.rs +4 -4
M server/src/db/promo_codes.rs +6 -7
M server/src/db/scan_jobs.rs +3 -3
M server/src/db/scanning.rs +2 -3
M server/src/db/sessions.rs +2 -2
M server/src/db/subscription_writer.rs +1 -2
M server/src/db/subscriptions.rs +6 -6
M server/src/db/synckit_billing.rs +1 -2
M server/src/db/tags.rs +6 -7
M server/src/db/users.rs +1 -1
M server/src/db/webhook_events.rs +4 -4
M server/src/git/mod.rs +2 -3
M server/src/helpers/db.rs +3 -5
M server/src/helpers/render.rs +1 -1
M server/src/payments/connect.rs +1 -1
M server/src/payments/fan_ops.rs +4 -5
M server/src/payments/mnw_event.rs +8 -9
M server/src/payments/refund.rs +3 -3
M server/src/payments/synckit_app_pricing.rs +2 -3
M server/src/payments/synckit_billing.rs +1 -1
M server/src/quasi/blog_delete_act.rs +6 -12
M server/src/quasi/custom_page.rs +5 -8
M server/src/quasi/embeds.rs +3 -3
M server/src/quasi/item_tabs.rs +3 -3
M server/src/quasi/media_picker.rs +3 -6
M server/src/quasi/mod.rs +5 -5
M server/src/quasi/payout_summary.rs +4 -6
M server/src/quasi/project_content.rs +4 -6
M server/src/quasi/project_members.rs +2 -2
M server/src/quasi/project_tabs.rs +4 -5
M server/src/quasi/rich_field.rs +6 -7
M server/src/quasi/settings_tabs.rs +1 -1
M server/src/quasi/shortcuts.rs +3 -8
M server/src/quasi/ssh_keys.rs +3 -4
M server/src/quasi/user_tabs.rs +4 -4
M server/src/quasi/version_delete_act.rs +5 -11
M server/src/routes/builds.rs +1 -2
M server/src/routes/oauth.rs +1 -1
M server/src/scanning/archive.rs +5 -6
M server/src/scanning/clamav.rs +2 -2
M server/src/scanning/content_type.rs +1 -1
M server/src/scanning/mod.rs +4 -7
M server/src/scanning/signing_linux.rs +1 -1
M server/src/scanning/signing_macos.rs +1 -1
M server/src/scanning/signing_windows.rs +1 -1
M server/src/scanning/structural.rs +1 -1
M server/src/scanning/worker.rs +7 -8
M server/src/scanning/yara.rs +1 -1
M server/src/scheduler/announcements.rs +3 -5
M server/src/scheduler/cleanup.rs +9 -11
M server/src/scheduler/synckit_warnings.rs +7 -7
M server/src/scheduler/webhooks.rs +1 -1
M server/src/seed/buyer.rs +8 -12
M server/src/seed/creators.rs +3 -3
M server/src/seed/manifest.rs +3 -4
M server/src/templates/partials.rs +1 -2
M server/src/types/conversions.rs +1 -1
M server/src/validation/users.rs +2 -2
M server/static/bases/README.md +1 -1
M server/tests/workflows/admin.rs +1 -1
M server/tests/workflows/adversarial_input.rs +1 -1
M server/tests/workflows/csrf_coverage.rs +8 -11
M server/tests/workflows/db_collections_layer.rs -1
M server/tests/workflows/db_creator_tiers_layer.rs +11 -12
M server/tests/workflows/db_issues_layer.rs +1 -2
M server/tests/workflows/db_items_bulk_layer.rs +3 -3
M server/tests/workflows/db_items_layer.rs +1 -2
M server/tests/workflows/db_passkeys_layer.rs +3 -4
M server/tests/workflows/db_payments_layer.rs +1 -2
M server/tests/workflows/db_scan_jobs_layer.rs +5 -5
M server/tests/workflows/db_ssh_keys_layer.rs +2 -3
M server/tests/workflows/db_synckit_billing_layer.rs +2 -2
M server/tests/workflows/db_synckit_rotation.rs +4 -5
M server/tests/workflows/db_transactions_layer.rs +3 -4
M server/tests/workflows/db_users_layer.rs +3 -3
M server/tests/workflows/db_webhook_events.rs +4 -6
M server/tests/workflows/described_screens.rs +9 -12
M server/tests/workflows/discover.rs +5 -7
M server/tests/workflows/failure_paths_checkout.rs +4 -5
M server/tests/workflows/failure_paths_scan.rs +4 -5
M server/tests/workflows/failure_paths_storage.rs +5 -9
M server/tests/workflows/fan_plus.rs +2 -2
M server/tests/workflows/git_issues.rs +1 -1
M server/tests/workflows/idempotency.rs +1 -2
M server/tests/workflows/oauth.rs +1 -1
M server/tests/workflows/ota.rs +7 -7
M server/tests/workflows/pages.rs +8 -13
M server/tests/workflows/payment_crash_recovery.rs +3 -4
M server/tests/workflows/payments_refund_layer.rs +5 -5
M server/tests/workflows/rate_limiting.rs +4 -5
M server/tests/workflows/security_idor_moderation.rs +1 -1
M server/tests/workflows/seed_buyer.rs +2 -5
M server/tests/workflows/seed_examples.rs +5 -5
M server/tests/workflows/ssh_management.rs +2 -2
M server/tests/workflows/storage.rs +1 -1
M server/tests/workflows/streaming.rs +8 -11
M server/tests/workflows/stripe_webhooks.rs +1 -1
M server/tests/workflows/synckit.rs +1 -1
M server/tests/workflows/synckit_billing.rs +3 -3
M server/tests/workflows/synckit_groups_billing.rs +1 -1
M server/tests/workflows/synckit_paid_sync.rs +1 -3
M server/tests/workflows/synckit_security.rs +1 -1
M server/tests/workflows/wizards.rs +3 -3
M shared/custom-pages/src/css_sanitizer.rs +8 -12
M shared/custom-pages/src/lib.rs +41 -82
M shared/git-command/src/lib.rs +22 -32
M shared/mnw-assumptions/src/lib.rs +4 -5
M shared/ops-artifact/src/manifest.rs +3 -4
M shared/ops-core/src/eventbus.rs +8 -10
M shared/ops-core/src/lib.rs +2 -2
M shared/ops-exec/src/remote.rs +3 -3
M shared/ops-exec/src/transport.rs +7 -10
M shared/ops-exec/tests/agent_e2e.rs +6 -6
M shared/s3-storage/docs/architecture.md +4 -4
M shared/subst/src/lib.rs +6 -14
M shared/subst/src/parser.rs +13 -18
M shared/tagtree/docs/architecture.md +2 -2
M shared/tauri-updater-ui/docs/architecture.md +1 -1
M multithreaded/src/routes/helpers/authz.rs +3 -4
M pom/src/cli/tasks/meta_alert.rs +1 -1
M pom/src/cli/tasks/test_suite.rs +2 -3
M sando/daemon/src/routes/mod.rs +26 -37
M server/frontend/src/core/clipboard.ts +1 -1
M server/frontend/src/core/toast.ts +1 -1
M server/src/db/creator_tiers/storage_quota.rs +1 -1
M server/src/db/creator_tiers/subscriptions.rs +1 -1
M server/src/db/items/media.rs +3 -4
M server/src/db/items/mod.rs +7 -7
M server/src/db/synckit/subscriptions.rs +2 -2
M server/src/db/transactions/purchases.rs +11 -12
M server/src/db/transactions/seller_contacts.rs +2 -2
M server/src/quasi/widgets/mod.rs +9 -12
M server/src/routes/admin/mod.rs +2 -2
M server/src/routes/api/validate.rs +3 -4
M server/src/routes/git/mod.rs +1 -2
M server/src/routes/pages/mod.rs +3 -4
M server/src/routes/pages/sandbox.rs +3 -4
M server/src/routes/postmark/auth_check.rs +1 -2
M server/src/routes/storage/downloads.rs +4 -8
M server/src/routes/storage/mod.rs +1 -1
M server/src/routes/synckit/blobs.rs +1 -2
M shared/git-command/fuzz/seeds/README.md +2 -3
M shared/s3-storage/fuzz/seeds/README.md +2 -2
M shared/subst/fuzz/fuzz_targets/substitute.rs +7 -13
M shared/subst/fuzz/seeds/README.md +8 -9
M shared/tagtree/fuzz/seeds/README.md +11 -11
M multithreaded/crates/mt-db/src/mutations/user.rs +1 -1
M multithreaded/crates/mt-db/src/queries/community.rs +1 -1
M multithreaded/crates/mt-db/src/queries/endorsement.rs +4 -4
M server/src/routes/api/exports/mod.rs +3 -3
M server/src/routes/api/internal/repos.rs +1 -1
M server/src/routes/api/items/bulk.rs +2 -2
M server/src/routes/pages/dashboard/project_tabs.rs +8 -12
M server/src/routes/pages/email_actions/mod.rs +3 -3
M server/src/routes/pages/public/discover.rs +4 -4
M server/src/routes/stripe/checkout/cart.rs +1 -1
M server/src/routes/stripe/webhook/billing.rs +3 -3
M server/src/routes/stripe/webhook/checkout.rs +3 -3
M server/src/routes/pages/dashboard/wizards/mod.rs +1 -1
M server/src/routes/pages/public/health/mod.rs +1 -1
M server/src/routes/pages/dashboard/tabs/user/mod.rs +2 -2
M server/src/routes/pages/dashboard/tabs/user/payments.rs +2 -2
M server/src/routes/pages/dashboard/wizards/item/mod.rs +2 -2