| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| |
|
|
|
|
|
|
|
|
|
| |
Done before anyone has a token or a branch, because renaming later breaks every
contributor. The hook compares the middle path segment to REMOTE_USER, so a token
can only write under its own namespace; deletion and cleanup become a prefix
operation instead of a guess.
Verified 4/4: own namespace accepted, neighbour's namespace refused naming the
authenticated user, missing owner segment refused with the correct form, main
refused. Test branch and token removed afterwards; queue back to 0.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Users push to push.newos.webx11.duckdns.org with a per-user token; the read-only
host is untouched. http.receivepack is unset so git only allows receive-pack when
REMOTE_USER is present, which only that vhost sets. A pre-receive hook (installed
by the publisher every run) allows refs/heads/contrib/* only and refuses banned
paths, credential-shaped blobs, >200 files or >2MB, logging user+ref+decision.
moderate-contrib.py triages every 10 min: deletes hard violations, stamps the
rest ready-docs/review/stale into a queue rendered at /admin/git-contrib.html.
A human still decides what merges.
Verified end to end: contrib push accepted, main refused, credential file
refused, accepted ref visible on the read-only host; guard extended (push host
401, hook present+executable, receivepack unset) and proven RED by removing the
hook.
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Install is npm (node>=22.19). Ollama wiring is two files under ~/.pi/agent:
models.json (baseUrl http://localhost:11434/v1, api openai-completions, model
list) and settings.json (defaultProvider/defaultModel). Documents the trap that
a pulled model must also be declared — undeclared gives 'Model not found', which
reads like a connection failure. Both paths verified on this host: declared
coder:latest -> 'LOCAL OK', undeclared llama3.2:latest -> error.
The two /about/ links pointed at the host root, where nothing exists; the repo
page is /newos4/about/.
|
| |
|
|
|
|
|
|
|
| |
Four recipes on the usage page: one-shot @file analysis, --mode json + jq for
scripts, a read-only --tools allowlist for tree inspection, and a cron-able
digest. Every flag shown was exercised on this host first; the retired-default
model gotcha (HTTP 410 'was retired') is documented because it wasted a run.
Adds the untrusted-input warning: pi auto-loads AGENTS.md/skills from the working
directory, so a public clone must run with --no-approve and no write tools.
|
| | |
|
| |
|
|
|
|
|
|
| |
Two measured overflows, both structural: a grid item defaults to min-width:auto
so one long command stretched the column to 521 px, and the troubleshooting table
had no fixed layout so a column of long code strings pushed the page 75 px wide.
minmax(0,1fr) + min-width:0 + table-layout:fixed + overflow-wrap:anywhere.
verify-mobile: 4/4 viewports OK.
|
| | |
|
| |
|
|
|
|
| |
310 files / 182 commits were already wrong at publish time (184). A count that
changes on every publish is a rot vector; the page now says what the tree is and
lets the reader run the commands.
|
|
|
Served at https://newos.webx11.duckdns.org/usage.html from docs/usage.html in this
repo, so the page, the mirror and the README share one source. Covers the four
failure modes that actually bite: CRLF on Windows (core.autocrlf), missing CA
bundles, cloning into /sdcard from Termux (FUSE has no POSIX permissions), and
the read-only 403 on push.
|
