Repository navigation
Support SSH money administration and rename native server package to msgd - #207
Merged
Merged
Conversation
|
You have reached your Codex usage limits for security reviews. Please try again later. |
LIghtJUNction
changed the title
This was referenced Sep 30, 2026
Closed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Root money commands now accept explicit
--allow-sshfor mint, burn, Root transfers and Bank role/funding management. OS root, an interactive SSH terminal, Root PIN, exact preview confirmation, signed audit and atomic ledger checks remain required; default execution still requires the physical console. Offer and key recovery administration remain unchanged.Native server packages and artifact/docs paths now use
msgd, with legacymsgctl-serverreplacement/provides/conflict metadata for Arch, Debian and RPM. Runtime, configuration, data and service names remain unchanged; maintenance hooks do not remove runtime state. The Python wheel remainsmsgctl.Validation at head
0a3722558ba9c7faa4f53223a6711b0ee088b98d: Ruff check, packaging compile and diff check pass. Targeted SSH provisioning/money/market tests: 56 passed. Tests exercise default SSH denial, interactive administrator gates, confirmation/PIN refusal without ledger/audit writes, two-step Bank funding approval, and successful signed Root actions with SSH operator audits. Cross-distribution package upgrade acceptance remains to be verified.