nordisk/holger-ui
Commits
3cba5a5ba0b2Merge secfix/ui-set-revision into main (lane SEC-FIX-HOL, SEC-UI-SET-REVISION, SEC-REVIEW-2026-11-01 D4): the console's set votes name the revision they were shown9843c8e9b6faGREEN (SEC-UI-SET-REVISION, SEC-REVIEW D4): a set vote names the revision the card showedb75c6f7fe22bRED (SEC-UI-SET-REVISION, SEC-REVIEW D4): the console's set vote names no revision872dac9ba241Proto follow: proto/holger.proto is holger main's again (0ae58dd9: DependencySet.revision and JudgeDependencySetRequest.revision, SEC-REVIEW D4, and the other changes since)8c8a6d2f4ffcThe graph rig's box requires no scan and mirrors into bundles (follow-ups to holger SEC-REVIEW P5, 7c6ebb3f, and the cargo door, c6ef70be)4fe982645c7fLock follow: browser-tests/Cargo.lock names the sibling mains (estate-front 0.3.4, monetize-embed/-estate-side/-product 0.3.1, monetize-proto 0.3.4); entries only2c7765fbea0cMerge holdepset/sets into main (lane HOL-DEPSET-APPROVE): the Security page shows each pull as ONE dependency-set card with its members, and its two verbs, every word holger\x27s. Gate (oden ci4, pipefail): cargo test -p holger-ui-web all green (125 unit + the contract tests), wasm32 check, no new clippy finding, cargo metadata --locked7c41edf10dd9Merge remote-tracking branch 'origin/main' into holdepset/sets5aa5825b2667holger-ui dependency sets: the page names no role words (there_is_no_client_side_role_logic), host builds allow the wasm-only helpers (lane HOL-DEPSET-APPROVE)b9fdf8d74c46Merge hol310check/ui-version into main (lane HOL-310-CHECK): holger-ui --version names its own version and commit (the published 3.1.0 printed holger-ui 3.0.0). Gate (oden ci4): the_packaged_console_names_its_version 1/1, clippy -D warnings, rustfmt, cargo metadata --locked29b8c40daca3GREEN: holger-ui --version prints its own version and its commit (HOL-310-CHECK)97e9b7051467RED: a packaged holger-ui names the version it was published as and its commit (HOL-310-CHECK)cde161f6453dMerge holflowfront/front-and-links into main (lane HOL-FLOW-FRONT, Henrik Q1+Q4): browser test flow_front_and_links proves the front unfolds at level 2 (a click on it) and level 3, nothing to click before its report, and a press on a downstream own-flow link lands on its console /flow; rig helpers pair_with_front, front_reports, downstream_reports_console; the console stays thin (no src change). Gate (oden, holger-ui-browser:e275257ce7e23f31, --locked, holger main 6e836b3d): flow_front_and_links 1/1, fit_and_levels 3/3, estate_board 1/1, console 2/2, the_board_is_mounted 4/4, browser-tests metadata --lockeddfa823b52e5fGREEN: browser-tests lock follows holger main 6e836b3d (HOL-FLOW-FRONT: holger-downstream-rules takes blake3); flow_front_and_links green on it (RED was 59fdba4 against holger RED ba578f60: the front report answered 404)2f4576024aecMerge remote-tracking branch 'origin/main' into holflowfront/front-and-links7936a80980b8GREEN: holger-ui dependency sets (src/depsets.rs, the Security page\x27s Dependency sets cards): each set its root, status, summary, votes, blockers, holds, notes and members as holger served them at GET /-/intake/sets; Approve the set / Refuse the set send holger\x27s verbs and show its words; no client-side decisionf75396bcb598RED: holger-ui shows a pull\x27s dependency set as ONE approval card with its members, holger\x27s words, and sends the set verbs (holger lane HOL-DEPSET-APPROVE)266d9cdd176eMerge hol311korp/korp-0211 into main (lane HOL-311-KORP, plan row HOL-CDS-6): browser-tests lock follows korp-installer 0.2.11, entry only. Gate (oden ci4, sibling mains: holger 29c8242f, edda 82bbc28, tunnr 2fc7d74): cargo metadata --locked on every lock of gunnar, gunnar-ui, holger-ui, dwarves and holger (29/29)a5db66694162browser-tests lock follows korp-installer 0.2.11 (tunnr main 2fc7d74): the korp-installer entry only (lane HOL-311-KORP)59fdba4c04cdWIP (paused by owner order): browser test flow_front_and_links (front unfolds at levels 2/3, press on a downstream own-flow link lands on its console /flow) + rig helpers (lane HOL-FLOW-FRONT); green against holger holflowfront/front-report GREEN; lock follow not committedd8a7bc90e64ebrowser-tests lock follows holger main 3.1.0 (2d7db79e) (lane HOL-310-RELEASE): metadata --locked greene01668848fb0Merge hol310/release into main (lane HOL-310-RELEASE): holger-ui 3.1.0 (bd110e6 and the locks), gated with holger d3d7bf2d06b2f3c45d9eMerge holclean/xtask-clippy into main (lane HOL-CLEANUP, HOL-PRODUCTS-6): holger-ui xtask clippy -D warnings clean. Gate (oden ci4): clippy -p xtask --all-targets -D warnings, cargo test -p xtaskb90da3894b05GREEN: HOL-PRODUCTS-6 (holger-ui xtask), clippy --all-targets -D warnings on the xtask is clean (it was RED): the CSP hash slices bytes, not a string; the LocalAPI status parse returns its own Result5021087dd54dMerge holui-fit/2026-11-01 into main (lane HOL-UI-FIX follow-ups): the security view fits a phone, the Disks pane says created at the first upload, the flow's three levels proven607aacfda76dGREEN: the security view fits a phone, the Disks pane says created at the first upload, the Overview's boxes lead to the machines (lane HOL-UI-FIX)20b41993f5b1browser-tests lock follows the holger 3.1.0 candidate with Heimdall 0.2.1 (lane HOL-310-RELEASE)9fa83efa7f91RED: one artifact's security view fits a phone, the Disks pane says created at the first upload, the flow's three levels and the Overview's links to them (lane HOL-UI-FIX)c8f34db5e476browser-tests lock follows the holger 3.1.0 candidate (lane HOL-310-RELEASE)d9777f8d8398Merge origin/main into hol310/release (lane HOL-310-RELEASE): HOL-UI-FIX (bd110e6)bd110e6f1262Merge hol-ui-fix/2026-10-31 into main (lane HOL-UI-FIX): one job per menu entry, the Overview is the estate at a glance, the Flow page is the only picture20dbb9e77ea1console.css: a table scrolls in its frame on a phone, badges and facts never squeeze to a letter; the camera names what sticks out (lane HOL-UI-FIX)33c5db1d566arelease: holger-ui 3.1.0 (lane HOL-310-RELEASE): the console changed since 3.0.0 (Henrik smart flow, the browser fixes); holger-ui-server and holger-public-site are unchanged and stay 3.0.0; the locks follow (browser-tests: the holger 3.1.0 crates). Gate (oden ci4): metadata --locked on both locks, cargo check --workspace --all-targets4c68ec5e76ccbrowser test page_jobs: read the downstreams' table heads lower-cased (innerText follows the CSS capitals) (lane HOL-UI-FIX)ed4a6a5a2965GREEN: one job per menu entry; the Overview is the estate at a glance; one stylesheet (lane HOL-UI-FIX)403d4653ec5eRED: one menu entry per job, the Overview is the estate at a glance, the Flow page is the only picture (lane HOL-UI-FIX)35fc01d204efbrowser tests: the lock follows the sibling mains, and a camera for every console page (lane HOL-UI-FIX)cb8117792e52Merge fix/buyer-beta-line into main (lane HUI-BROWSER-REDS): the buyer and sync_revoke browser tests follow the pages (Holger's own beta line, RA5-41; Revoke is the row's danger button beside Invite). Gate (oden, holger-ui-browser:e275257ce7e23f31): the whole browser suite 29/29 green, metadata --locked greenb531a99bd9f2browser test sync_revoke: click the Revoke button, not the row's first (lane HUI-BROWSER-REDS)9674bdb7aa99browser test buyer: the beta line is Holger's own (lane HUI-BROWSER-REDS)ebc5c0ff3611Merge fix/browser-approver-invite into main (lane HENRIK-FLOW-MERGE): the console browser test mints the approver's invite on the owner's stepped-up session (holger-auth-6)9cb5872bda80Merge fix/security-page-runner into main (lane HENRIK-FLOW-MERGE): the Security page browser test reads holger's runner section (HOL-SANDBOX-TRAIT)bb2ab678616dMerge fix/cli-table-wrapped-rows into main (lane HENRIK-FLOW-MERGE): a holger-cli table row rustfmt wrapped over lines is still a row (the console's PutArtifact). RED c2176bc, GREEN 8f5dc39bd22d70f3dfcMerge fix/rig-token-file-0600 into main (lane HENRIK-FLOW-MERGE): the browser rig writes the console token 0600 (holger-key-1), so a rig holger starts again. RED e1de437, GREEN 46bb2aece585e65606dMerge henrik/flow-smart into main (HOL-FLOW-SMART, Henrik; PR #1, lane HENRIK-FLOW-MERGE): the smart flow in the console3dd00040661eMerge t2next/korp-0.2.10-2026-10-31 into main (lane TEST2-NEXT): browser-tests' lock follows korp-installer 0.2.10; metadata --locked green809204768983browser-tests: the lock follows korp-installer 0.2.10 (tunnr main, seccompiler 0.5 + syscalls 0.8.1) (lane TEST2-NEXT)f3b38e32a212The console browser test mints the approver's invite on the owner's session (Henrik, 2026-10-31)3bda8c34d748The Security page browser test reads holger's runner section (Henrik, 2026-10-31)46bb2aebc984GREEN: the browser rig writes the console token 0600 (Henrik, 2026-10-31)