docs(cli): the node ladder prefers your own node; document --local and the no-node error - #61
Merged
Merged
Conversation
MichaelTaylor3d
force-pushed
the
docs/2099-local-origin
branch
2 times, most recently
from
August 4, 2026 23:47
c6654d4 to
1246837
Compare
…d the no-node error digs defaults to the local node rather than rpc.dig.net, so the published ladder needed to say so, and two new behaviours needed documenting: - `digs config node.url --local <url>` sets a per-project node in .dig/node.toml, and that file is NOT trusted on sight because it can arrive with a cloned repository. - With no local node, reads fall through to the gateway with a notice while push/revoke stop with NO_LOCAL_NODE, so the docs now give the check command and the install links. Also corrects the ladder's addresses to the ones dig-node actually binds (portless dig.local; plaintext localhost:9778). Refs DIG-Network/dig_ecosystem#2099 Co-Authored-By: Claude <noreply@anthropic.com>
The resolution section claimed 'connections to any tier use mTLS with a client certificate derived from your identity key'. That is not what ships: `digstore-remote`'s TransportMode marks Mtls NOT YET WIRED and the resolver refuses it, so every tier is reached over plain HTTPS (loopback over plain HTTP) with the §21.9 signed identity headers doing the authenticating. Telling a reader their traffic is mutually authenticated when it is not is the kind of docs error that changes what someone is willing to send. Corrected to describe what ships, and to say mTLS is specified-but-pending rather than dropping the mention. Co-Authored-By: Claude <noreply@anthropic.com>
The same over-claim as the command-reference page, twelve lines below a list I had already rewritten: 'Connections to any of the three tiers use mTLS, presenting a client certificate derived from your identity key'. TransportMode::Mtls is NOT YET WIRED and the resolver refuses it, so what authenticates a request today is the §21.9 signature, not the transport. Same replacement applied, so both pages now say the same true thing. Co-Authored-By: Claude <noreply@anthropic.com>
MichaelTaylor3d
force-pushed
the
docs/2099-local-origin
branch
from
August 5, 2026 00:58
1246837 to
ff70deb
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Documents the behaviour shipping in DIG-Network/digs#37
(dig_ecosystem#2099). Docs and code land together per §4.3 — this is the same unit of work, not a
follow-up.
digsused to default torpc.dig.net. It now prefers your own node, can be pinned per project,and refuses to publish through a server you never chose. The docs said none of that.
What changed
docs/digstore/cli/command-reference.mdconfig node.urltable gains the--local(per-project),--show, and--unsetforms.between
$DIG_NODE_URLand the machine-wide value, and thatdig.localis tried over HTTPS thenHTTP, with
localhoston9778/$DIG_NODE_PORT.rpc.dig.netis an ordinary node that happens tobe well known, not a privileged one (dig_ecosystem#1997).
node.urlis not honoureduntil you approve it:
.dig/node.tomlarrives with a cloned repository, and digs signs everyrequest to a node with your identity key. Explains that approving one project does not approve
another, that an edited value re-asks, and that a non-interactive run ignores it.
NO_LOCAL_NODE(exit 19), with the real commands (dig-node status,dig-node start) and whereto install.
docs/rpc/dig-remote.md— the same ladder, corrected in thedig://host-resolution section,plus that an unconfigured
originnow means your node.docs/run-a-node/point-a-consumer.md— one line aligned with the above.Accuracy
Written against the shipped behaviour and the installed binary rather than from the design. Every
command and URL the pages tell a stuck user to run was checked, with a control so the check could
fail:
Per §4.3 these pages stay self-contained: no reference to
SPEC.md,SYSTEM.md, or issue numbers —the reasoning is stated directly, in the user's terms.
Version
0.11.1→0.12.0— minor: new documented capability.