All pull requests

Pull requests

• perf(TC-1274): look up a batch read's kv/get and kv/metadata keys in one statement per space

  #375·samgbafa opened Oct 19, 2026Contributor·

  ·

• feat(TC-1274): seek KV list ranges on a COLLATE "C" index; hold the legacy-artifact fence scan for 60 s

  #374·samgbafa opened Oct 19, 2026Contributor·

  ·

• logging: log /admin/stats as its own route, status only (TC-1482)

  #372·samgbafa opened Oct 19, 2026Contributor·

  ·
  1

• TC-1482: wire optional NODE_STATS_READ_TOKEN into the production deploy (companion to #370)

  #371·samgbafa opened Oct 19, 2026Contributor·

  ·
  2

• feat(admin): read-only GET /admin/stats owner list (TC-1482)

  #370·samgbafa opened Oct 19, 2026Contributor·

  ·
  2

• chore(tinycloud-node): release v1.21.2

  #369·samgbafa opened Oct 19, 2026Contributor·

  ·

• cover owner revocation of policy roots

  #364·samgbafa opened Oct 18, 2026Contributor·

  ·
  2

• Check the owner and existence of policy source networks at registration

  #363·samgbafa opened Oct 18, 2026Contributor·

  ·
  4

• check owner authority on policy share use

  #362·samgbafa opened Oct 18, 2026Contributor·

  ·
  2

• cap policy root lifetime and add authority mode

  #360·samgbafa opened Oct 18, 2026Contributor·

  ·
  4

• record owner authority for policy registrations

  #358·samgbafa opened Oct 18, 2026Contributor·

  ·
  4

• TC-959: ship typed TC-1274 SQL contention diagnostics through the log sidecar

  #342·samgbafa opened Oct 17, 2026Contributor·

  ·

• feat(TC-887): seal KV blocks in the S3 store (S3c, stacked on #333)

  #336·samgbafa opened Oct 17, 2026Contributor·

  ·
  9

• feat(TC-887): seal KV blocks in the FileSystem store; prepare writes before the invoke lock

  #333·samgbafa opened Oct 17, 2026Contributor·

  ·
  8

• feat(TC-887): sealed KV block helpers and plaintext sizes by space tag

  #329·samgbafa opened Oct 17, 2026Contributor·

  ·
  6

• feat(TC-887): node wiring for at-rest keys and escrow recovery

  #327·samgbafa opened Oct 17, 2026Contributor·

  ·
  7

• feat(TC-887): at-rest keyring, key store and migration

  #326·samgbafa opened Oct 17, 2026Contributor·

  ·
  10

• feat(TC-887): at-rest key escrow crate and ceremony CLI

  #325·samgbafa opened Oct 17, 2026Contributor·

  ·
  11

• Batch authorization graph snapshot in one SQL round trip (TC-735 dependency)

  #302·samgbafa opened Oct 15, 2026Contributor·

  ·
  3

• TC-735: persist KV blobs before the per-space sequence lock

  #301·samgbafa opened Oct 15, 2026Contributor·

  ·
  10

• TC-737: Seek quiet KV sync prefixes on PostgreSQL

  #300·samgbafa opened Oct 15, 2026Contributor·

  ·
  7

• TC-755: Bind scoped decrypt key release to exact KV secret

  #299·samgbafa opened Oct 15, 2026Contributor·

  ·
  1

• Align delegated revocation behavior

  #298·samgbafa opened Oct 15, 2026Contributor·

  ·
  5

• feat: ship redacted tinycloud-node logs to Better Stack

  #288·samgbafa opened Oct 14, 2026Contributor·

  ·
  26

• TC-940: deploy: pin ingress to the 1.20.1 wrapper (draft)

  #272·samgbafa opened Oct 13, 2026Contributor·

  ·