aaronrene / knowtation public
BREAKING feat/sec-seam-media-b #1 / 1
aaronrene · 37 days ago · Aug 1, 2026 · Diff

SEC-SEAM-MEDIA-b: hosted media propose+apply (SM-C1–C12)

Gateway maybeApplyHostedMediaAfterApprove after capture; normalize + isSeamSurfaceProposal S3.1 same change (S3.0); bridge propose/consent/ list/get/apply-approved with media blob sync; media_attach temp-stage canister note RMW + propose-time media_pointer stamp; OpenAPI + PROPOSAL-LIFECYCLE honesty. Seven-tier + SEC-SEAM-1 50/50 (sha256 2f7bf57d…). BV round 1 pass. No MEDIA_*/SCOOLING_MEDIA_* flips; no SESSION_SECRET writes; P6 R4–R5 untouched. SD-17 governance sync.

sha256:364c712a48edcb7a14c85726e1056709afb3f4f3f95ceef1a17fa0b57b5c3a89 sha
sha256:c4c6fbab695dff272ae270be2f2705a1b5c71a999d33d86a723c43dfaad3dea8 parent
+48 ~56 −5 symbols
sha256:77822e3c734b035f060a8e4d71825b9da767c6e09d900093cffce1dee9808948 snapshot
+48
symbols added
~56
symbols modified
−5
symbols removed
0
dead code introduced
Semantic Changes 109 symbols
~ hub/bridge/media-blob-store.mjs .mjs 8 symbols added
+ hydrateMediaStoresFromBlob function async_function hydrateMediaStoresFromBlob L157–177
+ mediaBlobKey function function mediaBlobKey L41–43
+ mergeExternalRefStoreJson function function mergeExternalRefStoreJson L119–125
+ mergeImportConsentStoreJson function function mergeImportConsentStoreJson L135–144
+ mergeVaultKeyedStoreJson function function mergeVaultKeyedStoreJson L68–110
+ parseStore function function parseStore L49–57
+ persistMediaStoresToBlob function async_function persistMediaStoresToBlob L185–199
+ withMediaBlobSync function async_function withMediaBlobSync L213–248
~ hub/bridge/media-routes.mjs .mjs 7 symbols added
+ bridgeMediaHandlerRole function function bridgeMediaHandlerRole L61–64
+ createProposal function async_function createProposal L142–173
+ hostedCreateProposal function function hostedCreateProposal L141–174
+ mediaHandlerContext function async_function mediaHandlerContext L101–110
+ registerBridgeMediaRoutes function function registerBridgeMediaRoutes L86–483
+ sendRouteError function function sendRouteError L180–189
+ sessionBoundFromReq function function sessionBoundFromReq L116–123
~ hub/gateway/media-approve-hosted.mjs .mjs 3 symbols added
+ isMediaProposal function function isMediaProposal L28–30
+ maybeApplyHostedMediaAfterApprove function async_function maybeApplyHostedMediaAfterApprove L47–104
+ mergeMediaApplyIntoApproveResponse function function mergeMediaApplyIntoApproveResponse L113–130
~ lib/attachments/media-hosted-proposal.mjs .mjs 13 symbols added
+ applyApprovedMediaProposalFromCanister function async_function applyApprovedMediaProposalFromCanister L542–691
+ bodyObjectOf function function bodyObjectOf L116–125
+ cleanup function function cleanup L484–490
+ createMediaProposalOnCanister function async_function createMediaProposalOnCanister L257–366
+ fetchCanisterNote function async_function fetchCanisterNote L441–471
+ fetchCanisterProposalForMedia function async_function fetchCanisterProposalForMedia L378–411
+ mergeMediaFrontmatter function function mergeMediaFrontmatter L88–110
+ normalizeCanisterProposalForMediaPrecheck function function normalizeCanisterProposalForMediaPrecheck L153–220
+ notePathFromRef function function notePathFromRef L417–419
+ parseProposalFrontmatter function function parseProposalFrontmatter L56–72
+ stageCanisterNoteToTempVault function async_function stageCanisterNoteToTempVault L482–513
+ stagedNoteMarkdown function function stagedNoteMarkdown L430–433
+ stringField function function stringField L132–136
~ test/sec-seam-media-hosted.test.mjs .mjs 11 symbols added
+ bootGateway function async_function bootGateway L243–261
+ enableLinkGate function function enableLinkGate L286–288
+ fakeBlobStore function function fakeBlobStore L130–142
+ mediaAttachRow function function mediaAttachRow L185–226
+ mediaLinkRow function function mediaLinkRow L144–183
+ mockBridgeApp function function mockBridgeApp L263–284
+ mockCanisterApp function function mockCanisterApp L93–128
+ plainNoteProposal function function plainNoteProposal L228–237
+ readRepo function function readRepo L239–241
+ signTestJwt function function signTestJwt L68–74
+ startServer function function startServer L76–87
~ docs/KNOWTATION-OVERSEER-HANDOVER.md .md 3 symbols modified
~ Knowtation Overseer Handover — knowtation
~ ARCHIVED SESSION — SEC-KN-4b build prompt
~ Governance gates checklist
~ docs/OVERSEER-HANDOVER.md .md 5 symbols added, 4 symbols removed, 41 symbols modified
~ After this (queued order)
~ Earlier this session — SEC-KN-4c-b Auto land code DONE, BV round 1 pass (2026-08-01)
~ PARKED — SEC-KN-P6-ROTATE-b R4–R5 (operator 2026-08-01)
~ code[text]
~ table
~ Prior session — 9-kn-c + 9-kn-d landed; 9-apply verified live; hygiene (2026-07-31)
~ Prior session — CAPTURE-APPLY-CHECK on Scooling found hosted gap (2026-07-31)
~ Prior session — CAPTURE-HOSTED-APPLY-KN-b DONE (2026-07-31, BV round 1 pass)
~ Prior session — CAPTURE-HOSTED-APPLY-a freeze pass (2026-07-31)
~ Prior session — FLOW-CAPTURE-LIVE-HOSTEDa freeze pass on Scooling (2026-07-30)
~ Prior session — FLOW-CAPTURE-LIVE-KN-b DONE (2026-07-30)
~ Prior session — FLOW-CAPTURE-LIVEa freeze pass on Scooling (2026-07-30)
~ Prior session — FLOW-CAPTURE-LIVEb DONE on Scooling (2026-07-30)
~ Prior session — FLOW-WRITE-LIVE-GATEWAY-PROXY DONE (2026-07-29)
~ Prior session — KIT-PRESERVE land DONE (2026-07-30)
~ Prior session — Knowtation PRODUCT RELAY refresh (2026-07-29)
~ Prior session — LAB-LIVE-SMOKE PASS on Scooling (2026-07-29)
~ Prior session — LAB-LIVE-flip on Scooling (2026-07-29)
~ Prior session — LAB-LIVEa freeze pass on Scooling (2026-07-29)
~ Prior session — LAB-LIVEb Auto + BV pass on Scooling (2026-07-29)
~ Prior session — Operator land L-SC DONE on Scooling (2026-07-29)
~ Prior session — SEC-KN-6 BV round 1 = pass
~ Prior session — SEC-REMEDIATION L-SC DONE on Scooling (2026-07-29)
~ Prior session — SEC-SEAM-1a freeze authored, loop blocked at round 2
~ Prior session — SEC-SEAM-1a round 3: D1–D4 ratified, N1 closed, loop blocked at round 3
~ Prior session — SEC-SEAM-1a rounds 4–7: D5 = A, freeze CLEARED
~ Prior session — SEC-SEAM-1b Auto build + BV pass
~ Prior session — Scooling L-SEAMa freeze pass; Knowtation relay was stale
~ Prior session — Scooling NEXT reassessed (2026-07-30)
~ Prior session — governance sync: Overseer verified; NEXT → C1–C4 Thinking
~ 9 FLOW-WRITE-LIVE-SMOKE PASS (2026-07-29)
~ 9 SMOKE FAIL recorded on Scooling (2026-07-29)
~ Prior this session — SEC-KN-P6-ROTATE-b R1–R3 + P0 deploy; R4–R5 PARKED (2026-08-01)
~ Prior this session — SEC-KN-P6-VERIFY DONE (Outcome B, evidence-only, 2026-08-01)
~ This session (later) — SEC-KN-4c LANDED (operator Tier 3, 2026-08-01)
~ This session — SEC-KN-P6-ROTATE-a DONE (freeze pass, 2026-08-01)
− NEXT SESSION — SEC-SEAM-MEDIA-b (hosted media Auto build) section NEXT SESSION — SEC-SEAM-MEDIA-b (hosted media Auto build) L21–435
− THE ONE NEXT STEP — build SEC-SEAM-MEDIA-b — Model: Auto section THE ONE NEXT STEP — build SEC-SEAM-MEDIA-b — Model: Auto L36–57
− code[text] variable variable code[text] L38–56
− This session — SEC-SEAM-MEDIA-a DONE (freeze pass, 2026-08-01) section This session — SEC-SEAM-MEDIA-a DONE (freeze pass, 2026-08-01) L103–111
+ NEXT SESSION — SEC-SEAM-MEDIA land (SD-21 / SD-14) section NEXT SESSION — SEC-SEAM-MEDIA land (SD-21 / SD-14) L21–444
+ Prior this session — SEC-SEAM-MEDIA-a DONE (freeze pass, 2026-08-01) section Prior this session — SEC-SEAM-MEDIA-a DONE (freeze pass, 2026-08-01) L112–120
+ THE ONE NEXT STEP — land SEC-SEAM-MEDIA — Model: Operator + Auto section THE ONE NEXT STEP — land SEC-SEAM-MEDIA — Model: Operator + Auto L36–55
+ code[text] variable variable code[text] L38–54
+ This session — SEC-SEAM-MEDIA-b DONE (BV pass, 2026-08-01) section This session — SEC-SEAM-MEDIA-b DONE (BV pass, 2026-08-01) L101–112
~ Overseer Handover — Knowtation
~ ARCHIVED SESSION — SEC-KN-4b build prompt
~ Governance gates checklist
~ Change log
~ table
~ docs/PROPOSAL-LIFECYCLE.md .md 1 symbol added, 1 symbol removed, 2 symbols modified
− Media proposals — self-hosted only today (SEC-SEAM-1 / S7) section Media proposals — self-hosted only today (SEC-SEAM-1 / S7) L103–106
+ Media proposals — hosted + self-hosted (SEC-SEAM-MEDIA / SEC-SEAM-1 S7) section Media proposals — hosted + self-hosted (SEC-SEAM-MEDIA / SEC-SEAM-1 S7) L103–118
~ Proposal lifecycle (Hub)
~ Personal self-apply (Scooling review tray — HOSTED-WRITE-EVAL)
~ docs/ROADMAP.md .md 5 symbols modified
~ Roadmap — knowtation
~ Build queue
~ table
~ Current status (2026-07-26)
~ table
~ docs/openapi.yaml .yaml
~ hub/bridge/server.mjs .mjs
~ hub/gateway/server.mjs .mjs 1 symbol modified
~ proxyToCanister
~ lib/attachments/attachment-write.mjs .mjs 2 symbols modified
~ precheckApprovedMediaProposal
~ reconcileApprovedMediaProposal
~ lib/hub-proposal-personal-self-apply.mjs .mjs 2 symbols modified
~ isSeamSurfaceProposal
~ matchesScoolingMediaFingerprint
~ test/sec-seam-1-session-bound-identity.test.mjs .mjs
← Older Oldest on feat/sec-seam-media-b
All commits
Newer → Latest on feat/sec-seam-media-b

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:364c712a48edcb7a14c85726e1056709afb3f4f3f95ceef1a17fa0b57b5c3a89 --body "your comment"