starred/warmbly
1
0
Fork 0
mirror of https://github.com/warmbly/warmbly.git synced 2026-09-12 16:04:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: fix the Warmbly Cloud pool link across both roles (#262): take an enrolled mailbox out of this instance's own warmup pool so local partners stop writing to it and their unverifiable warmup stops landing in the owner's unibox, recognise the cloud's warmup mail whose verify header did not survive delivery through a new warmup-deliveries lookup that ignores consumed_at because instance and cloud read the same mailbox, move the managed-mailbox access token route behind NODE_BROKER_TOKEN so the internet-facing tracking and forms services can no longer mint a live provider token, scope pause and resume to the caller's workspace, keep an enrolled mailbox listed once it goes inactive, release the cloud copy when the local mirror row cannot be written, refuse the one-time handshake when CREDENTIALS_ENCRYPTION_KEY is missing, blank an expired code's plaintext instance token, and stop errx answering 200 for a status outside its table

Browse Source
This commit is contained in:
Matthew Meszaros
2026-09-12 06:58:25 -07:00
committed by GitHub
parent 06b8db5529
commit d456bc48c6
26 changed files with 609 additions and 81 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/split-cloud/node/worker.env.example
+2 -1
View File
@@ -24,7 +24,8 @@ ENCRYPTED_KEYS_PROVIDER=http
ENCRYPTED_KEYS_BACKEND_URL=https://api.example.com
ENCRYPTED_KEYS_WORKER_TOKEN=
INTERNAL_API_TOKEN=
# Only when the control plane sets one. Used for the brokered providers below.
# Only when the control plane sets one. Used for the brokered providers below
# and for the access token a mailbox Warmbly Cloud manages sends with.
NODE_BROKER_TOKEN=
# --- the bus and cache ------------------------------------------------------