Bring main up to date with the live UKMesh production tree, reconciled
per-file (tree-wins for deployed features; main-wins where main evolved
past the tree's lineage; hand-merges for mixed files). Verified locally
on the deploy host: backend + frontend typechecks, backend unit suite
(543 pass / 0 fail), frontend suite (147 pass / 0 fail), OpenAPI
contract check, frontend production build, scripts typecheck.
Highlights:
- Deployed features land: tags + recent tags, owner public feed,
Viterbi path prewarm and prior rebuilds, region participation,
owner packet-sharing JWT scope, pathing docs, README updates.
- Main-side hardening retained: CI RAM steps + smoke cleanup trap,
hardened scripts, gitleaks/logging rules, stale-MQTT observer
protections, alert-receiver queue module, health-status refactor
with tree retention additions (owner_packet_share_deliveries +
public_feed_deliveries @30d, node_status_samples @30d — matching
live TimescaleDB policies).
- Credential-generation client close restored on the tree's ownerAccess
so the operator revocation tool (owner-auth:revoke) keeps working.
- Migrations renumbered to follow main's 058/059 ledger migrations:
055_public_feed, 060_region_scope_participation,
061_packet_share_owner_scope_and_jwt; migration-registry test
assertions updated to the final numbering.
- Planning/report artifacts removed from the repo; local plans/, *.bak*
patterns gitignored (deploy tree tidied to match).
gadgethd