kevinveenbirkenbachandClaude Opus 5 e16d807e62 fix(cache): refuse a tor deploy whose node onion is empty ...

get_merged_domains gated the onion injection on node_onion being set AND
svc-net-tor being in group_names. When the node was empty it answered the
clearnet map with no error and no log line, and because group_names is
part of the cache key, a clearnet map and an onion map coexist in one
process under separate keys. One render then serves onion while another
freezes a clearnet asset URL into a stylesheet.

That URL is unrecoverable at request time: body_filter.lua returns a CSS
response before onionize(), so the <link href> in the head is rewritten
while the url(...) inside the stylesheet body is not. The symptom is a
single toHaveCSS mismatch and nothing else.

An empty node under a deployed svc-net-tor now raises. A scope carrying no
group_names at all stays silent, because that is indistinguishable from a
legitimate non-tor deploy.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-10-14 00:21:24 +02:00

..

cli

fix(tests): import the mock submodule the deploy-container suite uses

2026-10-14 00:00:41 +02:00

group_vars

feat(readme): let a role name the companions its documented deploy needs

2026-09-25 09:03:56 +02:00

library

test(stack-host-files): read back what apply just wrote, uncached

2026-10-03 22:54:25 +02:00

plugins

Merge branch 'main' into feature/store-i18n

2026-10-13 10:57:22 +02:00

roles

Merge branch 'feature/designer' into feature/store-i18n

2026-10-13 17:26:43 +02:00

scripts

fix(env): keep the host .env when the runner container runs make setup

2026-10-12 18:35:22 +02:00

utils

fix(cache): refuse a tor deploy whose node onion is empty

2026-10-14 00:21:24 +02:00

__init__.py

…