Go to file
Krzysztof kuhy Rudnicki e56aec431c crdt-sync: script the one human step when the Web client secret rotates
seed_session failed with invalid_client on 2026-09-11: the secret in
~/.config/crdt-sync/oauth_client_secret had worked on 2026-08-12 with the
same client id, so it was rotated in the console since. There is no API
for it (no gcloud command, none in the Firebase CLI), so the irreducible
step is copying it from the console page. refresh_oauth_secret.sh opens
that page, reads the paste without echo, rejects anything that is not a
GOCSPX- secret before writing, and runs the seed at once so a wrong paste
fails here rather than on the next timer tick.

xdg-open is detached from stdin: the spawned browser inherited the
terminal and swallowed the paste.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019pBgaXSJKyY3DarYpDatDF
2026-09-11 14:10:17 +02:00
.github/workflows Drop the gatelock dependency, and actually sync the pool 2026-09-07 15:56:42 +02:00
aur-publish Split the two shell scripts and the gate's own config 2026-08-22 14:59:27 +02:00
crdt_sync_dart Don't judge allowlist rot from a file-scoped run; cut two library versions 2026-08-28 14:07:09 +02:00
crdt_sync_flutter Move the two in-repo consumers onto crdt_sync_dart-v0.11.1 2026-08-28 14:08:28 +02:00
crdt-sync crdt-sync: script the one human step when the Web client secret rotates 2026-09-11 14:10:17 +02:00
dep_freshness dep_freshness: accept Cargo's =x.y.z as the exact pin it is 2026-09-06 18:07:10 +02:00
design_system Don't judge allowlist rot from a file-scoped run; cut two library versions 2026-08-28 14:07:09 +02:00
dopamine-ux Add the shared markdown-naming gate and migrate utils' own docs 2026-08-24 15:53:12 +02:00
file_length file_length: TRAK/sightpy is vendored, not coursework 2026-08-28 19:33:14 +02:00
firebase firebase: make the rules template impossible to deploy verbatim 2026-08-22 19:10:10 +02:00
freedays freedays: point at the phone picker 2026-09-11 13:45:59 +02:00
gatelock Keep wait_for_turn under the lint limits, and cover its new paths 2026-08-30 15:06:47 +02:00
github_device_auth github_device_auth: exact pins (http 1.6.0, url_launcher 6.3.2) 2026-08-28 13:34:45 +02:00
guard-lib Split the two shell scripts and the gate's own config 2026-08-22 14:59:27 +02:00
md_naming Add the shared markdown-naming gate and migrate utils' own docs 2026-08-24 15:53:12 +02:00
prompts Add the shared markdown-naming gate and migrate utils' own docs 2026-08-24 15:53:12 +02:00
scripts feat: share the no-binaries gate, promoted out of testsAndMisc 2026-08-30 19:32:25 +02:00
sync_settings_ui Move the two in-repo consumers onto crdt_sync_dart-v0.11.1 2026-08-28 14:08:28 +02:00
ts_core ts_core + web_ui: latest stable, pnpm 11, and a quarantine-aware gate 2026-08-28 13:50:25 +02:00
unified-design-system Fix two long-red CI gates: palette_check path after md rename, file-length in sync_settings_ui 2026-08-28 12:36:41 +02:00
vmbox Add the shared markdown-naming gate and migrate utils' own docs 2026-08-24 15:53:12 +02:00
web_ui One Python per repo, always the newest, and the gate that enforces it 2026-08-28 20:58:19 +02:00
.gitignore Ignore Firebase CLI debug logs 2026-08-22 16:17:39 +02:00
.pre-commit-config.yaml Check the toolchain versions CI actually installs, not just the ones declared 2026-08-28 15:04:00 +02:00
dependency-freshness.allowlist.yaml allowlist: typescript hold now names typescript-eslint 8.70.0 2026-09-11 13:48:01 +02:00
LICENSE Root scaffold: README, LICENSE, per-subdirectory CI for utils monorepo 2026-07-10 13:02:20 +02:00
README.md Add the shared markdown-naming gate and migrate utils' own docs 2026-08-24 15:53:12 +02:00

utils

Shared libraries used across kuhyx's other projects. Each subdirectory is a formerly-standalone repo, folded in here with full commit history preserved (see each subdirectory's own git log for its pre-merge history).

crdt_sync_dart/

Dart/Flutter CRDT sync library (pub package name: crdt_sync, not published to pub.dev — consumed via a git dependency). Mirrors crdt-sync (below) module-for-module and test-for-test. Consumed by diet_guard's app, screen-locker's workout_app, wake_alarm's phone_app, and todo (whose notes are stored in the v0.2.0 LogStore).

Consume via:

dependencies:
  crdt_sync:
    git:
      url: https://github.com/kuhyx/utils
      ref: crdt_sync_dart-v0.10.0
      path: crdt_sync_dart

sync_settings_ui/

Shared Flutter "Sync settings" screen (pub package name: sync_settings_ui, not published to pub.dev). Firebase sync (primary) plus an optional local backup slot — no GitHub mirror UI. Pure UI + a FirebaseSyncController service layer over injected closures (keystore/Google-plugin access stays in each consuming app, exactly as before this package existed). Consumed by todo, diet_guard_app, workout_app, wake_alarm/phone_app, and home_inventory's dedicated "Sync settings" route.

Consume via:

dependencies:
  sync_settings_ui:
    git:
      url: https://github.com/kuhyx/utils
      ref: sync_settings_ui-v0.1.0
      path: sync_settings_ui

crdt-sync/

Python CRDT sync library (package: crdt_sync, not published to PyPI). Same design as crdt_sync_dart (HLC clocks, per-field LWW, sticky-delete tombstones). Consumed by diet-guard and screen-locker.

Consume via:

crdt-sync @ git+https://github.com/kuhyx/utils@crdt-sync-v0.2.0#subdirectory=crdt-sync

guard-lib/

Bash tamper-resistance primitives (guardctl: chattr + bind-mount + systemd watcher + pacman hooks). Not a package — installed by running guard-lib/install.sh as root, which copies files onto the system (/usr/local/bin, /usr/local/lib/guard-lib, systemd units, pacman hooks). Consumed by steam-backlog-enforcer (expects a guard-lib/install.sh sibling clone) and referenced by screen-locker.

gatelock/

Python lock-window + HMAC log-integrity backend (package: gatelock, not published to PyPI). Consumed via pip by screen-locker, diet-guard, and wake-alarm:

gatelock @ git+https://github.com/kuhyx/utils@gatelock-v0.1.0#subdirectory=gatelock

unified-design-system/

Not a package — the frozen design tokens (colors, spacing, type, radius, shadow policy) and per-stack (Flutter/web/Tkinter) implementation patterns that keep every one of kuhy's repos visually identical, plus annotated component references (components.html, button.html). Read unified-design-system/README.md and DOCS-tokens.md before touching any theme/CSS/style file in any repo. The unified-design-system Claude Code skill is a thin pointer here, not a duplicate.