The "Merchant" profile screen is now somewhat inconsistent with the "Account" profile screen, and uses different icons for "Subscriptions" and "Orders".

We're also using inconsistent icons for "Order/Invoice/Receipt/Cart" in different interfaces. I'm going to standardize on this lovely purse, I think:

sourceMachine is currently exposed only in the UI.

./bin/user create

You can automate at least some administrative actions...

(You can automate at least some administrative actions at an "omnipotent" power level with bin/conduit call --method user.edit nowadays, too, although accountadmin operated with interactive prompts so it's unlikely anyone automated on top of it.)

Stuff to fix with subscriptions:

if this is really an issue we could likely throw a rate limit on the action

This is sort-of-quasi-intentional

A related issue is that when object A returns object B as an extended policy check and the user fails the extended policy check, the "PolicyException" dialog is misleading. It reads like this:

Actually, since the modern behavior is reasonable by default (the "Limit" field is not required, and defaults to empty, and the panel works properly if "Limit" is left blank), users have to explicitly set a limit to get any unintuitive behavior here. If they do, they still get a "View All Results" hint.

The bucket limit is currently implemented like this:

It would also be nice to figure out Phortune permissions better here since this is a good opportunity to vet everything.

See PHI1378, which is interested in "at least N", for N = 2.

There was one issue with this: bin/host stop --instance X (which is rarely used, and has no prior automated callers) used --force, which stops all daemons on the host. The recent changes to the --force flag in D20601 also had an indirect impact here. I fixed this and redeployed the repo tier.

See downstream https://phabricator.wikimedia.org/T230001 for a similar issue on project pages.

The repro case is something like:

This thread suggests that some version of ssh-keygen is sensitive to trailing whitespace in private keys:

you can add libreoffice/soffice to your list. last time we had to do sth like this we used soffice --headless --convert-to pdf
not really better than running a browser though... in our use case we needed to use merchant uploaded doc/docx templates in combination with our data. so even less options.
but yeah most options around pdf generation are clunky.