surma/sausage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
248 Commits 26 Branches 0 Tags
361cfffb323bfbe34b2981ce9551031e634fefb5
Commit Graph
59 Commits
Author SHA1 Message Date
surma 361cfffb32 world: keep symlinks when copying the bundle (broken esbuild link; from T59, its test follows with T59) 2026-11-07 20:58:10 +00:00
surma 5dc4833e28 host: expose harness state and actions over the world API 2026-11-07 19:22:06 +00:00
surma 2458f4d036 p4: test agent Rust and Node builds through the real console 2026-11-07 15:40:58 +00:00
surma 841e4ba6b6 Merge v3-t39: Rust builder behind host.sausage/cargo and the world cargo CLI (T39, P4) 
# Conflicts:
#	flake.nix
#	host/src/process/mod.rs
#	host/tests/hook_git.rs
#	host/tests/hook_guest.rs
#	host/tests/process.rs
#	userland/Cargo.toml
 2026-11-07 14:48:35 +00:00
surma d63482f02e builder: register the owned pidfd with the current Tokio API 2026-11-07 14:46:04 +00:00
surma 7ee4059414 builder: retain Cargo config for run and correct acceptance checks 2026-11-07 14:20:37 +00:00
surma 5254e26ca1 Tag harness tools and extension execution for reversible undo 2026-11-07 13:48:07 +00:00
surma e53211eff1 builder: delegate run selection and preserve test working directories 2026-11-07 13:24:53 +00:00
surma 912e229f72 harness: set Options.tool_call (None until T48) after the T41 merge 2026-11-07 13:08:09 +00:00
surma 4b3f256375 Merge v3-t41: undo journal in the VFS, host API and undo CLI (T41, P5) 
# Conflicts:
#	userland/Cargo.toml
 2026-11-07 13:05:34 +00:00
surma 7ce839e908 Add tagged VFS undo journal, host API, and world CLI 2026-11-07 13:01:43 +00:00
surma 0be19f3f9c builder: exclude namespace mounts from Cargo clean 2026-11-07 12:55:28 +00:00
surma 2f18f0fa4c builder: enforce target, source sync, and timeout contracts 2026-11-07 12:32:45 +00:00
surma a27d579264 builder: preserve forwarded arguments and clean world artifacts 2026-11-07 12:14:17 +00:00
surma c96e59417a builder: add native Cargo service and world CLI 2026-11-07 11:59:28 +00:00
surma bcb3e4d8e5 Load world extensions from commit snapshots with last-good recovery 2026-11-07 10:38:20 +00:00
surma 534fa50615 Merge v3-t32: pi-durable patch (P3-a), headless harness with channel input (P3-b) (T32) 
# Conflicts:
#	host/src/harness/mod.rs
 2026-11-07 06:56:42 +00:00
surma c8525c3acb Carry durable input hooks and add a headless harness channel 2026-11-07 01:03:17 +00:00
surma 4dd6161091 Merge v3-t29: wasi:http hook, credential injection, guest TCP/DNS with the admin rule, one shared host API (T29) 2026-11-07 00:27:30 +00:00
surma c91ecbf7a4 Share owned host API state between HTTP hooks and native pages 2026-11-07 00:23:57 +00:00
surma 17d67aadcc Refresh unit requests and preserve shared compilation across runtime shutdown 2026-11-06 23:53:54 +00:00
surma 45d099c3e4 Merge branch 'v3' into v3-t29 
# Conflicts:
#	host/Cargo.toml
#	host/src/harness/mod.rs
 2026-11-06 23:46:27 +00:00
surma 9517515efe api: shut the init supervisor down gracefully after the console (merge fix for T22 + T25) 2026-11-06 23:43:49 +00:00
surma bb162abd4d T29: use QuickJS and verify the HTTP hook and guest networking 2026-11-06 23:38:21 +00:00
surma 904415063a Merge v3-t25: host API routes and host-served approval, passkey and secret-entry pages (T25) 2026-11-06 23:24:26 +00:00
surma c500ecd281 api: merge v3 proofs and add host approval pages and listener 2026-11-06 23:18:24 +00:00
surma 65464069d3 Merge v3-t22: init as a WASI systemd subset, file watchers, exit pollables (T22) 2026-11-06 23:15:39 +00:00
surma 7c7656c4a8 Merge branch 'v3' into v3-t29 
# Conflicts:
#	host/Cargo.toml
 2026-11-06 22:50:21 +00:00
surma fb83e0c067 WIP T29: credential hook, pinned HTTP transport and guest networking 2026-11-06 22:49:27 +00:00
surma 5a00cf3feb Merge v3-p2-fix: security review fixes for the credentials manager (T27, T28) 
Typed passkey proofs checked inside mutation transactions, ports and normalized
paths, overrides on GrantCreate, payload digests, key file checks, retention
(D57), scripts in QuickJS inside Wasmtime (D58), RSA on aws-lc-rs, OAuth2
token URL checks. 85 credential tests plus durable and harness tests pass.
 2026-11-06 22:47:16 +00:00
surma e332e76807 cred: reject the reserved host and migrate durable fixtures 2026-11-06 22:44:17 +00:00
surma 86c5d8a4e4 cred: isolate scripts in WASI and move RSA signing to AWS-LC 2026-11-06 22:22:49 +00:00
surma f234b2d1e2 Merge v3 with T15 into v3-t22 2026-11-06 22:20:05 +00:00
surma 5b3e1393f5 cred: complete core proof, policy, storage and injection fixes 2026-11-06 22:19:35 +00:00
surma e33d3fac3b Merge v3-t15: shared compile cache, precompile, /bin/*.wasm and /src/sausage copies (T15) 2026-11-06 22:18:53 +00:00
surma b3d91d37e3 process: keep Cranelift's default optimization level 
Compiles are cached per content and guests run many times; OptLevel::None
saved 12.7% compile time but slows every run.
 2026-11-06 22:18:33 +00:00
surma e8732ede15 Limit background compilation and reduce cold compile cost 2026-11-06 21:39:22 +00:00
surma a75094054e Merge branch 'v3' into v3-p2-fix 2026-11-06 21:31:50 +00:00
surma b3d3558b31 cred: stage T27 core fixes and security regressions before T26 merge (WIP) 2026-11-06 21:31:50 +00:00
surma 940ae61af6 cred: blind RSA signatures and stage T28 security regressions (WIP) 2026-11-06 21:17:52 +00:00
surma abe420f0d4 Make credential requests durable and store proxy authentication 2026-11-06 21:13:40 +00:00
surma c70948efe2 api: add public credential routes and SSH signing oracle 2026-11-06 21:05:11 +00:00
surma 30dcd4c2ca cred: keep typed secret entry configuration valid 2026-11-06 20:16:24 +00:00
surma 091f679905 cred: port native items grants requests and injection core 2026-11-06 20:05:54 +00:00
surma 457a966068 Isolate watcher queues and selectively reload resolved service binaries 2026-11-06 20:00:29 +00:00
surma 4f9919d8dd Share compilation and copy independent commands and source into new worlds 2026-11-06 19:50:23 +00:00
surma b39bbd4f18 Run world service policy in WASI init with pollable process observation 2026-11-06 19:49:19 +00:00
surma 11569119e6 cred: initialize V8 inside its Tokio executor and verify concurrent limits 2026-11-06 19:47:15 +00:00
surma a7e99d52f5 cred: reject non-32-byte raw ES256 scalars 2026-11-06 19:29:35 +00:00
surma 9e7e5d7b2a cred: add pure scripts, signing, and OAuth refresh; validation blocked 2026-11-06 19:05:07 +00:00